[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_274":275,"_276":277},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_49":-7,"_215":-5,"_19":216,"_217":218,"_219":220,"_221":222,"_223":224,"_21":225,"_226":227,"_228":229,"_230":24,"_231":232,"_233":174,"_234":-5,"_235":-5,"_236":237},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","gerardroy","name","amazon-pharmacy-mock-sandbox","branchName","main","path","main.ts","project",{"_43":163,"_13":14,"_47":164,"_77":-5,"_165":24,"_166":167,"_168":167,"_169":170,"_171":-5,"_30":83,"_172":79,"_173":174,"_175":-5,"_176":-5,"_177":26,"_51":52,"_178":179,"_180":181,"_182":183,"_184":-5,"_185":186,"_187":186,"_188":189,"_190":189,"_191":189,"_192":186,"_193":186,"_64":194,"_195":196,"_197":198,"_199":24},"file",{"_78":79,"_13":18,"_80":81,"_82":24,"_162":-5},"isDirectory",false,"page",0,"history",[31,32,33,34,35,36,37,38,39,40,41,42],"hasNext","userId",{"_43":155,"_45":46,"_47":156,"_49":157,"_51":52,"_53":148,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":158,"_21":159,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":160},{"_43":148,"_45":46,"_47":149,"_49":150,"_51":52,"_53":141,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":151,"_21":152,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":153},{"_43":141,"_45":46,"_47":142,"_49":143,"_51":52,"_53":134,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":144,"_21":145,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":146},{"_43":134,"_45":46,"_47":135,"_49":136,"_51":52,"_53":127,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":137,"_21":138,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":139},{"_43":127,"_45":46,"_47":128,"_49":129,"_51":52,"_53":120,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":130,"_21":131,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":132},{"_43":120,"_45":46,"_47":121,"_49":122,"_51":52,"_53":113,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":123,"_21":124,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":125},{"_43":113,"_45":46,"_47":114,"_49":115,"_51":52,"_53":106,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":116,"_21":117,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":118},{"_43":106,"_45":46,"_47":107,"_49":108,"_51":52,"_53":99,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":109,"_21":110,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":111},{"_43":99,"_45":46,"_47":100,"_49":101,"_51":52,"_53":93,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":102,"_21":103,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":104},{"_43":93,"_45":46,"_47":94,"_49":76,"_51":52,"_53":86,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":95,"_21":96,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":97},{"_43":86,"_45":46,"_47":87,"_49":88,"_51":52,"_53":44,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":89,"_21":90,"_67":-5,"_68":-5,"_70":-5,"_71":-5,"_72":91},{"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_21":66,"_67":-5,"_68":69,"_70":-5,"_71":-5,"_72":73},"id","b1d0bc55-28db-421a-bb36-77a6a333efcb","branchId","16b8c3f8-3a54-4f98-b844-7ebd24b2efbd","createdAt",["D",1786941950787],"version",1,"orgId","019f8bc4-813e-715b-b5bf-1cb41e84f338","parentId","incomingCommitId","4630fb23-15af-43f3-866c-fbc6b9ba3bcd","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","mcp","clientLabel","Claude Code (plugin:valtown:valtown)","user",{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},"pull","merge",{"_45":75,"_13":16,"_49":76,"_77":-5},"revert","multiple","commits",[74],{"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_21":66,"_67":-5,"_68":69,"_70":-5},"df5cf1be-d33c-4324-874d-9d27d937873e",3,"deletedAt","fileId","01a00e0a-4b95-730f-a9f8-647017cba26e","fileType","http","deleted","bf54ad56-9f09-4238-93ec-5919acfb30c0","avatar","https://lh3.googleusercontent.com/a/ACg8ocIAPCi5IrLmWavYqxP-lUqAvz0-SYQhvB7c5IAuwONv5alSFg=s96-c","51082a78-e470-41d0-86fd-d3898108d7f5",["D",1787633305620],2,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[92],{"_43":86,"_45":46,"_47":87,"_49":88,"_51":52,"_53":44,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":89,"_21":90,"_67":-5,"_68":-5,"_70":-5},"2393353f-52dc-4176-88aa-1613dbcfb7f9",["D",1787633328505],{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[98],{"_43":93,"_45":46,"_47":94,"_49":76,"_51":52,"_53":86,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":95,"_21":96,"_67":-5,"_68":-5,"_70":-5},"f3d887fa-145d-4077-8e4c-356efcd61aff",["D",1787633351946],4,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[105],{"_43":99,"_45":46,"_47":100,"_49":101,"_51":52,"_53":93,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":102,"_21":103,"_67":-5,"_68":-5,"_70":-5},"ac90e1e1-fbe8-4376-9ee8-909afdcb5105",["D",1787633368809],5,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[112],{"_43":106,"_45":46,"_47":107,"_49":108,"_51":52,"_53":99,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":109,"_21":110,"_67":-5,"_68":-5,"_70":-5},"afd53052-1f8e-4944-97e6-799c4b598bb1",["D",1787633374121],6,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[119],{"_43":113,"_45":46,"_47":114,"_49":115,"_51":52,"_53":106,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":116,"_21":117,"_67":-5,"_68":-5,"_70":-5},"99683ca6-83c2-4b3b-8f58-05f05cfb35d7",["D",1787633381646],7,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[126],{"_43":120,"_45":46,"_47":121,"_49":122,"_51":52,"_53":113,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":123,"_21":124,"_67":-5,"_68":-5,"_70":-5},"3761c18f-427a-4b15-9eb6-8fc3e725f8e4",["D",1787633387810],8,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[133],{"_43":127,"_45":46,"_47":128,"_49":129,"_51":52,"_53":120,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":130,"_21":131,"_67":-5,"_68":-5,"_70":-5},"29a82c3a-edf6-406d-859b-0f88b27993d2",["D",1787633392002],9,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[140],{"_43":134,"_45":46,"_47":135,"_49":136,"_51":52,"_53":127,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":137,"_21":138,"_67":-5,"_68":-5,"_70":-5},"253fee22-5a35-4c29-8323-6f942d17b693",["D",1787633488729],10,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[147],{"_43":141,"_45":46,"_47":142,"_49":143,"_51":52,"_53":134,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":144,"_21":145,"_67":-5,"_68":-5,"_70":-5},"9a1b78d4-8678-4739-82b7-8ad75649d909",["D",1787633499477],11,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[154],{"_43":148,"_45":46,"_47":149,"_49":150,"_51":52,"_53":141,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":151,"_21":152,"_67":-5,"_68":-5,"_70":-5},"75cd1f27-3a68-476e-9efb-1e1cdb65f3f2",["D",1787633632499],12,{"_43":83,"_51":52,"_11":12,"_84":85},{"_78":79,"_13":18,"_80":81,"_82":24},[161],{"_43":155,"_45":46,"_47":156,"_49":157,"_51":52,"_53":148,"_54":-5,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":158,"_21":159,"_67":-5,"_68":-5,"_70":-5},"deletedAtVersion","a2188f73-c094-4ff9-b8f9-d55789916727",["D",1786941950787],"legacyEnvVars","privacy","public","httpPrivacy","description","Mock pharmacy backend for AMZN Pharm RFP Sandbox org (Vapi)","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","a2188f73c0944ff9b8f9d55789916727","tursoHostname","a2188f73c0944ff9b8f9d55789916727-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474853273],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_214":85},"org",{"_11":12,"_209":210,"_84":85,"_30":83,"_211":212,"_213":24},"branch",{"_49":157,"_13":16,"_43":46,"_200":163,"_201":75,"_202":76,"_203":167,"_204":205,"_206":52,"_207":14,"_208":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","ed27a2dd-7bb1-4e5e-a243-bee568dfd19f","forkedProjectOrgId","projectName","userHandle","displayName","Gerard Roy","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_43":163,"_13":14,"_47":269,"_77":-5,"_165":24,"_166":167,"_168":167,"_169":170,"_171":-5,"_30":83,"_172":79,"_173":174,"_175":-5,"_176":-5,"_177":26,"_51":52,"_178":179,"_180":181,"_182":270,"_184":-5,"_185":186,"_187":186,"_188":189,"_190":189,"_191":189,"_192":186,"_193":186,"_64":271,"_195":272,"_197":273,"_199":24},"tree",[264],"files",[264],"counts",{"_254":26,"_255":50,"_256":26,"_257":258,"_259":260},"contents",[],{"_43":246,"_13":18,"_78":79,"_53":-5,"_45":46,"_247":157,"_248":174,"_47":249,"_49":150,"_80":81,"_250":251,"_82":24,"_252":-5,"_17":253},"upstreamProject",{"_43":205,"_13":243,"_169":244,"_171":-5,"_166":167,"_64":245},"upstreamBranch",{"_43":75,"_47":238,"_239":240,"_13":16,"_200":205,"_49":76,"_201":-5,"_202":-5,"_241":242,"_77":-5,"_199":24,"_166":167,"_208":12,"_51":52,"_207":243},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1786683666541],"updatedAt",["D",1786691937819],"lockfileKey","1786691938027-esm.town_v_gerardroy_amazon-pharmacy-mock@3-main","amazon-pharmacy-mock","Mock pharmacy backend for Amazon Pharmacy RFP demo agent (Vapi)",{"_11":12,"_214":85},"70c02bb8-1dae-41b2-8d82-fb8dddfc9121","branchVersion","latest",["D",1787633632499],"content","// Mock backend for the Amazon Pharmacy RFP demo agent (Vapi tool server).\n// One endpoint handles all tools, dispatched by function name.\n// Design rules baked in (from prior builds):\n// - caller_verified / confirmed_with_caller are enforced HERE, not just in the prompt\n// - all money math (RxPass comparison) is precomputed server-side\n// - errors are explicit, actionable strings the model can act on — never bare HTML/blank\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PATIENT_ID = \"PT-88231\";\n\nconst PATIENT = {\n patient_id: PATIENT_ID,\n first_name: \"Lisa\",\n last_name: \"Chen\",\n dob_on_file: \"1979-03-12\",\n prime_member: true,\n rxpass_enrolled: false,\n address_on_file: \"142 Pinehurst Avenue, Seattle, Washington\",\n payment_on_file: \"Visa ending in 7716\",\n // Mobile that receives the verification text. Point DEMO_MEMBER_PHONE at your own\n // handset for live demos; on real phone calls this falls back to the caller's number.\n phone_on_file: Deno.env.get(\"DEMO_MEMBER_PHONE\") ?? \"\",\n};\n\nconst MEDS: Record = {\n lisinopril: {\n name: \"lisinopril\", strength: \"10mg\", form: \"tablet\", days_supply: 30,\n rx_number: \"RX-7421-88\", refills_remaining: 3,\n copay_estimate: 4.00, last_fill_copay: 5.00,\n price_change_reason: \"plan deductible reset on August 1, lowering the copay by one dollar\",\n list_price_estimate: 11.00, prime_savings_applied: true,\n last_three_fills: [\"2026-07-14\", \"2026-06-13\", \"2026-05-14\"],\n prescriber: \"Dr. Anita Rao\",\n rxpass_eligible: true,\n },\n metformin: {\n name: \"metformin\", strength: \"500mg\", form: \"extended-release tablet\", days_supply: 30,\n rx_number: \"RX-7502-19\", refills_remaining: 1,\n copay_estimate: 3.10, last_fill_copay: 3.10,\n price_change_reason: null,\n list_price_estimate: 8.50, prime_savings_applied: true,\n last_three_fills: [\"2026-07-20\", \"2026-06-19\", \"2026-05-20\"],\n prescriber: null, // no prescriber on file → renewal must escalate\n rxpass_eligible: true,\n },\n atorvastatin: {\n name: \"atorvastatin\", strength: \"20mg\", form: \"tablet\", days_supply: 30,\n rx_number: \"RX-7488-02\", refills_remaining: 2,\n copay_estimate: 1.90, last_fill_copay: 1.90,\n price_change_reason: null,\n list_price_estimate: 9.00, prime_savings_applied: true,\n last_three_fills: [\"2026-08-10\", \"2026-07-11\", \"2026-06-10\"],\n prescriber: \"Dr. Anita Rao\",\n rxpass_eligible: true,\n },\n};\n\n// Precomputed server-side so the model never does live arithmetic.\nconst RXPASS = {\n enrolled: false,\n eligible: true,\n monthly_price: 5.00,\n eligible_medications_on_account: [\"lisinopril\", \"metformin\", \"atorvastatin\"],\n current_monthly_total_for_those: 9.00,\n monthly_savings_if_enrolled: 4.00,\n note: \"Enrollment can be flagged from this call or confirmed by the member in the app; it does not change today's order.\",\n};\n\nconst ORDERS: Record = {\n \"ORD-58204\": {\n order_id: \"ORD-58204\", medication: \"atorvastatin 20mg, 30-day supply\",\n status: \"shipped\", carrier: \"Amazon Logistics\",\n shipped_date: \"2026-08-12\", eta: \"Friday, August 15 by 8pm\", on_schedule: true,\n tracking_note: \"Out of the regional facility; last scan Renton, WA this morning.\",\n },\n};\n\nconst CLAIMS = [\n {\n claim_id: \"CLM-77031\", medication: \"lisinopril 10mg\", date: \"2026-07-14\",\n amount: 5.00, status: \"paid\", reversible: true,\n },\n];\n\nconst BACKORDERED = [\"zestril\", \"prinivil\"]; // brand names → generic alt available\n\nfunction norm(s: unknown): string {\n return String(s ?? \"\").toLowerCase().trim();\n}\n\nfunction findMed(nameRaw: unknown) {\n const n = norm(nameRaw);\n if (!n) return null;\n for (const key of Object.keys(MEDS)) {\n if (n.includes(key) || key.includes(n)) return MEDS[key];\n }\n return null;\n}\n\nlet dbReady: Promise | null = null;\nfunction init() {\n dbReady ??= sqlite.execute(`CREATE TABLE IF NOT EXISTS amzn_pharm_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT NOT NULL,\n call_id TEXT,\n type TEXT NOT NULL,\n payload TEXT\n )`).then(() => {});\n return dbReady;\n}\n\nasync function logEvent(callId: string, type: string, payload: unknown) {\n await init();\n await sqlite.execute({\n sql: `INSERT INTO amzn_pharm_events (ts, call_id, type, payload) VALUES (?, ?, ?, ?)`,\n args: [new Date().toISOString(), callId, type, JSON.stringify(payload)],\n });\n}\n\nasync function alreadyDone(callId: string, type: string, matchFragment: string): Promise {\n if (!callId) return null;\n await init();\n const rs = await sqlite.execute({\n sql: `SELECT payload FROM amzn_pharm_events WHERE call_id = ? AND type = ? ORDER BY id DESC`,\n args: [callId, type],\n });\n for (const row of rs.rows) {\n const p = String(row[0] ?? \"\");\n if (p.toLowerCase().includes(matchFragment.toLowerCase())) return JSON.parse(p);\n }\n return null;\n}\n\n// ---- OTP verification -------------------------------------------------------\n// The code is generated, stored, and compared entirely server-side and never appears\n// in any tool result. The assistant therefore cannot read it aloud, hint at it, or\n// \"helpfully\" accept a near-miss — it only ever learns true/false.\nconst OTP_TTL_MIN = 10;\nconst OTP_MAX_ATTEMPTS = 3;\nconst OTP_MAX_SENDS = 3;\n\nfunction smsConfigured(): boolean {\n return !!(Deno.env.get(\"TWILIO_ACCOUNT_SID\") && Deno.env.get(\"TWILIO_AUTH_TOKEN\") &&\n Deno.env.get(\"TWILIO_FROM_NUMBER\"));\n}\n\nlet otpReady: Promise | null = null;\nfunction initOtp() {\n otpReady ??= sqlite.execute(`CREATE TABLE IF NOT EXISTS amzn_pharm_otp (\n call_id TEXT PRIMARY KEY,\n code TEXT NOT NULL,\n destination TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n attempts INTEGER NOT NULL DEFAULT 0,\n sends INTEGER NOT NULL DEFAULT 1,\n verified_at TEXT\n )`).then(() => {});\n return otpReady;\n}\n\nasync function otpRow(callId: string): Promise {\n if (!callId) return null;\n await initOtp();\n const rs = await sqlite.execute({\n sql: `SELECT code, destination, expires_at, attempts, sends, verified_at\n FROM amzn_pharm_otp WHERE call_id = ?`,\n args: [callId],\n });\n const r = rs.rows[0];\n if (!r) return null;\n return {\n code: String(r[0]),\n destination: String(r[1]),\n expires_at: String(r[2]),\n attempts: Number(r[3]),\n sends: Number(r[4]),\n verified_at: r[5] ? String(r[5]) : null,\n };\n}\n\nfunction toE164(raw: unknown): string | null {\n const s = String(raw ?? \"\").trim();\n const d = s.replace(/[^\\d]/g, \"\");\n if (s.startsWith(\"+\") && d.length >= 11) return \"+\" + d;\n if (d.length === 11 && d.startsWith(\"1\")) return \"+\" + d;\n if (d.length === 10) return \"+1\" + d;\n return null;\n}\n\nconst last4 = (e164: string) => e164.slice(-4);\n\nconst WORD_DIGITS: Record = {\n zero: \"0\", oh: \"0\", o: \"0\", one: \"1\", won: \"1\", two: \"2\", to: \"2\", too: \"2\",\n three: \"3\", four: \"4\", for: \"4\", fore: \"4\", five: \"5\", six: \"6\", seven: \"7\",\n eight: \"8\", ate: \"8\", nine: \"9\",\n};\n\n// Callers read codes back as digits, words, or a mix: \"four one nine, oh two three\".\nfunction normalizeCode(raw: unknown): string {\n const s = String(raw ?? \"\").toLowerCase()\n .replace(/[a-z]+/g, (w) => WORD_DIGITS[w] ?? \" \");\n return s.replace(/[^\\d]/g, \"\");\n}\n\nasync function sendSms(to: string, code: string): Promise<{ ok: true } | { ok: false; message: string }> {\n const sid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const token = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const from = Deno.env.get(\"TWILIO_FROM_NUMBER\");\n if (!sid || !token || !from) {\n return { ok: false, message: \"SMS is not configured on this server (Twilio credentials missing)\" };\n }\n let res: Response;\n try {\n res = await fetch(`https://api.twilio.com/2010-04-01/Accounts/${sid}/Messages.json`, {\n method: \"POST\",\n headers: {\n Authorization: \"Basic \" + btoa(`${sid}:${token}`),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n To: to,\n From: from,\n Body: `Amazon Pharmacy: ${code} is your verification code. It expires in ${OTP_TTL_MIN} minutes. ` +\n `We will never ask you to share this code by email or text reply.`,\n }),\n });\n } catch (e) {\n return { ok: false, message: `could not reach the SMS provider: ${String(e)}` };\n }\n if (!res.ok) {\n const detail = await res.text().catch(() => \"\");\n let msg = `SMS provider returned ${res.status}`;\n try {\n const j = JSON.parse(detail);\n if (j?.message) msg = String(j.message);\n } catch { /* fall back to the status line */ }\n return { ok: false, message: msg };\n }\n return { ok: true };\n}\n\n// ---- gates ----------------------------------------------------------------\n// Server-authoritative. The model's own caller_verified flag is ignored; what\n// actually unlocks the account is an OTP this server issued and checked itself.\nasync function gateVerified(args: any, callId: string): Promise {\n const row = await otpRow(callId);\n if (!row?.verified_at) {\n return {\n error: \"verification_required\",\n message: \"The caller has not passed one-time-code verification. Call send_verification_code, have the caller read the texted code back, and pass it to check_verification_code before any account lookup or change.\",\n };\n }\n if (args?.patient_id && args.patient_id !== PATIENT_ID) {\n return {\n error: \"invalid_patient\",\n message: \"No account found for that patient_id. Use the patient_id from the caller profile.\",\n };\n }\n return null;\n}\n\nfunction gateConfirmed(args: any): any | null {\n if (args?.confirmed_with_caller !== true) {\n return {\n error: \"confirmation_required\",\n message: \"This change was not confirmed. Read the details back to the caller, get a spoken yes, then retry with confirmed_with_caller true.\",\n };\n }\n return null;\n}\n\n// ---- tool handlers ---------------------------------------------------------\nasync function handleTool(\n name: string,\n args: any,\n callId: string,\n ctx: { customerNumber?: string },\n): Promise {\n switch (name) {\n case \"send_verification_code\": {\n if (!callId) {\n return { error: \"no_call_context\", message: \"This tool can only be used during a live call.\" };\n }\n const existing = await otpRow(callId);\n if (existing?.verified_at) {\n return {\n status: \"already_verified\",\n message: \"This caller already passed verification on this call. Do not verify again — continue with their request.\",\n };\n }\n // A resend clears the attempt counter, so a locked-out call must not be able\n // to buy itself three fresh guesses by asking for another text.\n if (existing && existing.attempts >= OTP_MAX_ATTEMPTS) {\n return {\n error: \"verification_locked\",\n message: \"Verification is locked for this call after too many incorrect codes. Do not send another code. Route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n if (existing && existing.sends >= OTP_MAX_SENDS) {\n return {\n error: \"too_many_sends\",\n message: `A code has already been sent ${existing.sends} times on this call. Per policy, route to customer care via transfer_to_human with reason_code verification_failed.`,\n };\n }\n // Destination is resolved server-side from the account, never from the model.\n const to = toE164(PATIENT.phone_on_file) ?? toE164(ctx.customerNumber);\n if (!to) {\n return {\n error: \"no_phone_on_file\",\n message: \"No mobile number is available to text for this account. Per policy, route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n const code = String(100000 + (crypto.getRandomValues(new Uint32Array(1))[0] % 900000));\n const sent = await sendSms(to, code);\n if (!sent.ok) {\n await logEvent(callId, \"otp_send_failed\", { destination_last4: last4(to), reason: sent.message });\n return {\n error: \"sms_failed\",\n message: `The verification text could not be sent (${sent.message}). Apologize briefly and route to customer care via transfer_to_human with reason_code verification_failed.`,\n };\n }\n await initOtp();\n await sqlite.execute({\n sql: `INSERT INTO amzn_pharm_otp (call_id, code, destination, expires_at, attempts, sends, verified_at)\n VALUES (?, ?, ?, ?, 0, 1, NULL)\n ON CONFLICT(call_id) DO UPDATE SET\n code = excluded.code,\n destination = excluded.destination,\n expires_at = excluded.expires_at,\n attempts = 0,\n sends = amzn_pharm_otp.sends + 1`,\n args: [callId, code, to, new Date(Date.now() + OTP_TTL_MIN * 60000).toISOString()],\n });\n await logEvent(callId, \"otp_sent\", { destination_last4: last4(to), resend: !!existing });\n return {\n status: \"code_sent\",\n destination_last4: last4(to),\n expires_in_minutes: OTP_TTL_MIN,\n instruction: `Tell the caller a six-digit code was just texted to their mobile ending in ${last4(to)}, and ask them to read it back. You do not have the code and cannot see it — never say it, never guess it, and never confirm a partial match.`,\n };\n }\n\n case \"check_verification_code\": {\n if (!callId) {\n return { error: \"no_call_context\", message: \"This tool can only be used during a live call.\" };\n }\n const row = await otpRow(callId);\n if (!row) {\n return {\n error: \"no_code_issued\",\n message: \"No verification code has been sent on this call yet. Call send_verification_code first.\",\n };\n }\n if (row.verified_at) {\n return { verified: true, message: \"This caller was already verified on this call.\" };\n }\n // Hard lock. Without this the attempt cap is only advisory and the code is\n // brute-forceable by simply calling this tool again.\n if (row.attempts >= OTP_MAX_ATTEMPTS) {\n return {\n verified: false,\n error: \"too_many_attempts\",\n attempts_remaining: 0,\n message: \"Verification is locked for this call after too many incorrect codes. Do not try again and do not offer a resend. Route to customer care via transfer_to_human with reason_code verification_failed, without explaining the reason on the call.\",\n };\n }\n const supplied = normalizeCode(args?.code);\n if (supplied.length !== 6) {\n return {\n error: \"malformed_code\",\n message: \"That was not six digits. Ask the caller to read the six-digit code again, slowly, then retry. This did not count as an attempt.\",\n };\n }\n if (Date.now() > Date.parse(row.expires_at)) {\n return {\n verified: false,\n error: \"code_expired\",\n message: row.sends < OTP_MAX_SENDS\n ? \"That code has expired. Offer to text a fresh one, then call send_verification_code.\"\n : \"That code has expired and no resends remain. Route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n const attempts = row.attempts + 1;\n const ok = supplied === row.code;\n await sqlite.execute({\n sql: `UPDATE amzn_pharm_otp SET attempts = ?, verified_at = ? WHERE call_id = ?`,\n args: [attempts, ok ? new Date().toISOString() : null, callId],\n });\n if (ok) {\n await logEvent(callId, \"otp_verified\", { destination_last4: last4(row.destination), attempts });\n return {\n verified: true,\n instruction: \"The caller is verified for the rest of this call. Confirm it warmly in one short line, then ask what they need.\",\n };\n }\n const remaining = OTP_MAX_ATTEMPTS - attempts;\n await logEvent(callId, \"otp_failed\", { attempts, attempts_remaining: Math.max(remaining, 0) });\n if (remaining <= 0) {\n return {\n verified: false,\n error: \"too_many_attempts\",\n attempts_remaining: 0,\n message: \"Too many incorrect codes. Do not try again and do not offer a resend. Route to customer care via transfer_to_human with reason_code verification_failed, without explaining the reason on the call.\",\n };\n }\n return {\n verified: false,\n attempts_remaining: remaining,\n message: \"That code does not match. Ask the caller to read it back once more. Never hint at the correct digits and never confirm a partial match.\",\n };\n }\n\n case \"get_order_status\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n // also surface any reorder placed earlier in this call\n const placed = await alreadyDone(callId, \"reorder\", \"order_id\");\n const orders = Object.values(ORDERS).concat(placed ? [placed] : []);\n return { orders, count: orders.length };\n }\n\n case \"get_medication_pricing\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) {\n return {\n error: \"medication_not_on_file\",\n message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account. Active prescriptions: lisinopril 10mg, metformin 500mg, atorvastatin 20mg.`,\n };\n }\n return {\n estimate_disclaimer: \"All prices are estimates; final price is confirmed at fill.\",\n medication: med,\n prime_member: PATIENT.prime_member,\n rxpass: RXPASS,\n };\n }\n\n case \"check_medication_availability\": {\n const n = norm(args?.medication_name);\n if (!n) return { error: \"missing_medication_name\", message: \"Ask which medication to check, then retry.\" };\n if (BACKORDERED.some((b) => n.includes(b))) {\n return {\n medication: args.medication_name, in_stock: false, status: \"backordered\",\n generic_equivalent: {\n name: \"lisinopril (generic)\", in_stock: true,\n note: \"A pharmacist or the prescriber must approve any substitution; the assistant must not advise on it.\",\n },\n };\n }\n const med = findMed(n);\n return {\n medication: med ? `${med.name} ${med.strength}` : args.medication_name,\n in_stock: true, status: \"in_stock\",\n estimated_fill_time: \"ships within 24 hours of the order being placed\",\n };\n }\n\n case \"get_delivery_status\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n const order = ORDERS[\"ORD-58204\"];\n return { order };\n }\n\n case \"create_reorder\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) return { error: \"medication_not_on_file\", message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account.` };\n if (med.refills_remaining < 1) {\n return { error: \"no_refills_remaining\", message: `${med.name} has no refills remaining. Offer a renewal request instead.` };\n }\n const dup = await alreadyDone(callId, \"reorder\", med.name);\n if (dup) {\n return { error: \"already_ordered_this_call\", message: `A refill for ${med.name} was already placed on this call (${dup.order_id}). Do not place it again.`, existing_order: dup };\n }\n const eta = new Date(Date.now() + 2 * 864e5).toLocaleDateString(\"en-US\", { weekday: \"long\", month: \"long\", day: \"numeric\", timeZone: \"America/Los_Angeles\" });\n const order = {\n order_id: \"ORD-\" + String(60000 + Math.floor(Math.random() * 9000)),\n medication: `${med.name} ${med.strength}, ${med.days_supply}-day supply`,\n estimated_copay: med.copay_estimate,\n shipping_to: PATIENT.address_on_file,\n payment: PATIENT.payment_on_file,\n delivery: `Prime two-day delivery, arriving ${eta}`,\n status: \"placed\",\n };\n await logEvent(callId, \"reorder\", order);\n return order;\n }\n\n case \"initiate_prescription_transfer\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n if (!norm(args?.medication_name) || !norm(args?.current_pharmacy)) {\n return { error: \"missing_details\", message: \"Both the medication name and the current pharmacy are required. Confirm them with the caller, then retry.\" };\n }\n const result = {\n transfer_id: \"TRF-\" + String(30000 + Math.floor(Math.random() * 9000)),\n medication: args.medication_name,\n from_pharmacy: args.current_pharmacy,\n status: \"initiated\",\n expected_completion: \"1 to 2 business days; the member gets an app notification when it lands\",\n };\n await logEvent(callId, \"transfer_rx\", result);\n return result;\n }\n\n case \"request_prescription_renewal\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) return { error: \"medication_not_on_file\", message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account.` };\n if (!med.prescriber) {\n return {\n error: \"no_prescriber_on_file\",\n message: `No prescriber is on file for ${med.name}. Per policy, route this to customer care via transfer_to_human.`,\n };\n }\n const result = {\n renewal_request_id: \"RNW-\" + String(40000 + Math.floor(Math.random() * 9000)),\n medication: `${med.name} ${med.strength}`,\n prescriber: med.prescriber,\n status: \"submitted\",\n expected_response: \"the prescriber typically responds within 1 to 2 business days\",\n };\n await logEvent(callId, \"renewal\", result);\n return result;\n }\n\n case \"process_claim_reversal\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const amt = parseFloat(String(args?.claim_amount ?? \"\").replace(/[^0-9.]/g, \"\"));\n const dateStr = norm(args?.claim_date);\n const claim = CLAIMS.find((c) => {\n const amountOk = !isNaN(amt) && Math.abs(c.amount - amt) <= 0.51;\n const dateOk = dateStr.includes(\"july\") || dateStr.includes(\"07\") || dateStr.includes(\"7/\") || c.date.includes(dateStr);\n return amountOk && dateOk;\n });\n if (!claim) {\n return {\n error: \"no_matching_claim\",\n message: \"No claim matches that date and amount. Per policy, do not guess — route to billing via transfer_to_human.\",\n };\n }\n const result = { claim_id: claim.claim_id, medication: claim.medication, amount: claim.amount, status: \"reversal_processed\", note: \"The reversal posts to the plan within 24 hours.\" };\n await logEvent(callId, \"claim_reversal\", result);\n return result;\n }\n\n case \"transfer_to_human\": {\n const dept = norm(args?.department);\n if (![\"pharmacist\", \"customer_care\", \"billing\"].includes(dept)) {\n return { error: \"invalid_department\", message: \"department must be one of: pharmacist, customer_care, billing.\" };\n }\n if (!norm(args?.call_summary)) {\n return { error: \"missing_call_summary\", message: \"Include a brief call_summary so the human agent has context, then retry.\" };\n }\n const result = {\n status: \"transfer_accepted\",\n department: dept,\n queue_position: 1,\n instruction: \"Tell the caller you are connecting them now and a specialist has the full context. Then end the call — the transfer completes automatically in this demo environment.\",\n };\n await logEvent(callId, \"transfer_to_human\", { ...result, reason_code: args?.reason_code ?? null, call_summary: args.call_summary });\n return result;\n }\n\n default:\n return { error: \"unknown_tool\", message: `No handler for tool \"${name}\".` };\n }\n}\n\n// ---- Vapi webhook plumbing --------------------------------------------------\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/events\") {\n await init();\n const rs = await sqlite.execute(`SELECT ts, call_id, type, payload FROM amzn_pharm_events ORDER BY id DESC LIMIT 50`);\n const events = rs.rows.map((r) => ({ ts: r[0], call_id: r[1], type: r[2], payload: JSON.parse(String(r[3] ?? \"null\")) }));\n return Response.json({ events });\n }\n\n if (req.method === \"GET\") {\n // Quick pre-demo self-check: both must be true for the OTP flow to work.\n return Response.json({\n ok: true,\n service: \"amazon-pharmacy-mock\",\n patient: PATIENT_ID,\n sms_configured: smsConfigured(),\n member_phone_configured: !!toE164(PATIENT.phone_on_file),\n });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"invalid_json\" }, { status: 400 });\n }\n\n const msg = body?.message;\n if (msg?.type !== \"tool-calls\") {\n return Response.json({ error: \"unsupported_message_type\", got: msg?.type ?? null }, { status: 400 });\n }\n // Voice calls carry call.id; /chat and simulation runs carry chat/session ids\n // instead. Accepting either keeps the OTP flow testable outside a live call.\n const callId = msg?.call?.id ?? msg?.chat?.id ?? msg?.session?.id ?? msg?.chatId ?? \"\";\n // Taken from the call itself, never from tool arguments — the model cannot\n // redirect the verification text to a number of its choosing.\n const ctx = { customerNumber: msg?.call?.customer?.number ?? msg?.customer?.number };\n const toolCalls = msg.toolCallList ?? msg.toolCalls ?? [];\n\n const results: { toolCallId: string; result: string }[] = [];\n for (const tc of toolCalls) {\n const id = tc.id;\n const name = tc.name ?? tc.function?.name;\n let args = tc.arguments ?? tc.function?.arguments ?? {};\n if (typeof args === \"string\") {\n try { args = JSON.parse(args); } catch { args = {}; }\n }\n let out: any;\n try {\n out = await handleTool(name, args, callId, ctx);\n } catch (e) {\n out = { error: \"internal_error\", message: String(e) };\n }\n results.push({ toolCallId: id, result: JSON.stringify(out) });\n }\n\n return Response.json({ results });\n}\n","label",[18],"pulls","branches","forks","envVars",{"_261":26,"_263":26},"connections",{"_261":26,"_262":26},"count","unfilledCount","emptyCount",{"_43":246,"_13":18,"_78":79,"_53":-5,"_45":46,"_247":157,"_248":174,"_47":265,"_49":150,"_80":81,"_250":251,"_82":24,"_252":-5,"_266":267,"_17":268},["D",1787633632499],"children",[],[18],["D",1786941950787],["D",1789474853273],{"_11":12,"_214":85},{"_11":12,"_209":210,"_84":85,"_30":83,"_211":212,"_213":24},{"_49":157,"_13":16,"_43":46,"_200":163,"_201":75,"_202":76,"_203":167,"_204":205,"_206":52,"_207":14,"_208":12},"ctx",{"_64":-5,"_235":307,"_308":309,"_310":311,"_312":24,"_313":24,"_314":24,"_315":174,"_316":-5,"_317":-7,"_318":-7,"_319":26,"_320":24,"_321":24,"_322":-5,"_323":24,"_324":24,"_325":24,"_326":-5},"ENV",{"_278":279,"_280":281,"_282":16,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292,"_293":294,"_295":296,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts