[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_174":175,"_176":177},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_130":-5,"_20":131,"_22":132,"_133":134,"_135":136,"_25":137,"_24":-5,"_138":139,"_140":141,"_142":50,"_143":144,"_145":69,"_146":-5,"_147":-5,"_148":149},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":28,"_29":-5,"_30":31,"_32":33,"_34":-5},"handle","gerardroy","name","amazon-pharmacy-mock-sandbox","branchName","main","version","path","","project",{"_35":83,"_13":14,"_37":84,"_48":-5,"_85":50,"_51":52,"_86":52,"_87":88,"_89":-5,"_90":91,"_92":62,"_93":69,"_94":-5,"_95":-5,"_96":33,"_54":55,"_97":98,"_99":100,"_101":102,"_103":-5,"_104":105,"_106":105,"_107":108,"_109":108,"_110":108,"_111":105,"_112":105,"_113":114,"_115":116,"_117":118,"_49":50},"tree",[78],"file","contents",[58],"upstream",{"_35":36,"_37":38,"_39":40,"_13":16,"_41":42,"_17":43,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":50,"_51":52,"_53":12,"_54":55,"_56":57},"pull","ahead",11,"behind",0,"envVars","id","df5cf1be-d33c-4324-874d-9d27d937873e","createdAt",["D",1786683666541],"updatedAt",["D",1786691937819],"projectId","ed27a2dd-7bb1-4e5e-a243-bee568dfd19f",3,"forkedBranchId","forkedBranchVersion","lockfileKey","1786691938027-esm.town_v_gerardroy_amazon-pharmacy-mock@3-main","deletedAt","isOwned",false,"privacy","public","userHandle","orgId","019f8bc4-813e-715b-b5bf-1cb41e84f338","projectName","amazon-pharmacy-mock",{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":70,"_17":31,"_71":72,"_73":74,"_75":50,"_76":-5,"_18":77},"70c02bb8-1dae-41b2-8d82-fb8dddfc9121","main.ts","fileId","01a00e0a-4b95-730f-a9f8-647017cba26e","parentId","branchId","16b8c3f8-3a54-4f98-b844-7ebd24b2efbd","branchVersion",12,"latest",true,["D",1787633632499],"fileType","http","content","// Mock backend for the Amazon Pharmacy RFP demo agent (Vapi tool server).\n// One endpoint handles all tools, dispatched by function name.\n// Design rules baked in (from prior builds):\n// - caller_verified / confirmed_with_caller are enforced HERE, not just in the prompt\n// - all money math (RxPass comparison) is precomputed server-side\n// - errors are explicit, actionable strings the model can act on — never bare HTML/blank\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PATIENT_ID = \"PT-88231\";\n\nconst PATIENT = {\n patient_id: PATIENT_ID,\n first_name: \"Lisa\",\n last_name: \"Chen\",\n dob_on_file: \"1979-03-12\",\n prime_member: true,\n rxpass_enrolled: false,\n address_on_file: \"142 Pinehurst Avenue, Seattle, Washington\",\n payment_on_file: \"Visa ending in 7716\",\n // Mobile that receives the verification text. Point DEMO_MEMBER_PHONE at your own\n // handset for live demos; on real phone calls this falls back to the caller's number.\n phone_on_file: Deno.env.get(\"DEMO_MEMBER_PHONE\") ?? \"\",\n};\n\nconst MEDS: Record = {\n lisinopril: {\n name: \"lisinopril\", strength: \"10mg\", form: \"tablet\", days_supply: 30,\n rx_number: \"RX-7421-88\", refills_remaining: 3,\n copay_estimate: 4.00, last_fill_copay: 5.00,\n price_change_reason: \"plan deductible reset on August 1, lowering the copay by one dollar\",\n list_price_estimate: 11.00, prime_savings_applied: true,\n last_three_fills: [\"2026-07-14\", \"2026-06-13\", \"2026-05-14\"],\n prescriber: \"Dr. Anita Rao\",\n rxpass_eligible: true,\n },\n metformin: {\n name: \"metformin\", strength: \"500mg\", form: \"extended-release tablet\", days_supply: 30,\n rx_number: \"RX-7502-19\", refills_remaining: 1,\n copay_estimate: 3.10, last_fill_copay: 3.10,\n price_change_reason: null,\n list_price_estimate: 8.50, prime_savings_applied: true,\n last_three_fills: [\"2026-07-20\", \"2026-06-19\", \"2026-05-20\"],\n prescriber: null, // no prescriber on file → renewal must escalate\n rxpass_eligible: true,\n },\n atorvastatin: {\n name: \"atorvastatin\", strength: \"20mg\", form: \"tablet\", days_supply: 30,\n rx_number: \"RX-7488-02\", refills_remaining: 2,\n copay_estimate: 1.90, last_fill_copay: 1.90,\n price_change_reason: null,\n list_price_estimate: 9.00, prime_savings_applied: true,\n last_three_fills: [\"2026-08-10\", \"2026-07-11\", \"2026-06-10\"],\n prescriber: \"Dr. Anita Rao\",\n rxpass_eligible: true,\n },\n};\n\n// Precomputed server-side so the model never does live arithmetic.\nconst RXPASS = {\n enrolled: false,\n eligible: true,\n monthly_price: 5.00,\n eligible_medications_on_account: [\"lisinopril\", \"metformin\", \"atorvastatin\"],\n current_monthly_total_for_those: 9.00,\n monthly_savings_if_enrolled: 4.00,\n note: \"Enrollment can be flagged from this call or confirmed by the member in the app; it does not change today's order.\",\n};\n\nconst ORDERS: Record = {\n \"ORD-58204\": {\n order_id: \"ORD-58204\", medication: \"atorvastatin 20mg, 30-day supply\",\n status: \"shipped\", carrier: \"Amazon Logistics\",\n shipped_date: \"2026-08-12\", eta: \"Friday, August 15 by 8pm\", on_schedule: true,\n tracking_note: \"Out of the regional facility; last scan Renton, WA this morning.\",\n },\n};\n\nconst CLAIMS = [\n {\n claim_id: \"CLM-77031\", medication: \"lisinopril 10mg\", date: \"2026-07-14\",\n amount: 5.00, status: \"paid\", reversible: true,\n },\n];\n\nconst BACKORDERED = [\"zestril\", \"prinivil\"]; // brand names → generic alt available\n\nfunction norm(s: unknown): string {\n return String(s ?? \"\").toLowerCase().trim();\n}\n\nfunction findMed(nameRaw: unknown) {\n const n = norm(nameRaw);\n if (!n) return null;\n for (const key of Object.keys(MEDS)) {\n if (n.includes(key) || key.includes(n)) return MEDS[key];\n }\n return null;\n}\n\nlet dbReady: Promise | null = null;\nfunction init() {\n dbReady ??= sqlite.execute(`CREATE TABLE IF NOT EXISTS amzn_pharm_events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n ts TEXT NOT NULL,\n call_id TEXT,\n type TEXT NOT NULL,\n payload TEXT\n )`).then(() => {});\n return dbReady;\n}\n\nasync function logEvent(callId: string, type: string, payload: unknown) {\n await init();\n await sqlite.execute({\n sql: `INSERT INTO amzn_pharm_events (ts, call_id, type, payload) VALUES (?, ?, ?, ?)`,\n args: [new Date().toISOString(), callId, type, JSON.stringify(payload)],\n });\n}\n\nasync function alreadyDone(callId: string, type: string, matchFragment: string): Promise {\n if (!callId) return null;\n await init();\n const rs = await sqlite.execute({\n sql: `SELECT payload FROM amzn_pharm_events WHERE call_id = ? AND type = ? ORDER BY id DESC`,\n args: [callId, type],\n });\n for (const row of rs.rows) {\n const p = String(row[0] ?? \"\");\n if (p.toLowerCase().includes(matchFragment.toLowerCase())) return JSON.parse(p);\n }\n return null;\n}\n\n// ---- OTP verification -------------------------------------------------------\n// The code is generated, stored, and compared entirely server-side and never appears\n// in any tool result. The assistant therefore cannot read it aloud, hint at it, or\n// \"helpfully\" accept a near-miss — it only ever learns true/false.\nconst OTP_TTL_MIN = 10;\nconst OTP_MAX_ATTEMPTS = 3;\nconst OTP_MAX_SENDS = 3;\n\nfunction smsConfigured(): boolean {\n return !!(Deno.env.get(\"TWILIO_ACCOUNT_SID\") && Deno.env.get(\"TWILIO_AUTH_TOKEN\") &&\n Deno.env.get(\"TWILIO_FROM_NUMBER\"));\n}\n\nlet otpReady: Promise | null = null;\nfunction initOtp() {\n otpReady ??= sqlite.execute(`CREATE TABLE IF NOT EXISTS amzn_pharm_otp (\n call_id TEXT PRIMARY KEY,\n code TEXT NOT NULL,\n destination TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n attempts INTEGER NOT NULL DEFAULT 0,\n sends INTEGER NOT NULL DEFAULT 1,\n verified_at TEXT\n )`).then(() => {});\n return otpReady;\n}\n\nasync function otpRow(callId: string): Promise {\n if (!callId) return null;\n await initOtp();\n const rs = await sqlite.execute({\n sql: `SELECT code, destination, expires_at, attempts, sends, verified_at\n FROM amzn_pharm_otp WHERE call_id = ?`,\n args: [callId],\n });\n const r = rs.rows[0];\n if (!r) return null;\n return {\n code: String(r[0]),\n destination: String(r[1]),\n expires_at: String(r[2]),\n attempts: Number(r[3]),\n sends: Number(r[4]),\n verified_at: r[5] ? String(r[5]) : null,\n };\n}\n\nfunction toE164(raw: unknown): string | null {\n const s = String(raw ?? \"\").trim();\n const d = s.replace(/[^\\d]/g, \"\");\n if (s.startsWith(\"+\") && d.length >= 11) return \"+\" + d;\n if (d.length === 11 && d.startsWith(\"1\")) return \"+\" + d;\n if (d.length === 10) return \"+1\" + d;\n return null;\n}\n\nconst last4 = (e164: string) => e164.slice(-4);\n\nconst WORD_DIGITS: Record = {\n zero: \"0\", oh: \"0\", o: \"0\", one: \"1\", won: \"1\", two: \"2\", to: \"2\", too: \"2\",\n three: \"3\", four: \"4\", for: \"4\", fore: \"4\", five: \"5\", six: \"6\", seven: \"7\",\n eight: \"8\", ate: \"8\", nine: \"9\",\n};\n\n// Callers read codes back as digits, words, or a mix: \"four one nine, oh two three\".\nfunction normalizeCode(raw: unknown): string {\n const s = String(raw ?? \"\").toLowerCase()\n .replace(/[a-z]+/g, (w) => WORD_DIGITS[w] ?? \" \");\n return s.replace(/[^\\d]/g, \"\");\n}\n\nasync function sendSms(to: string, code: string): Promise<{ ok: true } | { ok: false; message: string }> {\n const sid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const token = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const from = Deno.env.get(\"TWILIO_FROM_NUMBER\");\n if (!sid || !token || !from) {\n return { ok: false, message: \"SMS is not configured on this server (Twilio credentials missing)\" };\n }\n let res: Response;\n try {\n res = await fetch(`https://api.twilio.com/2010-04-01/Accounts/${sid}/Messages.json`, {\n method: \"POST\",\n headers: {\n Authorization: \"Basic \" + btoa(`${sid}:${token}`),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({\n To: to,\n From: from,\n Body: `Amazon Pharmacy: ${code} is your verification code. It expires in ${OTP_TTL_MIN} minutes. ` +\n `We will never ask you to share this code by email or text reply.`,\n }),\n });\n } catch (e) {\n return { ok: false, message: `could not reach the SMS provider: ${String(e)}` };\n }\n if (!res.ok) {\n const detail = await res.text().catch(() => \"\");\n let msg = `SMS provider returned ${res.status}`;\n try {\n const j = JSON.parse(detail);\n if (j?.message) msg = String(j.message);\n } catch { /* fall back to the status line */ }\n return { ok: false, message: msg };\n }\n return { ok: true };\n}\n\n// ---- gates ----------------------------------------------------------------\n// Server-authoritative. The model's own caller_verified flag is ignored; what\n// actually unlocks the account is an OTP this server issued and checked itself.\nasync function gateVerified(args: any, callId: string): Promise {\n const row = await otpRow(callId);\n if (!row?.verified_at) {\n return {\n error: \"verification_required\",\n message: \"The caller has not passed one-time-code verification. Call send_verification_code, have the caller read the texted code back, and pass it to check_verification_code before any account lookup or change.\",\n };\n }\n if (args?.patient_id && args.patient_id !== PATIENT_ID) {\n return {\n error: \"invalid_patient\",\n message: \"No account found for that patient_id. Use the patient_id from the caller profile.\",\n };\n }\n return null;\n}\n\nfunction gateConfirmed(args: any): any | null {\n if (args?.confirmed_with_caller !== true) {\n return {\n error: \"confirmation_required\",\n message: \"This change was not confirmed. Read the details back to the caller, get a spoken yes, then retry with confirmed_with_caller true.\",\n };\n }\n return null;\n}\n\n// ---- tool handlers ---------------------------------------------------------\nasync function handleTool(\n name: string,\n args: any,\n callId: string,\n ctx: { customerNumber?: string },\n): Promise {\n switch (name) {\n case \"send_verification_code\": {\n if (!callId) {\n return { error: \"no_call_context\", message: \"This tool can only be used during a live call.\" };\n }\n const existing = await otpRow(callId);\n if (existing?.verified_at) {\n return {\n status: \"already_verified\",\n message: \"This caller already passed verification on this call. Do not verify again — continue with their request.\",\n };\n }\n // A resend clears the attempt counter, so a locked-out call must not be able\n // to buy itself three fresh guesses by asking for another text.\n if (existing && existing.attempts >= OTP_MAX_ATTEMPTS) {\n return {\n error: \"verification_locked\",\n message: \"Verification is locked for this call after too many incorrect codes. Do not send another code. Route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n if (existing && existing.sends >= OTP_MAX_SENDS) {\n return {\n error: \"too_many_sends\",\n message: `A code has already been sent ${existing.sends} times on this call. Per policy, route to customer care via transfer_to_human with reason_code verification_failed.`,\n };\n }\n // Destination is resolved server-side from the account, never from the model.\n const to = toE164(PATIENT.phone_on_file) ?? toE164(ctx.customerNumber);\n if (!to) {\n return {\n error: \"no_phone_on_file\",\n message: \"No mobile number is available to text for this account. Per policy, route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n const code = String(100000 + (crypto.getRandomValues(new Uint32Array(1))[0] % 900000));\n const sent = await sendSms(to, code);\n if (!sent.ok) {\n await logEvent(callId, \"otp_send_failed\", { destination_last4: last4(to), reason: sent.message });\n return {\n error: \"sms_failed\",\n message: `The verification text could not be sent (${sent.message}). Apologize briefly and route to customer care via transfer_to_human with reason_code verification_failed.`,\n };\n }\n await initOtp();\n await sqlite.execute({\n sql: `INSERT INTO amzn_pharm_otp (call_id, code, destination, expires_at, attempts, sends, verified_at)\n VALUES (?, ?, ?, ?, 0, 1, NULL)\n ON CONFLICT(call_id) DO UPDATE SET\n code = excluded.code,\n destination = excluded.destination,\n expires_at = excluded.expires_at,\n attempts = 0,\n sends = amzn_pharm_otp.sends + 1`,\n args: [callId, code, to, new Date(Date.now() + OTP_TTL_MIN * 60000).toISOString()],\n });\n await logEvent(callId, \"otp_sent\", { destination_last4: last4(to), resend: !!existing });\n return {\n status: \"code_sent\",\n destination_last4: last4(to),\n expires_in_minutes: OTP_TTL_MIN,\n instruction: `Tell the caller a six-digit code was just texted to their mobile ending in ${last4(to)}, and ask them to read it back. You do not have the code and cannot see it — never say it, never guess it, and never confirm a partial match.`,\n };\n }\n\n case \"check_verification_code\": {\n if (!callId) {\n return { error: \"no_call_context\", message: \"This tool can only be used during a live call.\" };\n }\n const row = await otpRow(callId);\n if (!row) {\n return {\n error: \"no_code_issued\",\n message: \"No verification code has been sent on this call yet. Call send_verification_code first.\",\n };\n }\n if (row.verified_at) {\n return { verified: true, message: \"This caller was already verified on this call.\" };\n }\n // Hard lock. Without this the attempt cap is only advisory and the code is\n // brute-forceable by simply calling this tool again.\n if (row.attempts >= OTP_MAX_ATTEMPTS) {\n return {\n verified: false,\n error: \"too_many_attempts\",\n attempts_remaining: 0,\n message: \"Verification is locked for this call after too many incorrect codes. Do not try again and do not offer a resend. Route to customer care via transfer_to_human with reason_code verification_failed, without explaining the reason on the call.\",\n };\n }\n const supplied = normalizeCode(args?.code);\n if (supplied.length !== 6) {\n return {\n error: \"malformed_code\",\n message: \"That was not six digits. Ask the caller to read the six-digit code again, slowly, then retry. This did not count as an attempt.\",\n };\n }\n if (Date.now() > Date.parse(row.expires_at)) {\n return {\n verified: false,\n error: \"code_expired\",\n message: row.sends < OTP_MAX_SENDS\n ? \"That code has expired. Offer to text a fresh one, then call send_verification_code.\"\n : \"That code has expired and no resends remain. Route to customer care via transfer_to_human with reason_code verification_failed.\",\n };\n }\n const attempts = row.attempts + 1;\n const ok = supplied === row.code;\n await sqlite.execute({\n sql: `UPDATE amzn_pharm_otp SET attempts = ?, verified_at = ? WHERE call_id = ?`,\n args: [attempts, ok ? new Date().toISOString() : null, callId],\n });\n if (ok) {\n await logEvent(callId, \"otp_verified\", { destination_last4: last4(row.destination), attempts });\n return {\n verified: true,\n instruction: \"The caller is verified for the rest of this call. Confirm it warmly in one short line, then ask what they need.\",\n };\n }\n const remaining = OTP_MAX_ATTEMPTS - attempts;\n await logEvent(callId, \"otp_failed\", { attempts, attempts_remaining: Math.max(remaining, 0) });\n if (remaining <= 0) {\n return {\n verified: false,\n error: \"too_many_attempts\",\n attempts_remaining: 0,\n message: \"Too many incorrect codes. Do not try again and do not offer a resend. Route to customer care via transfer_to_human with reason_code verification_failed, without explaining the reason on the call.\",\n };\n }\n return {\n verified: false,\n attempts_remaining: remaining,\n message: \"That code does not match. Ask the caller to read it back once more. Never hint at the correct digits and never confirm a partial match.\",\n };\n }\n\n case \"get_order_status\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n // also surface any reorder placed earlier in this call\n const placed = await alreadyDone(callId, \"reorder\", \"order_id\");\n const orders = Object.values(ORDERS).concat(placed ? [placed] : []);\n return { orders, count: orders.length };\n }\n\n case \"get_medication_pricing\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) {\n return {\n error: \"medication_not_on_file\",\n message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account. Active prescriptions: lisinopril 10mg, metformin 500mg, atorvastatin 20mg.`,\n };\n }\n return {\n estimate_disclaimer: \"All prices are estimates; final price is confirmed at fill.\",\n medication: med,\n prime_member: PATIENT.prime_member,\n rxpass: RXPASS,\n };\n }\n\n case \"check_medication_availability\": {\n const n = norm(args?.medication_name);\n if (!n) return { error: \"missing_medication_name\", message: \"Ask which medication to check, then retry.\" };\n if (BACKORDERED.some((b) => n.includes(b))) {\n return {\n medication: args.medication_name, in_stock: false, status: \"backordered\",\n generic_equivalent: {\n name: \"lisinopril (generic)\", in_stock: true,\n note: \"A pharmacist or the prescriber must approve any substitution; the assistant must not advise on it.\",\n },\n };\n }\n const med = findMed(n);\n return {\n medication: med ? `${med.name} ${med.strength}` : args.medication_name,\n in_stock: true, status: \"in_stock\",\n estimated_fill_time: \"ships within 24 hours of the order being placed\",\n };\n }\n\n case \"get_delivery_status\": {\n const g = await gateVerified(args, callId);\n if (g) return g;\n const order = ORDERS[\"ORD-58204\"];\n return { order };\n }\n\n case \"create_reorder\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) return { error: \"medication_not_on_file\", message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account.` };\n if (med.refills_remaining < 1) {\n return { error: \"no_refills_remaining\", message: `${med.name} has no refills remaining. Offer a renewal request instead.` };\n }\n const dup = await alreadyDone(callId, \"reorder\", med.name);\n if (dup) {\n return { error: \"already_ordered_this_call\", message: `A refill for ${med.name} was already placed on this call (${dup.order_id}). Do not place it again.`, existing_order: dup };\n }\n const eta = new Date(Date.now() + 2 * 864e5).toLocaleDateString(\"en-US\", { weekday: \"long\", month: \"long\", day: \"numeric\", timeZone: \"America/Los_Angeles\" });\n const order = {\n order_id: \"ORD-\" + String(60000 + Math.floor(Math.random() * 9000)),\n medication: `${med.name} ${med.strength}, ${med.days_supply}-day supply`,\n estimated_copay: med.copay_estimate,\n shipping_to: PATIENT.address_on_file,\n payment: PATIENT.payment_on_file,\n delivery: `Prime two-day delivery, arriving ${eta}`,\n status: \"placed\",\n };\n await logEvent(callId, \"reorder\", order);\n return order;\n }\n\n case \"initiate_prescription_transfer\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n if (!norm(args?.medication_name) || !norm(args?.current_pharmacy)) {\n return { error: \"missing_details\", message: \"Both the medication name and the current pharmacy are required. Confirm them with the caller, then retry.\" };\n }\n const result = {\n transfer_id: \"TRF-\" + String(30000 + Math.floor(Math.random() * 9000)),\n medication: args.medication_name,\n from_pharmacy: args.current_pharmacy,\n status: \"initiated\",\n expected_completion: \"1 to 2 business days; the member gets an app notification when it lands\",\n };\n await logEvent(callId, \"transfer_rx\", result);\n return result;\n }\n\n case \"request_prescription_renewal\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const med = findMed(args?.medication_name);\n if (!med) return { error: \"medication_not_on_file\", message: `No prescription matching \"${args?.medication_name ?? \"\"}\" on this account.` };\n if (!med.prescriber) {\n return {\n error: \"no_prescriber_on_file\",\n message: `No prescriber is on file for ${med.name}. Per policy, route this to customer care via transfer_to_human.`,\n };\n }\n const result = {\n renewal_request_id: \"RNW-\" + String(40000 + Math.floor(Math.random() * 9000)),\n medication: `${med.name} ${med.strength}`,\n prescriber: med.prescriber,\n status: \"submitted\",\n expected_response: \"the prescriber typically responds within 1 to 2 business days\",\n };\n await logEvent(callId, \"renewal\", result);\n return result;\n }\n\n case \"process_claim_reversal\": {\n const g = (await gateVerified(args, callId)) ?? gateConfirmed(args);\n if (g) return g;\n const amt = parseFloat(String(args?.claim_amount ?? \"\").replace(/[^0-9.]/g, \"\"));\n const dateStr = norm(args?.claim_date);\n const claim = CLAIMS.find((c) => {\n const amountOk = !isNaN(amt) && Math.abs(c.amount - amt) <= 0.51;\n const dateOk = dateStr.includes(\"july\") || dateStr.includes(\"07\") || dateStr.includes(\"7/\") || c.date.includes(dateStr);\n return amountOk && dateOk;\n });\n if (!claim) {\n return {\n error: \"no_matching_claim\",\n message: \"No claim matches that date and amount. Per policy, do not guess — route to billing via transfer_to_human.\",\n };\n }\n const result = { claim_id: claim.claim_id, medication: claim.medication, amount: claim.amount, status: \"reversal_processed\", note: \"The reversal posts to the plan within 24 hours.\" };\n await logEvent(callId, \"claim_reversal\", result);\n return result;\n }\n\n case \"transfer_to_human\": {\n const dept = norm(args?.department);\n if (![\"pharmacist\", \"customer_care\", \"billing\"].includes(dept)) {\n return { error: \"invalid_department\", message: \"department must be one of: pharmacist, customer_care, billing.\" };\n }\n if (!norm(args?.call_summary)) {\n return { error: \"missing_call_summary\", message: \"Include a brief call_summary so the human agent has context, then retry.\" };\n }\n const result = {\n status: \"transfer_accepted\",\n department: dept,\n queue_position: 1,\n instruction: \"Tell the caller you are connecting them now and a specialist has the full context. Then end the call — the transfer completes automatically in this demo environment.\",\n };\n await logEvent(callId, \"transfer_to_human\", { ...result, reason_code: args?.reason_code ?? null, call_summary: args.call_summary });\n return result;\n }\n\n default:\n return { error: \"unknown_tool\", message: `No handler for tool \"${name}\".` };\n }\n}\n\n// ---- Vapi webhook plumbing --------------------------------------------------\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/events\") {\n await init();\n const rs = await sqlite.execute(`SELECT ts, call_id, type, payload FROM amzn_pharm_events ORDER BY id DESC LIMIT 50`);\n const events = rs.rows.map((r) => ({ ts: r[0], call_id: r[1], type: r[2], payload: JSON.parse(String(r[3] ?? \"null\")) }));\n return Response.json({ events });\n }\n\n if (req.method === \"GET\") {\n // Quick pre-demo self-check: both must be true for the OTP flow to work.\n return Response.json({\n ok: true,\n service: \"amazon-pharmacy-mock\",\n patient: PATIENT_ID,\n sms_configured: smsConfigured(),\n member_phone_configured: !!toE164(PATIENT.phone_on_file),\n });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"invalid_json\" }, { status: 400 });\n }\n\n const msg = body?.message;\n if (msg?.type !== \"tool-calls\") {\n return Response.json({ error: \"unsupported_message_type\", got: msg?.type ?? null }, { status: 400 });\n }\n // Voice calls carry call.id; /chat and simulation runs carry chat/session ids\n // instead. Accepting either keeps the OTP flow testable outside a live call.\n const callId = msg?.call?.id ?? msg?.chat?.id ?? msg?.session?.id ?? msg?.chatId ?? \"\";\n // Taken from the call itself, never from tool arguments — the model cannot\n // redirect the verification text to a number of its choosing.\n const ctx = { customerNumber: msg?.call?.customer?.number ?? msg?.customer?.number };\n const toolCalls = msg.toolCallList ?? msg.toolCalls ?? [];\n\n const results: { toolCallId: string; result: string }[] = [];\n for (const tc of toolCalls) {\n const id = tc.id;\n const name = tc.name ?? tc.function?.name;\n let args = tc.arguments ?? tc.function?.arguments ?? {};\n if (typeof args === \"string\") {\n try { args = JSON.parse(args); } catch { args = {}; }\n }\n let out: any;\n try {\n out = await handleTool(name, args, callId, ctx);\n } catch (e) {\n out = { error: \"internal_error\", message: String(e) };\n }\n results.push({ toolCallId: id, result: JSON.stringify(out) });\n }\n\n return Response.json({ results });\n}\n","deleted","label",[60],{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":79,"_17":31,"_71":72,"_73":74,"_75":50,"_76":-5,"_80":81,"_18":82},["D",1787633632499],"children",[],[60],"a2188f73-c094-4ff9-b8f9-d55789916727",["D",1786941950787],"legacyEnvVars","httpPrivacy","description","Mock pharmacy backend for AMZN Pharm RFP Sandbox org (Vapi)","imageUrl","userId","bf54ad56-9f09-4238-93ec-5919acfb30c0","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","a2188f73c0944ff9b8f9d55789916727","tursoHostname","a2188f73c0944ff9b8f9d55789916727-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789561879908],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_129":125},"org",{"_11":12,"_122":123,"_124":125,"_90":91,"_126":127,"_128":50},"branch",{"_17":67,"_13":16,"_35":65,"_41":83,"_44":36,"_45":43,"_119":52,"_120":42,"_121":55,"_56":14,"_53":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Gerard Roy","avatar","https://lh3.googleusercontent.com/a/ACg8ocIAPCi5IrLmWavYqxP-lUqAvz0-SYQhvB7c5IAuwONv5alSFg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":83,"_13":14,"_37":169,"_48":-5,"_85":50,"_51":52,"_86":52,"_87":88,"_89":-5,"_90":91,"_92":62,"_93":69,"_94":-5,"_95":-5,"_96":33,"_54":55,"_97":98,"_99":100,"_101":170,"_103":-5,"_104":105,"_106":105,"_107":108,"_109":108,"_110":108,"_111":105,"_112":105,"_113":171,"_115":172,"_117":173,"_49":50},[166],"files",[166],"counts",{"_156":33,"_157":158,"_159":33,"_34":160,"_161":162},[154],"upstreamProject",{"_35":42,"_13":57,"_87":152,"_89":-5,"_51":52,"_113":153},"upstreamBranch",{"_35":36,"_37":150,"_39":151,"_13":16,"_41":42,"_17":43,"_44":-5,"_45":-5,"_46":47,"_48":-5,"_49":50,"_51":52,"_53":12,"_54":55,"_56":57},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1786683666541],["D",1786691937819],"Mock pharmacy backend for Amazon Pharmacy RFP demo agent (Vapi)",{"_11":12,"_129":125},{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":70,"_17":31,"_71":72,"_73":74,"_75":50,"_76":-5,"_18":155},[60],"pulls","branches",1,"forks",{"_163":33,"_165":33},"connections",{"_163":33,"_164":33},"count","unfilledCount","emptyCount",{"_35":59,"_13":60,"_61":62,"_63":-5,"_64":65,"_66":67,"_68":69,"_37":79,"_17":31,"_71":72,"_73":74,"_75":50,"_76":-5,"_80":167,"_18":168},[],[60],["D",1786941950787],["D",1789561879908],{"_11":12,"_129":125},{"_11":12,"_122":123,"_124":125,"_90":91,"_126":127,"_128":50},{"_17":67,"_13":16,"_35":65,"_41":83,"_44":36,"_45":43,"_119":52,"_120":42,"_121":55,"_56":14,"_53":12},"ctx",{"_113":-5,"_147":207,"_208":209,"_210":211,"_212":50,"_213":50,"_214":50,"_215":69,"_216":-5,"_217":-7,"_218":-7,"_219":33,"_220":50,"_221":50,"_222":-5,"_223":50,"_224":50,"_225":50,"_226":-5},"ENV",{"_178":179,"_180":181,"_182":16,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]