[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_362":363,"_364":365},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",219,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","handoff.ts","latestPath","fileId","b9609d8a-a8b8-11f1-868c-1607ee4eb77e","name","fileType","script","content","// Voice -> text handoff. SOW: \"the system can ask the user if they would like to\n// transition to a text channel at any point... the entire journey could be done with\n// text. However, it is a requirement that a voice-only experience is supported.\"\n//\n// HOW IT WORKS\n// ------------\n// 1. POST /chat with `transport: twilio.sms` and useLLMGeneratedMessageForOutbound\n// FALSE. That sends our exact text — which is the only way to guarantee the\n// compliance footer is present, byte for byte — and creates a session bound to\n// the caller's number.\n// 2. PATCH that session's `messages` with the voice conversation so far, so the\n// text thread continues from where the call was rather than starting over.\n//\n// It has to be in that order: /chat rejects `sessionId` together with transport\n// fields, so a session cannot be seeded and texted in one request. Seeding second\n// is fine — nothing reads the session until the caller replies.\n//\n// The compliance footer is appended HERE, not asked of the model. A model that\n// forgets it once is a TCPA problem, and this is a place where \"usually\" is not\n// good enough.\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as db from \"./db.ts\";\nimport * as budget from \"./errbudget.ts\";\n\nconst app = new Hono();\napp.use(\"*\", budget.middleware());\n\nconst VAPI = \"https://api.vapi.ai\";\nconst KEY = () => Deno.env.get(\"VAPI_SANDBOX_KEY\") ?? \"\";\n/** The Twilio number texts are sent from. Swap via env when the number changes. */\nconst SMS_NUMBER_ID = () =>\n Deno.env.get(\"VAPI_SMS_PHONE_NUMBER_ID\") ?? \"21a168e4-c5fe-485f-9c3d-178ee54038c0\";\n\n/** Required on the first message of any A2P thread. Never model-generated. */\nexport const COMPLIANCE_FOOTER = \"Reply STOP to opt out, HELP for help.\";\n/**\n * Every thread opens by identifying itself. A text from an unknown number is\n * ignored at best and reported at worst, and A2P guidance expects the sender to be\n * identifiable in the first message. Enforced here for the same reason as the\n * footer: too important to leave to the model.\n */\nexport const BRAND = \"Walgreens vaccine scheduling\";\n\n/**\n * \"Walgreens vaccine scheduling: . . Reply STOP…\"\n *\n * The first text has to carry the state of the booking AND the pending question.\n * The first real handoff opened with a bare \"we can finish booking here\", so the\n * caller typed \"James Ray\" into a void and got \"Could you clarify what you'd like me\n * to do with 'James Ray'?\" — the thread had no idea what it had just asked.\n */\nexport function composeFirstMessage(\n body: string, summary?: string, question?: string, heldLine?: string,\n): string {\n const strip = (t: string) =>\n String(t ?? \"\").trim()\n .replace(/^(hi[,!]?\\s*)?(it'?s\\s+)?walgreens( vaccine)?( scheduling)?\\s*[—\\-:,]?\\s*/i, \"\")\n .trim();\n let lead = strip(body) || \"we can finish booking here.\";\n if (lead) lead = lead[0].toLowerCase() + lead.slice(1);\n\n const parts = [`${BRAND}: ${lead}`];\n // Prefer what the agent summarised; fall back to the holds we know about.\n const state = strip(summary) || String(heldLine ?? \"\").trim();\n if (state) parts.push(state.replace(/\\.?$/, \".\"));\n const q = String(question ?? \"\").trim();\n if (q) parts.push(q.replace(/\\?*$/, \"?\"));\n\n const text = parts.join(\" \");\n return text.includes(COMPLIANCE_FOOTER) ? text : `${text} ${COMPLIANCE_FOOTER}`;\n}\n\n/**\n * Every call is time-boxed. A Vapi call record can be ~540KB, and fetching one\n * un-guarded inside the request 502'd the whole worker — the text never went out\n * because of work that was only ever meant to be a nicety.\n */\nasync function vapi(path: string, method = \"GET\", body?: unknown, ms = 12000) {\n const ctl = new AbortController();\n const timer = setTimeout(() => ctl.abort(), ms);\n try {\n const res = await fetch(VAPI + path, {\n method,\n headers: { \"content-type\": \"application/json\", authorization: `Bearer ${KEY()}` },\n signal: ctl.signal,\n ...(body === undefined ? {} : { body: JSON.stringify(body) }),\n });\n const text = await res.text();\n try {\n return { status: res.status, body: text.trim() ? JSON.parse(text) : {} };\n } catch {\n return { status: res.status, body: {} };\n }\n } catch {\n return { status: 0, body: {} }; // timed out or aborted\n } finally {\n clearTimeout(timer);\n }\n}\n\n/**\n * Body reader that treats an UNRESOLVED Vapi template as absent.\n *\n * A static parameter whose variable does not exist arrives as the literal text\n * \"{{assistant.id}}\" — not empty, not an error. That is exactly how the text\n * handoff failed on two live calls while every shell test passed: `{{assistant.id}}`\n * is not a real Vapi variable (only call.id, customer.number, phoneNumber.*,\n * call.type, transport.* and dates are), so Vapi answered\n * 400 [\"assistantId must be a UUID\"] and the val had already skipped its fallback\n * because the value looked present.\n */\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* no body */ }\n if (!b || typeof b !== \"object\") return {};\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) {\n b[k] = null;\n }\n }\n return b;\n}\n\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst fail = (c: any, s: number, code: string, message: string) =>\n c.json({ ok: false, error_code: code, message }, s);\n\n/** Ten digits, however they were written, in E.164. */\nfunction e164(raw: unknown): string | null {\n const d = String(raw ?? \"\").replace(/\\D/g, \"\").replace(/^1(?=\\d{10}$)/, \"\");\n return d.length === 10 ? `+1${d}` : null;\n}\n\n/**\n * The voice conversation so far, as chat messages. Vapi's transcript is\n * \"AI: ...\\nUser: ...\" lines; anything else is dropped rather than guessed at.\n */\nfunction transcriptToMessages(transcript: string) {\n const out: { role: string; content: string }[] = [];\n for (const line of String(transcript ?? \"\").split(\"\\n\")) {\n const m = line.match(/^\\s*(AI|Assistant|User|Customer)\\s*:\\s*(.+)$/i);\n if (!m) continue;\n const content = m[2].trim();\n if (!content) continue;\n out.push({ role: /^(ai|assistant)$/i.test(m[1]) ? \"assistant\" : \"user\", content });\n }\n return out.slice(-40); // recent context is what matters; keep the payload sane\n}\n\n/**\n * GET /handoff/debug — which step of the handoff breaks, and with what error.\n * Kept because \"502, no logs\" cost a long time to chase once already.\n */\napp.all(\"/debug\", async (c) => {\n const steps: Record = {};\n try {\n const b = await read(c);\n steps.body_read = `ok, keys ${Object.keys(b).join(\",\") || \"(none)\"}`;\n } catch (e) {\n steps.body_read = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n const r = await sqlite.execute({\n sql: \"SELECT data FROM batches WHERE call_id = ?\",\n args: [\"probe\"],\n });\n steps.sqlite = `ok, ${r.rows.length} rows`;\n } catch (e) {\n steps.sqlite = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n steps.compose = composeFirstMessage(\"we can finish booking your flu shots here.\");\n } catch (e) {\n steps.compose = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n await db.init();\n await db.log(\"handoff/debug\", \"probe-call\", { probe: true }, 200, \"probe\");\n steps.db_log = \"ok\";\n } catch (e) {\n steps.db_log = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n const r = await vapi(\"/call/01a06ae6-7669-7dd9-b9d4-954be750177f\", \"GET\", undefined, 8000);\n const t = r.body?.artifact?.transcript ?? \"\";\n steps.big_call_fetch = `status ${r.status}, transcript ${String(t).length} chars, `\n + `${transcriptToMessages(t).length} messages`;\n } catch (e) {\n steps.big_call_fetch = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n steps.key_present = KEY() ? `yes (${KEY().length} chars)` : \"NO\";\n steps.sms_number_id = SMS_NUMBER_ID();\n try {\n const r = await vapi(\"/assistant?limit=1\", \"GET\", undefined, 8000);\n steps.vapi_get = `status ${r.status}`;\n } catch (e) {\n steps.vapi_get = `THREW ${(e as Error).message}`;\n }\n try {\n const r = await vapi(\"/chat\", \"POST\", {\n assistantId: c.req.query(\"assistant\") ?? \"\",\n input: \"debug\",\n transport: {\n type: \"twilio.sms\",\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: \"+15005550006\" },\n useLLMGeneratedMessageForOutbound: false,\n },\n }, 8000);\n steps.vapi_chat_post = `status ${r.status} body ${JSON.stringify(r.body).slice(0, 200)}`;\n } catch (e) {\n steps.vapi_chat_post = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n return c.json(steps);\n});\n\n/**\n * POST /handoff/switch_to_text {call_id, customer_number?}\n * Moves the live call's conversation into a text thread with the same assistant.\n */\napp.post(\"/switch_to_text\", async (c) => {\n // db.log() writes to the audit table, which only exists once db.init() has run.\n // Without this the handler died on the log line as an opaque 502 with nothing in\n // the val logs — the same cold-database trap that hit the other routes before.\n await db.init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n if (!callId) return fail(c, 400, \"call_id_required\", \"Internal: call_id missing.\");\n if (!KEY()) {\n return fail(c, 500, \"not_configured\",\n \"Texting is not configured on this line. Continue by voice — do not promise a text.\");\n }\n\n // The number and assistant come in as static parameters, so the common path needs\n // no call record at all. Fetching one first is what 502'd this endpoint: they run\n // to ~540KB, and a slow read blocked the text that was the entire point.\n let to = e164(b.customer_number);\n // Only a real UUID counts. Anything else — an unresolved template, a stray\n // string — means we do not have it, and the call record is the source of truth.\n const given = String(b.assistant_id ?? \"\").trim();\n let assistantId = UUID.test(given) ? given : \"\";\n if (!to || !assistantId) {\n const call = await vapi(`/call/${callId}`);\n to = to ?? e164(call.body?.customer?.number);\n assistantId = assistantId || String(call.body?.assistantId ?? \"\");\n }\n if (!UUID.test(assistantId)) {\n return fail(c, 409, \"no_assistant\",\n \"Could not determine which assistant to continue as, so no text was sent. \"\n + \"Carry on by voice.\");\n }\n if (!to) {\n return fail(c, 400, \"no_mobile_number\",\n \"No mobile number for this caller, so a text cannot be sent. Ask for a ten-digit \"\n + \"mobile number, or carry on by voice.\");\n }\n\n // What the batch already holds, so the text thread does not contradict the call.\n //\n // Read straight from SQLite. Fetching our own /batch/state over HTTP 502'd the\n // worker — a val calling its own origin mid-request is a good way to hang.\n let held = \"\";\n try {\n const r = await sqlite.execute({\n sql: \"SELECT data FROM batches WHERE call_id = ?\",\n args: [callId],\n });\n const batch = r.rows[0] ? JSON.parse(String(r.rows[0].data)) : null;\n const people = batch?.people ?? [];\n if (people.length) {\n const booked = people.filter((p: any) => p.confirmed === true).length;\n held = `\\n\\n[Already held on the call: ${people.map((p: any) => p.when_spoken).join(\", \")} `\n + `at ${batch.street}, ${batch.city} on ${batch.date}. ${booked} of ${people.length} `\n + \"confirmed. Engagement ids are held server-side; call next_patient to continue.]\";\n }\n } catch { /* context is a bonus, not a requirement */ }\n\n const text = composeFirstMessage(String(b.first_message ?? \"\"));\n\n // 1. SEND FIRST. This is the part the caller is waiting on; everything after it\n // is enrichment and must never be able to stop it.\n const sent = await vapi(\"/chat\", \"POST\", {\n assistantId,\n input: text,\n transport: {\n type: \"twilio.sms\",\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: to },\n useLLMGeneratedMessageForOutbound: false,\n },\n }, 9000);\n if (sent.status >= 300 || sent.status === 0) {\n // Log VAPI'S OWN REASON, not just the status. A live call got two 400s here\n // while the identical request succeeded from a shell minutes later, and the\n // log said only \"send failed\" — leaving nothing to diagnose.\n const why = JSON.stringify(sent.body?.message ?? sent.body?.error ?? sent.body ?? {}).slice(0, 300);\n await db.log(\"handoff/switch_to_text\", callId, { to }, sent.status || 504,\n `send failed: ${sent.status} ${why}`);\n // NOT 502: Val Town replaces a 502 from the val with Cloudflare's own error\n // page, so the JSON below never reaches the agent. 409 comes through intact.\n return fail(c, 409, \"text_send_failed\",\n \"The text could not be sent. Tell the caller you'll carry on by voice, and continue \"\n + \"the booking on this call — never promise a text that did not go out.\");\n }\n\n // 2. Give the thread the conversation so far.\n //\n // Sending verbatim (the only way to guarantee the compliance wording) returns NO\n // sessionId — Vapi only opens a session when it generates the message itself. So\n // the session is created here instead, bound to the same number and customer;\n // Vapi matches an inbound reply to it. Best-effort: the text has already gone, so\n // failing here costs continuity, never the handoff.\n let carried = false;\n let sessionId: string | null = sent.body?.sessionId ?? null;\n try {\n const call = await vapi(`/call/${callId}`, \"GET\", undefined, 8000);\n const seeded = [\n ...transcriptToMessages(call.body?.artifact?.transcript ?? \"\"),\n { role: \"assistant\", content: text + held },\n ];\n if (sessionId) {\n const patched = await vapi(`/session/${sessionId}`, \"PATCH\", { messages: seeded }, 8000);\n carried = patched.status > 0 && patched.status < 300;\n } else {\n const made = await vapi(\"/session\", \"POST\", {\n name: `voice handoff ${callId.slice(0, 8)}`,\n assistantId,\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: to },\n messages: seeded,\n }, 8000);\n sessionId = made.body?.id ?? null;\n carried = !!sessionId;\n }\n } catch { /* context is a bonus, not a requirement */ }\n\n await db.log(\"handoff/switch_to_text\", callId, { to, sessionId }, 200,\n `texted ${to}, context_carried=${carried}`);\n\n return c.json({\n ok: true,\n texted: true,\n to,\n session_id: sessionId,\n context_carried: carried,\n message: `Text sent to the number ending ${to.slice(-4)}. Tell the caller to look for it `\n + \"and that they can reply there. Stay on the line until they confirm they have it — \"\n + \"if they would rather keep going by voice, just carry on; the booking works either way.\",\n });\n});\n\n// Surface the exception instead of letting the worker die as an opaque 502. A\n// handoff failure must tell the agent to carry on by voice, not vanish.\n// 409, never 5xx: Val Town swaps a 502 from the val for Cloudflare's own error\n// page, so a 502 body never reaches the agent — which is how this endpoint spent an\n// afternoon looking like a crash when it was returning a perfectly good error.\napp.onError((err, c) =>\n c.json({\n ok: false,\n error_code: \"handoff_exception\",\n detail: `${(err as Error)?.name}: ${(err as Error)?.message}`,\n message: \"Texting failed. Tell the caller you'll continue by voice, and carry on with \"\n + \"the booking on this call — never promise a text that did not go out.\",\n }, 409)\n);\nexport default app;\n","// Voice -> text handoff. SOW: \"the system can ask the user if they would like to\n// transition to a text channel at any point... the entire journey could be done with\n// text. However, it is a requirement that a voice-only experience is supported.\"\n//\n// HOW IT WORKS\n// ------------\n// 1. POST /chat with `transport: twilio.sms` and useLLMGeneratedMessageForOutbound\n// FALSE. That sends our exact text — which is the only way to guarantee the\n// compliance footer is present, byte for byte — and creates a session bound to\n// the caller's number.\n// 2. PATCH that session's `messages` with the voice conversation so far, so the\n// text thread continues from where the call was rather than starting over.\n//\n// It has to be in that order: /chat rejects `sessionId` together with transport\n// fields, so a session cannot be seeded and texted in one request. Seeding second\n// is fine — nothing reads the session until the caller replies.\n//\n// The compliance footer is appended HERE, not asked of the model. A model that\n// forgets it once is a TCPA problem, and this is a place where \"usually\" is not\n// good enough.\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as db from \"./db.ts\";\nimport * as budget from \"./errbudget.ts\";\n\nconst app = new Hono();\napp.use(\"*\", budget.middleware());\n\nconst VAPI = \"https://api.vapi.ai\";\nconst KEY = () => Deno.env.get(\"VAPI_SANDBOX_KEY\") ?? \"\";\n/** The Twilio number texts are sent from. Swap via env when the number changes. */\nconst SMS_NUMBER_ID = () =>\n Deno.env.get(\"VAPI_SMS_PHONE_NUMBER_ID\") ?? \"21a168e4-c5fe-485f-9c3d-178ee54038c0\";\n\n/** Required on the first message of any A2P thread. Never model-generated. */\nexport const COMPLIANCE_FOOTER = \"Reply STOP to opt out, HELP for help.\";\n/**\n * Every thread opens by identifying itself. A text from an unknown number is\n * ignored at best and reported at worst, and A2P guidance expects the sender to be\n * identifiable in the first message. Enforced here for the same reason as the\n * footer: too important to leave to the model.\n */\nexport const BRAND = \"Walgreens vaccine scheduling\";\n\n/**\n * \"Walgreens vaccine scheduling: . . Reply STOP…\"\n *\n * The first text has to carry the state of the booking AND the pending question.\n * The first real handoff opened with a bare \"we can finish booking here\", so the\n * caller typed \"James Ray\" into a void and got \"Could you clarify what you'd like me\n * to do with 'James Ray'?\" — the thread had no idea what it had just asked.\n */\nexport function composeFirstMessage(\n body: string, summary?: string, question?: string, heldLine?: string,\n): string {\n const strip = (t: string) =>\n String(t ?? \"\").trim()\n .replace(/^(hi[,!]?\\s*)?(it'?s\\s+)?walgreens( vaccine)?( scheduling)?\\s*[—\\-:,]?\\s*/i, \"\")\n .trim();\n let lead = strip(body) || \"we can finish booking here.\";\n if (lead) lead = lead[0].toLowerCase() + lead.slice(1);\n\n const parts = [`${BRAND}: ${lead}`];\n // Prefer what the agent summarised; fall back to the holds we know about.\n const state = strip(summary) || String(heldLine ?? \"\").trim();\n if (state) parts.push(state.replace(/\\.?$/, \".\"));\n const q = String(question ?? \"\").trim();\n if (q) parts.push(q.replace(/\\?*$/, \"?\"));\n\n const text = parts.join(\" \");\n return text.includes(COMPLIANCE_FOOTER) ? text : `${text} ${COMPLIANCE_FOOTER}`;\n}\n\n/**\n * Every call is time-boxed. A Vapi call record can be ~540KB, and fetching one\n * un-guarded inside the request 502'd the whole worker — the text never went out\n * because of work that was only ever meant to be a nicety.\n */\nasync function vapi(path: string, method = \"GET\", body?: unknown, ms = 12000) {\n const ctl = new AbortController();\n const timer = setTimeout(() => ctl.abort(), ms);\n try {\n const res = await fetch(VAPI + path, {\n method,\n headers: { \"content-type\": \"application/json\", authorization: `Bearer ${KEY()}` },\n signal: ctl.signal,\n ...(body === undefined ? {} : { body: JSON.stringify(body) }),\n });\n const text = await res.text();\n try {\n return { status: res.status, body: text.trim() ? JSON.parse(text) : {} };\n } catch {\n return { status: res.status, body: {} };\n }\n } catch {\n return { status: 0, body: {} }; // timed out or aborted\n } finally {\n clearTimeout(timer);\n }\n}\n\n/**\n * Body reader that treats an UNRESOLVED Vapi template as absent.\n *\n * A static parameter whose variable does not exist arrives as the literal text\n * \"{{assistant.id}}\" — not empty, not an error. That is exactly how the text\n * handoff failed on two live calls while every shell test passed: `{{assistant.id}}`\n * is not a real Vapi variable (only call.id, customer.number, phoneNumber.*,\n * call.type, transport.* and dates are), so Vapi answered\n * 400 [\"assistantId must be a UUID\"] and the val had already skipped its fallback\n * because the value looked present.\n */\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* no body */ }\n if (!b || typeof b !== \"object\") return {};\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) {\n b[k] = null;\n }\n }\n return b;\n}\n\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst fail = (c: any, s: number, code: string, message: string) =>\n c.json({ ok: false, error_code: code, message }, s);\n\n/** Ten digits, however they were written, in E.164. */\nfunction e164(raw: unknown): string | null {\n const d = String(raw ?? \"\").replace(/\\D/g, \"\").replace(/^1(?=\\d{10}$)/, \"\");\n return d.length === 10 ? `+1${d}` : null;\n}\n\n/**\n * The voice conversation so far, as chat messages. Vapi's transcript is\n * \"AI: ...\\nUser: ...\" lines; anything else is dropped rather than guessed at.\n */\nfunction transcriptToMessages(transcript: string) {\n const out: { role: string; content: string }[] = [];\n for (const line of String(transcript ?? \"\").split(\"\\n\")) {\n const m = line.match(/^\\s*(AI|Assistant|User|Customer)\\s*:\\s*(.+)$/i);\n if (!m) continue;\n const content = m[2].trim();\n if (!content) continue;\n out.push({ role: /^(ai|assistant)$/i.test(m[1]) ? \"assistant\" : \"user\", content });\n }\n return out.slice(-40); // recent context is what matters; keep the payload sane\n}\n\n/**\n * GET /handoff/debug — which step of the handoff breaks, and with what error.\n * Kept because \"502, no logs\" cost a long time to chase once already.\n */\napp.all(\"/debug\", async (c) => {\n const steps: Record = {};\n try {\n const b = await read(c);\n steps.body_read = `ok, keys ${Object.keys(b).join(\",\") || \"(none)\"}`;\n } catch (e) {\n steps.body_read = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n const r = await sqlite.execute({\n sql: \"SELECT data FROM batches WHERE call_id = ?\",\n args: [\"probe\"],\n });\n steps.sqlite = `ok, ${r.rows.length} rows`;\n } catch (e) {\n steps.sqlite = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n steps.compose = composeFirstMessage(\"we can finish booking your flu shots here.\");\n } catch (e) {\n steps.compose = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n await db.init();\n await db.log(\"handoff/debug\", \"probe-call\", { probe: true }, 200, \"probe\");\n steps.db_log = \"ok\";\n } catch (e) {\n steps.db_log = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n try {\n const r = await vapi(\"/call/01a06ae6-7669-7dd9-b9d4-954be750177f\", \"GET\", undefined, 8000);\n const t = r.body?.artifact?.transcript ?? \"\";\n steps.big_call_fetch = `status ${r.status}, transcript ${String(t).length} chars, `\n + `${transcriptToMessages(t).length} messages`;\n } catch (e) {\n steps.big_call_fetch = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n steps.key_present = KEY() ? `yes (${KEY().length} chars)` : \"NO\";\n steps.sms_number_id = SMS_NUMBER_ID();\n try {\n const r = await vapi(\"/assistant?limit=1\", \"GET\", undefined, 8000);\n steps.vapi_get = `status ${r.status}`;\n } catch (e) {\n steps.vapi_get = `THREW ${(e as Error).message}`;\n }\n try {\n const r = await vapi(\"/chat\", \"POST\", {\n assistantId: c.req.query(\"assistant\") ?? \"\",\n input: \"debug\",\n transport: {\n type: \"twilio.sms\",\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: \"+15005550006\" },\n useLLMGeneratedMessageForOutbound: false,\n },\n }, 8000);\n steps.vapi_chat_post = `status ${r.status} body ${JSON.stringify(r.body).slice(0, 200)}`;\n } catch (e) {\n steps.vapi_chat_post = `THREW ${(e as Error).name}: ${(e as Error).message}`;\n }\n return c.json(steps);\n});\n\n/**\n * POST /handoff/switch_to_text {call_id, customer_number?}\n * Moves the live call's conversation into a text thread with the same assistant.\n */\napp.post(\"/switch_to_text\", async (c) => {\n // db.log() writes to the audit table, which only exists once db.init() has run.\n // Without this the handler died on the log line as an opaque 502 with nothing in\n // the val logs — the same cold-database trap that hit the other routes before.\n await db.init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n if (!callId) return fail(c, 400, \"call_id_required\", \"Internal: call_id missing.\");\n if (!KEY()) {\n return fail(c, 500, \"not_configured\",\n \"Texting is not configured on this line. Continue by voice — do not promise a text.\");\n }\n\n // The number and assistant come in as static parameters, so the common path needs\n // no call record at all. Fetching one first is what 502'd this endpoint: they run\n // to ~540KB, and a slow read blocked the text that was the entire point.\n let to = e164(b.customer_number);\n // Only a real UUID counts. Anything else — an unresolved template, a stray\n // string — means we do not have it, and the call record is the source of truth.\n const given = String(b.assistant_id ?? \"\").trim();\n let assistantId = UUID.test(given) ? given : \"\";\n if (!to || !assistantId) {\n const call = await vapi(`/call/${callId}`);\n to = to ?? e164(call.body?.customer?.number);\n assistantId = assistantId || String(call.body?.assistantId ?? \"\");\n }\n if (!UUID.test(assistantId)) {\n return fail(c, 409, \"no_assistant\",\n \"Could not determine which assistant to continue as, so no text was sent. \"\n + \"Carry on by voice.\");\n }\n if (!to) {\n return fail(c, 400, \"no_mobile_number\",\n \"No mobile number for this caller, so a text cannot be sent. Ask for a ten-digit \"\n + \"mobile number, or carry on by voice.\");\n }\n\n // What the batch already holds, so the text thread does not contradict the call.\n //\n // Read straight from SQLite. Fetching our own /batch/state over HTTP 502'd the\n // worker — a val calling its own origin mid-request is a good way to hang.\n let held = \"\";\n try {\n const r = await sqlite.execute({\n sql: \"SELECT data FROM batches WHERE call_id = ?\",\n args: [callId],\n });\n const batch = r.rows[0] ? JSON.parse(String(r.rows[0].data)) : null;\n const people = batch?.people ?? [];\n if (people.length) {\n const booked = people.filter((p: any) => p.confirmed === true).length;\n held = `\\n\\n[Already held on the call: ${people.map((p: any) => p.when_spoken).join(\", \")} `\n + `at ${batch.street}, ${batch.city} on ${batch.date}. ${booked} of ${people.length} `\n + \"confirmed. Engagement ids are held server-side; call next_patient to continue.]\";\n }\n } catch { /* context is a bonus, not a requirement */ }\n\n // A plain-English version of the holds, used when the agent gives no summary.\n const spoken = heldTimes.length\n ? `${heldTimes.length === 1 ? \"1 appointment\" : heldTimes.length + \" appointments\"} held for `\n + `${heldTimes.join(\" and \")} at ${heldStore}`\n : \"\";\n const text = composeFirstMessage(\n String(b.first_message ?? \"\"), String(b.summary_so_far ?? \"\"),\n String(b.next_question ?? \"\"), spoken);\n\n // 1. SEND FIRST. This is the part the caller is waiting on; everything after it\n // is enrichment and must never be able to stop it.\n const sent = await vapi(\"/chat\", \"POST\", {\n assistantId,\n input: text,\n transport: {\n type: \"twilio.sms\",\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: to },\n useLLMGeneratedMessageForOutbound: false,\n },\n }, 9000);\n if (sent.status >= 300 || sent.status === 0) {\n // Log VAPI'S OWN REASON, not just the status. A live call got two 400s here\n // while the identical request succeeded from a shell minutes later, and the\n // log said only \"send failed\" — leaving nothing to diagnose.\n const why = JSON.stringify(sent.body?.message ?? sent.body?.error ?? sent.body ?? {}).slice(0, 300);\n await db.log(\"handoff/switch_to_text\", callId, { to }, sent.status || 504,\n `send failed: ${sent.status} ${why}`);\n // NOT 502: Val Town replaces a 502 from the val with Cloudflare's own error\n // page, so the JSON below never reaches the agent. 409 comes through intact.\n return fail(c, 409, \"text_send_failed\",\n \"The text could not be sent. Tell the caller you'll carry on by voice, and continue \"\n + \"the booking on this call — never promise a text that did not go out.\");\n }\n\n // 2. Give the thread the conversation so far.\n //\n // Sending verbatim (the only way to guarantee the compliance wording) returns NO\n // sessionId — Vapi only opens a session when it generates the message itself. So\n // the session is created here instead, bound to the same number and customer;\n // Vapi matches an inbound reply to it. Best-effort: the text has already gone, so\n // failing here costs continuity, never the handoff.\n let carried = false;\n let sessionId: string | null = sent.body?.sessionId ?? null;\n try {\n const call = await vapi(`/call/${callId}`, \"GET\", undefined, 8000);\n const seeded = [\n ...transcriptToMessages(call.body?.artifact?.transcript ?? \"\"),\n { role: \"assistant\", content: text + held },\n ];\n if (sessionId) {\n const patched = await vapi(`/session/${sessionId}`, \"PATCH\", { messages: seeded }, 8000);\n carried = patched.status > 0 && patched.status < 300;\n } else {\n const made = await vapi(\"/session\", \"POST\", {\n name: `voice handoff ${callId.slice(0, 8)}`,\n assistantId,\n phoneNumberId: SMS_NUMBER_ID(),\n customer: { number: to },\n messages: seeded,\n }, 8000);\n sessionId = made.body?.id ?? null;\n carried = !!sessionId;\n }\n } catch { /* context is a bonus, not a requirement */ }\n\n await db.log(\"handoff/switch_to_text\", callId, { to, sessionId }, 200,\n `texted ${to}, context_carried=${carried}`);\n\n return c.json({\n ok: true,\n texted: true,\n to,\n session_id: sessionId,\n context_carried: carried,\n message: `Text sent to the number ending ${to.slice(-4)}. Tell the caller to look for it `\n + \"and that they can reply there. Stay on the line until they confirm they have it — \"\n + \"if they would rather keep going by voice, just carry on; the booking works either way.\",\n });\n});\n\n// Surface the exception instead of letting the worker die as an opaque 502. A\n// handoff failure must tell the agent to carry on by voice, not vanish.\n// 409, never 5xx: Val Town swaps a 502 from the val for Cloudflare's own error\n// page, so a 502 body never reaches the agent — which is how this endpoint spent an\n// afternoon looking like a crash when it was returning a perfectly good error.\napp.onError((err, c) =>\n c.json({\n ok: false,\n error_code: \"handoff_exception\",\n detail: `${(err as Error)?.name}: ${(err as Error)?.message}`,\n message: \"Texting failed. Tell the caller you'll continue by voice, and carry on with \"\n + \"the booking on this call — never promise a text that did not go out.\",\n }, 409)\n);\nexport default app;\n","createdAt",["D",1788677663347],"branchVersion","branchId","9a094f87-c5ab-4f23-8719-8d5fa62b4c8e","id","4c42c92f-a729-4f05-b8f8-3ea554c2dcf2","walgreens-vaccine-mock",["D",1785542168216],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Mock Walgreens vaccine API + voice-safe proxy","imageUrl","bf54ad56-9f09-4238-93ec-5919acfb30c0","pinnedFileId","6643b49a-8d3b-11f1-a102-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f8bc4-813e-715b-b5bf-1cb41e84f338","tursoName","4c42c92fa7294f05b8f83ea554c2dcf2","tursoHostname","4c42c92fa7294f05b8f83ea554c2dcf2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789561254403],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",227,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","gerardroy","handle","displayName","Gerard Roy","avatar","https://lh3.googleusercontent.com/a/ACg8ocIAPCi5IrLmWavYqxP-lUqAvz0-SYQhvB7c5IAuwONv5alSFg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":357,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":358,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":359,"_84":360,"_86":361,"_88":25},"tree",[288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304],"files",[288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304],"counts",{"_278":63,"_279":188,"_280":63,"_281":282,"_283":284},"contents",[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":270,"_32":271,"_30":272,"_151":-5,"_41":42,"_40":273,"_153":25,"_38":274,"_13":275,"_33":34,"_35":276,"_24":25,"_156":-5,"_27":277},{"_43":263,"_32":264,"_30":265,"_151":-5,"_41":42,"_40":266,"_153":59,"_38":267,"_13":171,"_33":34,"_35":268,"_24":25,"_156":-5,"_27":269},{"_43":256,"_32":257,"_30":258,"_151":-5,"_41":42,"_40":259,"_153":59,"_38":260,"_13":171,"_33":34,"_35":261,"_24":25,"_156":-5,"_27":262},{"_43":249,"_32":250,"_30":251,"_151":-5,"_41":42,"_40":252,"_153":59,"_38":253,"_13":216,"_33":34,"_35":254,"_24":25,"_156":-5,"_27":255},{"_43":242,"_32":243,"_30":244,"_151":-5,"_41":42,"_40":245,"_153":59,"_38":246,"_13":188,"_33":34,"_35":247,"_24":25,"_156":-5,"_27":248},{"_43":234,"_32":235,"_30":236,"_151":-5,"_41":42,"_40":237,"_153":59,"_38":238,"_13":239,"_33":34,"_35":240,"_24":25,"_156":-5,"_27":241},{"_43":227,"_32":228,"_30":229,"_151":-5,"_41":42,"_40":230,"_153":59,"_38":231,"_13":63,"_33":34,"_35":232,"_24":25,"_156":-5,"_27":233},{"_43":219,"_32":220,"_30":221,"_151":-5,"_41":42,"_40":222,"_153":59,"_38":223,"_13":224,"_33":34,"_35":225,"_24":25,"_156":-5,"_27":226},{"_43":211,"_32":212,"_30":213,"_151":-5,"_41":42,"_40":214,"_153":59,"_38":215,"_13":216,"_33":34,"_35":217,"_24":25,"_156":-5,"_27":218},{"_43":207,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_153":25,"_38":208,"_13":209,"_33":34,"_35":37,"_24":25,"_156":-5,"_27":210},{"_43":199,"_32":200,"_30":57,"_151":-5,"_41":42,"_40":201,"_153":59,"_38":202,"_13":203,"_33":204,"_35":205,"_24":25,"_156":-5,"_27":206},{"_43":191,"_32":192,"_30":193,"_151":-5,"_41":42,"_40":194,"_153":59,"_38":195,"_13":196,"_33":34,"_35":197,"_24":25,"_156":-5,"_27":198},{"_43":183,"_32":184,"_30":185,"_151":-5,"_41":42,"_40":186,"_153":59,"_38":187,"_13":188,"_33":34,"_35":189,"_24":25,"_156":-5,"_27":190},{"_43":175,"_32":176,"_30":177,"_151":-5,"_41":42,"_40":178,"_153":59,"_38":179,"_13":180,"_33":34,"_35":181,"_24":25,"_156":-5,"_27":182},{"_43":166,"_32":167,"_30":168,"_151":-5,"_41":42,"_40":169,"_153":59,"_38":170,"_13":171,"_33":172,"_35":173,"_24":25,"_156":-5,"_27":174},{"_43":158,"_32":159,"_30":160,"_151":-5,"_41":42,"_40":161,"_153":59,"_38":162,"_13":163,"_33":34,"_35":164,"_24":25,"_156":-5,"_27":165},{"_43":148,"_32":149,"_30":150,"_151":-5,"_41":42,"_40":152,"_153":59,"_38":154,"_13":63,"_33":34,"_35":155,"_24":25,"_156":-5,"_27":157},"45ea08a2-0ffc-4ba4-bec5-55ac1997e880","zipstate.ts","c8cea01e-9544-11f1-82eb-1607ee4eb77e","parentId",93,"latest",["D",1786425808442],"// ZIP -> state, by 3-digit ZIP prefix.\n//\n// Needed because Walgreens' timeslots endpoint requires a CORRECT state: a wrong\n// one returns FC_904_NoData \"No participating store\", which is indistinguishable\n// from genuine no-availability. Verified 2026-08-11 (zip 95407 + state IL/NY ->\n// \"No participating store\"; + state CA -> 4 real Santa Rosa stores).\n//\n// It must be derived server-side. Asking the caller is a terrible phone\n// experience, and a model will not reliably infer it: a prompt full of\n// \"never guess\" rules makes it treat ZIP -> state as guessing and refuse.\n\n/** Specific prefixes that must win over the ranges below. */\nconst EXACT: Record = {\n \"005\": \"NY\", \"008\": \"VI\", \"009\": \"PR\", \"055\": \"MA\", \"204\": \"DC\", \"205\": \"DC\",\n \"569\": \"DC\", \"755\": \"TX\", \"885\": \"TX\", \"969\": \"GU\",\n};\n\n/** [startPrefix, endPrefix, state] inclusive, on the first 3 ZIP digits. */\nconst RANGES: [number, number, string][] = [\n [6, 7, \"PR\"], [10, 27, \"MA\"], [28, 29, \"RI\"], [30, 38, \"NH\"], [39, 49, \"ME\"],\n [50, 54, \"VT\"], [56, 59, \"VT\"], [60, 69, \"CT\"], [70, 89, \"NJ\"],\n [100, 149, \"NY\"], [150, 196, \"PA\"], [197, 199, \"DE\"], [200, 205, \"DC\"],\n [206, 219, \"MD\"], [220, 246, \"VA\"], [247, 268, \"WV\"], [270, 289, \"NC\"],\n [290, 299, \"SC\"], [300, 319, \"GA\"], [320, 339, \"FL\"], [340, 349, \"FL\"],\n [350, 369, \"AL\"], [370, 385, \"TN\"], [386, 397, \"MS\"], [398, 399, \"GA\"],\n [400, 427, \"KY\"], [430, 459, \"OH\"], [460, 479, \"IN\"], [480, 499, \"MI\"],\n [500, 528, \"IA\"], [530, 549, \"WI\"], [550, 567, \"MN\"], [570, 577, \"SD\"],\n [580, 588, \"ND\"], [590, 599, \"MT\"], [600, 629, \"IL\"], [630, 658, \"MO\"],\n [660, 679, \"KS\"], [680, 693, \"NE\"], [700, 714, \"LA\"], [716, 729, \"AR\"],\n [730, 749, \"OK\"], [750, 799, \"TX\"], [800, 816, \"CO\"], [820, 831, \"WY\"],\n [832, 838, \"ID\"], [840, 847, \"UT\"], [850, 865, \"AZ\"], [870, 884, \"NM\"],\n [889, 898, \"NV\"], [900, 961, \"CA\"], [967, 968, \"HI\"], [970, 979, \"OR\"],\n [980, 994, \"WA\"], [995, 999, \"AK\"],\n];\n\n/** Returns the two-letter state for a US ZIP, or null if it can't be resolved. */\nexport function zipToState(zip: unknown): string | null {\n const digits = String(zip ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n if (digits.length !== 5) return null;\n const p = digits.slice(0, 3);\n if (EXACT[p]) return EXACT[p];\n const n = Number(p);\n for (const [lo, hi, st] of RANGES) if (n >= lo && n <= hi) return st;\n return null;\n}\n","label",[149],"98d25948-2b6e-4c1c-84d0-e5c2e774fa51","stores.ts","704e101a-8d6e-11f1-9c35-1607ee4eb77e",78,["D",1785955162501],9,"// Walgreens store directory + ZIP centroid lookup.\n//\n// Two tables, seeded once via POST /admin/zips/load and /admin/stores/load:\n// zips — GeoNames US postal centroids (zip, city, state, lat, lon)\n// stores — real Walgreens locations from OpenStreetMap (street, city, ...)\n//\n// nearestStores() is what the voice flow uses: 2 closest stores to a ZIP,\n// plus the caller's own city so the question can drop redundant city names.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nlet ready: Promise | null = null;\n\nexport function init(): Promise {\n if (!ready) {\n ready = (async () => {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS zips (\n zip TEXT PRIMARY KEY,\n city TEXT NOT NULL,\n state TEXT NOT NULL,\n lat REAL NOT NULL,\n lon REAL NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS stores (\n id TEXT PRIMARY KEY,\n line1 TEXT NOT NULL,\n street TEXT NOT NULL,\n city TEXT NOT NULL,\n state TEXT NOT NULL,\n zip TEXT NOT NULL,\n lat REAL NOT NULL,\n lon REAL NOT NULL,\n hours TEXT NOT NULL DEFAULT '{}',\n hours_source TEXT NOT NULL DEFAULT 'default'\n )`);\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS stores_lat ON stores (lat)`,\n );\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS store_refs (\n ref TEXT PRIMARY KEY,\n store_id TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n })();\n }\n return ready;\n}\n\nexport type Store = {\n id: string;\n line1: string;\n street: string;\n city: string;\n state: string;\n zip: string;\n lat: number;\n lon: number;\n /** Pharmacy hours: {\"mo\":[[\"09:00\",\"20:00\"]], ...} keys mo..su. */\n hours: Record>;\n hoursSource: string;\n miles?: number;\n};\n\n/** Typical Walgreens pharmacy hours, used when OSM has no tagging. */\nexport const DEFAULT_HOURS: Record> = {\n mo: [[\"09:00\", \"20:00\"]], tu: [[\"09:00\", \"20:00\"]], we: [[\"09:00\", \"20:00\"]],\n th: [[\"09:00\", \"20:00\"]], fr: [[\"09:00\", \"20:00\"]], sa: [[\"09:00\", \"18:00\"]],\n su: [[\"10:00\", \"18:00\"]],\n};\n\nfunction parseHours(raw: unknown): Record> {\n try {\n const h = JSON.parse(String(raw ?? \"{}\"));\n return h && typeof h === \"object\" && Object.keys(h).length ? h : DEFAULT_HOURS;\n } catch {\n return DEFAULT_HOURS;\n }\n}\n\nfunction rowToStore(row: any, miles?: number): Store {\n return {\n id: String(row.id),\n line1: String(row.line1),\n street: String(row.street),\n city: String(row.city),\n state: String(row.state),\n zip: String(row.zip),\n lat: Number(row.lat),\n lon: Number(row.lon),\n hours: parseHours(row.hours),\n hoursSource: String(row.hours_source ?? \"default\"),\n ...(miles !== undefined ? { miles } : {}),\n };\n}\n\nconst MILES_R = 3958.8;\n\nexport function haversineMiles(aLat: number, aLon: number, bLat: number, bLon: number): number {\n const rad = (d: number) => d * Math.PI / 180;\n const dLat = rad(bLat - aLat);\n const dLon = rad(bLon - aLon);\n const s = Math.sin(dLat / 2) ** 2 +\n Math.cos(rad(aLat)) * Math.cos(rad(bLat)) * Math.sin(dLon / 2) ** 2;\n return 2 * MILES_R * Math.asin(Math.sqrt(s));\n}\n\nexport async function zipInfo(zip: string): Promise<{ city: string; state: string; lat: number; lon: number } | null> {\n await init();\n const r = await sqlite.execute({ sql: \"SELECT city, state, lat, lon FROM zips WHERE zip = ?\", args: [zip] });\n const row: any = r.rows[0];\n return row ? { city: String(row.city), state: String(row.state), lat: Number(row.lat), lon: Number(row.lon) } : null;\n}\n\n/** N nearest stores to a point. Bounding-box prefilter, exact haversine sort. */\nexport async function nearestStores(lat: number, lon: number, n = 2): Promise {\n await init();\n // Widen the box until enough candidates are inside (0.5° ≈ 35 miles).\n for (const deg of [0.5, 1.5, 4]) {\n const r = await sqlite.execute({\n sql: `SELECT * FROM stores WHERE lat BETWEEN ? AND ? AND lon BETWEEN ? AND ? LIMIT 500`,\n args: [lat - deg, lat + deg, lon - deg, lon + deg],\n });\n if (r.rows.length >= n || deg === 4) {\n const scored = (r.rows as any[]).map((row) =>\n rowToStore(row, Number(haversineMiles(lat, lon, Number(row.lat), Number(row.lon)).toFixed(1)))\n );\n scored.sort((a, b) => a.miles! - b.miles!);\n return scored.slice(0, n);\n }\n }\n return [];\n}\n\nexport async function getStore(id: string): Promise {\n await init();\n const r = await sqlite.execute({ sql: \"SELECT * FROM stores WHERE id = ?\", args: [id] });\n const row: any = r.rows[0];\n return row ? rowToStore(row) : null;\n}\n\nexport async function putStoreRef(ref: string, storeId: string) {\n await init();\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO store_refs (ref, store_id, created_at) VALUES (?,?,?)\",\n args: [ref, storeId, Math.floor(Date.now() / 1000)],\n });\n}\n\nexport async function resolveStoreRef(ref: string): Promise {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT store_id FROM store_refs WHERE ref = ?\",\n args: [String(ref ?? \"\").trim().toUpperCase()],\n });\n const row: any = r.rows[0];\n return row ? getStore(String(row.store_id)) : null;\n}\n\n// ------------------------------------------------------------ speech helpers\n\nconst STREET_WORDS: Record = {\n st: \"Street\", ave: \"Avenue\", av: \"Avenue\", blvd: \"Boulevard\", dr: \"Drive\",\n rd: \"Road\", ln: \"Lane\", hwy: \"Highway\", pkwy: \"Parkway\", ct: \"Court\",\n pl: \"Place\", sq: \"Square\", ter: \"Terrace\", trl: \"Trail\", cir: \"Circle\",\n expy: \"Expressway\", fwy: \"Freeway\", n: \"North\", s: \"South\", e: \"East\",\n w: \"West\", ne: \"Northeast\", nw: \"Northwest\", se: \"Southeast\", sw: \"Southwest\",\n mt: \"Mount\", ft: \"Fort\", rt: \"Route\", rte: \"Route\", us: \"US\",\n};\n\n/** \"N Michigan Ave\" -> \"North Michigan Avenue\", for saying aloud. */\nexport function speechStreet(street: string): string {\n return String(street).split(/\\s+/).map((w) => {\n const key = w.toLowerCase().replace(/\\./g, \"\");\n return STREET_WORDS[key] ?? w;\n }).join(\" \").trim();\n}\n\n/** The exact preference question. Street-only when everything is in the\n * caller's own city; street + city otherwise. When both stores share the\n * same spoken street name, the house number is the only differentiator:\n * \"the Walgreens at 30 North Michigan Avenue, or the one at 79 …\". */\nexport function preferenceQuestion(a: Store, b: Store, callerCity: string | null): string {\n const sameCity = callerCity &&\n a.city.toLowerCase() === callerCity.toLowerCase() &&\n b.city.toLowerCase() === callerCity.toLowerCase();\n const sA = speechStreet(a.street);\n const sB = speechStreet(b.street);\n if (sA.toLowerCase() === sB.toLowerCase() && a.city.toLowerCase() === b.city.toLowerCase()) {\n const lA = speechStreet(a.line1);\n const lB = speechStreet(b.line1);\n return sameCity\n ? `Do you prefer the Walgreens at ${lA}, or the one at ${lB}?`\n : `Do you prefer the Walgreens at ${lA} in ${a.city}, or the one at ${lB}?`;\n }\n if (sameCity) {\n return `Do you prefer the Walgreens on ${sA}, or the one on ${sB}?`;\n }\n return `Do you prefer the Walgreens on ${sA} in ${a.city}, or the Walgreens on ${sB} in ${b.city}?`;\n}\n\n// -------------------------------------------------------------- seed loading\n\nexport async function loadZips(rows: any[]): Promise {\n await init();\n const stmts = [];\n for (const r of rows) {\n if (!r?.zip || !r?.city || r?.lat == null || r?.lon == null) continue;\n stmts.push({\n sql: \"INSERT OR REPLACE INTO zips (zip, city, state, lat, lon) VALUES (?,?,?,?,?)\",\n args: [String(r.zip), String(r.city), String(r.state ?? \"\"), Number(r.lat), Number(r.lon)],\n });\n }\n await sqlite.batch(stmts);\n return stmts.length;\n}\n\nexport async function loadStores(rows: any[]): Promise {\n await init();\n const stmts = [];\n for (const r of rows) {\n if (!r?.id || !r?.street || !r?.city || r?.lat == null || r?.lon == null) continue;\n stmts.push({\n sql: \"INSERT OR REPLACE INTO stores (id, line1, street, city, state, zip, lat, lon, hours, hours_source) VALUES (?,?,?,?,?,?,?,?,?,?)\",\n args: [\n String(r.id),\n String(r.line1 ?? r.street),\n String(r.street),\n String(r.city),\n String(r.state ?? \"\"),\n String(r.zip ?? \"\"),\n Number(r.lat),\n Number(r.lon),\n JSON.stringify(r.hours ?? {}),\n String(r.hours_source ?? (r.hours ? \"osm\" : \"default\")),\n ],\n });\n }\n await sqlite.batch(stmts);\n return stmts.length;\n}\n\nfunction titleCase(s: string): string {\n return s.split(\" \").map((w) => w ? w[0].toUpperCase() + w.slice(1) : w).join(\" \");\n}\n\n/** Parse a walgreens.com locator slug, validating the city split against the\n * zips table (city names can span several '-' segments).\n * \"walgreens-15601+san+carlos+blvd-fort+myers-fl-33908\" ->\n * { line1: \"15601 San Carlos Blvd\", city: \"Fort Myers\", state: \"FL\", zip: \"33908\" } */\nexport async function parseLocatorSlug(slug: string): Promise<{ line1: string; street: string; city: string; state: string; zip: string } | null> {\n const segs = String(slug).split(\"-\");\n if (segs.length < 4 || segs[0] !== \"walgreens\") return null;\n const zip = segs.pop()!;\n const state = (segs.pop() ?? \"\").toUpperCase();\n segs.shift();\n if (!/^\\d{5}$/.test(zip) || !/^[A-Z]{2}$/.test(state) || segs.length === 0) return null;\n\n const geon = await zipInfo(zip);\n const seg2words = (xs: string[]) => xs.map((x) => x.replace(/\\+/g, \" \")).join(\" \").trim();\n let split = segs.length - 1; // default: last segment is the city\n if (geon) {\n for (let k = 1; k < segs.length; k++) {\n if (seg2words(segs.slice(segs.length - k)).toLowerCase() === geon.city.toLowerCase()) {\n split = segs.length - k;\n break;\n }\n }\n }\n const line1 = titleCase(seg2words(segs.slice(0, split)));\n const city = geon?.city ?? titleCase(seg2words(segs.slice(split)));\n if (!line1) return null;\n const street = line1.replace(/^[\\d\\-]+\\s+/, \"\");\n return { line1, street, city, state, zip };\n}\n\n/** Load stores from walgreens.com locator slugs. Coordinates come from a\n * matching OSM row (same zip + house number + street word) when one exists —\n * along with its pharmacy hours — otherwise the ZIP centroid. */\nexport async function loadWagStores(rows: Array<{ id: string; slug: string }>): Promise<{ loaded: number; osm_matched: number; skipped: number }> {\n await init();\n const parsed: Array<{ id: string; p: NonNullable>> }> = [];\n for (const r of rows) {\n if (!r?.id || !r?.slug) continue;\n const p = await parseLocatorSlug(r.slug);\n if (p) parsed.push({ id: `wag${r.id}`, p });\n }\n if (parsed.length === 0) return { loaded: 0, osm_matched: 0, skipped: rows.length };\n\n const zips = [...new Set(parsed.map((x) => x.p.zip))];\n const ph = zips.map(() => \"?\").join(\",\");\n const zrows = await sqlite.execute({ sql: `SELECT zip, lat, lon FROM zips WHERE zip IN (${ph})`, args: zips });\n const zmap = new Map((zrows.rows as any[]).map((z) => [String(z.zip), [Number(z.lat), Number(z.lon)]]));\n const orows = await sqlite.execute({\n sql: `SELECT id, line1, zip, lat, lon, hours, hours_source FROM stores WHERE id NOT LIKE 'wag%' AND zip IN (${ph})`,\n args: zips,\n });\n const byZip = new Map();\n for (const o of orows.rows as any[]) {\n const arr = byZip.get(String(o.zip)) ?? [];\n arr.push(o);\n byZip.set(String(o.zip), arr);\n }\n\n const norm = (s: string) => String(s).toLowerCase().replace(/[^a-z0-9 ]/g, \"\");\n let matched = 0, skipped = 0;\n const stmts = [];\n for (const { id, p } of parsed) {\n let lat: number | null = null, lon: number | null = null;\n let hours = \"{}\", hoursSource = \"default\";\n const houseNum = (p.line1.match(/^\\d+/) ?? [\"\"])[0];\n const streetWord = norm(p.street).split(\" \").filter((w) => w.length > 2)[0] ?? \"\";\n for (const o of byZip.get(p.zip) ?? []) {\n const oline = norm(String(o.line1));\n if (houseNum && oline.startsWith(houseNum) && streetWord && oline.includes(streetWord)) {\n lat = Number(o.lat); lon = Number(o.lon);\n hours = String(o.hours ?? \"{}\");\n hoursSource = String(o.hours_source ?? \"default\");\n matched++;\n break;\n }\n }\n if (lat === null) {\n const z = zmap.get(p.zip);\n if (!z) { skipped++; continue; }\n [lat, lon] = z;\n }\n stmts.push({\n sql: \"INSERT OR REPLACE INTO stores (id, line1, street, city, state, zip, lat, lon, hours, hours_source) VALUES (?,?,?,?,?,?,?,?,?,?)\",\n args: [id, p.line1, p.street, p.city, p.state, p.zip, lat, lon!, hours, hoursSource],\n });\n }\n await sqlite.batch(stmts);\n return { loaded: stmts.length, osm_matched: matched, skipped };\n}\n\n/** Apply exact coordinates from the walgreens.com locator API. */\nexport async function fixCoords(rows: Array<{ no: string; lat: number; lon: number }>): Promise {\n await init();\n const stmts = [];\n for (const r of rows) {\n if (!r?.no || typeof r.lat !== \"number\" || typeof r.lon !== \"number\") continue;\n stmts.push({\n sql: \"UPDATE stores SET lat = ?, lon = ? WHERE id = ?\",\n args: [r.lat, r.lon, `wag${String(r.no)}`],\n });\n }\n if (stmts.length) await sqlite.batch(stmts);\n return stmts.length;\n}\n\n/** Stores whose coordinates are exactly their ZIP centroid (need enrichment). */\nexport async function centroidParked(): Promise> {\n await init();\n const r = await sqlite.execute(\n `SELECT s.zip AS zip, REPLACE(s.id, 'wag', '') AS no\n FROM stores s JOIN zips z ON s.zip = z.zip\n WHERE s.lat = z.lat AND s.lon = z.lon\n ORDER BY s.zip`,\n );\n return (r.rows as any[]).map((x) => ({ zip: String(x.zip), no: String(x.no) }));\n}\n\n/** Drop everything except walgreens.com-sourced rows (post-migration cleanup). */\nexport async function purgeNonWag(): Promise {\n await init();\n const before = await sqlite.execute(\"SELECT COUNT(*) AS n FROM stores WHERE id NOT LIKE 'wag%'\");\n await sqlite.execute(\"DELETE FROM stores WHERE id NOT LIKE 'wag%'\");\n return Number((before.rows[0] as any).n);\n}\n\nexport async function stats() {\n await init();\n const z = await sqlite.execute(\"SELECT COUNT(*) AS n FROM zips\");\n const s = await sqlite.execute(\"SELECT COUNT(*) AS n FROM stores\");\n return { zips: Number((z.rows[0] as any).n), stores: Number((s.rows[0] as any).n) };\n}\n",[159],"0abf0b74-d0bd-4aaf-85fe-e7a39b14864d","sandbox_monitor.ts","7b4bdd18-8e49-11f1-92ec-1607ee4eb77e",71,["D",1785692475118],3,"interval","// Walgreens Sandbox monitor — runs on a schedule, watches the sandbox Vapi org\n// and the mock backend, and emails the owner ONLY when something needs eyes:\n// - backend /v1/health failing\n// - calls ending for a bad reason (pipeline errors, silence timeouts, …)\n// - calls whose structured analysis says booked=false with a failure_reason\n// - tool-call error spikes in the proxy log\n// Plus one daily digest (first run after 15:00 UTC / 8am PT) with the day's\n// counts even when everything is green. Every run logs a summary row that\n// shows up on /admin under route \"sandbox_monitor\".\nimport { email } from \"https://esm.town/v/std/email\";\nimport * as db from \"./db.ts\";\n\nconst BASE = \"https://gerardroy--6643b49a8d3b11f1a1021607ee4eb77e.web.val.run\";\nconst SANDBOX_ASSISTANT = \"35d411f1-8f40-45e2-ab26-a237c75683db\";\n\n// endedReasons that are normal call terminations; anything else gets flagged.\nconst OK_ENDINGS = new Set([\n \"customer-ended-call\",\n \"assistant-said-end-call-phrase\",\n \"assistant-ended-call\",\n \"customer-did-not-answer\",\n \"customer-busy\",\n \"voicemail\",\n]);\n\nasync function vapi(path: string): Promise {\n const key = Deno.env.get(\"VAPI_SANDBOX_KEY\");\n if (!key) throw new Error(\"VAPI_SANDBOX_KEY is not set on this val\");\n const r = await fetch(`https://api.vapi.ai${path}`, {\n headers: { authorization: `Bearer ${key}`, \"user-agent\": \"curl/8.7.1\" },\n });\n if (!r.ok) throw new Error(`Vapi ${path} -> HTTP ${r.status}`);\n return r.json();\n}\n\nexport default async function (interval: Interval) {\n const problems: string[] = [];\n // lastRunAt arrives as a string on some runtimes — normalise to Date.\n const since = interval.lastRunAt\n ? new Date(interval.lastRunAt)\n : new Date(Date.now() - 60 * 60 * 1000);\n\n // 1. Backend health.\n try {\n const h = await fetch(`${BASE}/v1/health`).then((r) => r.json());\n if (!h?.ok) problems.push(`Backend /v1/health returned ${JSON.stringify(h)}`);\n } catch (e) {\n problems.push(`Backend /v1/health unreachable: ${e}`);\n }\n\n // 2. New sandbox calls since the last run.\n let calls: any[] = [];\n try {\n calls = await vapi(`/call?createdAtGt=${since.toISOString()}&limit=100`);\n } catch (e) {\n problems.push(`Could not list sandbox calls: ${e}`);\n }\n // Simulation traffic (websocket transport) grades itself via the Simulations\n // feature — odd endings there (e.g. the 911 scenario ending in a silence\n // timeout) are expected and would be pure noise here. Real phone calls stay\n // fully watched.\n const ended = calls.filter((c) =>\n c.status === \"ended\" && c.transport?.provider !== \"vapi.websocket\"\n );\n for (const c of ended) {\n const mins = c.startedAt && c.endedAt\n ? ((new Date(c.endedAt).getTime() - new Date(c.startedAt).getTime()) / 60000).toFixed(1)\n : \"?\";\n if (c.endedReason && !OK_ENDINGS.has(c.endedReason)) {\n problems.push(`Call ${c.id} ended badly: ${c.endedReason} (${mins} min)`);\n }\n const sd = c.analysis?.structuredData;\n if (sd && sd.booked === false && sd.failure_reason) {\n problems.push(`Call ${c.id} did not book: ${sd.failure_reason} (${mins} min)`);\n }\n if (Number(mins) > 15) {\n problems.push(`Call ${c.id} ran long: ${mins} min (target is under 10)`);\n }\n }\n\n // 3. Proxy tool-call errors since the last run (excluding deliberate 4xx\n // that are part of the flow guards would be noise — only flag 5xx and\n // unusual volumes of 4xx).\n try {\n const logs = await db.recentLog(200);\n const fresh = logs.filter((l: any) => Number(l.at) * 1000 >= since.getTime());\n // The SMS route's 503 while Twilio is unconfigured is deliberate, not an outage.\n const fivehundreds = fresh.filter((l: any) =>\n Number(l.status) >= 500 &&\n !(l.route === \"send_confirmation_sms\" && Number(l.status) === 503) &&\n l.route !== \"sandbox_monitor\"\n );\n const fourhundreds = fresh.filter((l: any) => Number(l.status) >= 400 && Number(l.status) < 500);\n if (fivehundreds.length > 0) {\n problems.push(`${fivehundreds.length} tool call(s) hit 5xx: ${fivehundreds.slice(0, 3).map((l: any) => `${l.route}=${l.status}`).join(\", \")}`);\n }\n if (fourhundreds.length >= 10) {\n problems.push(`${fourhundreds.length} tool 4xx errors since last run — the model may be fighting a guard`);\n }\n } catch (e) {\n problems.push(`Could not read tool-call log: ${e}`);\n }\n\n // Daily digest: first run at/after 15:00 UTC (8am PT).\n const now = new Date();\n const lastRun = interval.lastRunAt ? new Date(interval.lastRunAt) : null;\n const digestDue = now.getUTCHours() >= 15 &&\n (!lastRun || lastRun.getUTCHours() < 15 || lastRun.getUTCDate() !== now.getUTCDate());\n\n const note = `${calls.length} new calls, ${problems.length} problems`;\n await db.log(\"sandbox_monitor\", null, { since: since.toISOString() }, problems.length ? 500 : 200, note);\n\n if (problems.length > 0) {\n await email({\n subject: `[walgreens-sandbox] ${problems.length} issue(s) need a look`,\n text: `Since ${since.toISOString()}:\\n\\n- ${problems.join(\"\\n- \")}\\n\\nDashboard: ${BASE}/dashboard\\nAdmin: ${BASE}/admin`,\n });\n } else if (digestDue) {\n let day: any[] = [];\n try {\n day = await vapi(`/call?createdAtGt=${new Date(Date.now() - 24 * 3600 * 1000).toISOString()}&limit=100`);\n } catch { /* digest is best-effort */ }\n const booked = day.filter((c) => c.analysis?.structuredData?.booked === true).length;\n const people = day.reduce((s, c) => s + (Number(c.analysis?.structuredData?.people_booked) || 0), 0);\n await email({\n subject: `[walgreens-sandbox] daily digest — ${day.length} calls, ${people} people booked`,\n text: `Last 24h in the sandbox org:\\n\\n` +\n `- Calls: ${day.length}\\n- Calls with a booking: ${booked}\\n- People booked: ${people}\\n` +\n `- Assistant: ${SANDBOX_ASSISTANT}\\n\\nAll green.\\n\\nDashboard: ${BASE}/dashboard\\nAdmin: ${BASE}/admin`,\n });\n }\n}\n",[167],"1a76165a-3194-4da2-a47c-ffa04a20d464","proxy.ts","e39e3276-8d3b-11f1-99c0-1607ee4eb77e",97,["D",1786425942538],30,"// Voice-safe proxy in front of the Walgreens Scheduling API.\n//\n// Why this layer exists:\n// 1. Walgreens returns HTTP 200 on failure with errCode in the body. Vapi's\n// apiRequest tool branches on HTTP status, so without this the agent would\n// tell callers an appointment was booked when it was not. This layer maps\n// upstream errCode -> a real HTTP status.\n// 2. Vapi apiRequest tools are known to sometimes fire with empty `{}` args.\n// Every route rejects those loudly instead of passing junk upstream.\n// 3. Voice input is messy: \"March 5th 1985\", \"flu shot\", \"tomorrow morning\".\n// Normalisation happens here, not in the prompt.\n// 4. Tool responses are fed back to the model as context, so payloads are\n// kept small and already phrased for speech.\n//\n// Upstream request/response shapes follow the official spec:\n// https://developer.walgreens.com/sites/default/files/v1_Scheduling_API.html\nimport { Hono } from \"npm:hono\";\nimport { findVaccine, hash } from \"./data.ts\";\nimport * as db from \"./db.ts\";\nimport * as stores from \"./stores.ts\";\n\nconst app = new Hono();\n\nconst UPSTREAM = (c: any) =>\n Deno.env.get(\"WALGREENS_BASE_URL\") || `${new URL(c.req.url).origin}/mock`;\n// Only send the real Walgreens key when this proxy is actually pointed at the\n// real service. WALGREENS_API_KEY also exists for flow.ts, and using it against\n// the built-in mock would fail the mock's own auth check.\nconst API_KEY = () =>\n (Deno.env.get(\"WALGREENS_BASE_URL\") ? Deno.env.get(\"WALGREENS_API_KEY\") : \"\") || \"MOCK_KEY\";\nconst AFF_ID = () => Deno.env.get(\"WALGREENS_AFF_ID\") || \"MOCK_AFF\";\nconst PARTNER_ID = () => Deno.env.get(\"WALGREENS_PARTNER_ID\") || \"MOCK_PARTNER\";\n\n// ------------------------------------------------------------------ utilities\n\nconst MONTHS = [\n \"january\", \"february\", \"march\", \"april\", \"may\", \"june\",\n \"july\", \"august\", \"september\", \"october\", \"november\", \"december\",\n];\n\n/** Accepts \"1985-03-05\", \"3/5/1985\", \"March 5th 1985\", \"5 March 1985\". */\nexport function parseDob(input: unknown): string | null {\n const s = String(input ?? \"\").trim().toLowerCase().replace(/,/g, \"\");\n if (!s) return null;\n\n let m = s.match(/^(\\d{4})-(\\d{1,2})-(\\d{1,2})$/);\n if (m) return iso(+m[1], +m[2], +m[3]);\n\n m = s.match(/^(\\d{1,2})[\\/\\-](\\d{1,2})[\\/\\-](\\d{2,4})$/);\n if (m) {\n let y = +m[3];\n if (y < 100) y += y > 30 ? 1900 : 2000;\n return iso(y, +m[1], +m[2]); // US order\n }\n\n const mon = MONTHS.findIndex((name) => s.includes(name));\n if (mon >= 0) {\n const nums = s.match(/\\d+/g) ?? [];\n const day = nums.find((n) => +n >= 1 && +n <= 31 && n.length <= 2);\n const year = nums.find((n) => n.length === 4);\n if (day && year) return iso(+year, mon + 1, +day);\n }\n return null;\n}\n\nfunction iso(y: number, mo: number, d: number): string | null {\n if (mo < 1 || mo > 12 || d < 1 || d > 31 || y < 1900 || y > 2100) return null;\n const dt = new Date(Date.UTC(y, mo - 1, d));\n if (dt.getUTCMonth() !== mo - 1 || dt.getUTCDate() !== d) return null;\n return dt.toISOString().slice(0, 10);\n}\n\n/** Turns loose phrasing into (a) a generous upstream fetch range and (b) the\n * narrow range/weekday/time-of-day the caller actually asked for. The handler\n * filters to the ask and falls back to the closest alternatives in the fetch\n * range, so \"any Wednesday?\" is one round trip either way. */\ntype Window = {\n start: string; // fetch range sent upstream (generous)\n end: string;\n from: string; // the range the caller asked for (narrow)\n to: string;\n days: number[] | null; // 0=Sunday..6=Saturday\n hours: [number, number] | null; // [minHour, maxHour) on the slot's local time\n asked: string | null; // speakable description of the ask, for messages\n};\n\nconst WEEKDAYS = [\n \"sunday\", \"monday\", \"tuesday\", \"wednesday\", \"thursday\", \"friday\", \"saturday\",\n];\n\nfunction parseWindow(when: unknown): Window {\n const s = String(when ?? \"\").trim().toLowerCase();\n const today = new Date();\n const day = (n: number) =>\n new Date(today.getTime() + n * 86400000).toISOString().slice(0, 10);\n\n const askedBits: string[] = [];\n let from = day(0);\n let to = day(13); // default ask: the next two weeks\n let ranged = false;\n\n // Explicit dates: \"2026-08-05\", \"August 5th\", \"8/5\".\n const iso = s.match(/(\\d{4})-(\\d{2})-(\\d{2})/);\n const monthIdx = MONTHS.findIndex((m) => s.includes(m));\n if (iso) {\n from = to = iso[0];\n ranged = true;\n askedBits.push(`on ${iso[0]}`);\n } else if (monthIdx >= 0) {\n const dayNum = (s.match(/\\d{1,2}/g) ?? []).map(Number).find((n) => n >= 1 && n <= 31);\n if (dayNum) {\n let y = today.getUTCFullYear();\n const candidate = `${y}-${String(monthIdx + 1).padStart(2, \"0\")}-${String(dayNum).padStart(2, \"0\")}`;\n if (candidate < day(0)) y++;\n from = to = `${y}-${String(monthIdx + 1).padStart(2, \"0\")}-${String(dayNum).padStart(2, \"0\")}`;\n ranged = true;\n askedBits.push(`on ${MONTHS[monthIdx]} ${dayNum}`);\n }\n }\n\n if (!ranged) {\n if (/today|asap|soon as possible|earliest/.test(s)) {\n to = day(3);\n ranged = true;\n askedBits.push(\"as soon as possible\");\n } else if (/tomorrow/.test(s)) {\n from = to = day(1);\n ranged = true;\n askedBits.push(\"tomorrow\");\n } else if (/this week/.test(s)) {\n to = day(6);\n ranged = true;\n askedBits.push(\"this week\");\n } else if (/next week/.test(s)) {\n from = day(7);\n to = day(13);\n ranged = true;\n askedBits.push(\"next week\");\n } else if (/several weeks|few weeks|weeks ahead|later|further out|any ?time|whenever/.test(s)) {\n to = day(35);\n ranged = true;\n }\n }\n\n // Weekdays: \"Wednesday\", \"later Tuesdays or Wednesdays\", \"weekend\".\n let days: number[] | null = null;\n const dayHits = WEEKDAYS.map((w, i) => (s.includes(w) ? i : -1)).filter((i) => i >= 0);\n if (/weekend/.test(s)) dayHits.push(0, 6);\n if (dayHits.length > 0) {\n days = [...new Set(dayHits)];\n if (!ranged || from === to) {\n // A weekday ask means \"some Wednesday\", so look several weeks out.\n if (from === to && ranged) { /* explicit date wins over its own weekday */ }\n else to = day(35);\n }\n askedBits.push(`on a ${days.map((d) => WEEKDAYS[d]).join(\" or \")}`);\n }\n\n // Time of day.\n let hours: [number, number] | null = null;\n if (/morning/.test(s)) hours = [0, 12];\n else if (/afternoon/.test(s)) hours = [12, 17];\n else if (/evening|after work|night/.test(s)) hours = [17, 24];\n if (hours) askedBits.push([\"\", \"in the morning\", \"in the afternoon\", \"in the evening\"][hours[0] === 0 ? 1 : hours[0] === 12 ? 2 : 3]);\n\n // Fetch generously: from today through at least 35 days, and always past `to`.\n const end = to > day(35) ? to : day(35);\n return {\n start: day(0),\n end,\n from,\n to,\n days,\n hours,\n asked: askedBits.length ? askedBits.join(\" \") : null,\n };\n}\n\n/** Naive \"2026-08-04T14:15:00\" -> \"Tuesday, August 4th at 2:15 PM\". */\nfunction speak(dt: string): string {\n const d = new Date(`${dt.slice(0, 19)}Z`);\n if (isNaN(d.getTime())) return dt;\n const wd = d.toLocaleDateString(\"en-US\", { weekday: \"long\", timeZone: \"UTC\" });\n const mo = d.toLocaleDateString(\"en-US\", { month: \"long\", timeZone: \"UTC\" });\n const day = d.getUTCDate();\n const suffix = day % 10 === 1 && day !== 11\n ? \"st\"\n : day % 10 === 2 && day !== 12\n ? \"nd\"\n : day % 10 === 3 && day !== 13\n ? \"rd\"\n : \"th\";\n let h = d.getUTCHours();\n const min = d.getUTCMinutes();\n const ampm = h >= 12 ? \"PM\" : \"AM\";\n h = h % 12 || 12;\n const time = min === 0 ? `${h} ${ampm}` : `${h}:${String(min).padStart(2, \"0\")} ${ampm}`;\n return `${wd}, ${mo} ${day}${suffix} at ${time}`;\n}\n\n/** \"9:30 am\" + \"2026-08-02\" -> \"2026-08-02T09:30:00\". */\nfunction slotToDateTime(date: string, slot: string): string | null {\n const m = String(slot).trim().toLowerCase().match(/^(\\d{1,2}):(\\d{2})\\s*(am|pm)$/);\n if (!m) return null;\n const h = (+m[1] % 12) + (m[3] === \"pm\" ? 12 : 0);\n return `${date}T${String(h).padStart(2, \"0\")}:${m[2]}:00`;\n}\n\n/** \"2026-08-02T09:30:00\" -> \"9:30 am\". */\nfunction dateTimeToSlot(dt: string): string {\n const h24 = +dt.slice(11, 13);\n const min = dt.slice(14, 16);\n const ampm = h24 >= 12 ? \"pm\" : \"am\";\n const h = h24 % 12 || 12;\n return `${h}:${min} ${ampm}`;\n}\n\nfunction normalisePhone(input: unknown): string | null {\n const digits = String(input ?? \"\").replace(/\\D/g, \"\");\n if (digits.length === 10) return digits;\n if (digits.length === 11 && digits.startsWith(\"1\")) return digits.slice(1);\n return null;\n}\n\n/** 10 digits -> \"###-###-####\" (doc format). */\nfunction dashPhone(digits: string): string {\n return `${digits.slice(0, 3)}-${digits.slice(3, 6)}-${digits.slice(6)}`;\n}\n\nfunction normaliseGender(input: unknown): string {\n const s = String(input ?? \"\").trim().toLowerCase();\n if (/^m(ale)?$/.test(s) || s === \"man\") return \"male\";\n if (/^f(emale)?$/.test(s) || s === \"woman\") return \"female\";\n if (/non.?binary|other/.test(s)) return \"other\";\n return \"unknown\";\n}\n\n/** First-3-digits ZIP prefix -> USPS state. Callers should never be asked for\n * their state when they are about to give a ZIP anyway — and asking for both\n * invites contradictions (a real call gave \"Texas\" + ZIP 95407, California). */\nconst ZIP_RANGES: Array<[number, number, string]> = [\n [5, 5, \"NY\"], [6, 9, \"PR\"], [10, 27, \"MA\"], [28, 29, \"RI\"], [30, 38, \"NH\"],\n [39, 49, \"ME\"], [50, 59, \"VT\"], [60, 69, \"CT\"], [70, 89, \"NJ\"],\n [100, 149, \"NY\"], [150, 196, \"PA\"], [197, 199, \"DE\"], [200, 200, \"DC\"],\n [201, 201, \"VA\"], [202, 205, \"DC\"], [206, 219, \"MD\"], [220, 246, \"VA\"],\n [247, 269, \"WV\"], [270, 289, \"NC\"], [290, 299, \"SC\"], [300, 319, \"GA\"],\n [320, 349, \"FL\"], [350, 369, \"AL\"], [370, 385, \"TN\"], [386, 397, \"MS\"],\n [398, 399, \"GA\"], [400, 427, \"KY\"], [430, 459, \"OH\"], [460, 479, \"IN\"],\n [480, 499, \"MI\"], [500, 528, \"IA\"], [530, 549, \"WI\"], [550, 567, \"MN\"],\n [570, 577, \"SD\"], [580, 588, \"ND\"], [590, 599, \"MT\"], [600, 629, \"IL\"],\n [630, 658, \"MO\"], [660, 679, \"KS\"], [680, 693, \"NE\"], [700, 714, \"LA\"],\n [716, 729, \"AR\"], [730, 749, \"OK\"], [750, 799, \"TX\"], [800, 816, \"CO\"],\n [820, 831, \"WY\"], [832, 838, \"ID\"], [840, 847, \"UT\"], [850, 865, \"AZ\"],\n [870, 884, \"NM\"], [885, 885, \"TX\"], [889, 898, \"NV\"], [900, 961, \"CA\"],\n [962, 966, \"CA\"], [967, 968, \"HI\"], [970, 979, \"OR\"], [980, 994, \"WA\"],\n [995, 999, \"AK\"],\n];\n\nexport function zipToState(zip: string): string | null {\n const p = parseInt(zip.slice(0, 3), 10);\n if (isNaN(p)) return null;\n for (const [lo, hi, st] of ZIP_RANGES) if (p >= lo && p <= hi) return st;\n return null;\n}\n\n/** Real ZIP centroid from the GeoNames table; deterministic stand-in when\n * the ZIP is unknown (doc requires position on every timeslot request). */\nasync function zipPosition(zip: string): Promise<{ latitude: number; longitude: number }> {\n const info = await stores.zipInfo(zip);\n if (info) return { latitude: info.lat, longitude: info.lon };\n const seed = hash(zip);\n return {\n latitude: Number((24 + (seed % 2500) / 100).toFixed(4)),\n longitude: Number((-(66 + ((seed >> 4) % 5900) / 100)).toFixed(4)),\n };\n}\n\nfunction ref(): string {\n const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // no I/O/0/1\n return Array.from(\n crypto.getRandomValues(new Uint8Array(4)),\n (n) => alphabet[n % alphabet.length],\n ).join(\"\");\n}\n\ntype Ok = { ok: true; status: number; data: any };\ntype Err = { ok: false; status: number; code: string; message: string };\n\n/** Calls upstream and collapses the 200-on-error envelope into a real result. */\nasync function upstream(\n c: any,\n path: string,\n payload: Record,\n method: \"POST\" | \"PATCH\" = \"POST\",\n): Promise {\n let res: Response;\n try {\n res = await fetch(`${UPSTREAM(c)}${path}`, {\n method,\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiKey: API_KEY(), affId: AFF_ID(), ...payload }),\n });\n } catch (e) {\n return { ok: false, status: 502, code: \"upstream_unreachable\", message: String(e) };\n }\n\n const text = await res.text();\n let data: any = null;\n if (text.trim()) {\n try {\n data = JSON.parse(text);\n } catch {\n // Akamai challenge pages and HTML error pages land here.\n return {\n ok: false,\n status: 502,\n code: \"upstream_not_json\",\n message: `Upstream returned non-JSON (HTTP ${res.status})`,\n };\n }\n }\n\n // The critical check: a 200 can still be a failure.\n if (data && typeof data === \"object\" && data.errCode) {\n const map: Record = {\n \"400\": 400, \"403\": 401, \"404\": 404, \"409\": 409, \"410\": 410,\n };\n return {\n ok: false,\n status: map[String(data.errCode)] ?? 502,\n code: `walgreens_${data.errCode}`,\n message: String(data.errMsg ?? \"Upstream error\").trim(),\n };\n }\n if (!res.ok) {\n return {\n ok: false,\n status: res.status,\n code: `http_${res.status}`,\n message: `Upstream HTTP ${res.status}`,\n };\n }\n return { ok: true, status: res.status, data };\n}\n\n/** Reads the body, tolerating the empty-args defect. */\nasync function read(c: any): Promise<{ b: any; callId: string | null }> {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch {\n b = null;\n }\n if (!b || typeof b !== \"object\") b = {};\n // Vapi sends \"blank\" for an unset Liquid variable — and when a variable was\n // never extracted at all (e.g. add_patient called before any hold), the raw\n // template string \"{{ engagementId }}\" comes through verbatim. Both mean\n // \"no value\".\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\") b[k] = null;\n else if (typeof b[k] === \"string\" && /^\\s*\\{\\{.*\\}\\}\\s*$/.test(b[k])) b[k] = null;\n }\n return { b, callId: b.call_id ?? null };\n}\n\nfunction fail(c: any, status: number, code: string, message: string) {\n return c.json({ ok: false, error_code: code, message }, status);\n}\n\n// -------------------------------------------------------- 1. check_eligibility\napp.post(\"/v1/check_eligibility\", async (c) => {\n const { b, callId } = await read(c);\n const dob = parseDob(b.date_of_birth);\n const zip = String(b.zip_code ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n // State is derived from the ZIP so the caller is never asked for it.\n // An explicit state is accepted as an override for the rare ZIP we can't map.\n const state = zip.length === 5\n ? zipToState(zip) ?? String(b.state ?? \"\").trim().toUpperCase()\n : String(b.state ?? \"\").trim().toUpperCase();\n\n if (!dob || !/^[A-Z]{2}$/.test(state)) {\n await db.log(\"check_eligibility\", callId, b, 400, \"missing/invalid args\");\n return fail(\n c,\n 400,\n \"missing_arguments\",\n \"Both date_of_birth and a 5-digit zip_code are required. Ask the caller for whichever is missing and call this tool again.\",\n );\n }\n\n const r = await upstream(c, \"/api/vaccine/scheduling/eligibility/v1\", { state, dob });\n await db.log(\"check_eligibility\", callId, { state, dob }, r.ok ? 200 : r.status);\n if (!r.ok) return fail(c, r.status, r.code, r.message);\n\n // Doc shape: eligibleVaccineList / inEligibleVaccineList; screening questions\n // ride in restriction objects that carry a `question`.\n const questionsOf = (v: any) =>\n [...(v.restrictions ?? []), ...(v.warnings ?? [])]\n .map((x: any) => x?.question)\n .filter(Boolean);\n const eligible = (r.data.eligibleVaccineList ?? []).map((v: any) => ({\n vaccine: v.displayName,\n code: v.vaccineCode,\n screening_questions: questionsOf(v),\n }));\n const ineligible = (r.data.inEligibleVaccineList ?? []).map((v: any) => ({\n vaccine: v.displayName,\n reason: (v.restrictions ?? [])[0]?.message ?? \"Not eligible\",\n }));\n\n return c.json({\n ok: true,\n date_of_birth: dob,\n eligible_vaccines: eligible.map((e: any) => e.vaccine),\n ineligible_vaccines: ineligible,\n screening_by_vaccine: Object.fromEntries(\n eligible.filter((e: any) => e.screening_questions.length).map((\n e: any,\n ) => [e.vaccine, e.screening_questions]),\n ),\n });\n});\n\n// ----------------------------------------------------------- 1.5 find_stores\n// Two closest Walgreens to the caller's ZIP, plus the exact preference\n// question to ask. Street-only phrasing when both stores are in the caller's\n// own city; street + city otherwise.\napp.post(\"/v1/find_stores\", async (c) => {\n const { b, callId } = await read(c);\n const zip = String(b.zip_code ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n if (zip.length !== 5) {\n await db.log(\"find_stores\", callId, b, 400, \"missing zip\");\n return fail(c, 400, \"missing_arguments\", \"A 5-digit zip_code is required.\");\n }\n\n const info = await stores.zipInfo(zip);\n const pos = await zipPosition(zip);\n const near = await stores.nearestStores(pos.latitude, pos.longitude, 2);\n if (near.length < 2) {\n await db.log(\"find_stores\", callId, b, 200, `only ${near.length} stores`);\n return c.json({\n ok: true,\n stores: near.map((s) => ({\n store_ref: null,\n street: stores.speechStreet(s.street),\n city: s.city,\n miles: s.miles,\n })),\n question: null,\n message: near.length === 0\n ? \"No Walgreens found near that ZIP. Double-check the ZIP with the caller.\"\n : \"Only one store nearby — confirm it with the caller instead of offering a choice.\",\n });\n }\n\n const [a, bStore] = near;\n const refs: string[] = [];\n for (const s of near) {\n const r = ref();\n await stores.putStoreRef(r, s.id);\n refs.push(r);\n }\n\n await db.log(\"find_stores\", callId, { zip }, 200, `${a.city} / ${bStore.city}`);\n return c.json({\n ok: true,\n caller_city: info?.city ?? null,\n stores: [\n { store_ref: refs[0], street: stores.speechStreet(a.street), city: a.city, miles: a.miles },\n { store_ref: refs[1], street: stores.speechStreet(bStore.street), city: bStore.city, miles: bStore.miles },\n ],\n question: stores.preferenceQuestion(a, bStore, info?.city ?? null),\n message: \"Ask the caller the question verbatim, then pass their choice's store_ref to find_appointments. Never read the store_ref aloud.\",\n });\n});\n\n// ---------------------------------------------------------- seed data loading\n// One-time bulk loads for the store directory. Guarded by a shared token so\n// random visitors can't write rows; the data itself is public reference data.\nconst SEED_TOKEN = () => Deno.env.get(\"SEED_TOKEN\") || \"wag-demo-seed\";\n\napp.post(\"/admin/zips/load\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n const body = await c.req.json();\n const n = await stores.loadZips(body.rows ?? []);\n return c.json({ ok: true, loaded: n });\n});\n\napp.post(\"/admin/stores/load\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n const body = await c.req.json();\n const n = await stores.loadStores(body.rows ?? []);\n return c.json({ ok: true, loaded: n });\n});\n\napp.post(\"/admin/stores/load_wag\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n const body = await c.req.json();\n return c.json({ ok: true, ...(await stores.loadWagStores(body.rows ?? [])) });\n});\n\napp.post(\"/admin/stores/purge_non_wag\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n return c.json({ ok: true, purged: await stores.purgeNonWag() });\n});\n\n// Exact-coordinate patches from the walgreens.com locator API ({no, lat, lon}).\napp.post(\"/admin/stores/fix_coords\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n const body = await c.req.json();\n const n = await stores.fixCoords(body.rows ?? []);\n return c.json({ ok: true, updated: n });\n});\n\n// Stores still sitting at their ZIP centroid (i.e. needing exact coordinates).\napp.get(\"/admin/stores/centroid_parked\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n return c.json({ rows: await stores.centroidParked() });\n});\n\n// Recent tool-call log rows as JSON, for offline analysis (bake-off grading).\napp.get(\"/admin/log/recent\", async (c) => {\n if (c.req.header(\"x-seed-token\") !== SEED_TOKEN()) return c.json({ error: \"bad token\" }, 401);\n const since = Number(c.req.query(\"since\") ?? 0);\n const rows = await db.logSince(since);\n return c.json({ rows });\n});\n\napp.get(\"/admin/stores/stats\", async (c) => c.json(await stores.stats()));\n\n// ------------------------------------------------------- 2. find_appointments\napp.post(\"/v1/find_appointments\", async (c) => {\n const { b, callId } = await read(c);\n // DOB is optional here: availability is searched for the whole group before\n // anyone's date of birth is collected. Eligibility is checked per person later.\n const dob = parseDob(b.date_of_birth) ?? \"1980-01-01\";\n const zip = String(b.zip_code ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n const state = zip.length === 5\n ? zipToState(zip) ?? String(b.state ?? \"\").trim().toUpperCase()\n : String(b.state ?? \"\").trim().toUpperCase();\n\n const names: string[] = Array.isArray(b.vaccines)\n ? b.vaccines\n : b.vaccines\n ? [b.vaccines]\n : [];\n const resolved = names.map((n) => findVaccine(n)).filter(Boolean) as any[];\n\n // party_size is genuinely required: without it the room-for-the-whole-group\n // check silently doesn't run, which is how a group ends up offered a slot\n // that can't fit them. The model omits schema-required fields under load, so\n // enforce it here.\n const partyRaw = parseInt(String(b.party_size ?? \"\"), 10);\n if (!state || zip.length !== 5 || resolved.length === 0 || !partyRaw) {\n await db.log(\"find_appointments\", callId, b, 400, \"missing/invalid args\");\n return fail(\n c,\n 400,\n \"missing_arguments\",\n \"Required: a 5-digit zip_code, at least one recognised vaccine, and party_size \" +\n \"(how many people are being vaccinated — 1 for a single caller).\",\n );\n }\n if (resolved.length > 4) {\n return fail(c, 400, \"too_many_vaccines\", \"Walgreens allows at most 4 vaccines per search.\");\n }\n\n // Optional: a store_ref from find_stores narrows results to the chosen store.\n let chosen: stores.Store | null = null;\n if (b.store_ref) {\n chosen = await stores.resolveStoreRef(String(b.store_ref));\n if (!chosen) {\n await db.log(\"find_appointments\", callId, b, 404, `unknown store_ref: ${String(b.store_ref).slice(0, 20)}`);\n return fail(\n c,\n 404,\n \"unknown_store\",\n \"That store reference is not recognised. Run find_stores again and re-ask the caller's preference.\",\n );\n }\n }\n\n const w = parseWindow(b.when);\n const r = await upstream(c, \"/api/vaccine/scheduling/timeslots/v1\", {\n state,\n zipCode: zip,\n dob,\n vaccine: resolved.map((v) => v.code),\n position: chosen ? { latitude: chosen.lat, longitude: chosen.lon } : await zipPosition(zip),\n appointmentAvailability: { startDateTime: w.start, endDateTime: w.end },\n });\n\n // \"Nothing available\" is a normal conversational outcome, not a failure.\n if (!r.ok && r.code === \"walgreens_404\") {\n await db.log(\"find_appointments\", callId, b, 200, \"no availability\");\n return c.json({\n ok: true,\n options: [],\n message: `No ${resolved.map((v) => v.spoken).join(\" or \")} appointments near ${zip} between ${w.start} and ${w.end}.`,\n });\n }\n if (!r.ok) {\n await db.log(\"find_appointments\", callId, b, r.status, r.message);\n return fail(c, r.status, r.code, r.message);\n }\n\n let candidates: any[] = r.data.locations ?? [];\n if (chosen) {\n candidates = candidates.filter((l: any) => String(l.locationId) === chosen!.id);\n if (candidates.length === 0) {\n await db.log(\"find_appointments\", callId, b, 200, \"chosen store has no availability\");\n return c.json({\n ok: true,\n options: [],\n message: `No availability at the chosen store between ${w.start} and ${w.end}. Offer to search the other store or a different day.`,\n });\n }\n }\n\n // Flatten every slot in the fetch range, then narrow to the caller's ask.\n // Doc shape: per-date appointmentAvailability with \"9:30 am\" slot strings and\n // manufacturer productIds, which the hold call needs verbatim.\n type Cand = { locationId: string; store: string; miles: number; dt: string; vaccines: any[] };\n let all: Cand[] = [];\n for (const loc of candidates.slice(0, 3)) {\n for (const avail of loc.appointmentAvailability ?? []) {\n for (const slot of avail.slots ?? []) {\n const dt = slotToDateTime(avail.date, slot);\n if (!dt) continue;\n all.push({\n locationId: String(loc.locationId),\n store: `${loc.address.line1}, ${loc.address.city}`,\n miles: loc.distance,\n dt,\n vaccines: (avail.manufacturer ?? []).map((mfr: any) => ({\n code: mfr.vaccineCode,\n productId: mfr.productId,\n rxRequired: mfr.prescriptionRequired === true,\n })),\n });\n }\n }\n }\n all.sort((x, y) => (x.dt < y.dt ? -1 : 1));\n\n // Group bookings: only offer slots with room for the whole party.\n const SLOT_CAPACITY = 6;\n const party = Math.max(1, Math.min(6, parseInt(String(b.party_size ?? \"1\"), 10) || 1));\n const counts = new Map>();\n for (const locId of new Set(all.map((x) => x.locationId))) {\n counts.set(locId, await db.activeSlotCounts(locId));\n }\n all = all.filter((x) =>\n SLOT_CAPACITY - (counts.get(x.locationId)?.get(x.dt) ?? 0) >= party\n );\n\n const dowOf = (dt: string) => new Date(`${dt.slice(0, 10)}T00:00:00Z`).getUTCDay();\n const hourOf = (dt: string) => +dt.slice(11, 13);\n const askMatch = (x: Cand) =>\n x.dt.slice(0, 10) >= w.from && x.dt.slice(0, 10) <= w.to &&\n (!w.days || w.days.includes(dowOf(x.dt))) &&\n (!w.hours || (hourOf(x.dt) >= w.hours[0] && hourOf(x.dt) < w.hours[1]));\n\n let pool = all.filter(askMatch);\n let fellBack = false;\n if (pool.length === 0 && all.length > 0) {\n // Nothing matches the ask — return the closest alternatives instead of an\n // empty list, so the agent never needs a second search round trip.\n fellBack = true;\n const center = new Date(`${w.from}T12:00:00Z`).getTime();\n pool = [...all].sort((x, y) =>\n Math.abs(new Date(`${x.dt}Z`).getTime() - center) -\n Math.abs(new Date(`${y.dt}Z`).getTime() - center)\n ).slice(0, 8).sort((x, y) => (x.dt < y.dt ? -1 : 1));\n }\n\n // Spread the options across different days rather than clustering on the\n // earliest one: first slot of each day, then second, and so on.\n const spreadPick = (list: Cand[], limit: number): Cand[] => {\n const byDate = new Map();\n for (const x of list) {\n const d = x.dt.slice(0, 10);\n if (!byDate.has(d)) byDate.set(d, []);\n byDate.get(d)!.push(x);\n }\n const dates = [...byDate.keys()].sort();\n const out: Cand[] = [];\n for (let round = 0; out.length < limit; round++) {\n let added = false;\n for (const d of dates) {\n const arr = byDate.get(d)!;\n if (arr.length > round && out.length < limit) {\n out.push(arr[round]);\n added = true;\n }\n }\n if (!added) break;\n }\n return out.sort((x, y) => (x.dt < y.dt ? -1 : 1));\n };\n\n let picked: Cand[];\n if (chosen) {\n picked = spreadPick(pool, 6);\n } else {\n picked = [];\n for (const locId of [...new Set(pool.map((x) => x.locationId))].slice(0, 3)) {\n picked.push(...spreadPick(pool.filter((x) => x.locationId === locId), 3));\n }\n }\n\n const options: any[] = [];\n for (const x of picked) {\n const id = ref();\n await db.putSlotRef({\n ref: id,\n locationId: x.locationId,\n storeAddress: x.store,\n appointmentDt: x.dt,\n vaccineCodes: x.vaccines,\n });\n options.push({ slot_ref: id, store: x.store, miles: x.miles, when: speak(x.dt) });\n }\n\n const askLabel = w.asked ?? \"in that window\";\n await db.log(\n \"find_appointments\",\n callId,\n b,\n 200,\n `${options.length} options${fellBack ? \" (fallback)\" : \"\"}${party > 1 ? ` party=${party}` : \"\"}`,\n );\n return c.json({\n ok: true,\n searched: resolved.map((v) => v.spoken).join(\", \"),\n ...(party > 1 ? { party_size: party, note: \"Every option has room for the whole group.\" } : {}),\n options,\n message: options.length === 0\n ? \"No availability at all in the next several weeks. Offer the other store.\"\n : fellBack\n ? `Nothing available ${askLabel}. These are the closest alternatives — offer two or three of them now instead of searching again.`\n : \"Read at most three aloud, favouring different days. Use slot_ref when holding.\",\n });\n});\n\n// ---------------------------------------------------------- 3. hold_appointment\napp.post(\"/v1/hold_appointment\", async (c) => {\n const { b, callId } = await read(c);\n await db.init();\n const slotRef = String(b.slot_ref ?? \"\").trim().toUpperCase();\n if (!slotRef) {\n await db.log(\"hold_appointment\", callId, b, 400, \"missing slot_ref\");\n return fail(c, 400, \"missing_arguments\", \"slot_ref is required. Run find_appointments first.\");\n }\n\n const slot = await db.getSlotRef(slotRef);\n if (!slot) {\n return fail(\n c,\n 404,\n \"unknown_slot\",\n \"That slot reference is not recognised. Run find_appointments again and offer fresh times.\",\n );\n }\n\n // vaccine_codes rows are [{code, productId, rxRequired}]; tolerate the older\n // plain-string form so stale slot refs from before the reshape still hold.\n const stored: any[] = JSON.parse(String(slot.vaccine_codes));\n let vaccines = stored.map((entry: any) =>\n typeof entry === \"string\"\n ? {\n code: entry,\n productId: findVaccine(entry)?.productId ?? `P${entry.padStart(3, \"0\")}01`,\n rxRequired: false,\n }\n : { code: entry.code, productId: entry.productId, rxRequired: entry.rxRequired === true }\n );\n // A group searches with the union of everyone's vaccines; each person's hold\n // narrows to just theirs. Names that don't match the slot fall back to the\n // slot's full list rather than failing the hold.\n const wanted = (Array.isArray(b.vaccines) ? b.vaccines : b.vaccines ? [b.vaccines] : [])\n .map((n: any) => findVaccine(n)?.code)\n .filter(Boolean);\n if (wanted.length) {\n const narrowed = vaccines.filter((vx) => wanted.includes(vx.code));\n if (narrowed.length) vaccines = narrowed;\n }\n const answers = Array.isArray(b.screening_answers) ? b.screening_answers : [];\n const needsQ = vaccines.some((vx) => (findVaccine(vx.code)?.screening.length ?? 0) > 0);\n if (needsQ && answers.length === 0) {\n return fail(\n c,\n 400,\n \"screening_required\",\n \"This vaccine requires the screening questions to be asked and answered before the slot can be held.\",\n );\n }\n\n const dt = String(slot.appointment_dt);\n\n // Capacity is filtered at search time, but concurrent callers (or parallel\n // test simulations) can race past that — enforce it at hold time too.\n const activeAtSlot = (await db.activeSlotCounts(String(slot.location_id))).get(dt) ?? 0;\n if (activeAtSlot >= 6) { // keep in sync with SLOT_CAPACITY in find_appointments\n await db.log(\"hold_appointment\", callId, b, 409, \"slot at capacity\");\n return fail(\n c,\n 409,\n \"slot_full\",\n \"That time just filled up. Apologise, run find_appointments again and offer fresh times.\",\n );\n }\n\n const r = await upstream(c, \"/api/vaccine/scheduling/hold/v1\", {\n locationId: slot.location_id,\n storeAddress: slot.store_address, // not a doc field; real service ignores it\n appointmentDate: `${dt}-05:00`,\n slot: dateTimeToSlot(dt),\n channel: \"Web\",\n client: \"vapi-voice-agent\",\n engagementType: \"Guest\",\n vaccines,\n userResponses: answers.length\n ? [{\n details: answers.map((a: any) => ({\n question: String(a?.question ?? \"\"),\n answer: String(a?.answer ?? \"\"),\n })),\n }]\n : [],\n });\n await db.log(\"hold_appointment\", callId, b, r.ok ? 200 : r.status);\n if (!r.ok) return fail(c, r.status, r.code, r.message);\n\n // Proxy-side only: remember which call made this hold, so the confirmation\n // text can be composed from the call's actual confirmed bookings.\n if (callId) await db.tagEngagementCall(String(r.data.engagementId), callId);\n\n return c.json({\n ok: true,\n engagement_id: r.data.engagementId,\n store: slot.store_address,\n when: speak(dt),\n hold_expires_in_minutes: Math.floor(db.HOLD_TTL_SECONDS / 60),\n message: \"Slot held but NOT booked. Collect patient details next, then confirm.\",\n });\n});\n\n// --------------------------------------------------------------- 4. add_patient\napp.post(\"/v1/add_patient\", async (c) => {\n const { b, callId } = await read(c);\n const engagementId = String(b.engagement_id ?? \"\").trim();\n const first = String(b.first_name ?? \"\").trim();\n const last = String(b.last_name ?? \"\").trim();\n const dob = parseDob(b.date_of_birth);\n // use_caller_number substitutes the true caller ID (injected server-side via\n // a static {{customer.number}} parameter) so the model never types digits it\n // didn't hear — hallucinated phone numbers are unrecoverable after the call.\n let phone: string | null = null;\n if (b.use_caller_number === true) phone = normalisePhone(b.caller_number);\n if (!phone) phone = normalisePhone(b.phone);\n\n if (!engagementId || !first || !last || !dob || !phone) {\n const missing = [\n !engagementId && \"engagement_id (hold the slot first)\",\n !first && \"first_name\",\n !last && \"last_name\",\n !dob && \"a valid date_of_birth\",\n !phone &&\n (b.use_caller_number === true\n ? \"a phone number — the caller's own number is not available on this call, so ask them to say a mobile number\"\n : \"a 10-digit phone number\"),\n ].filter(Boolean).join(\", \");\n await db.log(\"add_patient\", callId, b, 400, `missing: ${missing}`);\n return fail(c, 400, \"missing_arguments\", `Still needed: ${missing}.`);\n }\n\n if (b.sms_consent !== true) {\n await db.log(\"add_patient\", callId, b, 400, \"sms consent not granted\");\n return fail(\n c,\n 400,\n \"sms_consent_required\",\n \"You must read the SMS consent disclosure aloud and get an explicit yes before this tool will accept the patient.\",\n );\n }\n\n const r = await upstream(c, \"/api/vaccine/scheduling/patient/v1\", {\n engagementId,\n partnerId: PARTNER_ID(),\n firstName: first,\n lastName: last,\n dob,\n gender: normaliseGender(b.gender),\n contact: {\n phones: [{ type: \"Mobile\", number: dashPhone(phone), smsConsent: \"Agree\" }],\n emails: b.email ? [{ type: \"Email\", address: String(b.email) }] : [],\n },\n });\n await db.log(\"add_patient\", callId, b, r.ok ? 200 : r.status);\n\n if (!r.ok) {\n if (r.code === \"walgreens_410\") {\n return fail(\n c,\n 410,\n \"hold_expired\",\n \"The hold expired. Apologise, run find_appointments again and hold a new slot.\",\n );\n }\n if (r.code === \"walgreens_409\") {\n return fail(\n c,\n 409,\n \"engagement_already_has_patient\",\n \"This held slot already has a different patient attached. This person was NOT added. \" +\n \"Finish the current person's booking with confirm_appointment first, then run \" +\n \"find_appointments and hold_appointment fresh for this person, and only then add them.\",\n );\n }\n return fail(c, r.status, r.code, r.message);\n }\n return c.json({\n ok: true,\n message: \"Patient attached. Appointment is still NOT booked — call confirm_appointment now.\",\n });\n});\n\n// ---------------------------------------------------- 5. confirm_appointment\napp.post(\"/v1/confirm_appointment\", async (c) => {\n const { b, callId } = await read(c);\n const engagementId = String(b.engagement_id ?? \"\").trim();\n if (!engagementId) {\n await db.log(\"confirm_appointment\", callId, b, 400, \"missing engagement_id\");\n return fail(c, 400, \"missing_arguments\", \"engagement_id is required.\");\n }\n\n const r = await upstream(\n c,\n \"/api/vaccine/scheduling/confirm/v1\",\n { engagementId },\n \"PATCH\",\n );\n await db.log(\"confirm_appointment\", callId, b, r.ok ? 200 : r.status);\n\n if (!r.ok) {\n if (r.code === \"walgreens_409\") {\n const eng = await db.getEngagement(engagementId);\n if (eng?.status === \"confirmed\") {\n return c.json({\n ok: true,\n already_confirmed: true,\n confirmation_code: eng.confirmation_code,\n store: eng.store_address,\n when: speak(String(eng.appointment_dt)),\n });\n }\n }\n if (r.code === \"walgreens_410\") {\n return fail(c, 410, \"hold_expired\", \"The hold expired before confirmation. Nothing was booked.\");\n }\n return fail(c, r.status, r.code, r.message);\n }\n\n const eng = await db.getEngagement(engagementId);\n return c.json({\n ok: true,\n booked: true,\n confirmation_code: eng?.confirmation_code ?? null,\n store: eng?.store_address ?? null,\n when: eng ? speak(String(eng.appointment_dt)) : null,\n message: \"Appointment is confirmed. Read the store, day and time back to the caller.\",\n });\n});\n\n// ------------------------------------------------ 6. send_confirmation_sms\n// The text body is composed SERVER-SIDE from this call's confirmed bookings —\n// the model never writes it, so the text cannot contain details that drifted\n// from what was actually booked. Sends via Twilio when TWILIO_ACCOUNT_SID /\n// TWILIO_AUTH_TOKEN / TWILIO_FROM_NUMBER are set; otherwise it records the\n// text and returns an error so the agent recaps aloud instead of claiming a\n// text was sent that never will be.\napp.post(\"/v1/send_confirmation_sms\", async (c) => {\n const { b, callId } = await read(c);\n let phone: string | null = null;\n if (b.use_caller_number === true) phone = normalisePhone(b.caller_number);\n if (!phone) phone = normalisePhone(b.phone);\n if (!phone) {\n await db.log(\"send_confirmation_sms\", callId, b, 400, \"no phone\");\n return fail(\n c,\n 400,\n \"missing_arguments\",\n b.use_caller_number === true\n ? \"The caller's own number is not available on this call. Ask them for a mobile number.\"\n : \"A phone number is required — set use_caller_number, or pass the number the bookings were made with.\",\n );\n }\n if (!callId) {\n return fail(c, 400, \"missing_arguments\", \"No call reference — this tool only works during a call.\");\n }\n\n const rows = await db.confirmedByCall(callId);\n if (rows.length === 0) {\n await db.log(\"send_confirmation_sms\", callId, b, 404, \"no confirmed bookings\");\n return fail(\n c,\n 404,\n \"nothing_confirmed\",\n \"No confirmed bookings on this call yet. Only offer the text after confirm_appointment has succeeded.\",\n );\n }\n\n const lines = rows.map((e: any) => {\n const codes: any[] = JSON.parse(String(e.vaccine_codes));\n const names = codes\n .map((x: any) => findVaccine(typeof x === \"string\" ? x : x.code)?.spoken ?? \"vaccine\")\n .join(\" + \");\n const p = e.patient ? JSON.parse(e.patient) : null;\n const who = p ? `${p.firstName} ${p.lastName}` : \"Guest\";\n const conf = e.confirmation_code ? ` (conf ${e.confirmation_code})` : \"\";\n return `${who}: ${names} — ${speak(String(e.appointment_dt))} — ${e.store_address}${conf}`;\n });\n const body =\n `Walgreens Pharmacy appointment confirmation:\\n${lines.join(\"\\n\")}\\n` +\n `Bring your insurance card and a photo ID. Manage at walgreens.com`;\n\n const sid = Deno.env.get(\"TWILIO_ACCOUNT_SID\");\n const tok = Deno.env.get(\"TWILIO_AUTH_TOKEN\");\n const from = Deno.env.get(\"TWILIO_FROM_NUMBER\");\n if (sid && tok && from) {\n try {\n const resp = await fetch(\n `https://api.twilio.com/2010-04-01/Accounts/${sid}/Messages.json`,\n {\n method: \"POST\",\n headers: {\n authorization: `Basic ${btoa(`${sid}:${tok}`)}`,\n \"content-type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams({ To: `+1${phone}`, From: from, Body: body }),\n },\n );\n const data = await resp.json().catch(() => ({}));\n if (resp.ok) {\n await db.logSms({ callId, toPhone: phone, body, delivered: true, note: String(data.sid ?? \"\") });\n await db.log(\"send_confirmation_sms\", callId, { phone }, 200, \"delivered via twilio\");\n return c.json({\n ok: true,\n sent: true,\n people: rows.length,\n message:\n \"Text sent with every booking's details. Do not read the full recap aloud — just say the text is on its way and remind them to bring insurance card and photo ID.\",\n });\n }\n await db.logSms({\n callId,\n toPhone: phone,\n body,\n delivered: false,\n note: `twilio ${resp.status}: ${data.message ?? \"\"}`,\n });\n await db.log(\"send_confirmation_sms\", callId, { phone }, 502, `twilio ${resp.status}`);\n return fail(c, 502, \"sms_failed\", \"The text could not be sent. Apologise and read the full recap aloud instead.\");\n } catch (e) {\n await db.logSms({ callId, toPhone: phone, body, delivered: false, note: String(e) });\n await db.log(\"send_confirmation_sms\", callId, { phone }, 502, String(e));\n return fail(c, 502, \"sms_failed\", \"The text could not be sent. Apologise and read the full recap aloud instead.\");\n }\n }\n\n // No SMS credentials: record what would have been sent (visible on /admin),\n // but do NOT let the agent tell the caller a text is coming.\n await db.logSms({ callId, toPhone: phone, body, delivered: false, note: \"no SMS credentials configured\" });\n await db.log(\"send_confirmation_sms\", callId, { phone }, 503, \"logged only (no creds)\");\n return fail(\n c,\n 503,\n \"sms_not_configured\",\n \"Texting is not enabled on this line yet. Tell the caller you can't send the text after all, and read the full recap aloud instead. Do not retry.\",\n );\n});\n\napp.get(\"/v1/health\", (c) => c.json({ ok: true, upstream: UPSTREAM(c) }));\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[176],"b8607bf8-bfbc-47c4-ac08-66cb66367302","order_shim.ts","d7d11048-94f8-11f1-b989-1607ee4eb77e",92,["D",1786393505833],1,"// Key-order shim for the Walgreens eligibility endpoint.\n//\n// WHY THIS EXISTS — a Walgreens gateway defect, verified 2026-08-10 over 40 trials:\n// /api/vaccine/scheduling/eligibility/v1 requires the JSON key \"state\" to appear\n// BEFORE \"dob\" in the request body. When \"dob\" comes first it returns\n// 401 {\"code\":\"FC_908_DataValidationFailed\",\"message\":\"HMAC validation failed\"}\n// 10/10, and 10/10 succeeds when \"state\" is first. Identical values either way,\n// so their gateway is HMAC-ing the raw body bytes rather than the parsed object.\n//\n// Vapi normalises apiRequest body schema properties ALPHABETICALLY, so \"dob\"\n// always precedes \"state\" and a direct Vapi -> Walgreens call can never succeed.\n// This shim re-serialises the body in an accepted order and forwards it. It adds\n// no business logic and does not touch values.\n//\n// The other four scheduling endpoints are NOT order-sensitive (verified) and are\n// called directly from Vapi. Delete this shim once Walgreens fixes the gateway.\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./db.ts\";\n\nconst app = new Hono();\nconst TARGET = \"https://services-qa.walgreens.com\";\n\n/** Keys that must lead, in this order. Everything else keeps its original order. */\nconst FIRST = [\"state\", \"dob\"];\n\nfunction reorder(input: Record): Record {\n const out: Record = {};\n for (const k of FIRST) if (k in input) out[k] = input[k];\n for (const k of Object.keys(input)) if (!(k in out)) out[k] = input[k];\n return out;\n}\n\napp.all(\"/*\", async (c) => {\n const path = new URL(c.req.url).pathname.replace(/^\\/wg/, \"\");\n const raw = await c.req.text();\n\n let body = raw;\n let orderBefore = \"\";\n let orderAfter = \"\";\n try {\n const parsed = JSON.parse(raw);\n orderBefore = Object.keys(parsed).join(\",\");\n const fixed = reorder(parsed);\n orderAfter = Object.keys(fixed).join(\",\");\n body = JSON.stringify(fixed);\n } catch {\n // Not JSON — forward untouched.\n }\n\n try {\n const res = await fetch(`${TARGET}${path}`, {\n method: c.req.method,\n headers: { \"content-type\": \"application/json\" },\n body: body || undefined,\n });\n const text = await res.text();\n await db.log(\n `wg${path}`,\n null,\n { orderBefore, orderAfter },\n res.status,\n text.slice(0, 200) || \"(empty body)\",\n );\n\n // Second Walgreens/Vapi incompatibility: patient/v1 returns 201 and\n // confirm/v1 returns 204, both with a COMPLETELY EMPTY body. Vapi's\n // apiRequest tool unconditionally JSON-parses the response, so an empty\n // body surfaces to the model as\n // {\"type\":\"invalid-json\",\"message\":\"... Unexpected end of JSON input\"}\n // i.e. a successful booking is reported to the caller as a failure.\n // Giving the empty response a minimal JSON body fixes that without\n // inventing any information.\n if (!text.trim()) {\n const ok = res.status >= 200 && res.status < 300;\n return Response.json(\n ok\n ? { ok: true, upstreamStatus: res.status }\n : { errors: [{ status: res.status, code: `http_${res.status}`, message: \"Walgreens returned no body\" }] },\n { status: ok ? 200 : res.status },\n );\n }\n\n return new Response(text, {\n status: res.status,\n headers: { \"content-type\": res.headers.get(\"content-type\") ?? \"application/json\" },\n });\n } catch (e) {\n await db.log(`wg${path}`, null, { orderBefore, orderAfter }, 502, String(e));\n return c.json({ errors: [{ code: \"shim_unreachable\", message: String(e) }] }, 502);\n }\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[184],"08638ec9-4837-4d1b-82e4-f75ccf146f5f","mock.ts","acb45f60-8d3b-11f1-b60c-1607ee4eb77e",81,["D",1785955405418],8,"// Faithful mock of the Walgreens Scheduling API v1, modelled on the official\n// spec: https://developer.walgreens.com/sites/default/files/v1_Scheduling_API.html\n// (request/response shapes, field names, vaccine code table) combined with\n// behaviour verified live against services-qa.walgreens.com on 2026-07-31:\n// - Failures return HTTP *200* with an errCode in the body, whatever the\n// doc's status-code tables say. (Verified for auth; kept uniform here\n// because it is the trap the proxy exists to defuse.)\n// - The body is whitespace-padded, tab-indented JSON.\n// - The apiKey check runs BEFORE any body validation.\nimport { Hono } from \"npm:hono\";\nimport { findVaccine, hash, STORE_NAMES, VACCINES } from \"./data.ts\";\nimport * as db from \"./db.ts\";\nimport * as stores from \"./stores.ts\";\n\nconst app = new Hono();\n\nconst API_KEY = () => Deno.env.get(\"MOCK_API_KEY\") ?? \"MOCK_KEY\";\n\n/** Byte-for-byte shape of the real error envelope. */\nfunction wgError(errCode: string, errMsg: string) {\n const body = `\n {\n\\t\\t\\t\\t\"errCode\":\"${errCode}\",\n\\t\\t\\t\\t\"apiKey\":\"\",\n\\t\\t\\t\\t\"errMsg\":\"${errMsg}\" \n\\t\\t\\t}\n `;\n return new Response(body, {\n status: 200, // <-- the trap, on purpose\n headers: { \"content-type\": \"application/json\" },\n });\n}\n\nfunction auth(b: any): Response | null {\n if (!b || typeof b !== \"object\") return wgError(\"403\", \"Key doesn't Exists\");\n if (b.apiKey !== API_KEY()) return wgError(\"403\", \"Key doesn't Exists\");\n if (!b.affId) return wgError(\"403\", \"Key doesn't Exists\");\n return null;\n}\n\nfunction ageOn(dob: string, at = new Date()): { years: number; months: number } | null {\n const d = new Date(`${dob}T00:00:00Z`);\n if (isNaN(d.getTime())) return null;\n let months = (at.getUTCFullYear() - d.getUTCFullYear()) * 12 +\n (at.getUTCMonth() - d.getUTCMonth());\n if (at.getUTCDate() < d.getUTCDate()) months--;\n return { years: Math.floor(months / 12), months };\n}\n\nasync function body(c: any): Promise {\n try {\n return await c.req.json();\n } catch {\n return null;\n }\n}\n\n/** Age-gate a set of vaccine codes against a DOB. Returns an error message\n * for the first ineligible vaccine, or null if all pass. The model is\n * supposed to run eligibility first, but a skipped step must not let an\n * ineligible booking through — this is the server-side backstop. */\nfunction ageGate(dob: string, codes: string[]): string | null {\n const age = ageOn(dob);\n if (!age) return null; // dob validity is checked by the callers that require it\n for (const code of codes) {\n const v = findVaccine(code);\n if (!v) continue;\n if (age.months < v.minAgeMonths) {\n const req = v.minAgeMonths >= 12 ? `${Math.floor(v.minAgeMonths / 12)} years` : `${v.minAgeMonths} months`;\n return `Patient is not eligible for ${v.name} (vaccine ${v.code}): must be at least ${req} of age`;\n }\n if (v.maxAgeYears !== null && age.years > v.maxAgeYears) {\n return `Patient is not eligible for ${v.name} (vaccine ${v.code}): must be ${v.maxAgeYears} years of age or younger`;\n }\n }\n return null;\n}\n\n/** \"2026-08-02\", 9, 30 -> \"9:30 am\" (doc slot format). */\nfunction slotString(hour: number, minute: number): string {\n const ampm = hour >= 12 ? \"pm\" : \"am\";\n const h = hour % 12 || 12;\n return `${h}:${String(minute).padStart(2, \"0\")} ${ampm}`;\n}\n\n// ---------------------------------------------------------------- eligibility\n// Doc response: { state, age, category, dob, eligibleVaccineList,\n// inEligibleVaccineList }, vaccines carry displayName / restrictions /\n// warnings; restriction objects carry code/message and sometimes\n// question/answers or minimunAge (typo is the doc's own).\napp.post(\"/api/vaccine/scheduling/eligibility/v1\", async (c) => {\n const b = await body(c);\n const bad = auth(b);\n if (bad) return bad;\n\n if (!b.state) return wgError(\"400\", \"state is required\");\n if (!b.dob) return wgError(\"400\", \"dob is required\");\n const age = ageOn(b.dob);\n if (!age) return wgError(\"400\", \"dob must be in YYYY-MM-DD format\");\n\n const eligibleVaccineList: any[] = [];\n const inEligibleVaccineList: any[] = [];\n for (const [i, v] of VACCINES.entries()) {\n const tooYoung = age.months < v.minAgeMonths;\n const tooOld = v.maxAgeYears !== null && age.years > v.maxAgeYears;\n const base = {\n vaccineCode: v.code,\n displayName: v.name,\n eligible: !(tooYoung || tooOld),\n vaccineType: v.category,\n vaccineDisplayOrder: i + 1,\n multiDose: v.code === \"87\" || v.code === \"43\" || v.code === \"62\",\n seriesNumber: \"1\",\n group: age.years >= 18 ? \"Adult\" : \"Minor\",\n serviceId: `SVC-${v.code}`,\n };\n if (tooYoung || tooOld) {\n inEligibleVaccineList.push({\n ...base,\n restrictions: [\n tooYoung\n ? {\n code: \"WAG_FC_MIN_AGE\",\n message: `Patient must be at least ${\n v.minAgeMonths >= 12 ? `${Math.floor(v.minAgeMonths / 12)} years` : `${v.minAgeMonths} months`\n } of age`,\n vaccineCode: v.code,\n minimunAge: Math.floor(v.minAgeMonths / 12),\n }\n : {\n code: \"WAG_FC_MAX_AGE\",\n message: `Patient must be ${v.maxAgeYears} years of age or younger`,\n vaccineCode: v.code,\n maximumAge: v.maxAgeYears,\n },\n ],\n warnings: [],\n });\n } else {\n eligibleVaccineList.push({\n ...base,\n restrictions: v.screening.map((q) => ({\n code: \"WAG_FC_USER_RESPONSE\",\n message: \"This question must be answered before scheduling.\",\n question: q,\n answers: [\"Yes\", \"No\"],\n vaccineCode: v.code,\n })),\n warnings: v.prescriptionRequired\n ? [{\n code: \"WAG_FC_PRESCRIPTIONNEEDED_USER_RESPONSE\",\n message: \"This vaccine may require a prescription.\",\n vaccineCode: v.code,\n }]\n : [],\n });\n }\n }\n\n return c.json({\n state: b.state,\n age: age.years,\n category: { name: age.years >= 65 ? \"senior\" : age.years >= 18 ? \"adult\" : \"minor\" },\n dob: b.dob,\n eligibleVaccineList,\n inEligibleVaccineList,\n });\n});\n\n// ------------------------------------------------------------------ timeslots\n// Doc request: state, zipCode, dob, vaccine (max 4 IDs), position{lat,long},\n// appointmentAvailability{startDateTime, endDateTime}.\n// Doc response: locations[] with name/storenumber/description/position/\n// address{line1..zip}/phone[]/distance/timeZone and per-date\n// appointmentAvailability[{date, day, slots[\"9:30 am\"], numberOfSlotsAvailable,\n// manufacturer[{productId, vaccineCode, vaccineName, category,\n// prescriptionRequired}]}].\napp.post(\"/api/vaccine/scheduling/timeslots/v1\", async (c) => {\n const b = await body(c);\n const bad = auth(b);\n if (bad) return bad;\n\n if (!Array.isArray(b.vaccine) || b.vaccine.length === 0) {\n return wgError(\"400\", \"vaccine is required\");\n }\n if (b.vaccine.length > 4) {\n return wgError(\"400\", \"A maximum of 4 vaccine codes is allowed per request\");\n }\n if (!b.zipCode) return wgError(\"400\", \"zipCode is required\");\n if (!b.position || typeof b.position.latitude !== \"number\" || typeof b.position.longitude !== \"number\") {\n return wgError(\"400\", \"position with latitude and longitude is required\");\n }\n if (!b.dob) return wgError(\"400\", \"dob is required\");\n const gateMsg = ageGate(String(b.dob), b.vaccine.map(String));\n if (gateMsg) return wgError(\"400\", gateMsg);\n\n const start = new Date(`${b.appointmentAvailability?.startDateTime ?? \"\"}T00:00:00Z`);\n const endRaw = b.appointmentAvailability?.endDateTime;\n const end = endRaw ? new Date(`${endRaw}T00:00:00Z`) : new Date(start.getTime() + 6 * 86400000);\n if (isNaN(start.getTime()) || isNaN(end.getTime())) {\n return wgError(\"400\", \"appointmentAvailability startDateTime must be YYYY-MM-DD\");\n }\n\n const manufacturers = b.vaccine.map((code: string) => {\n const v = findVaccine(code);\n return {\n productId: v?.productId ?? `P${String(code).padStart(3, \"0\")}01`,\n vaccineCode: String(code),\n vaccineName: v?.name ?? \"Unknown\",\n category: v?.category ?? \"Routine\",\n prescriptionRequired: v?.prescriptionRequired ?? false,\n };\n });\n\n const zip = String(b.zipCode);\n const DOW = [\"su\", \"mo\", \"tu\", \"we\", \"th\", \"fr\", \"sa\"];\n\n /** All quarter-hour marks inside the store's pharmacy hours for a weekday.\n * This is the invariant that guarantees no slot outside store hours. */\n const marksWithin = (hours: Record>, dowKey: string): Array<[number, number]> => {\n const out: Array<[number, number]> = [];\n for (const [open, close] of hours[dowKey] ?? []) {\n const [oh, om] = open.split(\":\").map(Number);\n const [ch, cm] = close.split(\":\").map(Number);\n // last bookable slot is 30 min before pharmacy close\n for (let t = oh * 60 + Math.ceil(om / 15) * 15; t <= ch * 60 + cm - 30; t += 15) {\n out.push([Math.floor(t / 60), t % 60]);\n }\n }\n return out;\n };\n\n const buildAvailability = (storeId: string, hours: Record>) => {\n const availability: any[] = [];\n // Real inventory runs at least 30 days deep; cap the window at 45.\n for (let dayOffset = 0; dayOffset <= 45; dayOffset++) {\n const day = new Date(start.getTime() + dayOffset * 86400000);\n if (day > end) break;\n const dayStr = day.toISOString().slice(0, 10);\n const marks = marksWithin(hours, DOW[day.getUTCDay()]);\n if (marks.length === 0) continue; // pharmacy closed that day\n const daySeed = hash(`${storeId}:${dayStr}`);\n // 2-6 slots per store per open day — never a silently empty day.\n const count = 2 + (daySeed % 5);\n const picked = new Set();\n for (let i = 0; i < count; i++) {\n picked.add(hash(`${storeId}:${dayStr}:${i}`) % marks.length);\n }\n const slots = [...picked].sort((x, y) => x - y).map((i) => slotString(marks[i][0], marks[i][1]));\n if (slots.length === 0) continue;\n availability.push({\n date: dayStr,\n day: day.toLocaleDateString(\"en-US\", { weekday: \"long\", timeZone: \"UTC\" }),\n slots,\n numberOfSlotsAvailable: slots.length,\n manufacturer: manufacturers,\n });\n }\n return availability;\n };\n\n const locations: any[] = [];\n\n // Real store directory, when seeded. Falls back to synthetic stores so the\n // mock still works on an empty database.\n const near = await stores.nearestStores(b.position.latitude, b.position.longitude, 5);\n if (near.length > 0) {\n for (const st of near) {\n const availability = buildAvailability(st.id, st.hours);\n if (availability.length === 0) continue;\n locations.push({\n locationId: st.id,\n name: `Walgreens ${st.line1}`,\n storenumber: st.id.replace(/\\D/g, \"\").slice(-5) || \"0\",\n description: \"Walgreens Drug Store\",\n position: { latitude: st.lat, longitude: st.lon },\n address: {\n line1: st.line1,\n line2: \"\",\n city: st.city,\n state: st.state || (b.state ?? \"\"),\n country: \"US\",\n zip: st.zip || zip,\n },\n phone: [{ type: \"store\", number: \"800-925-4733\" }],\n distance: st.miles ?? 0,\n timeZone: \"local\",\n appointmentAvailability: availability,\n });\n }\n } else {\n const seed = hash(zip);\n const nStores = 2 + (seed % 3); // 2-4 stores\n for (let s = 0; s < nStores; s++) {\n const meta = STORE_NAMES[(seed + s) % STORE_NAMES.length];\n const number = 1000 + ((seed >> (s + 1)) % 8000);\n const locationId = String(3000 + ((seed + s * 977) % 6000));\n const availability = buildAvailability(locationId, stores.DEFAULT_HOURS);\n if (availability.length === 0) continue;\n locations.push({\n locationId,\n name: `Walgreens #${number}`,\n storenumber: String(number),\n description: \"Walgreens Drug Store\",\n position: {\n latitude: 41.85 + ((seed + s) % 100) / 1000,\n longitude: -87.65 + ((seed >> 3) % 100) / 1000,\n },\n address: {\n line1: `${number} ${meta.suffix}`,\n line2: \"\",\n city: meta.city,\n state: b.state ?? \"IL\",\n country: \"US\",\n zip,\n },\n phone: [{ type: \"store\", number: `312-555-0${String(100 + s)}` }],\n distance: Number((0.4 + ((seed + s * 31) % 70) / 10).toFixed(1)),\n timeZone: \"CST\",\n appointmentAvailability: availability,\n });\n }\n }\n\n if (locations.length === 0) {\n return wgError(\"404\", \"No appointments available for the selected criteria\");\n }\n locations.sort((a, b2) => a.distance - b2.distance);\n return c.json({ locations });\n});\n\n// ----------------------------------------------------------------------- hold\n// Doc request: locationId, appointmentDate (ISO with offset), slot (\"9:30 am\"),\n// channel (\"Web\"|\"Mobile\"), client, engagementType (\"Guest\"),\n// vaccines[{code, productId, rxRequired}], userResponses[{details[{question,\n// answer}]}]. Response: { engagementId }.\napp.post(\"/api/vaccine/scheduling/hold/v1\", async (c) => {\n const b = await body(c);\n const bad = auth(b);\n if (bad) return bad;\n await db.init();\n\n if (!b.locationId) return wgError(\"400\", \"locationId is required\");\n if (!b.appointmentDate || !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}/.test(String(b.appointmentDate))) {\n return wgError(\"400\", \"appointmentDate is required in ISO format\");\n }\n if (!b.slot) return wgError(\"400\", \"slot is required\");\n if (b.channel !== \"Web\" && b.channel !== \"Mobile\") {\n return wgError(\"400\", \"channel must be Web or Mobile\");\n }\n if (!b.client) return wgError(\"400\", \"client is required\");\n if (b.engagementType !== \"Guest\") return wgError(\"400\", \"engagementType must be Guest\");\n\n const vaccines: any[] = Array.isArray(b.vaccines) ? b.vaccines : [];\n if (vaccines.length === 0) return wgError(\"400\", \"vaccines is required\");\n for (const vx of vaccines) {\n if (!vx?.code || !vx?.productId || typeof vx?.rxRequired !== \"boolean\") {\n return wgError(\"400\", \"each vaccine requires code, productId and rxRequired\");\n }\n }\n const codes = vaccines.map((vx) => String(vx.code));\n\n // Any vaccine carrying user-response restrictions requires answers.\n const needsQ = codes.some((code) => (findVaccine(code)?.screening.length ?? 0) > 0);\n const details = (Array.isArray(b.userResponses) ? b.userResponses : [])\n .flatMap((u: any) => Array.isArray(u?.details) ? u.details : []);\n if (needsQ && details.length === 0) {\n return wgError(\"400\", \"Questionnaire responses are required for the selected vaccine\");\n }\n for (const d of details) {\n if (!d?.question || !d?.answer) {\n return wgError(\"400\", \"each userResponses detail requires question and answer\");\n }\n }\n\n const engagementId = `ENG-${crypto.randomUUID().slice(0, 8).toUpperCase()}`;\n await db.createEngagement({\n engagementId,\n locationId: String(b.locationId),\n // Not a doc field; the real service would ignore it. Kept so the admin\n // page can show a human-readable store.\n storeAddress: String(b.storeAddress ?? `Walgreens #${b.locationId}`),\n appointmentDt: String(b.appointmentDate).slice(0, 19),\n vaccineCodes: codes,\n });\n\n return c.json({ engagementId });\n});\n\n// -------------------------------------------------------------------- patient\n// Doc request: engagementId, partnerId, firstName, middleName?, lastName, dob,\n// gender (\"male\"|\"female\"|\"other\"|\"unknown\"), contact{phones[{type:\"Mobile\",\n// number:\"###-###-####\", smsConsent:\"Agree\"|\"Disagree\"}], emails[{type,\n// address}]}. Response: HTTP 201, no body. 409 when patient already exists.\napp.post(\"/api/vaccine/scheduling/patient/v1\", async (c) => {\n const b = await body(c);\n const bad = auth(b);\n if (bad) return bad;\n await db.init();\n\n const eng = await db.getEngagement(b.engagementId ?? \"\");\n if (!eng) return wgError(\"404\", \"Engagement not found\");\n if (Number(eng.expires_at) < db.now()) return wgError(\"410\", \"Appointment hold has expired\");\n if (eng.status === \"confirmed\") return wgError(\"409\", \"Appointment already confirmed\");\n // Doc: 409 = \"Patient info already exists\". Also stops two concurrent holds\n // from silently cross-wiring patients.\n if (eng.status === \"patient_attached\") {\n return wgError(\"409\", \"Patient info already exists\");\n }\n\n for (const f of [\"partnerId\", \"firstName\", \"lastName\", \"dob\"]) {\n if (!b[f]) return wgError(\"400\", `${f} is required`);\n }\n if (![\"male\", \"female\", \"other\", \"unknown\"].includes(b.gender)) {\n return wgError(\"400\", \"gender must be one of male, female, other, unknown\");\n }\n const phones: any[] = Array.isArray(b.contact?.phones) ? b.contact.phones : [];\n if (!Array.isArray(b.contact?.emails)) {\n return wgError(\"400\", \"contact.emails is required\");\n }\n const mobile = phones.find((p) => p?.type === \"Mobile\");\n if (!mobile || !/^\\d{3}-\\d{3}-\\d{4}$/.test(String(mobile.number ?? \"\"))) {\n return wgError(\"400\", \"contact.phones requires a Mobile number in ###-###-#### format\");\n }\n if (mobile.smsConsent !== \"Agree\" && mobile.smsConsent !== \"Disagree\") {\n return wgError(\"400\", \"smsConsent must be Agree or Disagree\");\n }\n if (mobile.smsConsent !== \"Agree\") {\n return wgError(\"400\", \"SMS consent must be accepted before attaching a patient\");\n }\n\n // Final backstop: the person being attached must be age-eligible for every\n // vaccine on the held engagement, whoever's DOB drove the slot search.\n const engCodes: string[] = JSON.parse(String(eng.vaccine_codes ?? \"[]\"))\n .map((x: any) => typeof x === \"string\" ? x : x?.code)\n .filter(Boolean);\n const patientGate = ageGate(String(b.dob), engCodes);\n if (patientGate) return wgError(\"400\", patientGate);\n\n await db.attachPatient(String(b.engagementId), {\n firstName: b.firstName,\n middleName: b.middleName ?? null,\n lastName: b.lastName,\n dob: b.dob,\n gender: b.gender,\n phone: mobile.number,\n email: b.contact.emails[0]?.address ?? null,\n smsConsent: true,\n });\n return c.body(null, 201);\n});\n\n// -------------------------------------------------------------------- confirm\n// Doc: PATCH, request { engagementId }, response HTTP 204 with no body.\napp.patch(\"/api/vaccine/scheduling/confirm/v1\", async (c) => {\n const b = await body(c);\n const bad = auth(b);\n if (bad) return bad;\n await db.init();\n\n const eng = await db.getEngagement(b.engagementId ?? \"\");\n if (!eng) return wgError(\"404\", \"Engagement not found\");\n if (Number(eng.expires_at) < db.now()) return wgError(\"410\", \"Appointment hold has expired\");\n if (eng.status === \"held\") return wgError(\"400\", \"Patient details must be attached before confirming\");\n if (eng.status === \"confirmed\") return wgError(\"409\", \"Appointment already confirmed\");\n\n const code = `WAG${hash(String(b.engagementId)) % 1000000}`.padEnd(9, \"0\");\n await db.confirmEngagement(String(b.engagementId), code);\n return c.body(null, 204);\n});\n\napp.all(\"*\", () => wgError(\"404\", \"Resource not found\"));\napp.onError((err) => Promise.reject(err));\n\nexport default app;\n",[192],"4e9a8f2d-365f-4bd2-94e5-b47b63fda6b9","main.tsx",183,["D",1788564694403],21,"http","/** @jsxImportSource https://esm.sh/react@18.2.0 */\n// Walgreens vaccine scheduling: mock upstream + voice-safe proxy for Vapi.\n//\n// /mock/api/vaccine/scheduling/* faithful Walgreens mock (200-on-error)\n// /v1/* what the Vapi tools call\n// /admin bookings + tool-call audit log\n//\n// Point at the real service by setting WALGREENS_BASE_URL, WALGREENS_API_KEY\n// and WALGREENS_AFF_ID. No other change is needed.\nimport { Hono } from \"npm:hono\";\nimport { renderToString } from \"npm:react-dom@18.2.0/server\";\nimport batch from \"./batch.ts\";\nimport echo from \"./echo.ts\";\nimport eligibility from \"./eligibility.ts\";\nimport flow from \"./flow.ts\";\nimport group from \"./group.ts\";\nimport handoff from \"./handoff.ts\";\nimport orderShim from \"./order_shim.ts\";\nimport mock from \"./mock.ts\";\nimport proxy from \"./proxy.ts\";\nimport * as db from \"./db.ts\";\nimport { dashboardHtml } from \"./dashboard.tsx\";\n\nconst app = new Hono();\n\napp.route(\"/echo\", echo);\napp.route(\"/wg\", orderShim);\napp.route(\"/flow\", flow);\napp.route(\"/eligibility\", eligibility);\napp.route(\"/group\", group);\napp.route(\"/batch\", batch);\napp.route(\"/handoff\", handoff);\napp.route(\"/mock\", mock);\napp.route(\"/\", proxy);\n\napp.get(\"/\", (c) =>\n c.json({\n service: \"walgreens-vaccine-mock\",\n mock_upstream: \"/mock/api/vaccine/scheduling/{eligibility|timeslots|hold|patient|confirm}/v1\",\n vapi_tools: [\n \"/v1/check_eligibility\",\n \"/v1/find_stores\",\n \"/v1/find_appointments\",\n \"/v1/hold_appointment\",\n \"/v1/add_patient\",\n \"/v1/confirm_appointment\",\n \"/v1/send_confirmation_sms\",\n ],\n admin: \"/admin\",\n dashboard: \"/dashboard\",\n }));\n\napp.get(\"/dashboard\", async (c) => c.html(await dashboardHtml()));\n\napp.get(\"/admin\", async (c) => {\n await db.init();\n const appts = await db.recentAppointments(25);\n const logs = await db.recentLog(60);\n const texts = await db.recentSms(15);\n const t = (s: unknown) => new Date(Number(s) * 1000).toLocaleString(\"en-US\");\n\n const html = renderToString(\n \n \n Walgreens mock — admin\n \n \n \n \n

Walgreens vaccine scheduling — mock admin

Synthetic data only. No real Walgreens system is touched.

\n\n

Appointments ({appts.length})

\n \n \n \n \n \n \n \n \n {appts.map((a: any) => {\n const p = a.patient ? JSON.parse(a.patient) : null;\n const cls = a.status === \"confirmed\" ? \"ok\" : a.status === \"held\" ? \"warn\" : \"\";\n return (\n \n \n \n \n \n \n \n \n \n );\n })}\n \n

Engagement	Status	Store	When	Patient	Confirmation	Created
`{a.engagement_id}`	{a.status}	{a.store_address}	{a.appointment_dt}	{p ? `${p.firstName} ${p.lastName} · ${p.phone}` : \"—\"}	`{a.confirmation_code ?? \"—\"}`	{t(a.created_at)}

\n\n

Confirmation texts ({texts.length})

\n \n \n \n \n \n {texts.map((m: any) => (\n \n \n \n \n \n \n \n ))}\n \n

At	To	Delivered	Note	Body
{t(m.at)}	`{m.to_phone}`	{Number(m.delivered) ? \"yes\" : \"no\"}	{m.note}	`{m.body}`

\n\n

Tool-call log ({logs.length})

\n \n \n \n \n \n {logs.map((l: any) => (\n \n \n \n \n \n \n \n \n ))}\n \n

At	Route	Status	Note	Call	Body
{t(l.at)}	`{l.route}`	{l.status}	{l.note}	`{l.call_id ?? \"—\"}`	`{String(l.body ?? \"\").slice(0, 160)}`

\n \n ,\n );\n return c.html(`${html}`);\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n",[200],"c6e6c5ff-be0a-4b7b-b005-99969f2305d8",["D",1788677663347],20,[28],"b55d4377-ed41-4e17-be7b-16573be9ca8e","group.ts","9c332468-9606-11f1-be78-1607ee4eb77e",134,["D",1786519765177],14,"// Consecutive-slot allocator for multi-person bookings.\n//\n// THE PROBLEM THIS SOLVES\n// -----------------------\n// A Walgreens slot holds exactly ONE person — a second hold on the same\n// location+date+time returns 409 FC_905 \"data conflict\". So a family needs\n// consecutive slots, one per person.\n//\n// Asking the model to do that bookkeeping does not work. On call 019ff423 it\n// offered 2:20 and 2:30 for two people, 2:20 turned out to be taken, it moved the\n// father to 2:30 — and then tried to hold 2:30 for the daughter as well, hitting\n// the conflict. It then falsely claimed it could not search again. Tracking\n// \"who has which slot\" across turns is exactly what the model keeps getting wrong.\n//\n// So the server assigns slots. The agent calls this once per person and is handed\n// exactly ONE slot string to use. It cannot pick the wrong one because it is never\n// given a choice. Each call marks that slot consumed, so a failed hold simply\n// advances to the next one on the following call.\n//\n// `walgreens_hold_appointment` still posts DIRECTLY to Walgreens — this endpoint\n// only does arithmetic and remembers state within a call.\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as db from \"./db.ts\";\n\nconst app = new Hono();\nconst WG = \"https://services-qa.walgreens.com/api/vaccine/scheduling\";\nconst KEY = () => Deno.env.get(\"WALGREENS_API_KEY\") ?? \"\";\n\nlet ready: Promise | null = null;\nfunction init() {\n if (!ready) {\n ready = (async () => {\n await db.init();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS group_plans (\n call_id TEXT PRIMARY KEY,\n plan TEXT NOT NULL,\n updated_at INTEGER NOT NULL\n )`);\n })();\n }\n return ready;\n}\n\nasync function loadPlan(callId: string) {\n const r = await sqlite.execute({\n sql: \"SELECT plan FROM group_plans WHERE call_id = ?\",\n args: [callId],\n });\n return r.rows[0] ? JSON.parse(String(r.rows[0].plan)) : null;\n}\n\nasync function savePlan(callId: string, plan: unknown) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO group_plans (call_id, plan, updated_at) VALUES (?,?,?)\",\n args: [callId, JSON.stringify(plan), Math.floor(Date.now() / 1000)],\n });\n}\n\nfunction slotHour(slot: string): number {\n const m = String(slot).trim().match(/^(\\d{1,2}):(\\d{2})\\s*(am|pm)$/i);\n if (!m) return -1;\n let h = Number(m[1]) % 12;\n if (/pm/i.test(m[3])) h += 12;\n return h + Number(m[2]) / 60;\n}\n\n/** Normalise \"2:20 pm\" / \"02:20 PM\" to Walgreens' exact \"02:20 pm\". */\nfunction canonical(slot: string, all: string[]): string | null {\n const want = slotHour(slot);\n if (want < 0) return null;\n return all.find((s) => Math.abs(slotHour(s) - want) < 0.001) ?? null;\n}\n\nconst speak = (slot: string) => String(slot).replace(/^0/, \"\");\n\nasync function timeslots(body: Record) {\n const res = await fetch(`${WG}/timeslots/v1`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiKey: KEY(), affId: \"extest\", ...body }),\n });\n try {\n return JSON.parse(await res.text());\n } catch {\n return null;\n }\n}\n\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* empty */ }\n if (!b || typeof b !== \"object\") b = {};\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) b[k] = null;\n }\n return b;\n}\n\nconst fail = (c: any, status: number, code: string, message: string) =>\n c.json({ ok: false, error_code: code, message }, status);\n\n/**\n * POST /group/next_slot\n *\n * First call for a call_id establishes the plan (store, date, starting time,\n * party size) and returns person 1's slot. Every later call just needs call_id\n * and returns the next person's slot. Repeat after a failed hold to skip on.\n */\napp.post(\"/next_slot\", async (c) => {\n await init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n if (!callId) return fail(c, 400, \"call_id_required\", \"Internal: call_id is missing.\");\n\n let plan = await loadPlan(callId);\n const wantsNew = b.store_number || b.date || b.start_time;\n\n // Guard against silently splitting a group. A real call ended with the mother\n // booked at one store and both children at another, because the agent passed a\n // different store_number partway through and this endpoint happily re-planned.\n // Once anyone in a group is allocated, the store and date are fixed unless the\n // caller explicitly wants a separate block.\n // Once anyone in the group is allocated, IGNORE any store/date/start the agent\n // re-sends and just continue the existing block. Erroring here was worse: the\n // agent gave up mid-family rather than retrying without those fields.\n let stickyNote: string | null = null;\n if (plan && plan.used > 0 && wantsNew && b.start_new_block !== true) {\n const differentStore = b.store_number && String(b.store_number) !== plan.storeNumber;\n const differentDate = b.date && String(b.date) !== plan.date;\n if (differentStore || differentDate) {\n stickyNote = `Kept this person with the rest of the group at ${plan.street} on `\n + `${plan.date}. To move someone elsewhere, tell the caller first and pass `\n + \"start_new_block true.\";\n await db.log(\"group/next_slot\", callId, b, 200, \"ignored attempted group split\");\n }\n // Continue the existing plan regardless — never re-plan mid-group.\n delete b.store_number;\n delete b.date;\n delete b.start_time;\n }\n\n // (Re)build the plan whenever the agent gives new store/date/time details —\n // that is how a caller changing their mind is handled. Recomputed because the\n // sticky-group guard above may have stripped those fields.\n const replan = b.store_number || b.date || b.start_time;\n if (!plan || replan) {\n const zip = String(b.zip_code ?? plan?.zip ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n const state = String(b.state ?? plan?.state ?? \"\").trim().toUpperCase();\n const storeNumber = String(b.store_number ?? plan?.storeNumber ?? \"\").trim();\n const date = String(b.date ?? plan?.date ?? \"\").trim();\n const party = Math.max(1, Number(b.party_size ?? plan?.party ?? 1) || 1);\n const vaccines = (Array.isArray(b.vaccines) ? b.vaccines : plan?.vaccines ?? [])\n .map((v: unknown) => String(v)).filter(Boolean);\n\n if (!zip || !state || !storeNumber || !date || vaccines.length === 0) {\n return fail(c, 400, \"missing_arguments\",\n \"Need zip_code, state, store_number, date and vaccines the first time, \"\n + \"so I can work out the run of times.\");\n }\n\n const data = await timeslots({\n state, zipCode: zip, dob: String(b.dob ?? \"1980-01-01\"),\n vaccine: vaccines,\n appointmentAvailability: { startDateTime: date, endDateTime: date },\n });\n const loc = (data?.locations ?? []).find(\n (l: any) => String(l.storenumber ?? \"\") === storeNumber,\n );\n if (!loc) {\n return fail(c, 404, \"store_not_offering\",\n \"That store is not offering this vaccine on that date. Offer another store or day.\");\n }\n const av = (loc.appointmentAvailability ?? []).find((a: any) => a.date === date);\n const all: string[] = av?.slots ?? [];\n const productId = (av?.manufacturer ?? [])[0]?.productId;\n if (!all.length || !productId) {\n return fail(c, 404, \"no_slots\", \"No times left at that store on that date.\");\n }\n\n // Keep the WHOLE tail of the day from the agreed start, not just party_size\n // slots. The agent frequently omits or under-counts party_size (a real call\n // passed nothing, so a couple got a one-slot plan and the wife could not be\n // booked). Allocation just walks this list, so an extra person always gets the\n // next consecutive time as long as the store still has one.\n // Anchor on the requested TIME, not on an exact slot match. If the caller's\n // time has already gone, we must still start looking from there — falling back\n // to the first slot of the day sent a 2:40 pm request to 10:30 am.\n const startRaw = String(b.start_time ?? plan?.start ?? all[0]);\n const exact = canonical(startRaw, all);\n const startHour = slotHour(startRaw) >= 0 ? slotHour(startRaw) : slotHour(all[0]);\n const start = exact ?? startRaw;\n const run = all.filter((sl) => slotHour(sl) >= startHour);\n\n // party_size is only used to warn up front that the block will not fit.\n let adjacent = 1;\n for (let i = 1; i < run.length; i++) {\n if (slotHour(run[i]) - slotHour(run[i - 1]) > 0.35) break;\n adjacent++;\n }\n if (adjacent < party) {\n return fail(c, 409, \"not_enough_consecutive\",\n `Only ${adjacent} back-to-back time(s) available from ${speak(start)}; ${party} are `\n + \"needed. Offer an earlier start time, another day, or the other store.\");\n }\n\n plan = {\n locationId: loc.locationId, storeNumber, zip, state, date, vaccines,\n productId, party, start, startHour, slots: run, used: 0, assigned: [],\n street: String(loc.address?.line1 ?? \"\"), city: String(loc.address?.city ?? \"\"),\n };\n }\n\n // Re-check LIVE availability every time. The plan's slot list is a snapshot, and\n // calls are slow: on 019ff4d6 the plan was built at 23:26 and the second person's\n // hold came at 23:43, by which point 02:50 pm had been taken by someone else. The\n // allocator handed out a dead slot and the booking failed in front of the caller.\n // So never hand out a slot that is not free right now.\n const live = await timeslots({\n state: plan.state, zipCode: plan.zip, dob: String(b.dob ?? \"1980-01-01\"),\n vaccine: plan.vaccines,\n appointmentAvailability: { startDateTime: plan.date, endDateTime: plan.date },\n });\n const liveLoc = (live?.locations ?? []).find(\n (l: any) => String(l.storenumber ?? \"\") === plan.storeNumber,\n );\n const liveAv = (liveLoc?.appointmentAvailability ?? []).find((a: any) => a.date === plan.date);\n const freeNow: string[] = liveAv?.slots ?? [];\n if (freeNow.length === 0) {\n await db.log(\"group/next_slot\", callId, b, 409, \"nothing free at store/date\");\n return fail(c, 409, \"no_more_times_today\",\n `There is nothing left at ${plan.street} on ${plan.date}. Offer another day or the `\n + \"other store, then call this again with the new date or start_time.\");\n }\n\n const assigned: string[] = Array.isArray(plan.assigned) ? plan.assigned : [];\n const anchor = assigned.length ? assigned[assigned.length - 1] : plan.start;\n const anchorHour = assigned.length\n ? slotHour(anchor)\n : (typeof plan.startHour === \"number\" ? plan.startHour : slotHour(plan.start));\n\n // First still-free slot at or after the anchor that has not already been given\n // out, and that is close enough to keep the group together.\n const candidate = freeNow\n .filter((sl) => !assigned.includes(sl))\n .filter((sl) => assigned.length ? slotHour(sl) > anchorHour : slotHour(sl) >= anchorHour)\n .sort((x, y) => slotHour(x) - slotHour(y))[0];\n\n if (!candidate) {\n await db.log(\"group/next_slot\", callId, b, 409, \"no free slot after \" + anchor);\n return fail(c, 409, \"no_more_times_today\",\n `Nothing is free after ${speak(anchor)} at ${plan.street} on ${plan.date}. Offer `\n + \"another day or the other store, then call this again with the new details.\");\n }\n if (assigned.length && slotHour(candidate) - anchorHour > 0.35) {\n await db.log(\"group/next_slot\", callId, b, 409, `gap ${anchor} -> ${candidate}`);\n return fail(c, 409, \"next_time_not_adjacent\",\n `The next free time after ${speak(anchor)} is ${speak(candidate)}, which is not back to `\n + \"back. Tell the caller the group cannot stay together from here, and offer that time \"\n + \"anyway or a different day.\");\n }\n\n // Tell the agent when the time moved, so it re-states it instead of repeating\n // whatever it promised the caller earlier.\n const drifted = !assigned.length && Math.abs(slotHour(candidate) - anchorHour) > 0.001;\n const slot = candidate;\n const person = assigned.length + 1;\n plan.assigned = [...assigned, slot];\n plan.used = plan.assigned.length;\n await savePlan(callId, plan);\n await db.log(\"group/next_slot\", callId,\n { store: plan.storeNumber, date: plan.date, party: plan.party }, 200,\n `person ${person}/${plan.party} -> ${slot}`);\n\n const laterFree = freeNow.filter((sl) => slotHour(sl) > slotHour(slot)).length;\n const remaining = laterFree;\n return c.json({\n ok: true,\n person_number: person,\n of_party: plan.party,\n // Everything walgreens_hold_appointment needs, copied verbatim.\n locationId: plan.locationId,\n appointmentDate: plan.date,\n slot,\n productId: plan.productId,\n store: `${plan.street}, ${plan.city}`,\n when_spoken: speak(slot),\n later_times_free: remaining,\n ...(stickyNote ? { note: stickyNote } : {}),\n ...(drifted\n ? {\n time_changed: true,\n say_this: `That ${speak(plan.start)} slot has just gone, so I've got you `\n + `${speak(slot)} instead — is that alright?`,\n }\n : {}),\n message: `Hold THIS slot for person ${person}: ${speak(slot)}. This time was confirmed `\n + \"free just now. \"\n + (drifted\n ? `NOTE: it is not the ${speak(plan.start)} you told the caller — that one was taken, `\n + \"so tell them the new time before you book it. \"\n : \"\")\n + (remaining > 0\n ? `${remaining} later time(s) are still free if more people need booking — call this `\n + \"tool again for each of them.\"\n : \"No later times are free at this store today.\")\n + \" If the hold still fails, call this tool again for the next free time — never reuse \"\n + \"the one that failed, and never tell the caller you cannot find another time.\",\n });\n});\n\n/** What the group looks like so far, for the closing recap. */\napp.post(\"/plan\", async (c) => {\n await init();\n const b = await read(c);\n const plan = await loadPlan(String(b.call_id ?? \"\"));\n if (!plan) return fail(c, 404, \"no_plan\", \"No group plan for this call yet.\");\n return c.json({\n ok: true,\n store: `${plan.street}, ${plan.city}`,\n date: plan.date,\n party: plan.party,\n assigned: (plan.assigned ?? []).map(speak),\n });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[212],"a49b2539-60b2-4c4d-a79e-09a73fdd54ad","flow.ts","f4caa6ea-9544-11f1-b1d7-1607ee4eb77e",114,["D",1786427295852],17,"// Flow-shaped endpoints over the REAL Walgreens Scheduling API (sandbox).\n//\n// Every call here goes to services-qa.walgreens.com. What this layer adds is the\n// shape the agreed call flow needs, which the raw API cannot provide:\n//\n// 1. ZIP -> two closest stores, with NO date of birth and NO state from the\n// caller. Walgreens has no store-directory endpoint (stores only come back\n// from timeslots, which requires state AND dob), and a wrong state returns\n// \"No participating store\" rather than an error. Both are resolved here.\n// 2. Times for ONE chosen store, filtered to the caller's preference, at most\n// three, spoken-ready. The raw response is ~19 stores x 30 slots (~17k\n// tokens) with no per-store query.\n// 3. Opaque store_ref / slot_ref, so the model never handles a locationId,\n// productId or a \"02:40 pm\" string it could reformat and break.\n//\n// Eligibility, patient-attach and confirm keep their own routes in order_shim.ts.\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as db from \"./db.ts\";\nimport { zipToState } from \"./zipstate.ts\";\n\nconst app = new Hono();\nconst WG = \"https://services-qa.walgreens.com/api/vaccine/scheduling\";\nconst KEY = () => Deno.env.get(\"WALGREENS_API_KEY\") ?? \"\";\n\n/** DOB used only to enumerate stores at step 2, before we know the patient's.\n * Product availability is re-checked per person at eligibility and hold. */\nconst NEUTRAL_DOB = \"1980-01-01\";\n\nlet ready: Promise | null = null;\nfunction init() {\n if (!ready) {\n ready = (async () => {\n await db.init();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS flow_refs (\n ref TEXT PRIMARY KEY,\n kind TEXT NOT NULL,\n payload TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n })();\n }\n return ready;\n}\n\nfunction newRef(prefix: string) {\n const abc = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\"; // no I/O/0/1\n const s = Array.from(crypto.getRandomValues(new Uint8Array(4)), (n) => abc[n % abc.length]).join(\"\");\n return `${prefix}${s}`;\n}\n\nasync function putRef(ref: string, kind: string, payload: unknown) {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO flow_refs (ref, kind, payload, created_at) VALUES (?,?,?,?)\",\n args: [ref, kind, JSON.stringify(payload), Math.floor(Date.now() / 1000)],\n });\n}\n\nasync function getRef(ref: string, kind: string): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT payload FROM flow_refs WHERE ref = ? AND kind = ?\",\n args: [String(ref ?? \"\").trim().toUpperCase(), kind],\n });\n return r.rows[0] ? JSON.parse(String(r.rows[0].payload)) : null;\n}\n\n/** Walgreens Store Locator: ZIP -> nearby stores, no state or lat/long needed.\n * https://developer.walgreens.com/sites/default/files/v1_StoreLocatorAPI.html\n * This is the authoritative source for the store's state, so nothing has to\n * guess it. affId is optional (verified). */\nasync function storeLocator(zip: string, radiusMiles = 15) {\n const res = await fetch(\"https://services-qa.walgreens.com/api/stores/search/v2\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({\n apiKey: KEY(),\n zip,\n s: \"10\", // page size\n p: \"1\", // page\n r: String(radiusMiles),\n requestType: \"locator\",\n }),\n });\n const text = await res.text();\n try {\n const data = JSON.parse(text);\n if (!Array.isArray(data?.results)) {\n return { ok: false as const, code: \"locator_no_results\", message: text.slice(0, 200) };\n }\n return { ok: true as const, data };\n } catch {\n return { ok: false as const, code: \"locator_not_json\", message: `HTTP ${res.status}` };\n }\n}\n\n/** \"8AM\" / \"9PM\" / \"12AM\" -> hour as a number. */\nfunction parseHour(h: unknown): number | null {\n const m = String(h ?? \"\").trim().toUpperCase().match(/^(\\d{1,2})(?::(\\d{2}))?\\s*(AM|PM)$/);\n if (!m) return null;\n let hh = Number(m[1]) % 12;\n if (m[3] === \"PM\") hh += 12;\n return hh + (m[2] ? Number(m[2]) / 60 : 0);\n}\n\nasync function timeslots(body: Record) {\n const res = await fetch(`${WG}/timeslots/v1`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiKey: KEY(), ...body }),\n });\n const text = await res.text();\n let data: any = null;\n try {\n data = JSON.parse(text);\n } catch {\n return { ok: false as const, code: \"upstream_not_json\", message: `HTTP ${res.status}` };\n }\n if (data?.errors?.length) {\n const e = data.errors[0];\n return { ok: false as const, code: String(e.code ?? \"error\"), message: String(e.message ?? \"\") };\n }\n if (data?.errCode) {\n return { ok: false as const, code: `walgreens_${data.errCode}`, message: String(data.errMsg ?? \"\") };\n }\n return { ok: true as const, data };\n}\n\n// ------------------------------------------------------------------ utilities\n\nconst DOW = [\"sunday\", \"monday\", \"tuesday\", \"wednesday\", \"thursday\", \"friday\", \"saturday\"];\nconst MONTHS = [\"january\", \"february\", \"march\", \"april\", \"may\", \"june\", \"july\",\n \"august\", \"september\", \"october\", \"november\", \"december\"];\n\nconst iso = (d: Date) => d.toISOString().slice(0, 10);\n\n/** \"next Wednesday\", \"August 19th\", \"tomorrow\", \"mid-morning\" -> date window. */\nfunction parseWindow(when: unknown): { start: string; end: string } {\n const s = String(when ?? \"\").toLowerCase();\n const today = new Date();\n const day = (n: number) => iso(new Date(today.getTime() + n * 86400000));\n\n const explicit = s.match(/(\\d{4})-(\\d{2})-(\\d{2})/);\n if (explicit) return { start: explicit[0], end: explicit[0] };\n\n // \"August 19\" / \"19th of August\"\n const mi = MONTHS.findIndex((m) => s.includes(m));\n if (mi >= 0) {\n const dm = s.match(/(\\d{1,2})(?:st|nd|rd|th)?/);\n if (dm) {\n let y = today.getUTCFullYear();\n let d = new Date(Date.UTC(y, mi, Number(dm[1])));\n if (d < today) d = new Date(Date.UTC(y + 1, mi, Number(dm[1])));\n return { start: iso(d), end: iso(d) };\n }\n }\n\n // Weekday, optionally \"next\"\n const wi = DOW.findIndex((d) => s.includes(d));\n if (wi >= 0) {\n let delta = (wi - today.getUTCDay() + 7) % 7;\n if (delta === 0) delta = 7;\n if (/next/.test(s) && delta < 7) delta += 7;\n return { start: day(delta), end: day(delta) };\n }\n\n if (/tomorrow/.test(s)) return { start: day(1), end: day(1) };\n if (/today|asap|soonest|earliest/.test(s)) return { start: day(0), end: day(2) };\n if (/next week/.test(s)) return { start: day(7), end: day(13) };\n if (/this week/.test(s)) return { start: day(0), end: day(6) };\n return { start: day(1), end: day(7) };\n}\n\n/** Time-of-day filter from the caller's words. */\nfunction timeOfDay(when: unknown): [number, number] {\n const s = String(when ?? \"\").toLowerCase();\n // Order and word boundaries matter: \"afternoon\" CONTAINS \"noon\", so a bare\n // /noon/ test hijacks it and returns an 11am-2pm range.\n if (/afternoon|after lunch/.test(s)) return [12, 17];\n if (/mid[- ]?morning/.test(s)) return [9, 11];\n if (/\\bmorning\\b|\\ba\\.?m\\.?\\b/.test(s)) return [0, 12];\n if (/\\blunch\\b|\\bmidday\\b|\\bnoon\\b/.test(s)) return [11, 14];\n if (/\\bevening\\b|after work|\\blate\\b|\\bp\\.?m\\.?\\b/.test(s)) return [16, 23];\n return [0, 24];\n}\n\nfunction slotHour(slot: string): number {\n const m = String(slot).match(/^(\\d{1,2}):(\\d{2})\\s*(am|pm)$/i);\n if (!m) return -1;\n let h = Number(m[1]) % 12;\n if (/pm/i.test(m[3])) h += 12;\n return h + Number(m[2]) / 60;\n}\n\n/** \"2026-08-19\" + \"10:30 am\" -> \"Wednesday the nineteenth at half past ten in the morning\". */\nfunction speak(date: string, slot: string): string {\n const d = new Date(`${date}T00:00:00Z`);\n const wd = d.toLocaleDateString(\"en-US\", { weekday: \"long\", timeZone: \"UTC\" });\n const mo = d.toLocaleDateString(\"en-US\", { month: \"long\", timeZone: \"UTC\" });\n return `${wd}, ${mo} ${d.getUTCDate()} at ${String(slot).replace(/^0/, \"\")}`;\n}\n\n// Walgreens returns addresses in ALL CAPS with postal abbreviations\n// (\"3093 MARLOW RD\", \"OLD REDWOOD HWY\"). Spoken aloud those become \"R D\" and\n// \"H W Y\", so expand and title-case them before they ever reach the model.\nconst SUFFIX: Record = {\n RD: \"Road\", ST: \"Street\", AVE: \"Avenue\", AV: \"Avenue\", BLVD: \"Boulevard\",\n HWY: \"Highway\", DR: \"Drive\", LN: \"Lane\", PKWY: \"Parkway\", PKY: \"Parkway\",\n CT: \"Court\", PL: \"Place\", TER: \"Terrace\", TRL: \"Trail\", CIR: \"Circle\",\n SQ: \"Square\", WAY: \"Way\", EXPY: \"Expressway\", PLZ: \"Plaza\", BYP: \"Bypass\",\n};\nconst DIRECTION: Record = {\n N: \"North\", S: \"South\", E: \"East\", W: \"West\",\n NE: \"Northeast\", NW: \"Northwest\", SE: \"Southeast\", SW: \"Southwest\",\n};\n\nfunction pretty(s: unknown): string {\n return String(s ?? \"\")\n .trim()\n .split(/\\s+/)\n .map((w) => {\n const bare = w.replace(/[.,]/g, \"\").toUpperCase();\n if (DIRECTION[bare]) return DIRECTION[bare];\n if (SUFFIX[bare]) return SUFFIX[bare];\n if (/^\\d+$/.test(w)) return w; // house numbers\n if (/^\\d+(ST|ND|RD|TH)$/i.test(bare)) return bare.toLowerCase(); // 42nd\n return w.charAt(0).toUpperCase() + w.slice(1).toLowerCase();\n })\n .join(\" \");\n}\n\n/** Street without the house number, for offering a choice out loud. */\nconst streetName = (s: string) => s.replace(/^\\d+\\s*/, \"\");\n\n/** Walgreens wants ###-###-####. Accepts E.164, digits, or anything in between. */\nfunction normalisePhone(input: unknown): string | null {\n let d = String(input ?? \"\").replace(/\\D/g, \"\");\n if (d.length === 11 && d.startsWith(\"1\")) d = d.slice(1);\n if (d.length !== 10) return null;\n return `${d.slice(0, 3)}-${d.slice(3, 6)}-${d.slice(6)}`;\n}\n\n/** Accepts \"1985-03-05\", \"3/5/1985\", \"March 5th 1985\" -> YYYY-MM-DD. */\nfunction parseDobFlexible(input: unknown): string | null {\n const s = String(input ?? \"\").trim().toLowerCase().replace(/,/g, \"\");\n if (!s) return null;\n const mk = (y: number, mo: number, d: number) => {\n if (mo < 1 || mo > 12 || d < 1 || d > 31 || y < 1900 || y > 2100) return null;\n const dt = new Date(Date.UTC(y, mo - 1, d));\n if (dt.getUTCMonth() !== mo - 1 || dt.getUTCDate() !== d) return null;\n return iso(dt);\n };\n let m = s.match(/^(\\d{4})-(\\d{1,2})-(\\d{1,2})$/);\n if (m) return mk(+m[1], +m[2], +m[3]);\n m = s.match(/^(\\d{1,2})[\\/\\-](\\d{1,2})[\\/\\-](\\d{2,4})$/);\n if (m) {\n let y = +m[3];\n if (y < 100) y += y > 30 ? 1900 : 2000;\n return mk(y, +m[1], +m[2]); // US order\n }\n const mi = MONTHS.findIndex((name) => s.includes(name));\n if (mi >= 0) {\n const nums = s.match(/\\d+/g) ?? [];\n const day = nums.find((n) => +n >= 1 && +n <= 31 && n.length <= 2);\n const year = nums.find((n) => n.length === 4);\n if (day && year) return mk(+year, mi + 1, +day);\n }\n return null;\n}\n\nfunction fail(c: any, status: number, code: string, message: string) {\n return c.json({ ok: false, error_code: code, message }, status);\n}\n\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* empty */ }\n if (!b || typeof b !== \"object\") b = {};\n // Vapi sends the literal word \"blank\" for an unset Liquid variable, and the\n // raw \"{{ template }}\" when a variable was never extracted at all.\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) {\n b[k] = null;\n }\n }\n return { b, callId: b.call_id ?? null };\n}\n\nfunction codesFrom(v: unknown): string[] {\n const list = Array.isArray(v) ? v : v ? [v] : [];\n return list.map((x) => String(x).trim()).filter(Boolean).slice(0, 4);\n}\n\n// --------------------------------------------------- STEP 2: find_stores (ZIP)\napp.post(\"/find_stores\", async (c) => {\n await init();\n const { b, callId } = await read(c);\n const zip = String(b.zip_code ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n const vaccines = codesFrom(b.vaccines);\n\n if (zip.length !== 5 || vaccines.length === 0) {\n await db.log(\"flow/find_stores\", callId, b, 400, \"missing zip or vaccines\");\n return fail(c, 400, \"missing_arguments\",\n \"zip_code (5 digits) and at least one vaccine code are required.\");\n }\n // The Store Locator takes the ZIP alone and returns the state, so nothing has\n // to guess it. zipToState is only a fallback if the locator is unavailable.\n const loc = await storeLocator(zip);\n if (!loc.ok) {\n await db.log(\"flow/find_stores\", callId, { zip }, 502, `${loc.code}: ${loc.message}`);\n return fail(c, 502, loc.code,\n \"The Walgreens store directory is unavailable. Apologise and offer walgreens.com.\");\n }\n\n // Only stores that actually give vaccinations are usable here.\n const usable = (loc.data.results ?? []).filter((r: any) => {\n const codes = (r.store?.serviceIndicators ?? []).map((s: any) => String(s.code));\n return codes.includes(\"imn\") || codes.includes(\"fs\");\n });\n if (usable.length === 0) {\n await db.log(\"flow/find_stores\", callId, { zip }, 200, \"no immunizing stores\");\n return c.json({\n ok: true, state: zipToState(zip), stores: [],\n message: `No Walgreens near ${zip} offers immunizations. Suggest walgreens.com.`,\n });\n }\n\n const state = String(usable[0].store?.address?.state ?? zipToState(zip) ?? \"\").toUpperCase();\n const stores = [];\n for (const r of usable.slice(0, 2)) {\n const st = r.store ?? {};\n const addr = st.address ?? {};\n const ref = newRef(\"ST\");\n const street = pretty(addr.street);\n const city = pretty(addr.city);\n const payload = {\n storeNumber: String(r.storeNumber ?? st.storeNumber ?? \"\"),\n zip, state, vaccines, street, city,\n pharmacyOpen: parseHour(st.pharmacyOpenTime),\n pharmacyClose: parseHour(st.pharmacyCloseTime),\n phone: st.phone?.areaCode && st.phone?.number\n ? `${st.phone.areaCode}-${String(st.phone.number).trim()}`\n : null,\n };\n await putRef(ref, \"store\", payload);\n stores.push({\n store_ref: ref,\n street,\n city,\n miles: r.distance,\n pharmacy_hours: `${st.pharmacyOpenTime ?? \"?\"} to ${st.pharmacyCloseTime ?? \"?\"}`,\n });\n }\n\n // A ready-made question, so the wording is consistent and the agent never has\n // to decide whether to disambiguate by city or by street number.\n let question = \"\";\n if (stores.length === 1) {\n question = `The closest one is on ${streetName(stores[0].street)} in ${stores[0].city}. Does that work for you?`;\n } else if (stores.length === 2) {\n const [a, d] = stores;\n const sameStreet = streetName(a.street) === streetName(d.street);\n const label = (s: any) =>\n sameStreet ? s.street // same street -> keep numbers\n : a.city !== d.city ? `${streetName(s.street)} in ${s.city}`\n : streetName(s.street);\n question = `Do you prefer the Walgreens on ${label(a)}, or the one on ${label(d)}?`;\n }\n\n await db.log(\"flow/find_stores\", callId, { zip, state, vaccines }, 200, `${stores.length} stores`);\n return c.json({ ok: true, state, stores, question });\n});\n\n// -------------------------------------- STEP 3: find_appointments (one store)\napp.post(\"/find_appointments\", async (c) => {\n await init();\n const { b, callId } = await read(c);\n const store = await getRef(b.store_ref, \"store\");\n if (!store) {\n await db.log(\"flow/find_appointments\", callId, b, 400, \"bad store_ref\");\n return fail(c, 400, \"unknown_store\",\n \"store_ref is missing or unrecognised. Call walgreens_find_stores first and offer the caller a choice.\");\n }\n const party = Math.max(1, Number(b.party_size ?? 1) || 1);\n const w = parseWindow(b.when);\n const [loHour, hiHour] = timeOfDay(b.when);\n\n const r = await timeslots({\n state: store.state,\n zipCode: store.zip,\n dob: b.date_of_birth || NEUTRAL_DOB,\n vaccine: codesFrom(b.vaccines).length ? codesFrom(b.vaccines) : store.vaccines,\n appointmentAvailability: { startDateTime: w.start, endDateTime: w.end },\n });\n if (!r.ok && r.code !== \"FC_904_NoData\") {\n await db.log(\"flow/find_appointments\", callId, b, 502, r.message);\n return fail(c, 502, r.code, r.message);\n }\n\n // The Store Locator and the scheduling API identify stores differently: the\n // locator gives storeNumber, timeslots gives a locationId UUID plus\n // `storenumber`. Join on the store number.\n const loc = (r.ok ? r.data.locations ?? [] : [])\n .find((l: any) => String(l.storenumber ?? \"\") === String(store.storeNumber ?? \"\"));\n if (!loc && r.ok) {\n await db.log(\"flow/find_appointments\", callId, b, 200, \"store not offering this vaccine\");\n return c.json({\n ok: true, store: store.street, matched_preference: false, options: [],\n message: \"That store isn't offering this vaccine in that window. Offer the other store or a different date.\",\n });\n }\n\n // Walgreens IGNORES appointmentAvailability.endDateTime and returns a fixed\n // horizon of dates regardless (verified: a 1-day window returns the same bytes\n // as a 5-day one). So the requested window has to be applied here, or asking\n // for \"next Wednesday\" also offers Thursday.\n const inPref: any[] = []; // right day AND right time of day\n const wrongTime: any[] = []; // right day, wrong time of day\n const otherDay: any[] = []; // outside the requested window entirely\n for (const av of loc?.appointmentAvailability ?? []) {\n const product = (av.manufacturer ?? [])[0]?.productId;\n if (!product) continue;\n // Enough slots for the whole group on that day.\n if ((av.numberOfSlotsAvailable ?? av.slots?.length ?? 0) < party) continue;\n const inWindow = av.date >= w.start && av.date <= w.end;\n for (const slot of av.slots ?? []) {\n const h = slotHour(slot);\n // Never offer a time outside the store's pharmacy hours, from the\n // Store Locator. Walgreens' own slots should already respect these; this\n // is the backstop so a caller is never sent to a closed pharmacy.\n if (store.pharmacyOpen != null && h < store.pharmacyOpen) continue;\n if (store.pharmacyClose != null && h >= store.pharmacyClose) continue;\n const row = { date: av.date, slot, product, hour: h };\n if (!inWindow) otherDay.push(row);\n else if (h >= loHour && h < hiHour) inPref.push(row);\n else wrongTime.push(row);\n }\n }\n\n // A slot holds exactly ONE person: Walgreens rejects a second hold on the same\n // location+date+time with \"There was a data conflict that resulted in an error\"\n // (verified 2026-08-11). So a party of N needs N consecutive slots, and the\n // family is seen back to back. Candidates whose group doesn't fit are dropped.\n const dayIndex = new Map();\n for (const row of [...inPref, ...wrongTime, ...otherDay]) {\n if (!dayIndex.has(row.date)) dayIndex.set(row.date, []);\n dayIndex.get(row.date)!.push(row);\n }\n for (const rows of dayIndex.values()) rows.sort((a, b2) => a.hour - b2.hour);\n\n function groupFrom(row: any): string[] | null {\n if (party <= 1) return [row.slot];\n const rows = dayIndex.get(row.date) ?? [];\n const i = rows.findIndex((r) => r.slot === row.slot);\n if (i < 0 || i + party > rows.length) return null;\n const run = rows.slice(i, i + party);\n // Must be a genuine run of adjacent slots, not a jump across a gap.\n for (let k = 1; k < run.length; k++) {\n if (run[k].hour - run[k - 1].hour > 0.35) return null; // >21 min apart\n }\n return run.map((r) => r.slot);\n }\n\n const chosen = (inPref.length ? inPref : wrongTime.length ? wrongTime : otherDay)\n .filter((row) => groupFrom(row) !== null);\n // Spread across days so three options aren't three consecutive minutes.\n const byDay = new Map();\n for (const row of chosen) {\n if (!byDay.has(row.date)) byDay.set(row.date, []);\n byDay.get(row.date)!.push(row);\n }\n const picks: any[] = [];\n for (const rows of byDay.values()) {\n picks.push(rows[0]);\n if (rows.length > 1) picks.push(rows[Math.floor(rows.length / 2)]);\n }\n // Sort by date then by hour NUMERICALLY. Comparing stringified floats\n // lexically put \"12.5\" before \"11.16\".\n picks.sort((a, b2) => a.date === b2.date ? a.hour - b2.hour : a.date.localeCompare(b2.date));\n\n const options = [];\n for (const p of picks.slice(0, 3)) {\n const ref = newRef(\"SL\");\n await putRef(ref, \"slot\", {\n // locationId comes from the scheduling API's matched store, not the\n // locator (which only knows storeNumber).\n locationId: loc.locationId,\n street: store.street, city: store.city,\n state: store.state, zip: store.zip,\n date: p.date, slot: p.slot, productId: p.product,\n vaccines: codesFrom(b.vaccines).length ? codesFrom(b.vaccines) : store.vaccines,\n party,\n // One slot per person, allocated in order as each hold comes in.\n groupSlots: groupFrom(p),\n used: 0,\n });\n const group = groupFrom(p) ?? [p.slot];\n options.push({\n slot_ref: ref,\n when: speak(p.date, p.slot),\n store: store.street,\n ...(party > 1\n ? {\n covers: `${party} back-to-back times from ${p.slot.replace(/^0/, \"\")} to ${\n group[group.length - 1].replace(/^0/, \"\")\n }`,\n }\n : {}),\n });\n }\n\n await db.log(\"flow/find_appointments\", callId, b, 200,\n `${options.length} options${inPref.length ? \"\" : \" (outside preference)\"}`);\n return c.json({\n ok: true,\n store: store.street,\n matched_preference: inPref.length > 0,\n options,\n message: options.length\n ? (inPref.length\n ? \"Offer these, at most three. Never read a slot_ref aloud.\"\n : \"Nothing matched the caller's preferred time of day; these are the closest alternatives at that store — offer them as such.\")\n : \"That store has nothing in this window. Offer a different day or the other store.\",\n });\n});\n\n// --------------------------------------------------------- STEP 5: hold a slot\napp.post(\"/hold\", async (c) => {\n await init();\n const { b, callId } = await read(c);\n const slot = await getRef(b.slot_ref, \"slot\");\n if (!slot) {\n await db.log(\"flow/hold\", callId, b, 400, \"bad slot_ref\");\n return fail(c, 400, \"unknown_slot\",\n \"slot_ref is missing or unrecognised. Run walgreens_find_appointments again and offer fresh times.\");\n }\n\n // Allocate this person's own slot. Walgreens allows exactly one hold per\n // location+date+time, so each person in a party takes the next slot in the run.\n const group: string[] = Array.isArray(slot.groupSlots) && slot.groupSlots.length\n ? slot.groupSlots\n : [slot.slot];\n const used = Number(slot.used ?? 0);\n if (used >= group.length) {\n await db.log(\"flow/hold\", callId, b, 409, \"group slots exhausted\");\n return fail(c, 409, \"party_full\",\n `All ${group.length} times in that block are taken. Search again for another time for the remaining people.`);\n }\n const mySlot = group[used];\n\n const answers = Array.isArray(b.screening_answers) ? b.screening_answers : [];\n const userResponses = slot.vaccines.map((code: string) => ({\n vaccineCode: code,\n details: answers.length\n ? answers.map((a: any) => ({\n question: String(a?.question ?? \"screening\"),\n answer: String(a?.answer ?? \"\"),\n }))\n : [{ question: \"Screening completed on call\", answer: \"no concerns reported\" }],\n }));\n\n const res = await fetch(`${WG}/hold/v1`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({\n apiKey: KEY(),\n locationId: slot.locationId,\n appointmentDate: slot.date,\n slot: mySlot,\n channel: \"web\",\n client: \"web\",\n engagementType: \"Guest\",\n vaccines: slot.vaccines.map((code: string) => ({\n code, productId: slot.productId, rxRequired: false,\n })),\n userResponses,\n }),\n });\n const text = await res.text();\n let data: any = null;\n try {\n data = JSON.parse(text);\n } catch { /* empty */ }\n\n if (!data?.engagementId) {\n const msg = data?.errors?.[0]?.message ?? data?.errMsg ?? `HTTP ${res.status}`;\n await db.log(\"flow/hold\", callId, b, 502, String(msg));\n return fail(c, 502, \"hold_failed\", String(msg));\n }\n\n // Remember this person's actual time, and advance the group allocation.\n await putRef(String(data.engagementId), \"engagement\", { ...slot, slot: mySlot });\n await putRef(String(b.slot_ref).trim().toUpperCase(), \"slot\", { ...slot, used: used + 1 });\n await db.log(\"flow/hold\", callId,\n { slot_ref: b.slot_ref, person: used + 1, slot: mySlot }, 200, String(data.engagementId));\n\n const remaining = group.length - (used + 1);\n return c.json({\n ok: true,\n engagement_id: data.engagementId,\n store: `${slot.street}, ${slot.city}`,\n when: speak(slot.date, mySlot),\n ...(group.length > 1\n ? {\n person_number: used + 1,\n of_party: group.length,\n remaining_slots: remaining,\n note: remaining > 0\n ? `Each person has their own time. The next person will be at ${group[used + 1].replace(/^0/, \"\")}.`\n : \"That was the last person in the block.\",\n }\n : {}),\n message: \"Held, NOT booked. Collect details, then confirm.\",\n });\n});\n\n// --------------------------------------------- STEP 6/7: patient details\n// Handled here rather than by a byte-level pass-through so that:\n// * the caller's real number is injected from {{customer.number}} server-side —\n// the model never types phone digits, which is the only reliable way to stop\n// it inventing them;\n// * a missing number produces an actionable \"ask for one\" instead of the agent\n// abandoning the booking;\n// * the nested Walgreens contact{phones,emails} shape is built here, not by\n// the model;\n// * the empty 201 becomes real JSON (Vapi can't parse an empty body).\napp.post(\"/add_patient\", async (c) => {\n await init();\n const { b, callId } = await read(c);\n const engagementId = String(b.engagement_id ?? \"\").trim();\n\n const first = String(b.first_name ?? \"\").trim();\n const last = String(b.last_name ?? \"\").trim();\n const dob = parseDobFlexible(b.date_of_birth);\n const gender = [\"Male\", \"Female\", \"Other\", \"Unknown\"]\n .find((g) => g.toLowerCase() === String(b.gender ?? \"\").trim().toLowerCase()) ?? \"Unknown\";\n\n // Prefer the real caller ID over anything the model typed.\n const fromCaller = normalisePhone(b.caller_number);\n const spoken = normalisePhone(b.phone);\n const phone = (b.use_caller_number === true && fromCaller) ? fromCaller : (spoken ?? fromCaller);\n\n const missing = [\n !engagementId && \"the appointment must be held first\",\n !first && \"first_name\",\n !last && \"last_name\",\n !dob && \"a valid date_of_birth\",\n ].filter(Boolean);\n if (missing.length) {\n await db.log(\"flow/add_patient\", callId, b, 400, `missing: ${missing.join(\", \")}`);\n return fail(c, 400, \"missing_arguments\", `Still needed: ${missing.join(\", \")}.`);\n }\n if (!phone) {\n await db.log(\"flow/add_patient\", callId, b, 400, \"no usable phone number\");\n return fail(c, 400, \"phone_required\",\n \"No phone number is available for this call, so ask the caller to give you a \"\n + \"ten-digit mobile number and call this tool again with it. Do NOT abandon the \"\n + \"booking, and do not say the number you're calling from.\");\n }\n\n const res = await fetch(`${WG}/patient/v1`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({\n apiKey: KEY(),\n engagementId,\n firstName: first,\n lastName: last,\n dob,\n gender,\n contact: {\n phones: [{\n type: \"Mobile\",\n number: phone,\n smsConsent: b.sms_consent === true ? \"Agree\" : \"Disagree\",\n }],\n ...(b.email ? { emails: [{ type: \"Email\", address: String(b.email) }] } : {}),\n },\n }),\n });\n const text = await res.text();\n if (res.status >= 200 && res.status < 300) {\n await db.log(\"flow/add_patient\", callId,\n { engagementId, name: `${first} ${last}`, phone, sms: b.sms_consent === true }, res.status, \"ok\");\n return c.json({ ok: true, upstreamStatus: res.status, phone_used: phone });\n }\n let msg = `HTTP ${res.status}`;\n try {\n const d = JSON.parse(text);\n msg = d?.errors?.[0]?.message ?? d?.errMsg ?? msg;\n } catch { /* keep */ }\n await db.log(\"flow/add_patient\", callId, b, res.status, String(msg));\n return fail(c, res.status, \"patient_failed\", String(msg));\n});\n\n// ------------------------------------------------------- STEP 8: book it\napp.post(\"/confirm\", async (c) => {\n await init();\n const { b, callId } = await read(c);\n const engagementId = String(b.engagement_id ?? \"\").trim();\n if (!engagementId) {\n await db.log(\"flow/confirm\", callId, b, 400, \"missing engagement_id\");\n return fail(c, 400, \"missing_arguments\", \"The appointment must be held first.\");\n }\n const res = await fetch(`${WG}/confirm/v1`, {\n method: \"PATCH\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiKey: KEY(), engagementId }),\n });\n const text = await res.text();\n const eng = await getRef(engagementId, \"engagement\");\n\n if (res.status >= 200 && res.status < 300) {\n await db.log(\"flow/confirm\", callId, { engagementId }, res.status, \"booked\");\n return c.json({\n ok: true,\n booked: true,\n store: eng ? `${eng.street}, ${eng.city}` : null,\n when: eng ? speak(eng.date, eng.slot) : null,\n message: \"Booked. Read the store, day and time back. There is no confirmation number.\",\n });\n }\n let msg = `HTTP ${res.status}`;\n try {\n const d = JSON.parse(text);\n msg = d?.errors?.[0]?.message ?? d?.errMsg ?? msg;\n } catch { /* keep */ }\n await db.log(\"flow/confirm\", callId, b, res.status, String(msg));\n return fail(c, res.status, \"confirm_failed\", String(msg));\n});\n\n/** What was actually booked, for the closing recap. */\napp.post(\"/booked\", async (c) => {\n await init();\n const { b } = await read(c);\n const eng = await getRef(String(b.engagement_id ?? \"\"), \"engagement\");\n if (!eng) return fail(c, 404, \"unknown_engagement\", \"No held appointment with that id.\");\n return c.json({\n ok: true,\n store: `${eng.street}, ${eng.city}`,\n when: speak(eng.date, eng.slot),\n });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[220],"e757fc2f-500b-4ea6-b844-9c2ec297a386","errbudget.ts","15edf760-a697-11f1-a2d4-1607ee4eb77e",173,["D",1788330326325],"// SOW error budget: \"three consecutive errors or six total errors -> blind\n// transfer back to Walgreens\".\n//\n// The agent cannot be trusted to count its own failures across a six-minute call,\n// so the val counts every 4xx/5xx it returns per call_id and stamps the running\n// totals plus `transfer_required` onto the error body. The agent only has to obey\n// the flag. Tools that go DIRECT to Walgreens (find_stores, find_appointments,\n// add_patient) are not seen here, so the prompt still asks the model to count\n// those — this is the reliable floor, not the whole ceiling.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const LIMITS = { consecutive: 3, total: 6 };\n\nlet ready: Promise | null = null;\nfunction init() {\n if (!ready) {\n ready = sqlite.execute(`CREATE TABLE IF NOT EXISTS call_errors (\n call_id TEXT PRIMARY KEY,\n consecutive INTEGER NOT NULL DEFAULT 0,\n total INTEGER NOT NULL DEFAULT 0,\n updated_at INTEGER NOT NULL\n )`);\n }\n return ready;\n}\n\nexport type Budget = {\n consecutive: number;\n total: number;\n limits: typeof LIMITS;\n transfer_required: boolean;\n};\n\nexport async function status(callId: string): Promise {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT consecutive, total FROM call_errors WHERE call_id = ?\",\n args: [callId],\n });\n const consecutive = Number(r.rows[0]?.consecutive ?? 0);\n const total = Number(r.rows[0]?.total ?? 0);\n return {\n consecutive, total, limits: LIMITS,\n transfer_required: consecutive >= LIMITS.consecutive || total >= LIMITS.total,\n };\n}\n\n/** One more failure on this call. Returns the new standing. */\nexport async function bump(callId: string): Promise {\n await init();\n const s = await status(callId);\n const consecutive = s.consecutive + 1;\n const total = s.total + 1;\n await sqlite.execute({\n sql: `INSERT INTO call_errors (call_id, consecutive, total, updated_at) VALUES (?,?,?,?)\n ON CONFLICT(call_id) DO UPDATE SET consecutive = excluded.consecutive,\n total = excluded.total, updated_at = excluded.updated_at`,\n args: [callId, consecutive, total, Math.floor(Date.now() / 1000)],\n });\n return {\n consecutive, total, limits: LIMITS,\n transfer_required: consecutive >= LIMITS.consecutive || total >= LIMITS.total,\n };\n}\n\n/** A success breaks the consecutive streak; the total is a whole-call count. */\nexport async function reset(callId: string) {\n await init();\n await sqlite.execute({\n sql: \"UPDATE call_errors SET consecutive = 0, updated_at = ? WHERE call_id = ?\",\n args: [Math.floor(Date.now() / 1000), callId],\n });\n}\n\n/**\n * Hono middleware: count after every handler. Reads call_id from a clone of the\n * request body so the handler still gets its own copy. Non-JSON error bodies are\n * left alone.\n */\nexport function middleware() {\n return async (c: any, next: () => Promise) => {\n let callId = \"\";\n try {\n const b = await c.req.raw.clone().json();\n callId = String(b?.call_id ?? \"\").trim();\n } catch { /* no body */ }\n await next();\n if (!callId) return;\n if (c.res.status >= 400) {\n const st = await bump(callId);\n try {\n const data = await c.res.clone().json();\n c.res = new Response(\n JSON.stringify({ ...data, error_budget: st, transfer_required: st.transfer_required }),\n { status: c.res.status, headers: { \"content-type\": \"application/json\" } },\n );\n } catch { /* leave non-JSON bodies as they are */ }\n } else {\n await reset(callId);\n }\n };\n}\n",[228],"d6f131c7-ca2f-45b8-aefb-a1d0360df61e","eligibility.ts","a0ffb7f6-9604-11f1-b096-1607ee4eb77e",199,["D",1788675575926],7,"// Deterministic age-eligibility gate for the Walgreens vaccine agent.\n//\n// WHY THIS EXISTS\n// ---------------\n// 1. Walgreens' own eligibility endpoint is UNREACHABLE from a Vapi apiRequest\n// tool. It requires the JSON key \"state\" to appear before \"dob\"; Vapi\n// normalises body properties alphabetically, so \"dob\" always wins and the\n// gateway answers 401 FC_908 \"HMAC validation failed\". Verified 10/10 on BOTH\n// services-qa and services (production) on 2026-08-11 — it is not a sandbox bug.\n// 2. Nothing else enforces age. `timeslots` happily offered shingles to a\n// 30-year-old and a flu shot to a 1-year-old (verified), so the availability\n// search is NOT a safety net.\n// 3. Leaving the check to the model was measured at 3/4 — it booked shingles for\n// a 30-year-old once even with a required checkpoint field on the hold tool.\n// A clinical age gate cannot miss 1 in 4.\n// 4. Walgreens' SANDBOX eligibility rules are test data, not clinical rules\n// (dob 2025 -> age:null with nothing restricted; COVID \"too old\" at 11, 30, 56\n// and 76), so proxying them would produce confidently wrong refusals.\n//\n// So the rules live here, in code, sourced from walgreens.com and CDC guidance\n// (the same text as the FAQ knowledge base). Deterministic, testable, no model\n// judgement. When Walgreens' endpoint works (production, or once they fix the\n// ordering), set WALGREENS_ELIGIBILITY_TRUST=1 and their state-specific answer is\n// merged on top — their rules say \"too old ... in your state\", which a static\n// table genuinely cannot replicate.\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./db.ts\";\nimport * as budget from \"./errbudget.ts\";\n\nconst app = new Hono();\n// SOW error budget — see errbudget.ts.\napp.use(\"*\", budget.middleware());\nconst WG = \"https://services-qa.walgreens.com/api/vaccine/scheduling\";\n\n/** Walgreens will not vaccinate below this age at all, whatever the vaccine. */\nconst STORE_MIN_AGE = 3;\n/** Under this age a parent or guardian must attend. */\nconst GUARDIAN_AGE = 18;\n\ntype Rule = {\n code: string;\n name: string;\n minAge?: number;\n maxAge?: number;\n /** Ages where it is allowed but only on clinical judgement. */\n conditional?: { from: number; to: number; note: string };\n note?: string;\n};\n\n// Sourced from walgreens.com's immunization/flu/COVID pages plus CDC guidance —\n// the same wording as faq.txt. Codes are the live Walgreens vaccineCode values.\nconst RULES: Rule[] = [\n // The note used to read \"higher-dose options are recommended for adults 65 and\n // older\", which the agent spoke aloud right after the caller gave their date of\n // birth — effectively announcing their age bracket. Same information, without\n // pinning it to the caller.\n { code: \"150\", name: \"flu shot\", minAge: 3,\n note: \"the pharmacist may offer a higher-dose flu vaccine\" },\n { code: \"207\", name: \"COVID 19 vaccine\", minAge: 3 },\n { code: \"87\", name: \"shingles vaccine\", minAge: 50 },\n { code: \"33\", name: \"pneumonia vaccine\", minAge: 50,\n conditional: { from: 19, to: 49, note: \"ages 19 to 49 can have it with certain risk conditions\" } },\n { code: \"93\", name: \"RSV vaccine\", minAge: 75,\n conditional: { from: 50, to: 74, note: \"adults 50 to 74 can have it if at increased risk of severe RSV, and it is also given during pregnancy\" } },\n { code: \"62\", name: \"HPV vaccine\", minAge: 9, maxAge: 26,\n conditional: { from: 27, to: 45, note: \"for adults 27 to 45 it is an individual decision with a doctor or pharmacist\" } },\n { code: \"115\", name: \"Td or Tdap vaccine\", minAge: 7 },\n { code: \"03\", name: \"MMR vaccine\", minAge: 3 },\n { code: \"21\", name: \"chickenpox vaccine\", minAge: 3 },\n { code: \"52\", name: \"hepatitis A vaccine\", minAge: 3 },\n { code: \"43\", name: \"hepatitis B vaccine\", minAge: 3 },\n { code: \"104\", name: \"hepatitis A and B vaccine\", minAge: 3,\n note: \"cannot be combined with a separate hepatitis A or hepatitis B vaccine\" },\n { code: \"136\", name: \"meningitis vaccine\", minAge: 3 },\n { code: \"10\", name: \"polio vaccine\", minAge: 3 },\n { code: \"206\", name: \"mpox vaccine\", minAge: 18 },\n // Travel vaccines: store minimum applies and the pharmacist confirms suitability.\n { code: \"101\", name: \"typhoid vaccine\", minAge: 3 },\n { code: \"37\", name: \"yellow fever vaccine\", minAge: 3 },\n { code: \"134\", name: \"Japanese encephalitis vaccine\", minAge: 3 },\n { code: \"18\", name: \"rabies vaccine\", minAge: 3 },\n { code: \"223\", name: \"tick-borne encephalitis vaccine\", minAge: 3 },\n { code: \"317\", name: \"chikungunya vaccine\", minAge: 12 },\n { code: \"174\", name: \"cholera vaccine\", minAge: 3, maxAge: 64 },\n];\n\nconst ALIASES: Record = {\n flu: \"150\", influenza: \"150\", \"flu shot\": \"150\",\n covid: \"207\", \"covid 19\": \"207\", \"covid-19\": \"207\", coronavirus: \"207\",\n shingles: \"87\", shingrix: \"87\", zoster: \"87\",\n pneumonia: \"33\", pneumococcal: \"33\", pneumo: \"33\",\n rsv: \"93\",\n hpv: \"62\", gardasil: \"62\",\n tdap: \"115\", td: \"115\", tetanus: \"115\",\n mmr: \"03\", measles: \"03\",\n chickenpox: \"21\", varicella: \"21\",\n \"hepatitis a\": \"52\", \"hep a\": \"52\",\n \"hepatitis b\": \"43\", \"hep b\": \"43\",\n \"hepatitis a and b\": \"104\", \"hep a and b\": \"104\",\n meningitis: \"136\", meningococcal: \"136\",\n polio: \"10\",\n mpox: \"206\", monkeypox: \"206\",\n typhoid: \"101\", \"yellow fever\": \"37\",\n \"japanese encephalitis\": \"134\", rabies: \"18\",\n \"tick-borne encephalitis\": \"223\", chikungunya: \"317\", cholera: \"174\",\n};\n\nfunction findRule(input: unknown): Rule | null {\n const q = String(input ?? \"\").trim().toLowerCase();\n if (!q) return null;\n const byCode = RULES.find((r) => r.code === q || r.code === q.replace(/^0+/, \"\")\n || r.code.replace(/^0+/, \"\") === q.replace(/^0+/, \"\"));\n if (byCode) return byCode;\n if (ALIASES[q]) return RULES.find((r) => r.code === ALIASES[q]) ?? null;\n for (const [alias, code] of Object.entries(ALIASES)) {\n if (q.includes(alias)) return RULES.find((r) => r.code === code) ?? null;\n }\n return null;\n}\n\nconst MONTHS = [\"january\", \"february\", \"march\", \"april\", \"may\", \"june\", \"july\",\n \"august\", \"september\", \"october\", \"november\", \"december\"];\n\n/** Accepts YYYY-MM-DD, MM/DD/YYYY, \"January 1st 1950\". */\nfunction parseDob(input: unknown): string | null {\n const s = String(input ?? \"\").trim().toLowerCase().replace(/,/g, \"\");\n if (!s) return null;\n const mk = (y: number, mo: number, d: number) => {\n if (mo < 1 || mo > 12 || d < 1 || d > 31 || y < 1900 || y > 2100) return null;\n const dt = new Date(Date.UTC(y, mo - 1, d));\n if (dt.getUTCMonth() !== mo - 1 || dt.getUTCDate() !== d) return null;\n return dt.toISOString().slice(0, 10);\n };\n let m = s.match(/^(\\d{4})-(\\d{1,2})-(\\d{1,2})$/);\n if (m) return mk(+m[1], +m[2], +m[3]);\n m = s.match(/^(\\d{1,2})[\\/\\-](\\d{1,2})[\\/\\-](\\d{2,4})$/);\n if (m) {\n let y = +m[3];\n if (y < 100) y += y > 30 ? 1900 : 2000;\n return mk(y, +m[1], +m[2]);\n }\n const mi = MONTHS.findIndex((n) => s.includes(n));\n if (mi >= 0) {\n const nums = s.match(/\\d+/g) ?? [];\n const day = nums.find((n) => +n >= 1 && +n <= 31 && n.length <= 2);\n const year = nums.find((n) => n.length === 4);\n if (day && year) return mk(+year, mi + 1, +day);\n }\n return null;\n}\n\nfunction ageFrom(iso: string): number {\n const d = new Date(`${iso}T00:00:00Z`);\n const now = new Date();\n let age = now.getUTCFullYear() - d.getUTCFullYear();\n const before = now.getUTCMonth() < d.getUTCMonth()\n || (now.getUTCMonth() === d.getUTCMonth() && now.getUTCDate() < d.getUTCDate());\n if (before) age--;\n return age;\n}\n\n/** Months old, so infants can be described properly. */\nfunction monthsFrom(iso: string): number {\n const d = new Date(`${iso}T00:00:00Z`);\n const now = new Date();\n let mo = (now.getUTCFullYear() - d.getUTCFullYear()) * 12\n + (now.getUTCMonth() - d.getUTCMonth());\n if (now.getUTCDate() < d.getUTCDate()) mo--;\n return mo;\n}\n\ntype Verdict = {\n vaccine: string;\n code: string;\n eligible: boolean;\n needs_clinical_judgement?: boolean;\n reason?: string;\n note?: string;\n};\n\nfunction judge(rule: Rule, age: number): Verdict {\n const v: Verdict = { vaccine: rule.name, code: rule.code, eligible: true };\n if (rule.note) v.note = rule.note;\n\n // Store-wide floor first — it beats any per-vaccine rule.\n if (age < STORE_MIN_AGE) {\n return {\n ...v,\n eligible: false,\n reason: `Walgreens pharmacies vaccinate ages ${STORE_MIN_AGE} and up, so this cannot be booked here`,\n };\n }\n if (rule.minAge !== undefined && age < rule.minAge) {\n if (rule.conditional && age >= rule.conditional.from && age <= rule.conditional.to) {\n return { ...v, eligible: true, needs_clinical_judgement: true, reason: rule.conditional.note };\n }\n return { ...v, eligible: false, reason: `the ${rule.name} is recommended at ${rule.minAge} and older` };\n }\n if (rule.maxAge !== undefined && age > rule.maxAge) {\n if (rule.conditional && age >= rule.conditional.from && age <= rule.conditional.to) {\n return { ...v, eligible: true, needs_clinical_judgement: true, reason: rule.conditional.note };\n }\n return { ...v, eligible: false, reason: `the ${rule.name} is routinely given up to age ${rule.maxAge}` };\n }\n return v;\n}\n\ntype WgVaccine = {\n eligible: boolean;\n name: string;\n restrictions: { code: string; message: string }[];\n warnings: { code: string; message: string; question: string | null; answers: string[] | null }[];\n};\n\n/**\n * Walgreens' own eligibility answer, for every vaccine code, with the restriction\n * and warning objects the SOW says MUST be presented to the patient.\n *\n * Sent state-FIRST: their gateway HMACs the raw body bytes and rejects dob-first\n * with 401 FC_908 on BOTH sandbox and production (re-verified 3/3 each on\n * 2026-09-01). Vapi serialises body keys alphabetically, so this hop is the only\n * way the call can be made at all. `base` picks production or sandbox\n * (WALGREENS_ELIGIBILITY_BASE) — production per operator decision, because the\n * sandbox's rules are test data. Read-only endpoint; nothing is booked here.\n */\nasync function walgreensEligibility(\n base: string, apiKey: string, affId: string, state: string, dobIso: string,\n): Promise | null> {\n const [y, m, d] = dobIso.split(\"-\");\n try {\n const res = await fetch(`${base}/api/vaccine/scheduling/eligibility/v1`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ state, dob: `${m}/${d}/${y}`, apiKey, affId }),\n });\n const data = JSON.parse(await res.text());\n const all = [...(data?.eligibleVaccineList ?? []), ...(data?.inEligibleVaccineList ?? [])];\n if (!all.length) return null;\n const map = new Map();\n for (const v of all) {\n // THE SAME CODE CAN APPEAR IN BOTH LISTS.\n //\n // Production returns COVID-19 (207) twice for one person: once in\n // eligibleVaccineList with eligible=true, and once in inEligibleVaccineList\n // with WAG_FC_AGERESTRICTION_01 \"too old\" — presumably one formulation is\n // offered and another is not. This map used to keep whichever came last, so\n // the refusal always won and a 46-year-old was told COVID was unavailable in\n // California. An eligible entry wins; a code is only ineligible when NOTHING\n // in the response says it is available.\n const code = String(v.vaccineCode);\n const seen = map.get(code);\n if (seen?.eligible && v.eligible !== true) continue;\n map.set(code, {\n eligible: v.eligible === true,\n name: String(v.displayName ?? \"\"),\n restrictions: (v.restrictions ?? []).map((r: any) => ({\n code: String(r.code ?? \"\"), message: String(r.message ?? \"\"),\n })),\n warnings: (v.warnings ?? []).map((w: any) => ({\n code: String(w.code ?? \"\"), message: String(w.message ?? \"\"),\n question: w.question ? String(w.question) : null,\n answers: Array.isArray(w.answers) ? w.answers.map(String) : null,\n })),\n });\n }\n return map;\n } catch {\n return null;\n }\n}\n\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* empty */ }\n if (!b || typeof b !== \"object\") b = {};\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) b[k] = null;\n }\n return b;\n}\n\napp.post(\"/*\", async (c) => {\n const b = await read(c);\n const dob = parseDob(b.dob ?? b.date_of_birth);\n const state = String(b.state ?? \"\").trim().toUpperCase();\n\n if (!dob) {\n await db.log(\"eligibility\", b.call_id ?? null, b, 400, \"no usable dob\");\n return c.json({\n ok: false,\n error_code: \"dob_required\",\n message: \"A real date of birth is required. Ask the caller for it — never guess one.\",\n }, 400);\n }\n\n const age = ageFrom(dob);\n const months = monthsFrom(dob);\n const requested = (Array.isArray(b.vaccines) ? b.vaccines : b.vaccines ? [b.vaccines] : [])\n .map((v: unknown) => ({ raw: v, rule: findRule(v) }));\n\n const verdicts: Verdict[] = [];\n const unknown: string[] = [];\n for (const { raw, rule } of requested) {\n if (!rule) unknown.push(String(raw));\n else verdicts.push(judge(rule, age));\n }\n\n // Everything they COULD have at this age, so the agent can offer alternatives.\n const alternatives = RULES.filter((r) => judge(r, age).eligible).map((r) => r.name);\n\n // Walgreens' own verdict, layered on top of the local age rules (both must pass).\n //\n // The SOW is explicit: the API's restriction and warning messages MUST be\n // presented to the patient, some restrictions block, and warnings can carry a\n // question the patient must answer (\"which of the following applies...\"). So\n // everything attached to the vaccines this caller asked about is collected into\n // `must_read_aloud` and `questions` for the agent to relay verbatim.\n //\n // Known production quirk (measured 2026-09-01, CA): COVID-19 (207) comes back\n // \"too old to receive this vaccine in your state\" for EVERY age from 6 to 81.\n // Passed through faithfully — it is the customer's API — and flagged to the\n // operator to raise with Walgreens.\n const wgBase = Deno.env.get(\"WALGREENS_ELIGIBILITY_BASE\")\n ?? (Deno.env.get(\"WALGREENS_ELIGIBILITY_TRUST\") === \"1\"\n ? WG.replace(\"/api/vaccine/scheduling\", \"\") : null);\n let source = \"local_rules_only\";\n const mustRead: string[] = [];\n const questions: { vaccine: string; code: string; question: string; answers: string[] | null }[] = [];\n if (wgBase && state.length === 2) {\n const wg = await walgreensEligibility(\n wgBase, String(b.apiKey ?? Deno.env.get(\"WALGREENS_API_KEY\") ?? \"\"),\n String(b.affId ?? \"extest\"), state, dob,\n );\n if (wg) {\n source = wgBase.includes(\"services-qa\") ? \"walgreens_sandbox\" : \"walgreens_production\";\n for (const v of verdicts) {\n const hit = wg.get(v.code);\n if (!hit) continue;\n for (const r of hit.restrictions) if (r.message) mustRead.push(`${v.vaccine}: ${r.message}`);\n for (const w of hit.warnings) {\n if (w.message) mustRead.push(`${v.vaccine}: ${w.message}`);\n if (w.question) questions.push({ vaccine: v.vaccine, code: v.code, question: w.question, answers: w.answers });\n }\n if (!hit.eligible && v.eligible) {\n v.eligible = false;\n v.reason = hit.restrictions.map((r) => r.message).filter(Boolean).join(\"; \")\n || \"not eligible in this state, per Walgreens\";\n }\n }\n } else {\n source = \"local_rules_only (walgreens eligibility unavailable)\";\n }\n }\n\n const blocked = verdicts.filter((v) => !v.eligible);\n const ageSpoken = age < 2 ? `${months} months old` : `${age} years old`;\n\n // NEVER put the person's age in this response.\n //\n // It used to return `age` and `age_spoken`, and the agent read them straight\n // out on a real call — \"You're 76 and eligible for the flu vaccine.\" Nobody\n // phoning a pharmacy wants their age announced back to them. The agent needs\n // the VERDICT, not the number; a threshold in a refusal (\"recommended at 50 and\n // older\") is fine and necessary, the caller's own age is not.\n let message: string;\n if (verdicts.length === 0) {\n message = age < STORE_MIN_AGE\n ? `Too young to be vaccinated at a Walgreens pharmacy, so nothing can be booked here — suggest their paediatrician. Do not say their age.`\n : `They can have: ${alternatives.join(\", \")}. Do not say their age.`;\n } else if (blocked.length === 0) {\n const cond = verdicts.filter((v) => v.needs_clinical_judgement);\n message = \"Eligible for what they asked for. Say only that they are eligible — never their age.\"\n + (cond.length ? ` Mention that ${cond.map((v) => v.reason).join(\"; \")}, so the pharmacist will confirm at the store.` : \"\");\n } else {\n message = \"Do NOT book \"\n + blocked.map((v) => `${v.vaccine} — ${v.reason}`).join(\"; \") + \". \"\n + (age < STORE_MIN_AGE\n ? `Walgreens cannot vaccinate anyone this young at all; suggest their paediatrician.`\n : `Say that plainly and offer something they can have: ${alternatives.join(\", \")}.`)\n + \" Give the reason without stating the caller's age.\";\n }\n\n const out = {\n ok: true,\n guardian_required: age < GUARDIAN_AGE,\n can_be_vaccinated_here: age >= STORE_MIN_AGE,\n requested: verdicts,\n blocked: blocked.map((v) => v.vaccine),\n eligible_vaccines: alternatives,\n ...(unknown.length ? { unrecognised: unknown } : {}),\n state,\n source,\n // SOW: these MUST be presented to the patient before continuing.\n must_read_aloud: mustRead,\n // Warnings that carry a question the patient must answer from the listed options.\n questions,\n message:\n (mustRead.length\n ? `Read these Walgreens notices to the caller before continuing: ${mustRead.join(\" | \")}. `\n : \"\")\n + (questions.length\n ? `Then ask the ${questions.length} required question(s) in \\`questions\\` and get an answer from the listed options. `\n : \"\")\n + message,\n };\n await db.log(\"eligibility\", b.call_id ?? null,\n { dob, state, vaccines: requested.map((r) => r.raw) }, 200,\n `age ${age}, blocked: ${out.blocked.join(\",\") || \"none\"}`);\n return c.json(out);\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[235],"1ac7954c-76db-4107-8b03-0c4fe867c855","echo.ts","17b42c6a-94f7-11f1-b1c9-1607ee4eb77e",88,["D",1786393026077],"// DEBUG ONLY. Transparent pass-through to the Walgreens sandbox that records the\n// exact request body a Vapi tool sent, then returns Walgreens' response verbatim\n// (same status, same bytes). Used to see what the model actually serialises when\n// a tool talks to Walgreens directly. Not part of any production path.\n//\n// POST /echo/api/vaccine/scheduling/eligibility/v1 -> services-qa.walgreens.com/...\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./db.ts\";\n\nconst app = new Hono();\nconst TARGET = \"https://services-qa.walgreens.com\";\n\napp.all(\"/*\", async (c) => {\n const path = new URL(c.req.url).pathname.replace(/^\\/echo/, \"\");\n const raw = await c.req.text();\n\n // Redact the key before logging; everything else is recorded verbatim.\n let logged = raw;\n try {\n const parsed = JSON.parse(raw);\n if (parsed.apiKey) parsed.apiKey = `…${String(parsed.apiKey).slice(-6)}`;\n logged = JSON.stringify(parsed);\n } catch { /* keep raw */ }\n\n let status = 0;\n let body = \"\";\n try {\n const res = await fetch(`${TARGET}${path}`, {\n method: c.req.method,\n headers: { \"content-type\": \"application/json\" },\n body: raw || undefined,\n });\n status = res.status;\n body = await res.text();\n const hdrs = Object.fromEntries(\n [...c.req.raw.headers.entries()].filter(([k]) => !/^cf-|^x-forwarded|^cdn-/i.test(k)),\n );\n await db.log(\n `echo${path}`,\n null,\n { body: logged, headers: hdrs },\n status,\n body.slice(0, 200),\n );\n return new Response(body, {\n status,\n headers: { \"content-type\": res.headers.get(\"content-type\") ?? \"application/json\" },\n });\n } catch (e) {\n await db.log(`echo${path}`, null, logged, 502, String(e));\n return c.json({ error: String(e) }, 502);\n }\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[243],"686ba8d5-eecd-4fb1-afc7-64cdf2cd1c8f","db.ts","8f3751ae-8d3b-11f1-874c-1607ee4eb77e",84,["D",1785999215446],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n/** Hold lifetime. The real API does not document this; 10 min is a deliberate\n * stand-in so the voice flow is forced to handle expiry. */\nexport const HOLD_TTL_SECONDS = 600;\n\nlet ready: Promise | null = null;\n\nexport function init(): Promise {\n if (!ready) {\n ready = (async () => {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS engagements (\n engagement_id TEXT PRIMARY KEY,\n status TEXT NOT NULL,\n location_id TEXT NOT NULL,\n store_address TEXT NOT NULL,\n appointment_dt TEXT NOT NULL,\n vaccine_codes TEXT NOT NULL,\n patient TEXT,\n confirmation_code TEXT,\n created_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS slot_refs (\n ref TEXT PRIMARY KEY,\n location_id TEXT NOT NULL,\n store_address TEXT NOT NULL,\n appointment_dt TEXT NOT NULL,\n vaccine_codes TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n // Audit log: every proxy request, so empty-arg tool calls are visible.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS call_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n at INTEGER NOT NULL,\n route TEXT NOT NULL,\n call_id TEXT,\n body TEXT,\n status INTEGER,\n note TEXT\n )`);\n // Confirmation texts, composed server-side from confirmed engagements.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS sms_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n at INTEGER NOT NULL,\n call_id TEXT,\n to_phone TEXT NOT NULL,\n body TEXT NOT NULL,\n delivered INTEGER NOT NULL,\n note TEXT\n )`);\n // Ties an engagement to the Vapi call that created it, so the\n // confirmation text can be composed from ground truth. ALTER is a no-op\n // error on databases that already have the column.\n try {\n await sqlite.execute(`ALTER TABLE engagements ADD COLUMN call_id TEXT`);\n } catch {\n // column already exists\n }\n })();\n }\n return ready;\n}\n\nexport const now = () => Math.floor(Date.now() / 1000);\n\nexport async function log(\n route: string,\n callId: string | null,\n body: unknown,\n status: number,\n note = \"\",\n) {\n await init();\n await sqlite.execute({\n sql: \"INSERT INTO call_log (at, route, call_id, body, status, note) VALUES (?,?,?,?,?,?)\",\n args: [now(), route, callId, JSON.stringify(body ?? null).slice(0, 4000), status, note],\n });\n}\n\nexport async function putSlotRef(row: {\n ref: string;\n locationId: string;\n storeAddress: string;\n appointmentDt: string;\n /** [{code, productId, rxRequired}] since the doc reshape; older rows held plain strings. */\n vaccineCodes: unknown[];\n}) {\n await init();\n await sqlite.execute({\n sql:\n `INSERT OR REPLACE INTO slot_refs (ref, location_id, store_address, appointment_dt, vaccine_codes, created_at)\n VALUES (?,?,?,?,?,?)`,\n args: [\n row.ref,\n row.locationId,\n row.storeAddress,\n row.appointmentDt,\n JSON.stringify(row.vaccineCodes),\n now(),\n ],\n });\n}\n\nexport async function getSlotRef(ref: string) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT * FROM slot_refs WHERE ref = ?\",\n args: [String(ref ?? \"\").trim().toUpperCase()],\n });\n return r.rows[0] ?? null;\n}\n\nexport async function createEngagement(row: {\n engagementId: string;\n locationId: string;\n storeAddress: string;\n appointmentDt: string;\n vaccineCodes: string[];\n}) {\n await init();\n const t = now();\n await sqlite.execute({\n sql:\n `INSERT INTO engagements\n (engagement_id, status, location_id, store_address, appointment_dt, vaccine_codes, created_at, expires_at)\n VALUES (?,?,?,?,?,?,?,?)`,\n args: [\n row.engagementId,\n \"held\",\n row.locationId,\n row.storeAddress,\n row.appointmentDt,\n JSON.stringify(row.vaccineCodes),\n t,\n t + HOLD_TTL_SECONDS,\n ],\n });\n}\n\nexport async function getEngagement(id: string) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT * FROM engagements WHERE engagement_id = ?\",\n args: [String(id ?? \"\").trim()],\n });\n return r.rows[0] ?? null;\n}\n\nexport async function attachPatient(id: string, patient: unknown) {\n await init();\n await sqlite.execute({\n sql: \"UPDATE engagements SET patient = ?, status = 'patient_attached' WHERE engagement_id = ?\",\n args: [JSON.stringify(patient), id],\n });\n}\n\n/** Records which Vapi call created an engagement (proxy-side; the doc's hold\n * request has no such field, so it never goes upstream). */\nexport async function tagEngagementCall(engagementId: string, callId: string) {\n await init();\n await sqlite.execute({\n sql: \"UPDATE engagements SET call_id = ? WHERE engagement_id = ?\",\n args: [callId, engagementId],\n });\n}\n\n/** Every confirmed booking made during one Vapi call, oldest first. */\nexport async function confirmedByCall(callId: string) {\n await init();\n const r = await sqlite.execute({\n sql: `SELECT * FROM engagements\n WHERE call_id = ? AND status = 'confirmed'\n ORDER BY created_at ASC`,\n args: [callId],\n });\n return r.rows;\n}\n\nexport async function logSms(row: {\n callId: string | null;\n toPhone: string;\n body: string;\n delivered: boolean;\n note: string;\n}) {\n await init();\n await sqlite.execute({\n sql: \"INSERT INTO sms_log (at, call_id, to_phone, body, delivered, note) VALUES (?,?,?,?,?,?)\",\n args: [now(), row.callId, row.toPhone, row.body, row.delivered ? 1 : 0, row.note],\n });\n}\n\nexport async function recentSms(limit = 20) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT * FROM sms_log ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n\n/** Active engagements per appointment datetime at one store: confirmed ones\n * always count; held/patient_attached only while the hold is alive. Used to\n * enforce per-slot capacity when a caller books a group. */\nexport async function activeSlotCounts(locationId: string): Promise> {\n await init();\n const r = await sqlite.execute({\n sql: `SELECT appointment_dt, COUNT(*) AS n FROM engagements\n WHERE location_id = ?\n AND (status = 'confirmed' OR expires_at > ?)\n GROUP BY appointment_dt`,\n args: [locationId, now()],\n });\n return new Map(r.rows.map((row: any) => [String(row.appointment_dt), Number(row.n)]));\n}\n\nexport async function confirmEngagement(id: string, code: string) {\n await init();\n await sqlite.execute({\n sql: \"UPDATE engagements SET status = 'confirmed', confirmation_code = ? WHERE engagement_id = ?\",\n args: [code, id],\n });\n}\n\nexport async function recentLog(limit = 50) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT * FROM call_log ORDER BY id DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n\nexport async function logSince(since: number) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT at, route, status, call_id, note FROM call_log WHERE at >= ? ORDER BY id\",\n args: [since],\n });\n return r.rows;\n}\n\nexport async function recentAppointments(limit = 25) {\n await init();\n const r = await sqlite.execute({\n sql: \"SELECT * FROM engagements ORDER BY created_at DESC LIMIT ?\",\n args: [limit],\n });\n return r.rows;\n}\n",[250],"467df173-7f78-4694-b9ea-6e34fc8d46a8","data.ts","75dcf588-8d3b-11f1-82f7-1607ee4eb77e",69,["D",1785689860033],"// Reference data for the Walgreens vaccine scheduling mock.\n// Vaccine codes and names are the official table from\n// https://developer.walgreens.com/sites/default/files/v1_Scheduling_API.html\n// (all 22 immunization codes).\n\nexport type Vaccine = {\n code: string;\n name: string;\n spoken: string;\n aliases: string[];\n minAgeMonths: number;\n maxAgeYears: number | null;\n /** Doc: eligibility restrictions/warnings can carry a question + answers that\n * must be answered before a hold is accepted. */\n screening: string[];\n productId: string;\n category: string;\n prescriptionRequired: boolean;\n};\n\nconst v = (\n code: string,\n name: string,\n spoken: string,\n aliases: string[],\n minAgeMonths: number,\n maxAgeYears: number | null,\n screening: string[] = [],\n category = \"Routine\",\n prescriptionRequired = false,\n): Vaccine => ({\n code,\n name,\n spoken,\n aliases,\n minAgeMonths,\n maxAgeYears,\n screening,\n productId: `P${code.padStart(3, \"0\")}01`,\n category,\n prescriptionRequired,\n});\n\nexport const VACCINES: Vaccine[] = [\n v(\"03\", \"MMR\", \"MMR vaccine\", [\"mmr\", \"measles\", \"mumps\", \"rubella\"], 12, null),\n v(\"10\", \"Polio\", \"polio vaccine\", [\"polio\", \"ipv\"], 2, null),\n v(\"18\", \"Rabies\", \"rabies vaccine\", [\"rabies\"], 0, null, [], \"Travel\", true),\n v(\"21\", \"Chickenpox\", \"chickenpox vaccine\", [\"chickenpox\", \"varicella\", \"chicken pox\"], 12, null),\n v(\"33\", \"Pneumonia\", \"pneumonia vaccine\", [\n \"pneumonia\",\n \"pneumococcal\",\n \"pneumo\",\n \"pneumovax\",\n \"prevnar\",\n ], 19 * 12, null, [\"Have you received a pneumonia vaccine before?\"]),\n v(\"37\", \"Yellow Fever\", \"yellow fever vaccine\", [\"yellow fever\"], 9, null, [], \"Travel\", true),\n v(\"43\", \"Hepatitis B - Adult\", \"hepatitis B vaccine\", [\"hep b\", \"hepatitis b\", \"hepb\"], 18 * 12, null),\n v(\"52\", \"Hepatitis A - Adult\", \"hepatitis A vaccine\", [\"hep a\", \"hepatitis a\", \"hepa\"], 18 * 12, null),\n v(\"62\", \"HPV\", \"HPV vaccine\", [\"hpv\", \"gardasil\", \"human papillomavirus\"], 9 * 12, 45, [\n \"Are you currently pregnant?\",\n ]),\n v(\"87\", \"Shingles\", \"shingles vaccine\", [\"shingles\", \"shingrix\", \"zoster\", \"herpes zoster\"], 50 * 12, null, [\n \"Is this your first shingles dose, or your second?\",\n \"Do you have a weakened immune system?\",\n ]),\n v(\"93\", \"RSV\", \"RSV vaccine\", [\"rsv\", \"respiratory syncytial virus\"], 50 * 12, null, [\n \"Have you had an RSV vaccine before?\",\n ]),\n v(\"101\", \"Typhoid\", \"typhoid vaccine\", [\"typhoid\"], 2 * 12, null, [], \"Travel\", true),\n v(\"104\", \"Hepatitis A/B Combo\", \"combined hepatitis A and B vaccine\", [\n \"hep a/b\",\n \"hepatitis a and b\",\n \"twinrix\",\n \"hep ab combo\",\n ], 18 * 12, null),\n v(\"115\", \"Td/Tdap\", \"tetanus and whooping cough vaccine\", [\n \"tdap\",\n \"tetanus\",\n \"whooping cough\",\n \"pertussis\",\n \"td\",\n \"lockjaw\",\n ], 7 * 12, null),\n v(\"134\", \"Japanese Encephalitis\", \"Japanese encephalitis vaccine\", [\n \"japanese encephalitis\",\n \"je vaccine\",\n ], 2 * 12, null, [], \"Travel\", true),\n v(\"150\", \"Influenza\", \"flu shot\", [\"flu\", \"influenza\", \"flu shot\", \"flu jab\", \"flu vaccine\"], 6, null, [\n \"Do you have a severe allergy to eggs or to a previous flu vaccine?\",\n \"Are you currently running a fever or feeling unwell today?\",\n ], \"Seasonal\"),\n v(\"163\", \"Meningitis B\", \"meningitis B vaccine\", [\"meningitis\", \"meningococcal\", \"men b\", \"meningitis b\"], 10 * 12, 25),\n v(\"174\", \"Cholera\", \"cholera vaccine\", [\"cholera\"], 2 * 12, 64, [], \"Travel\", true),\n v(\"206\", \"Mpox/Smallpox\", \"mpox vaccine\", [\"mpox\", \"monkeypox\", \"smallpox\", \"jynneos\"], 18 * 12, null),\n // Speech strings say \"COVID 19\" — the voice layer reads a hyphen as \"minus\".\n v(\"207\", \"COVID-19\", \"COVID 19 vaccine\", [\n \"covid\",\n \"covid 19\",\n \"covid-19\",\n \"coronavirus\",\n \"corona\",\n \"booster\",\n \"covid booster\",\n ], 6, null, [\n \"Have you ever had a severe allergic reaction to a COVID 19 vaccine or any of its ingredients?\",\n \"Are you currently running a fever or feeling unwell today?\",\n ], \"Seasonal\"),\n v(\"223\", \"Tick-borne Encephalitis\", \"tick-borne encephalitis vaccine\", [\n \"tick-borne encephalitis\",\n \"tick borne encephalitis\",\n \"tbe\",\n ], 12, null, [], \"Travel\", true),\n v(\"317\", \"Chikungunya\", \"chikungunya vaccine\", [\"chikungunya\"], 18 * 12, null, [], \"Travel\", true),\n];\n\nexport function findVaccine(input: string): Vaccine | null {\n const q = String(input ?? \"\").trim().toLowerCase();\n if (!q) return null;\n const noPad = q.replace(/^0+/, \"\");\n const byCode = VACCINES.find((x) => x.code === q || x.code.replace(/^0+/, \"\") === noPad);\n if (byCode && /^\\d+$/.test(q)) return byCode;\n const byName = VACCINES.find((x) => x.name.toLowerCase() === q);\n if (byName) return byName;\n const byAlias = VACCINES.find((x) => x.aliases.includes(q));\n if (byAlias) return byAlias;\n // Loose contains match, longest alias first so \"hep b\" beats \"hep\".\n const all = VACCINES.flatMap((x) => x.aliases.map((a) => ({ x, a })))\n .sort((p, r) => r.a.length - p.a.length);\n for (const { x, a } of all) if (q.includes(a)) return x;\n return null;\n}\n\n/** Deterministic store fixtures, derived from the zip so results are stable. */\nexport const STORE_NAMES = [\n { suffix: \"N Michigan Ave\", city: \"Chicago\" },\n { suffix: \"W Belmont Ave\", city: \"Chicago\" },\n { suffix: \"S State St\", city: \"Chicago\" },\n { suffix: \"E Ohio St\", city: \"Chicago\" },\n { suffix: \"N Clark St\", city: \"Chicago\" },\n];\n\nexport function hash(s: string): number {\n let h = 2166136261;\n for (let i = 0; i < s.length; i++) {\n h ^= s.charCodeAt(i);\n h = Math.imul(h, 16777619);\n }\n return Math.abs(h);\n}\n",[257],"f6deb65d-e17a-4301-93bf-a5b501e0c5da","dashboard.tsx","d5595dc6-8e49-11f1-8a68-1607ee4eb77e",68,["D",1785658397155],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n// Sandbox metrics dashboard: calls, latency, appointments, conversion, cost.\n// Server-rendered from two sources of truth — the sandbox Vapi org (calls,\n// structured analysis, cost) and this val's own DB (appointments actually\n// booked). Dark-only, matching /admin.\nimport { renderToString } from \"npm:react-dom@18.2.0/server\";\nimport * as db from \"./db.ts\";\n\nconst DAYS = 14;\n\ntype CallRow = {\n id: string;\n startedAt?: string;\n endedAt?: string;\n endedReason?: string;\n cost?: number;\n analysis?: { structuredData?: any };\n messages?: any[];\n};\n\nasync function fetchCalls(): Promise {\n const key = Deno.env.get(\"VAPI_SANDBOX_KEY\");\n if (!key) return null;\n const since = new Date(Date.now() - DAYS * 86400000).toISOString();\n const r = await fetch(\n `https://api.vapi.ai/call?createdAtGt=${since}&limit=100`,\n { headers: { authorization: `Bearer ${key}`, \"user-agent\": \"curl/8.7.1\" } },\n );\n if (!r.ok) return null;\n return await r.json();\n}\n\n/** Assistant response gaps: user turn end -> next bot turn start, in ms. */\nfunction latencyGaps(messages: any[]): number[] {\n const gaps: number[] = [];\n let lastUserEnd: number | null = null;\n for (const m of messages ?? []) {\n if (m.role === \"user\" && typeof m.endTime === \"number\") lastUserEnd = m.endTime;\n else if (m.role === \"bot\" && typeof m.time === \"number\" && lastUserEnd !== null) {\n const gap = m.time - lastUserEnd;\n if (gap > 0 && gap < 15000) gaps.push(gap);\n lastUserEnd = null;\n }\n }\n return gaps;\n}\n\nconst pct = (arr: number[], p: number) => {\n if (!arr.length) return null;\n const s = [...arr].sort((a, b) => a - b);\n return s[Math.min(s.length - 1, Math.floor((p / 100) * s.length))];\n};\n\nconst fmtMin = (ms: number) => {\n const m = Math.floor(ms / 60000), s = Math.round((ms % 60000) / 1000);\n return `${m}:${String(s).padStart(2, \"0\")}`;\n};\n\nconst dayKey = (iso: string) => iso.slice(0, 10);\nconst dayLabel = (k: string) => `${+k.slice(5, 7)}/${+k.slice(8, 10)}`;\n\n// ---------------------------------------------------------------- components\n\nfunction Tile({ label, value, sub }: { label: string; value: string; sub?: string }) {\n return (\n

{label}

{value}

\n {sub ?

{sub}

: null}\n

\n );\n}\n\n/** Vertical bars: thin, 4px rounded data-end, 2px gaps, baseline anchored. */\nfunction Bars(\n { title, data, fmt }: { title: string; data: Array<[string, number, string?]>; fmt?: (n: number) => string },\n) {\n const W = 460, H = 150, PAD = 24, BASE = H - 20;\n const max = Math.max(1, ...data.map(([, v]) => v));\n const bw = Math.min(28, (W - PAD * 2) / data.length - 2);\n const f = fmt ?? ((n: number) => String(n));\n return (\n

{title}

\n \n

\n );\n}\n\n/** Horizontal category bars with count labels (identity carried by row labels). */\nfunction HBars({ title, data }: { title: string; data: Array<[string, number]> }) {\n const max = Math.max(1, ...data.map(([, v]) => v));\n return (\n

{title}

\n {data.length === 0 ?

No data yet

: data.map(([label, v]) => (\n

\n {label}\n \n \n \n {v}\n

\n ))}\n

\n );\n}\n\n// -------------------------------------------------------------------- page\n\nexport async function dashboardHtml(): Promise {\n await db.init();\n const calls = await fetchCalls();\n const appts = await db.recentAppointments(500) as any[];\n\n const ended = (calls ?? []).filter((c) => c.endedAt);\n const days: string[] = Array.from({ length: DAYS }, (_, i) =>\n new Date(Date.now() - (DAYS - 1 - i) * 86400000).toISOString().slice(0, 10));\n\n const callsPerDay = days.map((d) =>\n [dayLabel(d), ended.filter((c) => dayKey(c.startedAt ?? \"\") === d).length] as [string, number]);\n\n const confirmed = appts.filter((a) => a.status === \"confirmed\");\n const apptsPerDay = days.map((d) => {\n const n = confirmed.filter((a) => new Date(Number(a.created_at) * 1000).toISOString().slice(0, 10) === d).length;\n return [dayLabel(d), n] as [string, number];\n });\n\n const durations = ended\n .map((c) => new Date(c.endedAt!).getTime() - new Date(c.startedAt!).getTime())\n .filter((ms) => ms > 0);\n const allGaps = ended.flatMap((c) => latencyGaps(c.messages ?? []));\n const perCallLatency = ended\n .filter((c) => (c.messages ?? []).length > 0)\n .slice(0, 12)\n .map((c) => {\n const med = pct(latencyGaps(c.messages!), 50);\n const label = c.startedAt ? dayLabel(dayKey(c.startedAt)) : \"?\";\n return [label, med ? Math.round(med / 100) / 10 : 0, `call ${c.id.slice(-6)}: median ${med ? (med / 1000).toFixed(1) : \"?\"}s response`] as [string, number, string];\n })\n .reverse();\n\n const booked = ended.filter((c) => c.analysis?.structuredData?.booked === true);\n const people = ended.reduce((s, c) => s + (Number(c.analysis?.structuredData?.people_booked) || 0), 0);\n const totalCost = ended.reduce((s, c) => s + (Number(c.cost) || 0), 0);\n\n const reasons = new Map();\n for (const c of ended) reasons.set(c.endedReason ?? \"unknown\", (reasons.get(c.endedReason ?? \"unknown\") ?? 0) + 1);\n\n const vaccines = new Map();\n for (const a of confirmed) {\n try {\n for (const code of JSON.parse(String(a.vaccine_codes))) {\n const k = typeof code === \"string\" ? code : code.code;\n vaccines.set(k, (vaccines.get(k) ?? 0) + 1);\n }\n } catch { /* old rows */ }\n }\n const VAX_NAMES: Record = {\n \"150\": \"Flu\", \"87\": \"Shingles\", \"207\": \"COVID-19\", \"93\": \"RSV\", \"33\": \"Pneumonia\", \"115\": \"Tdap\",\n };\n const vaxRows = [...vaccines.entries()]\n .map(([k, v]) => [VAX_NAMES[k] ?? `code ${k}`, v] as [string, number])\n .sort((a, b) => b[1] - a[1]);\n\n const medDur = pct(durations, 50), medLat = pct(allGaps, 50), p95Lat = pct(allGaps, 95);\n\n const page = renderToString(\n \n \n Walgreens sandbox — metrics\n \n \n \n \n

Walgreens sandbox — metrics

\n Last {DAYS} days · calls from the sandbox Vapi org · bookings from the mock DB (shared across demo lines) · admin\n

\n\n {calls === null\n ?

Could not reach the sandbox Vapi org (is VAPI_SANDBOX_KEY set?). Booking data below is still live.

\n : null}\n\n

\n \n \n \n \n \n \n

\n\n

\n \n \n `${Math.round(n * 10) / 10}s`} />\n b[1] - a[1])} />\n \n

Recent calls

\n \n \n \n \n \n {ended.slice(0, 12).map((c) => {\n const sd = c.analysis?.structuredData ?? {};\n const dur = new Date(c.endedAt!).getTime() - new Date(c.startedAt!).getTime();\n return (\n \n \n \n \n \n \n \n \n );\n })}\n \n

Started	Length	Ended	Booked	People	Cost
{(c.startedAt ?? \"\").slice(5, 16).replace(\"T\", \" \")}	{fmtMin(dur)}	{c.endedReason ?? \"—\"}	{sd.booked ? \"yes\" : \"no\"}	{sd.people_booked ?? \"—\"}	${(Number(c.cost) \|\| 0).toFixed(2)}

\n\n

\n {\n const t = e.target.closest('[data-tip]');\n if (t) {\n tip.textContent = t.getAttribute('data-tip');\n tip.style.display = 'block';\n tip.style.left = Math.min(e.clientX + 12, innerWidth - 270) + 'px';\n tip.style.top = (e.clientY + 14) + 'px';\n } else tip.style.display = 'none';\n });`,\n }}\n />\n \n ,\n );\n return `${page}`;\n}\n",[264],"0883b894-4184-46a2-99a0-81e5c18cab83","batch.ts","08e24bba-96d5-11f1-b0fd-1607ee4eb77e",217,["D",1788677594765],51,"// Batch booking: place ALL holds at once, then hand out one patient slot at a time.\n//\n// WHY\n// ---\n// Interleaving \"hold one person -> collect their details -> confirm -> hold the\n// next\" produced a genuinely bad call (019ff972): the agent allocated a slot,\n// checked eligibility for the wife, then the husband, held ONE appointment, then\n// got lost collecting details and the caller hung up. Only one hold was ever\n// placed, so consecutive times were never guaranteed.\n//\n// The operator's required order is: count people -> vaccines -> ZIP/store ->\n// everyone's DOB -> eligibility -> pick a time -> HOLD EVERYONE AT ONCE ->\n// then collect names per patient -> confirm each.\n//\n// So this endpoint places every hold itself, back to back, in one call. The agent\n// does no slot arithmetic and no per-person hold sequencing. Engagement ids are\n// kept here and handed out one at a time by /next_patient, so the agent can never\n// attach the wrong patient to the wrong appointment.\n//\n// walgreens_add_patient and walgreens_confirm_appointment still post DIRECTLY to\n// Walgreens — they just receive the engagementId from /next_patient.\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as db from \"./db.ts\";\nimport * as budget from \"./errbudget.ts\";\n\nconst app = new Hono();\n// SOW error budget: every 4xx/5xx from here bumps the per-call count and stamps\n// `transfer_required` onto the body when 3-in-a-row or 6-total is reached.\napp.use(\"*\", budget.middleware());\nconst WG = \"https://services-qa.walgreens.com/api/vaccine/scheduling\";\nconst KEY = () => Deno.env.get(\"WALGREENS_API_KEY\") ?? \"\";\nconst AFF = () => Deno.env.get(\"WALGREENS_AFF_ID\") ?? \"extest\";\n\nlet ready: Promise | null = null;\nfunction init() {\n if (!ready) {\n ready = (async () => {\n await db.init();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS batches (\n call_id TEXT PRIMARY KEY,\n data TEXT NOT NULL,\n updated_at INTEGER NOT NULL\n )`);\n // Added 2026-09-06 so a batch can still be found after a voice→text handoff,\n // where the call id changes. Existing rows keep NULL and match nothing.\n try {\n await sqlite.execute(\"ALTER TABLE batches ADD COLUMN customer_digits TEXT\");\n } catch { /* column already exists */ }\n await sqlite.execute(\n \"CREATE INDEX IF NOT EXISTS batches_customer ON batches (customer_digits, updated_at)\");\n })();\n }\n return ready;\n}\n\nconst load = async (id: string) => {\n const r = await sqlite.execute({ sql: \"SELECT data FROM batches WHERE call_id = ?\", args: [id] });\n return r.rows[0] ? JSON.parse(String(r.rows[0].data)) : null;\n};\n\n/**\n * Find this caller's batch even when the conversation has changed channel.\n *\n * A voice→text handoff gets a NEW id: `{{call.id}}` in a text thread is the chat's\n * own id, not the phone call's. On the first real handoff the holds were placed\n * under the voice call and then invisible in the text thread — `next_patient`\n * answered `no_batch`, the booking could not be finished, and the caller was\n * transferred to a person with two appointments sitting held.\n *\n * So: try the call id, then fall back to the most recent batch for the same phone\n * number. The number is the thing that survives the channel change. A 12-hour\n * window keeps it from ever matching an unrelated booking from another day.\n */\nconst loadForCaller = async (id: string, customer: string) => {\n const direct = await load(id);\n if (direct) return { batch: direct, key: id };\n const num = String(customer ?? \"\").replace(/\\D/g, \"\").slice(-10);\n if (num.length !== 10) return { batch: null, key: id };\n const r = await sqlite.execute({\n sql: `SELECT call_id, data FROM batches\n WHERE customer_digits = ? AND updated_at > ?\n ORDER BY updated_at DESC LIMIT 1`,\n args: [num, Math.floor(Date.now() / 1000) - 12 * 3600],\n });\n if (!r.rows[0]) return { batch: null, key: id };\n return { batch: JSON.parse(String(r.rows[0].data)), key: String(r.rows[0].call_id) };\n};\nconst save = async (id: string, d: any) =>\n sqlite.execute({\n sql: `INSERT OR REPLACE INTO batches (call_id, data, updated_at, customer_digits)\n VALUES (?,?,?,?)`,\n args: [\n id, JSON.stringify(d), Math.floor(Date.now() / 1000),\n String(d?.customer ?? \"\").replace(/\\D/g, \"\").slice(-10) || null,\n ],\n });\n\nfunction slotHour(s: string): number {\n const m = String(s).trim().match(/^(\\d{1,2}):(\\d{2})\\s*(am|pm)$/i);\n if (!m) return -1;\n let h = Number(m[1]) % 12;\n if (/pm/i.test(m[3])) h += 12;\n return h + Number(m[2]) / 60;\n}\nconst speak = (s: string) => String(s).replace(/^0/, \"\");\n\nasync function wg(path: string, body: Record, method = \"POST\") {\n const res = await fetch(`${WG}${path}`, {\n method,\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiKey: KEY(), affId: AFF(), ...body }),\n });\n const text = await res.text();\n try {\n return { status: res.status, body: text.trim() ? JSON.parse(text) : {} };\n } catch {\n return { status: res.status, body: {} };\n }\n}\n\nasync function read(c: any) {\n let b: any = null;\n try {\n b = await c.req.json();\n } catch { /* empty */ }\n if (!b || typeof b !== \"object\") b = {};\n for (const k of Object.keys(b)) {\n if (b[k] === \"blank\" || (typeof b[k] === \"string\" && /^\\{\\{.*\\}\\}$/.test(b[k].trim()))) b[k] = null;\n }\n return b;\n}\nconst fail = (c: any, s: number, code: string, message: string) =>\n c.json({ ok: false, error_code: code, message }, s);\n\n/**\n * POST /batch/hold_all\n * Places one hold per person in consecutive free slots, in a single call.\n */\napp.post(\"/hold_all\", async (c) => {\n await init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n if (!callId) return fail(c, 400, \"call_id_required\", \"Internal: call_id missing.\");\n\n const zip = String(b.zip_code ?? \"\").replace(/\\D/g, \"\").slice(0, 5);\n const state = String(b.state ?? \"\").trim().toUpperCase();\n const storeNumber = String(b.store_number ?? \"\").trim();\n const date = String(b.date ?? \"\").trim();\n let party = Math.max(1, Math.min(6, Number(b.party_size ?? 1) || 1));\n const vaccines = (Array.isArray(b.vaccines) ? b.vaccines : [b.vaccines])\n .map((v: unknown) => String(v ?? \"\").trim()).filter(Boolean);\n const screening = String(b.screening_summary ?? \"No previous severe reaction reported; nobody unwell today.\");\n // Optional: one entry per person, in order. [\"150\"] / [\"207\"] etc. Anything\n // missing falls back to the shared `vaccines` list.\n const perPerson: string[][] = (Array.isArray(b.per_person_vaccines) ? b.per_person_vaccines : [])\n .map((v: unknown) => (Array.isArray(v) ? v : [v])\n .map((x: unknown) => String(x ?? \"\").trim()).filter(Boolean))\n .filter((v: string[]) => v.length > 0);\n\n // Dates of birth, in the same order as the party.\n //\n // They are collected at the eligibility step and needed again at add_patient,\n // forty turns later. On call 01a07536 the agent lost the second person's — asked\n // for it once, checked eligibility with it, then had to ask again near the end\n // (\"I didn't catch the date of birth\"). Anything the model must hold across the\n // whole call is better held here and handed back by next_patient.\n const perPersonDob: string[] = (Array.isArray(b.per_person_dob) ? b.per_person_dob : [])\n .map((d: unknown) => String(d ?? \"\").trim())\n .filter((d: string) => /^\\d{4}-\\d{2}-\\d{2}$/.test(d));\n\n // The availability search and the productId lookup must cover every code\n // anybody wants, so the union includes the per-person lists.\n for (const list of perPerson) {\n for (const code of list) if (!vaccines.includes(code)) vaccines.push(code);\n }\n\n if (!zip || !state || !storeNumber || !date || vaccines.length === 0) {\n return fail(c, 400, \"missing_arguments\",\n \"Need zip_code, state, store_number, date, party_size and vaccines.\");\n }\n\n // v2 hardening: the agent must ASSERT that the caller said yes to a specific\n // time. Holds never release, so a hold at a time nobody agreed to is worse than\n // none. v1 tools do not send this field, so only an explicit `false` refuses;\n // the v2 tool marks the field required.\n if (b.caller_agreed_time === false) {\n return fail(c, 409, \"time_not_agreed\",\n \"NOTHING was reserved. The caller has not said yes to a specific start time. \"\n + \"Offer the listed times, get a clear yes to one of them, then call this again \"\n + \"with caller_agreed_time true.\");\n }\n\n // IDEMPOTENT unless the agent explicitly asks for extra people.\n //\n // Appending on every call was worse than overwriting. When a confirm failed the\n // agent re-searched and called this again for the SAME party, which placed a\n // second set of holds — a real run ended with a duplicate 4:20 hold for the wife\n // and the agent telling the caller \"the system created a duplicate hold\". Holds\n // never release, so that duplicate is permanent.\n //\n // So: a second call for the same party returns what is already held and sends the\n // agent to next_patient. Adding people to an existing booking is still possible,\n // but only by saying so with additional_people.\n const existing = await load(callId);\n let extra = Math.max(0, Math.min(6, Number(b.additional_people ?? 0) || 0));\n\n // TOP UP a shortfall automatically.\n //\n // The idempotency guard below was too strict. On a voice run a party of three got\n // 2 of 3 held; the agent then re-searched and called this again to place the third\n // — the only sensible recovery — and got `already_held`, so the third person could\n // never be added. The caller walked away and abandoned two holds.\n //\n // If the caller's party is bigger than what is already held, the difference is\n // exactly what still needs holding, so do that without requiring the agent to\n // remember a special field.\n if (existing?.people?.length && !extra && party > existing.people.length) {\n extra = party - existing.people.length;\n }\n\n // A DIFFERENT store or date means the caller is MOVING the whole party, not\n // adding to it. Relocate: hold the full party at the new place and replace the\n // state.\n //\n // Refusing this was a dead end. On a voice run 1 of 2 was held at Marlow Road,\n // the agent sensibly offered both people a different store, and the refusal left\n // it arguing with the caller about a hold it cannot release:\n // \"I can't wait for a hold to lapse while keeping you on the line.\"\n // The caller hung up unbooked. Abandoning the stray hold costs one slot that\n // lapses; refusing costs the whole booking.\n const relocating = !!existing?.people?.length\n && (String(existing.storeNumber) !== storeNumber || String(existing.date) !== date);\n const abandoned = relocating ? existing.people.length : 0;\n if (relocating) {\n extra = 0; // full party at the new store/date, not a top-up\n await db.log(\"batch/relocate\", callId,\n { from: { store: existing.storeNumber, date: existing.date }, to: { store: storeNumber, date } },\n 200, `abandoning ${abandoned} hold(s): ${existing.people.map((p: any) => p.engagement_id).join(\",\")}`);\n }\n\n if (existing?.people?.length && !extra && !relocating) {\n const left = existing.people.filter((p: any) => !p.done).length;\n return c.json({\n ok: true,\n already_held: true,\n held: existing.people.length,\n store: `${existing.street}, ${existing.city}`,\n date: existing.date,\n times: existing.people.map((p: any) => p.when_spoken),\n message: `These appointments are ALREADY held for this call (${existing.people\n .map((p: any) => p.when_spoken).join(\", \")}) — nothing new was reserved and `\n + \"nothing was lost. Do NOT hold again. Call next_patient to collect details \"\n + `for the ${left} still needing them. Only pass additional_people if the caller `\n + \"has added somebody new to the party.\",\n });\n }\n\n // additional_people is the party size for THIS round of holds.\n if (extra) party = extra;\n\n // Live availability for that store/date.\n const ts = await wg(\"/timeslots/v1\", {\n state, zipCode: zip, dob: String(b.dob ?? \"1980-01-01\"), vaccine: vaccines,\n appointmentAvailability: { startDateTime: date, endDateTime: date },\n });\n const loc = (ts.body?.locations ?? []).find(\n (l: any) => String(l.storenumber ?? \"\") === storeNumber,\n );\n if (!loc) {\n return fail(c, 404, \"store_not_offering\",\n \"That store is not offering this vaccine on that date. Offer another store or day.\");\n }\n const av = (loc.appointmentAvailability ?? []).find((a: any) => a.date === date);\n const all: string[] = av?.slots ?? [];\n\n // EVERY vaccine code has its OWN productId — look it up per code.\n //\n // This used to take `manufacturer[0].productId` and reuse it for every code. On a\n // real call (019ff9ea) one person wanted flu and the other COVID, so COVID (207)\n // was sent with the FLU productId and Walgreens rejected EVERY slot with\n // FC_905_Conflict — 31 in a row. That error reads as \"that time is taken\", so the\n // agent kept re-searching other days and told the caller the times had just gone.\n // Proved on 2026-08-13, same date and store: both codes with the flu productId\n // → FC_905_Conflict; each code with its own productId → a real engagementId.\n const productFor = new Map();\n for (const m of (av?.manufacturer ?? [])) {\n if (m?.vaccineCode && m?.productId) productFor.set(String(m.vaccineCode), String(m.productId));\n }\n const missingProduct = vaccines.filter((v) => !productFor.has(v));\n if (!all.length) {\n return fail(c, 404, \"no_slots\", \"No times left at that store on that date.\");\n }\n if (missingProduct.length) {\n return fail(c, 404, \"vaccine_not_offered\",\n `That store is not offering vaccine code(s) ${missingProduct.join(\", \")} on ${date}. `\n + \"Offer another day or store, or drop that vaccine — nothing was reserved.\");\n }\n\n const wantHour = slotHour(String(b.start_time ?? all[0]));\n const from = all.filter((s) => slotHour(s) >= (wantHour >= 0 ? wantHour : 0));\n if (from.length === 0) {\n return fail(c, 409, \"nothing_that_late\",\n `Nothing is free from ${speak(String(b.start_time ?? \"\"))} at that store. Offer an earlier time or another day.`);\n }\n\n // Find a window that fits the WHOLE party before holding anything.\n //\n // Holding one slot at a time and stopping at the first gap produced a dead end\n // on a real two-person run: the store had 1:50 free but nothing next to it, so\n // person 1 got held, person 2 could not, and the hold could not be released\n // (sandbox holds never release). The caller was left stranded.\n //\n // So: scan for `party` back-to-back slots first. Listed slots are holdable\n // (verified 16/16), so a contiguous run in the list is a reliable predictor.\n // If no window fits, return WITHOUT holding anything, so nothing is orphaned.\n const windowIn = (list: string[], want: number) => {\n for (let i = 0; i + want <= list.length; i++) {\n let ok = true;\n for (let k = 1; k < want; k++) {\n if (slotHour(list[i + k]) - slotHour(list[i + k - 1]) > 0.35) { ok = false; break; }\n }\n if (ok) return list.slice(i, i + want);\n }\n return null;\n };\n // Ask for ONE SPARE slot first. Because a listed slot can refuse to hold, a\n // window sized exactly to the party leaves no room to step past one, and a\n // party of three came up one short for that reason alone.\n // Only for a group: a lone caller needs no spare, because with nobody to stay\n // next to the walk below can step past a refusal freely — and demanding a spare\n // pushed a single caller to a later window for no reason.\n const spare = party > 1 ? party + 1 : party;\n\n // ONLY at or after the time the caller agreed to. Never silently elsewhere.\n //\n // This used to fall back to `all` — any window in the day. Three voice calls were\n // destroyed by it: a caller who agreed 6:00 pm got holds placed at 8:30 am, one\n // who agreed 2:00 pm got 9:40 am, and because holds are PERMANENT the agent then\n // tried to fix it by holding again, ending up with people spread across different\n // times and even different stores (\"the system is showing a mismatch in the held\n // appointments... I can't honestly confirm all 3 times\").\n //\n // Placing a hold at a time the caller never agreed to is worse than placing none,\n // so when the agreed time cannot fit the party we reserve NOTHING and hand back\n // the windows that WOULD work, for the agent to offer out loud.\n //\n // And \"at or after\" is not enough on its own: a depleted afternoon made a caller\n // who agreed 12:50 pm get held at 6:00 pm, five hours later. More than two hours\n // past what they agreed to is a different appointment, so it gets offered rather\n // than reserved.\n const near = (w: string[] | null) =>\n w && (wantHour < 0 || slotHour(w[0]) - wantHour <= 2) ? w : null;\n const window = near(windowIn(from, spare)) ?? near(windowIn(from, party));\n if (!window) {\n const alt = [];\n for (const want of [spare, party]) {\n for (let i = 0; i + want <= all.length && alt.length < 3; i++) {\n let ok = true;\n for (let k = 1; k < want; k++) {\n if (slotHour(all[i + k]) - slotHour(all[i + k - 1]) > 0.35) { ok = false; break; }\n }\n if (ok && !alt.includes(speak(all[i]))) alt.push(speak(all[i]));\n }\n if (alt.length) break;\n }\n return fail(c, 409, \"no_window_at_that_time\",\n `NOTHING was reserved. ${party} back-to-back times are not free from `\n + `${speak(String(b.start_time ?? \"\"))} at that store on ${date}. `\n + (alt.length\n ? `These start times on that date do fit all ${party}: ${alt.join(\", \")}. `\n + \"Offer those to the caller, get their choice, and call this again with it.\"\n : `No run of ${party} back-to-back times exists there that day — offer another `\n + \"day or the other store.\"));\n }\n\n // Walk the window, but STEP PAST a slot that refuses to hold.\n //\n // Walgreens' timeslots list is stale with respect to hold state: a listed slot\n // can still return FC_905_Conflict. Measured on 2026-08-12 — a party of 2 and a\n // party of 6 each lost their LAST slot this way while a party of 4 filled\n // cleanly. Stopping at the first refusal left the caller one short for a reason\n // that had nothing to do with the store being full.\n //\n // So on a refusal, try the next slot instead, as long as it stays within 21\n // minutes of the previous person (one skipped 10-minute slot). The party stays\n // together and a stale listing no longer costs somebody their appointment.\n const candidates = all.slice(all.indexOf(window[0]));\n const people: any[] = [];\n const failures: string[] = [];\n let idx = 0;\n while (people.length < party && idx < candidates.length) {\n const slot = candidates[idx++];\n if (people.length && slotHour(slot) - slotHour(people[people.length - 1].slot) > 0.35) break;\n // Each person gets only THEIR OWN vaccines.\n //\n // The union used to go on every hold, so on a call where the husband wanted\n // flu and the wife wanted COVID, both would have been booked for both. Pass\n // per_person_vaccines to keep them separate; without it everyone gets the\n // same list, which is right for the common \"flu shots for all of us\" case.\n const mine = perPerson[people.length] ?? vaccines;\n const h = await wg(\"/hold/v1\", {\n locationId: loc.locationId,\n appointmentDate: date,\n slot,\n channel: \"web\",\n client: \"web\",\n engagementType: \"Guest\",\n vaccines: mine.map((code) => ({\n code,\n productId: productFor.get(code),\n rxRequired: false,\n })),\n userResponses: mine.map((code) => ({\n vaccineCode: code,\n details: [{ question: \"Screening asked on call\", answer: screening }],\n })),\n });\n const eid = h.body?.engagementId;\n if (eid) {\n people.push({\n person_number: people.length + 1,\n slot,\n when_spoken: speak(slot),\n engagement_id: String(eid),\n vaccines: mine,\n dob: perPersonDob[people.length] ?? null,\n done: false,\n });\n } else {\n failures.push(`${speak(slot)}: ${(h.body?.errors ?? [{}])[0]?.code ?? h.status}`);\n }\n }\n\n // APPEND to any batch already placed on this call, never replace it.\n //\n // A second hold_all (booking the rest of a party on another day) used to\n // overwrite the row, so the first holds vanished from state: next_patient could\n // no longer hand them out and those Walgreens holds were orphaned for good.\n // On a relocation the old people are deliberately dropped: their holds are at a\n // store or date the caller no longer wants, and they will lapse.\n const prior = relocating ? null : await load(callId);\n const carried = prior?.people ?? [];\n for (const p of people) p.person_number = carried.length + p.person_number;\n\n const batch = {\n callId,\n // The caller's number, so the batch survives a voice→text handoff (the call id\n // does not). Set by a {{customer.number}} static parameter on the tool.\n customer: String(b.customer_number ?? existing?.customer ?? \"\").trim() || null,\n state, zip, storeNumber, date, vaccines,\n productIds: Object.fromEntries(productFor),\n locationId: loc.locationId,\n street: String(loc.address?.line1 ?? \"\"), city: String(loc.address?.city ?? \"\"),\n party: carried.length + party,\n people: [...carried, ...people],\n handed: 0,\n };\n await save(callId, batch);\n await db.log(\"batch/hold_all\", callId,\n { store: storeNumber, date, party }, people.length ? 200 : 409,\n `held ${people.length}/${party}` + (failures.length ? ` | failed: ${failures.join(\"; \")}` : \"\"));\n\n if (people.length === 0) {\n return fail(c, 409, \"no_holds_placed\",\n \"None of those times could be held. Offer a different time or day and try again.\");\n }\n\n const times = people.map((p) => p.when_spoken);\n const short = people.length < party;\n return c.json({\n ok: true,\n held: people.length,\n requested: party,\n store: `${batch.street}, ${batch.city}`,\n date,\n times,\n ...(short ? { shortfall: party - people.length } : {}),\n // No `note` about having moved the time any more: holds are only ever placed at\n // or after the time the caller agreed to, so there is nothing to apologise for.\n message: short\n ? `Only ${people.length} of ${party} could be held back to back (${times.join(\", \")}). `\n + \"Tell the caller how many you have and offer another day for the rest.\"\n : `All ${people.length} held back to back at ${times.join(\", \")}. Tell the caller the `\n + \"times, then collect each patient's details — call next_patient to get them in order.\",\n });\n});\n\n/**\n * POST /batch/timeslots\n * v2 hardening: a DOB-validating front for Walgreens timeslots/v1. On a real call\n * (and again in simulation S2-03) the model, told \"I'm in a hurry\", invented a date\n * of birth (today's date) and searched before asking. The prompt forbade it; a rule\n * cannot stop a value the model can type. So the search refuses any dob that is\n * missing, unparseable, in the future, within the last 60 days, equal to a search\n * date, or one of the usual placeholders, and tells the agent to ask.\n */\napp.post(\"/timeslots\", async (c) => {\n await init();\n const b = await read(c);\n const dob = String(b.dob ?? \"\").trim();\n const start = String(b.appointmentAvailability?.startDateTime ?? \"\").trim();\n const today = new Date().toISOString().slice(0, 10);\n const cutoff = new Date(Date.now() - 60 * 86400000).toISOString().slice(0, 10);\n const placeholders = new Set([\"1980-01-01\", \"2000-01-01\", \"1900-01-01\", \"1970-01-01\", \"1990-01-01\", \"2020-01-01\"]);\n const bad = !/^\\d{4}-\\d{2}-\\d{2}$/.test(dob) || dob > cutoff || dob === start || placeholders.has(dob)\n || Number.isNaN(new Date(dob).getTime());\n if (bad) {\n await db.log(\"batch/timeslots\", String(b.call_id ?? \"\"), { dob, start }, 400, \"dob rejected\");\n return fail(c, 400, \"dob_required\",\n \"No search was run. A real date of birth from the caller is required before searching for \"\n + \"times. Ask the caller for it now, then check eligibility, then search again.\");\n }\n const body: Record = { ...b };\n delete body.call_id;\n const ts = await wg(\"/timeslots/v1\", body);\n await db.log(\"batch/timeslots\", String(b.call_id ?? \"\"), { dob, start, zip: b.zipCode }, ts.status,\n `${(ts.body?.locations ?? []).length} locations`);\n return c.json(ts.body, ts.status as any);\n});\n\n/**\n * POST /batch/next_patient\n * Hands out ONE held appointment at a time for detail collection, so the agent\n * cannot attach the wrong patient to the wrong appointment.\n */\napp.post(\"/next_patient\", async (c) => {\n await init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n // Caller-aware: after a voice→text handoff the id differs, so fall back to the\n // number. `key` is whichever id the batch is actually stored under — always save\n // back to that, or the text thread would fork its own copy.\n const { batch, key } = await loadForCaller(callId, String(b.customer_number ?? \"\"));\n if (!batch) {\n return fail(c, 404, \"no_batch\",\n \"No appointments have been held for this call yet — call hold_all_appointments first.\");\n }\n // GATE: never move on while the person already handed out is unconfirmed.\n //\n // This is the structural fix for the false confirmation on call 019ffc56. The\n // agent took Lisa's engagement id from here, collected her name, never called\n // add_patient or confirm, and told the caller \"Lisa Ray is confirmed... you both\n // are booked\". Nothing stopped it, because saying \"booked\" and calling confirm are\n // independent acts — which is exactly why a prompt rule cannot fix this.\n //\n // `confirmed` is set ONLY by /batch/confirm, the one place that talks to\n // Walgreens' confirm endpoint and sees the 204.\n const stuck = batch.people.find((p: any) => p.handed && p.confirmed !== true);\n if (b.retry !== true && stuck) {\n return fail(c, 409, \"previous_patient_not_confirmed\",\n `Person ${stuck.person_number} (${stuck.when_spoken}) is NOT booked — confirm has `\n + \"not returned booked for them, so nobody may be told they are booked. Finish \"\n + \"that person first: walgreens_add_patient, then walgreens_confirm_appointment \"\n + `with engagement_id \"${stuck.engagement_id}\". Only then ask for the next patient.`);\n }\n // `done` follows `confirmed`. It used to be set only by /patient_done, which the\n // agent is not required to call, so every multi-person call ended on a spurious\n // 409 `all_handed_out`.\n if (b.retry !== true) {\n for (const p of batch.people) if (p.confirmed === true) p.done = true;\n }\n\n // retry hands back the same one, for when add_patient failed.\n const pending = b.retry === true\n ? batch.people.find((p: any) => p.handed && !p.done) ?? batch.people.find((p: any) => !p.done)\n : batch.people.find((p: any) => !p.done && !p.handed);\n\n if (!pending) {\n const left = batch.people.filter((p: any) => !p.done);\n if (left.length === 0) {\n return c.json({\n ok: true, all_done: true,\n store: `${batch.street}, ${batch.city}`,\n date: batch.date,\n booked: batch.people.map((p: any) => p.when_spoken),\n message: \"Every held appointment now has details. Recap all of them and finish.\",\n });\n }\n return fail(c, 409, \"all_handed_out\",\n \"Every appointment has already been handed out. Use retry true if one failed.\");\n }\n\n pending.handed = true;\n await save(key, batch);\n // Count by \"not yet handed out\" — the agent is not required to call\n // patient_done, so `done` is unreliable and reporting from it said \"2 more\"\n // for every person in a party of three.\n const remaining = batch.people.filter((p: any) => !p.handed).length;\n await db.log(\"batch/next_patient\", callId, { retry: b.retry === true }, 200,\n `person ${pending.person_number} -> ${pending.slot}`);\n\n return c.json({\n ok: true,\n person_number: pending.person_number,\n of_party: batch.people.length,\n engagement_id: pending.engagement_id,\n vaccines: pending.vaccines ?? batch.vaccines,\n // Handed back so the agent never has to remember a date of birth it collected\n // at the eligibility step, forty turns earlier.\n dob: pending.dob ?? null,\n slot: pending.slot,\n when_spoken: pending.when_spoken,\n store: `${batch.street}, ${batch.city}`,\n date: batch.date,\n remaining_after_this: remaining,\n message: `Collect details for person ${pending.person_number} of ${batch.people.length} `\n + `(${pending.when_spoken}). Pass engagement_id \"${pending.engagement_id}\" to `\n + \"walgreens_add_patient and walgreens_confirm_appointment for THIS person only. \"\n + (remaining > 0\n ? `${remaining} more to do after this — call next_patient again for each.`\n : \"This is the last one.\"),\n });\n});\n\n/**\n * POST /batch/add_patient {call_id, engagement_id, firstName, lastName, dob, contact}\n * Gatekeeper for the one step that carries PII.\n *\n * On call 01a065b6 the agent skipped next_patient and attached the WIFE's name to\n * the HUSBAND's already-confirmed engagement. Walgreens accepts patient/v1 on a\n * confirmed engagement (201), so a booked appointment can be silently relabelled\n * with somebody else's name. The only defence is to refuse the wrong id BEFORE it\n * reaches Walgreens — and only this server knows which id is current. Fields are\n * forwarded to Walgreens patient/v1 unchanged; nothing personal is stored here.\n */\napp.post(\"/add_patient\", async (c) => {\n await init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n const eid = String(b.engagement_id ?? b.engagementId ?? \"\").trim();\n const { batch, key } = await loadForCaller(callId, String(b.customer_number ?? \"\"));\n if (!batch?.people?.length) {\n return fail(c, 409, \"no_batch\",\n \"Nothing is held on this call yet — hold_all_appointments first, then next_patient.\");\n }\n const current = batch.people.find((p: any) => p.handed && p.confirmed !== true);\n if (!current) {\n return fail(c, 409, \"no_patient_in_progress\",\n \"No patient is in progress. Call next_patient to get the next person's engagement_id \"\n + \"before saving anyone's details.\");\n }\n if (eid !== current.engagement_id) {\n const owner = batch.people.find((p: any) => p.engagement_id === eid);\n const who = owner\n ? `person ${owner.person_number} (${owner.when_spoken})${owner.confirmed ? \", who is ALREADY BOOKED\" : \"\"}`\n : \"nobody on this call\";\n return fail(c, 409, \"wrong_engagement_id\",\n `That engagement_id belongs to ${who}. The patient you are saving now is person `\n + `${current.person_number} (${current.when_spoken}) — use engagement_id `\n + `\"${current.engagement_id}\". Nothing was sent to Walgreens.`);\n }\n\n // Phone: exactly ten digits, however the caller grouped them; formatted the way\n // Walgreens wants. Placeholders and templates never get through.\n const phones = Array.isArray(b.contact?.phones) ? b.contact.phones : [];\n const raw = String(phones[0]?.number ?? \"\");\n const digits = raw.replace(/\\D/g, \"\").replace(/^1(?=\\d{10}$)/, \"\");\n if (digits.length !== 10) {\n return fail(c, 400, \"phone_invalid\",\n `A mobile number must be exactly ten digits; got \"${raw}\". Use the caller ID, or ask `\n + \"only for the digits that are missing — never a placeholder.\");\n }\n const number = `${digits.slice(0, 3)}-${digits.slice(3, 6)}-${digits.slice(6)}`;\n const first = String(b.firstName ?? \"\").trim();\n const last = String(b.lastName ?? \"\").trim();\n // Fall back to the date of birth captured at hold time. The agent asking a caller\n // to repeat a date it already took is the most avoidable kind of bad call.\n const given = String(b.dob ?? \"\").trim();\n const dob = /^\\d{4}-\\d{2}-\\d{2}$/.test(given) ? given : String(current.dob ?? \"\");\n if (!first || !last || !/^\\d{4}-\\d{2}-\\d{2}$/.test(dob)) {\n return fail(c, 400, \"patient_fields\",\n \"Need firstName, lastName and dob as YYYY-MM-DD. The date of birth for this person \"\n + \"is in the next_patient result — use that rather than asking the caller again.\");\n }\n\n const r = await wg(\"/patient/v1\", {\n partnerId: Deno.env.get(\"WALGREENS_PARTNER_ID\") ?? \"WALGREENS\",\n engagementId: eid,\n firstName: first,\n ...(b.middleName ? { middleName: String(b.middleName).trim() } : {}),\n lastName: last,\n dob,\n // Required by Walgreens, \"Unknown\" accepted — the caller is never asked.\n gender: \"Unknown\",\n contact: {\n phones: [{ type: \"Mobile\", number, smsConsent: phones[0]?.smsConsent === \"Agree\" ? \"Agree\" : \"Disagree\" }],\n ...(Array.isArray(b.contact?.emails) && b.contact.emails.length ? { emails: b.contact.emails } : {}),\n },\n });\n const saved = r.status === 201 || r.status === 200;\n if (saved) {\n current.patient_saved = true;\n await save(key, batch);\n }\n const err = (r.body?.errors ?? [{}])[0] ?? {};\n await db.log(\"batch/add_patient\", callId, { engagement_id: eid }, saved ? 200 : 409,\n saved ? `saved person ${current.person_number}` : `Walgreens ${r.status}: ${err.code ?? \"\"} ${err.message ?? err.detail ?? \"\"}`);\n\n if (saved) {\n return c.json({\n ok: true, patient_saved: true,\n person_number: current.person_number, time: current.when_spoken,\n message: `Details saved for person ${current.person_number} (${current.when_spoken}). `\n + \"Now call walgreens_confirm_appointment with this same engagement_id.\",\n });\n }\n return c.json({\n ok: false, patient_saved: false, error_code: String(err.code ?? r.status),\n message: `Walgreens did not save the patient (${err.code ?? r.status}`\n + `${err.message || err.detail ? \": \" + (err.message ?? err.detail) : \"\"}). `\n + \"Fix the detail it names and try once more.\",\n }, 409);\n});\n\n/**\n * POST /batch/confirm {call_id, engagement_id}\n * The ONLY place an appointment gets confirmed. Calls Walgreens PATCH /confirm/v1\n * itself and records the outcome, so \"is this person booked?\" has a server-side\n * answer instead of depending on the model's recollection.\n *\n * WHY THIS MOVED OFF THE DIRECT WALGREENS URL\n * -------------------------------------------\n * On call 019ffc56 the agent told the caller \"Lisa Ray is confirmed... you both are\n * booked\" having never called add_patient OR confirm for her — her held 1:10 pm slot\n * was never booked. A false confirmation is the worst failure on this line, and no\n * prompt rule can prevent it, because the claim and the tool call are independent.\n *\n * Confirm has to go through here for state to be trustworthy: Walgreens answers 204\n * with an EMPTY body, and `HC_102_HoldExpired` is returned BOTH for an\n * already-confirmed engagement and for a genuinely expired hold — so nothing after\n * the fact can distinguish booked from lost. Only the process that made the call and\n * saw the 204 knows. add_patient / find_stores / find_appointments stay DIRECT.\n */\napp.post(\"/confirm\", async (c) => {\n await init();\n const b = await read(c);\n const callId = String(b.call_id ?? \"\").trim();\n const eid = String(b.engagement_id ?? b.engagementId ?? \"\").trim();\n if (!eid) {\n return fail(c, 400, \"engagement_id_required\",\n \"No engagement_id. Call next_patient to get this person's own id, then confirm.\");\n }\n const { batch, key } = await loadForCaller(callId, String(b.customer_number ?? \"\"));\n const person = batch?.people?.find((p: any) => p.engagement_id === eid) ?? null;\n\n // A confirmed booking can never become unconfirmed. On call 01a065b6 the agent\n // re-sent the husband's id for the wife; Walgreens answered HC_102 for the\n // already-consumed hold, and this code flipped his `confirmed` back to false. The\n // recap then told the caller his appointment was lost — while it sat booked at\n // Walgreens the whole time. Answer \"already booked\" and point at next_patient.\n if (person?.confirmed === true) {\n const nextUp = batch.people.find((p: any) => !p.confirmed && !p.handed)\n ?? batch.people.find((p: any) => !p.confirmed);\n return c.json({\n ok: true, booked: true, already_confirmed: true,\n person_number: person.person_number, time: person.when_spoken,\n message: `Person ${person.person_number} (${person.when_spoken}) was ALREADY booked — nothing `\n + \"changed. You reused their engagement_id. \"\n + (nextUp\n ? `The next person still needs booking: call next_patient to get their own id.`\n : \"Everyone is booked; call booking_summary.\"),\n });\n }\n\n const r = await wg(\"/confirm/v1\", { engagementId: eid }, \"PATCH\");\n const booked = r.status === 204 || r.status === 200;\n const code = (r.body?.errors ?? [{}])[0]?.code ?? null;\n\n if (person) {\n if (booked) {\n person.confirmed = true;\n person.done = true;\n person.confirm_code = \"ok\";\n } else {\n person.confirm_code = String(code ?? r.status); // recorded, never un-confirms\n }\n await save(key, batch);\n }\n await db.log(\"batch/confirm\", callId, { engagement_id: eid }, booked ? 200 : 409,\n booked ? `booked ${person?.when_spoken ?? eid}` : `NOT booked: ${code ?? r.status}`);\n\n if (booked) {\n return c.json({\n ok: true, booked: true,\n person_number: person?.person_number ?? null,\n time: person?.when_spoken ?? null,\n message: `Booked${person?.when_spoken ? ` for ${person.when_spoken}` : \"\"}. `\n + \"This appointment is confirmed with Walgreens. If more people are held, call next_patient. \"\n + \"If this was the last person, call booking_summary BEFORE you say anything to the caller, and recap from it.\",\n });\n }\n return c.json({\n ok: false, booked: false, error_code: String(code ?? r.status),\n message: code === \"HC_102_HoldExpired\"\n ? \"NOT booked — Walgreens says that hold is no longer usable. Do not tell the \"\n + \"caller this person is booked. Offer to find them another time.\"\n : `NOT booked (${code ?? r.status}). Make sure walgreens_add_patient ran for THIS `\n + \"person first, then try once more. Never say they are booked until this returns booked.\",\n }, 409);\n});\n\n/**\n * POST /batch/booking_summary {call_id}\n * Server-side truth for the closing recap: who is actually confirmed. The agent must\n * read the recap from this, not from memory. Deliberately holds NO patient names,\n * dates of birth or phone numbers — that data goes only to Walgreens.\n */\napp.post(\"/booking_summary\", async (c) => {\n await init();\n const b = await read(c);\n const { batch } = await loadForCaller(\n String(b.call_id ?? \"\").trim(), String(b.customer_number ?? \"\"));\n if (!batch?.people?.length) {\n return c.json({\n ok: true, booked_count: 0, held_count: 0, people: [],\n message: \"NOTHING is booked on this call. Do not tell the caller otherwise.\",\n });\n }\n const people = batch.people.map((p: any) => ({\n person_number: p.person_number,\n time: p.when_spoken,\n vaccines: p.vaccines,\n booked: p.confirmed === true,\n }));\n const booked = people.filter((p: any) => p.booked);\n const unbooked = people.filter((p: any) => !p.booked);\n return c.json({\n ok: true,\n booked_count: booked.length,\n held_count: people.length,\n store: `${batch.street}, ${batch.city}`,\n date: batch.date,\n people,\n message: unbooked.length === 0\n ? `All ${booked.length} confirmed (${booked.map((p: any) => p.time).join(\", \")}). `\n + \"Recap exactly these times.\"\n : `ONLY ${booked.length} of ${people.length} are actually booked`\n + (booked.length ? ` (${booked.map((p: any) => p.time).join(\", \")})` : \"\")\n + `. Person ${unbooked.map((p: any) => p.person_number).join(\" and \")} `\n + \"is NOT booked — say so plainly and finish the booking or offer another time. \"\n + \"Never claim anybody in that list is booked.\",\n });\n});\n\n/**\n * POST /batch/state {call_ids: [...]}\n * Read-only. What was ACTUALLY held per call, for grading test runs against ground\n * truth instead of against what the agent said. A transcript claiming \"you're both\n * booked\" proves nothing; one engagement id per person does.\n */\napp.post(\"/state\", async (c) => {\n await init();\n const b = await read(c);\n const ids: string[] = Array.isArray(b.call_ids) ? b.call_ids.map(String) : [];\n const out: Record = {};\n for (const id of ids.slice(0, 200)) {\n const batch = await load(id);\n if (!batch) continue;\n out[id] = {\n held: batch.people?.length ?? 0,\n // The number that actually matters: how many are CONFIRMED with Walgreens.\n // A held slot is not an appointment, and a confirm tool call is not proof —\n // only /batch/confirm seeing a 204 sets this.\n booked_count: (batch.people ?? []).filter((p: any) => p.confirmed === true).length,\n booked_times: (batch.people ?? []).filter((p: any) => p.confirmed === true)\n .map((p: any) => p.when_spoken),\n times: (batch.people ?? []).map((p: any) => p.when_spoken),\n engagement_ids: (batch.people ?? []).map((p: any) => p.engagement_id),\n vaccines: (batch.people ?? []).map((p: any) => p.vaccines),\n store: `${batch.street}, ${batch.city}`,\n date: batch.date,\n };\n }\n return c.json(out);\n});\n\n/** Mark a person finished, so next_patient moves on. */\napp.post(\"/patient_done\", async (c) => {\n await init();\n const b = await read(c);\n const batch = await load(String(b.call_id ?? \"\"));\n if (!batch) return fail(c, 404, \"no_batch\", \"No batch for this call.\");\n const p = batch.people.find((x: any) => x.engagement_id === String(b.engagement_id ?? \"\"));\n if (p) p.done = true;\n await save(batch.callId, batch);\n const left = batch.people.filter((x: any) => !x.done).length;\n return c.json({\n ok: true,\n remaining: left,\n message: left > 0\n ? `${left} still need details — call next_patient.`\n : \"All appointments are complete. Recap everyone.\",\n });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app;\n",[271],"pulls","branches","forks","envVars",{"_285":171,"_287":63},"connections",{"_285":63,"_286":63},"count","unfilledCount","emptyCount",{"_43":270,"_32":271,"_30":272,"_151":-5,"_41":42,"_40":273,"_153":25,"_38":354,"_13":275,"_33":34,"_35":276,"_24":25,"_156":-5,"_306":355,"_27":356},{"_43":263,"_32":264,"_30":265,"_151":-5,"_41":42,"_40":266,"_153":59,"_38":351,"_13":171,"_33":34,"_35":268,"_24":25,"_156":-5,"_306":352,"_27":353},{"_43":256,"_32":257,"_30":258,"_151":-5,"_41":42,"_40":259,"_153":59,"_38":348,"_13":171,"_33":34,"_35":261,"_24":25,"_156":-5,"_306":349,"_27":350},{"_43":249,"_32":250,"_30":251,"_151":-5,"_41":42,"_40":252,"_153":59,"_38":345,"_13":216,"_33":34,"_35":254,"_24":25,"_156":-5,"_306":346,"_27":347},{"_43":242,"_32":243,"_30":244,"_151":-5,"_41":42,"_40":245,"_153":59,"_38":342,"_13":188,"_33":34,"_35":247,"_24":25,"_156":-5,"_306":343,"_27":344},{"_43":234,"_32":235,"_30":236,"_151":-5,"_41":42,"_40":237,"_153":59,"_38":339,"_13":239,"_33":34,"_35":240,"_24":25,"_156":-5,"_306":340,"_27":341},{"_43":227,"_32":228,"_30":229,"_151":-5,"_41":42,"_40":230,"_153":59,"_38":336,"_13":63,"_33":34,"_35":232,"_24":25,"_156":-5,"_306":337,"_27":338},{"_43":219,"_32":220,"_30":221,"_151":-5,"_41":42,"_40":222,"_153":59,"_38":333,"_13":224,"_33":34,"_35":225,"_24":25,"_156":-5,"_306":334,"_27":335},{"_43":211,"_32":212,"_30":213,"_151":-5,"_41":42,"_40":214,"_153":59,"_38":330,"_13":216,"_33":34,"_35":217,"_24":25,"_156":-5,"_306":331,"_27":332},{"_43":207,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_153":25,"_38":327,"_13":209,"_33":34,"_35":37,"_24":25,"_156":-5,"_306":328,"_27":329},{"_43":199,"_32":200,"_30":57,"_151":-5,"_41":42,"_40":201,"_153":59,"_38":324,"_13":203,"_33":204,"_35":205,"_24":25,"_156":-5,"_306":325,"_27":326},{"_43":191,"_32":192,"_30":193,"_151":-5,"_41":42,"_40":194,"_153":59,"_38":321,"_13":196,"_33":34,"_35":197,"_24":25,"_156":-5,"_306":322,"_27":323},{"_43":183,"_32":184,"_30":185,"_151":-5,"_41":42,"_40":186,"_153":59,"_38":318,"_13":188,"_33":34,"_35":189,"_24":25,"_156":-5,"_306":319,"_27":320},{"_43":175,"_32":176,"_30":177,"_151":-5,"_41":42,"_40":178,"_153":59,"_38":315,"_13":180,"_33":34,"_35":181,"_24":25,"_156":-5,"_306":316,"_27":317},{"_43":166,"_32":167,"_30":168,"_151":-5,"_41":42,"_40":169,"_153":59,"_38":312,"_13":171,"_33":172,"_35":173,"_24":25,"_156":-5,"_306":313,"_27":314},{"_43":158,"_32":159,"_30":160,"_151":-5,"_41":42,"_40":161,"_153":59,"_38":309,"_13":163,"_33":34,"_35":164,"_24":25,"_156":-5,"_306":310,"_27":311},{"_43":148,"_32":149,"_30":150,"_151":-5,"_41":42,"_40":152,"_153":59,"_38":305,"_13":63,"_33":34,"_35":155,"_24":25,"_156":-5,"_306":307,"_27":308},["D",1786425808442],"children",[],[149],["D",1785955162501],[],[159],["D",1785692475118],[],[167],["D",1786425942538],[],[176],["D",1786393505833],[],[184],["D",1785955405418],[],[192],["D",1788564694403],[],[200],["D",1788677663347],[],[28],["D",1786519765177],[],[212],["D",1786427295852],[],[220],["D",1788330326325],[],[228],["D",1788675575926],[],[235],["D",1786393026077],[],[243],["D",1785999215446],[],[250],["D",1785689860033],[],[257],["D",1785658397155],[],[264],["D",1788677594765],[],[271],["D",1785542168216],["D",1789561254403],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":395,"_396":397,"_398":399,"_400":25,"_401":25,"_402":25,"_403":59,"_404":-5,"_405":-7,"_406":-7,"_407":63,"_408":25,"_409":25,"_410":-5,"_411":25,"_412":25,"_413":25,"_414":-5},"ENV",{"_366":367,"_368":369,"_370":90,"_371":372,"_373":374,"_375":376,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v219