Safari Agent

The PMS assistant that plans, asks, verifies, and leaves an audit trail

Safari Agent is being shaped as a full PMS runtime, not a general chat box. It reads the selected hotel scope, resolves the right workflow, prepares the next move, and keeps staff in control before anything sensitive changes.

Open agent workspace How Safari works

Active operation plan

Room block needs approval

A visual trace of how Safari Agent turns a request into a safe PMS operation.

Read

Use active hotel scope, user role, and PMS context.

Validate

Check schema, permission, tenant scope, and workflow fit.

Preview

Prepare a clear plan before any sensitive operation.

Approval

Ask staff to confirm the proposed write action.

Write

Run the authorized PMS adapter with idempotency.

Verify

Read back the result and compare expected state.

Audit

Persist trace, finance event, or audit record.

What it can handle

Domain agents for real hotel work

The vault plan separates the assistant into PMS domains. Each domain receives only the tool catalog it should see, so the agent can reason with context without crossing into unrelated workflows.

Front desk

Search reservations, prepare check-in, preview checkout, and surface arrival risks.

Reservation search
Check-in preview
Checkout confirmation

Inventory

Work with room types, room creation, room status changes, and room blocks.

Room type list
Create room
Room block

Billing

Read folios and prepare payment, refund, void, reversal, and adjustment flows.

Folio read
Record payment
Ledger-safe actions

Guest

Read guest profile context, timeline state, restrictions, and identity/KYC readiness.

Guest search
Profile read
KYC state

Admin

Support user invites, role checks, and permission validation inside the hotel scope.

Invite user
Role list
Permission check

Integrations

Read OTA snapshots, prepare queues, request approval, execute, and verify changes.

OTA snapshot
Queue preview
Execute and verify

Multilingual PMS intent

Understand the language, keep the PMS contract stable

The agent layer detects the user language, preserves room numbers and domain values, normalizes the request into a canonical PMS intent, and answers back in the user's language.

TROda ekleme akışını başlatinventory.add_room

ENStart the room creation flowinventory.add_room

DEZimmer 208 blockiereninventory.room_block

ARأريد تسجيل خروج الضيفfront_desk.checkout

Safety model

The agent does not get direct write authority

PMS authority stays in Safari

The model can request a tool, but tenant scope, permission, validation, idempotency, execution, and audit stay in Safari.

Workflow-aware workspace

Agent cards must match the active workflow, so an add-room flow cannot leak unrelated reservation cards.

Measured by evals

Agent changes are judged with fixtures, smoke gates, trace signals, and policy regressions rather than prompt feel.

Built toward a full agentic PMS runtime

The active plan moves Safari Agent from a helpful chat surface into a durable PMS runtime with language context, domain tools, approval gates, verification, and evals.

Runtime contract

Session, state, planner, tool policy, and workspace output.

Context isolation

Cards and payloads stay tied to the active workflow.

PMS coverage

Inventory, front desk, billing, guest, admin, and integrations.

Smoke and eval

Regression fixtures for language, scope, writes, PII, and UI cards.

Start with the assistant, continue inside the PMS.

Ask for an operation, review the prepared plan, approve sensitive work, and keep the resulting trace visible to the hotel team.

Open agent workspace