Backend resource · STATIC DECLARATIONS

Account API reference · mansoq-core-teleicu

Static source contract for Account: 9 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-core-teleicu at /api/v1/facility/{facility_external_id}/account/. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method	Path	Action	Evidence
GET	`/api/v1/facility/{facility_external_id}/account/`	list	declared/inherited method
POST	`/api/v1/facility/{facility_external_id}/account/`	create	declared/inherited method
GET	`/api/v1/facility/{facility_external_id}/account/{external_id}/`	retrieve	declared/inherited method
PUT	`/api/v1/facility/{facility_external_id}/account/{external_id}/`	update	declared/inherited method
PATCH	`/api/v1/facility/{facility_external_id}/account/{external_id}/`	partial_update	declared/inherited method
POST	`/api/v1/facility/{facility_external_id}/account/{external_id}/set_tags/`	set_tags	@action declaration
POST	`/api/v1/facility/{facility_external_id}/account/{external_id}/remove_tags/`	remove_tags	@action declaration
POST	`/api/v1/facility/{facility_external_id}/account/default_account/`	default_account	@action declaration
POST	`/api/v1/facility/{facility_external_id}/account/{external_id}/rebalance/`	rebalance	@action declaration

list · GET

GET /api/v1/facility/{facility_external_id}/account/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true

response: AccountReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4 \| None	false	No extra constraint extracted
status	AccountStatusOptions	true	No extra constraint extracted
billing_status	AccountBillingStatusOptions	true	No extra constraint extracted
name	str	true	No extra constraint extracted
service_period	PeriodSpec	true	No extra constraint extracted
description	str \| None	false	No extra constraint extracted
total_gross	Decimal	true	No extra constraint extracted
total_paid	Decimal	true	No extra constraint extracted
total_balance	Decimal	true	No extra constraint extracted
total_billable_charge_items	Decimal	true	No extra constraint extracted
calculated_at	datetime.datetime	true	No extra constraint extracted
created_date	datetime.datetime	true	No extra constraint extracted
modified_date	datetime.datetime	true	No extra constraint extracted
patient	dict	true	No extra constraint extracted
tags	list[dict]	false	No extra constraint extracted

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to read accounts.

create · POST

POST /api/v1/facility/{facility_external_id}/account/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true

request: AccountCreateSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4 \| None	false	No extra constraint extracted
status	AccountStatusOptions	true	No extra constraint extracted
billing_status	AccountBillingStatusOptions	true	No extra constraint extracted
name	str	true	No extra constraint extracted
service_period	PeriodSpec	true	No extra constraint extracted
description	str \| None	false	No extra constraint extracted
extensions	dict	false	No extra constraint extracted
patient	UUID4	true	No extra constraint extracted

response: AccountRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4 \| None	false	No extra constraint extracted
status	AccountStatusOptions	true	No extra constraint extracted
billing_status	AccountBillingStatusOptions	true	No extra constraint extracted
name	str	true	No extra constraint extracted
service_period	PeriodSpec	true	No extra constraint extracted
description	str \| None	false	No extra constraint extracted
total_gross	Decimal	true	No extra constraint extracted
total_paid	Decimal	true	No extra constraint extracted
total_balance	Decimal	true	No extra constraint extracted
total_billable_charge_items	Decimal	true	No extra constraint extracted
calculated_at	datetime.datetime	true	No extra constraint extracted
created_date	datetime.datetime	true	No extra constraint extracted
modified_date	datetime.datetime	true	No extra constraint extracted
patient	dict	true	No extra constraint extracted
tags	list[dict]	false	No extra constraint extracted
primary_encounter	dict	true	No extra constraint extracted
cached_items	list	false	No extra constraint extracted
total_price_components	dict	true	No extra constraint extracted
extensions	dict	true	No extra constraint extracted

Observed authorization checks: can_create_account_in_facility, can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to create accounts; PermissionDenied: You are not authorized to read accounts; ValidationError (dynamic detail; inspect source).

retrieve · GET

GET /api/v1/facility/{facility_external_id}/account/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

response: AccountRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to read accounts.

update · PUT

PUT /api/v1/facility/{facility_external_id}/account/{external_id}/ — action update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

request: AccountUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4 \| None	false	No extra constraint extracted
status	AccountStatusOptions	true	No extra constraint extracted
billing_status	AccountBillingStatusOptions	true	No extra constraint extracted
name	str	true	No extra constraint extracted
service_period	PeriodSpec	true	No extra constraint extracted
description	str \| None	false	No extra constraint extracted
extensions	dict	false	No extra constraint extracted
primary_encounter	UUID4 \| None	false	No extra constraint extracted

response: AccountRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_update_account_in_facility, can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to update accounts; ValidationError: Primary encounter must belong to the same facility; ValidationError: Primary encounter must belong to the same patient; ValidationError: Encounter is already associated with an account; PermissionDenied: You are not authorized to read accounts; ValidationError (dynamic detail; inspect source).

partial_update · PATCH

PATCH /api/v1/facility/{facility_external_id}/account/{external_id}/ — action partial_update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

request: AccountUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

response: AccountRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_read_account_in_facility, can_update_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to read accounts; ValidationError (dynamic detail; inspect source); PermissionDenied: You are not authorized to update accounts; ValidationError: Primary encounter must belong to the same facility; ValidationError: Primary encounter must belong to the same patient; ValidationError: Encounter is already associated with an account.

set_tags · POST

POST /api/v1/facility/{facility_external_id}/account/{external_id}/set_tags/ — action set_tags. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

decorator request: TagRequest. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
tags	list[UUID4]	false	No extra constraint extracted

Observed authorization checks: can_read_account_in_facility, can_update_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: RestFrameworkValidationError (dynamic detail; inspect source); PermissionDenied: You are not authorized to read accounts; PermissionDenied: You are not authorized to update accounts; ValidationError: Primary encounter must belong to the same facility; ValidationError: Primary encounter must belong to the same patient; ValidationError: Encounter is already associated with an account.

remove_tags · POST

POST /api/v1/facility/{facility_external_id}/account/{external_id}/remove_tags/ — action remove_tags. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

body validation: TagRequest. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

decorator request: TagRequest. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_read_account_in_facility, can_update_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You are not authorized to read accounts; PermissionDenied: You are not authorized to update accounts; ValidationError: Primary encounter must belong to the same facility; ValidationError: Primary encounter must belong to the same patient; ValidationError: Encounter is already associated with an account.

default_account · POST

POST /api/v1/facility/{facility_external_id}/account/default_account/ — action default_account. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Encounter is not associated with the facility; PermissionDenied: Encounter is not associated with the patient; ValidationError: No account found; PermissionDenied: You are not authorized to read accounts.

rebalance · POST

POST /api/v1/facility/{facility_external_id}/account/{external_id}/rebalance/ — action rebalance. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Observed authorization checks: can_update_account_in_facility, can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.