Backend resource · STATIC DECLARATIONS

Medication Request API reference · mansoq-core-teleicu

Static source contract for Medication Request: 7 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-core-teleicu at /api/v1/patient/{patient_external_id}/medication/request/. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method	Path	Action	Evidence
GET	`/api/v1/patient/{patient_external_id}/medication/request/`	list	declared/inherited method
POST	`/api/v1/patient/{patient_external_id}/medication/request/`	create	declared/inherited method
GET	`/api/v1/patient/{patient_external_id}/medication/request/{external_id}/`	retrieve	declared/inherited method
PUT	`/api/v1/patient/{patient_external_id}/medication/request/{external_id}/`	update	declared/inherited method
PATCH	`/api/v1/patient/{patient_external_id}/medication/request/{external_id}/`	partial_update	declared/inherited method
DELETE	`/api/v1/patient/{patient_external_id}/medication/request/{external_id}/`	destroy	declared/inherited method
POST	`/api/v1/patient/{patient_external_id}/medication/request/upsert/`	upsert	@action declaration

list · GET

GET /api/v1/patient/{patient_external_id}/medication/request/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

response: MedicationRequestReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
status	MedicationRequestStatus	true	No extra constraint extracted
status_reason	StatusReason \| None	false	No extra constraint extracted
intent	MedicationRequestIntent	true	No extra constraint extracted
category	MedicationRequestCategory	true	No extra constraint extracted
priority	MedicationRequestPriority	true	No extra constraint extracted
do_not_perform	bool	true	No extra constraint extracted
medication	ValueSetBoundCoding[MANSOQ_MEDICATION_VALUESET.slug] \| None	false	No extra constraint extracted
dosage_instruction	list[DosageInstruction]	true	No extra constraint extracted
authored_on	datetime	true	No extra constraint extracted
note	str \| None	false	No extra constraint extracted
dispense_status	MedicationRequestDispenseStatus \| None	false	No extra constraint extracted
meta	dict	false	No extra constraint extracted
id	UUID4	false	No extra constraint extracted
created_by	UserSpec	false	No extra constraint extracted
updated_by	UserSpec	false	No extra constraint extracted
created_date	datetime	true	No extra constraint extracted
modified_date	datetime	true	No extra constraint extracted
requested_product	dict \| None	false	No extra constraint extracted
requester	UserSpec \| None	false	No extra constraint extracted
prescription	dict \| None	false	No extra constraint extracted
encounter	UUID4	true	No extra constraint extracted

Observed authorization checks: can_view_as_pharmacist, can_view_clinical_data, can_view_encounter_clinical_data. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Permission denied to user.

create · POST

POST /api/v1/patient/{patient_external_id}/medication/request/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
body	`form_submission`	not declared at read site	not established
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

request: MedicationRequestSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
status	MedicationRequestStatus	true	No extra constraint extracted
status_reason	StatusReason \| None	false	No extra constraint extracted
intent	MedicationRequestIntent	true	No extra constraint extracted
category	MedicationRequestCategory	true	No extra constraint extracted
priority	MedicationRequestPriority	true	No extra constraint extracted
do_not_perform	bool	true	No extra constraint extracted
medication	ValueSetBoundCoding[MANSOQ_MEDICATION_VALUESET.slug] \| None	false	No extra constraint extracted
dosage_instruction	list[DosageInstruction]	true	No extra constraint extracted
authored_on	datetime	true	No extra constraint extracted
note	str \| None	false	No extra constraint extracted
dispense_status	MedicationRequestDispenseStatus \| None	false	No extra constraint extracted
meta	dict	false	No extra constraint extracted
id	UUID4	false	No extra constraint extracted
requester	UUID4 \| None	false	No extra constraint extracted
requested_product	UUID4 \| None	false	No extra constraint extracted
prescription	UUID4 \| None	false	No extra constraint extracted
create_prescription	CreatePrescription \| None	false	No extra constraint extracted
encounter	UUID4	true	No extra constraint extracted

response: MedicationRequestReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_update_encounter_clinical_data, can_view_as_pharmacist, can_view_clinical_data, can_view_encounter_clinical_data. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Requester does not have permission to update encounter; PermissionDenied: Permission denied to user.

retrieve · GET

GET /api/v1/patient/{patient_external_id}/medication/request/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

response: MedicationRequestReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Declared refusal/error evidence: PermissionDenied: Permission denied to user.

update · PUT

PUT /api/v1/patient/{patient_external_id}/medication/request/{external_id}/ — action update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

request: MedicationRequestUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
status	MedicationRequestStatus	true	No extra constraint extracted
note	str \| None	false	No extra constraint extracted
dispense_status	MedicationRequestDispenseStatus \| None	false	No extra constraint extracted

response: MedicationRequestReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Declared refusal/error evidence: PermissionDenied: You do not have permission to update encounter; PermissionDenied: Permission denied to user.

partial_update · PATCH

PATCH /api/v1/patient/{patient_external_id}/medication/request/{external_id}/ — action partial_update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

request: MedicationRequestUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

response: MedicationRequestReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_view_as_pharmacist, can_view_clinical_data, can_view_encounter_clinical_data, can_update_encounter_clinical_data. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Permission denied to user; PermissionDenied: You do not have permission to update encounter.

destroy · DELETE

DELETE /api/v1/patient/{patient_external_id}/medication/request/{external_id}/ — action destroy. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

Explicit response statuses in observed code: status.HTTP_204_NO_CONTENT. Other branches/framework exception handling may differ.

Declared refusal/error evidence: PermissionDenied: You do not have permission to update encounter; PermissionDenied: Permission denied to user.

upsert · POST

POST /api/v1/patient/{patient_external_id}/medication/request/upsert/ — action upsert. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	patient_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location	Field	Declared/inferred read type	Requiredness evidence
body	`datapoints`	not declared at read site	not established
body	`form_submission`	not declared at read site	not established
query	`facility`	not declared at read site	direct indexing; validation may be upstream
query	`encounter`	not declared at read site	not established

Explicit response statuses in observed code: 400. Other branches/framework exception handling may differ.

Declared refusal/error evidence: RestFrameworkValidationError: Invalid request data; RestFrameworkValidationError: No datapoints provided; RestFrameworkValidationError: Too many datapoints provided; PermissionDenied: You do not have permission to update encounter; PermissionDenied: Requester does not have permission to update encounter; PermissionDenied: Permission denied to user.

Conditional gates: conditional/computed expression; inspect pinned declaration comparison settings.MAX_DATAPOINTS_PER_UPSERT.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.