Backend resource · STATIC DECLARATIONS

Slot API reference · mansoq-core-teleicu

Static source contract for Slot: 4 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-core-teleicu at /api/v1/facility/{facility_external_id}/slots/. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method	Path	Action	Evidence
GET	`/api/v1/facility/{facility_external_id}/slots/{external_id}/`	retrieve	declared/inherited method
POST	`/api/v1/facility/{facility_external_id}/slots/get_slots_for_day/`	get_slots_for_day	@action declaration
POST	`/api/v1/facility/{facility_external_id}/slots/{external_id}/create_appointment/`	create_appointment	@action declaration
POST	`/api/v1/facility/{facility_external_id}/slots/availability_stats/`	availability_stats	@action declaration

retrieve · GET

GET /api/v1/facility/{facility_external_id}/slots/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

response: TokenSlotBaseSpec. Declared fields below; inherited fields are retained in the schema inventory.

Field	Type	Required	Constraints
meta	dict	false	No extra constraint extracted
id	UUID4 \| None	false	No extra constraint extracted
availability	UUID4	true	No extra constraint extracted
start_datetime	datetime.datetime	true	No extra constraint extracted
end_datetime	datetime.datetime	true	No extra constraint extracted
allocated	int	true	No extra constraint extracted

Observed authorization checks: can_list_booking. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You do not have permission to list bookings.

get_slots_for_day · POST

POST /api/v1/facility/{facility_external_id}/slots/get_slots_for_day/ — action get_slots_for_day. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Declared refusal/error evidence: ValidationError: No schedules found for this resource.

create_appointment · POST

POST /api/v1/facility/{facility_external_id}/slots/{external_id}/create_appointment/ — action create_appointment. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true
path	external_id	router lookup string; semantic ID validation requires handler/schema review	true

Observed authorization checks: can_create_booking. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: You do not have permission to create appointments; ValidationError (dynamic detail; inspect source); ValidationError: Patient not found.

Conditional gates: conditional/computed expression; inspect pinned declaration comparison settings.MAX_APPOINTMENTS_PER_PATIENT.

availability_stats · POST

Return the stats for available slots compared to the booked slots ie Availability percentage.

POST /api/v1/facility/{facility_external_id}/slots/availability_stats/ — action availability_stats. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location	Parameter	Type	Required
path	facility_external_id	router lookup string; semantic ID validation requires handler/schema review	true

Observed authorization checks: can_list_booking. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: No schedules found for this resource; PermissionDenied: You do not have permission to list bookings.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.