Token Sub Queue API reference · mansoq-core-teleicu

Declared route and availability

This resource is declared in mansoq-core-teleicu at /api/v1/facility/{facility_external_id}/token/sub_queue/. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

list · GET

GET /api/v1/facility/{facility_external_id}/token/sub_queue/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

response: TokenSubQueueReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

Observed authorization checks: can_list_token. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to list token sub queue.

create · POST

POST /api/v1/facility/{facility_external_id}/token/sub_queue/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: TokenSubQueueCreateSpec. Declared fields below; inherited fields are retained in the schema inventory.

response: TokenSubQueueReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_write_token, can_list_token. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to create token sub queue; PermissionDenied: You do not have permission to list token sub queue.

retrieve · GET

GET /api/v1/facility/{facility_external_id}/token/sub_queue/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

response: TokenSubQueueReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_list_token. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to list token sub queue.

update · PUT

PUT /api/v1/facility/{facility_external_id}/token/sub_queue/{external_id}/ — action update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: TokenSubQueueBaseSpec. Declared fields below; inherited fields are retained in the schema inventory.

response: TokenSubQueueReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_write_token, can_list_token. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to update token sub queue; PermissionDenied: You do not have permission to list token sub queue.

partial_update · PATCH

PATCH /api/v1/facility/{facility_external_id}/token/sub_queue/{external_id}/ — action partial_update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: TokenSubQueueBaseSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

response: TokenSubQueueReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_list_token, can_write_token. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to list token sub queue; PermissionDenied: You do not have permission to update token sub queue.

destroy · DELETE

DELETE /api/v1/facility/{facility_external_id}/token/sub_queue/{external_id}/ — action destroy. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_list_token, can_write_token. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: status.HTTP_204_NO_CONTENT. Other branches/framework exception handling may differ.

Declared refusal/error evidence: ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to list token sub queue; PermissionDenied: You do not have permission to update token sub queue.

upsert · POST

POST /api/v1/facility/{facility_external_id}/token/sub_queue/upsert/ — action upsert. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_list_token, can_write_token. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: 400. Other branches/framework exception handling may differ.

Declared refusal/error evidence: RestFrameworkValidationError: Invalid request data; RestFrameworkValidationError: No datapoints provided; RestFrameworkValidationError: Too many datapoints provided; ValidationError: resource_type and resource_id is required; PermissionDenied: You do not have permission to list token sub queue; PermissionDenied: You do not have permission to update token sub queue; PermissionDenied: You do not have permission to create token sub queue.

Conditional gates: conditional/computed expression; inspect pinned declaration comparison settings.MAX_DATAPOINTS_PER_UPSERT.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.