Work Queue API reference · mansoq-core

Declared route and availability

This resource is declared in mansoq-core at /api/v1/facility/{facility_external_id}/rcm/work_queues/. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Queues with owners. A queue nobody escalates to is a backlog with a name.

Operation map

list · GET

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

create · POST

POST /api/v1/facility/{facility_external_id}/rcm/work_queues/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_edit_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: 201. Other branches/framework exception handling may differ.

Declared refusal/error evidence: PermissionDenied: Cannot edit RCM configuration; ValidationError: Request body must be an object; ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read RCM configuration.

retrieve · GET

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

update · PUT

PUT /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/ — action update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_edit_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot edit RCM configuration; ValidationError: Request body must be an object; PermissionDenied: Cannot read RCM configuration; ValidationError (dynamic detail; inspect source).

partial_update · PATCH

PATCH /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/ — action partial_update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility, can_edit_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration; PermissionDenied: Cannot edit RCM configuration; ValidationError: Request body must be an object; ValidationError (dynamic detail; inspect source).

protocol_mandated · GET

The queues mandated by the transaction protocols, not chosen.

Each is listed with the requirement it switches on and whether that requirement is currently met. A queue whose protocol_mandated is unknown appears here too: an unanswered question must not switch off the requirement it exists to raise.

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/protocol_mandated/ — action protocol_mandated. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

stuck_transactions · GET

Transactions with neither a queued nor a final response.

The window comes from configuration and as_of is supplied, never read inside a decision path. Each entry is already keyed on the bundle identifiers the ticket must carry.

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/stuck_transactions/ — action stuck_transactions. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration; UnresolvedValueError: NphiesConfiguration.

raise_stuck_ticket · POST

Terminate one stuck transaction into this queue, as a ticket.

POST /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/raise_stuck_ticket/ — action raise_stuck_ticket. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_edit_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: 201. Other branches/framework exception handling may differ.

Declared refusal/error evidence: ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot edit RCM configuration; ValidationError: Request body must be an object; UnresolvedValueError: NphiesConfiguration; PermissionDenied: Cannot read RCM configuration.

review_items · GET

Denial and tariff review items routed to this queue.

Working a denial is a claims right, so the queue's items are read with it rather than with the configuration right that reads the queue row.

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/review_items/ — action review_items. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_manage_rcm_claims_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot submit, adjudicate or settle claims; PermissionDenied: Cannot read RCM configuration.

routed_gates · GET

Which open decision gates route their transactions to this queue.

Ch. 3: an unresolved administrative fact opens a work queue; it never denies clinical care and never approves a claim. This is the other end of that sentence — the queue seen from the gate register.

GET /api/v1/facility/{facility_external_id}/rcm/work_queues/{external_id}/routed_gates/ — action routed_gates. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.