{"schemaVersion":"1.0","sourceCommit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca","sourceVisibility":"private","article":{"id":"api-mansoq-core-fatooradocumentviewset-2886d88f","title":"Fatoora Document API reference · mansoq-core","summary":"Static source contract for Fatoora Document: 6 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.","module":"RCM & insurance","roles":["IT administrator","Developer","Integration engineer"],"facilities":["All configured facility types"],"kind":"reference","minutes":6,"prerequisites":["Use the API contract from the installed deployment and an authorized synthetic test environment.","Confirm facility/organization scope, action permissions and optional app enablement.","This reference is static source evidence; complete payload, authorization, failure and end-to-end review remains recorded as pending."],"steps":[],"sections":[{"title":"Declared route and availability","body":"This resource is declared in **mansoq-core** at `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/`. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness."},{"title":"Operation map","body":"| Method | Path | Action | Evidence |\n| --- | --- | --- | --- |\n| GET | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/` | list | declared/inherited method |\n| GET | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/` | retrieve | declared/inherited method |\n| POST | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/prepare/` | prepare | @action declaration |\n| POST | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/submit/` | submit | @action declaration |\n| GET | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-xml/` | invoice_xml | @action declaration |\n| GET | `/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-pdf/` | invoice_pdf | @action declaration |"},{"title":"list · GET","body":"**GET /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/** — action `list`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** PermissionDenied: Cannot read revenue-cycle records; ValidationError (dynamic detail; inspect source)."},{"title":"retrieve · GET","body":"**GET /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/** — action `retrieve`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** PermissionDenied: Cannot read revenue-cycle records; ValidationError (dynamic detail; inspect source)."},{"title":"prepare · POST","body":"**POST /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/prepare/** — action `prepare`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_update_account_in_facility`, `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** PermissionDenied: Cannot update revenue-cycle records; ValidationError: FATOORA_FIELDS_INVALID; ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read revenue-cycle records."},{"title":"submit · POST","body":"**POST /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/submit/** — action `submit`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_update_account_in_facility`, `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** ValidationError: FATOORA_SUBMISSION_CONFIRMATION_REQUIRED; PermissionDenied: Cannot update revenue-cycle records; ValidationError: FATOORA_FIELDS_INVALID; PermissionDenied: Cannot read revenue-cycle records; ValidationError (dynamic detail; inspect source)."},{"title":"invoice_xml · GET","body":"**GET /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-xml/** — action `invoice_xml`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** ValidationError: FATOORA_FINAL_DOCUMENT_NOT_AVAILABLE; PermissionDenied: Cannot read revenue-cycle records; ValidationError (dynamic detail; inspect source)."},{"title":"invoice_pdf · GET","body":"**GET /api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-pdf/** — action `invoice_pdf`. static contract extracted; runtime/permission/payload behavior review pending.\n\nPath and deployment-context parameters:\n\n| Location | Parameter | Type | Required |\n| --- | --- | --- | --- |\n| path | facility_external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n| path | external_id | router lookup string; semantic ID validation requires handler/schema review | true |\n\nDirectly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):\n\n| Location | Field | Declared/inferred read type | Requiredness evidence |\n| --- | --- | --- | --- |\n| query | `invoice` | not declared at read site | not established |\n\n**Observed authorization checks:** `can_read_account_in_facility`. Helper/queryset evidence is included; this is not proof of complete security review.\n\n**Declared refusal/error evidence:** ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read revenue-cycle records."},{"title":"Integration review checklist","body":"Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure."}],"troubleshooting":[{"problem":"A declared route is unavailable or a request is rejected","solution":"Compare the installed revision, actual API schema, optional plugin mount, HTTP-method restrictions and recorded validation/permission evidence. Do not bypass a refusal or send a production transaction to test documentation."}],"sources":[{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":249,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":266,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":252,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":629,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":596,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":102,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":591,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":269,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":273,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":602,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":116,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":304,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":316,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":331,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}],"related":["it-api-contract","it-api-auth","security-rcm-roles"],"verification":"Static API contract — behavior review pending","version":"f6e9f05f76d4","apiReferenceIds":["backend-resource-dbfd00182886d88f","backend-resource-dbfd00182886d88f:GET:list","backend-resource-dbfd00182886d88f:GET:retrieve","backend-resource-dbfd00182886d88f:POST:prepare","backend-resource-dbfd00182886d88f:POST:submit","backend-resource-dbfd00182886d88f:GET:invoice_xml","backend-resource-dbfd00182886d88f:GET:invoice_pdf"]},"backend":{"resources":[{"id":"backend-resource-dbfd00182886d88f","localPrefix":"rcm/fatoora_documents","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","basename":"rcm-fatoora-document","source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"conditions":[],"repository":"repositories/platform/mansoq-core","classSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":249,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"description":"","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/","mountStatus":"verified core mount in config/urls.py","operationIds":["backend-resource-dbfd00182886d88f:GET:list","backend-resource-dbfd00182886d88f:GET:retrieve","backend-resource-dbfd00182886d88f:POST:prepare","backend-resource-dbfd00182886d88f:POST:submit","backend-resource-dbfd00182886d88f:GET:invoice_xml","backend-resource-dbfd00182886d88f:GET:invoice_pdf"],"unresolvedViewset":false,"reviewStatus":"registered resource enumerated; behavioral review pending"}],"operations":[{"id":"backend-resource-dbfd00182886d88f:GET:list","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"GET","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/","action":"list","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":266,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"declared/inherited method","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:266:list","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:629:paginated","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-dbfd00182886d88f:GET:retrieve","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"GET","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/","action":"retrieve","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":269,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"declared/inherited method","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:269:retrieve","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-dbfd00182886d88f:POST:prepare","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/prepare/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/prepare/","action":"prepare","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":273,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:273:prepare","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:602:authorize_write","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:116:body","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-dbfd00182886d88f:POST:submit","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"POST","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/submit/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/submit/","action":"submit","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":304,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:304:submit","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:602:authorize_write","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:116:body","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-dbfd00182886d88f:GET:invoice_xml","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"GET","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-xml/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-xml/","action":"invoice_xml","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":316,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:316:invoice_xml","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]},{"id":"backend-resource-dbfd00182886d88f:GET:invoice_pdf","resourceId":"backend-resource-dbfd00182886d88f","repository":"repositories/platform/mansoq-core","boundary":"primary-core","method":"GET","path":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-pdf/","declaredPattern":"/api/v1/facility/{facility_external_id}/rcm/fatoora_documents/{external_id}/invoice-pdf/","action":"invoice_pdf","viewset":"FatooraDocumentViewSet","classId":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","detail":true,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":331,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:331:invoice_pdf","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility"],"schemaIds":{},"classPermissionEvidence":[],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[{"name":"facility_external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"external_id","in":"path","type":"router lookup string; semantic ID validation requires handler/schema review","required":true,"source":{"path":"repositories/platform/mansoq-core/config/api_router.py","line":1027,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}]}],"methodEvidence":[{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:266:list","name":"list","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":266,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:252:get_queryset","name":"get_queryset","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":252,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[{"name":"invoice","in":"query","type":"not declared at read site","required":"not established","readStyle":"get","dynamicName":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":259,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:629:paginated","name":"paginated","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.operations_base.RcmOperationsViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":629,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"queryset","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":629,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"serializer","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":629,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:596:authorize_read","name":"authorize_read","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.operations_base.RcmOperationsViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":596,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[{"permission":"can_read_account_in_facility","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":597,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"declaredErrors":[{"exception":"PermissionDenied","message":"Cannot read revenue-cycle records","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":600,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:102:identity","name":"identity","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FiscalViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":102,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"value","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":102,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"field","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":102,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:591:get_facility","name":"get_facility","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.operations_base.RcmOperationsViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":591,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:139:run_service","name":"run_service","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FiscalViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"operation","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":null,"dynamicMessage":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":150,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:269:retrieve","name":"retrieve","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":269,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:273:prepare","name":"prepare","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":273,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py:602:authorize_write","name":"authorize_write","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.operations_base.RcmOperationsViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":602,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[{"permission":"can_update_account_in_facility","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":603,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"declaredErrors":[{"exception":"PermissionDenied","message":"Cannot update revenue-cycle records","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/operations_base.py","line":606,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:116:body","name":"body","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FiscalViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":116,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[{"name":"required","type":"unspecified","required":true,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":116,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"name":"optional","type":"unspecified","required":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":116,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":"FATOORA_FIELDS_INVALID","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":123,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:304:submit","name":"submit","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":304,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":"FATOORA_SUBMISSION_CONFIRMATION_REQUIRED","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":309,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:316:invoice_xml","name":"invoice_xml","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":316,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":"FATOORA_FINAL_DOCUMENT_NOT_AVAILABLE","dynamicMessage":false,"source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":319,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py:331:invoice_pdf","name":"invoice_pdf","owner":"repositories/platform/mansoq-core:mansoq.emr.api.viewsets.rcm.fatoora.FatooraDocumentViewSet","summary":"","source":{"path":"repositories/platform/mansoq-core/mansoq/emr/api/viewsets/rcm/fatoora.py","line":331,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"}],"schemas":[],"frameworkSettings":[{"name":"DEFAULT_AUTHENTICATION_CLASSES","value":["config.authentication.CustomJWTAuthentication","config.authentication.CustomBasicAuthentication","rest_framework.authentication.SessionAuthentication","rest_framework.authentication.TokenAuthentication"],"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PERMISSION_CLASSES","value":["rest_framework.permissions.IsAuthenticated","mansoq.security.utils.permission_class.MansoqAuthentication"],"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PAGINATION_CLASS","value":"mansoq.utils.pagination.mansoq_pagination.MansoqLimitOffsetPagination","source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"PAGE_SIZE","value":14,"source":{"path":"repositories/platform/mansoq-core/config/settings/base.py","line":372,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"}]},"frontend":{"operations":[],"schemas":[]},"services":{"operations":[]},"boundaries":[]}