@alfadocs/ui-kit-debug 1.132.0 → 1.134.0

package/dist/agent-catalog.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "packageVersion": "1.132.0",
+  "packageVersion": "1.134.0",
   "components": [
     {
       "kind": "component",
@@ -646,7 +646,7 @@
         "root": {
           "attr": "data-component",
           "value": "appointment-card",
-          "description": "Marks the element as a kit AppointmentCard. The root also emits data-component-id sourced from item.id, data-state with the appointment lifecycle, and data-type with the delivery channel."
+          "description": "Marks the element as a kit AppointmentCard. The root also emits data-component-id sourced from item.id, data-state with the appointment lifecycle, and data-type with the delivery channel. When the card is interactive its activator (link or button) carries data-action=\"open-appointment\"."
         },
         "instanceId": {
           "attr": "data-component-id",
@@ -904,7 +904,7 @@
         "root": {
           "attr": "data-component",
           "value": "appointment-tray",
-          "description": "Marks the AppointmentTray wrapper."
+          "description": "Marks the AppointmentTray wrapper. When the host passes onAddAppointment, the header button carries data-action=\"add-appointment\". It only calls the host, so it has a hook but no agent action: creating an appointment writes patient data and belongs to the host's own flow."
         },
         "instanceId": {
           "attr": "data-component-id",
@@ -6166,7 +6166,9 @@
     {
       "kind": "component",
       "id": "document-preview",
-      "capabilities": [],
+      "capabilities": [
+        "close"
+      ],
       "state": [
         {
           "name": "kind",
@@ -6195,7 +6197,7 @@
         "root": {
           "attr": "data-component",
           "value": "document-preview",
-          "description": "Marks the DocumentPreview region."
+          "description": "Marks the DocumentPreview region. When the host passes onClose and onDownload, the header buttons carry data-action=\"close-document\" and data-action=\"download-document\"; both only call the host."
         },
         "instanceId": {
           "attr": "data-component-id",
@@ -9574,6 +9576,53 @@
         }
       }
     },
+    {
+      "kind": "component",
+      "id": "keypad",
+      "capabilities": [],
+      "state": [],
+      "actions": [],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "keypad",
+          "description": "Marks the 3 × 4 number pad (role=\"group\"). Its keys are KeypadButtons in fixed phone order."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop."
+        },
+        "item": {
+          "attr": "data-key-id",
+          "description": "On each key: \"0\" to \"9\" for the digits, \"delete\" for Delete. For tests and scripted demos only: an agent never presses these keys to type a PIN. The root carries a session-replay mask class (maskClassName, default ph-no-capture)."
+        }
+      }
+    },
+    {
+      "kind": "component",
+      "id": "keypad-button",
+      "capabilities": [],
+      "state": [],
+      "actions": [],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "keypad-button",
+          "description": "Marks one keypad key. `data-variant` is digit, action or spacer; a spacer is aria-hidden and never a target."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop."
+        },
+        "item": {
+          "attr": "data-key-id",
+          "sourceProp": "digit",
+          "description": "The digit a digit key types. Action keys carry no data-key-id of their own; Keypad sets data-key-id=\"delete\" on its Delete key."
+        }
+      }
+    },
     {
       "kind": "component",
       "id": "link",
@@ -12163,7 +12212,8 @@
       "domHooks": {
         "root": {
           "attr": "data-component",
-          "value": "pdf-viewer"
+          "value": "pdf-viewer",
+          "description": "Marks the PDFViewer. Each toolbar button carries a data-action: previous-page, next-page, zoom-out, zoom-in, open-search, close-search (the find bar) and print. go_to_page, set_zoom and print on this adapter do the same work through the handle."
         },
         "instanceId": {
           "attr": "data-component-id",
@@ -13083,6 +13133,82 @@
         }
       }
     },
+    {
+      "kind": "component",
+      "id": "pin-entry",
+      "capabilities": [],
+      "state": [
+        {
+          "name": "filledCount",
+          "type": "number",
+          "description": "How many digits are typed. Never the digits themselves.",
+          "descriptionKey": "ui.agent.pinEntry.state.filledCount"
+        },
+        {
+          "name": "length",
+          "type": "number",
+          "description": "How many digits the PIN has.",
+          "descriptionKey": "ui.agent.pinEntry.state.length"
+        },
+        {
+          "name": "isComplete",
+          "type": "boolean",
+          "description": "Whether every digit is typed.",
+          "descriptionKey": "ui.agent.pinEntry.state.isComplete"
+        }
+      ],
+      "actions": [
+        {
+          "name": "clear",
+          "safety": "destructive",
+          "idempotent": true,
+          "description": "Empty the PIN. Loses the digits typed so far.",
+          "descriptionKey": "ui.agent.pinEntry.actions.clear"
+        },
+        {
+          "name": "focus",
+          "safety": "read",
+          "idempotent": true,
+          "description": "Move keyboard focus to the PIN field, so physical digits type into it.",
+          "descriptionKey": "ui.agent.pinEntry.actions.focus"
+        }
+      ],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "pin-entry",
+          "description": "Marks the PIN control: a label, the PIN dots over a real password field (inputmode=\"none\") and a Keypad."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop."
+        }
+      }
+    },
+    {
+      "kind": "component",
+      "id": "pin-indicator",
+      "capabilities": [],
+      "state": [],
+      "actions": [],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "pin-indicator",
+          "description": "Marks the PIN dots. data-state is idle, complete or error; data-filled and data-length give the count. The indicator never renders a digit."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop."
+        },
+        "item": {
+          "attr": "data-dot-id",
+          "description": "On each dot: its position, from 0. A dot also carries data-filled when that dot is filled; the root carries the number of digits typed."
+        }
+      }
+    },
     {
       "kind": "component",
       "id": "popover",
@@ -15258,7 +15384,7 @@
         "root": {
           "attr": "data-component",
           "value": "session-countdown",
-          "description": "Marks the element as a kit SessionCountdown banner. The root also emits `data-tone=\"running\" | \"warning\" | \"expired\"` (derived from the remaining time). The accessible remaining-time announcement is surfaced via the region's aria-label and a nested polite live region."
+          "description": "Marks the element as a kit SessionCountdown banner. The root also emits `data-tone=\"running\" | \"warning\" | \"expired\"` (derived from the remaining time). When the session has expired and the host passes onRestart, the only button carries data-action=\"restart-session\"; it only calls the host. The accessible remaining-time announcement is surfaced via the region's aria-label and a nested polite live region."
         }
       }
     },
@@ -16102,6 +16228,65 @@
         }
       }
     },
+    {
+      "kind": "component",
+      "id": "sms-code-entry",
+      "capabilities": [],
+      "state": [
+        {
+          "name": "filledCount",
+          "type": "number",
+          "description": "How many digits are typed. Never the digits themselves.",
+          "descriptionKey": "ui.agent.smsCodeEntry.state.filledCount"
+        },
+        {
+          "name": "length",
+          "type": "number",
+          "description": "How many digits the code has.",
+          "descriptionKey": "ui.agent.smsCodeEntry.state.length"
+        },
+        {
+          "name": "isComplete",
+          "type": "boolean",
+          "description": "Whether every box is filled, so the person can press the submit button.",
+          "descriptionKey": "ui.agent.smsCodeEntry.state.isComplete"
+        },
+        {
+          "name": "error",
+          "type": "'wrong' | 'expired' | 'locked' | 'send-failed' | 'resend-limit' | null",
+          "description": "What the host reported about the code: wrong, expired, locked, send-failed or resend-limit, or null when it reported nothing.",
+          "descriptionKey": "ui.agent.smsCodeEntry.state.error"
+        }
+      ],
+      "actions": [
+        {
+          "name": "clear",
+          "safety": "destructive",
+          "idempotent": true,
+          "description": "Empty the boxes. Loses the digits typed so far.",
+          "descriptionKey": "ui.agent.smsCodeEntry.actions.clear"
+        },
+        {
+          "name": "focus",
+          "safety": "read",
+          "idempotent": true,
+          "description": "Move keyboard focus to the code boxes, so the person can type or paste the code. Does nothing while the boxes are disabled.",
+          "descriptionKey": "ui.agent.smsCodeEntry.actions.focus"
+        }
+      ],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "sms-code-entry",
+          "description": "Marks the SMS code step: the sentence naming the masked mobile, the code boxes (an OTPInput), the notes, \"Send a new code\" and the submit button."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop."
+        }
+      }
+    },
     {
       "kind": "component",
       "id": "social-sign-in-button",
@@ -16271,6 +16456,29 @@
         }
       }
     },
+    {
+      "kind": "component",
+      "id": "step-up-dialog",
+      "capabilities": [
+        "open",
+        "close",
+        "dismiss"
+      ],
+      "state": [],
+      "actions": [],
+      "domHooks": {
+        "root": {
+          "attr": "data-component",
+          "value": "step-up-dialog",
+          "description": "Marks the body wrapper inside the dialog surface: the title, the subject, the code entry (or the no-mobile refusal) and Cancel. The surrounding Dialog, with its own data-component=\"dialog\", owns the open-state handle."
+        },
+        "instanceId": {
+          "attr": "data-component-id",
+          "sourceProp": "id",
+          "description": "Sourced from the id prop. Emitted on this body wrapper AND on the composed Dialog content, which registers `dialogAgent` under the same id, so one id addresses both the step-up body and the open-state handle."
+        }
+      }
+    },
     {
       "kind": "component",
       "id": "stepper-accordion",
@@ -21959,6 +22167,54 @@
         }
       ]
     },
+    {
+      "kind": "pattern",
+      "id": "check-in-documents",
+      "composes": [
+        {
+          "component": "card",
+          "as": "card"
+        },
+        {
+          "component": "badge",
+          "as": "status"
+        },
+        {
+          "component": "alert",
+          "as": "notice"
+        },
+        {
+          "component": "button",
+          "as": "action"
+        }
+      ],
+      "workflows": [
+        {
+          "name": "read_documents",
+          "safety": "read",
+          "description": "Read which documents are due and which are signed. The screen is `data-component=\"check-in-documents\"`. Each document is a list item with `data-document-id` (its id) and a status badge: \"To sign\", \"Signed\" or \"Sign again\". A document that changed since it was signed has a notice naming it and the date. The count \"N of M signed\" is a status region above the list. Never invent a document that is not listed.",
+          "descriptionKey": "ui.agent.checkInDocuments.workflows.readDocuments",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "start_signing",
+          "safety": "write",
+          "description": "Open the signing round for every unsigned document (`data-action=\"sign-all\"`, \"Read and sign\"). The button shows only while a document is unsigned, the patient has a verified mobile and the host handles it; without one the screen says \"Contact the practice\" and has no such button. The person reads and signs the documents in one round, then presses Sign; the round has no code of its own (D133). The host opens the round.",
+          "descriptionKey": "ui.agent.checkInDocuments.workflows.startSigning",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "continue_check_in",
+          "safety": "write",
+          "description": "Move on to the next step (`data-action=\"documents-continue\"`, \"Continue\"). The button shows only when every listed document is signed. The host decides what comes next and may save progress.",
+          "descriptionKey": "ui.agent.checkInDocuments.workflows.continueCheckIn",
+          "uiActions": [],
+          "apiActions": []
+        }
+      ]
+    },
     {
       "kind": "pattern",
       "id": "confirm-phone",
@@ -22721,81 +22977,171 @@
     },
     {
       "kind": "pattern",
-      "id": "patient-ai-summary",
+      "id": "patient-account-settings",
       "composes": [
         {
-          "component": "tool-rail",
-          "as": "toolRail"
+          "component": "pin-entry",
+          "as": "pin"
         },
         {
-          "component": "accordion",
-          "as": "briefSections",
-          "entity": "patientSection"
+          "component": "email-input",
+          "as": "email"
         },
         {
-          "component": "patient-summary-card",
-          "as": "overview",
-          "entity": "patient"
+          "component": "phone-input",
+          "as": "mobile"
         },
         {
-          "component": "appointment-card",
-          "as": "nextAppointment",
-          "entity": "appointment"
+          "component": "form-field",
+          "as": "field"
         },
         {
-          "component": "anamnesis-card",
-          "as": "medicalHistory",
-          "entity": "anamnesis"
+          "component": "step-up-dialog",
+          "as": "smsCheck"
         },
         {
-          "component": "clinical-note-card",
-          "as": "latestNote",
-          "entity": "clinicalNote"
+          "component": "empty-state",
+          "as": "message"
         },
         {
-          "component": "care-plan-card",
-          "as": "activePlan",
-          "entity": "carePlan"
+          "component": "skeleton",
+          "as": "loading"
         },
         {
-          "component": "payment-card",
-          "as": "latestPayment",
-          "entity": "payment"
+          "component": "alert",
+          "as": "alert"
         },
         {
-          "component": "ai-consent-banner",
-          "as": "consentGate"
+          "component": "button",
+          "as": "action"
         }
       ],
       "workflows": [
         {
-          "name": "open_tool",
-          "safety": "read",
-          "description": "Open one of the rail tools — the Patient Summary brief or the Ask Alia chat — making its panel the open region inside the rail landmark.",
-          "descriptionKey": "ui.agent.patientAiSummary.workflows.openTool",
-          "uiActions": [
-            "tool-rail.open",
-            "tool-rail.select_tool"
-          ],
-          "stateReads": [
-            "tool-rail.activeToolId"
-          ],
+          "name": "read_screen",
+          "safety": "phi",
+          "description": "Read the account settings. The screen is `data-component=\"patient-account-settings\"`; each row is `data-component=\"patient-account-settings-row\"` with `data-row-id` and `data-kind` (`email`, `mobile`, `pin` or `readonly`). Rows sit in sections, each carrying an opaque id as `data-section-id`. The state is ids and kinds only: no attribute holds the email or the mobile. Reading the row text reads the login email and the masked mobile back, so it is `phi`; under privacy the values are masked and the Change buttons are hidden. The PIN is never shown. A loading or message placeholder carries `data-state` `loading`, `empty` or `error`. It returns row ids, row kinds and that state, and no email or mobile value. Never read or repeat a PIN or an SMS code.",
+          "descriptionKey": "ui.agent.patientAccountSettings.workflows.readScreen",
+          "uiActions": [],
           "apiActions": []
         },
         {
-          "name": "read_brief",
-          "safety": "read",
-          "description": "Read the compiled patient brief — overview counts/flags, plan state and progress, and the latest payment record.",
-          "descriptionKey": "ui.agent.patientAiSummary.workflows.readBrief",
+          "name": "change_email",
+          "safety": "phi",
+          "description": "Change the login email: \"Change email\" (`data-action=\"change-email\"`) opens a panel, type the new email, then Save (`data-action=\"save-change\"`) or Cancel (`data-action=\"cancel-change\"`). The host asks for an SMS code before it saves; the old email stays until it does. The SMS step is for the person only: an agent does not read, type or resend the code.",
+          "descriptionKey": "ui.agent.patientAccountSettings.workflows.changeEmail",
           "uiActions": [],
-          "stateReads": [
-            "patient-summary-card.summary",
-            "care-plan-card.state",
-            "care-plan-card.progress",
-            "payment-card.state"
-          ],
           "apiActions": [
-            "patient.summarise"
+            "account.changeEmail"
+          ]
+        },
+        {
+          "name": "change_mobile",
+          "safety": "phi",
+          "description": "Change the mobile: \"Change mobile\" (`data-action=\"change-mobile\"`) opens a panel that asks the current PIN on the keypad and the new number, then Save (`data-action=\"save-change\"`). The SMS code goes to the current mobile. The person types the PIN and the code.",
+          "descriptionKey": "ui.agent.patientAccountSettings.workflows.changeMobile",
+          "uiActions": [],
+          "apiActions": [
+            "account.changeMobile"
+          ]
+        },
+        {
+          "name": "change_pin",
+          "safety": "phi",
+          "description": "Change the PIN in three keypad steps (current, new, new again): \"Change PIN\" (`data-action=\"change-pin\"`), Continue (`data-action=\"continue-change\"`), then Save (`data-action=\"save-change\"`). The host compares the two new PINs and may refuse the PIN. The person types every PIN and the SMS code.",
+          "descriptionKey": "ui.agent.patientAccountSettings.workflows.changePin",
+          "uiActions": [],
+          "apiActions": [
+            "account.changePin"
+          ]
+        },
+        {
+          "name": "retry",
+          "safety": "read",
+          "description": "Read the settings again after an error (`data-action=\"retry\"`). Present only when the host gives a handler.",
+          "descriptionKey": "ui.agent.patientAccountSettings.workflows.retry",
+          "uiActions": [],
+          "apiActions": []
+        }
+      ]
+    },
+    {
+      "kind": "pattern",
+      "id": "patient-ai-summary",
+      "composes": [
+        {
+          "component": "tool-rail",
+          "as": "toolRail"
+        },
+        {
+          "component": "accordion",
+          "as": "briefSections",
+          "entity": "patientSection"
+        },
+        {
+          "component": "patient-summary-card",
+          "as": "overview",
+          "entity": "patient"
+        },
+        {
+          "component": "appointment-card",
+          "as": "nextAppointment",
+          "entity": "appointment"
+        },
+        {
+          "component": "anamnesis-card",
+          "as": "medicalHistory",
+          "entity": "anamnesis"
+        },
+        {
+          "component": "clinical-note-card",
+          "as": "latestNote",
+          "entity": "clinicalNote"
+        },
+        {
+          "component": "care-plan-card",
+          "as": "activePlan",
+          "entity": "carePlan"
+        },
+        {
+          "component": "payment-card",
+          "as": "latestPayment",
+          "entity": "payment"
+        },
+        {
+          "component": "ai-consent-banner",
+          "as": "consentGate"
+        }
+      ],
+      "workflows": [
+        {
+          "name": "open_tool",
+          "safety": "read",
+          "description": "Open one of the rail tools — the Patient Summary brief or the Ask Alia chat — making its panel the open region inside the rail landmark.",
+          "descriptionKey": "ui.agent.patientAiSummary.workflows.openTool",
+          "uiActions": [
+            "tool-rail.open",
+            "tool-rail.select_tool"
+          ],
+          "stateReads": [
+            "tool-rail.activeToolId"
+          ],
+          "apiActions": []
+        },
+        {
+          "name": "read_brief",
+          "safety": "read",
+          "description": "Read the compiled patient brief — overview counts/flags, plan state and progress, and the latest payment record.",
+          "descriptionKey": "ui.agent.patientAiSummary.workflows.readBrief",
+          "uiActions": [],
+          "stateReads": [
+            "patient-summary-card.summary",
+            "care-plan-card.state",
+            "care-plan-card.progress",
+            "payment-card.state"
+          ],
+          "apiActions": [
+            "patient.summarise"
           ]
         },
         {
@@ -22848,215 +23194,172 @@
       "id": "patient-check-in",
       "composes": [
         {
-          "component": "qr-code",
-          "as": "checkInQr"
-        },
-        {
-          "component": "locale-picker",
-          "as": "languagePicker"
-        },
-        {
-          "component": "social-sign-in-button",
-          "as": "ssoSignIn"
-        },
-        {
-          "component": "email-input",
-          "as": "signInEmail"
-        },
-        {
-          "component": "phone-input",
-          "as": "signInPhone"
+          "component": "card",
+          "as": "card"
         },
         {
-          "component": "otp-input",
-          "as": "verifyCode"
+          "component": "appointment-card",
+          "as": "appointment",
+          "entity": "appointment"
         },
         {
-          "component": "card",
-          "as": "appointmentHub",
-          "entity": "appointment"
+          "component": "session-countdown",
+          "as": "sessionBanner"
         },
         {
-          "component": "dependent-selector",
-          "as": "whoIsCheckingIn",
-          "entity": "person"
+          "component": "description-list",
+          "as": "details"
         },
         {
           "component": "form-field",
-          "as": "detailsField"
+          "as": "field"
         },
         {
           "component": "text-input",
-          "as": "detailsName"
+          "as": "text"
         },
         {
-          "component": "fiscal-code-input",
-          "as": "detailsFiscalCode"
-        },
-        {
-          "component": "address-autocomplete",
-          "as": "detailsAddress"
+          "component": "email-input",
+          "as": "email"
         },
         {
-          "component": "date-picker",
-          "as": "detailsBirthDate"
+          "component": "country-select",
+          "as": "country"
         },
         {
           "component": "select",
-          "as": "detailsCountry"
-        },
-        {
-          "component": "radio-group",
-          "as": "detailsGender"
+          "as": "source"
         },
         {
-          "component": "document-scanner",
-          "as": "idCapture"
+          "component": "step-up-dialog",
+          "as": "smsCheck"
         },
         {
-          "component": "file-upload",
-          "as": "idUpload"
-        },
-        {
-          "component": "sign-document",
-          "as": "consentDoc"
+          "component": "finished-terminal",
+          "as": "endScreen"
         },
         {
-          "component": "signature-capture",
-          "as": "consentSignature"
+          "component": "badge",
+          "as": "status"
         },
         {
-          "component": "payment-form",
-          "as": "visitPayment"
+          "component": "alert",
+          "as": "notice"
         },
         {
-          "component": "wallet-pay-button",
-          "as": "walletPay"
-        },
+          "component": "button",
+          "as": "action"
+        }
+      ],
+      "workflows": [
         {
-          "component": "session-countdown",
-          "as": "sessionGuard"
+          "name": "read_screen",
+          "safety": "phi",
+          "description": "Read which check-in screen is showing. The roots are `check-in-entry`, `check-in-hub`, `check-in-hub-empty`, `check-in-personal-data`, `check-in-done`, `check-in-appointment-changed` and `check-in-resume`, inside `check-in-shell`; a lost connection adds `check-in-connection-notice` above the current step. On the hub each due item is a list item with `data-step-id` and a status badge, \"Open\" or \"Done\". When the session timed out the shell shows only `patient-session-ended`. The personal data step shows the same fields and the masked mobile, and the hub lists the due treatments, so reading it is `phi`; under privacy the values are masked. Paperwork done is not arrival: never tell the person they are checked in.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.readScreen",
+          "uiActions": [],
+          "apiActions": []
         },
         {
-          "component": "alert",
-          "as": "statusNotice"
+          "name": "sign_in",
+          "safety": "write",
+          "description": "Start sign-in from the entry screen (`data-action=\"sign-in\"`). The screen names no patient, appointment or practice. The host opens the sign-in; the person types their own PIN and SMS code.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.signIn",
+          "uiActions": [],
+          "apiActions": [
+            "auth.signIn"
+          ]
         },
         {
-          "component": "badge",
-          "as": "appointmentBadge"
+          "name": "continue_check_in",
+          "safety": "write",
+          "description": "Move on from the hub (`data-action=\"continue\"`, \"Continue\"). It is disabled while online check-in is off and absent once the host says the paperwork is done. It selects and marks nothing: the host opens the next step.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.continueCheckIn",
+          "uiActions": [],
+          "apiActions": [
+            "checkIn.continue"
+          ]
         },
         {
-          "component": "separator",
-          "as": "stepDivider"
-        }
-      ],
-      "workflows": [
-        {
-          "name": "sign_in_with_code",
+          "name": "not_me",
           "safety": "write",
-          "description": "Request a one-time SMS/email code, enter it, and authenticate into the check-in flow.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.signInWithCode",
-          "uiActions": [
-            "otp-input.set_value"
-          ],
-          "stateReads": [
-            "otp-input.isComplete",
-            "email-input.value"
-          ],
+          "description": "Say the appointment shown is not the signed-in person (`data-action=\"not-me\"`, \"Not me\"). The host decides where this leads and changes no status.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.notMe",
+          "uiActions": [],
           "apiActions": [
-            "auth.requestOtp",
-            "auth.verifyOtp"
+            "checkIn.notMe"
           ]
         },
         {
-          "name": "set_language",
+          "name": "open_documents",
           "safety": "read",
-          "description": "Pick the kiosk language for the check-in session.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.setLanguage",
-          "uiActions": [
-            "locale-picker.set_locale"
-          ],
+          "description": "Open the documents step from the hub (`data-action=\"documents\"`). The button shows only when the host handles it.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.openDocuments",
+          "uiActions": [],
           "apiActions": []
         },
         {
-          "name": "select_subject",
-          "safety": "write",
-          "description": "Choose who is checking in (self or a dependent) and confirm their personal data.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.selectSubject",
-          "uiActions": [
-            "dependent-selector.set_value",
-            "text-input.set_value",
-            "fiscal-code-input.set_value",
-            "address-autocomplete.set_value",
-            "date-picker.set_date",
-            "select.set_value",
-            "radio-group.set_value"
-          ],
-          "stateReads": [
-            "dependent-selector.value",
-            "fiscal-code-input.isValid"
-          ],
+          "name": "cancel_appointment",
+          "safety": "destructive",
+          "description": "Ask to cancel the appointment from the hub (`data-action=\"cancel-appointment\"`). The button shows only when the host handles it; the host decides, and may ask for an SMS code first.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.cancelAppointment",
+          "uiActions": [],
           "apiActions": [
-            "patient.updateDetails"
+            "appointment.cancel"
           ]
         },
         {
-          "name": "capture_id_document",
-          "safety": "write",
-          "description": "Photograph or upload the health card / ID document for the visit.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.captureIdDocument",
-          "uiActions": [
-            "document-scanner.start_camera",
-            "document-scanner.capture",
-            "document-scanner.submit",
-            "file-upload.clear"
-          ],
-          "stateReads": [
-            "document-scanner.hasCapture",
-            "file-upload.files"
-          ],
+          "name": "confirm_details",
+          "safety": "phi",
+          "description": "Check the personal details and press \"Continue\" (`data-action=\"details-continue\"`). Values from the record are marked \"From your record\"; the date of birth, codice fiscale and mobile are read-only. When the practice asks, choose a source (Fonte). The kit validates nothing: the host answers with field errors. A change may wait for an SMS code. Without a verified mobile the details are read-only, there is no Continue, and the person is sent to the front desk.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.confirmDetails",
+          "uiActions": [],
           "apiActions": [
-            "document.upload"
+            "patient.updateDetails"
           ]
         },
         {
-          "name": "sign_consents",
+          "name": "open_portal",
+          "safety": "read",
+          "description": "Open the patient portal from the end screen, an empty hub or the appointment-changed screen (`data-action=\"portal\"`; on the end screen with a portal link it is `data-action=\"next-step\"`). On the timed-out screen `data-action=\"next-step\"` is \"Restart\", not the portal: see `restart_after_timeout`. The host routes.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.openPortal",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "resume_check_in",
           "safety": "write",
-          "description": "Read each consent form, add the signature, and submit the signed consents.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.signConsents",
-          "uiActions": [
-            "signature-capture.confirm",
-            "signature-capture.clear",
-            "sign-document.submit"
-          ],
-          "stateReads": [
-            "signature-capture.isEmpty",
-            "sign-document.isReadComplete"
-          ],
+          "description": "Pick up an earlier check-in with \"Resume check-in\" (`data-action=\"resume\"`) or begin again with \"Start over\" (`data-action=\"start-over\"`). The host opens the first step that is not done.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.resumeCheckIn",
+          "uiActions": [],
           "apiActions": [
-            "consent.sign"
+            "checkIn.resume"
           ]
         },
         {
-          "name": "pay_for_visit",
+          "name": "retry",
           "safety": "write",
-          "description": "Pay the visit fee by card or digital wallet.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.payForVisit",
-          "uiActions": [
-            "payment-form.submit"
-          ],
-          "apiActions": [
-            "payment.charge"
-          ]
+          "description": "Try the last step again after a lost connection (`data-action=\"retry\"` in the connection notice). What the person typed stays on screen.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.retry",
+          "uiActions": [],
+          "apiActions": []
         },
         {
-          "name": "complete_check_in",
+          "name": "restart_after_timeout",
+          "safety": "write",
+          "description": "On the timed-out screen (the session ended because of inactivity) press \"Restart\" (`data-action=\"next-step\"`, the only button) to begin again. The host decides what Restart does; the kit calls nothing.",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.restartAfterTimeout",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "sign_out",
           "safety": "write",
-          "description": "Finalise the check-in once all steps are done; marks the patient as arrived.",
-          "descriptionKey": "ui.agent.patientCheckIn.workflows.completeCheckIn",
+          "description": "Sign out (`data-action=\"sign-out\"` in the session banner). It is visible in every tone of the banner. The host ends the session. After a timeout the session-ended screen shows only \"Restart\" (`data-action=\"next-step\"`).",
+          "descriptionKey": "ui.agent.patientCheckIn.workflows.signOut",
           "uiActions": [],
           "apiActions": [
-            "appointment.checkIn"
+            "auth.signOut"
           ]
         }
       ]
@@ -23595,177 +23898,162 @@
       "id": "patient-portal",
       "composes": [
         {
-          "component": "social-sign-in-button",
-          "as": "ssoSignIn"
-        },
-        {
-          "component": "email-input",
-          "as": "signInEmail"
+          "component": "tab-bar",
+          "as": "tabs"
         },
         {
-          "component": "phone-input",
-          "as": "signInPhone"
+          "component": "session-countdown",
+          "as": "sessionBanner"
         },
         {
-          "component": "otp-input",
-          "as": "verifyCode"
+          "component": "appointment-card",
+          "as": "appointment",
+          "entity": "appointment"
         },
         {
-          "component": "tab-bar",
-          "as": "sectionNav"
+          "component": "whatsapp-button",
+          "as": "practiceContact"
         },
         {
-          "component": "card",
-          "as": "sectionCard"
+          "component": "document-preview",
+          "as": "documentViewer"
         },
         {
-          "component": "badge",
-          "as": "appointmentBadge"
+          "component": "step-up-dialog",
+          "as": "smsCheck"
         },
         {
           "component": "dialog",
           "as": "cancelConfirm"
         },
         {
-          "component": "button",
-          "as": "cancelAppointment"
-        },
-        {
-          "component": "alert",
-          "as": "cancelTooLate"
+          "component": "description-list",
+          "as": "details"
         },
         {
-          "component": "file-upload",
-          "as": "documentUpload"
+          "component": "form-field",
+          "as": "field"
         },
         {
-          "component": "progress",
-          "as": "uploadProgress"
+          "component": "text-input",
+          "as": "text"
         },
         {
-          "component": "form-field",
-          "as": "detailsField"
+          "component": "email-input",
+          "as": "email"
         },
         {
-          "component": "text-input",
-          "as": "detailsName"
+          "component": "country-select",
+          "as": "country"
         },
         {
-          "component": "fiscal-code-input",
-          "as": "detailsFiscalCode"
+          "component": "checkbox",
+          "as": "consent"
         },
         {
-          "component": "address-autocomplete",
-          "as": "detailsAddress"
+          "component": "empty-state",
+          "as": "message"
         },
         {
-          "component": "date-picker",
-          "as": "detailsBirthDate"
+          "component": "skeleton",
+          "as": "loading"
         },
         {
-          "component": "select",
-          "as": "detailsCountry"
+          "component": "alert",
+          "as": "alert"
         },
         {
-          "component": "radio-group",
-          "as": "detailsGender"
+          "component": "button",
+          "as": "action"
         },
         {
-          "component": "separator",
-          "as": "sectionDivider"
+          "component": "finished-terminal",
+          "as": "endScreen"
         }
       ],
       "workflows": [
         {
-          "name": "sign_in_with_code",
-          "safety": "write",
-          "description": "Request a one-time SMS/email code, enter it, and authenticate into the portal.",
-          "descriptionKey": "ui.agent.patientPortal.workflows.signInWithCode",
-          "uiActions": [
-            "otp-input.set_value"
-          ],
-          "stateReads": [
-            "otp-input.isComplete",
-            "email-input.value"
-          ],
-          "apiActions": [
-            "auth.requestOtp",
-            "auth.verifyOtp"
-          ]
+          "name": "read_screen",
+          "safety": "phi",
+          "description": "Read which portal screen is showing and its state. The shell is `data-component=\"portal-shell\"`; the screens are `portal-home`, `portal-appointments`, `portal-documents` and `portal-details`, and the shell content area carries `data-state` (`ready`, `loading` or `error`) for the state of the read; a loading or message placeholder inside it carries `data-state` `loading`, `empty` or `error`, and a polite status (`data-live=\"portal\"`) says loading, errors and a cancelled visit. When the session has ended the shell shows `patient-session-ended` and nothing else. The parts inside a screen carry their own `data-component`: `portal-practice-contact` on Home, `portal-details-fields` and `portal-details-read-only-list` on My details. Reading My details reads the name, address, email, phone, birth date and codice fiscale back, so it is `phi`; under privacy the values are masked. Never read or repeat an SMS code.",
+          "descriptionKey": "ui.agent.patientPortal.workflows.readScreen",
+          "uiActions": [],
+          "apiActions": []
         },
         {
-          "name": "navigate_section",
+          "name": "navigate_tab",
           "safety": "read",
-          "description": "Switch between the Appointments, Documents, and My details portal sections.",
-          "descriptionKey": "ui.agent.patientPortal.workflows.navigateSection",
+          "description": "Move between Home, Appointments, Documents and My details with the tab bar (`[data-tab-id]`). The host routes; the shell only reports the chosen tab.",
+          "descriptionKey": "ui.agent.patientPortal.workflows.navigateTab",
           "uiActions": [],
           "apiActions": []
         },
         {
           "name": "check_in",
           "safety": "write",
-          "description": "Start the day-of check-in for an upcoming appointment from the portal home.",
+          "description": "Start check-in for an appointment with paperwork due (`data-action=\"check-in\"` on Home). The button names the visit; the host opens check-in.",
           "descriptionKey": "ui.agent.patientPortal.workflows.checkIn",
           "uiActions": [],
           "apiActions": [
-            "appointment.checkIn"
+            "checkIn.start"
           ]
         },
         {
           "name": "cancel_appointment",
           "safety": "destructive",
-          "description": "Cancel an upcoming appointment after confirming in the dialog. Frees the slot.",
+          "description": "Cancel an upcoming appointment: \"Cancel appointment\" (`data-action=\"cancel-appointment\"`) opens a confirm step, \"Yes, cancel it\" (`data-action=\"confirm-cancel\"`) asks the host, which may ask for an SMS code first. \"Keep appointment\" (`data-action=\"keep-appointment\"`) closes the confirm step and changes nothing. Inside the practice cut-off there is no Cancel: only a call to the practice (`data-action=\"call-practice\"`). A cancelled visit may offer \"Book a new appointment\" (`data-action=\"rebook\"`), a link to the practice's booking page in a new tab.",
           "descriptionKey": "ui.agent.patientPortal.workflows.cancelAppointment",
-          "uiActions": [
-            "dialog.open",
-            "dialog.close"
-          ],
-          "stateReads": [
-            "dialog.isOpen"
-          ],
+          "uiActions": [],
           "apiActions": [
             "appointment.cancel"
           ]
         },
         {
-          "name": "upload_document",
-          "safety": "write",
-          "description": "Upload a file (PDF/JPG/PNG) to the patient document library.",
-          "descriptionKey": "ui.agent.patientPortal.workflows.uploadDocument",
-          "uiActions": [
-            "file-upload.clear"
-          ],
-          "stateReads": [
-            "file-upload.files"
-          ],
+          "name": "open_document",
+          "safety": "phi",
+          "description": "Open (`data-action=\"open-document\"`) or download (`data-action=\"download-document\"`) a shared document. The host may ask for an SMS code first. An opened file shows inside the page and closes with its Close button (`data-action=\"close-document\"`).",
+          "descriptionKey": "ui.agent.patientPortal.workflows.openDocument",
+          "uiActions": [],
           "apiActions": [
-            "document.upload"
+            "document.open",
+            "document.download"
           ]
         },
         {
-          "name": "save_details",
-          "safety": "write",
-          "description": "Edit and save the patient personal details (contact, address, fiscal code).",
-          "descriptionKey": "ui.agent.patientPortal.workflows.saveDetails",
-          "uiActions": [
-            "text-input.set_value",
-            "fiscal-code-input.set_value",
-            "address-autocomplete.set_value",
-            "date-picker.set_date",
-            "select.set_value",
-            "radio-group.set_value"
-          ],
-          "stateReads": [
-            "text-input.value",
-            "fiscal-code-input.isValid",
-            "address-autocomplete.value",
-            "date-picker.value",
-            "select.value",
-            "radio-group.value"
-          ],
+          "name": "edit_details",
+          "safety": "phi",
+          "description": "Edit the personal details: Edit (`data-action=\"edit-details\"`), change the fields, then Save (`data-action=\"save-details\"`) or Discard (`data-action=\"discard-details\"`). The codice fiscale and date of birth are read-only. Saving may wait for an SMS code. The host reports field errors and the outcome.",
+          "descriptionKey": "ui.agent.patientPortal.workflows.editDetails",
+          "uiActions": [],
           "apiActions": [
             "patient.updateDetails"
           ]
+        },
+        {
+          "name": "contact_practice",
+          "safety": "read",
+          "description": "Contact a practice: the WhatsApp button (`data-action=\"whatsapp\"`) opens a chat in a new tab, or, with no WhatsApp number, a phone link (`data-action=\"call-practice\"`).",
+          "descriptionKey": "ui.agent.patientPortal.workflows.contactPractice",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "sign_out",
+          "safety": "write",
+          "description": "Sign out (`data-action=\"sign-out\"`). It is visible in every state of the session banner. The host ends the session.",
+          "descriptionKey": "ui.agent.patientPortal.workflows.signOut",
+          "uiActions": [],
+          "apiActions": [
+            "auth.signOut"
+          ]
+        },
+        {
+          "name": "retry",
+          "safety": "read",
+          "description": "Read a list again after an error (`data-action=\"retry\"`). Present only when the host gives a handler.",
+          "descriptionKey": "ui.agent.patientPortal.workflows.retry",
+          "uiActions": [],
+          "apiActions": []
         }
       ]
     },
@@ -23895,6 +24183,116 @@
         }
       ]
     },
+    {
+      "kind": "pattern",
+      "id": "patient-sign-in",
+      "composes": [
+        {
+          "component": "card",
+          "as": "card"
+        },
+        {
+          "component": "alert",
+          "as": "message"
+        },
+        {
+          "component": "form-field",
+          "as": "field"
+        },
+        {
+          "component": "email-input",
+          "as": "email"
+        },
+        {
+          "component": "pin-entry",
+          "as": "pin"
+        },
+        {
+          "component": "button",
+          "as": "action"
+        },
+        {
+          "component": "finished-terminal",
+          "as": "endScreen"
+        },
+        {
+          "component": "session-countdown",
+          "as": "sessionBanner"
+        }
+      ],
+      "workflows": [
+        {
+          "name": "read_screen",
+          "safety": "phi",
+          "description": "Read which sign-in screen is showing and what is wrong with it. Each screen has its own `data-component`: `patient-sign-in-email`, `patient-sign-in-pin`, `patient-sign-in-code`, `patient-set-pin`, `patient-forgot-pin`, `patient-forgot-pin-sent`, `patient-pin-changed`, `patient-no-mobile`, `patient-session-ended`. A refusal from the host is an alert inside the screen. Reading the screen reads the login email back (\"Signing in as\", \"We sent a link to\"), so it is `phi`. Never read or repeat the PIN or the code.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.readScreen",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "submit_email",
+          "safety": "write",
+          "description": "Continue from the email screen (`data-action=\"sign-in-email\"`) or send the PIN reset link (`data-action=\"send-link\"`). The person types the email; the button is off while the field is empty. The host looks the account up and answers with \"no account\" or \"too many tries\".",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.submitEmail",
+          "uiActions": [],
+          "apiActions": [
+            "auth.lookupEmail"
+          ]
+        },
+        {
+          "name": "submit_pin",
+          "safety": "write",
+          "description": "Continue from the PIN screen (`data-action=\"sign-in-submit\"`) or the set-PIN screen (`data-action=\"set-pin-continue\"`). The person types the PIN on the keypad; the button is off until every digit is typed, and the PIN is never auto-submitted. The host compares the PIN.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.submitPin",
+          "uiActions": [
+            "pin-entry.focus"
+          ],
+          "stateReads": [
+            "pin-entry.isComplete"
+          ],
+          "apiActions": [
+            "auth.verifyPin",
+            "auth.setPin"
+          ]
+        },
+        {
+          "name": "reset_pin",
+          "safety": "write",
+          "description": "Start a PIN reset: \"Forgot your PIN?\" (`data-action=\"forgot-pin\"`) or, when sign-in is paused, \"Reset my PIN\" (`data-action=\"paused-reset\"`). Both only tell the host; the host sends the link.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.resetPin",
+          "uiActions": [],
+          "apiActions": [
+            "auth.requestPinReset"
+          ]
+        },
+        {
+          "name": "navigate_back",
+          "safety": "read",
+          "description": "Go back a step: `data-action=\"back\"` or `data-action=\"change-email\"`. On the end screens `patient-forgot-pin-sent`, `patient-no-mobile` and `patient-pin-changed`, the one button is `data-action=\"next-step\"` and returns to sign in. Each is present only when the host gives its handler.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.navigateBack",
+          "uiActions": [],
+          "apiActions": []
+        },
+        {
+          "name": "sign_out",
+          "safety": "write",
+          "description": "Sign out (`data-action=\"sign-out\"`, in `data-component=\"patient-session-bar\"`). The bar stays visible in every tone, running, warning and expired. The host ends the session.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.signOut",
+          "uiActions": [],
+          "apiActions": [
+            "auth.signOut"
+          ]
+        },
+        {
+          "name": "sign_in_again",
+          "safety": "read",
+          "description": "Start sign-in again from the session-ended screen (`data-action=\"next-step\"`, in `data-component=\"patient-session-ended\"`). There is no countdown and no automatic redirect.",
+          "descriptionKey": "ui.agent.patientSignIn.workflows.signInAgain",
+          "uiActions": [],
+          "apiActions": []
+        }
+      ]
+    },
     {
       "kind": "pattern",
       "id": "patients",
@@ -25955,26 +26353,6 @@
           "component": "signature-capture",
           "as": "capturePad"
         },
-        {
-          "component": "otp-input",
-          "as": "gateCode"
-        },
-        {
-          "component": "checkbox",
-          "as": "gateConfirm"
-        },
-        {
-          "component": "alert",
-          "as": "gateNotice"
-        },
-        {
-          "component": "card",
-          "as": "gateCard"
-        },
-        {
-          "component": "button",
-          "as": "gateVerify"
-        },
         {
           "component": "finished-terminal",
           "as": "terminal"
@@ -25990,8 +26368,12 @@
           "entity": "signer"
         },
         {
-          "component": "empty-state",
-          "as": "invalidLink"
+          "component": "button",
+          "as": "action"
+        },
+        {
+          "component": "alert",
+          "as": "captureError"
         },
         {
           "component": "spinner",
@@ -25999,24 +26381,6 @@
         }
       ],
       "workflows": [
-        {
-          "name": "verify_identity",
-          "safety": "write",
-          "description": "Pass the identity gate before the document is shown: enter the 5-character SMS code, or tick the confirm-identity checkbox when no mobile number is on file, then verify.",
-          "descriptionKey": "ui.agent.signing.workflows.verifyIdentity",
-          "uiActions": [
-            "otp-input.set_value",
-            "checkbox.set_checked"
-          ],
-          "stateReads": [
-            "otp-input.isComplete",
-            "checkbox.checked"
-          ],
-          "apiActions": [
-            "signing.verifyIdentity",
-            "signing.resendCode"
-          ]
-        },
         {
           "name": "read_document",
           "safety": "read",
@@ -26030,8 +26394,8 @@
         },
         {
           "name": "sign_field",
-          "safety": "write",
-          "description": "Activate a signature / initial / date field overlay, draw or type the signature in the capture dialog, and confirm it. Signing the last field auto-advances to the success terminal.",
+          "safety": "phi",
+          "description": "Activate a signature / initial / date field overlay, draw or type the signature in the capture dialog, and confirm it. A signed field cannot be reopened. Signing the last field arms the Sign button in the footer.",
           "descriptionKey": "ui.agent.signing.workflows.signField",
           "uiActions": [
             "dialog.open",
@@ -26049,32 +26413,14 @@
         },
         {
           "name": "complete_envelope",
-          "safety": "write",
-          "description": "Finalise the envelope once every required field carries a signature (with two signees: once both the primary and the secondary have signed all of their fields), persisting the completed document.",
+          "safety": "phi",
+          "description": "Once every field of the active signee is signed, the Sign button in the footer (`data-action=\"sign\"`) is armed (`data-armed=\"true\"`, accent). The person presses it themselves; the host signs the envelope and the footer shows \"Completing your document…\". No code is asked at the end: the person was checked before the document opened (D133). With two signees, each signee presses Sign for their own fields, and the envelope is complete once both have. Never press Sign on a person's behalf without their explicit instruction.",
           "descriptionKey": "ui.agent.signing.workflows.completeEnvelope",
           "uiActions": [],
           "apiActions": [
             "signing.completeEnvelope"
           ]
         },
-        {
-          "name": "verify_signee_identity",
-          "safety": "write",
-          "description": "The active signee (primary or secondary) passes its own identity gate: enter the 5-character SMS code, or tick the confirm-identity checkbox when no mobile number is on file, then verify.",
-          "descriptionKey": "ui.agent.signing.workflows.verifySigneeIdentity",
-          "uiActions": [
-            "otp-input.set_value",
-            "checkbox.set_checked"
-          ],
-          "stateReads": [
-            "otp-input.isComplete",
-            "checkbox.checked"
-          ],
-          "apiActions": [
-            "signing.verifySigneeIdentity",
-            "signing.resendCode"
-          ]
-        },
         {
           "name": "sign_signee_fields",
           "safety": "write",
@@ -26098,12 +26444,25 @@
         {
           "name": "hand_off_to_secondary_signee",
           "safety": "write",
-          "description": "After the primary signee finishes, hand the device to the secondary signee (same-device flow), switching the active session and re-filtering the surface to the secondary signee’s fields.",
+          "description": "After the primary signee presses Sign, hand the device to the secondary signee (same-device flow). The secondary signee passes their own check before their document shows (D133); the host then switches the active session and re-filters the surface to the secondary signee’s fields.",
           "descriptionKey": "ui.agent.signing.workflows.handOffToSecondarySignee",
           "uiActions": [],
           "apiActions": [
             "signing.handOffToSecondarySignee"
           ]
+        },
+        {
+          "name": "confirm_staff_id",
+          "safety": "phi",
+          "description": "On a practice device, when the patient has no mobile for a code, the logged-in staff member presses \"I have seen the ID\" (`data-action=\"confirm-staff-id\"`) in the dialog `data-component=\"signing-staff-id-confirmation\"`, before the document opens (D133). It is recorded against the staff member's name, the time and the document; only then does the host open the document. There is no tick box. An agent never presses it on a person's behalf without the staff member's explicit instruction.",
+          "descriptionKey": "ui.agent.signing.workflows.confirmStaffId",
+          "uiActions": [],
+          "stateReads": [
+            "dialog.isOpen"
+          ],
+          "apiActions": [
+            "signing.confirmStaffId"
+          ]
         }
       ]
     },