@choiceapps/communityservices-sdk 0.5.0 → 0.7.0

package/dist/cjs/write-labels.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createReadBackWriteLabelResolver = createReadBackWriteLabelResolver;
+const metadata_js_1 = require("./metadata.js");
+const errors_js_1 = require("./errors.js");
+const validation_js_1 = require("./validation.js");
+/** Builds labels only from exact readback evidence. It never infers HUD suffixes.
+ * Unobserved or changed options return undefined, so the standard encoder refuses them. */
+function createReadBackWriteLabelResolver(definition, observations) {
+    const questions = new Map();
+    for (const { question } of (0, metadata_js_1.flattenQuestions)(definition.questions)) {
+        if (question.questionType !== 'lookup')
+            continue;
+        const prior = questions.get(question.questionId);
+        if (prior && JSON.stringify(prior) !== JSON.stringify(question))
+            throw new errors_js_1.ValidationError('ambiguous write-label question');
+        questions.set(question.questionId, structuredClone(question));
+    }
+    const labels = new Map();
+    const identity = (questionId, optionId) => JSON.stringify([questionId, optionId]);
+    const visit = (value, depth = 0) => {
+        if (depth > 40)
+            throw new errors_js_1.ValidationError('write-label observation exceeds nesting limit');
+        if (Array.isArray(value)) {
+            for (const child of value)
+                visit(child, depth + 1);
+            return;
+        }
+        if (!(0, validation_js_1.isRecord)(value))
+            return;
+        if (value.question_type === 'lookup' && typeof value.question_id === 'number') {
+            const question = questions.get(value.question_id);
+            if (question) {
+                if (value.virt_field_name !== question.fieldName)
+                    throw new errors_js_1.ValidationError('write-label question identity mismatch');
+                const raw = value.answer_value;
+                const id = typeof raw === 'number' ? raw : typeof raw === 'string' && /^\d+$/.test(raw) ? Number(raw) : null;
+                if (id !== null && Number.isSafeInteger(id) && typeof value.answer_value_text === 'string' && value.answer_value_text.trim()) {
+                    const options = question.options.filter(option => option.id === id);
+                    if (options.length !== 1)
+                        throw new errors_js_1.ValidationError('write-label option identity mismatch', [question.fieldName ?? String(question.questionId)]);
+                    const key = identity(question.questionId, id), prior = labels.get(key);
+                    if (prior !== undefined && prior !== value.answer_value_text)
+                        throw new errors_js_1.ValidationError('conflicting write-label observations', [question.fieldName ?? String(question.questionId)]);
+                    labels.set(key, value.answer_value_text);
+                }
+            }
+        }
+        // Traverse known response/assessment containers only. Do not interpret arbitrary strings as data.
+        for (const key of ['value', 'values', 'sub_assessment_question_list', 'sub_assessment_answer_list', 'sub_assessment_list'])
+            if (value[key] !== undefined)
+                visit(value[key], depth + 1);
+    };
+    for (const observation of observations) {
+        if (observation.tenant !== definition.tenant)
+            throw new errors_js_1.ValidationError('write-label observation tenant mismatch');
+        visit(observation.response);
+    }
+    const sameOption = (a, b) => a.id === b.id && a.picklistId === b.picklistId && a.code === b.code && a.picklistCode === b.picklistCode && a.name === b.name && a.hudVisibility === b.hudVisibility;
+    const resolver = (question, option) => {
+        const known = questions.get(question.questionId);
+        if (!known || known.fieldName !== question.fieldName || question.questionType !== 'lookup' || !known.options.some(o => sameOption(o, option)))
+            return undefined;
+        return labels.get(identity(question.questionId, option.id));
+    };
+    return Object.freeze(Object.assign(resolver, { tenant: definition.tenant }));
+}
+//# sourceMappingURL=write-labels.js.map

package/dist/cjs/write-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-labels.js","sourceRoot":"","sources":["../../src/write-labels.ts"],"names":[],"mappings":";;AAWA,4EA8CC;AAxDD,+CAA+C;AAE/C,2CAA4C;AAC5C,mDAAyC;AAKzC;2FAC2F;AAC3F,SAAgB,gCAAgC,CAC/C,UAA+B,EAC/B,YAA6C;IAE7C,MAAM,SAAS,GAAC,IAAI,GAAG,EAA6B,CAAC;IACrD,KAAI,MAAM,EAAC,QAAQ,EAAC,IAAI,IAAA,8BAAgB,EAAC,UAAU,CAAC,SAAS,CAAC,EAAC,CAAC;QAC/D,IAAG,QAAQ,CAAC,YAAY,KAAG,QAAQ;YAAC,SAAS;QAC7C,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAG,KAAK,IAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAC,MAAM,IAAI,2BAAe,CAAC,gCAAgC,CAAC,CAAC;QACvH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAC,IAAI,GAAG,EAAiB,CAAC;IACtC,MAAM,QAAQ,GAAC,CAAC,UAAiB,EAAC,QAAe,EAAC,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAC,CAAC,KAAa,EAAC,KAAK,GAAC,CAAC,EAAM,EAAE;QACzC,IAAG,KAAK,GAAC,EAAE;YAAC,MAAM,IAAI,2BAAe,CAAC,+CAA+C,CAAC,CAAC;QACvF,IAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC;YAAA,KAAI,MAAM,KAAK,IAAI,KAAK;gBAAC,KAAK,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAC/E,IAAG,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;YAAC,OAAO;QAC3B,IAAG,KAAK,CAAC,aAAa,KAAG,QAAQ,IAAE,OAAO,KAAK,CAAC,WAAW,KAAG,QAAQ,EAAC,CAAC;YACvE,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChD,IAAG,QAAQ,EAAC,CAAC;gBACZ,IAAG,KAAK,CAAC,eAAe,KAAG,QAAQ,CAAC,SAAS;oBAAC,MAAM,IAAI,2BAAe,CAAC,wCAAwC,CAAC,CAAC;gBAClH,MAAM,GAAG,GAAC,KAAK,CAAC,YAAY,CAAC;gBAC7B,MAAM,EAAE,GAAC,OAAO,GAAG,KAAG,QAAQ,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,OAAO,GAAG,KAAG,QAAQ,IAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;gBAC7F,IAAG,EAAE,KAAG,IAAI,IAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,IAAE,OAAO,KAAK,CAAC,iBAAiB,KAAG,QAAQ,IAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAC,CAAC;oBAClH,MAAM,OAAO,GAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,EAAE,KAAG,EAAE,CAAC,CAAC;oBAC9D,IAAG,OAAO,CAAC,MAAM,KAAG,CAAC;wBAAC,MAAM,IAAI,2BAAe,CAAC,sCAAsC,EAAC,CAAC,QAAQ,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1I,MAAM,GAAG,GAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAC,EAAE,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACjE,IAAG,KAAK,KAAG,SAAS,IAAE,KAAK,KAAG,KAAK,CAAC,iBAAiB;wBAAC,MAAM,IAAI,2BAAe,CAAC,sCAAsC,EAAC,CAAC,QAAQ,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1K,MAAM,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACzC,CAAC;YACF,CAAC;QACF,CAAC;QACD,kGAAkG;QAClG,KAAI,MAAM,GAAG,IAAI,CAAC,OAAO,EAAC,QAAQ,EAAC,8BAA8B,EAAC,4BAA4B,EAAC,qBAAqB,CAAC;YAAC,IAAG,KAAK,CAAC,GAAG,CAAC,KAAG,SAAS;gBAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;IAC3K,CAAC,CAAC;IACF,KAAI,MAAM,WAAW,IAAI,YAAY,EAAC,CAAC;QACtC,IAAG,WAAW,CAAC,MAAM,KAAG,UAAU,CAAC,MAAM;YAAC,MAAM,IAAI,2BAAe,CAAC,yCAAyC,CAAC,CAAC;QAC/G,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAC,CAAC,CAAgB,EAAC,CAAgB,EAAC,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,YAAY,KAAG,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,CAAC;IACrM,MAAM,QAAQ,GAAC,CAAC,QAA2B,EAAC,MAAqB,EAAC,EAAE;QACnE,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,SAAS,KAAG,QAAQ,CAAC,SAAS,IAAE,QAAQ,CAAC,YAAY,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,UAAU,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QACjJ,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;AAC1E,CAAC","sourcesContent":["import type {AssessmentDefinition,PicklistOption,QuestionDefinition} from './metadata.js';\nimport {flattenQuestions} from './metadata.js';\nimport type {EncodingOptions} from './encoding.js';\nimport {ValidationError} from './errors.js';\nimport {isRecord} from './validation.js';\n\nexport interface WriteLabelObservation {tenant:string;response:unknown;}\nexport type ReadBackWriteLabelResolver = NonNullable<EncodingOptions['writeLabel']> & {readonly tenant:string};\n\n/** Builds labels only from exact readback evidence. It never infers HUD suffixes.\n * Unobserved or changed options return undefined, so the standard encoder refuses them. */\nexport function createReadBackWriteLabelResolver(\n definition:AssessmentDefinition,\n observations:readonly WriteLabelObservation[],\n):ReadBackWriteLabelResolver{\n const questions=new Map<number,QuestionDefinition>();\n for(const {question} of flattenQuestions(definition.questions)){\n  if(question.questionType!=='lookup')continue;\n  const prior=questions.get(question.questionId);\n  if(prior&&JSON.stringify(prior)!==JSON.stringify(question))throw new ValidationError('ambiguous write-label question');\n  questions.set(question.questionId,structuredClone(question));\n }\n const labels=new Map<string,string>();\n const identity=(questionId:number,optionId:number)=>JSON.stringify([questionId,optionId]);\n const visit=(value:unknown,depth=0):void=>{\n  if(depth>40)throw new ValidationError('write-label observation exceeds nesting limit');\n  if(Array.isArray(value)){for(const child of value)visit(child,depth+1);return;}\n  if(!isRecord(value))return;\n  if(value.question_type==='lookup'&&typeof value.question_id==='number'){\n   const question=questions.get(value.question_id);\n   if(question){\n    if(value.virt_field_name!==question.fieldName)throw new ValidationError('write-label question identity mismatch');\n    const raw=value.answer_value;\n    const id=typeof raw==='number'?raw:typeof raw==='string'&&/^\\d+$/.test(raw)?Number(raw):null;\n    if(id!==null&&Number.isSafeInteger(id)&&typeof value.answer_value_text==='string'&&value.answer_value_text.trim()){\n     const options=question.options.filter(option=>option.id===id);\n     if(options.length!==1)throw new ValidationError('write-label option identity mismatch',[question.fieldName??String(question.questionId)]);\n     const key=identity(question.questionId,id),prior=labels.get(key);\n     if(prior!==undefined&&prior!==value.answer_value_text)throw new ValidationError('conflicting write-label observations',[question.fieldName??String(question.questionId)]);\n     labels.set(key,value.answer_value_text);\n    }\n   }\n  }\n  // Traverse known response/assessment containers only. Do not interpret arbitrary strings as data.\n  for(const key of ['value','values','sub_assessment_question_list','sub_assessment_answer_list','sub_assessment_list'])if(value[key]!==undefined)visit(value[key],depth+1);\n };\n for(const observation of observations){\n  if(observation.tenant!==definition.tenant)throw new ValidationError('write-label observation tenant mismatch');\n  visit(observation.response);\n }\n const sameOption=(a:PicklistOption,b:PicklistOption)=>a.id===b.id&&a.picklistId===b.picklistId&&a.code===b.code&&a.picklistCode===b.picklistCode&&a.name===b.name&&a.hudVisibility===b.hudVisibility;\n const resolver=(question:QuestionDefinition,option:PicklistOption)=>{\n  const known=questions.get(question.questionId);\n  if(!known||known.fieldName!==question.fieldName||question.questionType!=='lookup'||!known.options.some(o=>sameOption(o,option)))return undefined;\n  return labels.get(identity(question.questionId,option.id));\n };\n return Object.freeze(Object.assign(resolver,{tenant:definition.tenant}));\n}\n"]}

package/dist/esm/mobile-preflight.d.ts

@@ -0,0 +1,19 @@
+import type { WellSkyClient } from './generated/v3.js';
+import { ValidationError } from './errors.js';
+type RawMobileWrite = Parameters<WellSkyClient['assessmentsMobile']['addAnswer']>[0];
+export type CheckedMobileWriteOptions = Omit<RawMobileWrite, 'query'> & {
+    query: {
+        dateEffective: string;
+    };
+};
+export type MobilePreflightCode = 'MOBILE_PREFLIGHT_INPUT_INVALID' | 'MOBILE_PREFLIGHT_READ_FAILED' | 'MOBILE_PREFLIGHT_UNAVAILABLE' | 'MOBILE_ANSWER_EXISTS' | 'MOBILE_PREFLIGHT_CANCELLED';
+export declare class MobileAnswerPreflightError extends ValidationError {
+    readonly code: MobilePreflightCode;
+    readonly committed = false;
+    constructor(code: MobilePreflightCode, fields?: readonly string[], cause?: unknown);
+}
+/** Read-before-write protection for scalar inserts, including questions shared by instruments.
+ * Does not journal, retry writes, or make the read/write pair atomic. */
+export declare function writeMobileAnswersChecked(api: Pick<WellSkyClient, 'assessments' | 'assessmentsMobile'>, options: CheckedMobileWriteOptions): ReturnType<WellSkyClient['assessmentsMobile']['addAnswer']>;
+export {};
+//# sourceMappingURL=mobile-preflight.d.ts.map

package/dist/esm/mobile-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-preflight.d.ts","sourceRoot":"","sources":["../../src/mobile-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAY,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAK5C,KAAK,cAAc,GAAG,UAAU,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,cAAc,EAAC,OAAO,CAAC,GAAG;IAAC,KAAK,EAAC;QAAC,aAAa,EAAC,MAAM,CAAA;KAAC,CAAA;CAAC,CAAC;AACtG,MAAM,MAAM,mBAAmB,GAAG,gCAAgC,GAAC,8BAA8B,GAAC,8BAA8B,GAAC,sBAAsB,GAAC,4BAA4B,CAAC;AACrL,qBAAa,0BAA2B,SAAQ,eAAe;IAElD,QAAQ,CAAC,IAAI,EAAC,mBAAmB;IAD7C,QAAQ,CAAC,SAAS,SAAO;gBACJ,IAAI,EAAC,mBAAmB,EAAC,MAAM,GAAC,SAAS,MAAM,EAAK,EAAC,KAAK,CAAC,EAAC,OAAO;CAIxF;AAED;yEACyE;AACzE,wBAAsB,yBAAyB,CAC9C,GAAG,EAAC,IAAI,CAAC,aAAa,EAAC,aAAa,GAAC,mBAAmB,CAAC,EACzD,OAAO,EAAC,yBAAyB,GAChC,UAAU,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,CAAC,CAkC5D"}

package/dist/esm/mobile-preflight.js

@@ -0,0 +1,70 @@
+import { ValidationError } from './errors.js';
+import { parseRestInstant } from './encoding.js';
+import { toItems } from './runtime.js';
+import { isRecord } from './validation.js';
+export class MobileAnswerPreflightError extends ValidationError {
+    code;
+    committed = false;
+    constructor(code, fields = [], cause) {
+        super('mobile assessment preflight', fields);
+        this.code = code;
+        this.name = 'MobileAnswerPreflightError';
+        if (cause !== undefined)
+            Object.defineProperty(this, 'cause', { value: cause, enumerable: false });
+    }
+}
+/** Read-before-write protection for scalar inserts, including questions shared by instruments.
+ * Does not journal, retry writes, or make the read/write pair atomic. */
+export async function writeMobileAnswersChecked(api, options) {
+    function fail(code, fields = [], cause) { throw new MobileAnswerPreflightError(code, fields, cause); }
+    const checkSignal = () => { if (options.signal?.aborted)
+        fail('MOBILE_PREFLIGHT_CANCELLED', [], options.signal.reason); };
+    if (!options?.path || !Number.isSafeInteger(options.path.clientId) || options.path.clientId <= 0 || typeof options.path.assessmentCode !== 'string' || !options.path.assessmentCode.trim() || !Array.isArray(options.body) || !options.body.length || typeof options.query?.dateEffective !== 'string')
+        fail('MOBILE_PREFLIGHT_INPUT_INVALID');
+    const instant = options.query.dateEffective;
+    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.000)?(?:Z|[+-]\d{2}:\d{2})$/.test(instant) || !Number.isFinite(parseRestInstant(instant)) || new Date(instant.slice(0, 19) + 'Z').toISOString().slice(0, 19) !== instant.slice(0, 19))
+        fail('MOBILE_PREFLIGHT_INPUT_INVALID', ['dateEffective']);
+    checkSignal();
+    const captured = { ...options, path: { ...options.path }, query: { ...options.query }, body: structuredClone(options.body) };
+    const scalars = [], seen = new Set(), ids = new Set();
+    for (const q of captured.body) {
+        if (!isRecord(q) || typeof q.question_type !== 'string' || typeof q.virt_field_name !== 'string' || !q.virt_field_name || typeof q.question_id !== 'number' || !Number.isSafeInteger(q.question_id) || q.question_id <= 0 || seen.has(q.virt_field_name) || ids.has(q.question_id))
+            fail('MOBILE_PREFLIGHT_INPUT_INVALID');
+        seen.add(q.virt_field_name);
+        ids.add(q.question_id);
+        if (q.question_type !== 'sub_assessment')
+            scalars.push({ id: q.question_id, field: q.virt_field_name, type: q.question_type });
+    }
+    if (scalars.length) {
+        let response;
+        try {
+            response = await api.assessments.get({ path: captured.path, query: { dateEffective: new Date(parseRestInstant(instant) + 1000).toISOString() }, ...(options.signal ? { signal: options.signal } : {}), ...(options.timeoutMs === undefined ? {} : { timeoutMs: options.timeoutMs }), ...(options.correlationId === undefined ? {} : { correlationId: options.correlationId }) });
+        }
+        catch (cause) {
+            fail('MOBILE_PREFLIGHT_READ_FAILED', scalars.map(q => q.field), cause);
+        }
+        const rows = toItems(response), conflicts = [];
+        for (const q of scalars) {
+            const found = rows.filter(r => r.virt_field_name === q.field);
+            if (found.length !== 1 || found[0]?.question_id !== q.id || found[0]?.question_type !== q.type)
+                fail('MOBILE_PREFLIGHT_UNAVAILABLE', [q.field]);
+            const row = found[0];
+            if (!row)
+                fail('MOBILE_PREFLIGHT_UNAVAILABLE', [q.field]);
+            if (row.date_effective !== null && row.date_effective !== undefined && row.date_effective !== '') {
+                const recorded = parseRestInstant(row.date_effective);
+                if (!Number.isFinite(recorded) || recorded > parseRestInstant(instant))
+                    fail('MOBILE_PREFLIGHT_UNAVAILABLE', [q.field]);
+                if (recorded === parseRestInstant(instant))
+                    conflicts.push(q.field);
+            }
+            else if (row.answer_value !== null && row.answer_value !== undefined && row.answer_value !== '')
+                fail('MOBILE_PREFLIGHT_UNAVAILABLE', [q.field]);
+        }
+        if (conflicts.length)
+            fail('MOBILE_ANSWER_EXISTS', conflicts);
+    }
+    checkSignal();
+    return api.assessmentsMobile.addAnswer(captured);
+}
+//# sourceMappingURL=mobile-preflight.js.map

package/dist/esm/mobile-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mobile-preflight.js","sourceRoot":"","sources":["../../src/mobile-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,gBAAgB,EAAC,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAC,OAAO,EAAC,MAAM,cAAc,CAAC;AACrC,OAAO,EAAC,QAAQ,EAAC,MAAM,iBAAiB,CAAC;AAKzC,MAAM,OAAO,0BAA2B,SAAQ,eAAe;IAEzC;IADZ,SAAS,GAAC,KAAK,CAAC;IACzB,YAAqB,IAAwB,EAAC,SAAyB,EAAE,EAAC,KAAc;QACvF,KAAK,CAAC,6BAA6B,EAAC,MAAM,CAAC,CAAC;QADxB,SAAI,GAAJ,IAAI,CAAoB;QACA,IAAI,CAAC,IAAI,GAAC,4BAA4B,CAAC;QACnF,IAAG,KAAK,KAAG,SAAS;YAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAC,OAAO,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,UAAU,EAAC,KAAK,EAAC,CAAC,CAAC;IACzF,CAAC;CACD;AAED;yEACyE;AACzE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,GAAyD,EACzD,OAAiC;IAEjC,SAAS,IAAI,CAAC,IAAwB,EAAC,SAAyB,EAAE,EAAC,KAAc,IAAQ,MAAM,IAAI,0BAA0B,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,CAAC,CAAC,CAAA,CAAC;IAClJ,MAAM,WAAW,GAAC,GAAE,EAAE,GAAC,IAAG,OAAO,CAAC,MAAM,EAAE,OAAO;QAAC,IAAI,CAAC,4BAA4B,EAAC,EAAE,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAC;IAChH,IAAG,CAAC,OAAO,EAAE,IAAI,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAE,CAAC,IAAE,OAAO,OAAO,CAAC,IAAI,CAAC,cAAc,KAAG,QAAQ,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAE,OAAO,OAAO,CAAC,KAAK,EAAE,aAAa,KAAG,QAAQ;QAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACzT,MAAM,OAAO,GAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;IAC1C,IAAG,CAAC,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,GAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,KAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC;QAAC,IAAI,CAAC,gCAAgC,EAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAClR,WAAW,EAAE,CAAC;IACd,MAAM,QAAQ,GAAC,EAAC,GAAG,OAAO,EAAC,IAAI,EAAC,EAAC,GAAG,OAAO,CAAC,IAAI,EAAC,EAAC,KAAK,EAAC,EAAC,GAAG,OAAO,CAAC,KAAK,EAAC,EAAC,IAAI,EAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,CAAC;IAC/G,MAAM,OAAO,GAA6C,EAAE,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,EAAC,GAAG,GAAC,IAAI,GAAG,EAAU,CAAC;IAC1G,KAAI,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAC,CAAC;QAC7B,IAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAE,OAAO,CAAC,CAAC,aAAa,KAAG,QAAQ,IAAE,OAAO,CAAC,CAAC,eAAe,KAAG,QAAQ,IAAE,CAAC,CAAC,CAAC,eAAe,IAAE,OAAO,CAAC,CAAC,WAAW,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAE,CAAC,CAAC,WAAW,IAAE,CAAC,IAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;YAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACjS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAAA,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACnD,IAAG,CAAC,CAAC,aAAa,KAAG,gBAAgB;YAAC,OAAO,CAAC,IAAI,CAAC,EAAC,EAAE,EAAC,CAAC,CAAC,WAAW,EAAC,KAAK,EAAC,CAAC,CAAC,eAAe,EAAC,IAAI,EAAC,CAAC,CAAC,aAAa,EAAC,CAAC,CAAC;IACrH,CAAC;IACD,IAAG,OAAO,CAAC,MAAM,EAAC,CAAC;QAClB,IAAI,QAAiE,CAAC;QACtE,IAAG,CAAC;YAAA,QAAQ,GAAC,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,EAAC,KAAK,EAAC,EAAC,aAAa,EAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA,CAAC,CAAA,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,OAAO,CAAC,aAAa,EAAC,CAAC,EAAC,CAAC,CAAC;QAAA,CAAC;QAC9U,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,CAAC,8BAA8B,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QACjF,MAAM,IAAI,GAAC,OAAO,CAAqE,QAAQ,CAAC,EAAC,SAAS,GAAU,EAAE,CAAC;QACvH,KAAI,MAAM,CAAC,IAAI,OAAO,EAAC,CAAC;YACvB,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,eAAe,KAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YACxD,IAAG,KAAK,CAAC,MAAM,KAAG,CAAC,IAAE,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,KAAG,CAAC,CAAC,EAAE,IAAE,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,KAAG,CAAC,CAAC,IAAI;gBAAC,IAAI,CAAC,8BAA8B,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACnI,MAAM,GAAG,GAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,IAAG,CAAC,GAAG;gBAAC,IAAI,CAAC,8BAA8B,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAG,GAAG,CAAC,cAAc,KAAG,IAAI,IAAE,GAAG,CAAC,cAAc,KAAG,SAAS,IAAE,GAAG,CAAC,cAAc,KAAG,EAAE,EAAC,CAAC;gBACtF,MAAM,QAAQ,GAAC,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACpD,IAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAE,QAAQ,GAAC,gBAAgB,CAAC,OAAO,CAAC;oBAAC,IAAI,CAAC,8BAA8B,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjH,IAAG,QAAQ,KAAG,gBAAgB,CAAC,OAAO,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;iBAAK,IAAG,GAAG,CAAC,YAAY,KAAG,IAAI,IAAE,GAAG,CAAC,YAAY,KAAG,SAAS,IAAE,GAAG,CAAC,YAAY,KAAG,EAAE;gBAAC,IAAI,CAAC,8BAA8B,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtI,CAAC;QACD,IAAG,SAAS,CAAC,MAAM;YAAC,IAAI,CAAC,sBAAsB,EAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IACD,WAAW,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC","sourcesContent":["import type {WellSkyClient,Operations} from './generated/v3.js';\nimport {ValidationError} from './errors.js';\nimport {parseRestInstant} from './encoding.js';\nimport {toItems} from './runtime.js';\nimport {isRecord} from './validation.js';\n\ntype RawMobileWrite = Parameters<WellSkyClient['assessmentsMobile']['addAnswer']>[0];\nexport type CheckedMobileWriteOptions = Omit<RawMobileWrite,'query'> & {query:{dateEffective:string}};\nexport type MobilePreflightCode = 'MOBILE_PREFLIGHT_INPUT_INVALID'|'MOBILE_PREFLIGHT_READ_FAILED'|'MOBILE_PREFLIGHT_UNAVAILABLE'|'MOBILE_ANSWER_EXISTS'|'MOBILE_PREFLIGHT_CANCELLED';\nexport class MobileAnswerPreflightError extends ValidationError {\n readonly committed=false;\n constructor(readonly code:MobilePreflightCode,fields:readonly string[]=[],cause?:unknown){\n  super('mobile assessment preflight',fields);this.name='MobileAnswerPreflightError';\n  if(cause!==undefined)Object.defineProperty(this,'cause',{value:cause,enumerable:false});\n }\n}\n\n/** Read-before-write protection for scalar inserts, including questions shared by instruments.\n * Does not journal, retry writes, or make the read/write pair atomic. */\nexport async function writeMobileAnswersChecked(\n api:Pick<WellSkyClient,'assessments'|'assessmentsMobile'>,\n options:CheckedMobileWriteOptions,\n):ReturnType<WellSkyClient['assessmentsMobile']['addAnswer']>{\n function fail(code:MobilePreflightCode,fields:readonly string[]=[],cause?:unknown):never{throw new MobileAnswerPreflightError(code,fields,cause);}\n const checkSignal=()=>{if(options.signal?.aborted)fail('MOBILE_PREFLIGHT_CANCELLED',[],options.signal.reason);};\n if(!options?.path||!Number.isSafeInteger(options.path.clientId)||options.path.clientId<=0||typeof options.path.assessmentCode!=='string'||!options.path.assessmentCode.trim()||!Array.isArray(options.body)||!options.body.length||typeof options.query?.dateEffective!=='string')fail('MOBILE_PREFLIGHT_INPUT_INVALID');\n const instant=options.query.dateEffective;\n if(!/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.000)?(?:Z|[+-]\\d{2}:\\d{2})$/.test(instant)||!Number.isFinite(parseRestInstant(instant))||new Date(instant.slice(0,19)+'Z').toISOString().slice(0,19)!==instant.slice(0,19))fail('MOBILE_PREFLIGHT_INPUT_INVALID',['dateEffective']);\n checkSignal();\n const captured={...options,path:{...options.path},query:{...options.query},body:structuredClone(options.body)};\n const scalars:Array<{id:number;field:string;type:string}>=[],seen=new Set<string>(),ids=new Set<number>();\n for(const q of captured.body){\n  if(!isRecord(q)||typeof q.question_type!=='string'||typeof q.virt_field_name!=='string'||!q.virt_field_name||typeof q.question_id!=='number'||!Number.isSafeInteger(q.question_id)||q.question_id<=0||seen.has(q.virt_field_name)||ids.has(q.question_id))fail('MOBILE_PREFLIGHT_INPUT_INVALID');\n  seen.add(q.virt_field_name);ids.add(q.question_id);\n  if(q.question_type!=='sub_assessment')scalars.push({id:q.question_id,field:q.virt_field_name,type:q.question_type});\n }\n if(scalars.length){\n  let response:Awaited<ReturnType<WellSkyClient['assessments']['get']>>;\n  try{response=await api.assessments.get({path:captured.path,query:{dateEffective:new Date(parseRestInstant(instant)+1000).toISOString()},...(options.signal?{signal:options.signal}:{}),...(options.timeoutMs===undefined?{}:{timeoutMs:options.timeoutMs}),...(options.correlationId===undefined?{}:{correlationId:options.correlationId})});}\n  catch(cause){fail('MOBILE_PREFLIGHT_READ_FAILED',scalars.map(q=>q.field),cause);}\n  const rows=toItems<Operations['GET /assessments/{clientId}/{assessmentCode}']['item']>(response),conflicts:string[]=[];\n  for(const q of scalars){\n   const found=rows.filter(r=>r.virt_field_name===q.field);\n   if(found.length!==1||found[0]?.question_id!==q.id||found[0]?.question_type!==q.type)fail('MOBILE_PREFLIGHT_UNAVAILABLE',[q.field]);\n   const row=found[0];\n   if(!row)fail('MOBILE_PREFLIGHT_UNAVAILABLE',[q.field]);\n   if(row.date_effective!==null&&row.date_effective!==undefined&&row.date_effective!==''){\n    const recorded=parseRestInstant(row.date_effective);\n    if(!Number.isFinite(recorded)||recorded>parseRestInstant(instant))fail('MOBILE_PREFLIGHT_UNAVAILABLE',[q.field]);\n    if(recorded===parseRestInstant(instant))conflicts.push(q.field);\n   }else if(row.answer_value!==null&&row.answer_value!==undefined&&row.answer_value!=='')fail('MOBILE_PREFLIGHT_UNAVAILABLE',[q.field]);\n  }\n  if(conflicts.length)fail('MOBILE_ANSWER_EXISTS',conflicts);\n }\n checkSignal();\n return api.assessmentsMobile.addAnswer(captured);\n}\n"]}

package/dist/esm/v2.d.ts

@@ -10,4 +10,6 @@ export * from "./subassessments.js";
 export * from "./enrollment-verifications.js";
 export * from "./gwt-enrollments.js";
 export * from "./program-discovery.js";
+export * from "./mobile-preflight.js";
+export * from "./write-labels.js";
 //# sourceMappingURL=v2.d.ts.map

package/dist/esm/v2.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC"}
+{"version":3,"file":"v2.d.ts","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/esm/v2.js

@@ -10,4 +10,6 @@ export * from "./subassessments.js";
 export * from "./enrollment-verifications.js";
 export * from "./gwt-enrollments.js";
 export * from "./program-discovery.js";
+export * from "./mobile-preflight.js";
+export * from "./write-labels.js";
 //# sourceMappingURL=v2.js.map

package/dist/esm/v2.js.map

@@ -1 +1 @@
-{"version":3,"file":"v2.js","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./generated/v2.js\";\nexport * from \"./generated/v2-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\n"]}
+{"version":3,"file":"v2.js","sourceRoot":"","sources":["../../src/v2.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC","sourcesContent":["export * from \"./generated/v2.js\";\nexport * from \"./generated/v2-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\nexport * from \"./mobile-preflight.js\";\nexport * from \"./write-labels.js\";\n"]}

package/dist/esm/v3.d.ts

@@ -10,4 +10,6 @@ export * from "./subassessments.js";
 export * from "./enrollment-verifications.js";
 export * from "./gwt-enrollments.js";
 export * from "./program-discovery.js";
+export * from "./mobile-preflight.js";
+export * from "./write-labels.js";
 //# sourceMappingURL=v3.d.ts.map

package/dist/esm/v3.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v3.d.ts","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC"}
+{"version":3,"file":"v3.d.ts","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/esm/v3.js

@@ -10,4 +10,6 @@ export * from "./subassessments.js";
 export * from "./enrollment-verifications.js";
 export * from "./gwt-enrollments.js";
 export * from "./program-discovery.js";
+export * from "./mobile-preflight.js";
+export * from "./write-labels.js";
 //# sourceMappingURL=v3.js.map

package/dist/esm/v3.js.map

@@ -1 +1 @@
-{"version":3,"file":"v3.js","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./generated/v3.js\";\nexport * from \"./generated/v3-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\n"]}
+{"version":3,"file":"v3.js","sourceRoot":"","sources":["../../src/v3.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,+BAA+B,CAAC;AAE9C,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC","sourcesContent":["export * from \"./generated/v3.js\";\nexport * from \"./generated/v3-models.js\";\nexport * from \"./runtime.js\";\nexport * from \"./metadata.js\";\nexport * from \"./errors.js\";\nexport * from \"./encoding.js\";\nexport * from \"./verification.js\";\nexport * from \"./bulk.js\";\nexport * from \"./subassessments.js\";\nexport * from \"./enrollment-verifications.js\";\n\nexport * from \"./gwt-enrollments.js\";\nexport * from \"./program-discovery.js\";\nexport * from \"./mobile-preflight.js\";\nexport * from \"./write-labels.js\";\n"]}

package/dist/esm/write-labels.d.ts

@@ -0,0 +1,13 @@
+import type { AssessmentDefinition } from './metadata.js';
+import type { EncodingOptions } from './encoding.js';
+export interface WriteLabelObservation {
+    tenant: string;
+    response: unknown;
+}
+export type ReadBackWriteLabelResolver = NonNullable<EncodingOptions['writeLabel']> & {
+    readonly tenant: string;
+};
+/** Builds labels only from exact readback evidence. It never infers HUD suffixes.
+ * Unobserved or changed options return undefined, so the standard encoder refuses them. */
+export declare function createReadBackWriteLabelResolver(definition: AssessmentDefinition, observations: readonly WriteLabelObservation[]): ReadBackWriteLabelResolver;
+//# sourceMappingURL=write-labels.d.ts.map

package/dist/esm/write-labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-labels.d.ts","sourceRoot":"","sources":["../../src/write-labels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,oBAAoB,EAAmC,MAAM,eAAe,CAAC;AAE1F,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAInD,MAAM,WAAW,qBAAqB;IAAE,MAAM,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,OAAO,CAAC;CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,GAAG;IAAC,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;CAAC,CAAC;AAE/G;2FAC2F;AAC3F,wBAAgB,gCAAgC,CAC/C,UAAU,EAAC,oBAAoB,EAC/B,YAAY,EAAC,SAAS,qBAAqB,EAAE,GAC5C,0BAA0B,CA2C3B"}

package/dist/esm/write-labels.js

@@ -0,0 +1,65 @@
+import { flattenQuestions } from './metadata.js';
+import { ValidationError } from './errors.js';
+import { isRecord } from './validation.js';
+/** Builds labels only from exact readback evidence. It never infers HUD suffixes.
+ * Unobserved or changed options return undefined, so the standard encoder refuses them. */
+export function createReadBackWriteLabelResolver(definition, observations) {
+    const questions = new Map();
+    for (const { question } of flattenQuestions(definition.questions)) {
+        if (question.questionType !== 'lookup')
+            continue;
+        const prior = questions.get(question.questionId);
+        if (prior && JSON.stringify(prior) !== JSON.stringify(question))
+            throw new ValidationError('ambiguous write-label question');
+        questions.set(question.questionId, structuredClone(question));
+    }
+    const labels = new Map();
+    const identity = (questionId, optionId) => JSON.stringify([questionId, optionId]);
+    const visit = (value, depth = 0) => {
+        if (depth > 40)
+            throw new ValidationError('write-label observation exceeds nesting limit');
+        if (Array.isArray(value)) {
+            for (const child of value)
+                visit(child, depth + 1);
+            return;
+        }
+        if (!isRecord(value))
+            return;
+        if (value.question_type === 'lookup' && typeof value.question_id === 'number') {
+            const question = questions.get(value.question_id);
+            if (question) {
+                if (value.virt_field_name !== question.fieldName)
+                    throw new ValidationError('write-label question identity mismatch');
+                const raw = value.answer_value;
+                const id = typeof raw === 'number' ? raw : typeof raw === 'string' && /^\d+$/.test(raw) ? Number(raw) : null;
+                if (id !== null && Number.isSafeInteger(id) && typeof value.answer_value_text === 'string' && value.answer_value_text.trim()) {
+                    const options = question.options.filter(option => option.id === id);
+                    if (options.length !== 1)
+                        throw new ValidationError('write-label option identity mismatch', [question.fieldName ?? String(question.questionId)]);
+                    const key = identity(question.questionId, id), prior = labels.get(key);
+                    if (prior !== undefined && prior !== value.answer_value_text)
+                        throw new ValidationError('conflicting write-label observations', [question.fieldName ?? String(question.questionId)]);
+                    labels.set(key, value.answer_value_text);
+                }
+            }
+        }
+        // Traverse known response/assessment containers only. Do not interpret arbitrary strings as data.
+        for (const key of ['value', 'values', 'sub_assessment_question_list', 'sub_assessment_answer_list', 'sub_assessment_list'])
+            if (value[key] !== undefined)
+                visit(value[key], depth + 1);
+    };
+    for (const observation of observations) {
+        if (observation.tenant !== definition.tenant)
+            throw new ValidationError('write-label observation tenant mismatch');
+        visit(observation.response);
+    }
+    const sameOption = (a, b) => a.id === b.id && a.picklistId === b.picklistId && a.code === b.code && a.picklistCode === b.picklistCode && a.name === b.name && a.hudVisibility === b.hudVisibility;
+    const resolver = (question, option) => {
+        const known = questions.get(question.questionId);
+        if (!known || known.fieldName !== question.fieldName || question.questionType !== 'lookup' || !known.options.some(o => sameOption(o, option)))
+            return undefined;
+        return labels.get(identity(question.questionId, option.id));
+    };
+    return Object.freeze(Object.assign(resolver, { tenant: definition.tenant }));
+}
+//# sourceMappingURL=write-labels.js.map

package/dist/esm/write-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-labels.js","sourceRoot":"","sources":["../../src/write-labels.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,gBAAgB,EAAC,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAC,eAAe,EAAC,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAC,QAAQ,EAAC,MAAM,iBAAiB,CAAC;AAKzC;2FAC2F;AAC3F,MAAM,UAAU,gCAAgC,CAC/C,UAA+B,EAC/B,YAA6C;IAE7C,MAAM,SAAS,GAAC,IAAI,GAAG,EAA6B,CAAC;IACrD,KAAI,MAAM,EAAC,QAAQ,EAAC,IAAI,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAC,CAAC;QAC/D,IAAG,QAAQ,CAAC,YAAY,KAAG,QAAQ;YAAC,SAAS;QAC7C,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAG,KAAK,IAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;QACvH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAC,IAAI,GAAG,EAAiB,CAAC;IACtC,MAAM,QAAQ,GAAC,CAAC,UAAiB,EAAC,QAAe,EAAC,EAAE,CAAA,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAC,QAAQ,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAC,CAAC,KAAa,EAAC,KAAK,GAAC,CAAC,EAAM,EAAE;QACzC,IAAG,KAAK,GAAC,EAAE;YAAC,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;QACvF,IAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAC,CAAC;YAAA,KAAI,MAAM,KAAK,IAAI,KAAK;gBAAC,KAAK,CAAC,KAAK,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAC/E,IAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAC,OAAO;QAC3B,IAAG,KAAK,CAAC,aAAa,KAAG,QAAQ,IAAE,OAAO,KAAK,CAAC,WAAW,KAAG,QAAQ,EAAC,CAAC;YACvE,MAAM,QAAQ,GAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChD,IAAG,QAAQ,EAAC,CAAC;gBACZ,IAAG,KAAK,CAAC,eAAe,KAAG,QAAQ,CAAC,SAAS;oBAAC,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;gBAClH,MAAM,GAAG,GAAC,KAAK,CAAC,YAAY,CAAC;gBAC7B,MAAM,EAAE,GAAC,OAAO,GAAG,KAAG,QAAQ,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,OAAO,GAAG,KAAG,QAAQ,IAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,GAAG,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;gBAC7F,IAAG,EAAE,KAAG,IAAI,IAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,IAAE,OAAO,KAAK,CAAC,iBAAiB,KAAG,QAAQ,IAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAC,CAAC;oBAClH,MAAM,OAAO,GAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAA,EAAE,CAAA,MAAM,CAAC,EAAE,KAAG,EAAE,CAAC,CAAC;oBAC9D,IAAG,OAAO,CAAC,MAAM,KAAG,CAAC;wBAAC,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAC,CAAC,QAAQ,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1I,MAAM,GAAG,GAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAC,EAAE,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACjE,IAAG,KAAK,KAAG,SAAS,IAAE,KAAK,KAAG,KAAK,CAAC,iBAAiB;wBAAC,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAC,CAAC,QAAQ,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1K,MAAM,CAAC,GAAG,CAAC,GAAG,EAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACzC,CAAC;YACF,CAAC;QACF,CAAC;QACD,kGAAkG;QAClG,KAAI,MAAM,GAAG,IAAI,CAAC,OAAO,EAAC,QAAQ,EAAC,8BAA8B,EAAC,4BAA4B,EAAC,qBAAqB,CAAC;YAAC,IAAG,KAAK,CAAC,GAAG,CAAC,KAAG,SAAS;gBAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,KAAK,GAAC,CAAC,CAAC,CAAC;IAC3K,CAAC,CAAC;IACF,KAAI,MAAM,WAAW,IAAI,YAAY,EAAC,CAAC;QACtC,IAAG,WAAW,CAAC,MAAM,KAAG,UAAU,CAAC,MAAM;YAAC,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;QAC/G,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAC,CAAC,CAAgB,EAAC,CAAgB,EAAC,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,CAAC,CAAC,EAAE,IAAE,CAAC,CAAC,UAAU,KAAG,CAAC,CAAC,UAAU,IAAE,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,YAAY,KAAG,CAAC,CAAC,YAAY,IAAE,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,CAAC;IACrM,MAAM,QAAQ,GAAC,CAAC,QAA2B,EAAC,MAAqB,EAAC,EAAE;QACnE,MAAM,KAAK,GAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAG,CAAC,KAAK,IAAE,KAAK,CAAC,SAAS,KAAG,QAAQ,CAAC,SAAS,IAAE,QAAQ,CAAC,YAAY,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,UAAU,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QACjJ,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;AAC1E,CAAC","sourcesContent":["import type {AssessmentDefinition,PicklistOption,QuestionDefinition} from './metadata.js';\nimport {flattenQuestions} from './metadata.js';\nimport type {EncodingOptions} from './encoding.js';\nimport {ValidationError} from './errors.js';\nimport {isRecord} from './validation.js';\n\nexport interface WriteLabelObservation {tenant:string;response:unknown;}\nexport type ReadBackWriteLabelResolver = NonNullable<EncodingOptions['writeLabel']> & {readonly tenant:string};\n\n/** Builds labels only from exact readback evidence. It never infers HUD suffixes.\n * Unobserved or changed options return undefined, so the standard encoder refuses them. */\nexport function createReadBackWriteLabelResolver(\n definition:AssessmentDefinition,\n observations:readonly WriteLabelObservation[],\n):ReadBackWriteLabelResolver{\n const questions=new Map<number,QuestionDefinition>();\n for(const {question} of flattenQuestions(definition.questions)){\n  if(question.questionType!=='lookup')continue;\n  const prior=questions.get(question.questionId);\n  if(prior&&JSON.stringify(prior)!==JSON.stringify(question))throw new ValidationError('ambiguous write-label question');\n  questions.set(question.questionId,structuredClone(question));\n }\n const labels=new Map<string,string>();\n const identity=(questionId:number,optionId:number)=>JSON.stringify([questionId,optionId]);\n const visit=(value:unknown,depth=0):void=>{\n  if(depth>40)throw new ValidationError('write-label observation exceeds nesting limit');\n  if(Array.isArray(value)){for(const child of value)visit(child,depth+1);return;}\n  if(!isRecord(value))return;\n  if(value.question_type==='lookup'&&typeof value.question_id==='number'){\n   const question=questions.get(value.question_id);\n   if(question){\n    if(value.virt_field_name!==question.fieldName)throw new ValidationError('write-label question identity mismatch');\n    const raw=value.answer_value;\n    const id=typeof raw==='number'?raw:typeof raw==='string'&&/^\\d+$/.test(raw)?Number(raw):null;\n    if(id!==null&&Number.isSafeInteger(id)&&typeof value.answer_value_text==='string'&&value.answer_value_text.trim()){\n     const options=question.options.filter(option=>option.id===id);\n     if(options.length!==1)throw new ValidationError('write-label option identity mismatch',[question.fieldName??String(question.questionId)]);\n     const key=identity(question.questionId,id),prior=labels.get(key);\n     if(prior!==undefined&&prior!==value.answer_value_text)throw new ValidationError('conflicting write-label observations',[question.fieldName??String(question.questionId)]);\n     labels.set(key,value.answer_value_text);\n    }\n   }\n  }\n  // Traverse known response/assessment containers only. Do not interpret arbitrary strings as data.\n  for(const key of ['value','values','sub_assessment_question_list','sub_assessment_answer_list','sub_assessment_list'])if(value[key]!==undefined)visit(value[key],depth+1);\n };\n for(const observation of observations){\n  if(observation.tenant!==definition.tenant)throw new ValidationError('write-label observation tenant mismatch');\n  visit(observation.response);\n }\n const sameOption=(a:PicklistOption,b:PicklistOption)=>a.id===b.id&&a.picklistId===b.picklistId&&a.code===b.code&&a.picklistCode===b.picklistCode&&a.name===b.name&&a.hudVisibility===b.hudVisibility;\n const resolver=(question:QuestionDefinition,option:PicklistOption)=>{\n  const known=questions.get(question.questionId);\n  if(!known||known.fieldName!==question.fieldName||question.questionType!=='lookup'||!known.options.some(o=>sameOption(o,option)))return undefined;\n  return labels.get(identity(question.questionId,option.id));\n };\n return Object.freeze(Object.assign(resolver,{tenant:definition.tenant}));\n}\n"]}

package/docs/assessments.md

@@ -29,7 +29,23 @@ The default metadata cache TTL is 60 seconds with 100 entries per client. Config
 
 WellSky requires a client context and known assessment code for these reads. There is no documented global assessment-list or standalone picklist-list endpoint. Mobile option metadata has no effective-date filter, so definitions explicitly identify its options as current even when the generic assessment read is dated. Metadata also does not provide a complete questionnaire branching engine.
 
-Use the raw `assessments.get`, `assessmentsMobile.getAnswers`, and `enrollments.getAssessment` methods for recorded answers. Use `encodeAnswers` and `encodeNewSubassessmentRow` for endpoint-specific encoding. Mobile lookups use option IDs; standalone/enrollment lookups require an explicit `writeLabel` resolver with tenant-verified labels. Raw option names are not assumed to be valid write labels. Provider answers are refused for mobile writes because that endpoint can silently discard them. Answer-state code mappings and multi-value serialization are caller-supplied; a refusal is never converted to `No`.
+Use the raw `assessments.get`, `assessmentsMobile.getAnswers`, and `enrollments.getAssessment` methods for recorded answers. Use `encodeAnswers` and `encodeNewSubassessmentRow` for endpoint-specific encoding. Mobile lookups use option IDs; standalone/enrollment lookups require an explicit `writeLabel` resolver with tenant-verified labels. Raw option names are not assumed to be valid write labels. Some HUD-marked choices require `(HUD)` in the full write label even when metadata `name` omits it. Do not infer this from trailing whitespace or append the suffix to every option. Continue supplying tenant-verified labels until a label resolver has authoritative metadata; recorded `answer_value_text` is useful evidence for the corresponding option. Provider answers are refused for mobile writes because that endpoint can silently discard them. Answer-state code mappings and multi-value serialization are caller-supplied; a refusal is never converted to `No`.
+
+## Resolve exact lookup write labels from readback
+
+`createReadBackWriteLabelResolver` preserves the exact `answer_value_text` for an observed question/option pair, including a HUD suffix and whitespace. It does not infer labels from trailing spaces or `hudVisibility`: retained readbacks include suffixed and unsuffixed labels with the same visibility flag.
+
+```ts
+import {createReadBackWriteLabelResolver} from '@choiceapps/communityservices-sdk';
+const writeLabel = createReadBackWriteLabelResolver(definition, [
+  {tenant: api.tenant, response: recordedAnswers},
+]);
+// Supply writeLabel to encodeAnswers or createEnrollmentWorkflow.
+```
+
+Supply authorized assessment reads from the definition's tenant. The helper matches question ID, field name and option ID, rejects conflicting labels and mixed tenants, and returns an immutable resolver tagged with its tenant. The enrollment workflow checks that tenant. The resolver returns `undefined` for unobserved or changed options, so normal encoding refuses them. Refresh the definition and observations after metadata changes.
+
+This is an evidence-backed resolver, not a complete label catalog. Unobserved options still need an authoritative readback or another independently verified resolver. Do not write answers merely to discover labels. See [the typed example](../examples/checked-assessment-writes.mts).
 
 ## Yes/no answer acceptance
 
@@ -48,6 +64,27 @@ Reproduced on November 2, 2026 in a sandbox tenant with synthetic clients:
 
 The enrollment workflow writes yes/no answers through the mobile batch by default. That keeps their stage pending because the saved values never verify. Construct it with `yesNoWrites: 'standard'` and a `writeLabel` resolver to send them through `assessments.create` instead; see [the enrollment workflow](enrollments.md#yesno-answers). It never treats an empty yes/no answer as `No`, skips a requested field, or switches endpoints for a stage that was already attempted. For a minimal reproduction, [enable private error diagnostics](troubleshooting.md#inspect-an-upstream-error-privately) and retain the question's current metadata.
 
+## Shared questions across assessment instruments
+
+An entry assessment and a standalone form can reference the same stored question. Changing `assessmentCode` does not make a second answer at the same client/question/effective instant available for a mobile insert. The integrator reported this for `HPTARGETINGSCORETOTAL` on an entry and form 1002: when the stored value differed, the mobile batch was rejected. Compare question identifiers and effective dates, not only form names.
+
+Read the existing answer before planning a mobile scalar insert. If it already exists at that instant with another value, use a supported standard correction/update path after resolving the original operation; do not move its timestamp to evade the collision. Raw `assessmentsMobile.addAnswer` remains a raw write and performs no implicit read or cross-form collision check. Never switch endpoints to retry an uncertain batch.
+
+Use `writeMobileAnswersChecked(api, request)` for an explicit scalar collision check before a raw mobile batch. It accepts the ordinary mobile request with a required timezone-qualified, whole-second `query.dateEffective`. It reads the supplied instrument one second after that instant so yes/no rows are visible, then matches question identity and effective date. A row at the target instant blocks the entire batch even when its value is identical or empty. Missing, invalid or newer readback evidence also blocks the write. Older answers allow the insert.
+
+```ts
+import {writeMobileAnswersChecked, MobileAnswerPreflightError} from '@choiceapps/communityservices-sdk';
+await writeMobileAnswersChecked(api, {
+  path: {clientId, assessmentCode},
+  query: {dateEffective: originalEffectiveInstant},
+  body: encodedMobileAnswers,
+});
+```
+
+`MobileAnswerPreflightError` has a stable `code`, affected `fields`, and `committed: false`. A collision uses `MOBILE_ANSWER_EXISTS`; unavailable evidence uses `MOBILE_PREFLIGHT_UNAVAILABLE`. The helper checks scalars, including questions shared across instruments, but does not detect duplicate subassessment rows. It makes one write after a successful preflight and does not retry or journal it. An error from that write retains its original type and possible uncertain outcome. Reads and writes are not atomic against other users. Pass the original instant; the SDK transport applies any configured mobile date correction.
+
+New enrollment workflow plans also check scalar collisions before creating an enrollment or sending a mobile batch. Existing pending journal operations retain their reconciliation behavior.
+
 ## Race and ethnicity combinations
 
 `encodeAnswers` recognizes the standard `HUD_RACEETHNICITY` field. It resolves single-category and multiple-category answers to the tenant's `RACE_ETH_COMBO_*` option IDs. A single White answer uses `RACE_ETH_COMBO_WHI`, even when the caller supplies `RACE_ETH_WHI`. Atomic option IDs can read back with a label while appearing blank in the UI.

package/docs/browser-session.md

@@ -97,7 +97,7 @@ On the expired-login form, the helper appends the character to the original `HMI
 
 Use one shared, durable recovery store for every caller of the same UI account. Multi-host deployments must override the default with shared durable storage and locking. Keep using an existing custom recovery store if it has a pending recovery; changing stores does not reconcile it. The per-account lock covers the entire recovery. Its journal contains stages and the append character, never either password. The original must be 8–49 characters when a reset is needed so the temporary password fits the observed 50-character limit. A 50-character password can still log in normally. Keep the original credential and append character unchanged while a recovery is pending. The SDK sanitizes login errors; do not enable Playwright tracing, request-body capture, or debug logging containing credentials.
 
-A saved temporary-password attempt can resume with one authentication check of that temporary password. A saved restoration attempt can resume with one authentication check of the original. Neither uncertain password write is repeated. An interrupted or failed authentication check leaves a blocking journal stage and raises `RECOVERY_UNCERTAIN`; reconcile the account and journal before proceeding. A process crash may also leave the file store's exclusive lock. Do not delete journals or automatically expire locks to force retries. If server policy rejects restoring the original, the helper stops and the temporary password may remain active.
+A saved temporary-password attempt can resume with one authentication check of that temporary password. A saved restoration attempt can resume with one authentication check of the original. Neither uncertain password write is repeated. An interrupted or failed authentication check leaves a blocking journal stage and raises `RECOVERY_UNCERTAIN`; reconcile the account and journal before proceeding. A process crash may also leave the file store's exclusive lock. Do not delete journals or automatically expire locks to force retries. WellSky permits immediately resetting back to the previous password. Password history does not prevent the restore-original step.
 
 Both UI actions use GWT-RPC: the shipped expired-login handler calls `AuthenticationService.changePasswordHeartbeat`, while the user-settings restoration was observed calling `UserService.updateUserPassword` with HTTP 200 / GWT OK. The former uses the limited session established by the expired login. The helper currently drives the live forms to generate fresh requests. A standalone RPC-only password adapter has not been implemented or tested; captured password payloads must not be stored or replayed. See [sandbox findings](capabilities.md).
 

package/docs/capabilities.md

@@ -39,7 +39,7 @@ The generated client covers the pinned V2/V3 Swagger operations. The following f
 | Client Notes, goals, action steps | `createCasePlans` plus raw REST methods | Journaled create/update and supported-field verification; helper supplies clientId on goal updates; unreadable follow-up fields excluded |
 | Goal case notes | `session.workflows.createCaseNote` | Optional source key rejects changed intent and verifies saved note ID; legacy unkeyed matching remains; single client only. REST goal response does not expose these notes |
 | Multi-client/multi-case notes | No packaged bulk helper | Do not infer note participants from unrelated `households` nested in a goal response |
-| Expired UI password | Headless login, enabled by default | Temporary suffix then restore original, durable recovery stages, fresh-login verification; policy rejection may leave temporary password active |
+| Expired UI password | Headless login, enabled by default | Temporary suffix then restore original, durable recovery stages, fresh-login verification; WellSky permits immediate restoration of the previous password |
 | Session expiration | Managed session plus durable workflow journals | Reauthenticate and report interruption; caller retries original intent for reconciliation, not automatic callback replay |
 
 ## Known server gaps
@@ -69,7 +69,7 @@ These observations explain the current contracts. They are dated acceptance resu
 | Household exits and head coverage, October 23, 2026 | An invalid early head exit was blocked before writes. Valid staggered exits and an all-member exit preserved dates, original heads, and selected subgroups; retries made no extra record writes. | Earlier server-accepted orphaned groups were invalid under the current SDK contract. See [head validation feedback](vendor-issues/household-head-validation.md) and [enrollments](enrollments.md). |
 | Attachment identity and content, October 24, 2026 | Profile, Case Plans, and goal files retained their IDs across fresh helpers, and downloaded bytes matched the originals. | Does not establish anonymous access or sharing permissions. REST authentication remained a separate failure. See [files and notes](files-and-notes.md). |
 | SSVF conditional forms, October 23, 2026 | Form inspection checked conditional branches and required-date validation without saving; four REST-supported dependencies were then saved and read back, with zero duplicate writes on same-key retries. | This is a dated rules snapshot, not exhaustive financial assistance or funding-allocation acceptance. See [SSVF rules](../SSVF.md) and [services](services.md). |
-| Expired-password recovery, October 23, 2026 | An expired account completed temporary-password recovery, restored its original password, and authenticated in a fresh context. | Account policy can reject a recovery stage; retain the durable recovery journal. See [browser sessions](browser-session.md). |
+| Expired-password recovery, October 23, 2026 | An expired account completed temporary-password recovery, restored its original password, and authenticated in a fresh context. | WellSky permits immediate restoration of the previous password; retain the durable recovery journal for interrupted operations. See [browser sessions](browser-session.md). |
 
 Independent needs and AIRS/service-type discovery use UI/GWT helpers. See [independent needs](independent-needs.md) for the creation, counted catalog, and retry contracts. The pinned Swagger exposes need reads but no independent-need creation.
 
@@ -86,3 +86,16 @@ The integrator reported these results using SDK 0.4.1 in the training tenant. Th
 - After those household exits, both re-enrollment attempts failed on the pre-create REST list with HTTP 400 from the grouped-enrollment `42703` gap. This confirms that an exited household enrollment can still break that REST list.
 
 The GWT catalog correction has regression coverage for individual creation, household heads and member preflight, failed-read classification and re-enrollment. Same-date entry corrections and adoption of manual enrollments have synthetic coverage. These newer paths have not been independently verified live.
+
+## Integrator-reported SDK 0.6.0 acceptance
+
+The integrator reports these training-tenant results on November 10 and 11, 2026; the SDK team has not independently rerun them:
+
+- GWT `listEnrollments` succeeded for a household client whose REST list returned HTTP 400.
+- Standalone `adoptEnrollment` followed by `createInterim`, and single-person same-day `correctEntry`, succeeded. Same-key repeats made no writes.
+- Three pending 0.5.0 corrections were refused without confirmation and resolved as `rejected` with confirmation.
+- Earlier 0.5.0 runs verified individual/household adoption followed by exit, household re-enrollment after exit, and path corrections in both directions for individuals and households, with no-write same-key repeats.
+
+The integrator has not tested household adoption followed by `createHouseholdInterim`, scalar correction on an adopted enrollment, or a new correction key after resolution. Synthetic tests do not replace that acceptance.
+
+The 0.7.0 label resolver, group flags, household discovery, row registration, error codes and mobile collision preflight have local regression coverage, not new live tenant acceptance. Full write labels remain unresolved for unobserved options. Household discovery refuses ambiguous current-membership matches. Yes/no blanking remains unsupported; no alternative route has been verified.

package/docs/enrollments.md

@@ -148,14 +148,36 @@ const corrected = await workflow.correctEntry({
 });
 ```
 
-`answers` uses the ordinary answer and option selectors. `clear` explicitly removes a recorded value; an omitted field stays unchanged. Clearing a yes/no answer is distinct from answering `No`. Do not use `notApplicable` to clear an old answer. Every row key must identify an existing row returned by the original entry operation. The correction never creates a second row, deletes a row, or changes the enrollment date.
+`answers` uses the ordinary answer and option selectors. `clear` explicitly removes a recorded value; an omitted field stays unchanged. Yes/no fields cannot appear in `clear`: the SDK throws `UNSUPPORTED_YES_NO_CLEAR`, with the affected `fields`, before any correction write or new journal record. Use `{value: false}` to answer `No`; it does not mean blank. No alternative yes/no blanking route has been verified. Do not use `notApplicable` to clear an old answer. Every row key must identify an existing row returned by the original entry operation or explicitly bound with `registerEntryRows`. The correction never creates a second row, deletes a row, or changes the enrollment date.
 
-Scalars use the standard assessment endpoint, which supports same-date updates. The batch includes every mandatory scalar, preserving its current value unless the patch explicitly answers or clears it. Missing mandatory values require an explicit answer or clear; lookup values require verified write labels. Readback checks one second after the original instant so stored yes/no values are visible.
+Scalars use the standard assessment endpoint, which supports same-date updates. The batch includes every mandatory scalar, preserving its current value unless the patch explicitly answers or clears it. Missing mandatory values require an explicit answer, or an explicit clear for a supported non-yes/no type; lookup values require verified write labels. Readback checks one second after the original instant so stored yes/no values are visible.
 
 Row edits send only the changed cells to the existing recordset through the mobile endpoint. Lookup, text, numeric and date cells are supported; provider and yes/no row cells are refused before any write. Untouched cells, all other rows and row IDs must remain unchanged. DOB and household-head changes require their dedicated workflows and cannot be supplied as corrections here. An unmodified mandatory DOB is also refused because the standard batch cannot safely resend it through the DOB helper.
 
 All changes are validated before the first write. Scalar and row batches have separate journal stages, so a partial correction is not rolled back. Retry the same intent and key to reconcile; an uncertain batch is never resent automatically. `getStatus({clientId, key})` reports correction progress. Verified corrections update the original entry's verification expectations, so retrying `createEnrollment` under its old key does not restore the old path. A later correction uses a new correction key. See the [typed example](../examples/entry-correction-workflow.mts).
 
+## Resolve a rejected correction
+
+An attempted correction stays pending until its outcome is established. A 4xx response or an unchanged read alone does not prove non-application, so the SDK does not automatically reset or resend it. New failures expose `code: 'ENTRY_CORRECTION_UNCERTAIN'`, `step`, and an available HTTP `status`. The first failure retains its original `cause`; a failed reconciliation read retains both errors in an `AggregateError`. Only allowlisted failure kind/status are persisted and returned by `getStatus`. Response bodies, messages, credentials and stacks are not written to the journal. Older journals cannot recover diagnostics they never saved.
+
+If independent server or administrative evidence establishes that an attempted correction was not applied, call:
+
+```ts
+await workflow.resolveEntryCorrection({
+  key: failedCorrectionKey,
+  enrollmentKey,
+  clientId,
+  evidenceReference: independentReviewReference,
+  confirmNotApplied: async evidence => rejectionReview.confirmNotApplied(evidence),
+});
+```
+
+`rejectionReview` is application-owned. Its callback must be read-only and confirm non-application from independent evidence; do not implement it as `() => true` or infer its answer only from HTTP status and `matchesBefore`. The callback receives identities, effective date and sanitized step diagnostics. Do not call the same client's workflow methods from the callback: the client journal lock remains held.
+
+The SDK verifies the complete saved pre-write state before and after confirmation and rechecks enrollment context. A partial application, changed state or unavailable read prevents resolution. Successful resolution marks the correction `rejected` while retaining its original intent, attempted steps, diagnostics and evidence reference. It makes no SDK record writes to WellSky. Repeating the same resolution returns `already-rejected`; submitting that correction key again throws `ENTRY_CORRECTION_REJECTED`. Use a new correction key for the corrected intent only after resolution. A verified successful correction cannot be rejected.
+
+This also supports pending 0.5.0 journals, including those without failure metadata, when the required independent evidence exists. For these journals the callback can receive only a step name and state, with no failure kind or status. The caller must retain its own original failure evidence; the SDK cannot reconstruct it and must not resend the write to obtain diagnostics. A new validation failure that occurs before journaling needs no resolution.
+
 ## Household enrollment and interim assessments
 
 Enrollment creation and member preflight use the complete GWT list when the configured `enrollmentSession` supplies `listEnrollments`. The built-in sessions supply it. This avoids the REST `42703` failure for clients with existing household enrollments, including exited enrollments and enrollments in other programs. Reads verify the client, tenant, row identities and count; a failed GWT read never falls back to REST or means an empty list. The current GWT reader refuses lists above 1,000 records. Legacy custom readers without this method retain the counted REST path.
@@ -196,6 +218,22 @@ Client locks coordinate overlapping household and single-client operations. Dura
 
 See the typed [household example](../examples/household-enrollment-workflow.mts) and [live household verification](capabilities.md). The integration uses the configured tenant and uses an isolated authenticated page.
 
+## Public enrollment reads
+
+The managed session exposes a GWT-backed catalog independently of the workflow:
+
+```ts
+const {values: enrollments} =
+  await session.enrollmentSession.listEnrollments({clientId});
+
+const detail = await session.enrollmentSession.readEnrollment({
+  clientId: headClientId, enrollmentId: headEnrollmentId,
+});
+// detail.members contains the complete linked clientId/enrollmentId pairs.
+```
+
+Use the session returned by `openEnrollmentSession`. Lists include open and exited entries, validate complete counts, and refuse more than 1,000 records. List rows and details include `groupId` and `grouped`. The flag describes a stored group link, including a group with one participant; it is not a member count and requires no per-row detail reads. These fields are required on managed catalog rows and optional on custom detail-reader contracts for compatibility. `groupId` is never a household ID. For a verified household match from a head enrollment, use `discoverHouseholdEnrollment` below.
+
 ## Individual enrollment exits
 
 Use `exitEnrollment` to end a standalone person's program enrollment. It requires a verified `createEnrollment` entry in the same durable store. Supply `enrollmentSession: session.enrollmentSession` and `exitUi: createHouseholdExitUi({page: session.page})` when constructing the workflow. The same exit UI port serves individual and household forms.
@@ -226,7 +264,41 @@ Use `adoptEnrollment({key, clientId, enrollmentId})` for a standalone enrollment
 
 Adoption writes only to the local durable journal. It does not create, attach, exit or modify an HMIS record. Later entrants retain their own original entry dates. An enrollment already tracked under another entry key is rejected; use its existing key. Retry an interrupted adoption with the same inputs and store.
 
-After adoption, pass its key as `enrollmentKey` to `exitEnrollment` or `exitHousehold`. Exit assessment plans and normal household head rules still apply. Adoption records existing enrollment identities, not historical subassessment row-key mappings, so its returned `recordsetIds` is empty. It cannot identify rows for `correctEntry` by a new invented key. See [manual-entry exit examples](../examples/existing-enrollment-exits.mts).
+After standalone adoption, its key can be used as `enrollmentKey` for `createInterim`, scalar-only `correctEntry`, or `exitEnrollment`. After household adoption, the group key works with `createHouseholdInterim` and `exitHousehold`; use the returned member's `key` for that person's scalar-only `correctEntry`. Correction still requires an open entry without reviews or exits. Do not use an all-not-applicable `createEnrollment` call merely to link an existing entry: it can create an enrollment when no match exists. Exit assessment plans and normal household head rules still apply. Adoption initially returns empty `recordsetIds`. Use `registerEntryRows` below to bind verified existing recordsets before row corrections; a new invented key alone cannot identify a historical row. See [manual-entry exit examples](../examples/existing-enrollment-exits.mts).
+
+### Discover a household from its head enrollment
+
+```ts
+const discovered = await workflow.discoverHouseholdEnrollment({
+  headClientId, headEnrollmentId,
+});
+// discovered: householdId, householdSource, providerId, type, members
+const adopted = await workflow.adoptHouseholdEnrollment({
+  key: sourceEnrollmentKey, headClientId, headEnrollmentId,
+});
+```
+
+Discovery reads the linked enrollment cohort through GWT and matches it against complete current household membership reads. It requires one household containing the cohort, the same head, and membership dates covering each entry. It verifies that household again before returning `householdSource: 'verified-membership'`. This is a verified membership match, not a native historical household pointer on the enrollment. Zero matches, multiple matches, incomplete reads or changed relationships fail without adopting. Historical households that no longer match require the existing explicit adoption inputs and their validation. No record is written to WellSky during discovery or adoption.
+
+### Register existing entry rows
+
+```ts
+await workflow.registerEntryRows({
+  key: sourceRegistrationKey,
+  enrollmentKey: adoptedEntryKey,
+  clientId,
+  rows: [{key: 'entry-ce', parentField, recordsetId: existingRecordsetId}],
+});
+// correctEntry can now reference key: 'entry-ce' with the same parentField.
+```
+
+Select explicit recordset IDs from authorized assessment reads. Registration verifies the enrollment, question definition, and each row's presence in both entry-time and current reads. It stores immutable key/parent/recordset bindings in the local journal and makes no WellSky record writes. Same-key repeats return `already-present`; duplicate aliases, absent rows, rebinding, and pending operations are refused. Native entry row keys already work without registration. For household adoption, use each returned member's entry `key` and register that member's rows separately. Registration does not establish who originally created a row or make later edits eligible: `correctEntry` still enforces open-entry and no-review rules. See [the typed example](../examples/enrollment-discovery-and-correction.mts).
+
+### Classify workflow failures
+
+`EnrollmentWorkflowError` exposes a stable `code`, `operation`, and `committed`. Classify by code instead of message text. Pre-write validation, discovery and adoption failures report `committed: false`. Any attempted write, relevant prior attempt, or unreadable prior outcome remains `'unknown'`. The marker describes WellSky record writes for that operation, not local journal changes. `cause` preserves the original error where available.
+
+A failed `resolveEntryCorrection` can have `committed: false` because resolution itself writes no WellSky records, while `originalCommitted: 'unknown'` describes the original correction. Never use a resolution error's marker to infer non-application of the original write. See [error codes and recovery](troubleshooting.md#workflow-error-codes).
 
 ## Household exits