@tellescope/schema 1.253.0 → 1.254.0

package/lib/esm/schema.js

@@ -9,8 +9,17 @@ var __assign = (this && this.__assign) || function () {
     };
     return __assign.apply(this, arguments);
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 import { WEBHOOK_MODELS, } from "@tellescope/types-models";
-import { booleanValidator, dateValidator, emailValidator, fieldsValidator, journeysValidator, journeyStatesValidator, phoneValidator, nameValidator, nonNegNumberValidator, nonNegNumberValidatorOptional, mongoIdValidator, mongoIdStringRequired as mongoIdStringValidator, listOfMongoIdStringValidator, preferenceValidator, objectAnyFieldsAnyValuesValidator, stringValidator, stringValidator100, stringValidator105, listOfStringsValidator, emailEncodingValidator, numberToDateValidator, SMSMessageValidator, chatRoomTypeValidator, idStringToDateValidator, subdomainValidator, messageTemplateTypeValidator, stringValidator210, stringValidator250, stringValidator5000, listOfDisplayNameInfo, fileTypeValidator, fileSizeValidator, meetingStatusValidator, listOfAttendeesValidator, meetingInfoValidator, listOfUserIndentitiesValidator, meetingsListValidator, urlValidator, WebhookSubscriptionValidator, attendeeValidator, meetingDisplayInfoValidator, intakePhoneValidator, formResponsesValidator, stringValidator25000, automationActionValidator, automationEventValidator, automatedActionStatusValidator, listOfStringsValidatorEmptyOk, listOfChatAttachmentsValidator, listOfCalendarEventRemindersValidator, messageTemplateModeValidator, listOfAutomationConditionsValidator, chatRoomUserInfoValidator, CUDStringValidator, listOfRelatedRecordsValidator, cancelConditionsValidator, notificationPreferencesValidator, userPortalSettingsValidator, FHIRObservationCategoryValidator, FHIRObservationStatusCodeValidator, FHIRObservationValueValidator, userIdentityValidator, formFieldTypeValidator, previousFormFieldsValidator, numberValidator, organizationThemeValidator, managedContentRecordTypeValidator, passwordValidator, flowchartUIValidator, integrationAuthenticationsValidator, listOfMongoIdStringValidatorEmptyOk, formFieldOptionsValidator, blocksValidator, sessionTypeValidator, portalSettingsValidator, emailValidatorEmptyOkay, phoneValidatorOptional, stringValidator1000, databaseFieldsValidator, databaseRecordValuesValidator, automationEventsValidator, portalBlocksValidator, enduserFormResponsesForEventValidator, enduserTasksForEventValidator, stateCredentialsValidator, stateValidator, weeklyAvailabilitiesValidator, calendarEventLimitsValidator, timezoneValidator, formTypeValidator, managedContentRecordAssignmentTypeValidator, listOfGenericAttachmentsValidator, accessPermissionsValidator, organizationLimitsValidator, organizationSettingsValidator, communicationsChannelValidator, genericUnitWithQuantityValidator, stringValidator25000EmptyOkay, slugValidator, stringValidator5000EmptyOkay, loginFlowResultValidator, sharedWithOrganizationIdsValidator, stringValidator1000Optional, tellescopeGenderValidator, appointmentTermsValidator, paymentProcessorValidator, purchaseCreditValueValidator, costValidator, integrationTitleValidator, journeyContextValidator, stringValidator100000, stringValidator100000EmptyOkay, analyticsQueryValidator, dateRangeValidator, calendarEventPortalSettingsValidator, dateOptionalOrEmptyStringValidator, baseAvailabilityBlocksValidator, availabilityEntitiesValidator, indexUpdatesValidator, dateRangeOptionalValidator, booleanValidatorOptional, automationTriggerActionValidator, automationTriggerEventValidator, automatioNTriggerStatusValidator, exactMatchValidator, exactMatchValidatorOptional, listOfMongoIdStringValidatorOptionalOrEmptyOk, linkedAccountAccessValidator, listOfStringsValidatorOptionalOrEmptyOk, stringValidatorOptionalEmptyOkay, analyticsQueryResultsValidator, stringValidatorOptional, addressValidator, superbillPatientInfoValidator, superbillProviderInfoValidator, superbillLineItemsValidator, billingCodeValidatorOptional, analyticsFrameTypeValidator, videoIntegrationTypesValidator, scheduledJourneysValidator, formScoringValidator, embeddingTypeValidator, listValidator, userCallRoutingBehaviorValidator, userUIRestrictionsValidator, userFieldRedactionsValidator, externalChatGPTMessagesValidator, enduserProfileViewBlocksValidator, customDashboardBlocksValidator, intakeDateOfBirthValidator, objectValidator, mongoIdStringRequired, objectAnyFieldsValidator, phoneTreeNodesValidator, phoneTreeEnduserConditionValidator, orValidator, optionalAnyObjectValidator, listValidatorOptionalOrEmptyOk, formCustomizationValidator, aiSummaryConfigurationValidator, buildInFieldsValidator, customEnduserFieldsValidatorOptionalOrEmpty, ticketActionsValidator, formResponseValidator, numberValidatorOptional, languageValidator, relatedRecordValidator, mongoIdStringOptional, tableViewColumnsValidator, formFieldCalloutConditionsValidator, endusersReportQueriesValidator, formResponsesReportQueriesValidator, phoneCallsReportQueriesValidator, listValidatorEmptyOk, phonePlaybackValidatorOptional, ticketSnoozesValidator, listOfStringsWithQualifierValidator, listOfStringsWithQualifierValidatorOptional, stringValidator100000OptionalEmptyOkay, mmsMessagesValidator, groupMMSUserStatesValidator, sortingFieldsValidator, listOfUniqueStringsValidatorEmptyOk, ticketReminderValidator, insuranceOptionalValidator, pharmacyValidator, listOfStringsValidatorUniqueOptionalOrEmptyOkay, diagnosesValidator, stateValidatorOptional, canvasCodingValidator, vitalConfigurationRangesValidator, smartMeterLinesValidator, formFieldFeedbackValidator, phonePlaybackValidator, enduserProfileWebhooksValidator, fieldsSyncValidator, athenaSubscriptionTypeValidator, dateValidatorOptional, listQueryQualifiersValidator, stringValidator5000OptionalEmptyOkay, labeledFieldsValidator, fieldMappingsValidator, analyticsFrameGroupingCategoriesValidator, customDashboardViewValidator, bookingRestrictionsByTemplateValidator, listOfNumbersValidatorUniqueOptionalOrEmptyOkay, enduserDiagnosisValidator, canvasCodingValidatorOptional, calendarEventAttendeesValidator, developHealthDrugsValidator, developHealthDiagnosesValidator, developHealthMockResultValidator, positiveNumberValidator, listOfStringsWithQualifierValidatorOptionalValuesEmptyOkay, recentViewersValidator, stringValidator100000OptionalEmptyOkayEscapeHTML, customPoliciesValidator, stringValidator100EscapeHTML, outOfOfficeBlocksValidator, AIDecisionSourceValidator, AIMessageInputValidator, listOfObjectAnyFieldsAnyValuesValidator, listOfEmailCCsValidator, externalIdNumberValidatorOptional, DEPRECATED_AUTOMATION_TRIGGER_EVENT_TYPES, compoundFilterValidator, } from "@tellescope/validation";
+import { booleanValidator, dateValidator, emailValidator, fieldsValidator, journeysValidator, journeyStatesValidator, phoneValidator, nameValidator, nonNegNumberValidator, nonNegNumberValidatorOptional, mongoIdValidator, mongoIdStringRequired as mongoIdStringValidator, listOfMongoIdStringValidator, preferenceValidator, objectAnyFieldsAnyValuesValidator, stringValidator, stringValidator100, stringValidator105, listOfStringsValidator, emailEncodingValidator, numberToDateValidator, SMSMessageValidator, chatRoomTypeValidator, idStringToDateValidator, subdomainValidator, messageTemplateTypeValidator, stringValidator210, stringValidator250, stringValidator5000, listOfDisplayNameInfo, fileTypeValidator, fileSizeValidator, meetingStatusValidator, listOfAttendeesValidator, listOfVideoCallParticipantEventsValidator, meetingInfoValidator, listOfUserIndentitiesValidator, meetingsListValidator, urlValidator, WebhookSubscriptionValidator, attendeeValidator, meetingDisplayInfoValidator, intakePhoneValidator, formResponsesValidator, stringValidator25000, automationActionValidator, automationEventValidator, automatedActionStatusValidator, listOfStringsValidatorEmptyOk, listOfChatAttachmentsValidator, listOfCalendarEventRemindersValidator, messageTemplateModeValidator, listOfAutomationConditionsValidator, chatRoomUserInfoValidator, CUDStringValidator, listOfRelatedRecordsValidator, cancelConditionsValidator, notificationPreferencesValidator, userPortalSettingsValidator, FHIRObservationCategoryValidator, FHIRObservationStatusCodeValidator, FHIRObservationValueValidator, userIdentityValidator, formFieldTypeValidator, previousFormFieldsValidator, numberValidator, organizationThemeValidator, managedContentRecordTypeValidator, passwordValidator, flowchartUIValidator, integrationAuthenticationsValidator, listOfMongoIdStringValidatorEmptyOk, formFieldOptionsValidator, blocksValidator, sessionTypeValidator, portalSettingsValidator, emailValidatorEmptyOkay, phoneValidatorOptional, stringValidator1000, databaseFieldsValidator, databaseRecordValuesValidator, automationEventsValidator, portalBlocksValidator, enduserFormResponsesForEventValidator, enduserTasksForEventValidator, stateCredentialsValidator, stateValidator, weeklyAvailabilitiesValidator, calendarEventLimitsValidator, timezoneValidator, formTypeValidator, managedContentRecordAssignmentTypeValidator, listOfGenericAttachmentsValidator, accessPermissionsValidator, organizationLimitsValidator, organizationSettingsValidator, communicationsChannelValidator, genericUnitWithQuantityValidator, stringValidator25000EmptyOkay, slugValidator, stringValidator5000EmptyOkay, loginFlowResultValidator, sharedWithOrganizationIdsValidator, stringValidator1000Optional, tellescopeGenderValidator, appointmentTermsValidator, paymentProcessorValidator, purchaseCreditValueValidator, costValidator, integrationTitleValidator, journeyContextValidator, stringValidator100000, stringValidator100000EmptyOkay, analyticsQueryValidator, dateRangeValidator, calendarEventPortalSettingsValidator, dateOptionalOrEmptyStringValidator, baseAvailabilityBlocksValidator, availabilityEntitiesValidator, indexUpdatesValidator, dateRangeOptionalValidator, booleanValidatorOptional, automationTriggerActionValidator, automationTriggerEventValidator, automatioNTriggerStatusValidator, exactMatchValidator, exactMatchValidatorOptional, listOfMongoIdStringValidatorOptionalOrEmptyOk, linkedAccountAccessValidator, listOfStringsValidatorOptionalOrEmptyOk, stringValidatorOptionalEmptyOkay, analyticsQueryResultsValidator, stringValidatorOptional, addressValidator, superbillPatientInfoValidator, superbillProviderInfoValidator, superbillLineItemsValidator, billingCodeValidatorOptional, analyticsFrameTypeValidator, videoIntegrationTypesValidator, scheduledJourneysValidator, formScoringValidator, embeddingTypeValidator, listValidator, userCallRoutingBehaviorValidator, userUIRestrictionsValidator, userFieldRedactionsValidator, portalSchemaRestrictionsValidator, externalChatGPTMessagesValidator, enduserProfileViewBlocksValidator, customDashboardBlocksValidator, intakeDateOfBirthValidator, objectValidator, mongoIdStringRequired, objectAnyFieldsValidator, phoneTreeNodesValidator, phoneTreeEnduserConditionValidator, orValidator, optionalAnyObjectValidator, listValidatorOptionalOrEmptyOk, formCustomizationValidator, aiSummaryConfigurationValidator, buildInFieldsValidator, customEnduserFieldsValidatorOptionalOrEmpty, ticketActionsValidator, formResponseValidator, numberValidatorOptional, languageValidator, relatedRecordValidator, mongoIdStringOptional, tableViewColumnsValidator, formFieldCalloutConditionsValidator, endusersReportQueriesValidator, formResponsesReportQueriesValidator, phoneCallsReportQueriesValidator, listValidatorEmptyOk, phonePlaybackValidatorOptional, ticketSnoozesValidator, listOfStringsWithQualifierValidator, listOfStringsWithQualifierValidatorOptional, stringValidator100000OptionalEmptyOkay, mmsMessagesValidator, groupMMSUserStatesValidator, sortingFieldsValidator, listOfUniqueStringsValidatorEmptyOk, ticketReminderValidator, insuranceOptionalValidator, pharmacyValidator, listOfStringsValidatorUniqueOptionalOrEmptyOkay, diagnosesValidator, stateValidatorOptional, canvasCodingValidator, vitalConfigurationRangesValidator, smartMeterLinesValidator, formFieldFeedbackValidator, phonePlaybackValidator, enduserProfileWebhooksValidator, fieldsSyncValidator, athenaSubscriptionTypeValidator, dateValidatorOptional, listQueryQualifiersValidator, stringValidator5000OptionalEmptyOkay, labeledFieldsValidator, fieldMappingsValidator, analyticsFrameGroupingCategoriesValidator, customDashboardViewValidator, bookingRestrictionsByTemplateValidator, listOfNumbersValidatorUniqueOptionalOrEmptyOkay, enduserDiagnosisValidator, canvasCodingValidatorOptional, calendarEventAttendeesValidator, developHealthDrugsValidator, developHealthDiagnosesValidator, developHealthMockResultValidator, positiveNumberValidator, listOfStringsWithQualifierValidatorOptionalValuesEmptyOkay, recentViewersValidator, stringValidator100000OptionalEmptyOkayEscapeHTML, customPoliciesValidator, stringValidator100EscapeHTML, outOfOfficeBlocksValidator, AIDecisionSourceValidator, AIMessageInputValidator, listOfObjectAnyFieldsAnyValuesValidator, listOfEmailCCsValidator, externalIdNumberValidatorOptional, DEPRECATED_AUTOMATION_TRIGGER_EVENT_TYPES, compoundFilterValidator, } from "@tellescope/validation";
 import { CREATOR_ONLY_ACCESS, DEFAULT_OPERATIONS, PLACEHOLDER_ID, ENDUSER_SESSION_TYPE, USER_SESSION_TYPE, CANDID_TITLE, DEVELOP_HEALTH_TITLE, } from "@tellescope/constants";
 export var get_next_reminder_timestamp_for_ticket = function (_a) {
     var dueDateInMS = _a.dueDateInMS, reminders = _a.reminders, closedAt = _a.closedAt;
@@ -184,9 +193,10 @@ export var schema = build_schema({
             add_to_journey: {}, remove_from_journey: {}, begin_login_flow: {}, set_password: {},
             unsubscribe: {},
         },
-        fields: __assign(__assign({}, BuiltInFields), { recentViewers: { validator: recentViewersValidator }, healthie_dietitian_id: { validator: stringValidator100 }, mergedIds: { validator: listOfMongoIdStringValidatorOptionalOrEmptyOk, readonly: true, redactions: ['enduser'] }, externalId: {
+        fields: __assign(__assign({}, BuiltInFields), { sharedWithOrganizations: __assign(__assign({}, BuiltInFields.sharedWithOrganizations), { enduserUpdatesDisabled: true }), recentViewers: { validator: recentViewersValidator }, healthie_dietitian_id: { validator: stringValidator100, enduserUpdatesDisabled: true }, mergedIds: { validator: listOfMongoIdStringValidatorOptionalOrEmptyOk, readonly: true, redactions: ['enduser'] }, externalId: {
                 validator: stringValidator250,
                 examples: ['addfed3e-ddea-415b-b52b-df820c944dbb'],
+                enduserUpdatesDisabled: true,
             }, email: {
                 validator: emailValidatorEmptyOkay,
                 examples: ['test@tellescope.com'],
@@ -228,6 +238,7 @@ export var schema = build_schema({
             }, journeys: {
                 validator: journeysValidator,
                 redactions: ['enduser'],
+                enduserUpdatesDisabled: true,
                 dependencies: [
                     {
                         dependsOn: ['journeys'],
@@ -244,14 +255,17 @@ export var schema = build_schema({
             }, scheduledJourneys: { validator: scheduledJourneysValidator }, tags: {
                 redactions: ['enduser'],
                 validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay,
+                enduserUpdatesDisabled: true,
             }, accessTags: {
                 redactions: ['enduser'],
                 validator: listOfStringsValidatorEmptyOk,
+                enduserUpdatesDisabled: true,
             }, unredactedTags: {
                 validator: listOfStringsValidatorEmptyOk,
             }, fields: {
                 redactions: ['enduser'],
                 validator: fieldsValidator,
+                enduserUpdatesDisabled: true, // intake forms write fields server-side; direct enduser PATCH is not a supported path
             }, unredactedFields: {
                 validator: fieldsValidator,
             }, preference: {
@@ -260,12 +274,15 @@ export var schema = build_schema({
             }, assignedTo: {
                 redactions: ['enduser'],
                 validator: listOfUniqueStringsValidatorEmptyOk,
+                enduserUpdatesDisabled: true,
             }, primaryAssignee: {
                 validator: mongoIdStringValidator,
                 redactions: ['enduser'],
+                enduserUpdatesDisabled: true,
             }, unread: {
                 redactions: ['enduser'],
                 validator: booleanValidator,
+                enduserUpdatesDisabled: true,
             }, lastActive: {
                 validator: dateValidator,
             }, lastLogout: { validator: dateValidator }, invalidateSessionsBefore: { validator: dateValidator }, termsSigned: { validator: dateValidator }, termsVersion: { validator: stringValidator100 }, lastCommunication: {
@@ -288,12 +305,12 @@ export var schema = build_schema({
                 // ]
             }, 
             // should allow any gender via API but our UI can limit to Tellescope types by default
-            gender: { validator: stringValidator, redactions: ['enduser'] }, genderIdentity: { validator: stringValidator100, redactions: ['enduser'] }, pronouns: { validator: stringValidator100, redactions: ['enduser'] }, height: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] }, weight: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] }, source: { validator: stringValidator1000Optional }, addressLineOne: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, addressLineTwo: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, city: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, state: { validator: stateValidator, redactions: ['enduser'] }, zipCode: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'] }, zipPlusFour: { validator: stringValidator100, redactions: ['enduser'] }, timezone: { validator: timezoneValidator }, humanReadableId: { validator: stringValidator100 }, displayName: { validator: stringValidator250 }, unsubscribedFromPortalChatNotifications: { validator: booleanValidator }, triggeredEvents: { validator: objectAnyFieldsValidator(numberValidator) }, customTypeId: { validator: mongoIdStringValidator }, language: { validator: languageValidator }, relationships: {
+            gender: { validator: stringValidator, redactions: ['enduser'] }, genderIdentity: { validator: stringValidator100, redactions: ['enduser'] }, pronouns: { validator: stringValidator100, redactions: ['enduser'] }, height: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] }, weight: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] }, source: { validator: stringValidator1000Optional, enduserUpdatesDisabled: true }, addressLineOne: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, addressLineTwo: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, city: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] }, state: { validator: stateValidator, redactions: ['enduser'] }, zipCode: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'] }, zipPlusFour: { validator: stringValidator100, redactions: ['enduser'] }, timezone: { validator: timezoneValidator }, humanReadableId: { validator: stringValidator100 }, displayName: { validator: stringValidator250 }, unsubscribedFromPortalChatNotifications: { validator: booleanValidator }, triggeredEvents: { validator: objectAnyFieldsValidator(numberValidator) }, customTypeId: { validator: mongoIdStringValidator, enduserUpdatesDisabled: true }, language: { validator: languageValidator }, relationships: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     id: mongoIdStringRequired,
                     type: stringValidator100,
                 }))
-            }, markedReadAt: { validator: dateOptionalOrEmptyStringValidator }, markedUnreadAt: { validator: dateOptionalOrEmptyStringValidator }, note: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'] }, noteIsFlagged: { validator: booleanValidator }, insurance: { validator: insuranceOptionalValidator, redactions: ['enduser'] }, insuranceSecondary: { validator: insuranceOptionalValidator, redactions: ['enduser'] }, bookingNotes: {
+            }, markedReadAt: { validator: dateOptionalOrEmptyStringValidator }, markedUnreadAt: { validator: dateOptionalOrEmptyStringValidator }, note: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'], enduserUpdatesDisabled: true }, noteIsFlagged: { validator: booleanValidator }, insurance: { validator: insuranceOptionalValidator, redactions: ['enduser'], enduserUpdatesDisabled: true }, insuranceSecondary: { validator: insuranceOptionalValidator, redactions: ['enduser'], enduserUpdatesDisabled: true }, bookingNotes: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     bookingPageId: mongoIdStringRequired,
                     note: stringValidator5000EmptyOkay,
@@ -308,10 +325,11 @@ export var schema = build_schema({
                     archivedAt: dateValidatorOptional,
                 })),
                 redactions: ['enduser'],
-            }, references: { validator: listOfRelatedRecordsValidator, redactions: ['enduser'] }, athenaDepartmentId: { validator: stringValidator100, redactions: ['enduser'] }, athenaPracticeId: { validator: stringValidator100, redactions: ['enduser'] }, salesforceId: { validator: stringValidator100, redactions: ['enduser'] }, vitalTriggersDisabled: { validator: booleanValidator }, defaultFromPhone: { validator: phoneValidator, redactions: ['enduser'] }, defaultFromEmail: { validator: emailValidator, redactions: ['enduser'] }, useDefaultFromEmailInAutomations: { validator: booleanValidator }, useDefaultFromPhoneInAutomations: { validator: booleanValidator }, stripeCustomerId: { validator: stringValidator100, redactions: ['enduser'] }, stripeKey: { validator: stringValidator250, redactions: ['enduser'] }, diagnoses: {
+            }, references: { validator: listOfRelatedRecordsValidator, redactions: ['enduser'], enduserUpdatesDisabled: true }, athenaDepartmentId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true }, athenaPracticeId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true }, salesforceId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true }, vitalTriggersDisabled: { validator: booleanValidator }, defaultFromPhone: { validator: phoneValidator, redactions: ['enduser'] }, defaultFromEmail: { validator: emailValidator, redactions: ['enduser'] }, useDefaultFromEmailInAutomations: { validator: booleanValidator }, useDefaultFromPhoneInAutomations: { validator: booleanValidator }, stripeCustomerId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true }, stripeKey: { validator: stringValidator250, redactions: ['enduser'], enduserUpdatesDisabled: true }, diagnoses: {
                 validator: listValidatorOptionalOrEmptyOk(enduserDiagnosisValidator),
-                redactions: ['enduser']
-            }, unsubscribedFromPhones: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay, redactions: ['enduser'] }, lockedFromPortal: { validator: booleanValidator }, eligibleForAutoMerge: { validator: booleanValidator }, preferredPharmacy: { validator: pharmacyValidator, redactions: ['enduser'] } }),
+                redactions: ['enduser'],
+                enduserUpdatesDisabled: true,
+            }, unsubscribedFromPhones: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay, redactions: ['enduser'] }, lockedFromPortal: { validator: booleanValidator, enduserUpdatesDisabled: true }, eligibleForAutoMerge: { validator: booleanValidator, enduserUpdatesDisabled: true }, preferredPharmacy: { validator: pharmacyValidator, redactions: ['enduser'] } }),
         customActions: {
             rename_stored_custom_fields: {
                 op: "custom", access: 'update', method: "patch",
@@ -1175,7 +1193,7 @@ export var schema = build_schema({
     },
     journeys: {
         info: {},
-        fields: __assign(__assign({}, BuiltInFields), { archivedAt: { validator: dateOptionalOrEmptyStringValidator }, title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, title: {
                 validator: stringValidator100,
                 required: true,
                 examples: ['Test']
@@ -1867,8 +1885,10 @@ export var schema = build_schema({
                         var _c;
                         var _id = _a._id;
                         var updates = _b.updates;
-                        if (session.type === 'user' && !session.eat)
-                            return; // accessTags is not enabled
+                        // editing a user's tags is a privilege-escalation vector whenever tags gate visibility:
+                        // enduser access tags (eat) OR resource access tags (erat). Skip only when neither is enabled.
+                        if (session.type === 'user' && !session.eat && !(session === null || session === void 0 ? void 0 : session.erat))
+                            return; // neither access-tags feature enabled
                         if ((_c = session === null || session === void 0 ? void 0 : session.roles) === null || _c === void 0 ? void 0 : _c.includes('Admin'))
                             return;
                         if (method === 'create')
@@ -2549,7 +2569,7 @@ export var schema = build_schema({
                 },
             },
         },
-        fields: __assign(__assign({}, BuiltInFields), { archivedAt: { validator: dateOptionalOrEmptyStringValidator }, mmsAttachmentURLs: { validator: listOfUniqueStringsValidatorEmptyOk }, title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, mmsAttachmentURLs: { validator: listOfUniqueStringsValidatorEmptyOk }, title: {
                 validator: stringValidator100,
                 required: true,
                 examples: ["Template Name"],
@@ -2579,7 +2599,7 @@ export var schema = build_schema({
         constraints: { unique: [], relationship: [] },
         defaultActions: { read: {}, readMany: {}, update: {}, delete: {} },
         enduserActions: { prepare_file_upload: {}, confirm_file_upload: {}, file_download_URL: {}, read: {}, readMany: {}, delete: {}, update: {} /* allow to hide from client side */ },
-        fields: __assign(__assign({}, BuiltInFields), { source: { validator: stringValidator100 }, tags: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay }, name: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, source: { validator: stringValidator100 }, tags: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay }, name: {
                 validator: stringValidator250,
                 required: true,
             }, size: {
@@ -2590,6 +2610,8 @@ export var schema = build_schema({
                 required: true
             }, enduserId: {
                 validator: mongoIdStringValidator,
+            }, formResponseId: {
+                validator: mongoIdStringValidator,
             }, secureName: {
                 validator: stringValidator250,
                 readonly: true,
@@ -3070,7 +3092,7 @@ export var schema = build_schema({
                 },
             },
         },
-        fields: __assign(__assign({}, BuiltInFields), { showByUserTags: { validator: listOfStringsValidatorOptionalOrEmptyOk }, belugaVisitType: { validator: stringValidator }, belugaVerificationId: { validator: stringValidator }, belugaPharmacyMappings: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, showByUserTags: { validator: listOfStringsValidatorOptionalOrEmptyOk }, belugaVisitType: { validator: stringValidator }, belugaVerificationId: { validator: stringValidator }, belugaPharmacyMappings: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     title: stringValidatorOptionalEmptyOkay,
                     pharmacyId: stringValidator100,
@@ -3185,7 +3207,7 @@ export var schema = build_schema({
             unique: [],
             relationship: [],
         },
-        fields: __assign(__assign({}, BuiltInFields), { discussionRoomId: { validator: mongoIdStringValidator }, hiddenFromTimeline: { validator: booleanValidator }, lockedAt: { validator: dateValidator }, formId: {
+        fields: __assign(__assign({}, BuiltInFields), { discussionRoomId: { validator: mongoIdStringValidator }, hiddenFromTimeline: { validator: booleanValidator, enduserUpdatesDisabled: true }, lockedAt: { validator: dateValidator, enduserUpdatesDisabled: true }, formId: {
                 validator: stringValidator100,
                 required: true,
                 dependencies: [
@@ -3210,12 +3232,13 @@ export var schema = build_schema({
                 updatesDisabled: true,
             }, openedAt: {
                 validator: dateValidator,
-            }, copiedFrom: { validator: mongoIdStringOptional }, copiedFromEnduserId: { validator: mongoIdStringOptional }, publicSubmit: { validator: booleanValidator }, submittedBy: { validator: stringValidator250 }, submittedByIsPlaceholder: { validator: booleanValidator }, markedAsSubmitted: { validator: booleanValidator }, accessCode: { validator: stringValidator250 }, userEmail: { validator: emailValidator }, submittedAt: { validator: dateValidator }, formTitle: { validator: stringValidator250 }, responses: { validator: formResponsesValidator }, draftSavedAt: { validator: dateValidator }, draftSavedBy: { validator: mongoIdStringValidator }, hideFromEnduserPortal: { validator: booleanValidator }, sharedVia: { validator: communicationsChannelValidator }, isInternalNote: { validator: booleanValidator }, pinnedAt: { validator: dateOptionalOrEmptyStringValidator }, publicIdentifier: { validator: stringValidator250 }, source: { validator: stringValidator250 }, externalId: { validator: stringValidator250 }, rootResponseId: { validator: mongoIdStringValidator }, parentResponseId: { validator: mongoIdStringValidator }, tags: { validator: listOfStringsValidatorOptionalOrEmptyOk }, carePlanId: { validator: mongoIdStringValidator }, context: { validator: stringValidator1000 }, logoURL: { validator: stringValidator5000 }, logoHeight: { validator: numberValidator }, calendarEventId: { validator: mongoIdStringValidator }, references: { validator: listOfRelatedRecordsValidator, readonly: true }, groupId: { validator: mongoIdStringValidator }, groupInstance: { validator: stringValidator100 }, groupPosition: { validator: nonNegNumberValidator }, hideAfterUnsubmittedInMS: { validator: numberValidator }, addenda: {
+            }, copiedFrom: { validator: mongoIdStringOptional }, copiedFromEnduserId: { validator: mongoIdStringOptional }, publicSubmit: { validator: booleanValidator }, submittedBy: { validator: stringValidator250, enduserUpdatesDisabled: true }, submittedByIsPlaceholder: { validator: booleanValidator, enduserUpdatesDisabled: true }, markedAsSubmitted: { validator: booleanValidator, enduserUpdatesDisabled: true }, accessCode: { validator: stringValidator250 }, userEmail: { validator: emailValidator, enduserUpdatesDisabled: true }, submittedAt: { validator: dateValidator, enduserUpdatesDisabled: true }, formTitle: { validator: stringValidator250, enduserUpdatesDisabled: true }, responses: { validator: formResponsesValidator }, draftSavedAt: { validator: dateValidator }, draftSavedBy: { validator: mongoIdStringValidator }, hideFromEnduserPortal: { validator: booleanValidator }, sharedVia: { validator: communicationsChannelValidator }, isInternalNote: { validator: booleanValidator, enduserUpdatesDisabled: true }, pinnedAt: { validator: dateOptionalOrEmptyStringValidator, enduserUpdatesDisabled: true }, publicIdentifier: { validator: stringValidator250 }, source: { validator: stringValidator250 }, externalId: { validator: stringValidator250 }, rootResponseId: { validator: mongoIdStringValidator }, parentResponseId: { validator: mongoIdStringValidator }, tags: { validator: listOfStringsValidatorOptionalOrEmptyOk, enduserUpdatesDisabled: true }, carePlanId: { validator: mongoIdStringValidator }, context: { validator: stringValidator1000 }, logoURL: { validator: stringValidator5000, enduserUpdatesDisabled: true }, logoHeight: { validator: numberValidator, enduserUpdatesDisabled: true }, calendarEventId: { validator: mongoIdStringValidator }, references: { validator: listOfRelatedRecordsValidator, readonly: true }, groupId: { validator: mongoIdStringValidator }, groupInstance: { validator: stringValidator100 }, groupPosition: { validator: nonNegNumberValidator }, hideAfterUnsubmittedInMS: { validator: numberValidator }, addenda: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     text: stringValidator25000EmptyOkay,
                     timestamp: dateValidator,
                     userId: mongoIdStringRequired,
-                }))
+                })),
+                enduserUpdatesDisabled: true,
             }, followups: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     formId: mongoIdStringRequired,
@@ -3228,7 +3251,7 @@ export var schema = build_schema({
                     fieldTitle: stringValidator250,
                     timestamp: dateValidator,
                 }))
-            }, startedViaPinnedForm: { validator: booleanValidator }, enduserAISummary: { validator: stringValidator25000 }, procedureCodes: { validator: procedureCodesValidator }, diagnosisCodes: { validator: diagnosisCodesValidator } }),
+            }, startedViaPinnedForm: { validator: booleanValidator }, enduserAISummary: { validator: stringValidator25000, enduserUpdatesDisabled: true }, procedureCodes: { validator: procedureCodesValidator, enduserUpdatesDisabled: true }, diagnosisCodes: { validator: diagnosisCodesValidator, enduserUpdatesDisabled: true } }),
         defaultActions: DEFAULT_OPERATIONS,
         enduserActions: {
             prepare_form_response: {}, info_for_access_code: {}, submit_form_response: {}, stripe_details: {}, chargebee_details: {},
@@ -3960,7 +3983,7 @@ export var schema = build_schema({
                 validator: nonNegNumberValidator,
                 examples: [100],
                 required: true,
-            }, locationId: { validator: mongoIdStringValidator }, locationIds: { validator: listOfMongoIdStringValidatorOptionalOrEmptyOk }, type: { validator: stringValidator100 }, description: { validator: stringValidator5000 }, agreedToTerms: { validator: appointmentTermsValidator }, meetingId: { validator: mongoIdStringValidator, readonly: true }, bookingPageId: { validator: mongoIdStringValidator }, meetingStatus: { validator: meetingStatusValidator }, attachments: { validator: listOfGenericAttachmentsValidator }, cancelledAt: { validator: dateOptionalOrEmptyStringValidator }, rescheduledAt: { validator: dateOptionalOrEmptyStringValidator }, noShowedAt: { validator: dateOptionalOrEmptyStringValidator }, rescheduledTo: { validator: mongoIdStringValidator }, chatRoomId: {
+            }, locationId: { validator: mongoIdStringValidator }, locationIds: { validator: listOfMongoIdStringValidatorOptionalOrEmptyOk }, type: { validator: stringValidator100 }, description: { validator: stringValidator5000 }, agreedToTerms: { validator: appointmentTermsValidator }, meetingId: { validator: mongoIdStringValidator, readonly: true }, bookingPageId: { validator: mongoIdStringValidator }, meetingStatus: { validator: meetingStatusValidator }, videoCallAttendance: { validator: listOfVideoCallParticipantEventsValidator, readonly: true }, attachments: { validator: listOfGenericAttachmentsValidator }, cancelledAt: { validator: dateOptionalOrEmptyStringValidator }, rescheduledAt: { validator: dateOptionalOrEmptyStringValidator }, noShowedAt: { validator: dateOptionalOrEmptyStringValidator }, rescheduledTo: { validator: mongoIdStringValidator }, chatRoomId: {
                 validator: mongoIdStringValidator,
                 dependencies: [{
                         dependsOn: ['chat_rooms'],
@@ -4026,7 +4049,7 @@ export var schema = build_schema({
         defaultActions: DEFAULT_OPERATIONS,
         customActions: {},
         enduserActions: { read: {}, readMany: {} },
-        fields: __assign(__assign({}, BuiltInFields), { dontSyncToElation: { validator: booleanValidator }, sendIcsEmail: { validator: booleanValidator }, createAndBookAthenaSlot: { validator: booleanValidator }, athenaDepartmentId: { validator: stringValidator1000 }, generateAthenaTelehealthLink: { validator: booleanValidator }, athenaTypeId: { validator: stringValidator1000 }, athenaBookingTypeId: { validator: stringValidator1000 }, preventCancelMinutesInAdvance: { validator: numberValidator }, preventRescheduleMinutesInAdvance: { validator: numberValidator }, preventCancelInPortal: { validator: booleanValidator }, preventRescheduleInPortal: { validator: booleanValidator }, dontSyncToCanvas: { validator: booleanValidator }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, allowGroupReschedule: { validator: booleanValidator }, dontAutoSyncPatientToHealthie: { validator: booleanValidator }, title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, dontSyncToElation: { validator: booleanValidator }, sendIcsEmail: { validator: booleanValidator }, createAndBookAthenaSlot: { validator: booleanValidator }, athenaDepartmentId: { validator: stringValidator1000 }, generateAthenaTelehealthLink: { validator: booleanValidator }, athenaTypeId: { validator: stringValidator1000 }, athenaBookingTypeId: { validator: stringValidator1000 }, preventCancelMinutesInAdvance: { validator: numberValidator }, preventRescheduleMinutesInAdvance: { validator: numberValidator }, preventCancelInPortal: { validator: booleanValidator }, preventRescheduleInPortal: { validator: booleanValidator }, dontSyncToCanvas: { validator: booleanValidator }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, allowGroupReschedule: { validator: booleanValidator }, dontAutoSyncPatientToHealthie: { validator: booleanValidator }, title: {
                 validator: stringValidator250,
                 required: true,
                 examples: ["Text"],
@@ -4421,7 +4444,7 @@ export var schema = build_schema({
             create: {}, createMany: {}, read: {}, readMany: {},
             search: {},
         },
-        fields: __assign(__assign({}, BuiltInFields), { slug: { validator: stringValidator250 }, title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, slug: { validator: stringValidator250 }, title: {
                 validator: stringValidator1000,
                 required: true,
                 examples: ["Template Name"],
@@ -4969,7 +4992,7 @@ export var schema = build_schema({
                 validator: objectValidator({
                     type: stringValidatorOptional,
                 }),
-            }, onboardingStatus: { validator: stringValidator100 }, creditCount: { validator: numberValidator, readonly: true }, stripeKeyDetails: {
+            }, onboardingStatus: { validator: userPortalSettingsValidator }, creditCount: { validator: numberValidator, readonly: true }, stripeKeyDetails: {
                 validator: listValidatorOptionalOrEmptyOk(objectValidator({
                     key: stringValidator5000EmptyOkay,
                     title: stringValidator5000EmptyOkay,
@@ -5246,7 +5269,10 @@ export var schema = build_schema({
                         }
                     },
                 ]
-            }, uiRestrictions: { validator: userUIRestrictionsValidator }, fieldRedactions: { validator: userFieldRedactionsValidator } })
+            }, uiRestrictions: { validator: userUIRestrictionsValidator }, fieldRedactions: { validator: userFieldRedactionsValidator }, portalSchemaRestrictions: {
+                validator: portalSchemaRestrictionsValidator,
+                initializer: function () { return ({ disableEditContent: true, disableEditTheming: true, disableEditSnippets: true }); },
+            }, color: { validator: stringValidator1000 }, description: { validator: stringValidator1000Optional } })
     },
     appointment_booking_pages: {
         info: {},
@@ -5288,7 +5314,7 @@ export var schema = build_schema({
         enduserActions: {
             read: {}, readMany: {}, validate_access_token: {},
         },
-        fields: __assign(__assign({}, BuiltInFields), { dontRestrictRescheduleToOriginalHost: { validator: booleanValidator }, gtmTag: { validator: stringValidator100EscapeHTML }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, dontRestrictRescheduleToOriginalHost: { validator: booleanValidator }, gtmTag: { validator: stringValidator100EscapeHTML }, archivedAt: { validator: dateOptionalOrEmptyStringValidator }, title: {
                 validator: stringValidator100,
                 required: true,
                 examples: ["Appointment Booking Title"]
@@ -5910,7 +5936,7 @@ export var schema = build_schema({
             },
         },
         enduserActions: {},
-        fields: __assign(__assign({}, BuiltInFields), { title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, title: {
                 validator: stringValidator100,
                 required: true,
                 examples: ["Automation Trigger"]
@@ -6186,7 +6212,7 @@ export var schema = build_schema({
         defaultActions: DEFAULT_OPERATIONS,
         customActions: {},
         enduserActions: {},
-        fields: __assign(__assign({}, BuiltInFields), { title: {
+        fields: __assign(__assign({}, BuiltInFields), { accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk }, title: {
                 validator: stringValidator,
                 required: true,
                 examples: ["Title"]
@@ -6326,18 +6352,34 @@ export var schema = build_schema({
                     }
                 },
                 {
-                    explanation: "Locked time tracks only allow review field updates",
-                    evaluate: function (_v, _deps, _session, method, _a) {
+                    explanation: "Locked time tracks only allow review field updates, or owner resubmission of rejected entries",
+                    evaluate: function (_v, _deps, session, method, _a) {
                         var original = _a.original, updates = _a.updates;
                         if (method !== 'update')
                             return;
                         var orig = original;
                         if (!(orig === null || orig === void 0 ? void 0 : orig.lockedAt))
                             return;
+                        var u = updates;
                         var reviewFields = ['reviewedAt', 'reviewedByUserId', 'reviewApproved', 'reviewNote'];
                         var nonReviewFields = Object.keys(updates || {}).filter(function (k) { return !reviewFields.includes(k); });
-                        if (nonReviewFields.length > 0)
-                            return "Time track is locked. Only review fields (".concat(reviewFields.join(', '), ") can be updated.");
+                        if (nonReviewFields.length === 0)
+                            return; // pure review update — unchanged behavior
+                        var isRejected = !!orig.reviewedAt && orig.reviewApproved === false;
+                        var resubmitFields = __spreadArray(__spreadArray([], reviewFields, true), [
+                            'correctedAt', 'correctedByUserId', 'correctionNote',
+                            'originalTotalDurationInMS', 'totalDurationInMS',
+                            'lockedAt', 'lockedByUserId',
+                        ], false);
+                        var disallowed = Object.keys(updates || {}).filter(function (k) { return !resubmitFields.includes(k); });
+                        if (isRejected && session.id === orig.userId && disallowed.length === 0) {
+                            if ((u === null || u === void 0 ? void 0 : u.reviewedAt) !== '')
+                                return "Resubmitting a rejected time track requires clearing reviewedAt (set to '')";
+                            if ((u === null || u === void 0 ? void 0 : u.reviewApproved) === true)
+                                return "Cannot approve your own time track during resubmission";
+                            return; // valid resubmit — entry returns to Pending
+                        }
+                        return "Time track is locked. Only review fields (".concat(reviewFields.join(', '), ") can be updated.");
                     }
                 },
                 {
@@ -6412,7 +6454,20 @@ export var schema = build_schema({
                     type: stringValidator,
                     id: stringValidator,
                 }, { isOptional: true, emptyOk: true }),
-            }, isHistorical: { validator: booleanValidatorOptional, updatesDisabled: true }, correctedAt: { validator: dateValidatorOptional }, correctedByUserId: { validator: mongoIdStringOptional }, correctionNote: { validator: stringValidator1000Optional }, originalTotalDurationInMS: { validator: numberValidatorOptional }, reviewedAt: { validator: dateValidatorOptional }, reviewedByUserId: { validator: mongoIdStringOptional }, reviewApproved: { validator: booleanValidatorOptional }, reviewNote: { validator: stringValidator1000Optional }, lockedAt: { validator: dateValidatorOptional }, lockedByUserId: { validator: mongoIdStringOptional } }),
+            }, isHistorical: { validator: booleanValidatorOptional, updatesDisabled: true }, correctedAt: { validator: dateValidatorOptional }, correctedByUserId: { validator: mongoIdStringOptional }, correctionNote: { validator: stringValidator1000Optional }, originalTotalDurationInMS: { validator: numberValidatorOptional }, reviewedAt: { validator: dateValidatorOptional }, reviewedByUserId: { validator: mongoIdStringOptional }, reviewApproved: { validator: booleanValidatorOptional }, reviewNote: { validator: stringValidator1000Optional }, lockedAt: { validator: dateValidatorOptional }, lockedByUserId: { validator: mongoIdStringOptional }, 
+            // server-appended on resubmission of a rejected entry (see routing.ts update handler)
+            // note: reviewApproved remains false after resubmit (booleans can't be cleared to '') — status logic must key off reviewedAt
+            reviewHistory: {
+                validator: listValidatorOptionalOrEmptyOk(objectValidator({
+                    reviewedAt: dateValidator,
+                    reviewedByUserId: mongoIdStringOptional,
+                    reviewApproved: booleanValidatorOptional,
+                    reviewNote: stringValidator1000Optional,
+                    resubmittedAt: dateValidatorOptional,
+                    resubmittedByUserId: mongoIdStringOptional,
+                })),
+                readonly: true, // server-appended only — clients can read, never write
+            } }),
     },
     ticket_queues: {
         info: {},
@@ -6840,7 +6895,7 @@ export var schema = build_schema({
         defaultActions: { read: {}, readMany: {} },
         customActions: {},
         enduserActions: {},
-        fields: __assign(__assign({}, BuiltInFields), { integration: { validator: stringValidator, readonly: true, examples: ['Canvas'] }, status: { validator: exactMatchValidator(['Success', 'Error']), readonly: true, examples: ['Error'] }, type: { validator: stringValidator, readonly: true, examples: ['Patient Create'] }, payload: { validator: stringValidator, readonly: true, examples: ['{}'] }, response: { validator: stringValidator, readonly: true, examples: ['{}'] }, url: { validator: stringValidator, readonly: true, examples: ['https://www.tellescope.com'] }, enduserId: { validator: mongoIdStringValidator, readonly: true } })
+        fields: __assign(__assign({}, BuiltInFields), { integration: { validator: stringValidator, readonly: true, examples: ['Canvas'] }, status: { validator: exactMatchValidator(['Success', 'Error', 'Info']), readonly: true, examples: ['Error'] }, type: { validator: stringValidator, readonly: true, examples: ['Patient Create'] }, payload: { validator: stringValidator, readonly: true, examples: ['{}'] }, response: { validator: stringValidator, readonly: true, examples: ['{}'] }, url: { validator: stringValidator, readonly: true, examples: ['https://www.tellescope.com'] }, enduserId: { validator: mongoIdStringValidator, readonly: true } })
     },
     organization_payments: {
         info: { description: 'Read Only - Organization Payment Transaction Logs' },