@tellescope/schema 1.253.0 → 1.254.0

package/src/schema.ts

@@ -90,6 +90,7 @@ import {
   AIDecisionAutomationAction,
   AutomationAction,
   TimeTrackTimestamp,
+  TimeTrackReviewHistoryItem,
   BelugaPharmacyMapping,
   BelugaAutomationMappingEntry,
   BelugaUpdateVisitPatientPreferenceItem,
@@ -172,6 +173,7 @@ import {
   fileSizeValidator,
   meetingStatusValidator,
   listOfAttendeesValidator,
+  listOfVideoCallParticipantEventsValidator,
   meetingInfoValidator,
   listOfUserIndentitiesValidator,
   meetingsListValidator,
@@ -287,6 +289,7 @@ import {
   userCallRoutingBehaviorValidator,
   userUIRestrictionsValidator,
   userFieldRedactionsValidator,
+  portalSchemaRestrictionsValidator,
   externalChatGPTMessagesValidator,
   enduserProfileViewBlocksValidator,
   customDashboardBlocksValidator,
@@ -460,6 +463,7 @@ export type ModelFieldInfo <T, R> = {
   readonly?:  boolean,
   required?:  boolean,
   updatesDisabled?: boolean,
+  enduserUpdatesDisabled?: boolean, // enduser sessions cannot update this field; user sessions still can
   examples?:  JSONType[],
   initializer?: Initializer<Partial<T>, R>, // should include the required fields of T, not just partial
   dependencies?: Dependency<Partial<T>>[],
@@ -1506,13 +1510,15 @@ export const schema: SchemaV1 = build_schema({
       unsubscribe: {},
     },
     fields: {
-      ...BuiltInFields,   
+      ...BuiltInFields,
+      sharedWithOrganizations: { ...BuiltInFields.sharedWithOrganizations, enduserUpdatesDisabled: true },
       recentViewers: { validator: recentViewersValidator },
-      healthie_dietitian_id: { validator: stringValidator100 },
+      healthie_dietitian_id: { validator: stringValidator100, enduserUpdatesDisabled: true },
       mergedIds: { validator: listOfMongoIdStringValidatorOptionalOrEmptyOk, readonly: true, redactions: ['enduser'] },
       externalId: {
         validator: stringValidator250,
         examples: ['addfed3e-ddea-415b-b52b-df820c944dbb'],
+        enduserUpdatesDisabled: true,
       },
       email: { 
         validator: emailValidatorEmptyOkay,
@@ -1566,9 +1572,10 @@ export const schema: SchemaV1 = build_schema({
         validator: stringValidator250,
         redactions: ['enduser'],
       },
-      journeys: { 
+      journeys: {
         validator: journeysValidator,
         redactions: ['enduser'],
+        enduserUpdatesDisabled: true, // endusers may still use the add_to_journey / remove_from_journey custom actions
         dependencies: [
           {
             dependsOn: ['journeys'],
@@ -1584,13 +1591,15 @@ export const schema: SchemaV1 = build_schema({
         ]
       },
       scheduledJourneys: { validator: scheduledJourneysValidator },
-      tags: { 
+      tags: {
         redactions: ['enduser'],
         validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay,
+        enduserUpdatesDisabled: true,
       },
-      accessTags: { 
+      accessTags: {
         redactions: ['enduser'],
         validator: listOfStringsValidatorEmptyOk,
+        enduserUpdatesDisabled: true,
       },
       unredactedTags: {
         validator: listOfStringsValidatorEmptyOk,
@@ -1598,6 +1607,7 @@ export const schema: SchemaV1 = build_schema({
       fields: {
         redactions: ['enduser'],
         validator: fieldsValidator,
+        enduserUpdatesDisabled: true, // intake forms write fields server-side; direct enduser PATCH is not a supported path
       },
       unredactedFields: {
         validator: fieldsValidator,
@@ -1606,17 +1616,20 @@ export const schema: SchemaV1 = build_schema({
         redactions: ['enduser'],
         validator: preferenceValidator,
       },
-      assignedTo: { 
+      assignedTo: {
         redactions: ['enduser'],
         validator: listOfUniqueStringsValidatorEmptyOk,
+        enduserUpdatesDisabled: true,
       },
-      primaryAssignee: { 
+      primaryAssignee: {
         validator: mongoIdStringValidator,
         redactions: ['enduser'],
+        enduserUpdatesDisabled: true,
       },
-      unread: { 
+      unread: {
         redactions: ['enduser'],
         validator: booleanValidator,
+        enduserUpdatesDisabled: true,
       },
       lastActive: { 
         validator: dateValidator,
@@ -1651,7 +1664,7 @@ export const schema: SchemaV1 = build_schema({
       pronouns: { validator: stringValidator100, redactions: ['enduser'] },
       height: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] },
       weight: { validator: genericUnitWithQuantityValidator, redactions: ['enduser'] },
-      source: { validator: stringValidator1000Optional },
+      source: { validator: stringValidator1000Optional, enduserUpdatesDisabled: true },
       addressLineOne: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] },
       addressLineTwo: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] },
       city: { validator: stringValidator5000EmptyOkay, redactions: ['enduser'] },
@@ -1663,7 +1676,7 @@ export const schema: SchemaV1 = build_schema({
       displayName: { validator: stringValidator250 }, // intentionally not redacted for other endusers
       unsubscribedFromPortalChatNotifications: { validator: booleanValidator },
       triggeredEvents: { validator: objectAnyFieldsValidator(numberValidator) },
-      customTypeId: { validator: mongoIdStringValidator },
+      customTypeId: { validator: mongoIdStringValidator, enduserUpdatesDisabled: true },
       language: { validator: languageValidator },
       relationships: {
         validator: listValidatorOptionalOrEmptyOk(objectValidator<EnduserRelationship>({
@@ -1673,10 +1686,10 @@ export const schema: SchemaV1 = build_schema({
       },
       markedReadAt: { validator: dateOptionalOrEmptyStringValidator },
       markedUnreadAt: { validator: dateOptionalOrEmptyStringValidator },
-      note: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'] },
+      note: { validator: stringValidator25000EmptyOkay, redactions: ['enduser'], enduserUpdatesDisabled: true },
       noteIsFlagged: { validator: booleanValidator },
-      insurance: { validator: insuranceOptionalValidator, redactions: ['enduser'] },
-      insuranceSecondary: { validator: insuranceOptionalValidator, redactions: ['enduser'] },
+      insurance: { validator: insuranceOptionalValidator, redactions: ['enduser'], enduserUpdatesDisabled: true }, // patient insurance entry is supported via intake forms (server-side write)
+      insuranceSecondary: { validator: insuranceOptionalValidator, redactions: ['enduser'], enduserUpdatesDisabled: true },
       bookingNotes: {
         validator: listValidatorOptionalOrEmptyOk(objectValidator<{ bookingPageId: string, note: string }>({
           bookingPageId: mongoIdStringRequired,
@@ -1694,24 +1707,25 @@ export const schema: SchemaV1 = build_schema({
         })),
         redactions: ['enduser'],
       },
-      references: { validator: listOfRelatedRecordsValidator, redactions: ['enduser'] },
-      athenaDepartmentId: { validator: stringValidator100, redactions: ['enduser'] },
-      athenaPracticeId: { validator: stringValidator100, redactions: ['enduser'] },
-      salesforceId: { validator: stringValidator100, redactions: ['enduser'] },
+      references: { validator: listOfRelatedRecordsValidator, redactions: ['enduser'], enduserUpdatesDisabled: true },
+      athenaDepartmentId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true },
+      athenaPracticeId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true },
+      salesforceId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true },
       vitalTriggersDisabled: { validator: booleanValidator },
       defaultFromPhone: { validator: phoneValidator, redactions: ['enduser'] },
       defaultFromEmail: { validator: emailValidator, redactions: ['enduser'] },
       useDefaultFromEmailInAutomations: { validator: booleanValidator },
       useDefaultFromPhoneInAutomations: { validator: booleanValidator },
-      stripeCustomerId: { validator: stringValidator100, redactions: ['enduser'] },
-      stripeKey: { validator: stringValidator250, redactions: ['enduser'] },
+      stripeCustomerId: { validator: stringValidator100, redactions: ['enduser'], enduserUpdatesDisabled: true },
+      stripeKey: { validator: stringValidator250, redactions: ['enduser'], enduserUpdatesDisabled: true },
       diagnoses: {
         validator: listValidatorOptionalOrEmptyOk(enduserDiagnosisValidator),
-        redactions: ['enduser']
+        redactions: ['enduser'],
+        enduserUpdatesDisabled: true,
       },
       unsubscribedFromPhones: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay, redactions: ['enduser'] },
-      lockedFromPortal: { validator: booleanValidator },
-      eligibleForAutoMerge: { validator: booleanValidator },
+      lockedFromPortal: { validator: booleanValidator, enduserUpdatesDisabled: true },
+      eligibleForAutoMerge: { validator: booleanValidator, enduserUpdatesDisabled: true },
       preferredPharmacy: { validator: pharmacyValidator, redactions: ['enduser'] },
       // recentMessagePreview: {
       //   validator: stringValidator,
@@ -2633,6 +2647,7 @@ export const schema: SchemaV1 = build_schema({
     info: {},
     fields: {
       ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       archivedAt: { validator: dateOptionalOrEmptyStringValidator },
       title: {
         validator: stringValidator100,
@@ -3475,7 +3490,9 @@ export const schema: SchemaV1 = build_schema({
         {
           explanation: "Only admin users can update tags when accessTags is enabled",
           evaluate: ({ _id }, _, session, method, { updates } ) => {
-            if (session.type === 'user' && !session.eat) return // accessTags is not enabled
+            // editing a user's tags is a privilege-escalation vector whenever tags gate visibility:
+            // enduser access tags (eat) OR resource access tags (erat). Skip only when neither is enabled.
+            if (session.type === 'user' && !session.eat && !(session as UserSession)?.erat) return // neither access-tags feature enabled
             if ((session as UserSession)?.roles?.includes('Admin')) return
             if (method === 'create') return
             if (!updates?.tags) return
@@ -4171,7 +4188,8 @@ export const schema: SchemaV1 = build_schema({
       },
     },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       archivedAt: { validator: dateOptionalOrEmptyStringValidator },
       mmsAttachmentURLs: { validator: listOfUniqueStringsValidatorEmptyOk }, 
       title: {
@@ -4219,7 +4237,8 @@ export const schema: SchemaV1 = build_schema({
     defaultActions: { read: {}, readMany: {}, update: {}, delete: {} },
     enduserActions: { prepare_file_upload: {}, confirm_file_upload: {}, file_download_URL: {}, read: {}, readMany: {}, delete: {}, update: { } /* allow to hide from client side */ },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       source: { validator: stringValidator100 },
       tags: { validator: listOfStringsValidatorUniqueOptionalOrEmptyOkay }, 
       name: {
@@ -4237,6 +4256,9 @@ export const schema: SchemaV1 = build_schema({
       enduserId: { // deleted as side effect of enduser delete
         validator: mongoIdStringValidator,
       },
+      formResponseId: { // link to the form response a file was uploaded for (used for Beluga sync)
+        validator: mongoIdStringValidator,
+      },
       secureName: {
         validator: stringValidator250,
         readonly: true,
@@ -4485,7 +4507,7 @@ export const schema: SchemaV1 = build_schema({
     },
     enduserActions: { create: {}, read: {}, readMany: {} },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
       title: {
         validator: stringValidator1000,
         required: true,
@@ -4810,6 +4832,7 @@ export const schema: SchemaV1 = build_schema({
     },
     fields: {
       ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       showByUserTags: { validator: listOfStringsValidatorOptionalOrEmptyOk },
       belugaVisitType: { validator: stringValidator },
       belugaVerificationId: { validator: stringValidator },
@@ -5025,8 +5048,8 @@ export const schema: SchemaV1 = build_schema({
     fields: {
       ...BuiltInFields, 
       discussionRoomId: { validator: mongoIdStringValidator },
-      hiddenFromTimeline: { validator: booleanValidator },
-      lockedAt: { validator: dateValidator },
+      hiddenFromTimeline: { validator: booleanValidator, enduserUpdatesDisabled: true },
+      lockedAt: { validator: dateValidator, enduserUpdatesDisabled: true },
       formId: {
         validator: stringValidator100, // allow other external id types here too, not just mongoid
         required: true,
@@ -5059,42 +5082,43 @@ export const schema: SchemaV1 = build_schema({
       copiedFrom: { validator: mongoIdStringOptional },
       copiedFromEnduserId: { validator: mongoIdStringOptional },
       publicSubmit: { validator: booleanValidator },
-      submittedBy: { validator: stringValidator250 },
-      submittedByIsPlaceholder: { validator: booleanValidator },
-      markedAsSubmitted: { validator: booleanValidator },
+      submittedBy: { validator: stringValidator250, enduserUpdatesDisabled: true },
+      submittedByIsPlaceholder: { validator: booleanValidator, enduserUpdatesDisabled: true },
+      markedAsSubmitted: { validator: booleanValidator, enduserUpdatesDisabled: true }, // endusers submit via the submit_form_response custom action
       accessCode: { validator: stringValidator250 },
-      userEmail: { validator: emailValidator },
-      submittedAt: { validator: dateValidator },
-      formTitle: { validator: stringValidator250 },  
+      userEmail: { validator: emailValidator, enduserUpdatesDisabled: true },
+      submittedAt: { validator: dateValidator, enduserUpdatesDisabled: true },
+      formTitle: { validator: stringValidator250, enduserUpdatesDisabled: true },
       responses: { validator: formResponsesValidator },
       draftSavedAt: { validator: dateValidator },
       draftSavedBy: { validator: mongoIdStringValidator },
       hideFromEnduserPortal: { validator: booleanValidator },
       sharedVia: { validator: communicationsChannelValidator },
-      isInternalNote: { validator: booleanValidator },
-      pinnedAt: { validator: dateOptionalOrEmptyStringValidator },
+      isInternalNote: { validator: booleanValidator, enduserUpdatesDisabled: true },
+      pinnedAt: { validator: dateOptionalOrEmptyStringValidator, enduserUpdatesDisabled: true },
       publicIdentifier: { validator: stringValidator250 },
       source: { validator: stringValidator250 },
       externalId: { validator: stringValidator250 },
       rootResponseId: { validator: mongoIdStringValidator },
       parentResponseId: { validator: mongoIdStringValidator },
-      tags: { validator: listOfStringsValidatorOptionalOrEmptyOk },
+      tags: { validator: listOfStringsValidatorOptionalOrEmptyOk, enduserUpdatesDisabled: true },
       carePlanId: { validator: mongoIdStringValidator },
       context: { validator: stringValidator1000 },
-      logoURL: { validator: stringValidator5000 },
-      logoHeight: { validator: numberValidator },
+      logoURL: { validator: stringValidator5000, enduserUpdatesDisabled: true },
+      logoHeight: { validator: numberValidator, enduserUpdatesDisabled: true },
       calendarEventId: { validator: mongoIdStringValidator },
       references: { validator: listOfRelatedRecordsValidator, readonly: true },
       groupId: { validator: mongoIdStringValidator },
       groupInstance: { validator: stringValidator100 },
       groupPosition: { validator: nonNegNumberValidator },
       hideAfterUnsubmittedInMS: { validator: numberValidator },
-      addenda: { 
-        validator: listValidatorOptionalOrEmptyOk(objectValidator<Addendum>({ 
+      addenda: {
+        validator: listValidatorOptionalOrEmptyOk(objectValidator<Addendum>({
           text: stringValidator25000EmptyOkay,
           timestamp: dateValidator,
           userId: mongoIdStringRequired,
-        }))
+        })),
+        enduserUpdatesDisabled: true,
       },
       followups: { 
         validator: listValidatorOptionalOrEmptyOk(objectValidator<FormResponseFollowup>({ 
@@ -5115,9 +5139,9 @@ export const schema: SchemaV1 = build_schema({
         }))
       },
       startedViaPinnedForm: { validator: booleanValidator },
-      enduserAISummary: { validator: stringValidator25000 },
-      procedureCodes: { validator: procedureCodesValidator },
-      diagnosisCodes: { validator: diagnosisCodesValidator },
+      enduserAISummary: { validator: stringValidator25000, enduserUpdatesDisabled: true },
+      procedureCodes: { validator: procedureCodesValidator, enduserUpdatesDisabled: true },
+      diagnosisCodes: { validator: diagnosisCodesValidator, enduserUpdatesDisabled: true },
     },
     defaultActions: DEFAULT_OPERATIONS,
     enduserActions: {
@@ -5930,6 +5954,7 @@ export const schema: SchemaV1 = build_schema({
       meetingId: { validator: mongoIdStringValidator, readonly: true },
       bookingPageId: { validator: mongoIdStringValidator }, // allows rescheduling via booking page
       meetingStatus: { validator: meetingStatusValidator },
+      videoCallAttendance: { validator: listOfVideoCallParticipantEventsValidator, readonly: true },
       attachments: { validator: listOfGenericAttachmentsValidator },
       cancelledAt: { validator: dateOptionalOrEmptyStringValidator },
       rescheduledAt: { validator: dateOptionalOrEmptyStringValidator },
@@ -6064,7 +6089,8 @@ export const schema: SchemaV1 = build_schema({
     customActions: {},
     enduserActions: { read: {}, readMany: {} },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       dontSyncToElation: { validator: booleanValidator },
       sendIcsEmail: { validator: booleanValidator },
       createAndBookAthenaSlot: { validator: booleanValidator },
@@ -6592,7 +6618,8 @@ export const schema: SchemaV1 = build_schema({
       search: {},
     },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       slug: { validator: stringValidator250 },
       title: {
         validator: stringValidator1000,
@@ -7199,7 +7226,7 @@ export const schema: SchemaV1 = build_schema({
           type: stringValidatorOptional,
         }),
       },
-      onboardingStatus: { validator: stringValidator100 }, // read/write for org admins (not super-admin restricted)
+      onboardingStatus: { validator: userPortalSettingsValidator }, // key-value store, same shape as User.portalSettings; read/write for org admins (not super-admin restricted)
       creditCount: { validator: numberValidator, readonly: true },
       stripeKeyDetails: {
         validator: listValidatorOptionalOrEmptyOk(objectValidator<StripeKeyDetail>({
@@ -7608,6 +7635,12 @@ export const schema: SchemaV1 = build_schema({
       },
       uiRestrictions: { validator: userUIRestrictionsValidator },
       fieldRedactions: { validator: userFieldRedactionsValidator },
+      portalSchemaRestrictions: {
+        validator: portalSchemaRestrictionsValidator,
+        initializer: () => ({ disableEditContent: true, disableEditTheming: true, disableEditSnippets: true }),
+      },
+      color: { validator: stringValidator1000 },
+      description: { validator: stringValidator1000Optional },
     }
   },
   appointment_booking_pages: {
@@ -7651,7 +7684,8 @@ export const schema: SchemaV1 = build_schema({
       read: {}, readMany: {}, validate_access_token: {},
     },
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       dontRestrictRescheduleToOriginalHost: { validator: booleanValidator },
       gtmTag: { validator: stringValidator100EscapeHTML },
       archivedAt: { validator: dateOptionalOrEmptyStringValidator },
@@ -8488,7 +8522,8 @@ If a voicemail is left, it is indicated by recordingURI, transcription, or recor
     },
     enduserActions: {},
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       title: {
         validator: stringValidator100,
         required: true,
@@ -8843,7 +8878,8 @@ If a voicemail is left, it is indicated by recordingURI, transcription, or recor
     customActions: {},
     enduserActions: {},
     fields: {
-      ...BuiltInFields, 
+      ...BuiltInFields,
+      accessTags: { redactions: ['enduser'], validator: listOfStringsValidatorEmptyOk },
       title: {
         validator: stringValidator,
         required: true,
@@ -9025,14 +9061,33 @@ If a voicemail is left, it is indicated by recordingURI, transcription, or recor
           }
         },
         {
-          explanation: "Locked time tracks only allow review field updates",
-          evaluate: (_v, _deps, _session, method, { original, updates }) => {
+          explanation: "Locked time tracks only allow review field updates, or owner resubmission of rejected entries",
+          evaluate: (_v, _deps, session, method, { original, updates }) => {
             if (method !== 'update') return
             const orig = original as any as TimeTrack | undefined
             if (!orig?.lockedAt) return
+
+            const u = updates as any as Partial<TimeTrack> | undefined
             const reviewFields = ['reviewedAt', 'reviewedByUserId', 'reviewApproved', 'reviewNote']
             const nonReviewFields = Object.keys(updates || {}).filter(k => !reviewFields.includes(k))
-            if (nonReviewFields.length > 0) return `Time track is locked. Only review fields (${reviewFields.join(', ')}) can be updated.`
+            if (nonReviewFields.length === 0) return // pure review update — unchanged behavior
+
+            const isRejected = !!orig.reviewedAt && orig.reviewApproved === false
+            const resubmitFields = [
+              ...reviewFields,
+              'correctedAt', 'correctedByUserId', 'correctionNote',
+              'originalTotalDurationInMS', 'totalDurationInMS',
+              'lockedAt', 'lockedByUserId',
+            ]
+            const disallowed = Object.keys(updates || {}).filter(k => !resubmitFields.includes(k))
+
+            if (isRejected && session.id === orig.userId && disallowed.length === 0) {
+              if (u?.reviewedAt !== '') return "Resubmitting a rejected time track requires clearing reviewedAt (set to '')"
+              if (u?.reviewApproved === true) return "Cannot approve your own time track during resubmission"
+              return // valid resubmit — entry returns to Pending
+            }
+
+            return `Time track is locked. Only review fields (${reviewFields.join(', ')}) can be updated.`
           }
         },
         {
@@ -9117,6 +9172,19 @@ If a voicemail is left, it is indicated by recordingURI, transcription, or recor
       reviewNote: { validator: stringValidator1000Optional },
       lockedAt: { validator: dateValidatorOptional },
       lockedByUserId: { validator: mongoIdStringOptional },
+      // server-appended on resubmission of a rejected entry (see routing.ts update handler)
+      // note: reviewApproved remains false after resubmit (booleans can't be cleared to '') — status logic must key off reviewedAt
+      reviewHistory: {
+        validator: listValidatorOptionalOrEmptyOk(objectValidator<TimeTrackReviewHistoryItem>({
+          reviewedAt: dateValidator,
+          reviewedByUserId: mongoIdStringOptional,
+          reviewApproved: booleanValidatorOptional,
+          reviewNote: stringValidator1000Optional,
+          resubmittedAt: dateValidatorOptional,
+          resubmittedByUserId: mongoIdStringOptional,
+        })),
+        readonly: true, // server-appended only — clients can read, never write
+      },
     },
   },
   ticket_queues: {
@@ -9729,7 +9797,7 @@ If a voicemail is left, it is indicated by recordingURI, transcription, or recor
     fields: {
       ...BuiltInFields,
       integration: { validator: stringValidator, readonly: true, examples: ['Canvas'] },
-      status: { validator: exactMatchValidator(['Success', 'Error']), readonly: true, examples: ['Error'] },
+      status: { validator: exactMatchValidator(['Success', 'Error', 'Info']), readonly: true, examples: ['Error'] },
       type: { validator: stringValidator, readonly: true, examples: ['Patient Create'] },
       payload: { validator: stringValidator, readonly: true, examples: ['{}'] },
       response: { validator: stringValidator, readonly: true, examples: ['{}'] },