diff --git a/backend/ward-flow/engine.ts b/backend/ward-flow/engine.ts
index 9e174df5bd..c1a7eab89c 100644
--- a/backend/ward-flow/engine.ts
+++ b/backend/ward-flow/engine.ts
@@ -401,23 +401,40 @@ function changedFacts(before: WardFlowState, after: WardFlowState, rawAfter?: Wa
 }
 
 export function seedWorld(at: Date): SharedWorld {
+  const dayZero = demoDayZero(at);
   return {
     version: 1,
-    state: serialise(seedWardFlowStateAt(0)),
+    // D-150: the seed is re-anchored onto the real Perth time, as the public demo's provider does
+    // (`ward-reanchor.ts`), so a new world's clock and its seeded times agree from the start.
+    state: serialise(seedWardFlowStateAt(minutesSince(dayZero, at) - NOW_ANCHOR)),
     // New worlds share the local demo's Perth calendar. Existing stored origins remain authoritative.
-    dayZero: demoDayZero(at).toISOString(),
+    dayZero: dayZero.toISOString(),
     startedAt: at.toISOString(),
   };
 }
 
-export function worldNow(world: SharedWorld, at: Date): number {
-  return (
-    NOW_ANCHOR +
-    Math.max(0, Math.floor((at.getTime() - Date.parse(world.startedAt)) / 60_000)) +
-    world.state.clockOffsetMinutes
+/** Whole minutes from `from` to `at`, never negative. */
+function minutesSince(from: Date | string, at: Date): number {
+  return Math.max(
+    0,
+    Math.floor((at.getTime() - (typeof from === "string" ? Date.parse(from) : from.getTime())) / 60_000),
   );
 }
 
+/**
+ * The shared world's clock. D-150 (Josh, 11 Nov 2026): the signed-in site shows real Perth time, so
+ * an instant is the real minutes since the world's day zero (a Perth midnight). Before this the clock
+ * started at the scripted 10:42 (`NOW_ANCHOR`) whenever the world was made and ran fast or slow by
+ * that gap all day. The scripted clock stays on the public demo only. `clockOffsetMinutes` is still
+ * added, though the advance-clock control is hidden in shared mode.
+ */
+export function worldNow(
+  world: Pick<SharedWorld, "dayZero"> & { state: Pick<WardFlowState, "clockOffsetMinutes"> },
+  at: Date,
+): number {
+  return minutesSince(world.dayZero, at) + world.state.clockOffsetMinutes;
+}
+
 export function validWorld(value: unknown): value is SharedWorld {
   if (!value || typeof value !== "object") return false;
   const world = value as SharedWorld;
diff --git a/backend/ward-flow/postgres.mjs b/backend/ward-flow/postgres.mjs
index d78ddd64ba..aa3f7f691f 100644
--- a/backend/ward-flow/postgres.mjs
+++ b/backend/ward-flow/postgres.mjs
@@ -211,23 +211,23 @@ export function createWorkspaceStore(
    */
   let executiveBasis = null;
   /**
-   * The workspace clock (start time and offset) of one committed row ("revision:updated-at"), so
+   * The workspace clock (day zero and offset, D-150) of one committed row ("revision:updated-at"), so
    * an unchanged poll does not read them out of the workspace JSON each time. Set by full reads
    * and by the poll's own fallback read; a row with a different stamp is never answered from it.
-   * @type {{ stamp: string, startedAt: string, clockOffset: number } | null}
+   * @type {{ stamp: string, dayZero: string, clockOffset: number } | null}
    */
   let pollClock = null;
-  function rememberPollClock(stamp, startedAt, clockOffset) {
+  function rememberPollClock(stamp, dayZero, clockOffset) {
     if (
       typeof stamp === "string" &&
-      typeof startedAt === "string" &&
-      Number.isFinite(Date.parse(startedAt)) &&
+      typeof dayZero === "string" &&
+      Number.isFinite(Date.parse(dayZero)) &&
       Number.isFinite(clockOffset)
     )
-      pollClock = { stamp, startedAt, clockOffset };
+      pollClock = { stamp, dayZero, clockOffset };
   }
   const pollNow = (at) =>
-    engine.worldNow({ startedAt: pollClock?.startedAt, state: { clockOffsetMinutes: pollClock?.clockOffset } }, at);
+    engine.worldNow({ dayZero: pollClock?.dayZero, state: { clockOffsetMinutes: pollClock?.clockOffset } }, at);
   /** The executive desk's snapshot around one report, as a full read and a cached poll send it. */
   const executiveReply = (view, context, accessUntil, revision, now, report) => ({
     kind: "executive-aggregate",
@@ -437,7 +437,7 @@ export function createWorkspaceStore(
     replyTicket = /** @type {object | undefined} */ (undefined),
   ) => {
     // A committed row's clock, so the next unchanged poll answers from memory (no migration).
-    rememberPollClock(stamp, row.payload?.startedAt, row.payload?.state?.clockOffsetMinutes);
+    rememberPollClock(stamp, row.payload?.dayZero, row.payload?.state?.clockOffsetMinutes);
     if (view?.access?.role === "executive") return executiveSnapshot(connection, row, at, view, stamp);
     const context = accessContext(at, view);
     const revision = Number(row.revision);
@@ -1252,24 +1252,24 @@ export function createWorkspaceStore(
           return { notModified: true, dataMode: "prototype", revision: knownRevision, now: pollNow(at) };
       }
       const { rows } = await pool.query(
-        "SELECT data_mode, revision, date_trunc('milliseconds', updated_at) AS updated_at, payload->>'startedAt' AS started_at, payload->'state'->'clockOffsetMinutes' AS clock_offset FROM ward_flow.workspaces WHERE id=$1 AND data_mode='prototype'",
+        "SELECT data_mode, revision, date_trunc('milliseconds', updated_at) AS updated_at, payload->>'dayZero' AS day_zero, payload->'state'->'clockOffsetMinutes' AS clock_offset FROM ward_flow.workspaces WHERE id=$1 AND data_mode='prototype'",
         [workspaceId],
       );
       const row = rows[0];
       if (row && row.updated_at instanceof Date)
-        rememberPollClock(`${Number(row.revision)}:${row.updated_at.getTime()}`, row.started_at, row.clock_offset);
+        rememberPollClock(`${Number(row.revision)}:${row.updated_at.getTime()}`, row.day_zero, row.clock_offset);
       if (
         row &&
         Number(row.revision) === knownRevision &&
-        typeof row.started_at === "string" &&
-        Number.isFinite(Date.parse(row.started_at)) &&
+        typeof row.day_zero === "string" &&
+        Number.isFinite(Date.parse(row.day_zero)) &&
         Number.isFinite(row.clock_offset)
       )
         return {
           notModified: true,
           dataMode: row.data_mode,
           revision: knownRevision,
-          now: engine.worldNow({ startedAt: row.started_at, state: { clockOffsetMinutes: row.clock_offset } }, at),
+          now: engine.worldNow({ dayZero: row.day_zero, state: { clockOffsetMinutes: row.clock_offset } }, at),
         };
       return { notModified: false, snapshot: await read(actorId, view) };
     },
diff --git a/backend/ward-flow/postgres.test.mjs b/backend/ward-flow/postgres.test.mjs
index d94f99d453..b9792b4fd5 100644
--- a/backend/ward-flow/postgres.test.mjs
+++ b/backend/ward-flow/postgres.test.mjs
@@ -264,8 +264,10 @@ test("real PostgreSQL: shared commands, last-bed contention, retry, audit and re
       unit.id === unitId
         ? {
             ...unit,
-            empty: { ...unit.empty, value: 6, confirmedAt: 642 },
-            allocatable: { ...unit.allocatable, value: 6, confirmedAt: 642 },
+            // Confirmed at the world's own now: under D-150 the shared clock is real Perth time,
+            // so a fixed 10:42 is hours stale at this test's 18:00 Perth.
+            empty: { ...unit.empty, value: 6, confirmedAt: seed.now },
+            allocatable: { ...unit.allocatable, value: 6, confirmedAt: seed.now },
             allocatableLocked: 6,
           }
         : unit,
@@ -338,7 +340,7 @@ test("real PostgreSQL: shared commands, last-bed contention, retry, audit and re
       const restored = await createWorkspaceStore(pool, { workspaceId, engine, clock: () => at }).read(actorB);
       assert.equal(restored.revision, 2);
       assert.equal(restored.payload.state.movements.find((row) => row.id === winner.movement).stage, "pulled");
-      assert.equal(restored.payload.state.units.find((row) => row.id === unitId).allocatable.confirmedAt, 642);
+      assert.equal(restored.payload.state.units.find((row) => row.id === unitId).allocatable.confirmedAt, seed.now);
     });
     await t.test("audit entries cannot be changed or removed", async () => {
       await assert.rejects(
diff --git a/backend/ward-flow/security-headers.test.mjs b/backend/ward-flow/security-headers.test.mjs
new file mode 100644
index 0000000000..92e5199c4e
--- /dev/null
+++ b/backend/ward-flow/security-headers.test.mjs
@@ -0,0 +1,29 @@
+import assert from "node:assert/strict";
+import { request as httpRequest } from "node:http";
+import { test } from "node:test";
+import { listen } from "./server.mjs";
+
+test("live audit item 17: every backend reply sends no referrer, offers no feature and refuses no-cors embedding", async () => {
+  const server = listen(async () => Response.json({ ok: true }), { port: 0, host: "127.0.0.1" });
+  try {
+    await new Promise((resolve) => server.once("listening", resolve));
+    const port = /** @type {import("node:net").AddressInfo} */ (server.address()).port;
+    for (const method of ["GET", "DELETE"]) {
+      const headers = await new Promise((resolve, reject) => {
+        const req = httpRequest({ host: "127.0.0.1", port, path: "/healthz", method }, (res) => {
+          res.resume();
+          resolve(res.headers);
+        });
+        req.on("error", reject);
+        req.end();
+      });
+      assert.equal(headers["referrer-policy"], "no-referrer", method);
+      assert.equal(headers["permissions-policy"], "camera=(), microphone=(), geolocation=(), payment=()", method);
+      assert.equal(headers["cross-origin-resource-policy"], "same-origin", method);
+      // The existing P174 pair is still there.
+      assert.equal(headers["content-security-policy"], "default-src 'none'; frame-ancestors 'none'", method);
+    }
+  } finally {
+    await new Promise((resolve) => server.close(resolve));
+  }
+});
diff --git a/backend/ward-flow/server.mjs b/backend/ward-flow/server.mjs
index 781743b94e..69a415c3e4 100644
--- a/backend/ward-flow/server.mjs
+++ b/backend/ward-flow/server.mjs
@@ -18,11 +18,16 @@ const gzipAsync = promisify(gzip);
 const BODY_LIMIT = 1_048_576;
 /**
  * Audit P174: every backend reply is JSON, never a page, so it may not be framed or load anything,
- * and browsers keep to HTTPS for a year.
+ * and browsers keep to HTTPS for a year. Live audit item 17 (hardening only): no referrer leaves a
+ * reply, no browser feature is offered, and no other site may embed a reply without CORS (the
+ * site's own CORS reads are unaffected, as CORP applies only to no-cors loads).
  */
 export const BACKEND_SECURITY_HEADERS = Object.freeze({
   "strict-transport-security": "max-age=31536000; includeSubDomains",
   "content-security-policy": "default-src 'none'; frame-ancestors 'none'",
+  "referrer-policy": "no-referrer",
+  "permissions-policy": "camera=(), microphone=(), geolocation=(), payment=()",
+  "cross-origin-resource-policy": "same-origin",
 });
 /** Audit P177: the uptime monitor sends this header to see the database answer on `/healthz`. */
 export const UPTIME_TOKEN_HEADER = "x-ward-flow-uptime-token";
diff --git a/backend/ward-flow/shared-http.mjs b/backend/ward-flow/shared-http.mjs
index 60a40b6173..e103c7f127 100644
--- a/backend/ward-flow/shared-http.mjs
+++ b/backend/ward-flow/shared-http.mjs
@@ -53,6 +53,12 @@ const STEP_UP_PATHS = new Set([
 const WORKING_AS = "x-ward-working-as";
 /** "tv" when the desk is showing the bed meeting TV board, so the access log can say so (H-0731). */
 const SCREEN = "x-ward-screen";
+/**
+ * Live audit item 21: the roles whose desk opens the bed meeting TV board (`ROLE_SCREENS` has
+ * "bed-meeting" for these only; `tests/ward-live-audit-hardening.test.ts` keeps them in step). Any
+ * other desk's "tv" header is logged as the list it really is.
+ */
+const TV_BOARD_ROLES = new Set(["coordinator", "bed_manager", "ward"]);
 /** Messages the pg pool and the workspace store use when the database, not the code, failed. */
 const STORAGE_MESSAGES =
   /^(?:Connection terminated|timeout exceeded when trying to connect|Client has encountered a connection error|Cannot use a pool after calling end|Shared schema unavailable|Workspace data mode mismatch|Stored workspace is incompatible)/;
@@ -486,7 +492,7 @@ export function createSharedHandler({
         // unchanged poll sends none, so it is not logged, except on the TV board: a desk that moves
         // to the TV keeps showing the records it already holds, so the TV logs its own polls too
         // (the store logs at most once a window). A failed log write fails the read.
-        const tvScreen = request.headers.get(SCREEN) === "tv";
+        const tvScreen = request.headers.get(SCREEN) === "tv" && TV_BOARD_ROLES.has(view.access.role);
         const logListRead = async () => {
           if (view.access.role !== "executive" && store.logList) await store.logList(view, tvScreen ? "tv" : "list");
         };
diff --git a/backend/ward-flow/shared-http.test.mjs b/backend/ward-flow/shared-http.test.mjs
index 35debd4f2b..aca9d95433 100644
--- a/backend/ward-flow/shared-http.test.mjs
+++ b/backend/ward-flow/shared-http.test.mjs
@@ -1072,6 +1072,35 @@ test("the server logs each full read of a desk's list or TV board, and the TV's
   assert.equal((await failing(request())).status, 503);
 });
 
+test("live audit item 21: a desk whose role cannot open the TV board is logged as its list", async () => {
+  const logged = [];
+  const edView = { ...wardView, access: { role: "ed", scope: { kind: "ed", edIds: ["ed-a"] } } };
+  const { handler } = setup(other, "prototype", {
+    viewer: async () => edView,
+    logList: async (view, surface) => {
+      logged.push([view.access.role, surface]);
+      return true;
+    },
+  });
+  const tv = request();
+  tv.headers.set("x-ward-screen", "tv");
+  assert.equal((await handler(tv)).status, 200);
+  const { handler: ward } = setup(other, "prototype", {
+    viewer: async () => wardView,
+    logList: async (view, surface) => {
+      logged.push([view.access.role, surface]);
+      return true;
+    },
+  });
+  const wardTv = request();
+  wardTv.headers.set("x-ward-screen", "tv");
+  assert.equal((await ward(wardTv)).status, 200);
+  assert.deepEqual(logged, [
+    ["ed", "list"],
+    ["ward", "tv"],
+  ]);
+});
+
 test("a bootstrap coordinator past its end date has no role (H-0057)", async () => {
   const handler = createHandler({
     config: {
diff --git a/docs/FACTS.md b/docs/FACTS.md
index 135225891f..e6cab02034 100644
--- a/docs/FACTS.md
+++ b/docs/FACTS.md
@@ -13,8 +13,8 @@ green. Quote a fact instead of restating it, and it updates itself when the sour
 | `migration-count`   | 18                                          | Numbered database migrations                                                          | `backend/ward-flow/migrations/`                                    |
 | `ward-route-count`  | 61                                          | `page.tsx` routes under `/ward-flow`                                                  | `src/app/ward-flow/`                                               |
 | `app-route-count`   | 65                                          | Pages and route handlers: the Ward Flow routes plus sign-in and the `/mockups` digest | `src/app/ward-flow/, src/app/ward-flow-sign-in/, src/app/mockups/` |
-| `latest-decision`   | D-154                                       | Newest entry in the decision log                                                      | `docs/ward-flow/decisions.md`                                      |
-| `next-decision`     | D-155                                       | Number to use for the next decision                                                   | `docs/ward-flow/decisions.md`                                      |
+| `latest-decision`   | D-156                                       | Newest entry in the decision log                                                      | `docs/ward-flow/decisions.md`                                      |
+| `next-decision`     | D-157                                       | Number to use for the next decision                                                   | `docs/ward-flow/decisions.md`                                      |
 | `node-engine`       | >=24.22.1 <25                               | Supported Node.js range                                                               | `package.json`                                                     |
 | `backend-env-vars`  | 33 names, [listed below](#backend-env-vars) | Environment variables the shared backend reads                                        | `backend/ward-flow/*.mjs`                                          |
 
diff --git a/docs/script-budget-history/2026-11-11-pr1626-live-audit-fixes.md b/docs/script-budget-history/2026-11-11-pr1626-live-audit-fixes.md
new file mode 100644
index 0000000000..6de5d36ac5
--- /dev/null
+++ b/docs/script-budget-history/2026-11-11-pr1626-live-audit-fixes.md
@@ -0,0 +1,33 @@
+# 11 Nov 2026, Live audit fixes (PR #1626)
+
+Changed on top of `main` at `0b657ad` (after #1606 and #1608 merged). Each raise is under 5 KB, within the per-screen allowance in HOW-WE-WORK section 6:
+
+- Home `/ward-flow`: 587.7 to 588.2
+- Movement `/ward-flow/movements/WF-001`: 618.7 to 619.2
+- ED site `/ward-flow/ed/arm-ed`: 678.1 to 681.5
+
+Every other screen keeps `main`'s limit.
+
+Measured by hosted CI on head `4daa8a3` (job 130830721425), in KB: Home 587.9, Movement 618.9 and ED site 681.2. Each new limit is the measurement plus 0.3. `main` alone could not be built for comparison, so the whole overage counts against this PR. Before #1606 merged, this PR with `main` measured Home 585.1, Movement 617.2 and ED site 675.0 (job 130823967817), all inside the limits at the time.
+
+Why it changed: this PR adds the calm "Saving…" pill and its delayed warning, "Leave the demo" in the account and phone menus, the "Waiting to save" bed tile, the bed's closure History, the archive card's reason line and the Undo choices on the toast (D-148, D-149, D-151). Most of that is in the shared shell or the bed drawer, which the ED site page also loads. Merging #1606's ED referral flow on top grew the ED site page by a further 6.2 KB in the combined build, against 1.6 KB in #1606's own measurement.
+
+Trim tried: the toast's reason menu (`wf/toast-choices.tsx`) and the front-door holders were already moved out of the first load in this PR. No further trim was found without a measurement of `main` alone. The ED site raise is 3.4 KB over `main`'s limit, so any further growth there leaves 1.6 KB of the allowance.
+
+## After merging `main` at `02817bb` (#1632)
+
+`main` raised six of its own limits. This PR now keeps `main`'s value for every route and adds only its own raise over the old `main` at `0b657ad`, in KB: Home 588.3 to 588.8 (+0.5), Movement 619.0 to 619.5 (+0.5) and ED site 678.1 to 681.5 (+3.4). Every other route takes `main`'s limit unchanged. Hosted CI's measurement will show whether any can come down.
+
+Hosted CI on that merge (job 130851096719) measured, in KB: Referrals 594.5, Ward 625.9, Movement 619.6 and ED site 681.8, and `main` alone could not be built. Builds vary by a few tenths, so these four limits are now the measurement plus 0.5: Referrals 595.0 (+0.7 over `main`), Ward 626.4 (+1.0), Movement 620.1 (+1.1) and ED site 682.3 (+4.2), each within the 5 KB allowance. Home stays at 588.8 (+0.5) and every other route keeps `main`'s limit.
+
+## After the first-load trim (12 Nov 2026)
+
+The toast's fallback buttons and the ward bed drawer left the first load (the drawer was already
+closed at first paint; its inner sheet was already lazy). Local production measurement after that
+trim, in KB: Home 588.2, Referrals 594.3, Ward 623.6, Movement 619.4 and ED site 681.6. All nine
+budgeted routes sit inside the limits already on this branch. Ward is 1.8 KB inside `main`'s 625.4.
+The other limits can come down later (Home 588.8, Referrals 595.0, Movement 620.1, ED site 682.3).
+
+## After merging `main` at `0f2ce4d` (#1623)
+
+The merge with #1623 kept this PR's older values and so lowered four of `main`'s limits below what #1623 needed (Home, ED, Movement and Capacity), and hosted CI then failed Home (589.0 against 588.8) and Capacity (666.0 against 665.9). After the trim, hosted CI measured, in KB: Home 589.0, Referrals 593.5, ED 543.1, Ward 622.5, Movement 619.6, Capacity 666.0, ED site 678.1, Bed meeting 599.5 and Statistics 640.6, so every route but ED site fits `main`'s limits. This PR now takes `main`'s limit for every route and keeps one raise: ED site 678.1 to 678.6 (+0.5), because it measured exactly at `main`'s limit and builds vary by a few tenths. The earlier raises (Home, Referrals, Ward, Movement and ED site to 682.3) are no longer needed and are dropped.
diff --git a/docs/ward-flow/OWNER-RULINGS.md b/docs/ward-flow/OWNER-RULINGS.md
index b049f3bbb5..3de1aa1e96 100644
--- a/docs/ward-flow/OWNER-RULINGS.md
+++ b/docs/ward-flow/OWNER-RULINGS.md
@@ -9,7 +9,7 @@ Scanned `docs/ward-flow/decisions.md`, `docs/ward-flow/owner-*.md` and `docs/his
 One file matches `*owner*` but not `owner-*` and is deliberately excluded: `how-to-write-to-the-owner.md`
 — it is instructions for writing TO the owner, not a record of what he ruled.
 
-**712 rulings/items extracted, across 43 of 44 files.**
+**718 rulings/items extracted, across 43 of 44 files.**
 **0 file(s) UNPARSED** — no recognised ruling structure found; listed, not dropped. See below.
 **1 file(s) recorded as holding no ruling of their own**, each with its reason. See below.
 
@@ -32,7 +32,7 @@ line, in the order discovered — confirm which instance you mean before citing
 
 ---
 
-## ID index — 462 distinct IDs
+## ID index — 468 distinct IDs
 
 So an ID like `D-9` or `O-17.1` can be looked up directly, without knowing which file it lives in.
 Bare numbered rulings (files that number "1., 2., 3. …" with no owner-issued letter code) are
@@ -72,255 +72,261 @@ safe global key across 30 files.
 | `D-1` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-four-answers.md`:16 | D-1 · Legal forms: split the list in two |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:85 | D-1 — 🔴 The screen is called **Patient**, not "Patient Now" |
-| ↳ | `decisions.md`:179 | D-1. Ward Flow is local only, with no linked repository (Replaced by D-27) |
+| ↳ | `decisions.md`:185 | D-1. Ward Flow is local only, with no linked repository (Replaced by D-27) |
 | `D-2` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-four-answers.md`:57 | D-2 · Raise the three unbindable table thresholds |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:108 | D-2 — 🔴 Communication: BUILD IT. The system must be able to tell someone something. |
-| ↳ | `decisions.md`:189 | D-2. Railway is disconnected |
+| ↳ | `decisions.md`:195 | D-2. Railway is disconnected |
 | `D-3` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:215 | D-3 — 🔴 The 12px floor is ADOPTED. Screen by screen, not as a sweep. |
-| ↳ | `decisions.md`:200 | D-3. The PsychSift and Database code is being retired from Ward Flow |
+| ↳ | `decisions.md`:206 | D-3. The PsychSift and Database code is being retired from Ward Flow |
 | `D-3b` | `../history/archive/dated-notes/owner-decisions-2026-09-12-four-answers.md`:77 | D-3b · The data-conditional absence sweep is DEFERRED |
 | `D-4` ⚠️ **4 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-four-answers.md`:97 | D-4 · The deliberate sub-12px exception stands if its reasoning is sound |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:263 | D-4 · WARD LEAD RULING, not the owner's — the Access record's false assurance |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:390 | D-4 ADDENDUM, 2026-09-11 — 🔴 the OTHER half of that sentence, found by Lane C after the fix |
-| ↳ | `decisions.md`:208 | D-4. Synthetic patients only |
+| ↳ | `decisions.md`:214 | D-4. Synthetic patients only |
 | `D-5` ⚠️ **4 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-routing-and-nine-flags.md`:15 | D-5 · 🔴 A NEW STANDING RULE: PROTECTED-WORK DELETIONS COME TO WARD VERIFIER FIRST |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:340 | D-5 · WARD LEAD RULING, not the owner's — gender reaches BOTH bed gates or neither |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:431 | D-5 MEASUREMENT, 2026-09-11 — the wiring task handed back, and the arithmetic is starker than I expected |
-| ↳ | `decisions.md`:216 | D-5. Parallel threads in separate worktrees, folded one at a time |
+| ↳ | `decisions.md`:222 | D-5. Parallel threads in separate worktrees, folded one at a time |
 | `D-6` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-routing-and-nine-flags.md`:52 | D-6 · 🟢 THE `--t-0` COLLISION — amend the brief in the same change |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:472 | D-6 · WARD LEAD RULING — "Not recorded" and "Not yet recorded" are BOTH used, deliberately |
-| ↳ | `decisions.md`:227 | D-6. Aboriginal cultural safety review deferred |
+| ↳ | `decisions.md`:233 | D-6. Aboriginal cultural safety review deferred |
 | `D-7` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-routing-and-nine-flags.md`:72 | D-7 · 🟢 THE REMAINING SEVEN ARE FLAGGED TO WARD LEAD |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:499 | D-7 · WARD LEAD RULING — the Patient screen SHOWS gender, and the addition is logged as an addition |
-| ↳ | `decisions.md`:235 | D-7. The first four milestones, in this order |
+| ↳ | `decisions.md`:241 | D-7. The first four milestones, in this order |
 | `D-8` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-fold-and-authorisation.md`:9 | D-8 · 🔴 "FOLD INTO MAIN" ALWAYS MEANS THE LOCAL WARD FLOW LINE |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:545 | D-8 · WARD LEAD RULING — the announced marker says "invented NAMES", never "invented people" |
-| ↳ | `decisions.md`:247 | D-8. Josh's standing rulings, numbered R1 to R16, for every session and tool |
+| ↳ | `decisions.md`:253 | D-8. Josh's standing rulings, numbered R1 to R16, for every session and tool |
 | `D-9` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-fold-and-authorisation.md`:51 | D-9 · 🟢 THE MENTAL HEALTH ACT AUTHORISATION GATE IS OVERRIDABLE — with the owner's clinical reason |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:589 | D-9 · WARD LEAD RULING — the referral board's table MAY scroll sideways; the missing thing is the affordance |
-| ↳ | `decisions.md`:279 | D-9. Josh's rulings of 25 September, 11:43 to 12:00 (R17 to R21) |
+| ↳ | `decisions.md`:285 | D-9. Josh's rulings of 25 September, 11:43 to 12:00 (R17 to R21) |
 | `D-10` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-fold-and-authorisation.md`:91 | D-10 · ⏸️ THE SMALL-TEXT RAISE IS DEFERRED — with the triggers written down, because a deferral without one is a drop |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:618 | D-10 · WARD LEAD RULING — the overflow affordance is a SENTENCE first and a measured border second, not the standard's shade |
-| ↳ | `decisions.md`:293 | D-10. Gate build type check (R22) |
+| ↳ | `decisions.md`:299 | D-10. Gate build type check (R22) |
 | `D-11` ⚠️ **3 occurrences in 3 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-12-fold-and-authorisation.md`:129 | D-11 · 🔴 TWO LEDGERS IS CORRECT AND INTENDED — WARD FLOW TASKS GO ON THE WARD FLOW LEDGER, AND THE MAIN PROJECT'S IS DISREGARDED FOR THIS PROJECT |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:685 | D-11 · A-1 — the half-written referral history WARNS, and is never stored |
-| ↳ | `decisions.md`:302 | D-11. Rulings of 25 September, 12:41 (R23 to R25) |
+| ↳ | `decisions.md`:308 | D-11. Rulings of 25 September, 12:41 (R23 to R25) |
 | `D-12` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:704 | D-12 · A-2 — the referrer is the RECORDED SOURCE, and a person only if the record carries one |
-| ↳ | `decisions.md`:318 | D-12. Rulings of 25 September, 12:43 (R26 to R31) |
+| ↳ | `decisions.md`:324 | D-12. Rulings of 25 September, 12:43 (R26 to R31) |
 | `D-13` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:720 | D-13 · A-3 and A-4 — both resolve FOR THE CODE; the drawings change |
-| ↳ | `decisions.md`:337 | D-13. Tooling tests in batch gates (R32) |
+| ↳ | `decisions.md`:343 | D-13. Tooling tests in batch gates (R32) |
 | `D-14` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:739 | D-14 · A-6 and A-8 — ADD THE LINK, AND MAKE THE GUARD ENFORCE IN THE SAME CHANGE. Never one without the other. |
-| ↳ | `decisions.md`:347 | D-14. Standing defaults: decide small things without asking |
+| ↳ | `decisions.md`:353 | D-14. Standing defaults: decide small things without asking |
 | `D-15` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:778 | D-15 · A-7 — the figure NAMES ITS OWN CLOCK, or it does not ship |
-| ↳ | `decisions.md`:359 | D-15. Rulings of 25 September, 13:26 (R33 to R35) |
+| ↳ | `decisions.md`:365 | D-15. Rulings of 25 September, 13:26 (R33 to R35) |
 | `D-16` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:799 | D-16 · WARD LEAD RULING — the unwired primary actions use §8.6's EXISTING sentence; nothing new is invented |
-| ↳ | `decisions.md`:372 | D-16. Legal overrides and form receipts, 25 September 13:51 UTC |
+| ↳ | `decisions.md`:378 | D-16. Legal overrides and form receipts, 25 September 13:51 UTC |
 | `D-17` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:843 | D-17 · WARD LEAD RULING — A-8: FD-23 wins. The Patient screen never shows where else a patient has been. |
-| ↳ | `decisions.md`:385 | D-17. Morning roll-up time is Josh's own default (25 September) |
+| ↳ | `decisions.md`:391 | D-17. Morning roll-up time is Josh's own default (25 September) |
 | `D-18` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:878 | D-18 · WARD LEAD RULING — the referral query contract carries MODEL values; and `gp` is a question for the owner, not a mapping for me |
-| ↳ | `decisions.md`:396 | D-18. The privacy lock stops saving only for typed text (25 September) |
+| ↳ | `decisions.md`:402 | D-18. The privacy lock stops saving only for typed text (25 September) |
 | `D-19` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:922 | D-19 · WARD LEAD RULING — "something is already open for this person" is PERMITTED; "where" never is |
-| ↳ | `decisions.md`:407 | D-19. Rulings of 25 September, evening (walkthrough, leave beds, PsychSift, gender display) |
+| ↳ | `decisions.md`:413 | D-19. Rulings of 25 September, evening (walkthrough, leave beds, PsychSift, gender display) |
 | `D-20` ⚠️ **3 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:967 | D-20 · WARD LEAD RULING — the drawing wins; the vocabulary anchor was never the heading |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1010 | D-20-REVISED · the drawing renames BOTH, so neither side is taken whole |
-| ↳ | `decisions.md`:437 | D-20. One high-contrast colour check retired (26 September) |
+| ↳ | `decisions.md`:443 | D-20. One high-contrast colour check retired (26 September) |
 | `D-21` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1058 | D-21 · WARD LEAD RULING — tasks 10 and 12 are CLOSED, not deferred, and not built as callerless modules |
-| ↳ | `decisions.md`:450 | D-21. Coordinator bed board: all nine recommended answers (26 September) |
+| ↳ | `decisions.md`:456 | D-21. Coordinator bed board: all nine recommended answers (26 September) |
 | `D-22` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1084 | D-22 · SHAPE 2 — the landmark label and the heading stop being two strings |
-| ↳ | `decisions.md`:462 | D-22. No legal limits in hour rules; the rest are labelled defaults (26 September) |
+| ↳ | `decisions.md`:468 | D-22. No legal limits in hour rules; the rest are labelled defaults (26 September) |
 | `D-23` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1121 | D-23 · The bed board passes an empty leave-bed list into three capacity figures, and says nothing |
-| ↳ | `decisions.md`:478 | D-23. Leave-bed fields kept; patient search stops matching by ward (26 September) |
+| ↳ | `decisions.md`:484 | D-23. Leave-bed fields kept; patient search stops matching by ward (26 September) |
 | `D-24` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1142 | D-24 · The raw `1.2` line-height — token it, and accept that community no longer matches |
-| ↳ | `decisions.md`:492 | D-24. Hour-rules morning list: all A (26 September) |
+| ↳ | `decisions.md`:498 | D-24. Hour-rules morning list: all A (26 September) |
 | `D-25` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1161 | D-25 · Command's `deadlineLine` sentence is not built — and this DEFERS the R-5 question rather than answering it |
-| ↳ | `decisions.md`:516 | D-25. The lone-patient check counts free beds on both matching paths (26 September) |
+| ↳ | `decisions.md`:522 | D-25. The lone-patient check counts free beds on both matching paths (26 September) |
 | `D-26` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1184 | D-26 · `edPressure` becomes a projection of `edHomeSummaries` — the two screens stop being able to disagree |
-| ↳ | `decisions.md`:524 | D-26. Select fold checks by changed risk (27 September) |
+| ↳ | `decisions.md`:530 | D-26. Select fold checks by changed risk (27 September) |
 | `D-27` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1213 | D-27 · The word for a free bed is READY — and the ruling is about the WORD, not the identifier |
-| ↳ | `decisions.md`:542 | D-27. Ward Flow uses its dedicated repository (28 September) |
-| `D-28` | `decisions.md`:555 | D-28. Design Modernization & Anti-Box Architecture (30 September 2026) |
-| `D-29` | `decisions.md`:569 | D-29. Act time limits shown as a labelled synthetic demo (4 October 2026) |
+| ↳ | `decisions.md`:548 | D-27. Ward Flow uses its dedicated repository (28 September) |
+| `D-28` | `decisions.md`:561 | D-28. Design Modernization & Anti-Box Architecture (30 September 2026) |
+| `D-29` | `decisions.md`:575 | D-29. Act time limits shown as a labelled synthetic demo (4 October 2026) |
 | `D-30` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1238 | D-30 · `Unit.forensic` is a WARD flag, and every rendered string says so |
-| ↳ | `decisions.md`:584 | D-30. Central Coordinator Approval for Inter-Ward Bed Transfers (6 October 2026) |
+| ↳ | `decisions.md`:590 | D-30. Central Coordinator Approval for Inter-Ward Bed Transfers (6 October 2026) |
 | `D-31` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1367 | D-31 · The plan's disposition — delete one half, re-derive the other |
-| ↳ | `decisions.md`:591 | D-31. Gender-Diverse Bed Placement Policy & Clinical Override Safety (6 October 2026) |
+| ↳ | `decisions.md`:597 | D-31. Gender-Diverse Bed Placement Policy & Clinical Override Safety (6 October 2026) |
 | `D-32` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1289 | D-32 · D-6 is restated: ONE WORDING PER STATE, and the states are named |
-| ↳ | `decisions.md`:598 | D-32. FIFO Waiting Time with Clinical Triage Badging vs Algorithmic Urgency Sorting (6 October 2026) |
+| ↳ | `decisions.md`:604 | D-32. FIFO Waiting Time with Clinical Triage Badging vs Algorithmic Urgency Sorting (6 October 2026) |
 | `D-33` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1322 | D-33 · "Nothing outstanding" does three jobs, and only one of them may keep the words |
-| ↳ | `decisions.md`:605 | D-33. Separation of Local Ward Shift Notes from Statewide Coordinator Telemetry (6 October 2026) |
+| ↳ | `decisions.md`:611 | D-33. Separation of Local Ward Shift Notes from Statewide Coordinator Telemetry (6 October 2026) |
 | `D-34` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1347 | D-34 · A hypothetical destination row may not use obligation vocabulary at all |
-| ↳ | `decisions.md`:612 | D-34. Acute Medical Deterioration Bed Release and Escalation Protocol (6 October 2026) |
+| ↳ | `decisions.md`:618 | D-34. Acute Medical Deterioration Bed Release and Escalation Protocol (6 October 2026) |
 | `D-35` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1388 | D-35 · The ED pressure strip does not narrow to the selected service, and #6 is CLOSED |
-| ↳ | `decisions.md`:619 | D-35. Deferral of Regional Multi-Leg Transport & RFDS Repatriation (6 October 2026) |
+| ↳ | `decisions.md`:625 | D-35. Deferral of Regional Multi-Leg Transport & RFDS Repatriation (6 October 2026) |
 | `D-36` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1405 | D-36 · _Referrals into this ward_ / _into the team_ — PRESENTATION, with a condition |
-| ↳ | `decisions.md`:626 | D-36. Affirmation of External Governance & Clinical Safety Hard Gates (6 October 2026) (Replaced by D-87) |
+| ↳ | `decisions.md`:632 | D-36. Affirmation of External Governance & Clinical Safety Hard Gates (6 October 2026) (Replaced by D-87) |
 | `D-37` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1411 | D-37 · _Clinically ready, not yet gone_ — PRESENTATION, and the heading must name its subject |
-| ↳ | `decisions.md`:641 | D-37. External Governance Hard Gate Operational Postures & Resolution Roadmap (6 October 2026) (Replaced by D-87) |
+| ↳ | `decisions.md`:647 | D-37. External Governance Hard Gate Operational Postures & Resolution Roadmap (6 October 2026) (Replaced by D-87) |
 | `D-38` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1417 | D-38 · _People currently in a hospital bed_ on community team statistics — an aggregate that identifies at small N |
-| ↳ | `decisions.md`:668 | D-38. Leave, absent without leave and CTO on the Patient page (9 October 2026) |
+| ↳ | `decisions.md`:674 | D-38. Leave, absent without leave and CTO on the Patient page (9 October 2026) |
 | `D-39` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1437 | D-39 · _Contacts_ and _Time to first contact_ — HELD, build neither |
-| ↳ | `decisions.md`:686 | D-39. Patients are identified by UMRN, never by a WF number (9 October 2026) |
+| ↳ | `decisions.md`:692 | D-39. Patients are identified by UMRN, never by a WF number (9 October 2026) |
 | `D-40` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1445 | D-40 · An empty check array never claims reconciliation — on either shell surface |
-| ↳ | `decisions.md`:730 | D-40. A second community treatment order keeps the first (9 October 2026) |
+| ↳ | `decisions.md`:736 | D-40. A second community treatment order keeps the first (9 October 2026) |
 | `D-41` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1478 | D-41 · `corridorCounts` is extended, and its POPULATION changes |
-| ↳ | `decisions.md`:741 | D-41. Delays board filters narrow the table and state the hidden count (9 October 2026) |
+| ↳ | `decisions.md`:747 | D-41. Delays board filters narrow the table and state the hidden count (9 October 2026) |
 | `D-42` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1490 | D-42 · _Referrals into this ward_ renders bare counts. No share. |
-| ↳ | `decisions.md`:754 | D-42. 12px typography floor with no uppercase exception reaffirmed in Design System v9 (9–10 October 2026) |
+| ↳ | `decisions.md`:760 | D-42. 12px typography floor with no uppercase exception reaffirmed in Design System v9 (9–10 October 2026) |
 | `D-43` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1724 | D-43 · Ward Lead ruling — the bed board's ordinal contradiction is a LANE TASK |
-| ↳ | `decisions.md`:760 | D-43. Colour lives in glyphs and the hero; red means act now with a thin 1px edge, never a fill (9 October 2026) |
+| ↳ | `decisions.md`:766 | D-43. Colour lives in glyphs and the hero; red means act now with a thin 1px edge, never a fill (9 October 2026) |
 | `D-44` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1791 | D-44 · The community scope note is reworded and the comparison panel stays |
-| ↳ | `decisions.md`:767 | D-44. Compact sizing, white cards and smaller text retained over expression-test card tints (9 October 2026) |
+| ↳ | `decisions.md`:773 | D-44. Compact sizing, white cards and smaller text retained over expression-test card tints (9 October 2026) |
 | `D-45` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1803 | D-45 · 🔴 THE SEED DECISION — the fixture gains BOTH, as ONE change, after the statistics screens |
-| ↳ | `decisions.md`:773 | D-45. Phone is its own 390×844 design, never a desktop reflow (9 October 2026) |
+| ↳ | `decisions.md`:779 | D-45. Phone is its own 390×844 design, never a desktop reflow (9 October 2026) |
 | `D-46` ⚠️ **2 occurrences in 2 files — not unique** | | |
 | ↳ | `../history/archive/dated-notes/owner-decisions-2026-09-1x.md`:1984 | D-46 · A guard that fails whenever the machine is busy |
-| ↳ | `decisions.md`:780 | D-46. Every page has a focal part, a part of its own, a page-specific hero and command-bar action rules (9 October 2026) |
-| `D-47` | `decisions.md`:786 | D-47. Glass stays about 80% opaque with the top sheen kept (10 October 2026) |
-| `D-48` | `decisions.md`:792 | D-48. Figures stay in Geist Mono with tabular digits while chart axes use Geist Sans (10 October 2026) |
-| `D-49` | `decisions.md`:798 | D-49. Ward Flow 44px default row target (dense 36px, touch 52px) vs retired 48px PsychSift tap knob (10 October 2026) |
-| `D-50` | `decisions.md`:804 | D-50. Neutral T1 urgency pill vs Form 1A amber statutory warning badge (10 October 2026) |
-| `D-51` | `decisions.md`:810 | D-51. Delays filters hide rows with a stated hidden count while other queues highlight by default (10 October 2026) |
-| `D-52` | `decisions.md`:817 | D-52. 10 October page review rulings: time-axis overdue zone, 15px/20px strip figures, 8px people pips and incremental shared parts (10 October 2026) |
-| `D-53` | `decisions.md`:823 | D-53. Elevate design language and Glare mode adopted for Design System v9 (10 October 2026) |
-| `D-54` | `decisions.md`:830 | D-54. Tier time thresholds remain synthetic demo values requiring clinical sign-off (10 October 2026) |
-| `D-55` | `decisions.md`:838 | D-55. Supabase is Ward Flow's database and sign-in provider, and Azure is retired (15 October 2026) |
-| `D-56` | `decisions.md`:844 | D-56. Josh signs the clinical values that have a recorded source, for the prototype (15 October 2026) |
-| `D-57` | `decisions.md`:850 | D-57. Twenty Top 25 items move from the showcase into the real screens, each behind its own flag (15 October 2026) |
-| `D-58` | `decisions.md`:877 | D-58. Josh signs three more clinical values that have a national source, for the prototype (15 October 2026) |
-| `D-59` | `decisions.md`:883 | D-59. Each role sees only what it needs, from one access table (15 October 2026) |
-| `D-60` | `decisions.md`:889 | D-60. Criteria led discharge, for voluntary patients only (15 October 2026) |
-| `D-61` | `decisions.md`:898 | D-61. Tasks and Alerts are one queue called Alerts (16 October 2026) |
-| `D-62` | `decisions.md`:904 | D-62. The one Alerts queue is signed off and its flag removed (16 October 2026) |
-| `D-63` | `decisions.md`:910 | D-63. Josh signs the remaining clinical values and the criteria list, for the prototype (16 October 2026) |
-| `D-64` | `decisions.md`:918 | D-64. Criteria led discharge shows on the boards and warns at departure (16 October 2026) |
-| `D-65` | `decisions.md`:925 | D-65. Criteria led discharge on in production, typed patient specific criteria, and the AWOL bed hold review paused (17 October 2026) |
-| `D-66` | `decisions.md`:941 | D-66. Granted roles work without a second approval (17 October 2026) |
-| `D-67` | `decisions.md`:949 | D-67. Recover synthetic form drafts within the browser session (17 October 2026) |
-| `D-68` | `decisions.md`:956 | D-68. Bed meeting TV content and access (19 October 2026) |
-| `D-69` | `decisions.md`:964 | D-69. A referral with no legal status: "Needs an involuntary-capable bed until status is set." (20 October 2026) |
-| `D-70` | `decisions.md`:971 | D-70. No computed Mental Health Act periods: show only the recorded due time (20 October 2026) |
-| `D-71` | `decisions.md`:977 | D-71. Audit 1 clinical safety fixes: no suggested wards, wait-order queues, recorded facts only (20 October 2026) |
-| `D-72` | `decisions.md`:990 | D-72. Seven product decisions for the 21 October fix plan (21 October 2026) |
-| `D-73` | `decisions.md`:1006 | D-73. Batch merge safeguards (21 October 2026) |
-| `D-74` | `decisions.md`:1022 | D-74. Owner answers to the 21 October open questions (21 October 2026) |
-| `D-75` | `decisions.md`:1043 | D-75. UX audit follow-up, page caching, community gaps and the extra-travel bed hold (21 October 2026) |
-| `D-76` | `decisions.md`:1056 | D-76. Community referral gaps: the full move journey and asking more wards (21 October 2026) |
-| `D-77` | `decisions.md`:1065 | D-77. The ten bigger UX changes approved for build (22 October 2026) |
-| `D-78` | `decisions.md`:1085 | D-78. One decline list for wards and coordinators (22 October 2026) |
-| `D-79` | `decisions.md`:1096 | D-79. Wards see the full referral, with name and UMRN, before they answer (23 October 2026) |
-| `D-80` | `decisions.md`:1107 | D-80. Role access plan version 2: all 17 recommendations (23 October 2026) |
-| `D-81` | `decisions.md`:1122 | D-81. Pulled, with a pull time limit, for a bed kept for an incoming patient (24 October 2026) |
-| `D-82` | `decisions.md`:1129 | D-82. A PR may raise a phone size limit by up to 5 KB per screen without asking (26 October 2026) |
-| `D-83` | `decisions.md`:1137 | D-83. Patient names stay in full on every screen, copy and TV; privacy work must not make the app less useful (26 October 2026) |
-| `D-84` | `decisions.md`:1148 | D-84. The live app stays on Railway Singapore for now, and there is no server-side TV account yet (26 October 2026) |
-| `D-85` | `decisions.md`:1156 | D-85. "Held" only for a bed kept for its own patient; "pulled" for an incoming bed; "held up" for a delay (26 October 2026) |
-| `D-86` | `decisions.md`:1163 | D-86. No second approver for role grants, at pilot or otherwise (27 October 2026) |
-| `D-87` | `decisions.md`:1170 | D-87. D-36 and D-37 are replaced by the real-data gate (27 October 2026) |
-| `D-88` | `decisions.md`:1182 | D-88. The public demo opens with a demo code once the front door is on (27 October 2026) |
-| `D-89` | `decisions.md`:1189 | D-89. Redesign mock-up copies of large screens may pass the 1,500-line cap (30 October 2026) |
-| `D-90` | `decisions.md`:1197 | D-90. Help gets How do I…, Show me runs everywhere, and Help is built without a separate mock-up step (30 October 2026) |
-| `D-91` | `decisions.md`:1208 | D-91. One design home for the redesign, and Josh's answers on Help, Settings, search and notifications (31 October 2026) |
-| `D-92` | `decisions.md`:1243 | D-92. Help goes live before its mock-up review, one search box on Capacity, and referral rows on Home open the panel (31 October 2026) |
-| `D-93` | `decisions.md`:1253 | D-93. Legal form times show only as typed, never as a countdown (31 October 2026) |
-| `D-94` | `decisions.md`:1261 | D-94. Design rulings of 31 October 2026 |
-| `D-95` | `decisions.md`:1274 | D-95. One page scroll, and a click outside closes a drawer (3 November 2026) |
-| `D-96` | `decisions.md`:1284 | D-96. A named bed is pulled, and its patient is not also waiting (8 November 2026) |
-| `D-97` | `decisions.md`:1294 | D-97. Owner answers on seven open items: N21, N25, N26, N29, N40, N41 and WF-B008 (8 November 2026) |
-| `D-98` | `decisions.md`:1307 | D-98. Friction pass: Quick bar, Patient peek and Ward peek (8 November 2026) |
-| `D-99` | `decisions.md`:1316 | D-99. "Real details" in the referral drawer's sample patients (25 September 2026) |
-| `D-100` | `decisions.md`:1322 | D-100. "Under a form" means one rule everywhere (9 November 2026) |
-| `D-101` | `decisions.md`:1329 | D-101. Clinically ready for discharge, with one delay reason (9 November 2026) |
-| `D-102` | `decisions.md`:1338 | D-102. Report-a-problem screenshots are blurred, and patient-table exports carry no names (9 November 2026) |
-| `D-103` | `decisions.md`:1347 | D-103. Any coordinator on shift may mark a bed override reviewed (9 November 2026) |
-| `D-104` | `decisions.md`:1354 | D-104. Care plans and safety flags: five defaults (9 November 2026) |
-| `D-105` | `decisions.md`:1366 | D-105. Optional clerk details on the patient record (8 November 2026) |
-| `D-106` | `decisions.md`:1373 | D-106. Clinical values from the 9 November 2026 documentation audit (9 November 2026) |
-| `D-107` | `decisions.md`:1385 | D-107. Working rules and documentation from the 9 November 2026 audit (9 November 2026) |
-| `D-108` | `decisions.md`:1399 | D-108. Six bed-flow features: keep D-93 and D-72, ED long-wait next steps (9 November 2026) |
-| `D-109` | `decisions.md`:1408 | D-109. Home's bed alert line tests the whole number shown (9 November 2026) |
-| `D-110` | `decisions.md`:1415 | D-110. ED and referral flow: neutral fit line, clearance timing and alternatives to admission (9 November 2026) |
-| `D-111` | `decisions.md`:1425 | D-111. Review and audit plan: first guards and four open answers (9 November 2026) |
-| `D-112` | `decisions.md`:1439 | D-112. Phone bottom bar: the floating bar (9 November 2026) |
-| `D-113` | `decisions.md`:1448 | D-113. Second patient identifier on accept and Mark done; no initials search (9 November 2026) |
-| `D-114` | `decisions.md`:1458 | D-114. Allow pull_request_target for three workflows only (9 November 2026) |
-| `D-115` | `decisions.md`:1466 | D-115. One count on every screen, and a missing patient shown everywhere (9 November 2026) |
-| `D-116` | `decisions.md`:1480 | D-116. Page tops: the PR #1581 recommendations stand (9 November 2026) |
-| `D-117` | `decisions.md`:1497 | D-117. Care plans follow-up: frequent presenter count, tribunal date and ward flags (10 November 2026) |
-| `D-118` | `decisions.md`:1506 | D-118. Page tops: Referrals and Ward phone limits up to 8 KB above main (10 November 2026) |
-| `D-119` | `decisions.md`:1512 | D-119. Page tops: phone limits raised to measured sizes, trim after merge (10 November 2026) |
-| `D-120` | `decisions.md`:1519 | D-120. Discharge and capacity values: pull limit, transport delay and discharge date slip (9 November 2026) |
-| `D-121` | `decisions.md`:1528 | D-121. Working rules, guards and your PC from the 10 November 2026 audit (10 November 2026) |
-| `D-122` | `decisions.md`:1542 | D-122. Clinical and privacy answers from the 10 November 2026 audit (10 November 2026) |
-| `D-123` | `decisions.md`:1555 | D-123. Master audit list answers: two clinical fixes and five working rules (10 November 2026) |
-| `D-124` | `decisions.md`:1569 | D-124. Offline saves whose record changed are refused and shown (10 November 2026) |
-| `D-125` | `decisions.md`:1576 | D-125. Top 10 audit follow-ups approved (10 November 2026) |
-| `D-126` | `decisions.md`:1588 | D-126. Ranked lists: neutral orders approved (10 November 2026) |
-| `D-127` | `decisions.md`:1607 | D-127. Neutral wording for a community treatment order at arrival (10 November 2026) |
-| `D-128` | `decisions.md`:1614 | D-128. Final master audit: nine answers (10 November 2026) |
-| `D-129` | `decisions.md`:1629 | D-129. Master audit findings: every recommendation approved (10 November 2026) |
-| `D-130` | `decisions.md`:1679 | D-130. Audit follow-ups: every remaining recommendation approved (10 November 2026) |
-| `D-131` | `decisions.md`:1695 | D-131. Hard-case demo data allowed, and the movement diagram follows the engine (10 November 2026) |
-| `D-132` | `decisions.md`:1704 | D-132. Audit fixes group 1: docs and CI guards (10 November 2026) |
-| `D-133` | `decisions.md`:1714 | D-133. Batch 1 (ED and referral flow): three answers (10 November 2026) |
-| `D-134` | `decisions.md`:1724 | D-134. Ward arrival and beds batch: how to hold, advocate line, night list and the feature freeze (10 November 2026) |
-| `D-135` | `decisions.md`:1747 | D-135. Batch 4, outages and pilot control: pack age and plan answers (10 November 2026) |
-| `D-136` | `decisions.md`:1756 | D-136. Feature batch 3 (shift change and follow-up): two signed values (10 November 2026) |
-| `D-137` | `decisions.md`:1768 | D-137. Feature build batch 5: count leak first, TV change mark and QR library (10 November 2026) |
-| `D-138` | `decisions.md`:1784 | D-138. Phone alert urgency by kind (10 November 2026) |
-| `D-139` | `decisions.md`:1790 | D-139. Phone Statistics ward list A to Z, and leave return times as typed (10 November 2026) |
-| `D-140` | `decisions.md`:1800 | D-140. Feature list adopted, and Wave 1 begins (10 November 2026) |
-| `D-141` | `decisions.md`:1813 | D-141. Batch 1 (ED and referral flow) design approved, with eleven answers (11 November 2026) |
-| `D-142` | `decisions.md`:1831 | D-142. Batch 4: design review and all twelve answers approved, D-80 amended for site features (11 November 2026) |
-| `D-143` | `decisions.md`:1843 | D-143. MHERT is MHERL in the glossary; SMHMR deferred (11 November 2026) |
-| `D-144` | `decisions.md`:1851 | D-144. Chip rows move only sideways on a phone (11 November 2026) |
-| `D-145` | `decisions.md`:1857 | D-145. Repository review: fixes, features and code health approved (11 November 2026) |
-| `D-146` | `decisions.md`:1871 | D-146. Performance audit fixes and the phone speed target (11 November 2026) |
-| `D-147` | `decisions.md`:1877 | D-147. Demo-code tries keep per-address keying until a trusted proxy is set (11 November 2026) |
-| `D-152` | `decisions.md`:1883 | D-152. Returned to ED prompt sees every return in shared mode (11 November 2026) |
-| `D-153` | `decisions.md`:1891 | D-153. Keep the drawn-time settle check, and defer a separate agent GitHub identity (11 November 2026) |
-| `D-154` | `decisions.md`:1899 | D-154. The community desk's ED heads-up reads a narrow scoped list (11 November 2026) |
+| ↳ | `decisions.md`:786 | D-46. Every page has a focal part, a part of its own, a page-specific hero and command-bar action rules (9 October 2026) |
+| `D-47` | `decisions.md`:792 | D-47. Glass stays about 80% opaque with the top sheen kept (10 October 2026) |
+| `D-48` | `decisions.md`:798 | D-48. Figures stay in Geist Mono with tabular digits while chart axes use Geist Sans (10 October 2026) |
+| `D-49` | `decisions.md`:804 | D-49. Ward Flow 44px default row target (dense 36px, touch 52px) vs retired 48px PsychSift tap knob (10 October 2026) |
+| `D-50` | `decisions.md`:810 | D-50. Neutral T1 urgency pill vs Form 1A amber statutory warning badge (10 October 2026) |
+| `D-51` | `decisions.md`:816 | D-51. Delays filters hide rows with a stated hidden count while other queues highlight by default (10 October 2026) |
+| `D-52` | `decisions.md`:823 | D-52. 10 October page review rulings: time-axis overdue zone, 15px/20px strip figures, 8px people pips and incremental shared parts (10 October 2026) |
+| `D-53` | `decisions.md`:829 | D-53. Elevate design language and Glare mode adopted for Design System v9 (10 October 2026) |
+| `D-54` | `decisions.md`:836 | D-54. Tier time thresholds remain synthetic demo values requiring clinical sign-off (10 October 2026) |
+| `D-55` | `decisions.md`:844 | D-55. Supabase is Ward Flow's database and sign-in provider, and Azure is retired (15 October 2026) |
+| `D-56` | `decisions.md`:850 | D-56. Josh signs the clinical values that have a recorded source, for the prototype (15 October 2026) |
+| `D-57` | `decisions.md`:856 | D-57. Twenty Top 25 items move from the showcase into the real screens, each behind its own flag (15 October 2026) |
+| `D-58` | `decisions.md`:883 | D-58. Josh signs three more clinical values that have a national source, for the prototype (15 October 2026) |
+| `D-59` | `decisions.md`:889 | D-59. Each role sees only what it needs, from one access table (15 October 2026) |
+| `D-60` | `decisions.md`:895 | D-60. Criteria led discharge, for voluntary patients only (15 October 2026) |
+| `D-61` | `decisions.md`:904 | D-61. Tasks and Alerts are one queue called Alerts (16 October 2026) |
+| `D-62` | `decisions.md`:910 | D-62. The one Alerts queue is signed off and its flag removed (16 October 2026) |
+| `D-63` | `decisions.md`:916 | D-63. Josh signs the remaining clinical values and the criteria list, for the prototype (16 October 2026) |
+| `D-64` | `decisions.md`:924 | D-64. Criteria led discharge shows on the boards and warns at departure (16 October 2026) |
+| `D-65` | `decisions.md`:931 | D-65. Criteria led discharge on in production, typed patient specific criteria, and the AWOL bed hold review paused (17 October 2026) |
+| `D-66` | `decisions.md`:947 | D-66. Granted roles work without a second approval (17 October 2026) |
+| `D-67` | `decisions.md`:955 | D-67. Recover synthetic form drafts within the browser session (17 October 2026) |
+| `D-68` | `decisions.md`:962 | D-68. Bed meeting TV content and access (19 October 2026) |
+| `D-69` | `decisions.md`:970 | D-69. A referral with no legal status: "Needs an involuntary-capable bed until status is set." (20 October 2026) |
+| `D-70` | `decisions.md`:977 | D-70. No computed Mental Health Act periods: show only the recorded due time (20 October 2026) |
+| `D-71` | `decisions.md`:983 | D-71. Audit 1 clinical safety fixes: no suggested wards, wait-order queues, recorded facts only (20 October 2026) |
+| `D-72` | `decisions.md`:996 | D-72. Seven product decisions for the 21 October fix plan (21 October 2026) |
+| `D-73` | `decisions.md`:1012 | D-73. Batch merge safeguards (21 October 2026) |
+| `D-74` | `decisions.md`:1028 | D-74. Owner answers to the 21 October open questions (21 October 2026) |
+| `D-75` | `decisions.md`:1049 | D-75. UX audit follow-up, page caching, community gaps and the extra-travel bed hold (21 October 2026) |
+| `D-76` | `decisions.md`:1062 | D-76. Community referral gaps: the full move journey and asking more wards (21 October 2026) |
+| `D-77` | `decisions.md`:1071 | D-77. The ten bigger UX changes approved for build (22 October 2026) |
+| `D-78` | `decisions.md`:1091 | D-78. One decline list for wards and coordinators (22 October 2026) |
+| `D-79` | `decisions.md`:1102 | D-79. Wards see the full referral, with name and UMRN, before they answer (23 October 2026) |
+| `D-80` | `decisions.md`:1113 | D-80. Role access plan version 2: all 17 recommendations (23 October 2026) |
+| `D-81` | `decisions.md`:1128 | D-81. Pulled, with a pull time limit, for a bed kept for an incoming patient (24 October 2026) |
+| `D-82` | `decisions.md`:1135 | D-82. A PR may raise a phone size limit by up to 5 KB per screen without asking (26 October 2026) |
+| `D-83` | `decisions.md`:1143 | D-83. Patient names stay in full on every screen, copy and TV; privacy work must not make the app less useful (26 October 2026) |
+| `D-84` | `decisions.md`:1154 | D-84. The live app stays on Railway Singapore for now, and there is no server-side TV account yet (26 October 2026) |
+| `D-85` | `decisions.md`:1162 | D-85. "Held" only for a bed kept for its own patient; "pulled" for an incoming bed; "held up" for a delay (26 October 2026) |
+| `D-86` | `decisions.md`:1169 | D-86. No second approver for role grants, at pilot or otherwise (27 October 2026) |
+| `D-87` | `decisions.md`:1176 | D-87. D-36 and D-37 are replaced by the real-data gate (27 October 2026) |
+| `D-88` | `decisions.md`:1188 | D-88. The public demo opens with a demo code once the front door is on (27 October 2026) |
+| `D-89` | `decisions.md`:1195 | D-89. Redesign mock-up copies of large screens may pass the 1,500-line cap (30 October 2026) |
+| `D-90` | `decisions.md`:1203 | D-90. Help gets How do I…, Show me runs everywhere, and Help is built without a separate mock-up step (30 October 2026) |
+| `D-91` | `decisions.md`:1214 | D-91. One design home for the redesign, and Josh's answers on Help, Settings, search and notifications (31 October 2026) |
+| `D-92` | `decisions.md`:1249 | D-92. Help goes live before its mock-up review, one search box on Capacity, and referral rows on Home open the panel (31 October 2026) |
+| `D-93` | `decisions.md`:1259 | D-93. Legal form times show only as typed, never as a countdown (31 October 2026) |
+| `D-94` | `decisions.md`:1267 | D-94. Design rulings of 31 October 2026 |
+| `D-95` | `decisions.md`:1280 | D-95. One page scroll, and a click outside closes a drawer (3 November 2026) |
+| `D-96` | `decisions.md`:1290 | D-96. A named bed is pulled, and its patient is not also waiting (8 November 2026) |
+| `D-97` | `decisions.md`:1300 | D-97. Owner answers on seven open items: N21, N25, N26, N29, N40, N41 and WF-B008 (8 November 2026) |
+| `D-98` | `decisions.md`:1313 | D-98. Friction pass: Quick bar, Patient peek and Ward peek (8 November 2026) |
+| `D-99` | `decisions.md`:1322 | D-99. "Real details" in the referral drawer's sample patients (25 September 2026) |
+| `D-100` | `decisions.md`:1328 | D-100. "Under a form" means one rule everywhere (9 November 2026) |
+| `D-101` | `decisions.md`:1335 | D-101. Clinically ready for discharge, with one delay reason (9 November 2026) |
+| `D-102` | `decisions.md`:1344 | D-102. Report-a-problem screenshots are blurred, and patient-table exports carry no names (9 November 2026) |
+| `D-103` | `decisions.md`:1353 | D-103. Any coordinator on shift may mark a bed override reviewed (9 November 2026) |
+| `D-104` | `decisions.md`:1360 | D-104. Care plans and safety flags: five defaults (9 November 2026) |
+| `D-105` | `decisions.md`:1372 | D-105. Optional clerk details on the patient record (8 November 2026) |
+| `D-106` | `decisions.md`:1379 | D-106. Clinical values from the 9 November 2026 documentation audit (9 November 2026) |
+| `D-107` | `decisions.md`:1391 | D-107. Working rules and documentation from the 9 November 2026 audit (9 November 2026) |
+| `D-108` | `decisions.md`:1405 | D-108. Six bed-flow features: keep D-93 and D-72, ED long-wait next steps (9 November 2026) |
+| `D-109` | `decisions.md`:1414 | D-109. Home's bed alert line tests the whole number shown (9 November 2026) |
+| `D-110` | `decisions.md`:1421 | D-110. ED and referral flow: neutral fit line, clearance timing and alternatives to admission (9 November 2026) |
+| `D-111` | `decisions.md`:1431 | D-111. Review and audit plan: first guards and four open answers (9 November 2026) |
+| `D-112` | `decisions.md`:1445 | D-112. Phone bottom bar: the floating bar (9 November 2026) |
+| `D-113` | `decisions.md`:1454 | D-113. Second patient identifier on accept and Mark done; no initials search (9 November 2026) |
+| `D-114` | `decisions.md`:1464 | D-114. Allow pull_request_target for three workflows only (9 November 2026) |
+| `D-115` | `decisions.md`:1472 | D-115. One count on every screen, and a missing patient shown everywhere (9 November 2026) |
+| `D-116` | `decisions.md`:1486 | D-116. Page tops: the PR #1581 recommendations stand (9 November 2026) |
+| `D-117` | `decisions.md`:1503 | D-117. Care plans follow-up: frequent presenter count, tribunal date and ward flags (10 November 2026) |
+| `D-118` | `decisions.md`:1512 | D-118. Page tops: Referrals and Ward phone limits up to 8 KB above main (10 November 2026) |
+| `D-119` | `decisions.md`:1518 | D-119. Page tops: phone limits raised to measured sizes, trim after merge (10 November 2026) |
+| `D-120` | `decisions.md`:1525 | D-120. Discharge and capacity values: pull limit, transport delay and discharge date slip (9 November 2026) |
+| `D-121` | `decisions.md`:1534 | D-121. Working rules, guards and your PC from the 10 November 2026 audit (10 November 2026) |
+| `D-122` | `decisions.md`:1548 | D-122. Clinical and privacy answers from the 10 November 2026 audit (10 November 2026) |
+| `D-123` | `decisions.md`:1561 | D-123. Master audit list answers: two clinical fixes and five working rules (10 November 2026) |
+| `D-124` | `decisions.md`:1575 | D-124. Offline saves whose record changed are refused and shown (10 November 2026) |
+| `D-125` | `decisions.md`:1582 | D-125. Top 10 audit follow-ups approved (10 November 2026) |
+| `D-126` | `decisions.md`:1594 | D-126. Ranked lists: neutral orders approved (10 November 2026) |
+| `D-127` | `decisions.md`:1613 | D-127. Neutral wording for a community treatment order at arrival (10 November 2026) |
+| `D-128` | `decisions.md`:1620 | D-128. Final master audit: nine answers (10 November 2026) |
+| `D-129` | `decisions.md`:1635 | D-129. Master audit findings: every recommendation approved (10 November 2026) |
+| `D-130` | `decisions.md`:1685 | D-130. Audit follow-ups: every remaining recommendation approved (10 November 2026) |
+| `D-131` | `decisions.md`:1701 | D-131. Hard-case demo data allowed, and the movement diagram follows the engine (10 November 2026) |
+| `D-132` | `decisions.md`:1710 | D-132. Audit fixes group 1: docs and CI guards (10 November 2026) |
+| `D-133` | `decisions.md`:1720 | D-133. Batch 1 (ED and referral flow): three answers (10 November 2026) |
+| `D-134` | `decisions.md`:1730 | D-134. Ward arrival and beds batch: how to hold, advocate line, night list and the feature freeze (10 November 2026) |
+| `D-135` | `decisions.md`:1753 | D-135. Batch 4, outages and pilot control: pack age and plan answers (10 November 2026) |
+| `D-136` | `decisions.md`:1762 | D-136. Feature batch 3 (shift change and follow-up): two signed values (10 November 2026) |
+| `D-137` | `decisions.md`:1774 | D-137. Feature build batch 5: count leak first, TV change mark and QR library (10 November 2026) |
+| `D-138` | `decisions.md`:1790 | D-138. Phone alert urgency by kind (10 November 2026) |
+| `D-139` | `decisions.md`:1796 | D-139. Phone Statistics ward list A to Z, and leave return times as typed (10 November 2026) |
+| `D-140` | `decisions.md`:1806 | D-140. Feature list adopted, and Wave 1 begins (10 November 2026) |
+| `D-141` | `decisions.md`:1819 | D-141. Batch 1 (ED and referral flow) design approved, with eleven answers (11 November 2026) |
+| `D-142` | `decisions.md`:1837 | D-142. Batch 4: design review and all twelve answers approved, D-80 amended for site features (11 November 2026) |
+| `D-143` | `decisions.md`:1849 | D-143. MHERT is MHERL in the glossary; SMHMR deferred (11 November 2026) |
+| `D-144` | `decisions.md`:1857 | D-144. Chip rows move only sideways on a phone (11 November 2026) |
+| `D-145` | `decisions.md`:1863 | D-145. Repository review: fixes, features and code health approved (11 November 2026) |
+| `D-146` | `decisions.md`:1877 | D-146. Performance audit fixes and the phone speed target (11 November 2026) |
+| `D-147` | `decisions.md`:1883 | D-147. Demo-code tries keep per-address keying until a trusted proxy is set (11 November 2026) |
+| `D-148` | `decisions.md`:1889 | D-148. Closing a bed stays one tap, and its toast offers a reason (11 November 2026) |
+| `D-149` | `decisions.md`:1896 | D-149. A record whose only links are withdrawn referrals can be archived (11 November 2026) |
+| `D-150` | `decisions.md`:1907 | D-150. The signed-in site runs on real Perth time (11 November 2026) |
+| `D-151` | `decisions.md`:1915 | D-151. A bed tile says when a change is waiting to save (11 November 2026) |
+| `D-152` | `decisions.md`:1922 | D-152. Returned to ED prompt sees every return in shared mode (11 November 2026) |
+| `D-153` | `decisions.md`:1930 | D-153. Keep the drawn-time settle check, and defer a separate agent GitHub identity (11 November 2026) |
+| `D-154` | `decisions.md`:1938 | D-154. The community desk's ED heads-up reads a narrow scoped list (11 November 2026) |
+| `D-155` | `decisions.md`:1947 | D-155. Check the live clock offset before clearing it (11 November 2026) |
+| `D-156` | `decisions.md`:1954 | D-156. Reset the synthetic live world after the clock fix (11 November 2026) |
 | `D9-1` | `../history/archive/dated-notes/ward-flow-phase-9-decisions.md`:62 | D9-1 — The wait becomes prominent, and its ceiling is removed; it never outranks urgency (SESSION) |
 | `D9-2` | `../history/archive/dated-notes/ward-flow-phase-9-decisions.md`:102 | D9-2 — Declaring escalation records it and marks the screens, and changes nothing else (SESSION, and partly blocked) |
 | `D9-3` | `../history/archive/dated-notes/ward-flow-phase-9-decisions.md`:126 | D9-3 — The retrospective is one person's journey replayed, plus the ward prediction track record last (SESSION) |
@@ -623,164 +629,170 @@ safe global key across 30 files.
 
 ## By file, newest first — 43 files
 
-### `decisions.md` (2026-09-01 – 2026-11-11 (mixed, see file))
+### `decisions.md` (2026-09-01 – 2026-11-12 (mixed, see file))
 
 **Recorded decision log.** Read the source for supersession and current scope; indexing does not grant authority.
 
 **Title:** Ward Flow — decision log
 
-150 item(s):
-
-- `D-1` — line 179, heading: "D-1. Ward Flow is local only, with no linked repository (Replaced by D-27)"
-- `D-2` — line 189, heading: "D-2. Railway is disconnected"
-- `D-3` — line 200, heading: "D-3. The PsychSift and Database code is being retired from Ward Flow"
-- `D-4` — line 208, heading: "D-4. Synthetic patients only"
-- `D-5` — line 216, heading: "D-5. Parallel threads in separate worktrees, folded one at a time"
-- `D-6` — line 227, heading: "D-6. Aboriginal cultural safety review deferred"
-- `D-7` — line 235, heading: "D-7. The first four milestones, in this order"
-- `D-8` — line 247, heading: "D-8. Josh's standing rulings, numbered R1 to R16, for every session and tool"
-- `D-9` — line 279, heading: "D-9. Josh's rulings of 25 September, 11:43 to 12:00 (R17 to R21)"
-- `D-10` — line 293, heading: "D-10. Gate build type check (R22)"
-- `D-11` — line 302, heading: "D-11. Rulings of 25 September, 12:41 (R23 to R25)"
-- `D-12` — line 318, heading: "D-12. Rulings of 25 September, 12:43 (R26 to R31)"
-- `D-13` — line 337, heading: "D-13. Tooling tests in batch gates (R32)"
-- `D-14` — line 347, heading: "D-14. Standing defaults: decide small things without asking"
-- `D-15` — line 359, heading: "D-15. Rulings of 25 September, 13:26 (R33 to R35)"
-- `D-16` — line 372, heading: "D-16. Legal overrides and form receipts, 25 September 13:51 UTC"
-- `D-17` — line 385, heading: "D-17. Morning roll-up time is Josh's own default (25 September)"
-- `D-18` — line 396, heading: "D-18. The privacy lock stops saving only for typed text (25 September)"
-- `D-19` — line 407, heading: "D-19. Rulings of 25 September, evening (walkthrough, leave beds, PsychSift, gender display)"
-- `D-20` — line 437, heading: "D-20. One high-contrast colour check retired (26 September)"
-- `D-21` — line 450, heading: "D-21. Coordinator bed board: all nine recommended answers (26 September)"
-- `D-22` — line 462, heading: "D-22. No legal limits in hour rules; the rest are labelled defaults (26 September)"
-- `D-23` — line 478, heading: "D-23. Leave-bed fields kept; patient search stops matching by ward (26 September)"
-- `D-24` — line 492, heading: "D-24. Hour-rules morning list: all A (26 September)"
-- `D-25` — line 516, heading: "D-25. The lone-patient check counts free beds on both matching paths (26 September)"
-- `D-26` — line 524, heading: "D-26. Select fold checks by changed risk (27 September)"
-- `D-27` — line 542, heading: "D-27. Ward Flow uses its dedicated repository (28 September)"
-- `D-28` — line 555, heading: "D-28. Design Modernization & Anti-Box Architecture (30 September 2026)"
-- `D-29` — line 569, heading: "D-29. Act time limits shown as a labelled synthetic demo (4 October 2026)"
-- `D-30` — line 584, heading: "D-30. Central Coordinator Approval for Inter-Ward Bed Transfers (6 October 2026)"
-- `D-31` — line 591, heading: "D-31. Gender-Diverse Bed Placement Policy & Clinical Override Safety (6 October 2026)"
-- `D-32` — line 598, heading: "D-32. FIFO Waiting Time with Clinical Triage Badging vs Algorithmic Urgency Sorting (6 October 2026)"
-- `D-33` — line 605, heading: "D-33. Separation of Local Ward Shift Notes from Statewide Coordinator Telemetry (6 October 2026)"
-- `D-34` — line 612, heading: "D-34. Acute Medical Deterioration Bed Release and Escalation Protocol (6 October 2026)"
-- `D-35` — line 619, heading: "D-35. Deferral of Regional Multi-Leg Transport & RFDS Repatriation (6 October 2026)"
-- `D-36` — line 626, heading: "D-36. Affirmation of External Governance & Clinical Safety Hard Gates (6 October 2026) (Replaced by D-87)"
-- `D-37` — line 641, heading: "D-37. External Governance Hard Gate Operational Postures & Resolution Roadmap (6 October 2026) (Replaced by D-87)"
-- `D-38` — line 668, heading: "D-38. Leave, absent without leave and CTO on the Patient page (9 October 2026)"
-- `D-39` — line 686, heading: "D-39. Patients are identified by UMRN, never by a WF number (9 October 2026)"
-- `D-40` — line 730, heading: "D-40. A second community treatment order keeps the first (9 October 2026)"
-- `D-41` — line 741, heading: "D-41. Delays board filters narrow the table and state the hidden count (9 October 2026)"
-- `D-42` — line 754, heading: "D-42. 12px typography floor with no uppercase exception reaffirmed in Design System v9 (9–10 October 2026)"
-- `D-43` — line 760, heading: "D-43. Colour lives in glyphs and the hero; red means act now with a thin 1px edge, never a fill (9 October 2026)"
-- `D-44` — line 767, heading: "D-44. Compact sizing, white cards and smaller text retained over expression-test card tints (9 October 2026)"
-- `D-45` — line 773, heading: "D-45. Phone is its own 390×844 design, never a desktop reflow (9 October 2026)"
-- `D-46` — line 780, heading: "D-46. Every page has a focal part, a part of its own, a page-specific hero and command-bar action rules (9 October 2026)"
-- `D-47` — line 786, heading: "D-47. Glass stays about 80% opaque with the top sheen kept (10 October 2026)"
-- `D-48` — line 792, heading: "D-48. Figures stay in Geist Mono with tabular digits while chart axes use Geist Sans (10 October 2026)"
-- `D-49` — line 798, heading: "D-49. Ward Flow 44px default row target (dense 36px, touch 52px) vs retired 48px PsychSift tap knob (10 October 2026)"
-- `D-50` — line 804, heading: "D-50. Neutral T1 urgency pill vs Form 1A amber statutory warning badge (10 October 2026)"
-- `D-51` — line 810, heading: "D-51. Delays filters hide rows with a stated hidden count while other queues highlight by default (10 October 2026)"
-- `D-52` — line 817, heading: "D-52. 10 October page review rulings: time-axis overdue zone, 15px/20px strip figures, 8px people pips and incremental shared parts (10 October 2026)"
-- `D-53` — line 823, heading: "D-53. Elevate design language and Glare mode adopted for Design System v9 (10 October 2026)"
-- `D-54` — line 830, heading: "D-54. Tier time thresholds remain synthetic demo values requiring clinical sign-off (10 October 2026)"
-- `D-55` — line 838, heading: "D-55. Supabase is Ward Flow's database and sign-in provider, and Azure is retired (15 October 2026)"
-- `D-56` — line 844, heading: "D-56. Josh signs the clinical values that have a recorded source, for the prototype (15 October 2026)"
-- `D-57` — line 850, heading: "D-57. Twenty Top 25 items move from the showcase into the real screens, each behind its own flag (15 October 2026)"
-- `D-58` — line 877, heading: "D-58. Josh signs three more clinical values that have a national source, for the prototype (15 October 2026)"
-- `D-59` — line 883, heading: "D-59. Each role sees only what it needs, from one access table (15 October 2026)"
-- `D-60` — line 889, heading: "D-60. Criteria led discharge, for voluntary patients only (15 October 2026)"
-- `D-61` — line 898, heading: "D-61. Tasks and Alerts are one queue called Alerts (16 October 2026)"
-- `D-62` — line 904, heading: "D-62. The one Alerts queue is signed off and its flag removed (16 October 2026)"
-- `D-63` — line 910, heading: "D-63. Josh signs the remaining clinical values and the criteria list, for the prototype (16 October 2026)"
-- `D-64` — line 918, heading: "D-64. Criteria led discharge shows on the boards and warns at departure (16 October 2026)"
-- `D-65` — line 925, heading: "D-65. Criteria led discharge on in production, typed patient specific criteria, and the AWOL bed hold review paused (17 October 2026)"
-- `D-66` — line 941, heading: "D-66. Granted roles work without a second approval (17 October 2026)"
-- `D-67` — line 949, heading: "D-67. Recover synthetic form drafts within the browser session (17 October 2026)"
-- `D-68` — line 956, heading: "D-68. Bed meeting TV content and access (19 October 2026)"
-- `D-69` — line 964, heading: "D-69. A referral with no legal status: "Needs an involuntary-capable bed until status is set." (20 October 2026)"
-- `D-70` — line 971, heading: "D-70. No computed Mental Health Act periods: show only the recorded due time (20 October 2026)"
-- `D-71` — line 977, heading: "D-71. Audit 1 clinical safety fixes: no suggested wards, wait-order queues, recorded facts only (20 October 2026)"
-- `D-72` — line 990, heading: "D-72. Seven product decisions for the 21 October fix plan (21 October 2026)"
-- `D-73` — line 1006, heading: "D-73. Batch merge safeguards (21 October 2026)"
-- `D-74` — line 1022, heading: "D-74. Owner answers to the 21 October open questions (21 October 2026)"
-- `D-75` — line 1043, heading: "D-75. UX audit follow-up, page caching, community gaps and the extra-travel bed hold (21 October 2026)"
-- `D-76` — line 1056, heading: "D-76. Community referral gaps: the full move journey and asking more wards (21 October 2026)"
-- `D-77` — line 1065, heading: "D-77. The ten bigger UX changes approved for build (22 October 2026)"
-- `D-78` — line 1085, heading: "D-78. One decline list for wards and coordinators (22 October 2026)"
-- `D-79` — line 1096, heading: "D-79. Wards see the full referral, with name and UMRN, before they answer (23 October 2026)"
-- `D-80` — line 1107, heading: "D-80. Role access plan version 2: all 17 recommendations (23 October 2026)"
-- `D-81` — line 1122, heading: "D-81. Pulled, with a pull time limit, for a bed kept for an incoming patient (24 October 2026)"
-- `D-82` — line 1129, heading: "D-82. A PR may raise a phone size limit by up to 5 KB per screen without asking (26 October 2026)"
-- `D-83` — line 1137, heading: "D-83. Patient names stay in full on every screen, copy and TV; privacy work must not make the app less useful (26 October 2026)"
-- `D-84` — line 1148, heading: "D-84. The live app stays on Railway Singapore for now, and there is no server-side TV account yet (26 October 2026)"
-- `D-85` — line 1156, heading: "D-85. "Held" only for a bed kept for its own patient; "pulled" for an incoming bed; "held up" for a delay (26 October 2026)"
-- `D-86` — line 1163, heading: "D-86. No second approver for role grants, at pilot or otherwise (27 October 2026)"
-- `D-87` — line 1170, heading: "D-87. D-36 and D-37 are replaced by the real-data gate (27 October 2026)"
-- `D-88` — line 1182, heading: "D-88. The public demo opens with a demo code once the front door is on (27 October 2026)"
-- `D-89` — line 1189, heading: "D-89. Redesign mock-up copies of large screens may pass the 1,500-line cap (30 October 2026)"
-- `D-90` — line 1197, heading: "D-90. Help gets How do I…, Show me runs everywhere, and Help is built without a separate mock-up step (30 October 2026)"
-- `D-91` — line 1208, heading: "D-91. One design home for the redesign, and Josh's answers on Help, Settings, search and notifications (31 October 2026)"
-- `D-92` — line 1243, heading: "D-92. Help goes live before its mock-up review, one search box on Capacity, and referral rows on Home open the panel (31 October 2026)"
-- `D-93` — line 1253, heading: "D-93. Legal form times show only as typed, never as a countdown (31 October 2026)"
-- `D-94` — line 1261, heading: "D-94. Design rulings of 31 October 2026"
-- `D-95` — line 1274, heading: "D-95. One page scroll, and a click outside closes a drawer (3 November 2026)"
-- `D-96` — line 1284, heading: "D-96. A named bed is pulled, and its patient is not also waiting (8 November 2026)"
-- `D-97` — line 1294, heading: "D-97. Owner answers on seven open items: N21, N25, N26, N29, N40, N41 and WF-B008 (8 November 2026)"
-- `D-98` — line 1307, heading: "D-98. Friction pass: Quick bar, Patient peek and Ward peek (8 November 2026)"
-- `D-99` — line 1316, heading: "D-99. "Real details" in the referral drawer's sample patients (25 September 2026)"
-- `D-100` — line 1322, heading: "D-100. "Under a form" means one rule everywhere (9 November 2026)"
-- `D-101` — line 1329, heading: "D-101. Clinically ready for discharge, with one delay reason (9 November 2026)"
-- `D-102` — line 1338, heading: "D-102. Report-a-problem screenshots are blurred, and patient-table exports carry no names (9 November 2026)"
-- `D-103` — line 1347, heading: "D-103. Any coordinator on shift may mark a bed override reviewed (9 November 2026)"
-- `D-104` — line 1354, heading: "D-104. Care plans and safety flags: five defaults (9 November 2026)"
-- `D-105` — line 1366, heading: "D-105. Optional clerk details on the patient record (8 November 2026)"
-- `D-106` — line 1373, heading: "D-106. Clinical values from the 9 November 2026 documentation audit (9 November 2026)"
-- `D-107` — line 1385, heading: "D-107. Working rules and documentation from the 9 November 2026 audit (9 November 2026)"
-- `D-108` — line 1399, heading: "D-108. Six bed-flow features: keep D-93 and D-72, ED long-wait next steps (9 November 2026)"
-- `D-109` — line 1408, heading: "D-109. Home's bed alert line tests the whole number shown (9 November 2026)"
-- `D-110` — line 1415, heading: "D-110. ED and referral flow: neutral fit line, clearance timing and alternatives to admission (9 November 2026)"
-- `D-111` — line 1425, heading: "D-111. Review and audit plan: first guards and four open answers (9 November 2026)"
-- `D-112` — line 1439, heading: "D-112. Phone bottom bar: the floating bar (9 November 2026)"
-- `D-113` — line 1448, heading: "D-113. Second patient identifier on accept and Mark done; no initials search (9 November 2026)"
-- `D-114` — line 1458, heading: "D-114. Allow pull_request_target for three workflows only (9 November 2026)"
-- `D-115` — line 1466, heading: "D-115. One count on every screen, and a missing patient shown everywhere (9 November 2026)"
-- `D-116` — line 1480, heading: "D-116. Page tops: the PR #1581 recommendations stand (9 November 2026)"
-- `D-117` — line 1497, heading: "D-117. Care plans follow-up: frequent presenter count, tribunal date and ward flags (10 November 2026)"
-- `D-118` — line 1506, heading: "D-118. Page tops: Referrals and Ward phone limits up to 8 KB above main (10 November 2026)"
-- `D-119` — line 1512, heading: "D-119. Page tops: phone limits raised to measured sizes, trim after merge (10 November 2026)"
-- `D-120` — line 1519, heading: "D-120. Discharge and capacity values: pull limit, transport delay and discharge date slip (9 November 2026)"
-- `D-121` — line 1528, heading: "D-121. Working rules, guards and your PC from the 10 November 2026 audit (10 November 2026)"
-- `D-122` — line 1542, heading: "D-122. Clinical and privacy answers from the 10 November 2026 audit (10 November 2026)"
-- `D-123` — line 1555, heading: "D-123. Master audit list answers: two clinical fixes and five working rules (10 November 2026)"
-- `D-124` — line 1569, heading: "D-124. Offline saves whose record changed are refused and shown (10 November 2026)"
-- `D-125` — line 1576, heading: "D-125. Top 10 audit follow-ups approved (10 November 2026)"
-- `D-126` — line 1588, heading: "D-126. Ranked lists: neutral orders approved (10 November 2026)"
-- `D-127` — line 1607, heading: "D-127. Neutral wording for a community treatment order at arrival (10 November 2026)"
-- `D-128` — line 1614, heading: "D-128. Final master audit: nine answers (10 November 2026)"
-- `D-129` — line 1629, heading: "D-129. Master audit findings: every recommendation approved (10 November 2026)"
-- `D-130` — line 1679, heading: "D-130. Audit follow-ups: every remaining recommendation approved (10 November 2026)"
-- `D-131` — line 1695, heading: "D-131. Hard-case demo data allowed, and the movement diagram follows the engine (10 November 2026)"
-- `D-132` — line 1704, heading: "D-132. Audit fixes group 1: docs and CI guards (10 November 2026)"
-- `D-133` — line 1714, heading: "D-133. Batch 1 (ED and referral flow): three answers (10 November 2026)"
-- `D-134` — line 1724, heading: "D-134. Ward arrival and beds batch: how to hold, advocate line, night list and the feature freeze (10 November 2026)"
-- `D-135` — line 1747, heading: "D-135. Batch 4, outages and pilot control: pack age and plan answers (10 November 2026)"
-- `D-136` — line 1756, heading: "D-136. Feature batch 3 (shift change and follow-up): two signed values (10 November 2026)"
-- `D-137` — line 1768, heading: "D-137. Feature build batch 5: count leak first, TV change mark and QR library (10 November 2026)"
-- `D-138` — line 1784, heading: "D-138. Phone alert urgency by kind (10 November 2026)"
-- `D-139` — line 1790, heading: "D-139. Phone Statistics ward list A to Z, and leave return times as typed (10 November 2026)"
-- `D-140` — line 1800, heading: "D-140. Feature list adopted, and Wave 1 begins (10 November 2026)"
-- `D-141` — line 1813, heading: "D-141. Batch 1 (ED and referral flow) design approved, with eleven answers (11 November 2026)"
-- `D-142` — line 1831, heading: "D-142. Batch 4: design review and all twelve answers approved, D-80 amended for site features (11 November 2026)"
-- `D-143` — line 1843, heading: "D-143. MHERT is MHERL in the glossary; SMHMR deferred (11 November 2026)"
-- `D-144` — line 1851, heading: "D-144. Chip rows move only sideways on a phone (11 November 2026)"
-- `D-145` — line 1857, heading: "D-145. Repository review: fixes, features and code health approved (11 November 2026)"
-- `D-146` — line 1871, heading: "D-146. Performance audit fixes and the phone speed target (11 November 2026)"
-- `D-147` — line 1877, heading: "D-147. Demo-code tries keep per-address keying until a trusted proxy is set (11 November 2026)"
-- `D-152` — line 1883, heading: "D-152. Returned to ED prompt sees every return in shared mode (11 November 2026)"
-- `D-153` — line 1891, heading: "D-153. Keep the drawn-time settle check, and defer a separate agent GitHub identity (11 November 2026)"
-- `D-154` — line 1899, heading: "D-154. The community desk's ED heads-up reads a narrow scoped list (11 November 2026)"
+156 item(s):
+
+- `D-1` — line 185, heading: "D-1. Ward Flow is local only, with no linked repository (Replaced by D-27)"
+- `D-2` — line 195, heading: "D-2. Railway is disconnected"
+- `D-3` — line 206, heading: "D-3. The PsychSift and Database code is being retired from Ward Flow"
+- `D-4` — line 214, heading: "D-4. Synthetic patients only"
+- `D-5` — line 222, heading: "D-5. Parallel threads in separate worktrees, folded one at a time"
+- `D-6` — line 233, heading: "D-6. Aboriginal cultural safety review deferred"
+- `D-7` — line 241, heading: "D-7. The first four milestones, in this order"
+- `D-8` — line 253, heading: "D-8. Josh's standing rulings, numbered R1 to R16, for every session and tool"
+- `D-9` — line 285, heading: "D-9. Josh's rulings of 25 September, 11:43 to 12:00 (R17 to R21)"
+- `D-10` — line 299, heading: "D-10. Gate build type check (R22)"
+- `D-11` — line 308, heading: "D-11. Rulings of 25 September, 12:41 (R23 to R25)"
+- `D-12` — line 324, heading: "D-12. Rulings of 25 September, 12:43 (R26 to R31)"
+- `D-13` — line 343, heading: "D-13. Tooling tests in batch gates (R32)"
+- `D-14` — line 353, heading: "D-14. Standing defaults: decide small things without asking"
+- `D-15` — line 365, heading: "D-15. Rulings of 25 September, 13:26 (R33 to R35)"
+- `D-16` — line 378, heading: "D-16. Legal overrides and form receipts, 25 September 13:51 UTC"
+- `D-17` — line 391, heading: "D-17. Morning roll-up time is Josh's own default (25 September)"
+- `D-18` — line 402, heading: "D-18. The privacy lock stops saving only for typed text (25 September)"
+- `D-19` — line 413, heading: "D-19. Rulings of 25 September, evening (walkthrough, leave beds, PsychSift, gender display)"
+- `D-20` — line 443, heading: "D-20. One high-contrast colour check retired (26 September)"
+- `D-21` — line 456, heading: "D-21. Coordinator bed board: all nine recommended answers (26 September)"
+- `D-22` — line 468, heading: "D-22. No legal limits in hour rules; the rest are labelled defaults (26 September)"
+- `D-23` — line 484, heading: "D-23. Leave-bed fields kept; patient search stops matching by ward (26 September)"
+- `D-24` — line 498, heading: "D-24. Hour-rules morning list: all A (26 September)"
+- `D-25` — line 522, heading: "D-25. The lone-patient check counts free beds on both matching paths (26 September)"
+- `D-26` — line 530, heading: "D-26. Select fold checks by changed risk (27 September)"
+- `D-27` — line 548, heading: "D-27. Ward Flow uses its dedicated repository (28 September)"
+- `D-28` — line 561, heading: "D-28. Design Modernization & Anti-Box Architecture (30 September 2026)"
+- `D-29` — line 575, heading: "D-29. Act time limits shown as a labelled synthetic demo (4 October 2026)"
+- `D-30` — line 590, heading: "D-30. Central Coordinator Approval for Inter-Ward Bed Transfers (6 October 2026)"
+- `D-31` — line 597, heading: "D-31. Gender-Diverse Bed Placement Policy & Clinical Override Safety (6 October 2026)"
+- `D-32` — line 604, heading: "D-32. FIFO Waiting Time with Clinical Triage Badging vs Algorithmic Urgency Sorting (6 October 2026)"
+- `D-33` — line 611, heading: "D-33. Separation of Local Ward Shift Notes from Statewide Coordinator Telemetry (6 October 2026)"
+- `D-34` — line 618, heading: "D-34. Acute Medical Deterioration Bed Release and Escalation Protocol (6 October 2026)"
+- `D-35` — line 625, heading: "D-35. Deferral of Regional Multi-Leg Transport & RFDS Repatriation (6 October 2026)"
+- `D-36` — line 632, heading: "D-36. Affirmation of External Governance & Clinical Safety Hard Gates (6 October 2026) (Replaced by D-87)"
+- `D-37` — line 647, heading: "D-37. External Governance Hard Gate Operational Postures & Resolution Roadmap (6 October 2026) (Replaced by D-87)"
+- `D-38` — line 674, heading: "D-38. Leave, absent without leave and CTO on the Patient page (9 October 2026)"
+- `D-39` — line 692, heading: "D-39. Patients are identified by UMRN, never by a WF number (9 October 2026)"
+- `D-40` — line 736, heading: "D-40. A second community treatment order keeps the first (9 October 2026)"
+- `D-41` — line 747, heading: "D-41. Delays board filters narrow the table and state the hidden count (9 October 2026)"
+- `D-42` — line 760, heading: "D-42. 12px typography floor with no uppercase exception reaffirmed in Design System v9 (9–10 October 2026)"
+- `D-43` — line 766, heading: "D-43. Colour lives in glyphs and the hero; red means act now with a thin 1px edge, never a fill (9 October 2026)"
+- `D-44` — line 773, heading: "D-44. Compact sizing, white cards and smaller text retained over expression-test card tints (9 October 2026)"
+- `D-45` — line 779, heading: "D-45. Phone is its own 390×844 design, never a desktop reflow (9 October 2026)"
+- `D-46` — line 786, heading: "D-46. Every page has a focal part, a part of its own, a page-specific hero and command-bar action rules (9 October 2026)"
+- `D-47` — line 792, heading: "D-47. Glass stays about 80% opaque with the top sheen kept (10 October 2026)"
+- `D-48` — line 798, heading: "D-48. Figures stay in Geist Mono with tabular digits while chart axes use Geist Sans (10 October 2026)"
+- `D-49` — line 804, heading: "D-49. Ward Flow 44px default row target (dense 36px, touch 52px) vs retired 48px PsychSift tap knob (10 October 2026)"
+- `D-50` — line 810, heading: "D-50. Neutral T1 urgency pill vs Form 1A amber statutory warning badge (10 October 2026)"
+- `D-51` — line 816, heading: "D-51. Delays filters hide rows with a stated hidden count while other queues highlight by default (10 October 2026)"
+- `D-52` — line 823, heading: "D-52. 10 October page review rulings: time-axis overdue zone, 15px/20px strip figures, 8px people pips and incremental shared parts (10 October 2026)"
+- `D-53` — line 829, heading: "D-53. Elevate design language and Glare mode adopted for Design System v9 (10 October 2026)"
+- `D-54` — line 836, heading: "D-54. Tier time thresholds remain synthetic demo values requiring clinical sign-off (10 October 2026)"
+- `D-55` — line 844, heading: "D-55. Supabase is Ward Flow's database and sign-in provider, and Azure is retired (15 October 2026)"
+- `D-56` — line 850, heading: "D-56. Josh signs the clinical values that have a recorded source, for the prototype (15 October 2026)"
+- `D-57` — line 856, heading: "D-57. Twenty Top 25 items move from the showcase into the real screens, each behind its own flag (15 October 2026)"
+- `D-58` — line 883, heading: "D-58. Josh signs three more clinical values that have a national source, for the prototype (15 October 2026)"
+- `D-59` — line 889, heading: "D-59. Each role sees only what it needs, from one access table (15 October 2026)"
+- `D-60` — line 895, heading: "D-60. Criteria led discharge, for voluntary patients only (15 October 2026)"
+- `D-61` — line 904, heading: "D-61. Tasks and Alerts are one queue called Alerts (16 October 2026)"
+- `D-62` — line 910, heading: "D-62. The one Alerts queue is signed off and its flag removed (16 October 2026)"
+- `D-63` — line 916, heading: "D-63. Josh signs the remaining clinical values and the criteria list, for the prototype (16 October 2026)"
+- `D-64` — line 924, heading: "D-64. Criteria led discharge shows on the boards and warns at departure (16 October 2026)"
+- `D-65` — line 931, heading: "D-65. Criteria led discharge on in production, typed patient specific criteria, and the AWOL bed hold review paused (17 October 2026)"
+- `D-66` — line 947, heading: "D-66. Granted roles work without a second approval (17 October 2026)"
+- `D-67` — line 955, heading: "D-67. Recover synthetic form drafts within the browser session (17 October 2026)"
+- `D-68` — line 962, heading: "D-68. Bed meeting TV content and access (19 October 2026)"
+- `D-69` — line 970, heading: "D-69. A referral with no legal status: "Needs an involuntary-capable bed until status is set." (20 October 2026)"
+- `D-70` — line 977, heading: "D-70. No computed Mental Health Act periods: show only the recorded due time (20 October 2026)"
+- `D-71` — line 983, heading: "D-71. Audit 1 clinical safety fixes: no suggested wards, wait-order queues, recorded facts only (20 October 2026)"
+- `D-72` — line 996, heading: "D-72. Seven product decisions for the 21 October fix plan (21 October 2026)"
+- `D-73` — line 1012, heading: "D-73. Batch merge safeguards (21 October 2026)"
+- `D-74` — line 1028, heading: "D-74. Owner answers to the 21 October open questions (21 October 2026)"
+- `D-75` — line 1049, heading: "D-75. UX audit follow-up, page caching, community gaps and the extra-travel bed hold (21 October 2026)"
+- `D-76` — line 1062, heading: "D-76. Community referral gaps: the full move journey and asking more wards (21 October 2026)"
+- `D-77` — line 1071, heading: "D-77. The ten bigger UX changes approved for build (22 October 2026)"
+- `D-78` — line 1091, heading: "D-78. One decline list for wards and coordinators (22 October 2026)"
+- `D-79` — line 1102, heading: "D-79. Wards see the full referral, with name and UMRN, before they answer (23 October 2026)"
+- `D-80` — line 1113, heading: "D-80. Role access plan version 2: all 17 recommendations (23 October 2026)"
+- `D-81` — line 1128, heading: "D-81. Pulled, with a pull time limit, for a bed kept for an incoming patient (24 October 2026)"
+- `D-82` — line 1135, heading: "D-82. A PR may raise a phone size limit by up to 5 KB per screen without asking (26 October 2026)"
+- `D-83` — line 1143, heading: "D-83. Patient names stay in full on every screen, copy and TV; privacy work must not make the app less useful (26 October 2026)"
+- `D-84` — line 1154, heading: "D-84. The live app stays on Railway Singapore for now, and there is no server-side TV account yet (26 October 2026)"
+- `D-85` — line 1162, heading: "D-85. "Held" only for a bed kept for its own patient; "pulled" for an incoming bed; "held up" for a delay (26 October 2026)"
+- `D-86` — line 1169, heading: "D-86. No second approver for role grants, at pilot or otherwise (27 October 2026)"
+- `D-87` — line 1176, heading: "D-87. D-36 and D-37 are replaced by the real-data gate (27 October 2026)"
+- `D-88` — line 1188, heading: "D-88. The public demo opens with a demo code once the front door is on (27 October 2026)"
+- `D-89` — line 1195, heading: "D-89. Redesign mock-up copies of large screens may pass the 1,500-line cap (30 October 2026)"
+- `D-90` — line 1203, heading: "D-90. Help gets How do I…, Show me runs everywhere, and Help is built without a separate mock-up step (30 October 2026)"
+- `D-91` — line 1214, heading: "D-91. One design home for the redesign, and Josh's answers on Help, Settings, search and notifications (31 October 2026)"
+- `D-92` — line 1249, heading: "D-92. Help goes live before its mock-up review, one search box on Capacity, and referral rows on Home open the panel (31 October 2026)"
+- `D-93` — line 1259, heading: "D-93. Legal form times show only as typed, never as a countdown (31 October 2026)"
+- `D-94` — line 1267, heading: "D-94. Design rulings of 31 October 2026"
+- `D-95` — line 1280, heading: "D-95. One page scroll, and a click outside closes a drawer (3 November 2026)"
+- `D-96` — line 1290, heading: "D-96. A named bed is pulled, and its patient is not also waiting (8 November 2026)"
+- `D-97` — line 1300, heading: "D-97. Owner answers on seven open items: N21, N25, N26, N29, N40, N41 and WF-B008 (8 November 2026)"
+- `D-98` — line 1313, heading: "D-98. Friction pass: Quick bar, Patient peek and Ward peek (8 November 2026)"
+- `D-99` — line 1322, heading: "D-99. "Real details" in the referral drawer's sample patients (25 September 2026)"
+- `D-100` — line 1328, heading: "D-100. "Under a form" means one rule everywhere (9 November 2026)"
+- `D-101` — line 1335, heading: "D-101. Clinically ready for discharge, with one delay reason (9 November 2026)"
+- `D-102` — line 1344, heading: "D-102. Report-a-problem screenshots are blurred, and patient-table exports carry no names (9 November 2026)"
+- `D-103` — line 1353, heading: "D-103. Any coordinator on shift may mark a bed override reviewed (9 November 2026)"
+- `D-104` — line 1360, heading: "D-104. Care plans and safety flags: five defaults (9 November 2026)"
+- `D-105` — line 1372, heading: "D-105. Optional clerk details on the patient record (8 November 2026)"
+- `D-106` — line 1379, heading: "D-106. Clinical values from the 9 November 2026 documentation audit (9 November 2026)"
+- `D-107` — line 1391, heading: "D-107. Working rules and documentation from the 9 November 2026 audit (9 November 2026)"
+- `D-108` — line 1405, heading: "D-108. Six bed-flow features: keep D-93 and D-72, ED long-wait next steps (9 November 2026)"
+- `D-109` — line 1414, heading: "D-109. Home's bed alert line tests the whole number shown (9 November 2026)"
+- `D-110` — line 1421, heading: "D-110. ED and referral flow: neutral fit line, clearance timing and alternatives to admission (9 November 2026)"
+- `D-111` — line 1431, heading: "D-111. Review and audit plan: first guards and four open answers (9 November 2026)"
+- `D-112` — line 1445, heading: "D-112. Phone bottom bar: the floating bar (9 November 2026)"
+- `D-113` — line 1454, heading: "D-113. Second patient identifier on accept and Mark done; no initials search (9 November 2026)"
+- `D-114` — line 1464, heading: "D-114. Allow pull_request_target for three workflows only (9 November 2026)"
+- `D-115` — line 1472, heading: "D-115. One count on every screen, and a missing patient shown everywhere (9 November 2026)"
+- `D-116` — line 1486, heading: "D-116. Page tops: the PR #1581 recommendations stand (9 November 2026)"
+- `D-117` — line 1503, heading: "D-117. Care plans follow-up: frequent presenter count, tribunal date and ward flags (10 November 2026)"
+- `D-118` — line 1512, heading: "D-118. Page tops: Referrals and Ward phone limits up to 8 KB above main (10 November 2026)"
+- `D-119` — line 1518, heading: "D-119. Page tops: phone limits raised to measured sizes, trim after merge (10 November 2026)"
+- `D-120` — line 1525, heading: "D-120. Discharge and capacity values: pull limit, transport delay and discharge date slip (9 November 2026)"
+- `D-121` — line 1534, heading: "D-121. Working rules, guards and your PC from the 10 November 2026 audit (10 November 2026)"
+- `D-122` — line 1548, heading: "D-122. Clinical and privacy answers from the 10 November 2026 audit (10 November 2026)"
+- `D-123` — line 1561, heading: "D-123. Master audit list answers: two clinical fixes and five working rules (10 November 2026)"
+- `D-124` — line 1575, heading: "D-124. Offline saves whose record changed are refused and shown (10 November 2026)"
+- `D-125` — line 1582, heading: "D-125. Top 10 audit follow-ups approved (10 November 2026)"
+- `D-126` — line 1594, heading: "D-126. Ranked lists: neutral orders approved (10 November 2026)"
+- `D-127` — line 1613, heading: "D-127. Neutral wording for a community treatment order at arrival (10 November 2026)"
+- `D-128` — line 1620, heading: "D-128. Final master audit: nine answers (10 November 2026)"
+- `D-129` — line 1635, heading: "D-129. Master audit findings: every recommendation approved (10 November 2026)"
+- `D-130` — line 1685, heading: "D-130. Audit follow-ups: every remaining recommendation approved (10 November 2026)"
+- `D-131` — line 1701, heading: "D-131. Hard-case demo data allowed, and the movement diagram follows the engine (10 November 2026)"
+- `D-132` — line 1710, heading: "D-132. Audit fixes group 1: docs and CI guards (10 November 2026)"
+- `D-133` — line 1720, heading: "D-133. Batch 1 (ED and referral flow): three answers (10 November 2026)"
+- `D-134` — line 1730, heading: "D-134. Ward arrival and beds batch: how to hold, advocate line, night list and the feature freeze (10 November 2026)"
+- `D-135` — line 1753, heading: "D-135. Batch 4, outages and pilot control: pack age and plan answers (10 November 2026)"
+- `D-136` — line 1762, heading: "D-136. Feature batch 3 (shift change and follow-up): two signed values (10 November 2026)"
+- `D-137` — line 1774, heading: "D-137. Feature build batch 5: count leak first, TV change mark and QR library (10 November 2026)"
+- `D-138` — line 1790, heading: "D-138. Phone alert urgency by kind (10 November 2026)"
+- `D-139` — line 1796, heading: "D-139. Phone Statistics ward list A to Z, and leave return times as typed (10 November 2026)"
+- `D-140` — line 1806, heading: "D-140. Feature list adopted, and Wave 1 begins (10 November 2026)"
+- `D-141` — line 1819, heading: "D-141. Batch 1 (ED and referral flow) design approved, with eleven answers (11 November 2026)"
+- `D-142` — line 1837, heading: "D-142. Batch 4: design review and all twelve answers approved, D-80 amended for site features (11 November 2026)"
+- `D-143` — line 1849, heading: "D-143. MHERT is MHERL in the glossary; SMHMR deferred (11 November 2026)"
+- `D-144` — line 1857, heading: "D-144. Chip rows move only sideways on a phone (11 November 2026)"
+- `D-145` — line 1863, heading: "D-145. Repository review: fixes, features and code health approved (11 November 2026)"
+- `D-146` — line 1877, heading: "D-146. Performance audit fixes and the phone speed target (11 November 2026)"
+- `D-147` — line 1883, heading: "D-147. Demo-code tries keep per-address keying until a trusted proxy is set (11 November 2026)"
+- `D-148` — line 1889, heading: "D-148. Closing a bed stays one tap, and its toast offers a reason (11 November 2026)"
+- `D-149` — line 1896, heading: "D-149. A record whose only links are withdrawn referrals can be archived (11 November 2026)"
+- `D-150` — line 1907, heading: "D-150. The signed-in site runs on real Perth time (11 November 2026)"
+- `D-151` — line 1915, heading: "D-151. A bed tile says when a change is waiting to save (11 November 2026)"
+- `D-152` — line 1922, heading: "D-152. Returned to ED prompt sees every return in shared mode (11 November 2026)"
+- `D-153` — line 1930, heading: "D-153. Keep the drawn-time settle check, and defer a separate agent GitHub identity (11 November 2026)"
+- `D-154` — line 1938, heading: "D-154. The community desk's ED heads-up reads a narrow scoped list (11 November 2026)"
+- `D-155` — line 1947, heading: "D-155. Check the live clock offset before clearing it (11 November 2026)"
+- `D-156` — line 1954, heading: "D-156. Reset the synthetic live world after the clock fix (11 November 2026)"
 
 ### `../history/archive/dated-notes/ward-management-decisions.md` (2026-08-18 – 2026-10-24 (mixed, see file))
 
diff --git a/docs/ward-flow/decisions.md b/docs/ward-flow/decisions.md
index 947507579f..2132c6f3dd 100644
--- a/docs/ward-flow/decisions.md
+++ b/docs/ward-flow/decisions.md
@@ -170,9 +170,15 @@ Checked 9 November 2026 (D-107 audit). "Partly replaced" means part of the entry
 | [D-145](#d-145-repository-review-fixes-features-and-code-health-approved-11-november-2026)                                                              | Repository review: fixes, features and code health approved                            | Active                                           |
 | [D-146](#d-146-performance-audit-fixes-and-the-phone-speed-target-11-november-2026)                                                                     | Performance audit fixes and the phone speed target                                     | Active                                           |
 | [D-147](#d-147-demo-code-tries-keep-per-address-keying-until-a-trusted-proxy-is-set-11-november-2026)                                                   | Demo-code tries keep per-address keying until a trusted proxy is set                   | Active                                           |
+| [D-148](#d-148-closing-a-bed-stays-one-tap-and-its-toast-offers-a-reason-11-november-2026)                                                              | Closing a bed stays one tap, and its toast offers a reason                             | Active                                           |
+| [D-149](#d-149-a-record-whose-only-links-are-withdrawn-referrals-can-be-archived-11-november-2026)                                                      | A record whose only links are withdrawn referrals can be archived                      | Active                                           |
+| [D-150](#d-150-the-signed-in-site-runs-on-real-perth-time-11-november-2026)                                                                             | The signed-in site runs on real Perth time                                             | Active                                           |
+| [D-151](#d-151-a-bed-tile-says-when-a-change-is-waiting-to-save-11-november-2026)                                                                       | A bed tile says when a change is waiting to save                                       | Active                                           |
 | [D-152](#d-152-returned-to-ed-prompt-sees-every-return-in-shared-mode-11-november-2026)                                                                 | Returned to ED prompt sees every return in shared mode                                 | Active                                           |
 | [D-153](#d-153-keep-the-drawn-time-settle-check-and-defer-a-separate-agent-github-identity-11-november-2026)                                            | Keep the drawn-time settle check, and defer a separate agent GitHub identity           | Active                                           |
 | [D-154](#d-154-the-community-desks-ed-heads-up-reads-a-narrow-scoped-list-11-november-2026)                                                             | The community desk's ED heads-up reads a narrow scoped list                            | Active                                           |
+| [D-155](#d-155-check-the-live-clock-offset-before-clearing-it-11-november-2026)                                                                         | Check the live clock offset before clearing it                                         | Active                                           |
+| [D-156](#d-156-reset-the-synthetic-live-world-after-the-clock-fix-11-november-2026)                                                                     | Post-release reset of the live synthetic world withdrawn                               | Withdrawn 12 November 2026                       |
 
 ---
 
@@ -1880,6 +1886,39 @@ is inferred.
 - **Decision:** while `WARD_TRUSTED_PROXY_ADDRESSES` names no proxy on the Next service, the front door's demo-code try limit keeps keying on the edge's `X-Real-IP`, else the last `X-Forwarded-For` hop, as it did before A4-02. Once it names a proxy (or `*`), A4-02's trusted-proxy rule applies. Reason: the Next session route has no socket address, so the strict rule alone would put every caller in one shared bucket, and ten wrong tries from anyone in ten minutes would refuse every presenter.
 - **Boundary:** no Railway or environment change; setting `WARD_TRUSTED_PROXY_ADDRESSES` stays a separate, approved provider action. The fallback logs nothing. Synthetic data only; changes no clinical value or rule, and approves no release.
 
+## D-148. Closing a bed stays one tap, and its toast offers a reason (11 November 2026)
+
+- **Date:** 11 November 2026. **Decided by:** Josh, approving every recommendation in the "Ward Flow live audit: verified findings and fix plan" (decision item 4) after fact-checking: "Go ahead with all recommendations after fact checking please". Numbered D-148 because D-145 is claimed by open PR #1623. D-146 is claimed by open PR #1624. D-147 is claimed by open PR #1615.
+- **Decision:** "Close this bed" in the bed drawer still saves on one tap with Undo (the 26 October fast-workflow choice). No confirm step is added. Its toast now offers "Add a reason", a kit menu of the existing ward closure reasons (`WARD_CLOSURE_REASONS`). Choosing one undoes the close and closes the bed again with that reason, so the reason is chosen, never typed, and the audit trail keeps both steps (the bed's History shows the closure with its reason).
+- **Why:** the live audit found closures with no reason; a reason helps the bed meeting without slowing the close.
+- **Boundary:** synthetic data only. No engine rule changes: `SET_BED_CLOSED` already took an optional reason.
+
+## D-149. A record whose only links are withdrawn referrals can be archived (11 November 2026)
+
+- **Date:** 11 November 2026. **Decided by:** Josh, approving decision item 9 of the live audit fix plan, as for D-148. This gives the 26 October rule (#816: "archive only, coordinator only, for records added in error") its D-number.
+- **Decision:**
+  1. Archiving stays coordinator only, for a record added in error, and still never destroys anything.
+  2. A record can now be archived when the only things naming it are front-door referrals that nobody answered (every destination withdrawn by the referrer or cancelled), audit rows, and Undo records older than the Undo window. Any journey, stay, form, bed record, answered or open referral, or fact recorded on the person still keeps the record. The withdrawn referral stays in the history but no longer links to the archived record.
+  3. The coordinator's "Record added in error" card no longer hides when archive is not available. It says why in one line.
+- **Why:** the live audit's test patient could never be archived because a withdrawn referral and record-view audit rows named it, so test and mistaken records stayed on the board for good.
+- **Boundary:** synthetic data only. Archiving the live audit's test patient and the old TEST-Helper4 records is a live write that waits for Josh's yes after release.
+- **Note (11 November 2026, 15:34 UTC):** Josh approved, on a decision card in the Ward Flow project thread for PR #1626, adding `ward-patient-archive-reducer.ts` to the D-14 patient-link allowlist (60 to 61 files). The archive step reads `referral.patientId` only to unlink that one record's withdrawn front-door referrals; it reads no other referral and shows nothing.
+
+## D-150. The signed-in site runs on real Perth time (11 November 2026)
+
+- **Date:** 11 November 2026. **Decided by:** Josh, approving decision item 5 of the live audit fix plan, as for D-148.
+- **Decision:** the shared world's clock is the real minutes since its day zero (a Perth midnight). A new world's seed is re-anchored onto that time, as the public demo already does (`ward-reanchor.ts`). The scripted clock that starts at 10:42 stays on the public demo only, and the advance-clock controls are hidden on the signed-in site.
+- **Why:** the shared clock started at 10:42 whenever the world was made, so the board, labelled AWST, ran about 48 minutes fast all day.
+- **Note:** an existing shared world's clock steps back once by that gap when this is released, so steps recorded in the last 48 minutes before the release briefly read as a little in the future.
+- **Boundary:** synthetic data only. No clinical rule or signed value changes.
+
+## D-151. A bed tile says when a change is waiting to save (11 November 2026)
+
+- **Date:** 11 November 2026. **Decided by:** Josh, approving decision item 3 of the live audit fix plan, as for D-148.
+- **Decision:** the privacy rule stands (D-18, D-72, D-124): a save waiting on the signed-in site is held in this page's memory only, never on the device. The ward bed tile now says "Waiting to save" while a save for that bed is waiting. The browser's warning before the page closes or reloads with a save waiting was already in place (since 23 October), so it is unchanged.
+- **Why:** the live audit closed a bed offline and the tile still read "Ready", with nothing on it to say the change had not gone.
+- **Boundary:** presentation only, synthetic data. Nothing new is stored on the device.
+
 ## D-152. Returned to ED prompt sees every return in shared mode (11 November 2026)
 
 - **Date:** 11 November 2026 (`2026-11-11`). **Decided by:** Josh, "Yes go ahead with all recommendations" in the Ward Flow project thread "Show every ED return in shared mode", approving the follow-up the batch 3 thread recorded on PR #1605. Numbered D-152 because D-145 to D-151 belong to other threads. D-145 is claimed by open PR #1623. D-146 is claimed by open PR #1624. D-148 is claimed by open PR #1626. D-149 is claimed by open PR #1626. D-150 is claimed by open PR #1626. D-151 is claimed by open PR #1626.
@@ -1904,3 +1943,18 @@ is inferred.
 - **Episode list:** the mock-up community episodes' team and status moved to `patients/community-episode-teams.ts`, the one place they are typed. The patient record mock-ups spread them in. That keeps the record mock-ups out of the shared access code.
 - **Not covered:** shared mode. A shared community desk's copy comes from the server's `scopeWardFlowState`, which does not send this list yet, so the card stays empty there, as before. Sending it the way D-152 sends `diversionReturns` is a separate change.
 - **Boundary:** synthetic data only. Display only. No event, stored field or signed clinical value changes, and this approves no merge or release.
+
+## D-155. Check the live clock offset before clearing it (11 November 2026)
+
+- **Date:** 11 November 2026 (`2026-11-11`). **Decided by:** Josh, "Go ahead with all recommendations" in the Ward Flow project thread for PRs #1622, #1623 and #1626, choosing the recommended option on the decision card about the live world's clock offset. Numbered D-155 because D-153 and D-154 belong to other threads, and both are recorded above (PR #1630 and PR #1632).
+- **Decision:** D-150 keeps `clockOffsetMinutes` on purpose, because test servers use it to move the clock. After this PR is released, the live shared world's stored offset is read once, read-only, and reported to Josh. If it is not 0, nothing is written: clearing it is a live write that waits for Josh's own yes.
+- **Why:** under D-150 a leftover offset would keep the signed-in site's clock ahead of real Perth time by that amount. Reading the value is harmless, and Josh decides on the live write once the number is known.
+- **Boundary:** synthetic data only. No code change, and no live write is approved. Changes no clinical rule or signed value, and approves no merge or release.
+
+## D-156. Reset the synthetic live world after the clock fix (11 November 2026)
+
+- **Date:** 11 November 2026 (`2026-11-11`). **Decided by:** Josh, choosing "Reset the synthetic live world" on the decision card in the Ward Flow project thread for PR #1626 (18:07 UTC), about the times stored before D-150's clock change.
+- **Decision:** after PR #1626 is released, the live shared world is reset to a fresh synthetic seed, so every stored time is on the new clock. Its current demo history goes, PT-A06 and TEST-Helper4 included, which also covers the D-149 archive of those records. This supersedes D-155's "clearing it waits for Josh's own yes": the reset clears any stored clock offset as well, so no separate offset write is needed. D-155's text stands as recorded.
+- **Why:** the live world holds synthetic data only, so a reset is the simplest fix. It leaves no lasting skew from D-150's clock change: without it, times stored before release stay about 48 minutes ahead of the new clock, so waits recorded before release read short and an expired Undo could briefly come back.
+- **Boundary:** synthetic data only. No code change in this PR. The reset is one live write, made by this thread after release, not by CI. Changes no clinical rule or signed value, and approves no merge or release.
+- **Withdrawn (12 November 2026):** Josh withdrew the post-release reset of the live synthetic shared world on 12 November 2026 (`2026-11-12`). No reset happens without a verified pre-reset backup and a tested restore, plus a fresh yes from Josh. D-149's after-release archive of PT-A06 and TEST-Helper4 is restored: that live write still waits for Josh's yes. D-155 stands as recorded: after release, the live world's stored clock offset is read once, read-only, and reported; any clear of that offset is a live write that waits for Josh's yes. This entry's 11 November decision to reset after release is withdrawn and does not supersede D-149 or D-155.
diff --git a/docs/ward-flow/desk-guides/access-admin.md b/docs/ward-flow/desk-guides/access-admin.md
index 7f679bcebc..c4138b0dce 100644
--- a/docs/ward-flow/desk-guides/access-admin.md
+++ b/docs/ward-flow/desk-guides/access-admin.md
@@ -29,7 +29,8 @@ Access is managed in **Settings**. On a phone, the bar at the bottom has **Gover
 ## Saved, or not
 
 - After a change, a short message says it was recorded.
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed change.
 - A message saying a change was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/community-team.md b/docs/ward-flow/desk-guides/community-team.md
index 6b5e948555..5004b671f9 100644
--- a/docs/ward-flow/desk-guides/community-team.md
+++ b/docs/ward-flow/desk-guides/community-team.md
@@ -43,7 +43,8 @@ holds **New referral**, and **Activity** is under **Menu**.
 - After an action, a short message says it was recorded. In the demo it adds "Saved on this
   device only."
 - A contact is shown as saved only once the save is confirmed.
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/emergency-department.md b/docs/ward-flow/desk-guides/emergency-department.md
index 66f7372b0b..7969ae6d3e 100644
--- a/docs/ward-flow/desk-guides/emergency-department.md
+++ b/docs/ward-flow/desk-guides/emergency-department.md
@@ -1,6 +1,6 @@
 # Desk guide: ED mental health clinician
 
-<!-- last-checked: 2026-11-10 -->
+<!-- last-checked: 2026-11-11 -->
 
 You look after mental health patients waiting in your own emergency department.
 
@@ -14,8 +14,8 @@ holds **New referral**.
 
 ## Jobs you do most
 
-1. **New referral.** Use **New referral**, from the header or on the board. Fill in the
-   form and send it.
+1. **New referral.** Press **New** in the header and choose **Referral** (**Triage** is the other
+   choice). Fill in the form and send it.
 2. **Record ED steps.** On a patient, use **Record examination**, **Record medically cleared** and
    **Mark handover ready**.
 3. **Legal paperwork.** Use **Change legal status** and **Mark Form 1A received**. Type any expiry
@@ -37,7 +37,8 @@ holds **New referral**.
   device only."
 - A success message now waits until the save is confirmed. Until then, what you typed stays in the
   form.
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/flow-coordinator.md b/docs/ward-flow/desk-guides/flow-coordinator.md
index b83c57a84e..e4be9e7b6e 100644
--- a/docs/ward-flow/desk-guides/flow-coordinator.md
+++ b/docs/ward-flow/desk-guides/flow-coordinator.md
@@ -62,7 +62,8 @@ Source: [Home queue order](../../../src/components/ward-management/ward-priority
 
 - After an action, a short message says it was recorded. In the demo it adds "Saved on this
   device only."
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/site-bed-manager.md b/docs/ward-flow/desk-guides/site-bed-manager.md
index fe7f774dc2..e9f22a302c 100644
--- a/docs/ward-flow/desk-guides/site-bed-manager.md
+++ b/docs/ward-flow/desk-guides/site-bed-manager.md
@@ -38,7 +38,8 @@ are under **Menu**.
 
 - After an action, a short message says it was recorded. In the demo it adds "Saved on this
   device only."
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/transport-officer.md b/docs/ward-flow/desk-guides/transport-officer.md
index ef9d9442a8..2a6c3af24c 100644
--- a/docs/ward-flow/desk-guides/transport-officer.md
+++ b/docs/ward-flow/desk-guides/transport-officer.md
@@ -34,7 +34,8 @@ You get phone alerts when a job is new or changes.
 
 - After each step, a short message says it was recorded, or why it was refused. In the demo it adds
   "Saved on this device only."
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/ward.md b/docs/ward-flow/desk-guides/ward.md
index 47219e6372..30137f4fad 100644
--- a/docs/ward-flow/desk-guides/ward.md
+++ b/docs/ward-flow/desk-guides/ward.md
@@ -45,7 +45,8 @@ bed count is not read as a problem with the patient.
 
 - After an action, a short message says it was recorded. In the demo it adds "Saved on this
   device only."
-- On a shared board the status line reads "Saving shared changes…", then your desk name again.
+- On a shared board a small "Saving…" note shows while a save goes through. If it takes longer
+  than 8 seconds, or you are offline, the status line warns you not to reload.
 - If it reads "Connection unavailable — changes are disabled." and shows **Retry**: stay on the
   page and press **Retry**. Do not reload. Reloading loses the unconfirmed action.
 - A message saying an action was not recorded means nothing changed. Read the reason and try again.
diff --git a/docs/ward-flow/desk-guides/why-cant-i.md b/docs/ward-flow/desk-guides/why-cant-i.md
index 1c616846e3..31b7764276 100644
--- a/docs/ward-flow/desk-guides/why-cant-i.md
+++ b/docs/ward-flow/desk-guides/why-cant-i.md
@@ -1,6 +1,6 @@
 # Desk guide: Why can't I open this?
 
-<!-- last-checked: 2026-11-07 -->
+<!-- last-checked: 2026-11-11 -->
 
 Each desk opens only the screens its role allows. If you cannot open a screen, check the table for the roles that can, and ask the access admin if you need it.
 
@@ -9,7 +9,6 @@ Each desk opens only the screens its role allows. If you cannot open a screen, c
 | Screen               | Roles that can open it                                                                                                                                                                                      |
 | -------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | `home`               | Bed coordinator                                                                                                                                                                                             |
-| `network`            | Bed coordinator                                                                                                                                                                                             |
 | `capacity`           | Bed coordinator, Bed manager (own place), Executive (counts only)                                                                                                                                           |
 | `wards`              | Bed coordinator, Bed manager (own place)                                                                                                                                                                    |
 | `hub`                | Bed coordinator, Bed manager (own place)                                                                                                                                                                    |
diff --git a/docs/ward-flow/journey/MAP-INVENTORY.md b/docs/ward-flow/journey/MAP-INVENTORY.md
index 93d97ca9b5..a5e20bf963 100644
--- a/docs/ward-flow/journey/MAP-INVENTORY.md
+++ b/docs/ward-flow/journey/MAP-INVENTORY.md
@@ -1069,25 +1069,27 @@ Source-contract SHA256: 7cfda9a71c556b4d10a573977f0ef64456a4f9bb9890c7a236952cd7
   Event/dispatch reference: src/components/ward-management/ward-flow-reducer.ts:1678
   Event/dispatch reference: src/components/ward-management/ward-patient-registration-reducer.ts:39
 - ARCHIVE_PATIENT — modelled; event roles: coordinator
-  Source-reviewed command model: Patient removed from active patients list; audit event and sequence retained.
+  Source-reviewed command model: Patient removed from active patients list (withdrawn-only referrals unlinked, D-149); audit event and sequence retained.
   Permission source: src/components/ward-management/ward-flow-event-roles.ts:405
   Event/dispatch reference: src/components/ward-management/ward-flow-reducer.ts:1680
   Event/dispatch reference: src/components/ward-management/ward-patient-archive-reducer.ts:10
   Subject: An erroneous standalone patient registration
-  Before: Patient has only registration fields and no care records/references elsewhere
+  Before: Patient has only registration fields, and nothing else names it except withdrawn or cancelled front-door referrals, audit rows, or Undo records older than the Undo window (D-149)
   After: Patient removed from active patients list; audit event and sequence retained
   Scope: Coordinator only, with shared record scope applied. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.
   payload: patientId; reason from PATIENT_ARCHIVE_REASONS (duplicate, test, wrong_person); role and now
   guards: Patient must exist; listed archive reason
-  guards: Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact or any state/audit care reference; prior archive-attempt audit entries do not block
+  guards: Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact, any open or answered referral, or any other state reference. D-149 (Josh, 11 Nov 2026): a front-door referral whose every destination was withdrawn by the referrer or cancelled does not block, audit rows do not block, and an Undo record blocks only while it is inside the Undo window (measured from the event's now). Each refusal names its reason, and the coordinator's card shows it instead of hiding
   effects: Filters patient from patients; keeps sequence so id is not reused
+  effects: D-149: a withdrawn or cancelled referral that named the record stays in the referrals list with its patientId removed, so the stored workspace still validates
+  effects: D-149 review: an Undo record still naming the record (past the Undo window, or stamped after the board's time) is dropped, so it cannot become usable later and bring back a step naming an archived record
   effects: Reducer audit wrapper retains the archive event/reason; no care record is removed
   effects: The step can be taken back by UNDO_PATIENT_RECORD within the Undo window.
   tests: tests/ward-patient-archive.test.ts
-  Reviewed source: src/components/ward-management/ward-patient-archive-reducer.ts:10; SHA256 bfd91bd2e7955ee0c776cf1c8e5fb3ecb1dd76d2cd0d2c9a71a9789270b95898
+  Reviewed source: src/components/ward-management/ward-patient-archive-reducer.ts:10; SHA256 d62abeda9f9da15c550d60692fddf854fe29ece3c2db0bc472ab46c01886a930
   Reviewed source: src/components/ward-management/ward-flow-event-roles.ts:407; SHA256 808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda
-  Reviewed source: src/components/ward-management/ward-patient-archive.ts:30; SHA256 2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3
-  Reviewed source: src/components/ward-management/ward-patient-archive.ts:44; SHA256 2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3
+  Reviewed source: src/components/ward-management/ward-patient-archive.ts:32; SHA256 0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54
+  Reviewed source: src/components/ward-management/ward-patient-archive.ts:54; SHA256 0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54
   Reviewed source: src/components/ward-management/ward-access-state.ts:709; SHA256 6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703
 - ACCEPT_REFERRAL — diagram-reviewed; event roles: ward, coordinator, ed, community
   Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance.
diff --git a/docs/ward-flow/journey/README.md b/docs/ward-flow/journey/README.md
index bb1d57fb55..a31dd7cf16 100644
--- a/docs/ward-flow/journey/README.md
+++ b/docs/ward-flow/journey/README.md
@@ -280,6 +280,18 @@ Source digests were re-reviewed file by file before being re-recorded:
 
 After `main` (D-121 to D-127) was merged into this branch (10 Nov 2026), `ward/ward-screen.tsx` and `ward-tasks-drawer.tsx` hold both sides' edits. Each cited line was found again by its text, unchanged in role, payload and guard: the twelve `ward-screen.tsx` citations moved down by three to seven lines, and `RECORD_ESCALATION` in `ward-tasks-drawer.tsx` moved to line 673 (one comment line added beside the D-125 sign-out wait). Only lines and digests were re-recorded. This thread's rulings were then renumbered D-129 and D-130, a comment-only change in the cited files, so those digests (in `actions.json`, `event-dispositions.json` and `machines.json`) were re-recorded with no line moved.
 
+Live audit fixes (#1626, 11 Nov 2026): source digests for three files were re-reviewed. Each cited line was found again by its text, and its role, payload and guard are unchanged.
+
+- `community/community-screen.tsx`: the signed-in shared workspace no longer shows the Midland demo team (item 6), and a team contact there is not kept in the browser. The `ACCEPT_REFERRAL`, `DECLINE_REFERRAL` and `MARK_NOTICE_READ` dispatches each moved down seven lines.
+- `officer/officer-screen.tsx`: the handover copy toast says "1 open job" (item 25), which adds one import line. The four transport events each moved down one line.
+- `ward/ward-screen-overlays.tsx`: closing a bed offers an optional reason on its toast (D-148). `SET_BED_CLOSED` is unchanged. Choosing a reason undoes the close and sends it again with that reason. `RECORD_AWAY_AT_EMERGENCY_DEPARTMENT`, `RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT`, `SET_BED_PREPARATION` and the discharge-barrier dispatch each moved down twelve lines.
+- `ward-global-search.tsx`, `tools/ward-demo-panel.tsx`: `ADVANCE_CLOCK` is unchanged, but D-150 hides its controls in shared mode, because the signed-in site runs on real Perth time. The action's screen note says so. `RESET_SCENARIO` and `SET_SCENARIO` are unchanged.
+- `ward-patient-archive.ts`, `ward-patient-archive-reducer.ts`: D-149 changed `ARCHIVE_PATIENT`'s guard. A withdrawn or cancelled front-door referral, audit rows and expired Undo records no longer block, and the withdrawn referral is unlinked from the archived record. The command model's before, guards, effects and the `patientArchiveProblem` citation (line 44 to 54) are updated.
+- `ward-patient-archive.ts` (review round, 11 Nov 2026): an Undo record now blocks archive through the last minute of the Undo window (`<=`), matching `undoWindowRefusal`, which still allows Undo at exactly that minute. One character changed; no cited line moved and the model's prose ("inside the Undo window") stands, so only the digest was re-recorded.
+- `ward-patient-archive.ts` (independent review, 11 Nov 2026): an Undo record stamped after the board's time, which D-150's one-off clock step back can leave, no longer blocks archive, matching `undoWindowRefusal`, which refuses such an Undo. Only the Undo-window filter below the cited lines changed; no cited line moved, so only the digest was re-recorded.
+- `ward-patient-archive-reducer.ts` (CodeRabbit review, 11 Nov 2026): archive now drops any Undo record still naming the archived record. Such a record is past the Undo window or stamped after the board's time, so it cannot be used now, but a future-stamped one would become usable once the clock reached it and could bring back a step naming a record that has left the lists. The model gains one effect line; the cited line did not move.
+- `ward/ward-screen-overlays.tsx` (merge with main #1608, 11 Nov 2026): the four citations moved down with this PR's toast-choice lines, and `ward-bed-closure-reason.ts` moved to the ward root so the screen-to-screen import count stays at 564. Only an import path changed after that, and the toast's reasoned close now keeps the first close's review time (PR #1626 review), two lines above the citations; the lines and digest were re-recorded.
+
 ## Source review — 10 Nov 2026 (Batch 4 outages and pilot control, PR #1603, D-135)
 
 Source digests were re-reviewed file by file against `main` before being re-recorded. Only additive Batch 4 edits were found:
diff --git a/docs/ward-flow/journey/actions.json b/docs/ward-flow/journey/actions.json
index 5c50823142..d9211a73b2 100644
--- a/docs/ward-flow/journey/actions.json
+++ b/docs/ward-flow/journey/actions.json
@@ -391,13 +391,13 @@
         },
         {
           "path": "src/components/ward-management/community/community-screen.tsx",
-          "line": 592,
-          "sha256": "12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"
+          "line": 599,
+          "sha256": "b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1329,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1330,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/referrals/referral-match.tsx",
@@ -493,8 +493,8 @@
         },
         {
           "path": "src/components/ward-management/community/community-screen.tsx",
-          "line": 532,
-          "sha256": "12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"
+          "line": 539,
+          "sha256": "b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"
         },
         {
           "path": "src/components/ward-management/ed/use-ed-screen-decline.ts",
@@ -1039,8 +1039,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1291,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1292,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward/ward-answer-view.tsx",
@@ -1131,8 +1131,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1382,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1383,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward/ward-answer-view.tsx",
@@ -1853,8 +1853,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1427,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1428,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward/ward-answer-view.tsx",
@@ -1968,8 +1968,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1825,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1826,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/patients/patient-transit-operations.tsx",
@@ -2388,8 +2388,8 @@
         },
         {
           "path": "src/components/ward-management/officer/officer-screen.tsx",
-          "line": 521,
-          "sha256": "da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"
+          "line": 522,
+          "sha256": "adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"
         },
         {
           "path": "src/components/ward-management/patients/patient-transit-operations.tsx",
@@ -2457,8 +2457,8 @@
         },
         {
           "path": "src/components/ward-management/officer/officer-screen.tsx",
-          "line": 528,
-          "sha256": "da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"
+          "line": 529,
+          "sha256": "adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"
         },
         {
           "path": "src/components/ward-management/patients/patient-transit-operations.tsx",
@@ -2534,8 +2534,8 @@
         },
         {
           "path": "src/components/ward-management/officer/officer-screen.tsx",
-          "line": 544,
-          "sha256": "da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"
+          "line": 545,
+          "sha256": "adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"
         },
         {
           "path": "src/components/ward-management/patients/patient-transit-operations.tsx",
@@ -2611,8 +2611,8 @@
         },
         {
           "path": "src/components/ward-management/officer/officer-screen.tsx",
-          "line": 563,
-          "sha256": "da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"
+          "line": 564,
+          "sha256": "adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"
         },
         {
           "path": "src/components/ward-management/tools/ward-tool-feed.tsx",
@@ -3385,8 +3385,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1723,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1724,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/tools/ward-tool-feed.tsx",
@@ -3469,8 +3469,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen-overlays.tsx",
-          "line": 288,
-          "sha256": "5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"
+          "line": 286,
+          "sha256": "0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"
         },
         {
           "path": "src/components/ward-management/board/ward-board-detail-panel.tsx",
@@ -3548,8 +3548,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen-overlays.tsx",
-          "line": 299,
-          "sha256": "5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"
+          "line": 297,
+          "sha256": "0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"
         },
         {
           "path": "src/components/ward-management/board/ward-board-detail-panel.tsx",
@@ -3691,8 +3691,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1748,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1749,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/board/ward-board.tsx",
@@ -3824,8 +3824,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1661,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1662,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward-flow-bed-events.ts",
@@ -4037,8 +4037,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1680,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1681,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/discharges/discharge-board.tsx",
@@ -4106,8 +4106,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen-overlays.tsx",
-          "line": 311,
-          "sha256": "5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"
+          "line": 309,
+          "sha256": "0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"
         },
         {
           "path": "src/components/ward-management/ward-flow-bed-events.ts",
@@ -4170,8 +4170,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1569,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1570,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward/ward-answer-view.tsx",
@@ -4694,13 +4694,13 @@
         },
         {
           "path": "src/components/ward-management/community/community-screen.tsx",
-          "line": 835,
-          "sha256": "12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"
+          "line": 842,
+          "sha256": "b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1104,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1105,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward-inbox-reducer.ts",
@@ -4953,10 +4953,10 @@
     ],
     "screen": {
       "screen": "ward-global-search.tsx; tools/ward-demo-panel.tsx",
-      "control": "Global Search offers Advance demo clock (+15m), dispatching minutes=15 under role demo; the Demo panel also offers +15 min and +1 hour. Imperative search navigation and desk switching first consult the composed unsaved-work guard."
+      "control": "Global Search offers Advance demo clock (+15m), dispatching minutes=15 under role demo; the Demo panel also offers +15 min and +1 hour. D-150 (11 Nov 2026): the signed-in shared site runs on real Perth time, so both controls are hidden in shared mode and remain on the public demo only. Imperative search navigation and desk switching first consult the composed unsaved-work guard."
     },
     "review": {
-      "reviewedOn": "2026-11-05",
+      "reviewedOn": "2026-11-11",
       "sources": [
         {
           "path": "src/components/ward-management/ward-flow-event-roles.ts",
@@ -4970,13 +4970,13 @@
         },
         {
           "path": "src/components/ward-management/ward-global-search.tsx",
-          "line": 1275,
-          "sha256": "b7c651d7a0a3110b10e5d46aeb7ab769359393240cf55bb4024fc570504185ac"
+          "line": 802,
+          "sha256": "da7ec0be180ef0f2d0009261ed09aa538703e8153afb3ef84b292aac44d21c73"
         },
         {
           "path": "src/components/ward-management/tools/ward-demo-panel.tsx",
-          "line": 268,
-          "sha256": "002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"
+          "line": 271,
+          "sha256": "ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"
         },
         {
           "path": "src/components/ward-management/ward-flow-provider.tsx",
@@ -5033,7 +5033,7 @@
         {
           "path": "src/components/ward-management/tools/ward-demo-panel.tsx",
           "line": 197,
-          "sha256": "002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"
+          "sha256": "ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"
         }
       ]
     }
@@ -5084,7 +5084,7 @@
         {
           "path": "src/components/ward-management/tools/ward-demo-panel.tsx",
           "line": 197,
-          "sha256": "002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"
+          "sha256": "ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"
         },
         {
           "path": "src/components/ward-management/ward-flow-reducer.ts",
@@ -5700,8 +5700,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen-overlays.tsx",
-          "line": 346,
-          "sha256": "5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"
+          "line": 344,
+          "sha256": "0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"
         },
         {
           "path": "src/components/ward-management/board/ward-board-detail-panel.tsx",
@@ -6725,8 +6725,8 @@
         },
         {
           "path": "src/components/ward-management/ward/ward-screen.tsx",
-          "line": 1084,
-          "sha256": "609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"
+          "line": 1085,
+          "sha256": "c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"
         },
         {
           "path": "src/components/ward-management/ward-flow-reducer.ts",
diff --git a/docs/ward-flow/journey/event-dispositions.json b/docs/ward-flow/journey/event-dispositions.json
index 82c7fb6f6d..b0a7d16d19 100644
--- a/docs/ward-flow/journey/event-dispositions.json
+++ b/docs/ward-flow/journey/event-dispositions.json
@@ -1444,20 +1444,22 @@
   {
     "event": "ARCHIVE_PATIENT",
     "status": "modelled",
-    "reason": "Source-reviewed command model: Patient removed from active patients list; audit event and sequence retained.",
+    "reason": "Source-reviewed command model: Patient removed from active patients list (withdrawn-only referrals unlinked, D-149); audit event and sequence retained.",
     "source": "src/components/ward-management/ward-patient-archive-reducer.ts",
     "model": {
       "subject": "An erroneous standalone patient registration",
-      "before": "Patient has only registration fields and no care records/references elsewhere",
+      "before": "Patient has only registration fields, and nothing else names it except withdrawn or cancelled front-door referrals, audit rows, or Undo records older than the Undo window (D-149)",
       "after": "Patient removed from active patients list; audit event and sequence retained",
       "payload": ["patientId; reason from PATIENT_ARCHIVE_REASONS (duplicate, test, wrong_person); role and now"],
       "scope": "Coordinator only, with shared record scope applied. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.",
       "guards": [
         "Patient must exist; listed archive reason",
-        "Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact or any state/audit care reference; prior archive-attempt audit entries do not block"
+        "Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact, any open or answered referral, or any other state reference. D-149 (Josh, 11 Nov 2026): a front-door referral whose every destination was withdrawn by the referrer or cancelled does not block, audit rows do not block, and an Undo record blocks only while it is inside the Undo window (measured from the event's now). Each refusal names its reason, and the coordinator's card shows it instead of hiding"
       ],
       "effects": [
         "Filters patient from patients; keeps sequence so id is not reused",
+        "D-149: a withdrawn or cancelled referral that named the record stays in the referrals list with its patientId removed, so the stored workspace still validates",
+        "D-149 review: an Undo record still naming the record (past the Undo window, or stamped after the board's time) is dropped, so it cannot become usable later and bring back a step naming an archived record",
         "Reducer audit wrapper retains the archive event/reason; no care record is removed",
         "The step can be taken back by UNDO_PATIENT_RECORD within the Undo window."
       ],
@@ -1465,7 +1467,7 @@
         {
           "path": "src/components/ward-management/ward-patient-archive-reducer.ts",
           "line": 10,
-          "sha256": "bfd91bd2e7955ee0c776cf1c8e5fb3ecb1dd76d2cd0d2c9a71a9789270b95898"
+          "sha256": "d62abeda9f9da15c550d60692fddf854fe29ece3c2db0bc472ab46c01886a930"
         },
         {
           "path": "src/components/ward-management/ward-flow-event-roles.ts",
@@ -1474,13 +1476,13 @@
         },
         {
           "path": "src/components/ward-management/ward-patient-archive.ts",
-          "line": 30,
-          "sha256": "2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3"
+          "line": 32,
+          "sha256": "0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54"
         },
         {
           "path": "src/components/ward-management/ward-patient-archive.ts",
-          "line": 44,
-          "sha256": "2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3"
+          "line": 54,
+          "sha256": "0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54"
         },
         {
           "path": "src/components/ward-management/ward-access-state.ts",
diff --git a/docs/ward-flow/journey/ward-journey-explorer.html b/docs/ward-flow/journey/ward-journey-explorer.html
index 446d353c83..3de03c0c2c 100644
--- a/docs/ward-flow/journey/ward-journey-explorer.html
+++ b/docs/ward-flow/journey/ward-journey-explorer.html
@@ -1284,7 +1284,7 @@ <h3>What to do here</h3>
 
     <!-- prettier-ignore -->
     <script>
-      const DATA = {"vocab":{"vocabularies":{"DECLINE_REASONS":{"file":"ward-model.ts","members":["no_suitable_bed","age_band_not_provided_here","sex_designation_unavailable","secure_bed_unavailable","belongs_to_another_service","referred_elsewhere","specialling_unavailable","acuity_mix","capability_mismatch","bed_pulled_for_earlier_referral","another_reason"]},"SUPPORT_SERVICE_TYPES":{"file":"ward-model-bed-release.ts","members":["pharmacy","transport","cleaning"]},"ARRIVAL_CHECKS":{"file":"ward-model-bed-release.ts","members":["contraband_search","medication_chart","interpreter_booked","aboriginal_liaison_offered"]},"BED_RELEASE_STATES":{"file":"ward-model-bed-release.ts","members":["expected","confirmed","discharged"]},"BED_RELEASE_WAITING_ON":{"file":"ward-model-bed-release.ts","members":["Awaiting ward round","Awaiting family or carer agreement","Awaiting accommodation","Awaiting community team acceptance","Awaiting legal or Mental Health Act process","Awaiting transport","Nothing outstanding"]},"HEALTH_SERVICES":{"file":"ward-model-vocabulary.ts","members":["North Metro","South Metro","East Metro","WACHS","CAHS","Private"]},"COHORTS":{"file":"ward-model-vocabulary.ts","members":["Adult","Older adult","Youth"]},"BLOCKERS_MEANING_NOTHING_IS_BLOCKING":{"file":"ward-model-vocabulary.ts","members":["No blocker","None — in transit","None — handover complete","None — the movement did not proceed","None — cleared"]},"SEXES":{"file":"ward-model-vocabulary.ts","members":["Female","Male"]},"RECORDED_SEXES":{"file":"ward-model-vocabulary.ts","members":["Another term","Not recorded"]},"URGENCY_LEVELS":{"file":"ward-model-vocabulary.ts","members":["1","2","3"]},"ATS_CATEGORIES":{"file":"ward-model-vocabulary.ts","members":["1","2","3","4","5"]},"TRAVEL_MODES":{"file":"ward-model-vocabulary.ts","members":["Ambulance (St John)","Mental Health Transport","Patient transport service","RFDS","Police escort","Ward escort","Family or carer"]},"ARRIVAL_MODES":{"file":"ward-model-vocabulary.ts","members":["ambulance","mental_health_transport","hospital_transfer","rfds","police","ward_escort","self"]},"UPLOADED_FILE_TYPES":{"file":"ward-model-vocabulary.ts","members":["PDF","JPEG","PNG","Other"]},"SEX_DESIGNATIONS":{"file":"ward-model-vocabulary.ts","members":["Undesignated","Female only","Male only"]},"REFERRAL_GENDERS":{"file":"ward-model-vocabulary.ts","members":["Female","Male","Non-binary","Different term"]},"MOVEMENT_STAGES":{"file":"ward-model-vocabulary.ts","members":["placement_requested","destination_review","accepted_awaiting_bed","pulled","handover_ready","moving","arrived"]},"STEP_BACK_REASONS":{"file":"ward-model-vocabulary.ts","members":["recorded_in_error","the_decision_changed","the_patient_situation_changed","the_bed_was_lost"]},"PAPER_EXPIRY_CORRECTION_REASONS":{"file":"ward-model-vocabulary.ts","members":["transcription_error","paper_rechecked"]},"LEGAL_FORM_MAKER_ROLES":{"file":"ward-model-vocabulary.ts","members":["medical_practitioner","amhp","psychiatrist","mental_health_practitioner","person_in_charge"]},"LEGAL_FORM_COPY_STATES":{"file":"ward-model-vocabulary.ts","members":["yes","declined","not_yet"]},"LEGAL_FORM_ENDINGS":{"file":"ward-model-vocabulary.ts","members":["revoked","form_3e","replaced","ended_as_typed"]},"LEGAL_FORM_CONSENT_STATES":{"file":"ward-model-vocabulary.ts","members":["yes","not_yet"]},"TRANSPORT_PROVIDERS":{"file":"ward-model-movement-parts.ts","members":["Ambulance service"]},"TRANSPORT_LEGAL_STATUSES":{"file":"ward-model-movement-parts.ts","members":["voluntary","involuntary"]},"TRANSPORT_EXCEPTION_GAPS":{"file":"ward-model-movement-parts.ts","members":["legal_status_differs","transport_order_missing","fit_to_travel_missing"]},"TRANSPORT_EXCEPTION_REASONS":{"file":"ward-model-movement-parts.ts","members":["paper_sighted","treating_team_confirmed","urgent_to_follow"]},"MOVEMENT_REFERRAL_ABSENCE_REASONS":{"file":"ward-model-movement-parts.ts","members":["none_raised","not_asked"]},"EXAMINATION_OUTCOMES":{"file":"ward-model-movement-parts.ts","members":["inpatient_order","community_order","revoked","further_examination_ordered"]},"PSYCH_REVIEW_GRADES":{"file":"ward-model-movement-parts.ts","members":["registrar","consultant"]},"ED_OUTCOMES":{"file":"ward-model-movement-parts.ts","members":["for_discharge","for_community_follow_up"]},"REFERRAL_SOURCES":{"file":"ward-model-referral-parts.ts","members":["community","crisis_service","ambulance","inter_hospital","ed_medical","gp","psychiatric_ward"]},"REFERRAL_STATES":{"file":"ward-model-referral-parts.ts","members":["queued","accepted","declined"]},"COMMUNITY_DECLINE_REASONS":{"file":"ward-model-referral-parts.ts","members":["outside_the_teams_catchment","needs_inpatient_care_not_community_follow_up","client_declined_or_could_not_be_contacted","already_open_to_another_community_team"]},"HOME_REGIONS":{"file":"ward-model-referral-parts.ts","members":["Perth Metropolitan","Peel","South West","Great Southern","Wheatbelt","Goldfields-Esperance","Mid West","Gascoyne","Pilbara","Kimberley"]},"REFERRAL_DESTINATION_KINDS":{"file":"ward-model-referral-parts.ts","members":["psychiatric_ward","emergency_department","community_team"]},"REFERRAL_PURPOSES":{"file":"ward-model-referral-parts.ts","members":["bed","psychiatric_review","medical_assessment"]},"COMMUNITY_REFERRAL_PURPOSES":{"file":"ward-model-referral-parts.ts","members":["follow_up","assess_for_admission"]},"REFERRAL_ADDRESSING_STATES":{"file":"ward-model-referral-parts.ts","members":["queued","accepted","declined","cancelled"]},"SUBURB_UNKNOWN_REASONS":{"file":"ward-model-referral-parts.ts","members":["not_known"]},"ABSENCE_STEPS":{"file":"ward-model-leave.ts","members":["searched","psychiatrist_told","return_order_made","description_recorded","police_notified","next_of_kin_told"]},"URGENCY_CHANGE_REASONS":{"file":"ward-change-reasons.ts","members":["reassessed","new_information","correcting_an_error"]},"LEGAL_STATUS_CHANGE_REASONS":{"file":"ward-change-reasons.ts","members":["recorded_by_treating_team","correcting_an_error"]},"LEGAL_FORM_RECEIPT_CORRECTION_REASONS":{"file":"ward-change-reasons.ts","members":["recorded_in_error","recorded_against_wrong_movement","form_had_not_physically_arrived"]},"RELEASE_PULL_REASONS":{"file":"ward-change-reasons.ts","members":["patient_no_longer_coming","bed_needed_for_another_patient","ward_withdrew_the_bed","pull_made_in_error"]},"CANCEL_TRANSPORT_REASONS":{"file":"ward-change-reasons.ts","members":["provider_unavailable","patient_not_ready","destination_changed","job_created_in_error"]},"STOP_TRANSPORT_REASONS":{"file":"ward-change-reasons.ts","members":["The examination was revoked","The referral was withdrawn","The receiving ward can no longer take the patient","Absconded in transit, whereabouts unknown"]},"TRANSPORT_WHEREABOUTS":{"file":"ward-change-reasons.ts","members":["Back at the sending emergency department","At another emergency department","At a general hospital","With the transport crew","Another place — needs follow-up"]},"DIVERSION_REASONS":{"file":"ward-change-reasons.ts","members":["Needs urgent medical care on the way","The vehicle or crew was sent to an emergency","The receiving ward can no longer take the patient","Another reason — needs follow-up"]},"ESCALATION_CONTACTS":{"file":"ward-change-reasons.ts","members":["State bed coordination desk","Duty psychiatrist","Bed management","Nurse unit manager (destination ward)","Escort or transport provider","Other service"]},"BED_RELEASE_BLOCKERS":{"file":"ward-change-reasons.ts","members":["Awaiting clean","Awaiting pharmacy","Awaiting placement confirmation","Awaiting service coordination","Awaiting accommodation","Awaiting transport","Awaiting receiving-service acceptance","Awaiting family or carer arrangement","Funding or plan decision pending"]},"WITHDRAWAL_REASONS":{"file":"ward-change-reasons.ts","members":["another_unit_accepted","referrer_withdrew","coordinator_withdrew","ed_outcome_recorded"]},"WARD_REQUEST_WITHDRAWAL_REASONS":{"file":"ward-change-reasons.ts","members":["no_answer_from_the_ward","bed_no_longer_available","needs_changed_ward_no_longer_suits","closer_to_home_or_family_elsewhere","making_room_within_the_referral_limit","referred_in_error","another_reason"]},"OVERRIDE_REASONS":{"file":"ward-change-reasons.ts","members":["The receiving team has agreed despite the mismatch","Clinical urgency outweighs the mismatch","The bed information is known to be out of date","Continuity with a previous admission at this unit","Closer to the person's home or family"]},"REFERRAL_CAP_REASONS":{"file":"ward-change-reasons.ts","members":["No answer yet from the wards already asked","Clinical urgency needs a wider search","The wards already asked are unlikely to have a bed soon"]},"NOT_ON_SENDING_WARD_REASONS":{"file":"ward-change-reasons.ts","members":["Recently discharged from this ward","Known to this ward's team but not in a bed"]},"BED_PREPARATION_NOTES":{"file":"ward-change-reasons.ts","members":["Being cleaned","Awaiting maintenance or repair"]},"GENDER_PLACEMENT_REASONS":{"file":"ward-change-reasons.ts","members":["A single room is available on this ward","The patient's stated preference, agreed with the ward","No single room is free; the ward agreed a bed and a plan for privacy","The only suitable Ready bed, agreed with the ward","The patient knows this ward from an earlier stay","Closer to the patient's home or supports"]},"URGENT_MARK_REASONS":{"file":"ward-change-reasons.ts","members":["cannot_safely_prevent_leaving","cannot_be_observed_safely_here","safety_of_others_in_this_setting","no_psychiatric_cover_at_this_site","needs_medical_care_unavailable_here","escort_in_place_and_unsustainable","cannot_protect_from_others_here","setting_unsuitable_for_age_group","this_setting_cannot_continue_current_care","another_reason_not_listed"]},"WARD_INTAKE_CONSTRAINTS":{"file":"ward-change-reasons.ts","members":["staffing_shortage","infection_control","bay_or_room_closed","high_acuity_on_ward","waiting_for_bed_clean","other_call_the_ward"]},"DISCHARGE_DELAY_CLEAR_REASONS":{"file":"ward-change-reasons.ts","members":["resolved_clinically","package_confirmed","accommodation_secured","transport_arranged","family_carer_ready","entered_in_error","other"]},"ADMISSION_STATES":{"file":"ward-admissions.ts","members":["waitlisted","pulled","occupied","departed"]},"FOLLOW_UP_STATES":{"file":"ward-admissions.ts","members":["arranged","not_arranged"]},"DISCHARGE_BARRIERS":{"file":"ward-admissions.ts","members":["Accommodation / Housing","NDIS","SAT / Public Guardian","RACF / Aged Care","Clinical / Treatment","Social / Family","Several"]},"DISCHARGE_ROLE_LABELS":{"file":"ward-admissions.ts","members":["Nurse in charge"]},"PLANNED_ADMISSION_REASONS":{"file":"ward-admissions.ts","members":["court_ordered","planned_ect","respite","planned_transfer","other"]},"PLANNED_ADMISSION_CANCEL_REASONS":{"file":"ward-admissions.ts","members":["no_longer_needed","admitted_elsewhere","rebooked","booked_in_error"]},"PLANNED_ADMISSION_STATES":{"file":"ward-admissions.ts","members":["booked","cancelled","arrived"]},"RELEASE_BANDS":{"file":"ward-bed-availability.ts","members":["now","by-midday","by-1600","tonight","tomorrow"]},"GENDERS":{"file":"ward-patients.ts","members":["Female","Male","Non-binary","Different term"]},"PATIENT_FIELDS":{"file":"ward-patients.ts","members":["id","umrn","givenName","familyName","dateOfBirth","preferredName","sex","gender","address","suburb","generalPractitioner","catchmentCommunityTeam","legalStatus","aboriginalOrTorresStraitIslanderStatus","interpreterLanguage","communityTreatmentOrder","addedAt","registrationScope","mobilePhone","otherPhone","email","postcode","nextOfKinName","nextOfKinRelationship","nextOfKinPhone","supportPersonRole","supportPersonName","supportPersonPhone","medicareNumber","medicareReference","medicareExpiry","dvaFileNumber","healthFund","concessionCard","gpPhone","countryOfBirth","interpreterRequired","maritalStatus","advanceHealthDirective","enduringGuardian","carePlans","tribunalHearing","culturalSupportRequested"]},"ELIGIBILITY_GATES":{"file":"ward-eligibility.ts","members":["acuity","age","allocatable_bed","authorisation","capacity_freshness","cohort","forensic","legal_status","prior_decline","security","gender_designation","sex_mix","specialling"]},"CARE_PLAN_TYPES":{"file":"ward-patient-care-plans.ts","members":["Crisis/safety plan","Frequent presenter plan","Community care plan","Other"]},"CARE_PLAN_HELPS":{"file":"ward-patient-care-plans.ts","members":["Quiet space","Known staff member","Family or carer involved early","Clear plan explained","Interpreter","Cultural support","Contact the community team"]},"TRIBUNAL_OUTCOMES":{"file":"ward-patient-care-plans.ts","members":["Held","Adjourned","Cancelled"]},"CULTURAL_SUPPORT_REQUESTS":{"file":"ward-patient-care-plans.ts","members":["Aboriginal liaison officer","Other cultural support"]}},"labels":{"stepBackReasonLabels":{"recorded_in_error":"Recorded in error","the_decision_changed":"The decision changed","the_patient_situation_changed":"The situation changed","the_bed_was_lost":"The bed was lost"},"suburbUnknownLabels":{"not_known":"Suburb not known"},"legalFormReceiptCorrectionReasonLabels":{"recorded_in_error":"Recorded in error","recorded_against_wrong_movement":"Recorded against the wrong movement","form_had_not_physically_arrived":"Form had not physically arrived"},"withdrawalReasonLabels":{"another_unit_accepted":"Withdrawn — another unit accepted this patient.","referrer_withdrew":"Withdrawn by the referrer.","coordinator_withdrew":"Withdrawn by the coordinator.","ed_outcome_recorded":"Withdrawn — the department recorded an outcome for this patient."},"wardRequestWithdrawalReasonLabels":{"no_answer_from_the_ward":"No answer from the ward yet","bed_no_longer_available":"The bed is no longer available","needs_changed_ward_no_longer_suits":"Needs have changed; this ward no longer suits","closer_to_home_or_family_elsewhere":"Closer to home or family elsewhere","making_room_within_the_referral_limit":"Making room within the referral limit","referred_in_error":"Referred in error","another_reason":"Another reason — needs follow-up"},"changeReasonLabels":{"cannot_be_observed_safely_here":"Cannot be observed safely here","no_psychiatric_cover_at_this_site":"No psychiatric cover at this site","cannot_safely_prevent_leaving":"Cannot safely prevent leaving","needs_medical_care_unavailable_here":"Needs medical care unavailable here","safety_of_others_in_this_setting":"Safety of others in this setting","escort_in_place_and_unsustainable":"Escort in place and unsustainable","cannot_protect_from_others_here":"Cannot protect from harm by others here","setting_unsuitable_for_age_group":"No age-appropriate area here","this_setting_cannot_continue_current_care":"This setting cannot continue current care","another_reason_not_listed":"Another reason, not listed here","reassessed":"Reassessed","new_information":"New information","correcting_an_error":"Correcting an error","not_given":"No reason given","recorded_by_treating_team":"Recorded by treating team","patient_no_longer_coming":"No longer coming","bed_needed_for_another_patient":"Bed needed elsewhere","ward_withdrew_the_bed":"Ward withdrew the bed","pull_made_in_error":"Pull made in error","provider_unavailable":"Provider unavailable","patient_not_ready":"Not yet ready","destination_changed":"Destination changed","job_created_in_error":"Job created in error"},"wardIntakeConstraintLabels":{"staffing_shortage":"Staffing shortage","infection_control":"Infection control","bay_or_room_closed":"Bay or room closed","high_acuity_on_ward":"High acuity on the ward","waiting_for_bed_clean":"Waiting for a bed to be cleaned","other_call_the_ward":"Other — call the ward"}}},"actions":[{"event":"RECEIVE_REFERRAL","name":"Raise a referral at the front door","group":"At the front door","lane":"expected","nodes":["raised","addressed","armCommunity","armWard","armEd","srcCommunity","srcCrisis","srcPolice","srcAmbulance","srcHospital","srcEd","srcGp"],"roles":["community","ed","ward","coordinator"],"does":"Creates a front-door referral to the chosen destinations, bounded by the configured parallel-referral cap. Distinct named wards may be asked together; duplicate recipients and a broad ward arm mixed with named ward arms are refused.","needs":"A known patient and source, valid destination/intake answers and a unique submission id when supplied. An ED uses ed_medical; a ward uses psychiatric_ward and its own origin ward, and must carry that ward's site. Form rule (design audit FORM-REF, 5 Nov 2026): the home region may be left out (it warns in the drawer and shows as not recorded), and the engine also accepts a referral with no origin site, though the drawer fills an ED or community referral's location and referring service from the sending desk and blocks Send when it cannot (Josh, 5 Nov 2026); one that is given must be listed, and a supplied originSiteCode must resolve in the world's state.scenario network, including a fictional-network scenario. The intake may carry an unconfirmed catchment, a pending clearance with no expected time or contact, and blank referrer contact details, but a referrer phone that is typed must be a phone number (digits and the form's own characters; audit M39, 10 Nov 2026); the legal status, clearance answer, age band, urgency and gender still block in the drawer.","changes":"Creates the referral with every destination set to waiting.","reasons":["COHORTS","REFERRAL_DESTINATION_KINDS","REFERRAL_PURPOSES","SEXES","REFERRAL_GENDERS","REFERRAL_SOURCES","HOME_REGIONS"],"refuses":[{"when":"Guard: event.destinations.length === 0","message":"RECEIVE_REFERRAL needs at least one destination","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":381}},{"when":"Guard: event.destinations.length > state.configuration.parallelReferralCap","message":"RECEIVE_REFERRAL may address at most ${state.configuration.parallelReferralCap} destinations, not ${event.destinations.length}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":387}},{"when":"Guard: new Set(recipientKeys).size !== recipientKeys.length || (broadWard && kinds.filter((kind) => kind === \"psychiatric_ward\").length > 1)","message":"RECEIVE_REFERRAL cannot address the same destination kind twice","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":405}},{"when":"Guard: !scenarioEmergencyDepartments(state.scenario).some((department) => department.id === edDestination.edId)","message":"RECEIVE_REFERRAL edId must resolve to a real emergency department","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":419}},{"when":"Guard: event.role === \"ed\" && event.source !== \"ed_medical\"","message":"RECEIVE_REFERRAL raised as role ed must carry source ed_medical, not ${event.source}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":482}},{"when":"Guard: event.source === \"ed_medical\" && !originSite.emergencyDepartment","message":"RECEIVE_REFERRAL source ed_medical requires an origin site with an emergency department","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":546}}],"screen":{"screen":"use-ward-referral-drawer-state.ts (+ command completion helper)","control":"Send referral A recoverable draft keeps one submission id, so reopening the sheet after an uncertain send reconciles that same submission instead of minting another referral."},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":401,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":362,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/referrals/use-ward-referral-drawer-state.ts","line":997,"sha256":"d97d86918bafd69a286053ba13087a5b9809f740ca07d7ab3106e0f044275909"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":386,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":392,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":410,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":424,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":487,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":551,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"ADD_PATIENT","name":"Add a person who is not on file","group":"At the front door","lane":"record","nodes":["raised","rkDuplicate","rkIntakeLost"],"roles":["ed","community","ward","coordinator"],"does":"Registers somebody with no referral, movement or bed record yet — the “searched, nobody came up, so add them” record.","needs":"A unique nonblank UMRN, given and family names, a real date of birth from 1900 through the applicable Perth day, and valid optional sex, gender, Indigenous-status and source-desk values. Optional preferred name, address, general practitioner, catchment community team, interpreter language and the 22 optional administrative details (ADMIN_DETAIL_FIELDS: contacts, next of kin and support person, Medicare and funding, planning) are trimmed; blank means not recorded.","changes":"Creates a new patient record, including any optional typed details given.","reasons":["GENDERS"],"refuses":[{"when":"Gender not from the list","message":"ADD_PATIENT gender must be chosen from GENDERS"}],"screen":{"screen":"add-patient.tsx (+1 other)","control":"Add patient"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":405,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":37,"sha256":"9e0f9c39d6d4a7f8f406fd438e09cd9ea7b7c6631a7bdd5e059d1f38de3caac4"},{"path":"src/components/ward-management/patients/add-patient.tsx","line":611,"sha256":"e4d277572fc48f16fc5a3746118fc7ab1758d274ed28ae459d9cd1821a2de4f0"},{"path":"src/components/ward-management/referrals/use-referral-command-completion.ts","line":426,"sha256":"4dc5c8e0880f6118448453f12bb3df5c80ec20db2762669c955b2de29bae2feb"}]}},{"event":"RECORD_MEDICAL_CLEARANCE","name":"Record whether they are medically cleared","group":"At the front door","lane":"record","nodes":["addressed","rkClearance","edArrived"],"roles":["ed","coordinator"],"does":"Records the current medical-clearance answer on a referral and synchronises its matching linked movements. Fresh positive clearance resumes a recorded medical-deterioration pause.","needs":"An existing referral, finite recording time and boolean answer. Re-clearance must be later than any unresolved linked deterioration.","changes":"Replaces the referral answer and the matching movements’ clearance. Positive re-clearance stamps resumedAt and restates their blocker; it does not restore a released bed or booking.","reasons":[],"refuses":[{"when":"Guard: !referral","message":"no referral found for id ${event.referralId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":167}},{"when":"Current handler guard; inspect the cited source for its full condition","message":"Re-clearance must be recorded after the medical deterioration.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":180}}],"screen":{"screen":"ed/ed-lists-desktop.tsx","control":"Record medically cleared"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":39,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":172,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-lists-desktop.tsx","line":186,"sha256":"ffc826779fff9455a88d5d6613c00d692ecdb7933bf87882fe31bcc756c16eb9"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":174,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":187,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_ARRIVED_IN_DEPARTMENT","name":"Mark that an expected patient has turned up","group":"At the front door","lane":"record","nodes":["addressed","edExpected","edArrived","edNeverArrives"],"roles":["ed","coordinator"],"does":"Marks that a patient the department was expecting has physically arrived.","needs":"The referral exists. The first recorded arrival wins; a later call leaves it unchanged rather than taking the minimum supplied timestamp.","changes":"Stamps the arrival time, once.","reasons":[],"refuses":[{"when":"Guard: !referral","message":"no referral found for id ${event.referralId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":216}}],"screen":{"screen":"ed/ed-lists-desktop.tsx","control":"Mark arrived in department"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":43,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":221,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-lists-desktop.tsx","line":366,"sha256":"ffc826779fff9455a88d5d6613c00d692ecdb7933bf87882fe31bcc756c16eb9"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":223,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"ACCEPT_REFERRAL","name":"Accept the referral","group":"At the front door","lane":"expected","nodes":["wardAnswers","wardAccepted","othersCancelled","cmhtAnswers","cmhtAccepted","edAnswers","edAccepted","cmhtNothing","wardBlocked","dForced","dNonBinary"],"roles":["ward","coordinator","ed","community"],"does":"A ward, emergency department or community team says yes to the destination addressed to it. The first yes automatically cancels every other destination still waiting — except a community arm, which never competes for the bed.","needs":"The destination was addressed to the acting desk and has not been withdrawn. Normally it is queued. An explicit reassessment can turn a decline into acceptance; updates on an already accepted arm add history rather than accepting twice. Ward eligibility and bed criteria still apply. At the shared authenticated boundary, a scoped caller must be authorised for the stored receiving ED or community team (including a community team in its scoped service); outbound visibility alone does not authorise the answer. The statewide coordinator retains whole-network authority. On the referral match screen the coordinator answers any arm and a desk answers only its own kind; a ward desk answers only when working in a ward scope, dispatching as ward with its acting ward.","changes":"Marks that destination accepted, cancels the other waiting non-community destinations, notifies the referrer and the receiving ward. No bed is pulled and no movement is created.","reasons":["GENDER_PLACEMENT_REASONS","OVERRIDE_REASONS"],"override":true,"refuses":[{"when":"Guard: !addressing","message":"referral ${referral.id} was not addressed to ${event.destinationKind.replace(/_/g, \" \")}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":805}},{"when":"Guard: event.destinationKind !== \"community_team\" && referralState(referral) === \"accepted\" && !(hasClinicalReassessment && addressing.state === \"accepted\")","message":"referral ${referral.id} has already been accepted elsewhere","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":836}},{"when":"Guard: addressing.state !== \"queued\" && !( (hasClinicalReassessment && addressing.state === \"accepted\") || (event.reassessment === true && addressing.state === \"declined\") )","message":"${event.destinationKind.replace(/_/g, \" \")} has already answered referral ${referral.id} (${addressing.state})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":852}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so ${event.destinationKind.replace(/_/g, \" \")} cannot accept it","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":863}},{"when":"Guard: openLinkedMovement","message":"referral ${referral.id} already has an open movement (${openLinkedMovement.id}); it cannot also be accepted into a ward while that movement is open","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":941}},{"when":"Guard: !event.unitId","message":"ACCEPT_REFERRAL into a psychiatric ward must name a unit","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":946}}],"screen":{"screen":"referral-match.tsx (+1 other)","control":"Accept at the named ward"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":437,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":745,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/community/community-screen.tsx","line":592,"sha256":"12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1329,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":421,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":813,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":844,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":860,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":871,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":949,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":954,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"DECLINE_REFERRAL","name":"Decline the referral","group":"At the front door","lane":"stall","nodes":["wardAnswers","wardDeclined","cmhtAnswers","cmhtDeclined","edAnswers","edDeclined","cmhtNothing"],"roles":["ward","coordinator","ed","community"],"does":"Records the destination’s answer. A substantive decline closes that arm; bed-unavailable reasons on a ward arm waitlist it and keep it live. Gender mismatch is not a decline reason.","needs":"A known addressed destination, matching desk kind/place and a valid reason. Re-answering a decided arm requires the documented reassessment path. At the shared authenticated boundary, a scoped caller must be authorised for the stored receiving ED or community team (including a community team in its scoped service); outbound visibility alone does not authorise the answer. The statewide coordinator retains whole-network authority. On the referral match screen the coordinator answers any arm and a desk answers only its own kind; a ward desk answers only when working in a ward scope, dispatching as ward with its acting ward.","changes":"Records a decline or waitlist history entry and the corresponding notices, retaining other arms.","reasons":["REFERRAL_DECLINE_REASONS","COMMUNITY_DECLINE_REASONS"],"refuses":[{"when":"Guard: event.destinationKind !== \"community_team\" && referralState(referral) === \"accepted\"","message":"referral ${referral.id} has already been accepted elsewhere","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1187}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so ${event.destinationKind.replace(/_/g, \" \")} cannot decline it","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1202}},{"when":"Guard: !declineReasonsFor[event.destinationKind].includes(event.reason)","message":"DECLINE_REFERRAL reason must be chosen from ${declineReasonListName[event.destinationKind]}, the vocabulary for ${event.destinationKind.replace(/_/g, \" \")} destinations","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1227}}],"screen":{"screen":"referral-match.tsx (+2 others)","control":"Decline referral"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":449,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1141,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/community/community-screen.tsx","line":532,"sha256":"12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"},{"path":"src/components/ward-management/ed/use-ed-screen-decline.ts","line":133,"sha256":"f32c28822c1a39a28697617ed37d1cada5fa8bbce0c6ec1d2d9454107f60d01f"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":466,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1195,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1210,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1235,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"RECORD_REFERRER_WITHDRAWAL","name":"The referrer takes the referral back","group":"At the front door","lane":"stall","nodes":["wardAnswers","cmhtWithdrawn","wardNothing","cmhtNothing","wardWithdrawn"],"roles":["coordinator","community","ed","ward"],"does":"The referring party withdraws — either just the community half, leaving the bed request standing, or the whole referral, which also gives back any held bed and cancels any transport.","needs":"The recorded sender desk/place or coordinator. Whole-referral withdrawal requires waiting non-withdrawn arms and no accepted placement or collected linked journey. The separately scoped community-arm path has its own reason and state checks.","changes":"Stamps the withdrawal on every still-waiting destination; closes any linked open movement as “did not proceed”.","reasons":["WARD_REQUEST_WITHDRAWAL_REASONS"],"refuses":[{"when":"Guard: event.reason === undefined || !WARD_REQUEST_WITHDRAWAL_REASONS.includes(event.reason)","message":"RECORD_REFERRER_WITHDRAWAL scoped to community_team must give a reason from WARD_REQUEST_WITHDRAWAL_REASONS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":945}},{"when":"Guard: referralState(referral) === \"accepted\"","message":"referral ${referral.id} has already been accepted, so it cannot be withdrawn","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":984}},{"when":"Guard: referral.destinations.some( (addressing) => addressing.destination.kind !== \"community_team\" && addressing.withdrawnAt !== undefined, )","message":"referral ${referral.id} has already been recorded as withdrawn by its referrer","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":991}},{"when":"Guard: waiting.length === 0","message":"every destination on referral ${referral.id} has already answered","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1001}},{"when":"Guard: collectedLinkedMovement","message":"referral ${referral.id} is linked to movement ${collectedLinkedMovement.id}, whose transport has already been collected; this needs a coordinator decision (see STOP_TRANSPORT) rather than an automatic withdrawal","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1022}}],"screen":{"screen":"referral-match.tsx","control":"Withdraw referral to community team"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":487,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":806,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/referrals/use-referral-match-state.tsx","line":202,"sha256":"5c100c488ba449b9b76e099dfa98e04a34fa726d633e9fa56b592c125f01344b"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":556,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":902,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":941,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":948,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":958,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":979,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"ADD_REFERRAL_CORRECTION","name":"Add a correction to a referral","group":"At the front door","lane":"record","nodes":["wardAnswers","addressed"],"roles":["community","ed","ward","coordinator"],"does":"Adds a dated, attributed note correcting something on a referral, at any point in its life. What was said before stays readable.","needs":"An existing referral and a nonblank note within the correction limit. It can be at any stage, but sender-kind/place restrictions apply to ward, ED and community desks.","changes":"Appends the note. Never overwrites.","reasons":[],"refuses":[{"when":"Guard: note.length === 0","message":"ADD_REFERRAL_CORRECTION note must say something — a blank is not a correction","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1209}},{"when":"Guard: note.length > REFERRAL_CORRECTION_NOTE_MAX_CHARACTERS","message":"ADD_REFERRAL_CORRECTION note is ${note.length} characters and the limit is ${REFERRAL_CORRECTION_NOTE_MAX_CHARACTERS} — it is refused rather than shortened","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1217}}],"screen":{"screen":"referrals/referral-history-corrections.tsx","control":"Add a correction"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":494,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1124,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/referrals/referral-history-corrections.tsx","line":73,"sha256":"da6432d4f3190b3305d3890162266ab68e46e2bd8a8bd22649fc91ff66499107"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1159,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1167,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LOCAL_BED_SOUGHT","name":"Record that a bed closer to home was looked for","group":"At the front door","lane":"record","nodes":["wardAnswers","addressed"],"roles":["coordinator"],"does":"Records that somebody looked for a bed nearer the person's home before sending them further. It never gates an acceptance — it exists so the search can be shown to have happened.","needs":"The referral is still undecided and no earlier local-bed search is already recorded.","changes":"Stamps the search and who did it.","reasons":[],"refuses":[{"when":"Guard: referralState(referral) !== \"queued\"","message":"referral ${referral.id} was already decided (${referralState(referral)})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1109}},{"when":"Guard: referral.localBedSought !== undefined","message":"referral ${referral.id} already records a local bed search","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1114}}],"screen":{"screen":"referral-match.tsx","control":"Record that a local bed was sought and none was suitable"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":455,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1050,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":447,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1057,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1062,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RAISE_REFERRAL","name":"Start a bed search from a department","group":"Finding a bed","lane":"expected","nodes":["seam","placement","edRaise"],"roles":["ed","community","ward","coordinator"],"does":"Creates the movement that tracks placement. An ED journey may link its addressed referral; an accepting ward or coordinator may continue an accepted direct ED/community referral. pullBed requests an atomic raise-and-pull through both ordinary checks.","needs":"Valid draft facts and a real ED unless continuing an accepted direct community referral. A linked referral and destination must match, be live and fund no other open movement; direct continuation has its own accepting-ward checks. A community continuation needs its referring service and location on the referral (the drawer fills them from the sending desk and blocks Send without them) and is refused without either, never starting at an empty site. A supplied patientId, or one inherited from the linked referral, must still name a current patient; an omitted identity remains supported.","changes":"Creates a placement_requested movement, or accepted_awaiting_bed for a valid direct continuation. Captures typed legal-paper facts; pullBed also reserves the bed only when both steps succeed.","reasons":["REFERRAL_GENDERS"],"refuses":[{"when":"Guard: !raisedFrom","message":"RAISE_REFERRAL referralId must name a referral this system already holds, and ${event.referralId} names none","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":161}},{"when":"Guard: !addressing","message":"referral ${referral.id} was never addressed to ${department?.name ?? \"this ward\"}, so a journey raised there did not come from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":229}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so no journey can be raised from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":241}},{"when":"Guard: addressing.state === \"declined\"","message":"${department?.name ?? \"This ward\"} declined referral ${referral.id}, so no journey can be raised from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":251}},{"when":"Guard: blockingLinkedMovement","message":"referral ${referral.id} already has a linked movement (${blockingLinkedMovement.id}) that did not close as \"did not proceed\"; a second journey cannot be raised while it stands","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":270}}],"screen":{"screen":"ed-screen.tsx","control":"Ask for a bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":37,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":92,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward/ward-accepted-referral-placement-form.tsx","line":100,"sha256":"09fa59dfc3618d8943dcf23a008c14b4747a9a1deae31e892a762db3808f8c4f"},{"path":"src/components/ward-management/ed/ed-screen.tsx","line":333,"sha256":"c4987128df9afd2b09fe2bd0636cfa523fa2fae4bf693c0b58e6c78a16144a9f"},{"path":"src/components/ward-management/referrals/pull-accepted-referral.tsx","line":133,"sha256":"e7628cba7f522dcaab9c9b1c7091518dfc979f1178a7e44d3d93d1555926976f"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":160,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":216,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":228,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":238,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":257,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"REFER_TO_UNITS","name":"Ask one or more wards","group":"Finding a bed","lane":"expected","nodes":["asked","dForced"],"roles":["coordinator"],"does":"Adds new wards to an open placement request without dropping live requests. The configured cap warns and records an over-cap act; it does not prohibit asking more wards.","needs":"An open referrable stage, real new wards, valid optional reasons, eligibility and any required recorded gender-placement check. Already-live wards are not rechecked or counted twice.","changes":"Adds those wards to the live list and moves the record to destination review.","reasons":["OVERRIDE_REASONS","GENDER_PLACEMENT_REASONS"],"override":true,"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":707}},{"when":"Guard: movement.closure","message":"cannot refer a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":709}},{"when":"Guard: !REFERRABLE_MOVEMENT_STAGES.includes(movement.stage)","message":"cannot refer a movement at its current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":729}},{"when":"Guard: unknown","message":"no unit found for id ${unknown}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":734}}],"screen":{"screen":"shortlist-panel.tsx","control":"Refer"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":85,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":675,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/capacity/step-down-board.tsx","line":48,"sha256":"d40940bff7a00cac5ae44bf3b2dfb7a8894e9578bf624275b4bb2fb8fe4d7fc0"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":316,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/coordinator/shortlist-panel.tsx","line":844,"sha256":"6f864c8eff0bea759c1460ed1e8ebaf9bb4dc7d80aa3d515d0788709c109f9d0"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":677,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":679,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":699,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":704,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"ACCEPT_IN_PRINCIPLE","name":"A ward accepts in principle","group":"Finding a bed","lane":"expected","nodes":["inPrinciple","dForced","dGenderHard"],"roles":["ward","coordinator"],"does":"A ward formally accepts the patient and becomes the destination. Every other ward asked is withdrawn automatically. Still no bed is set aside.","needs":"An open movement at destination_review, a live request to the acting ward, no earlier acceptance, current ward availability and eligibility. A supplied bed number must be valid, suitable and neither occupied nor held; required gender/override records must exist.","changes":"Records the accepting ward, clears every other live request, and tells the referring department.","reasons":[],"override":true,"refuses":[{"when":"Guard: movement.closure","message":"cannot accept a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":114}},{"when":"Guard: movement.acceptedUnitId","message":"movement ${movement.id} is already accepted at ${already?.name ?? movement.acceptedUnitId}; the referral to ${attemptedUnit?.name ?? event.unitId} was withdrawn","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":122}},{"when":"Guard: movement.stage !== \"destination_review\"","message":"cannot accept a movement at its current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":129}},{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":133}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Accept in principle"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":86,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":108,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1291,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":476,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":295,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":114,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":122,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":129,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":133,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"DECLINE","name":"A ward declines the bed search","group":"Finding a bed","lane":"stall","nodes":["sWardDecline"],"roles":["ward","coordinator"],"does":"A ward records a substantive decline or a bed-unavailable waitlist answer. A waitlist keeps the ward request live; gender mismatch does not decline it.","needs":"The record is at destination review and this ward holds a live request.","changes":"A substantive decline removes that ward and appends history and a referrer notice. A waitlist keeps the request, records waitlisted history and notifies the referrer; the stage remains destination_review.","reasons":["DECLINE_REASONS"],"refuses":[{"when":"Guard: movement.stage !== \"destination_review\"","message":"cannot decline at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":254}},{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":258}},{"when":"Guard: !DECLINE_REASONS.includes(event.reason) && !Object.hasOwn(LEGACY_DECLINE_REASONS, event.reason)","message":"DECLINE reason must be chosen from DECLINE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":309}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Confirm decline"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":91,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":240,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1382,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":409,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":254,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":258,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":312,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"WITHDRAW_WARD_REQUEST","name":"Take back one ward's request","group":"Finding a bed","lane":"stall","nodes":["asked","sWithdrawWard"],"roles":["coordinator"],"does":"Withdraws the request from one named ward only. Every other ward asked carries on considering.","needs":"That ward holds a live request.","changes":"Removes that one ward and tells it why.","reasons":["WARD_REQUEST_WITHDRAWAL_REASONS"],"refuses":[{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1132}},{"when":"Guard: !WARD_REQUEST_WITHDRAWAL_REASONS.includes(event.reason)","message":"WITHDRAW_WARD_REQUEST reason must be chosen from WARD_REQUEST_WITHDRAWAL_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1135}}],"screen":{"screen":"shortlist-panel.tsx","control":"Withdraw this request"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":505,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1069,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/coordinator/shortlist-panel.tsx","line":886,"sha256":"6f864c8eff0bea759c1460ed1e8ebaf9bb4dc7d80aa3d515d0788709c109f9d0"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1082,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1085,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"WITHDRAW_ACCEPTANCE","name":"Undo a ward's acceptance","group":"Finding a bed","lane":"stall","nodes":["sAcceptWithdrawn"],"roles":["coordinator"],"does":"Withdraws an acceptance before handover, including a pulled bed or a movement stepped back while retaining its held admission. A matching bed is released in the same act.","needs":"An open movement at accepted_awaiting_bed, pulled, or an earlier stepped-back stage with a held admission, plus a listed correction reason. Cancel a live booking first; collection refuses withdrawal.","changes":"Clears the accepting ward and time and any released hold fields (including the referral arm's numbered bed hold), appends withdrawal/release history and notices. Ordinarily returns to destination_review; an earlier stepped-back stage stays as found. It does not re-refer the ward. For an agreed return identified by sourceAdmissionId, the bed-release notice goes to that source stay's sending ward rather than its ED alias.","reasons":["STEP_BACK_REASONS"],"refuses":[{"when":"Guard: holdsBed && movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has been collected; use STOP_TRANSPORT","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1329}},{"when":"Guard: holdsBed && movement.transport !== undefined && movement.transport.cancelledAt === undefined","message":"movement ${movement.id} has a transport job booked; cancel it (CANCEL_TRANSPORT) before withdrawing the acceptance","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1335}},{"when":"Guard: holdsBed && bedReleased === state","message":"movement ${movement.id}'s pulled bed matches no releasable reservation","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1345}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Withdraw the acceptance"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":502,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1301,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1794,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1341,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1347,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1357,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"WITHDRAW_REFERRAL","name":"Abandon the bed search","group":"Finding a bed","lane":"end","nodes":["sAbandoned"],"roles":["ed","community","ward","coordinator"],"does":"Cancels the search outright — either pulling it from every ward still being asked, or, once accepted, revoking the acceptance and giving back any held bed.","needs":"An open movement and the recorded sending desk/place or coordinator. After acceptance this path is restricted to the originating ED or coordinator and refuses after collection; other sending desks cannot revoke an accepted movement here. Execution uses canonical actingPlaceId, or a ward's actingUnitId, before the legacy placeId fallback; a supplied legacy alias that disagrees with the canonical claim is refused. Shared scope validates legacy placeId as an authority claim too.","changes":"Closes the movement as “did not proceed”, releases any held bed, cancels any live transport.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"movement ${movement.id} has already closed and cannot be withdrawn","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":919}},{"when":"Guard: event.role !== \"coordinator\" && event.role !== \"ed\"","message":"movement ${movement.id} has already been accepted by ${movement.acceptedUnitId}; only the referrer or the coordinator may revoke it now","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":990}},{"when":"Guard: movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has already been collected; use STOP_TRANSPORT to stop the journey instead of withdrawing the referral","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":999}},{"when":"Guard: movement.referredUnitIds.length === 0","message":"movement ${movement.id} holds no live referral to withdraw","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1065}}],"screen":{"screen":"ward-flow-raise.ts; ed/ed-screen-actions.ts; patients/patient-transit-operations.tsx","control":"Withdraw referral"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":383,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":883,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-raise.ts","line":13,"sha256":"a077d0f6d55ef4d03e7beca435fcbce745b6eee1628698b0f6b9acd30289c207"},{"path":"src/components/ward-management/ed/ed-screen-actions.ts","line":40,"sha256":"69b93a5f2adbb5c42be0b7ba826c12ec1b3eec58ed2a3d08ac99273ef66d4636"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":983,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":889,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":960,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":969,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1021,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"REFER_TO_COMMUNITY_TEAM","name":"Send them to a community team instead","group":"Finding a bed","lane":"diversion","nodes":["edToCommunity","cmhtFromSearch"],"roles":["ed","coordinator"],"does":"Instead of admitting, refers the patient straight to a named community team — ends the bed search, creates or reuses a real community referral, and tells everybody involved.","needs":"The record is open and transport has not collected the patient. If they are on a legal form, a conclusive examination outcome must already be recorded.","changes":"Gives back any held bed, cancels transport, withdraws live ward requests, closes the movement, and raises or reuses the community arm. When creating a new community referral, the movement's origin ED site is looked up within state.scenario, preserving the fictional-network origin when available; queued-arm reuse is unchanged.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot refer a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":487}},{"when":"Guard: !communityTeamOptions().includes(event.team)","message":"team \"${event.team}\" is not a valid community mental health team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":490}},{"when":"Guard: movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has already been collected; use STOP_TRANSPORT to stop the journey instead of referring to a community team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":500}},{"when":"Guard: isOnForm && (!movement.examination || movement.examination.outcome === \"further_examination_ordered\")","message":"movement ${movement.id} is on a legal form; a conclusive examination outcome must be recorded before referring to a community team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":513}}],"screen":{"screen":"ed/ed-screen-row-forms.tsx","control":"Confirm CMHT referral"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":198,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":477,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ed/ed-screen-row-forms.tsx","line":693,"sha256":"092ace45298789630ea1548b50896070d092ccf6e1e2ff5efa2be02b089f0dfd"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":481,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":484,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":494,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":507,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_ED_OUTCOME","name":"The department decides they need no bed","group":"Finding a bed","lane":"end","nodes":["edOutcome","edAnswers"],"roles":["ed","coordinator"],"does":"Records that the patient no longer needs a psychiatric bed — going home, or to community follow-up — and unwinds everything already in motion.","needs":"The record is open and transport has not collected the patient. For “for discharge” on a legal form, a conclusive examination outcome must already be recorded.","changes":"Releases a held bed, cancels an uncollected transport job, drops live ward requests, closes the movement, and notifies every ward affected.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record an ED outcome for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":333}},{"when":"Current handler guard; inspect the cited source for its full condition","message":"movement ${movement.id}'s patient is actively in transit; use STOP_TRANSPORT to stop the journey instead of recording an ED outcome","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":348}},{"when":"Guard: event.outcome === \"for_discharge\" && isOnLegalFormForDischarge && (!movement.examination || movement.examination.outcome === \"further_examination_ordered\")","message":"movement ${movement.id} is on a legal form; a conclusive examination outcome must be recorded before recording \"for discharge\"","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":364}}],"screen":{"screen":"ed/ed-screen-row-forms.tsx","control":"For discharge"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":84,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":333,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-forms.tsx","line":298,"sha256":"092ace45298789630ea1548b50896070d092ccf6e1e2ff5efa2be02b089f0dfd"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":340,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":355,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":371,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_NO_REFERRAL","name":"Record that nobody referred them","group":"Finding a bed","lane":"record","nodes":["placement","edRaise"],"roles":["ed","coordinator"],"does":"Records that, on checking, nobody actually referred this patient in.","needs":"The record is open and is not already linked to a referral.","changes":"Stamps the absence and its reason.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record a referral answer for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":302}},{"when":"Guard: movement.referralId !== undefined","message":"movement ${movement.id} was raised from referral ${movement.referralId}, so it cannot also record that nobody referred this patient","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":313}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"No referral raised"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":81,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":302,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":481,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":309,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":320,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_ESCALATION","name":"Record an escalation","group":"Finding a bed","lane":"record","nodes":["asked","rkEscalate"],"roles":["coordinator"],"does":"Records that the search was escalated — which wards were tried, and who was contacted.","needs":"The record is open.","changes":"Stamps the escalation, the wards tried and the contact, and adds it to the journey's escalation history (item 28, 9 Nov 2026).","reasons":["ESCALATION_CONTACTS"],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1124}},{"when":"Guard: movement.closure","message":"cannot escalate a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1126}}],"screen":{"screen":"ward-tasks-drawer.tsx; alerts/alerts-screen.tsx; delays/delays-screen.tsx","control":"Record escalation"},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":107,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1070,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":673,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":738,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/delays/delays-screen.tsx","line":170,"sha256":"da99c0834991445b845454355401c6a6a5fa156c5e433f242c08d24ef23e9297"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1099,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1074,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"STEP_BACK_STAGE","name":"Correct the record backwards","group":"Finding a bed","lane":"record","nodes":["asked","inPrinciple","pulled"],"roles":["coordinator"],"does":"Moves the record back to an earlier point. A pure record correction — it deliberately releases no bed and cancels no transport.","needs":"An open, unarrived movement, an earlier valid stage and listed correction reason. A stage-only seeded bed hold cannot be stepped back before pulled because that would lose its reservation.","changes":"Moves the stage and logs the correction. Nothing else is touched at all.","reasons":["STEP_BACK_REASONS"],"refuses":[{"when":"Guard: movement.stage === \"arrived\" || movement.transport?.arrivedAt !== undefined","message":"cannot step back an arrived movement (invariant I-05: physical arrival is irreversible)","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":698}},{"when":"Guard: toIndex >= fromIndex","message":"STEP_BACK_STAGE target must be strictly before the movement's current stage (movement ${movement.id} is at ${stageCopy[movement.stage].label}, target was ${stageCopy[event.to].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":713}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; patients/patient-transit-operations.tsx","control":"Correct the record"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":501,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":750,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1902,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":928,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":757,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":772,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"PULL_PATIENT","name":"Take the bed","group":"Holding the bed","lane":"expected","nodes":["pulled","dRepull","dForced","dGenderHard","dNoLongerSuits"],"roles":["ward","coordinator"],"does":"The ward claims the bed it accepted, and an admission record is created marked held — not occupied. A patient is not arrived until the ward says they have arrived.","needs":"An open movement at accepted_awaiting_bed and the accepting ward, consistent reservation/identity, current capacity (the Ready figure counts live pulled admissions, and beds still being made ready must not use up all of it), eligibility, bed-kind/gender/legal checks and no conflicting active placement. Other journeys' pending numbered bed reservations at the ward (a held bed number on another movement or referral arm) also come off Ready and off the free locked and open counts, so a pull cannot take a bed another record was promised.","changes":"Reserves an allocatable bed, creates or consistently adopts the held admission and starts the configured hold timer. The bed is held rather than occupied.","reasons":["OVERRIDE_REASONS"],"override":true,"refuses":[{"when":"Guard: movement.acceptedUnitId !== event.unitId","message":"movement ${movement.id} was accepted at ${movement.acceptedUnitId ?? \"no unit\"}, not ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":92}},{"when":"Guard: !speciallingAnsweredRestore && lacksObservationStaff(movement.observation, restoreUnit, admissionsExcludingOwn)","message":"${restoreUnit.name} has not enough observation staff left; this patient needs ${observationSummary(movement.observation)} and the ward cannot staff it","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":154}},{"when":"Guard: !acuityAnsweredRestore && acuityOverrideNeededRestore","message":"${restoreUnit.name} ${HIGH_ACUITY_STAFFING_REFUSAL}. This placement ${OVERRIDE_REASON_REQUIRED} and the nurse unit manager consulted.","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":167}},{"when":"Guard: pullReady \u003c= 0","message":"no Ready bed remains at ${unit.name} (allocatable ${unit.allocatable.value}, physically empty ${unit.empty.value})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":210}},{"when":"Guard: pending > 0 && pullReady \u003c= pending","message":"every free bed at ${unit.name} is still being made ready (${pending} pending); a patient cannot be pulled to a bed that is not open","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":227}},{"when":"Guard: !speciallingAnswered && lacksObservationStaff(movement.observation, unit, state.admissions)","message":"${unit.name} has not enough observation staff left (${remainingSpeciallingCapacity(unit, state.admissions)} of ${unit.speciallingCapacity} free); this patient needs ${observationSummary(movement.observation)} and the ward cannot staff it","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":249}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Pull a bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":90,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":79,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1427,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":484,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":306,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":98,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":160,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":173,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":223,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":241,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":262,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RELEASE_PULL","name":"Give the held bed back","group":"Holding the bed","lane":"stall","nodes":["sPullReleased"],"roles":["coordinator","ward"],"does":"A ward gives back a bed it was holding before the patient arrived. The admission record is deleted outright — nobody was ever in this bed.","needs":"An open movement at pulled, a listed release reason, an authorised holding ward/coordinator and no physical collection. Cancel a live booking first. An Undo carrying expectedPull must still name this exact pull.","changes":"Returns the bed to the ward, deletes the admission, sends the record back to “accepted, awaiting bed”, and tells the department. For a return movement with sourceAdmissionId, the in-app release/withdrawal notice targets the actual sending stay ward. Ordinary ED/community origins retain their existing recipient paths; no external-provider delivery is implied. The movement's and its referral arm's held bed numbers are cleared with the pull. A release that matches no releasable bed reservation is refused rather than recorded.","reasons":["RELEASE_PULL_REASONS"],"refuses":[{"when":"Guard: movement.stage !== \"pulled\"","message":"cannot release a pull at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":483}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_PULL was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":492}},{"when":"Guard: !RELEASE_PULL_REASONS.includes(event.reason)","message":"RELEASE_PULL reason must be chosen from RELEASE_PULL_REASONS","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":501}},{"when":"Guard: bedReleased === state","message":"movement ${movement.id}'s pulled bed matches no releasable reservation","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":524}}],"screen":{"screen":"alerts/alerts-screen.tsx; ward/ward-screen.tsx; patients/patient-transit-operations.tsx","control":"Release the pulled bed"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":117,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":453,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":723,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1825,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":867,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":537,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":546,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":555,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RELEASE_HELD_BED","name":"Release a bed left held by a stopped journey","group":"Holding the bed","lane":"stall","nodes":["sStopTransport"],"roles":["coordinator","ward","ed"],"does":"Releases the bed that stopping a transport deliberately left held, once it is decided the patient is not coming after all. The only way to give that bed back.","needs":"The journey was stopped after collection, and a bed is still held.","changes":"Releases the bed and deletes the admission.","reasons":[],"refuses":[{"when":"Guard: !isStoppedTransport && !isRevokedExamHold && !awaitingRelease","message":"movement ${movement.id} was not stopped by STOP_TRANSPORT and has no examination-revoked hold, so there is no pulled bed to release this way","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":573}},{"when":"Guard: !heldBedOutstanding","message":"movement ${movement.id} has no bed pulled — it may already have been released","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":583}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_HELD_BED was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":591}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; ward/ward-arrivals-corridor.tsx","control":"Release the held bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":193,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":618,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1167,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward/ward-arrivals-corridor.tsx","line":630,"sha256":"572956c1b4769defd00bc1a5dc027ff2d76c476388cee6d36833c8321e3824a4"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":632,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":642,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":650,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RECORD_TRANSPORT_NEED","name":"Record whether transport is needed","group":"The journey","lane":"record","nodes":["booked","dNoTransport"],"roles":["ed","ward","community","coordinator"],"does":"Records whether the patient will need help getting to the ward. Answering “no” is what lets them be marked arrived with no journey at all.","needs":"An open movement. The ward must be the sending ward; a supplied ED place must match the origin. Cancel a live booking before recording that transport is not needed.","changes":"Sets or replaces the answer.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record a transport need for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":235}},{"when":"Guard: !sendingWard","message":"RECORD_TRANSPORT_NEED was raised by ward ${event.actingUnitId ?? \"(unnamed)\"}, but this patient did not start on a ward","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":253}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"No transport needed"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":52,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":234,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":458,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":242,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":260,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"BOOK_TRANSPORT","name":"Book the transport","group":"The journey","lane":"expected","nodes":["booked"],"roles":["ed","ward","community","coordinator"],"does":"Logs an already arranged booking: provider, explicit escort and transport-legal-status answers, an optional estimate, and optional typed CAD number. It calls no transport service.","needs":"An open movement at pulled or handover_ready with an accepted destination or admission and no live booking. Desk/place must match sender or coordinator; global medical-clearance/deterioration guards apply. A blank CAD is permitted for later recording. A blank estimated time is permitted too (W32, 5 Nov 2026: it warns in the form); one that is given must be a finite time. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Creates the transport job and records who booked it — which decides who may later cancel it.","reasons":["TRANSPORT_PROVIDERS","TRANSPORT_LEGAL_STATUSES"],"refuses":[{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"handover_ready\"","message":"cannot book transport at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654}},{"when":"Guard: movement.transport && movement.transport.cancelledAt === undefined","message":"transport for movement ${movement.id} is already booked","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":660}},{"when":"Guard: typeof event.escortRequired !== \"boolean\"","message":"BOOK_TRANSPORT escortRequired must be answered, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":669}},{"when":"Guard: event.estimatedAt !== undefined && (typeof event.estimatedAt !== \"number\" || !Number.isFinite(event.estimatedAt))","message":"BOOK_TRANSPORT estimatedAt must be a real time when it is given","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":690}},{"when":"Guard: event.role === \"ward\" && !event.actingUnitId","message":"BOOK_TRANSPORT raised as ward must state its actingUnitId, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":695}},{"when":"Guard: event.role === \"community\" && !event.actingPlaceId","message":"BOOK_TRANSPORT raised as community must state its actingPlaceId, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":733}}],"screen":{"screen":"officer/officer-needs-transport.tsx; community/use-community-screen-overlays.ts; ed/ed-screen-actions.ts; patients/patient-transit-operations.tsx; patients/patient-now-screen.tsx","control":"Transport booked The officer booking form guards entered answers and pending saves on outer close or job change. Keep editing retains the draft; only an accepted current save clears the booking without a discard question. A held uncertain command stays owned for same-command recovery rather than sending a duplicate."},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":156,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-needs-transport.tsx","line":349,"sha256":"a10acca50b2c048546f9b0018a94030b1f6534d508d75c456787087a8aab4b1e"},{"path":"src/components/ward-management/community/use-community-screen-overlays.ts","line":122,"sha256":"647d6312cc81bb2edcb34ac5b2f6214fccfcd4bec1eb3e2f5742fe286eafbb23"},{"path":"src/components/ward-management/ed/ed-screen-actions.ts","line":47,"sha256":"69b93a5f2adbb5c42be0b7ba826c12ec1b3eec58ed2a3d08ac99273ef66d4636"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":640,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":521,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":666,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":672,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":681,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":702,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":707,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":745,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"HANDOVER_READY","name":"Confirm handover is ready","group":"The journey","lane":"expected","nodes":["handover","dNoLongerSuits"],"roles":["ed","community","coordinator"],"does":"Confirms the patient is ready for the booked crew to collect.","needs":"An open movement at pulled, the sending desk or coordinator, and either a booked job or recorded no-transport answer. Explicit negative medical clearance or unresolved deterioration, gender/legal bed issues refuse onward movement.","changes":"Moves the record to handover ready.","reasons":[],"refuses":[{"when":"Guard: movement.stage !== \"pulled\"","message":"cannot ready a handover at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":97}},{"when":"Guard: !movement.transport && !noTransportNeeded","message":"cannot ready a handover before transport is booked (BOOK_TRANSPORT)","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":107}}],"screen":{"screen":"patients/patient-transit-operations.tsx","control":"Mark handover ready"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":94,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":664,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":99,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":109,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"TRANSPORT_ACCEPTED","name":"The crew accepts the job","group":"The journey","lane":"expected","nodes":["enroute","dNoLongerSuits"],"roles":["officer","coordinator"],"does":"Records that the transport provider has accepted the collection job.","needs":"An open handover-ready movement, a booked job with no existing acceptance and current medical, gender and legal checks. A revoked/community-order examination while a bed is held must be resolved.","changes":"Stamps the acceptance.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot accept transport for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":130}},{"when":"Guard: movement.transport.acceptedAt !== undefined","message":"transport for movement ${movement.id} was already accepted","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":158}}],"screen":{"screen":"officer-screen.tsx","control":"Accepted"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":95,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":128,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":521,"sha256":"da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":685,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":132,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":160,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"TRANSPORT_EN_ROUTE","name":"The crew sets off","group":"The journey","lane":"expected","nodes":["enroute"],"roles":["officer","coordinator"],"does":"Records that an accepted provider has set off towards the patient. Global medical pause/clearance and examination-held-bed blockers apply; this event does not itself rerun the held-unit gender or legal-authorisation helpers.","needs":"An open handover-ready movement, an accepted job not already en route, and no unresolved medical or examination/held-bed restriction.","changes":"Stamps the departure.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot move transport for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":180}},{"when":"Guard: movement.transport.enRouteAt !== undefined","message":"transport for movement ${movement.id} is already en route","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":216}}],"screen":{"screen":"officer-screen.tsx","control":"En route"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":96,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":178,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":528,"sha256":"da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":705,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":182,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":218,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"PATIENT_COLLECTED","name":"The patient is picked up","group":"The journey","lane":"expected","nodes":["collected","dNoLongerSuits"],"roles":["officer","coordinator"],"does":"Records that the patient has physically been collected and the journey has begun. After this, cancelling is no longer possible — only stopping.","needs":"An open handover-ready movement with a booked en-route job and current medical, gender and legal checks. A valid supplied exception/identity-check record is retained; collection can restore moving after a stage correction without replacing its original physical time. No restrictive practice may still be recorded as in use for the patient at the sending ward.","changes":"Moves the record to moving and stamps the collection.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot collect a patient for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":231}},{"when":"Guard: examinationRevokedHoldingBed || awaitingRelease","message":"cannot collect a patient for movement ${movement.id}: the examination was revoked and this movement still has a bed pulled — a person must release the bed first","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":246}},{"when":"Guard: sourceRestrictiveRefusal","message":"${what} is still recorded as in use for this patient. Record when it ended before they leave the ward","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":278}}],"screen":{"screen":"officer-screen.tsx","control":"Collected"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":97,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":229,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":544,"sha256":"da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":726,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":233,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":248,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"PATIENT_ARRIVED","name":"The ward says they have arrived","group":"The journey","lane":"expected","nodes":["arrived","dNoTransport"],"roles":["officer","ward","coordinator"],"does":"The officer records delivery of the transport leg only. The receiving ward or coordinator confirms physical arrival, occupies the reserved bed and closes the movement. Physical arrival is irreversible.","needs":"An open movement with collection recorded at moving, or no transport needed and no live job at pulled/handover_ready. The receiving ward must identify itself. Ward arrival additionally checks the matching reservation, identity, bed eligibility and any source stay.","changes":"Officer: stamps transport.arrivedAt and leaves moving open. Ward/coordinator: occupies the held admission, adjusts bed figures and closes arrived; a linked source stay is departed on transfer arrival. When linked journey/stay observation levels diverge, retained accepted-edit sequence decides which is later, including same-minute edits and new edits against legacy history. If neither entry has sequence, the existing timestamp fallback remains (journey wins ties); a winning journey level appends reconciliation history to the stay. A winning journey observation sequence is retained in the stay reconciliation history; genuinely unordered legacy ties retain the existing timestamp/journey fallback.","reasons":[],"refuses":[{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"handover_ready\"","message":"cannot arrive a patient with no transport needed at the movement's current stage (${stageCopy[movement.stage].label}); the bed must be pulled first","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":346}},{"when":"Guard: movement.stage !== \"moving\" || movement.transport?.collectedAt === undefined","message":"cannot arrive a patient at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":353}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"ward ${event.actingUnitId} cannot confirm arrival for a patient accepted at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":372}}],"screen":{"screen":"officer/officer-screen.tsx; tools/ward-tool-feed.tsx; board/ward-board.tsx; patients/patient-transit-operations.tsx","control":"Confirm Arrival"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":98,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":315,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":563,"sha256":"da86cd3b9a7e8018baf1a5abb7477e66bdb918fd911ad8f43779f95de7b68027"},{"path":"src/components/ward-management/tools/ward-tool-feed.tsx","line":217,"sha256":"35b50e734a9396586e280e12df0c557991ce7b20cf0601d932b279a1734add90"},{"path":"src/components/ward-management/board/ward-board.tsx","line":376,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":781,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":354,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":361,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":380,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"}]}},{"event":"CANCEL_TRANSPORT","name":"Cancel the transport before collection","group":"The journey","lane":"stall","nodes":["sCancelTransport","dCancelLie"],"roles":["coordinator","ed","ward","community"],"does":"Cancels an uncollected live booking, recording its identity and CAD in unwind history. The coordinator may act; ward/community must match their booked sender and a supplied ED place must match booking provenance. Nothing is rebooked.","needs":"An open movement with a live uncollected, undelivered job, an authorised booking desk/place and a listed cancellation reason.","changes":"Deletes the job entirely. The stage does not move and the bed stays held. The job's awaiting-departure and booking-estimate-passed inbox rows get a returned snooze entry and a released ownership entry appended, keeping their earlier history.","reasons":["CANCEL_TRANSPORT_REASONS"],"refuses":[{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"cannot cancel transport for movement ${movement.id} — the patient has arrived","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":834}},{"when":"Guard: movement.transport.collectedAt !== undefined","message":"cannot cancel transport for movement ${movement.id} — the patient has departed","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":837}},{"when":"Guard: movement.transport.bookedBy?.role !== \"ward\" || !event.actingUnitId || movement.transport.bookedBy.unitId !== event.actingUnitId","message":"CANCEL_TRANSPORT raised as ward acting as ${event.actingUnitId} may only cancel transport it booked for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":856}},{"when":"Guard: movement.transport.bookedBy?.placeId && movement.transport.bookedBy.placeId !== event.actingPlaceId","message":"CANCEL_TRANSPORT raised as ED acting as ${event.actingPlaceId} may only cancel transport it booked for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":880}},{"when":"Guard: !CANCEL_TRANSPORT_REASONS.includes(event.reason)","message":"CANCEL_TRANSPORT reason must be chosen from CANCEL_TRANSPORT_REASONS","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":889}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; community/use-community-screen-overlays.ts","control":"Cancel transport"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":178,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":835,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1444,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/community/use-community-screen-overlays.ts","line":140,"sha256":"647d6312cc81bb2edcb34ac5b2f6214fccfcd4bec1eb3e2f5742fe286eafbb23"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":848,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":851,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":870,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":894,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":903,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"STOP_TRANSPORT","name":"Stop the journey after collection","group":"The journey","lane":"diversion","nodes":["sStopTransport"],"roles":["coordinator","ed"],"does":"Stops a journey with the patient already in the vehicle. Somebody must say where the patient now is. The movement closes and the bed deliberately stays held.","needs":"The patient has been collected, and has not arrived or already been stopped.","changes":"Stamps the stop, its reason and the whereabouts; closes the movement; leaves the bed held until it is separately released.","reasons":["STOP_TRANSPORT_REASONS","TRANSPORT_WHEREABOUTS"],"refuses":[{"when":"Guard: movement.transport.collectedAt === undefined","message":"movement ${movement.id}'s transport has not been collected yet; use CANCEL_TRANSPORT instead","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":990}},{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"movement ${movement.id}'s patient has already arrived","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":996}},{"when":"Guard: !TRANSPORT_WHEREABOUTS.includes(event.whereabouts)","message":"STOP_TRANSPORT whereabouts must be chosen from TRANSPORT_WHEREABOUTS","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1015}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Stop transport"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":188,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1013,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1557,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1026,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1032,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1051,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"RECORD_LEFT_DEPARTMENT","name":"Record that they have left the department","group":"The journey","lane":"record","nodes":["edLeft"],"roles":["ed","coordinator"],"does":"Records the time the patient physically left the emergency department.","needs":"An outcome has already been recorded, and this has not been recorded before.","changes":"Stamps the departure time.","reasons":[],"refuses":[{"when":"Guard: movement.leftDepartmentAt !== undefined","message":"movement ${movement.id} has already been recorded as left department","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":557}},{"when":"Guard: movement.edOutcome === undefined","message":"movement ${movement.id} has no ed outcome recorded; record an outcome before marking left department","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":563}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"Left the department"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":204,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":534,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":605,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":538,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":544,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_EXAMINATION","name":"Record an examination outcome","group":"Legal status and examinations","lane":"breach","nodes":["dRevoked","rkExam","sAbandoned"],"roles":["ed","coordinator"],"does":"Records an examination or a permitted repeat. Inpatient/further-examination outcomes record facts only. Revocation while any bed is held retains that bed for a person to release, even before transport commitment. A community order before commitment may close and release.","needs":"The record is open. A second examination is only allowed if the last one ordered a further examination.","changes":"Keeps superseded examinations. After collection or at handover_ready/moving, community-order/revocation records a blocker without refund or closure; revocation with any held bed does the same and tells its ward. Otherwise community-order/revocation closes the search, releases any matching hold, cancels uncollected transport and withdraws requests.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record an examination for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":582}},{"when":"Guard: previousExamination && previousExamination.outcome !== \"further_examination_ordered\"","message":"movement ${movement.id} was already examined","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":593}}],"screen":{"screen":"ed/use-ed-examination-save.ts","control":"Confirm examination outcome"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":38,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":554,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/use-ed-examination-save.ts","line":145,"sha256":"357b8af4b99fb9c0609a07c4d6230c6be722e71a5f396c7d627909a9ef141fea"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":563,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":574,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CHANGE_LEGAL_STATUS","name":"Change the legal status","group":"Legal status and examinations","lane":"record","nodes":["occupied","asked","rkLegalStatus"],"roles":["coordinator","ed","ward","community"],"does":"Changes the patient's status under the Mental Health Act, recording who changed it and why. It never reacts on its own — even if this makes an already-accepted bed unlawful, that only surfaces for a human to look at.","needs":"An open movement, sender-kind permission and a listed legal-status-change reason; signed/shared scope further binds the actual sender.","changes":"Sets the status and logs the change.","reasons":["LEGAL_STATUS_CHANGE_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot change legal status for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1277}},{"when":"Guard: !LEGAL_STATUS_CHANGE_REASONS.includes(event.reason)","message":"CHANGE_LEGAL_STATUS reason must be chosen from LEGAL_STATUS_CHANGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1285}}],"screen":{"screen":"movements/sent-journey-changes.tsx","control":"Record legal status change"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":116,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/movements/sent-journey-changes.tsx","line":196,"sha256":"2bc1df9ee01cd20bf12d9fc8d7dee1a31c82589a2c354a0f5d595bd8cca25072"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1227,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1235,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LEGAL_FORM_RECEIVED","name":"Mark a form as physically received","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm"],"roles":["ed","ward","community","coordinator"],"does":"Marks that a patient's legal form has physically arrived. Any of the nine forms with a legal clock (1A, 3A, 3C, 3D, 5A, 5B, 6A, 6B, 6C) can be marked, not only Form 1A (owner ruling D-16).","needs":"An open movement sent by this desk kind or coordinator, a supported recorded legal-clock form and no previous receipt. Signed/shared scope further limits the actual sender. An optional typed received time must not be later than now.","changes":"Stamps the receipt: the typed received time when given (marked as typed), otherwise now.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot mark legal form received for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":475}},{"when":"Guard: movement.legalFormReceivedAt !== undefined","message":"legal form for movement ${movement.id} was already marked as received","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":479}},{"when":"Guard: !movement.legalForm || !isLegalClockFormCode(movement.legalForm.code)","message":"movement ${movement.id} does not carry a receivable legal form (legal form ${movement.legalForm?.code ?? \"none\"}), so a legal form receipt cannot be recorded against it","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":487}},{"when":"Guard: event.receivedAt !== undefined && (!Number.isFinite(event.receivedAt) || event.receivedAt > event.now)","message":"The time received can't be later than now. Check the time on the form.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":493}}],"screen":{"screen":"legal-forms/legal-forms-screen.tsx","control":"Mark Form 1A received (the legal forms screen marks the other eight)"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":59,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":439,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":365,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":450,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":454,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":462,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CORRECT_LEGAL_FORM_RECEIPT","name":"Undo a form receipt","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm"],"roles":["ed","ward","community","coordinator"],"does":"Undoes a receipt logged by mistake, keeping a record that a correction happened and why.","needs":"An open movement sent by this desk kind, an existing receipt and a listed correction reason; signed/shared scope further binds the actual sender.","changes":"Clears the receipt, and its typed-time mark, and appends the correction.","reasons":["LEGAL_FORM_RECEIPT_CORRECTION_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot correct a legal form receipt for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":447}},{"when":"Guard: movement.legalFormReceivedAt === undefined","message":"movement ${movement.id} has no recorded legal form receipt to correct","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":451}}],"screen":{"screen":"ed/use-ed-record-save.ts","control":"Save correction"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":65,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":429,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ed/use-ed-record-save.ts","line":200,"sha256":"b2d00eed8f4b907f3817792ae148eaa015d1b860de762bc4d38abd2eb1045de5"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":440,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":444,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LEGAL_FORM_EXPIRY","name":"Record or extend a form's expiry","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm","rkExpiryShut"],"roles":["ed","coordinator","ward"],"does":"Records typed paper expiry or a later extension. An explicit correction may move it earlier only with a reason and matching expected paper facts. No statutory duration is computed.","needs":"An existing form and finite typed expiry on an open movement, or the admitting ward’s admitted-stay path. An extension is strictly later; a correction must differ and match the current code, written time and previous expiry.","changes":"Stores the typed expiry, clears any calculated legacy clock, appends basis/author/time history tagged with the zero-based form instance (the count of earlier forms) and, for a correction, its previous facts and reason.","reasons":[],"refuses":[{"when":"Guard: !movement.legalForm","message":"There is no legal form on this record to add an expiry to.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":60}},{"when":"Guard: !Number.isFinite(event.dueAt)","message":"Enter the expiry written on the form.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":65}},{"when":"Guard: correction === undefined && isExtension && event.dueAt \u003c= currentDueAt","message":"An extension's new expiry must be later than the expiry already recorded.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":106}}],"screen":{"screen":"ed/use-ed-expiry-save.ts; legal-forms/legal-forms-screen.tsx","control":"Save expiry"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":75,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ed/use-ed-expiry-save.ts","line":119,"sha256":"390d0c109a96a4045b56601ad724774fdd964536984fefba4aac3c67787059c9"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":1303,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":68,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":73,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":114,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_MOVEMENT_GENDER","name":"Correct the recorded gender","group":"Legal status and examinations","lane":"record","nodes":["asked","pulled"],"roles":["ed","coordinator"],"does":"Corrects the gender recorded on an open record and, if a ward already holds or has accepted the bed, tells the coordinator to check the placement still suits.","needs":"The record is open and the new value differs from what is there.","changes":"Sets the gender, logs the change, and raises a notice where a bed is involved.","reasons":["REFERRAL_GENDERS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot record gender for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":508}},{"when":"Guard: movement.gender === event.gender","message":"movement ${movement.id} is already recorded as gender ${event.gender}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":514}}],"screen":{"screen":"ed/ed-screen-referred.tsx","control":"Record gender"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":80,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":485,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-referred.tsx","line":266,"sha256":"0b0d6dde9843e2750f4dbadd23e4e7d9c30b2c2c9eee9e4f2c539961a97568aa"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":489,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":495,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_LEAVING","name":"Record that the patient has left","group":"On the ward","lane":"expected","nodes":["personLeaves","bedReleased","end0","end1","end2","end3","end4","end5","end6","end7"],"roles":["ward","coordinator"],"does":"Records physical departure from an occupied stay and retains the departed admission. The person may still be on site waiting for transport. It is distinct from the protected revision-checked RECORD_PATIENT_DISCHARGE path.","needs":"The caller names the stay’s ward and a listed destination at a finite time no earlier than arrival. No active transit, restrictive-practice or open return-movement conflict. An involuntary community/against-advice departure needs a recorded permitted paper transition.","changes":"Ends the admission and raises the ward's empty and allocatable counts by one (only the timestamps move if this person's release had already been completed), gives back a locked bed, adjusts the sex mix, ends any leave bed, and completes this person's pending bed release. With awaitingTransport it also puts them on the Waiting for transport list until collected, and the freed bed is ready at once.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== admission.unitId","message":"RECORD_LEAVING was raised acting as unit ${event.actingUnitId} but admission ${admission.id} belongs to unit ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":137}},{"when":"Guard: admission.state === \"departed\"","message":"admission ${admission.id} has already left","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":143}},{"when":"Guard: admission.state !== \"occupied\"","message":"admission ${admission.id} is ${admission.state}, and only somebody occupying a bed can leave one","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":151}}],"screen":{"screen":"ward-board.tsx (+1 other)","control":"Record that they have left The ward departure caller retains one pending subject through an uncertain failed outcome that carries confirmation, follows only the same command receipt and scopes Undo to the receipt-created departure step. Old-world completions must not free a replacement world command or advertise stale Undo; ordinary reset keeps the screen DOM so opener focus can be restored."},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":228,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":126,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1227,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1723,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/tools/ward-tool-feed.tsx","line":218,"sha256":"35b50e734a9396586e280e12df0c557991ce7b20cf0601d932b279a1734add90"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":268,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":952,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":138,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":144,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":152,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","name":"Record that they are away at an ED","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Notes that an admitted patient has gone to an emergency department for a medical problem, while the ward keeps their bed.","needs":"An occupied stay on the named acting ward, no existing ED absence, and no simultaneous leave or absence-without-leave record. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Stamps the absence. No bed figure moves at all.","reasons":[],"refuses":[{"when":"Guard: admission.awayAtEmergencyDepartmentSince !== null","message":"admission ${admission.id} is already recorded as away at an emergency department","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":270}},{"when":"Guard: heldBed","message":"admission ${admission.id} is ${heldBed.absentWithoutLeave ? \"absent without leave\" : \"on leave\"} (${heldBed.id}); record the return first","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":279}}],"screen":{"screen":"ward-board.tsx","control":"Record that they have gone to an emergency department"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":242,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":260,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":288,"sha256":"5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":461,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":974,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":710,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":281,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":290,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","name":"Record that they are back","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Notes that a patient who went to an emergency department is back on the ward, in the bed that was kept for them.","needs":"The named acting ward owns the stay and it is recorded away at ED. The handler does not additionally require occupied state, so a recorded absence can be cleared. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Clears the absence.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":287}},{"when":"Guard: admission.awayAtEmergencyDepartmentSince === null","message":"admission ${admission.id} is not recorded as away at an emergency department","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":298}}],"screen":{"screen":"ward-board.tsx","control":"Record that they are back on the ward"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":243,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":296,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":299,"sha256":"5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":493,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":1070,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":726,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":298,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":309,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_LEAVE_BED","name":"Record a bed as on leave","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Records that a bed is held for somebody on approved leave, with an expected return. It does not go back into circulation while they are away.","needs":"A real occupied admission on the named acting ward, no existing leave/absence and no current ED absence. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Creates the leave record.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"RECORD_LEAVE_BED was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":355}},{"when":"Guard: onLeave.unitId !== event.unitId","message":"RECORD_LEAVE_BED names admission ${onLeave.id} on unit ${onLeave.unitId}, not unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":367}}],"screen":{"screen":"patients/patient-now-screen.tsx","control":"Leave recording through the patient workspace; command dispatch is present"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":216,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":369,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":689,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":376,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":388,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"END_LEAVE_BED","name":"End a bed's leave","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Ends a bed's recorded leave period.","needs":"The leave record exists and belongs to this ward. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Removes the leave record. The step can be taken back by UNDO_BED_STEP within the Undo window.","reasons":[],"refuses":[{"when":"Guard: !leaveBed","message":"no leave bed found for id ${event.leaveBedId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":674}},{"when":"Guard: event.actingUnitId !== leaveBed.unitId","message":"END_LEAVE_BED was raised acting as unit ${event.actingUnitId} but leave bed ${leaveBed.id} belongs to unit ${leaveBed.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":679}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Ended"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":217,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":656,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1748,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/board/ward-board.tsx","line":1062,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":632,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":658,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":663,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"FLAG_BED_RELEASE","name":"Flag a bed as coming free","group":"The bed coming free","lane":"expected","nodes":["bedReleased","ready"],"roles":["ward","bed_manager","coordinator"],"does":"A ward flags an upcoming discharge for a named occupying admission, saying when and what it is waiting on.","needs":"The ward may only flag a stay on its own ward, with no other live release for that stay.","changes":"Creates the bed release at “expected”.","reasons":["BED_RELEASE_WAITING_ON","BED_RELEASE_BLOCKERS"],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"FLAG_BED_RELEASE was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":400}},{"when":"Guard: event.blocker !== undefined && !BED_RELEASE_BLOCKERS.includes(event.blocker)","message":"FLAG_BED_RELEASE blocker must be chosen from BED_RELEASE_BLOCKERS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":445}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":207,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":372,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":379,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":424,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CONFIRM_BED_RELEASE","name":"Confirm the discharge is going ahead","group":"The bed coming free","lane":"expected","nodes":["bedReleased","ready"],"roles":["ward","bed_manager","coordinator"],"does":"Confirms an expected discharge is now decided. It does not free the bed — that is a separate step.","needs":"The release is currently expected.","changes":"Moves expected to confirmed, clears waitingOn and records the linked admission’s discharge decision. A blocker survives; no bed is freed. A sign-off from Ward Decisions can be taken back for a short time by UNDO_RELEASE_STEP on the same release (M37, D-129).","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"CONFIRM_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":494}},{"when":"Guard: release.state !== \"expected\"","message":"cannot move release ${release.id} from ${release.state} to confirmed","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":500}}],"screen":{"screen":"ward-screen.tsx","control":"Confirm"},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":208,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":466,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1661,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":475,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":481,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"REVERT_BED_RELEASE","name":"Put a confirmed discharge back to expected","group":"The bed coming free","lane":"stall","nodes":["bedReleased","bedStuck","ready"],"roles":["ward","bed_manager","coordinator"],"does":"Reverses a confirmed discharge decision, restating what it is now waiting on. The only step of the three that goes backwards.","needs":"The release is currently confirmed.","changes":"Moves confirmed to expected with listed waitingOn and clears the linked admission’s discharge decision. The blocker survives.","reasons":["BED_RELEASE_WAITING_ON"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"REVERT_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":533}},{"when":"Guard: release.state !== \"confirmed\"","message":"cannot move release ${release.id} from ${release.state} to expected","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":539}},{"when":"Guard: !BED_RELEASE_WAITING_ON.includes(event.waitingOn)","message":"REVERT_BED_RELEASE waitingOn must be chosen from BED_RELEASE_WAITING_ON","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":544}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":212,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":505,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":514,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":520,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":525,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"BLOCK_BED_RELEASE","name":"Flag a discharge as stuck","group":"The bed coming free","lane":"stall","nodes":["bedStuck"],"roles":["ward","bed_manager","coordinator"],"does":"Flags that a discharge — expected or confirmed — is currently stuck, and says why. Being stuck is a flag, not a stage.","needs":"The bed has not already been released.","changes":"Stores the listed blocker and actor/time on the release and linked stay. The release stage remains unchanged.","reasons":["BED_RELEASE_BLOCKERS"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"BLOCK_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":570}},{"when":"Guard: !event.blocker || !BED_RELEASE_BLOCKERS.includes(event.blocker)","message":"BLOCK_BED_RELEASE requires a blocker chosen from BED_RELEASE_BLOCKERS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":576}},{"when":"Guard: release.state === \"discharged\"","message":"cannot block release ${release.id} because it is already released","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":583}}],"screen":{"screen":"board/ward-board-blocker-dialog.tsx","control":"Confirm blocked"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":213,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":544,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-blocker-dialog.tsx","line":73,"sha256":"6d6cfae35d61c34b3ac76b235a2a8e23875c7be085ecef1532dbd5f3f36a174c"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":551,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":557,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":564,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CLEAR_BED_RELEASE_BLOCK","name":"Clear the stuck flag","group":"The bed coming free","lane":"expected","nodes":["bedStuck"],"roles":["ward","bed_manager","coordinator"],"does":"Clears the stuck flag once whatever was holding the discharge up has been resolved.","needs":"There is a flag to clear.","changes":"Clears the release and linked stay blocker; retains clearance time/role, prior blocker and any supplied listed clearance reason.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"CLEAR_BED_RELEASE_BLOCK was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":607}},{"when":"Guard: release.blocker === null","message":"release ${release.id} carries no blocked flag to clear","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":613}}],"screen":{"screen":"ward-screen.tsx","control":"No longer held up"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":214,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":584,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1680,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/discharges/discharge-board.tsx","line":489,"sha256":"3544153ef78971f9107c01a45121dbabc02833a68a630be1efba6c288d25f977"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":591,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":597,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_BED_PREPARATION","name":"Mark a bed as being made ready","group":"The bed coming free","lane":"record","nodes":["bedReleased","rkPrep"],"roles":["ward","bed_manager","coordinator"],"does":"Marks a bed as being cleaned or awaiting repair. This is information only — it never stops the bed being counted as available or offered to somebody.","needs":"The ward may only set it on its own release.","changes":"Sets the note. No capacity figure moves.","reasons":["BED_PREPARATION_NOTES"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"SET_BED_PREPARATION was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":647}},{"when":"Guard: requestedNote !== undefined && !(BED_PREPARATION_NOTES as readonly string[]).includes(requestedNote)","message":"SET_BED_PREPARATION note must be chosen from BED_PREPARATION_NOTES","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":655}}],"screen":{"screen":"ward/ward-screen-overlays.tsx","control":"Confirm being made ready"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":215,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":621,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":311,"sha256":"5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":631,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":639,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CONFIRM_CAPACITY","name":"Restate how many beds a ward has","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["ward","bed_manager","coordinator"],"does":"A ward restates how many beds it can currently allocate. This does move a real bed count.","needs":"The ward may only restate its own, with a current revision and a nonnegative whole number no greater than its bed count.","changes":"Sets the allocatable figure, marks it as ward-sourced, and stamps the time.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"CONFIRM_CAPACITY was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":329}},{"when":"Guard: event.value > unit.beds","message":"CONFIRM_CAPACITY says unit ${unit.id} can allocate ${event.value} beds, which is more than the ${unit.beds} beds it has","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":350}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Confirm capacity"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":100,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":298,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1569,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":499,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":308,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":329,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_WARD_INTAKE_CONSTRAINTS","name":"Record what is restricting a ward's intake","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["ward","coordinator"],"does":"A ward records the restrictions it is currently operating under — staffing, infection control, a closed bay, and so on.","needs":"The ward may only record its own.","changes":"Replaces its constraint list.","reasons":["WARD_INTAKE_CONSTRAINTS"],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"RECORD_WARD_INTAKE_CONSTRAINTS was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":822}},{"when":"Guard: event.codes.some((code) => !WARD_INTAKE_CONSTRAINTS.includes(code))","message":"RECORD_WARD_INTAKE_CONSTRAINTS codes must all be chosen from WARD_INTAKE_CONSTRAINTS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":832}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":103,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":772,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":779,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":789,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"REQUEST_CAPACITY_REFRESH","name":"Ask a ward to refresh its numbers","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["coordinator"],"does":"Records that somebody asked a ward to refresh its bed numbers. It changes no bed count itself.","needs":"The ward exists.","changes":"Logs the request.","reasons":[],"refuses":[{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":704}}],"screen":{"screen":"capacity-screen.tsx","control":"Request update"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":386,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":684,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/hub/hub-screen.tsx","line":725,"sha256":"48bf478fbb659cdfe32bf9915e52a2e396c9fde1f33e09c3c2fa4c82f27f20c8"},{"path":"src/components/ward-management/capacity/capacity-ward-drawer.tsx","line":237,"sha256":"c491da820b4c6f942c6a98ef83eef3742c493a612a36e6e9abae92fd892ab554"},{"path":"src/components/ward-management/capacity/capacity-screen.tsx","line":205,"sha256":"4db45d88db294323b638d75a37a96c124ce6ba3e111730b562eafdb53dffc03b"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":688,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CHANGE_URGENCY","name":"Change how urgent it is","group":"Urgency and blockers","lane":"record","nodes":["asked","rkUrgent"],"roles":["coordinator","ed","ward","community"],"does":"Changes the urgency, recording who changed it and why. It triggers no re-sorting or re-referral on its own.","needs":"An open movement, sender-kind permission and a listed urgency level. A supplied reason must be listed; omission is recorded as not_given. Signed/shared scope further binds the actual sender.","changes":"Sets the urgency and logs the change.","reasons":["URGENCY_CHANGE_REASONS","URGENCY_LEVELS"],"refuses":[{"when":"Guard: !URGENCY_LEVELS.includes(event.urgency as (typeof URGENCY_LEVELS)[number])","message":"CHANGE_URGENCY urgency must be chosen from URGENCY_LEVELS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1239}},{"when":"Guard: event.reason !== undefined && !URGENCY_CHANGE_REASONS.includes(event.reason)","message":"CHANGE_URGENCY reason must be chosen from URGENCY_CHANGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1248}}],"screen":{"screen":"movements/sent-journey-changes.tsx","control":"Record urgency change"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":115,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1178,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/movements/sent-journey-changes.tsx","line":170,"sha256":"2bc1df9ee01cd20bf12d9fc8d7dee1a31c82589a2c354a0f5d595bd8cca25072"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1189,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1198,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"FLAG_MOVEMENT_URGENT","name":"Flag it urgent","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","rkUrgent","rkQueue"],"roles":["coordinator","ed"],"does":"Marks the patient urgent so they sit above every urgency level in the coordinator's queue, recording who and why.","needs":"The record is open and not already flagged.","changes":"Sets the flag and opens a history entry.","reasons":["URGENT_MARK_REASONS"],"refuses":[{"when":"Guard: movement.flaggedUrgent","message":"movement ${movement.id} is already flagged urgent","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1951}},{"when":"Guard: !URGENT_MARK_REASONS.includes(event.reason)","message":"FLAG_MOVEMENT_URGENT reason must be chosen from URGENT_MARK_REASONS","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1954}}],"screen":{"screen":"movement-drawer.tsx (+1 other)","control":"Flag this patient as urgent"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":362,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1960,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-drawer.tsx","line":401,"sha256":"0078e33c1bd4d2308ec3cffeb86545370c49996efe564c889909e00005d07550"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1261,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1992,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1995,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"CLEAR_MOVEMENT_URGENT_FLAG","name":"Clear the urgent flag","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","rkUrgent"],"roles":["coordinator","ed"],"does":"Removes the urgent flag once it is no longer needed.","needs":"It is currently flagged. Deliberately allowed even on a closed record.","changes":"Clears the flag and closes the history entry.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1969}},{"when":"Guard: !movement.flaggedUrgent","message":"movement ${movement.id} is not flagged urgent","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1973}}],"screen":{"screen":"movement-drawer.tsx (+1 other)","control":"Remove the urgent flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":363,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1984,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-drawer.tsx","line":358,"sha256":"0078e33c1bd4d2308ec3cffeb86545370c49996efe564c889909e00005d07550"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1211,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1986,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2018,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RECORD_MOVEMENT_BLOCKER","name":"Say what is holding this up","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","handover"],"roles":["ed","community","ward","coordinator","officer"],"does":"Free text describing what is actually holding the patient up. The only free-text field of its kind in the engine.","needs":"An open movement and nonblank text. An unresolved revoked-examination or diversion hold cannot be overwritten; a case-only variant of a no-blocker sentinel refuses and directs to CLEAR_MOVEMENT_BLOCKER.","changes":"Replaces the blocker text.","reasons":[],"refuses":[{"when":"Guard: blocker.length === 0","message":"RECORD_MOVEMENT_BLOCKER blocker must say something — a blank is not a statement","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":789}},{"when":"Guard: nearMiss !== undefined","message":"\"${blocker}\" differs from \"${nearMiss}\" only in case, and would be stored as an active blocker — use CLEAR_MOVEMENT_BLOCKER to say nothing is holding this up","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":807}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Record it"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":290,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":715,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1304,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":746,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":764,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CLEAR_MOVEMENT_BLOCKER","name":"Say nothing is holding it up","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","handover"],"roles":["ed","community","ward","coordinator","officer"],"does":"Records that nothing is holding the patient up any more — which is a different statement from nobody ever having recorded one.","needs":"An open movement with an active blocker, and no unresolved revoked-examination or diversion hold. The explicit hold must be resolved through reassessment/release rather than cleared as prose.","changes":"Writes “None — cleared”.","reasons":["BLOCKERS_MEANING_NOTHING_IS_BLOCKING"],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2005}},{"when":"Guard: BLOCKERS_MEANING_NOTHING_IS_BLOCKING.some((inactive) => inactive === movement.blocker.trim())","message":"movement ${movement.id} already records that nothing is holding it up","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2034}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Clear — nothing is holding this up"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":297,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2020,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1365,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2022,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2051,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"MARK_NOTICE_READ","name":"Mark a notice read","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","ed","ward","officer","community","bed_manager"],"does":"Marks a notice as read by the person or team it was actually addressed to.","needs":"You are the addressee, exactly, and it is not already marked.","changes":"Stamps who read it and when.","reasons":[],"refuses":[{"when":"Guard: notice.to.role !== event.role || notice.to.placeId !== event.actingPlaceId","message":"MARK_NOTICE_READ role/actingPlaceId (${event.role}/${event.actingPlaceId ?? \"none\"}) must match notice ${event.noticeId}'s own addressee (${notice.to.role}/${notice.to.placeId ?? \"none\"})","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":297}},{"when":"Guard: notice.readAt !== undefined","message":"notice ${event.noticeId} is already marked read","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":301}}],"screen":{"screen":"shell/ward-bar-state.ts; community/community-screen.tsx; ward/ward-screen.tsx","control":"Mark as read"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":515,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":290,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/shell/ward-bar-state.ts","line":316,"sha256":"8272a84387337469217e8a70798c6b37922f30bb1e3eaf8a185fdc504f9a34a3"},{"path":"src/components/ward-management/community/community-screen.tsx","line":835,"sha256":"12b4bfd49f402804b24436230478a0c54a70e05434f53b843ff561d99325e354"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1104,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":297,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":301,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"ACKNOWLEDGE_INBOX_ITEM","name":"Acknowledge an inbox row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Records that the coordinator has seen a row and is on top of it, without removing or hiding it.","needs":"The row names a real category and a real record.","changes":"Logs the acknowledgement. Touches nothing else.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"ACKNOWLEDGE_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":316}},{"when":"Guard: !inboxCategory || !namesRecord","message":"ACKNOWLEDGE_INBOX_ITEM inboxItemId ${inboxItemId} does not name a real inbox row — its prefix must be one of INBOX_CATEGORIES and its remainder an existing record for that category","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":337}}],"screen":{"screen":"alerts-screen.tsx (+1 other)","control":"Acknowledge Alert"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":536,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":312,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":428,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":670,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":316,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":337,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"COMPLETE_INBOX_ITEM","name":"Tick off an inbox row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Records completion of a classified human commitment. The current commitment is the coordinator’s daily check, whose id must name a signed integer day. Live fact rows cannot be ticked away.","needs":"A nonblank classified commitment id, a valid daily-check day suffix and no current completion. This is a daily-check record, not proof that any patient/bed action was performed.","changes":"Appends completed role/time history without mutating patient, movement or unit facts.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"COMPLETE_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":353}},{"when":"Guard: inboxItemId.startsWith(INBOX_CATEGORIES.daily_check.idPrefix) && !/^day-(?:0|-?[1-9]\\d*)$/.test(inboxItemId.slice(INBOX_CATEGORIES.daily_check.idPrefix.length))","message":"inbox row ${inboxItemId} does not name a day for the daily check","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":370}},{"when":"Guard: inboxItemCompletionState(history) === \"complete\"","message":"inbox row ${inboxItemId} is already complete","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":374}}],"screen":{"screen":"delays/daily-check-line.tsx; ward-tasks-drawer.tsx","control":"Daily check completion; generic commitment action when supplied"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":537,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":350,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":432,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/delays/daily-check-line.tsx","line":286,"sha256":"488ea1f4f5286bbff224f264bfd40e405af78caae5ac7fe88f197679394d43f0"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":353,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":370,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":374,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"REOPEN_INBOX_ITEM","name":"Reopen a completed row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Undoes a completed row, while keeping the fact that it was once completed.","needs":"It is currently complete.","changes":"Logs the reopening.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"REOPEN_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":388}},{"when":"Guard: inboxItemCompletionState(history) !== \"complete\"","message":"inbox row ${inboxItemId} is not complete, so there is nothing to reopen","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":392}}],"screen":{"screen":"ward-tasks-drawer.tsx","control":"Generic completion-history reopening action when a completed commitment is supplied"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":538,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":385,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":436,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":388,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":392,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"ADVANCE_CLOCK","name":"Move the demonstration clock","group":"Running the demonstration","lane":"record","nodes":["rkClock"],"roles":["demo"],"does":"Adds a finite nonnegative simulation offset to the app clock. Ordinary provider time follows wall time, refreshing at minute boundaries while visible and catching up on return; initialNow pins deterministic test/render time.","needs":"The demo role and finite nonnegative minutes; coordinator is not in this event’s permission list.","changes":"Increases clockOffsetMinutes; it does not itself create a legal expiry or resolve a timed task. In the local provider, command acceptance precedes device durability: the saved-on-device flag remains false until the matching committed safe copy is written, and owned unsaved work is protected on unload. These persistence indicators do not add an engine transition.","reasons":[],"refuses":[{"when":"Guard: finiteInstant(event.minutes) === null || event.minutes \u003c 0","message":"ADVANCE_CLOCK minutes must be a finite, non-negative number","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1681}}],"screen":{"screen":"ward-global-search.tsx; tools/ward-demo-panel.tsx","control":"Global Search offers Advance demo clock (+15m), dispatching minutes=15 under role demo; the Demo panel also offers +15 min and +1 hour. Imperative search navigation and desk switching first consult the composed unsaved-work guard."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":108,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1692,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-global-search.tsx","line":1275,"sha256":"b7c651d7a0a3110b10e5d46aeb7ab769359393240cf55bb4024fc570504185ac"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":268,"sha256":"002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":450,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/use-ward-minute-tick.ts","line":12,"sha256":"5637f3746158c8b09a50abf19699294ced1b1d25e91be6a7b03e870c746f7fa7"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1696,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RESET_SCENARIO","name":"Reset the board","group":"Running the demonstration","lane":"record","nodes":[],"roles":["demo"],"does":"Restores the currently loaded recognised scenario, falling back to standard for a damaged scenario value.","needs":"Nothing.","changes":"Re-seeds all board state around the current visible time and clears the simulation offset, preserving the visible clock rather than always selecting the standard scenario. A genuine accepted reseed advances worldGeneration exactly once; wrong-role/rejected reseeds do not. A non-safe or exhausted generation refuses replacement by retaining the old state, so generation is never wrapped or reused. Reset also invalidates older asynchronous local scenario-file import requests. A newer import, reset, changed world generation or retired provider lifetime prevents an older read from replacing the current day. Imported local state is not reported durable before its device copy is written.","reasons":[],"refuses":[],"screen":{"screen":"ward-flow-provider.tsx; tools/ward-demo-panel.tsx","control":"Reset scenario"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":109,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1674,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1143,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":197,"sha256":"002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"}]}},{"event":"SET_SCENARIO","name":"Switch to a different simulated night","group":"Running the demonstration","lane":"record","nodes":[],"roles":["demo"],"does":"Switches to a different pre-built simulated night, resetting every patient, ward and record.","needs":"A recognised scenario.","changes":"Replaces the whole state. A genuine accepted reseed advances worldGeneration exactly once; wrong-role/rejected reseeds do not. A non-safe or exhausted generation refuses replacement by retaining the old state, so generation is never wrapped or reused.","reasons":["WARD_SCENARIOS"],"refuses":[{"when":"Guard: !WARD_SCENARIOS.includes(event.scenario)","message":"SET_SCENARIO scenario must be chosen from WARD_SCENARIOS","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1672}}],"screen":{"screen":"demo-reset/ward-demo-reset.tsx; tools/ward-demo-panel.tsx","control":"Both pickers ask before replacing the synthetic world. The separate Demo reset waits for the command outcome, keeps choices unavailable while it is pending, and reports a current accepted replacement as complete. Failed, refused, cancelled or unknown completion is not reported as success, and obsolete or unmounted results do not announce into a replacement workspace."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":110,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1682,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/demo-reset/ward-demo-reset.tsx","line":131,"sha256":"8e2f79f5ec7d9a3e37df33fde6bad92cafe4a8412191b49c10751dd2bf600c9e"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":197,"sha256":"002918ecd56f5d0f951247f9cbc1b96adccea94e8d024b3a82cb0ed46b6dbebc"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1687,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"SET_CONFIGURATION","name":"Change the coordinator's settings","group":"Running the demonstration","lane":"record","nodes":["rkSettings"],"roles":["coordinator"],"does":"Saves the tunable settings the rest of the system reads — access-time targets, the parallel referral cap, how long a bed hold lasts.","needs":"A validated complete configuration and, when supplied, a valid baseline. Conflicting edits since that baseline refuse; non-conflicting draft fields merge. Signed/shared access also enforces coordinator scope.","changes":"Applies the validated configuration or field merge atomically. It does not silently overwrite a conflicting baseline.","reasons":[],"refuses":[],"screen":{"screen":"settings-screen.tsx","control":"Save Configuration"},"review":{"reviewedOn":"2026-11-08","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":112,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1703,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/settings/settings-screen.tsx","line":444,"sha256":"59b6fc559d0d40fdd16cd3444d0db3e3c673cdbb3591f5bda4000b36120a3928"}]}},{"event":"RECORD_PATIENT_DISCHARGE","name":"Record a patient’s physical departure","group":"Not wired up here","lane":"record","nodes":["rkDischarge","personLeaves"],"roles":["ward","coordinator"],"does":"The protected discharge handler records physical departure of a linked occupied admission. It runs before the generic reducer switch; the later grouped switch case is not the behaviour.","needs":"Permitted ward/coordinator actor, finite time, current world generation and discharge revision, matching linked patient/stay, lawful destination and no active transit/restrictive-practice/open-return conflict.","changes":"Departs the stay through the shared departure helper, adjusts resources, retains audit and a bounded step-undo record. A stale or inaccessible request refuses.","reasons":[],"refuses":[{"when":"Guard: dischargeBlockingTransit(state, admission)","message":"Patient is currently in transit to another facility.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":447}}],"screen":{"screen":"ward-flow-provider.tsx (discharge context)","control":"Record departure through the discharge record context"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":22,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":476,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1248,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":486,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"}]}},{"event":"OPEN_DISCHARGE_RECORD","name":"Open an authorised discharge record","group":"Not wired up here","lane":"record","nodes":["rkDischarge"],"roles":["coordinator","ward","community","bed_manager"],"does":"Checks actor access to a discharge record and appends its protected open/read audit receipt. It runs before the generic switch.","needs":"A valid actor, current generation, valid request id/optional namespace and an accessible admission. A coordinator must also give an on-behalf-of-the-ward reason from the closed `ON_BEHALF_REASONS` list (D-80 item 17); any other desk sends none. A repeated matching receipt is reused only while that read remains allowed.","changes":"Records an accepted read audit event, carrying the coordinator's listed reason as `onBehalfReason`; changes no admission or bed figure.","reasons":[],"refuses":[{"when":"Guard: event.role === \"coordinator\" ? !isOnBehalfReason(event.onBehalfReason) : event.onBehalfReason !== undefined","message":"Choose why you are opening this ward's record on the ward's behalf. Nothing was opened.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":188}}],"screen":{"screen":"ward-flow-provider.tsx (discharge context)","control":"Open the discharge record through its audited context; the Discharges board and the Capacity ward drawer ask a coordinator for the reason first"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":25,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":180,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1278,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"}]}},{"event":"REVIEW_AUDIT_EVENT","name":"Record a governance review","group":"Not wired up here","lane":"record","nodes":[],"roles":["coordinator"],"does":"The coordinator records one listed review decision against an accessible audit event, including supported synthetic governance entries. It runs before the generic switch.","needs":"Coordinator, finite time, current generation and expected review count, a non-review audit entry in this generation and safe counters.","changes":"Appends a uniquely sequenced review and its audit record. A later review changes the expected count; UNDO_AUDIT_REVIEW is a separate recorded action.","reasons":[],"refuses":[],"screen":{"screen":"governance-registers.tsx","control":"Governance review decision"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":26,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":133,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/governance-registers.tsx","line":546,"sha256":"198ab9034a632ffca21ae9f719bed97ce6b53f40f7148085fb9ddd034da46a2c"}]}},{"event":"RECORD_DIVERSION","name":"Divert a journey already under way","group":"The journey","lane":"diversion","nodes":["rkDiversion"],"roles":["officer","coordinator"],"does":"Records that a patient already in the vehicle was taken somewhere other than the ward expecting them, with a reason and the place they went.","needs":"A transport job that has been collected, on a movement that is open, not arrived, not already stopped or cancelled, and not already diverted.","changes":"Marks the movement diverted and records where the patient is. The held bed is NOT given back by this act.","reasons":["DIVERSION_REASONS"],"refuses":[{"when":"Guard: movement.transport.collectedAt === undefined","message":"movement ${movement.id}'s transport has not been collected yet; diversion is only for a journey already under way","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1152}},{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"movement ${movement.id}'s patient has already arrived","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1156}},{"when":"Guard: movement.transport.stoppedAt !== undefined || movement.transport.cancelledAt !== undefined","message":"movement ${movement.id}'s transport was already stopped or cancelled","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1159}},{"when":"Guard: movement.transport.diversion","message":"movement ${movement.id} was already diverted","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1162}},{"when":"Guard: !DIVERSION_REASONS.includes(event.reason)","message":"RECORD_DIVERSION reason must be chosen from DIVERSION_REASONS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1165}}],"screen":{"screen":"officer/officer-job-detail.tsx (via use-officer-diversion-save.ts); movements/movement-workspace-cockpit.tsx","control":"Divert Diversion reason/place and pending save are guarded against outer dismissal. Draft and completion belong to the same access lifetime, movement and transport job; another job is not recorded or dismissed by an old completion."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":195,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1097,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/officer/use-officer-diversion-save.ts","line":66,"sha256":"bd611831cda3c81a8e99cf89c4d375acbb2e9e95948890a8880e7a9b4425b77b"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1678,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1110,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1114,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1117,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1120,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1123,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RELEASE_DIVERTED_BED","name":"Give back the bed a diverted patient was holding","group":"Holding the bed","lane":"record","nodes":["rkDiversion"],"roles":["coordinator","ward","ed"],"does":"Releases the bed still held for a movement that was diverted. Separate from the diversion itself, deliberately: diverting somebody does not decide what happens to their bed.","needs":"A movement that really was diverted, and that still holds a bed.","changes":"Returns the bed to the ward's figures.","reasons":[],"refuses":[{"when":"Guard: movement.transport?.diversion === undefined","message":"movement ${movement.id} was not diverted, so there is no diverted bed to release this way","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":634}},{"when":"Guard: movement.closure !== undefined || !movementHoldsBedByStage(movement)","message":"movement ${movement.id} has no bed pulled — it may already have been released","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":640}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_DIVERTED_BED was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":646}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; ward/ward-arrivals-corridor.tsx; ed/ed-screen-referred.tsx","control":"Release the diverted bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":197,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":686,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1168,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward/ward-arrivals-corridor.tsx","line":662,"sha256":"572956c1b4769defd00bc1a5dc027ff2d76c476388cee6d36833c8321e3824a4"},{"path":"src/components/ward-management/ed/ed-screen-referred.tsx","line":357,"sha256":"0b0d6dde9843e2750f4dbadd23e4e7d9c30b2c2c9eee9e4f2c539961a97568aa"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":693,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":699,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":705,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"SET_ARRIVAL_DETAILS","name":"Record how and when they are expected","group":"The journey","lane":"record","nodes":["edExpected"],"roles":["coordinator","ed","ward","community"],"does":"Records the way the patient is travelling, any tracking number, and the time they are expected.","needs":"An open movement with an accepted ward. A ward names itself and matches that receiving ward; coordinator may also act.","changes":"Stores arrival mode, optional tracking and estimate, retaining first-record author/time and later update provenance. Keeps the pull-expiry timer. An already-late estimate can send one-time ED/ward notices; it reserves no bed and moves no stage.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1132}},{"when":"Guard: movement.closure","message":"cannot update arrival details on closed movement","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1134}}],"screen":{"screen":"arrival-time-modal.tsx","control":"Set arrival details The arrival dialog names the patient and record, keeps edited answers on Keep editing, requires explicit Discard details before an unsaved close, and blocks dismissal while pending. A delayed discard only closes the unchanged current mounted draft; saving closes only on a current accepted outcome."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":544,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1165,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/referrals/arrival-time-modal.tsx","line":173,"sha256":"b4b6a5c54f7517706f955942876fa195982fdfccf9fe481094705fa9ceae98f5"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1167,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1169,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"EVALUATE_ARRIVAL_LATENESS","name":"Work out whether an expected arrival is late","group":"The journey","lane":"record","nodes":["edExpected"],"roles":["coordinator","ed","ward"],"does":"Compares the expected arrival time against the clock and records whether it has passed.","needs":"A movement, and a role allowed to ask.","changes":"When late, stamps the movement and sends notices to the emergency department and ward. When on time, leaves it unchanged. No journey stage moves.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1216}},{"when":"Guard: movement.closure","message":"This movement is closed.","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1217}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Review late arrival"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":567,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1250,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":140,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1252,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1253,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"SET_STEP_DOWN_CANDIDATE","name":"Mark somebody as a step-down candidate","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records that this admission could move to a lower level of care.","needs":"An existing admission. A ward must name that admission’s ward; coordinator permission is separate.","changes":"Sets the flag, and nothing else. No bed figure moves.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":722}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_STEP_DOWN_CANDIDATE was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":728}}],"screen":{"screen":"board/ward-board-detail-panel.tsx","control":"Step-down candidate"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":545,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":704,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":524,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":706,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":712,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_DISCHARGE_BARRIER","name":"Record what is holding a discharge up","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records the single thing in the way of this discharge, or that nothing is.","needs":"An existing admission, the acting ward when role is ward, and a listed barrier or None/null. The reducer does not impose a seven-day minimum.","changes":"Replaces the discharge-barrier field, with None normalised to null. It records a reason; it does not free or reserve a bed.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":745}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_DISCHARGE_BARRIER was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":750}}],"screen":{"screen":"ward/ward-screen-overlays.tsx; board/ward-board-detail-panel.tsx","control":"Discharge barrier"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":552,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":727,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":346,"sha256":"5f299e7db840c3d6209477410076e4072984fdf90ab65f214165ca9d7abb2e47"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":566,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":729,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":734,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_CLINICALLY_READY","name":"Record clinically ready and why not gone","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records the day a patient on the ward became clinically ready for discharge and the one reason they have not gone, or clears both (Josh, 9 Nov 2026).","needs":"An occupied admission, the acting ward when role is ward, a day from arrival to today and a reason from DELAYED_DISCHARGE_REASONS (the long-stay list less Clinical / Treatment), or null to clear.","changes":"Sets or clears clinicallyReadySince and delayedDischargeReason together. Delayed bed days by reason are derived from them; no bed is freed or reserved.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":761}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_CLINICALLY_READY was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":766}},{"when":"Guard: admission.state !== \"occupied\" || admission.arrivedAt === null","message":"SET_CLINICALLY_READY applies only to a patient on the ward","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":770}},{"when":"Guard: !isDelayedDischargeReason(ready.reason)","message":"SET_CLINICALLY_READY reason must be chosen from DELAYED_DISCHARGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":776}},{"when":"Guard: the day is not finite, is before the arrival day or after today","message":"SET_CLINICALLY_READY date must fall between arrival and today","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":784}}],"screen":{"screen":"board/ward-board-clinically-ready.tsx","control":"Clinically ready since"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":554,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":759,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-clinically-ready.tsx","line":95,"sha256":"e96eb8cc65cf8106ffb61275d82972e5b40617de1b68c6dceb0737fb47a3ef78"}]}},{"event":"UPDATE_EXPECTED_DISCHARGE","name":"Set or move the expected discharge date","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Sets when this admission is expected to leave. Moving a date already set counts as one more move.","needs":"An admission that has not already left. A ward can only set it for its own patients. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Sets the expected time, increments date-move count only when an existing date differs, and stamps when. A ward setter is Nurse in charge; coordinator setter is null. Pending linked bed-release dates follow; completed release dates stay historical.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":226}},{"when":"Guard: admission.state === \"departed\"","message":"cannot update expected discharge for departed admission ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":229}},{"when":"Guard: event.role === \"ward\" && (!event.actingUnitId || event.actingUnitId !== admission.unitId)","message":"UPDATE_EXPECTED_DISCHARGE was raised acting as unit ${event.actingUnitId ?? \"unspecified\"} but admission ${admission.id} belongs to unit ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":235}},{"when":"Guard: typeof event.expectedDischargeAt !== \"number\" || !Number.isFinite(event.expectedDischargeAt)","message":"UPDATE_EXPECTED_DISCHARGE expectedDischargeAt must be a valid timestamp","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":239}}],"screen":{"screen":"ward/ward-drawer-discharge-date.tsx; board/ward-board-detail-panel.tsx; patients/patient-now-screen.tsx; discharges/discharge-detail-panes.tsx","control":"Update expected departure The ward drawer fixes its day choices when the editor opens, so a save made just after midnight keeps the day that was chosen."},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":23,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":224,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-drawer-discharge-date.tsx","line":81,"sha256":"54731b0b51ea23bdd098e653f19cefc60e759ac91e8a170418a96e9837f3aa87"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":401,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":743,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/discharges/discharge-detail-panes.tsx","line":304,"sha256":"e5336a5cf0037d9c50af5a381b33e5ac5f8278de1a800067197254a82a19aec3"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":227,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":230,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":236,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":240,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_ADMISSION_CARE","name":"Record care journey fact","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator","community"],"does":"Records a care journey fact (such as a transfer, transport, clinical plan or document) against an admission on the discharge board.","needs":"Current generation/revision, permitted ward/coordinator/community actor and accessible linked occupied/departed stay. Community writes only its allowed care kinds for its own team; transfer acceptance and cancellation are coordinator-only, and an accepted or handover transfer step needs a linked placement record (a ward referral or agreed repatriation). Change-kind validation and sequence-specific guards apply. A transfer recorded as arrived also needs a Ready bed at the receiving ward once its live pulls are counted.","changes":"Appends or updates the care journey record. Moves no bed figure — except a transfer recorded as arrived, which also ends this admission as transferred, opens a new occupied admission and an arrived movement at the receiving ward, completes any live bed release for the leaver, and moves both wards' bed figures.","reasons":[],"refuses":[{"when":"Guard: patientRecordIsInvoluntary(patient?.legalStatus) || stayLegalStatusIsInvoluntary(state, admission)","message":"Record the checked transport authority for this involuntary arrangement.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":256}},{"when":"Guard: previous !== \"5A\" && previous !== \"5B\"","message":"A Form 5B continuation needs a recorded Form 5A or earlier Form 5B for this stay.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":264}},{"when":"Guard: transfer accepted/handover && !dischargeMovement(state, admission)","message":"Create a linked placement record through a ward referral or agreed repatriation before recording this transfer.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":257}},{"when":"Guard: pulledBedAvailability(receiving, livePulled).ready \u003c= 0","message":"No Ready bed remains at the receiving ward.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":332}}],"screen":{"screen":"discharge-care-journey.tsx","control":"Record care fact"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":20,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":230,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1622,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward/ward-leave-paper-authority.tsx","line":141,"sha256":"e8727edeed2ac11af122dcd34039702137c3355dc9404cf567e5d1316f14fff7"},{"path":"src/components/ward-management/discharges/discharge-care-journey.tsx","line":122,"sha256":"ccb0ccd1a1dd746abeef58fb9f7c3aa79e38c0316a68b6a3160ffe85c7dd44f4"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":276,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":284,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"}]}},{"event":"RECORD_ADMISSION_FOLLOW_UP","name":"Record follow-up arrangement","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records follow-up contact arrangements against an admission on the discharge board.","needs":"Current generation/revision, permitted ward/coordinator actor and accessible linked occupied/departed stay. The listed follow-up state cannot be recorded after death on the ward, or before arrival.","changes":"Updates the follow-up arrangement on the admission. Moves no bed figure.","reasons":[],"refuses":[],"screen":{"screen":"discharge-follow-up.tsx","control":"Record follow-up"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":21,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":453,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1623,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/discharges/discharge-follow-up.tsx","line":87,"sha256":"807a917c3e51421e00d0e3aea3f79340f47939406bd66baea66e7312372dcce6"}]}},{"event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","name":"Record medical clearance against the movement","group":"Finding a bed","lane":"record","nodes":["rkClearance"],"roles":["ed","coordinator"],"does":"Records clearance on a movement and synchronises its matching linked referral. Fresh positive clearance resumes a recorded deterioration pause.","needs":"An existing movement, ED/coordinator role, finite recording time and boolean answer; an ED must name itself and be the journey's origin ED (M2); positive re-clearance must follow the recorded deterioration. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Replaces clearance on the movement, matching linked referral and matching sibling movements. Positive fresh clearance records resumedAt for satisfied pauses; it does not restore released resources.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1323}},{"when":"Guard: event.role !== \"ed\" && event.role !== \"coordinator\"","message":"role ${event.role} cannot record movement medical clearance; only ed or coordinator may record clearance","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1328}},{"when":"Guard: event.role === \"ed\" && actingPlaceId is not the journey's originEdId","message":"Only the originating ED may record medical clearance for this journey.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1285}}],"screen":{"screen":"ed/ed-medical-placement-controls.tsx; patients/patient-now-screen.tsx","control":"Medically cleared"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":555,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1276,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-medical-placement-controls.tsx","line":148,"sha256":"89a5797a48cde8abca855128c5449c6b73e4dae9a065352fb94e6810d203dbec"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":1434,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1278,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1283,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"UPLOAD_PATIENT_FORM","name":"Attach a file to the movement","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["coordinator","ed","ward","community","officer"],"does":"Records document type, recognised file type and byte size as attachment metadata. The selected file’s name and bytes are not stored by this event.","needs":"An existing movement, nonblank document type, recognised file type and positive safe-integer byte size. Legacy filenames are read only to derive their type.","changes":"Appends generated document id, formName, fileType, sizeBytes and role/time metadata; no file body or original filename is retained.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":791}},{"when":"Guard: event.fileType === undefined && (typeof legacyName !== \"string\" || legacyName.trim().length === 0)","message":"Document details need a recognised file type.","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":802}}],"screen":{"screen":"upload-forms-modal.tsx","control":"Upload a form"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":556,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":773,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/officer/officer-forms-pack.tsx","line":293,"sha256":"bec740b858e305b841f30e084461ba51f96e7c63b939c2394771c1ab06728d02"},{"path":"src/components/ward-management/referrals/upload-forms-modal.tsx","line":75,"sha256":"070b8a39d8755ece7a56af9cb756aaf8714457c3751d29f1c468ef6a7cf4b18b"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":779,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":790,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_LEGAL_FORM_WRITTEN","name":"Record that a legal form was written","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator","ward"],"does":"Records which form was written, with typed start and expiry times.","needs":"A supported form, finite typed written time and any typed expiry. A ward requires an admitted stay; ED requires an open movement, while an admitted stay permits the coordinator/ward path after arrival. 3C after3D refuses; this event cannot shorten existing same-form paper expiry.","changes":"Stores current paper facts and history, preserves matching same-form paper facts on a time edit, and clears a calculated legacy clock. A different form clears the old receipt. A same-form time edit also keeps the details typed from that paper and the typed receipt mark; a different form clears them.","reasons":[],"refuses":[{"when":"Guard: movement.closure && !(admitted && event.role !== \"ed\")","message":"cannot record a written form for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":233}},{"when":"Guard: !isLegalClockFormCode(event.formCode)","message":"That form is not a recognised legal form in this prototype","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":244}},{"when":"Guard: event.formCode === \"3C\" && form3CRefusedAfter3D(movement.legalForm?.code ?? movement.legalClock?.code)","message":"Form 3C is refused when the person arrived on a Form 3D","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":247}}],"screen":{"screen":"legal-forms-screen.tsx","control":"Record a written form"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":558,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":275,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":531,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":299,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":313,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":316,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_LEGAL_FORM_CONTINUATION","name":"Record that a form was continued","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator","ward","community"],"does":"Records a continuation with typed times. A 5B continues a 5A; other supported forms can replace paper facts without a prior form.","needs":"An open movement, supported form and valid typed start and expiry times. On a ward desk only the ward that accepted the person may record it (D-128); the app checks the named ward and the shared server checks it is the caller's own place.","changes":"Stores the paper form and typed expiry, clears the old legal clock and the typed receipt mark.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":345}},{"when":"Guard: !isLegalClockFormCode(event.formCode)","message":"That form is not a recognised legal form in this prototype","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":355}},{"when":"Guard: event.role === \"ward\" && actingUnitId is not movement.acceptedUnitId","message":"Only the ward that accepted this person can record a continuation.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":425}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Record legal form continuation"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":566,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":415,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":322,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":417,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":437,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_COUNTRY_EXTENSION","name":"Record a typed country Form 1A extension","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator"],"does":"For an eligible open country Form1A, forwards the clinician’s typed paper expiry through RECORD_LEGAL_FORM_EXPIRY. It computes no statutory deadline.","needs":"An existing open movement carrying current Form1A with paper region country, a finite paperExpiresAt and the ordinary expiry extension rules.","changes":"Records the typed expiry and expiry history through the standard expiry handler, clearing any calculated legacy clock.","reasons":[],"refuses":[{"when":"Guard: movement.closure || event.paperExpiresAt === undefined || !Number.isFinite(event.paperExpiresAt)","message":"Country extensions are recorded as a typed expiry. Enter the new expiry written on the country extension form.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":317}},{"when":"Guard: !countryExtensionEligible(movement)","message":"A country extension requires a current Form 1A with its paper setting recorded as country.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":323}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Record country paper extension"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":565,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":382,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":359,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":389,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":395,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"FLAG_LEGAL_MISMATCH","name":"Flag that the ward's authority does not match","group":"Legal status and examinations","lane":"record","nodes":["rkLegalMismatch"],"roles":["ward","coordinator"],"does":"Records one of two mismatches: an involuntary patient on a voluntary ward, or a voluntary patient on a locked one.","needs":"An open movement and real ward. The submitted mismatch kind must match the current patient legal status and ward authority/bed configuration.","changes":"Raises the flag. It does not stop anything by itself.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2103}},{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2106}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Flag current legal placement mismatch"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":571,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2158,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":187,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2134,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2160,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RAISE_EXPECT_FLAG","name":"Start a forty-eight-hour or seven-day clock by hand","group":"Urgency and blockers","lane":"record","nodes":["rkExpectFlag"],"roles":["ward","coordinator","ed","community"],"does":"Raises one of two hand-set clocks against a movement.","needs":"An open movement with no uncleared flag and kind voluntary_48h or involuntary_7d.","changes":"Records the current manually raised flag. Replacing a previously cleared flag keeps that prior record in expectFlagHistory; no automatic state transition is implied.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"This movement is closed.","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082}},{"when":"Guard: movement.expectFlag && movement.expectFlag.clearedAt === undefined","message":"movement ${movement.id} already has an open expect flag","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Raise expectation review flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":570,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2096,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":116,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2132,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2137,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"CLEAR_EXPECT_FLAG","name":"Clear that hand-set clock","group":"Urgency and blockers","lane":"record","nodes":["rkExpectFlag"],"roles":["ward","coordinator","ed","community"],"does":"Clears the flag raised above.","needs":"An open movement with an uncleared expect flag.","changes":"Stamps clearedAt and clearedBy on the flag; it is retained rather than removed.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2067}},{"when":"Guard: !movement.expectFlag || movement.expectFlag.clearedAt !== undefined","message":"movement ${movement.id} has no open expect flag to clear","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2070}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Clear expectation review flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":569,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":114,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2087,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RELEASE_AND_REOPEN_SEARCH","name":"Give the bed back and reopen the search, in one act","group":"Holding the bed","lane":"stall","nodes":["sPullReleased"],"roles":["coordinator","ward"],"does":"Releases the held bed AND puts the movement back into the bed search together, rather than as two separate steps.","needs":"An open movement at pulled or accepted_awaiting_bed, a listed release reason and no live booking; a ward must match the accepting ward. A bed need not already be held on the accepted-only branch.","changes":"Returns any matching held bed, clears acceptance/hold/requests/transport and moves to placement_requested. Logs pull release when held, otherwise acceptance withdrawal. For a return movement with sourceAdmissionId, the in-app release/withdrawal notice targets the actual sending stay ward. Ordinary ED/community origins retain their existing recipient paths; no external-provider delivery is implied.","reasons":["RELEASE_PULL_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot release and reopen a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":757}},{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"accepted_awaiting_bed\"","message":"cannot release and reopen at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":763}},{"when":"Guard: !RELEASE_PULL_REASONS.includes(event.reason)","message":"RELEASE_AND_REOPEN_SEARCH reason must be chosen from RELEASE_PULL_REASONS","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":774}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_AND_REOPEN_SEARCH was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":780}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Release held bed and reopen search"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":568,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":812,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":228,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":816,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":822,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":833,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":839,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"CONFIRM_MORNING_ROLLUP","name":"Confirm the ward's morning count","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["ward","bed_manager","coordinator"],"does":"A ward confirming how many discharges it expects that morning.","needs":"The acting ward must match the target; the count must be a nonnegative safe integer.","changes":"Records the confirmed number against the ward.","reasons":[],"refuses":[{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2126}},{"when":"Guard: (event.role === \"ward\" && event.actingUnitId === undefined) || (event.actingUnitId !== undefined && event.actingUnitId !== event.unitId)","message":"CONFIRM_MORNING_ROLLUP was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2136}}],"screen":{"screen":"ward-screen.tsx","control":"Confirm the morning rollup"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":579,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2155,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1084,"sha256":"609353a46e34485afe5b65294ebe0e4e4239b09adf13946f6575668d60325ce3"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2157,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2147,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"SEND_WARD_BUZZ","name":"Send a message to a ward","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["coordinator","bed_manager"],"does":"Records a ward refresh request with a listed message and optional urgent boolean. It sends no external message.","needs":"A real unit, a message from WARD_BUZZ_MESSAGES and, if supplied, a boolean urgent answer. Blank/unlisted messages refuse.","changes":"Appends a refresh-request record with role/time, message and urgency; moves no bed figure.","reasons":[],"refuses":[{"when":"Guard: !WARD_BUZZ_MESSAGES.includes(event.message) || (event.urgent !== undefined && typeof event.urgent !== \"boolean\")","message":"Choose a valid ward refresh message.","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2160}},{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2162}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Request ward capacity review"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":580,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2186,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":210,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2191,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2218,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"EVALUATE_LEAVE_BED_WARNINGS","name":"Sweep the beds held during leave","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["ward","coordinator"],"does":"Works out which beds being held while somebody is on leave are worth warning about.","needs":"Nothing but the clock — it takes no patient and no ward.","changes":"For each leave bed over the open-warning threshold that has not been warned, records openWarningAt and sends a ward notice. It does not release the bed or move capacity.","reasons":[],"refuses":[],"screen":{"screen":"movement-workflow-actions.tsx","control":"Review leave bed warnings"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":578,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":821,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":163,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"}]}},{"event":"RECORD_REPATRIATION","name":"Log a repatriation arranged by phone","group":"The journey","lane":"record","nodes":["dRepat"],"roles":["coordinator"],"does":"Logs a repatriation already arranged off the system: the home hospital, whether its ward agreed, road or flight, and voluntary or involuntary, with the provider, the CAD or tracking number and an estimated time when known (W13, 5 Nov 2026: each left out warns, and a blank CAD is CAD to follow; a typed depart time the form cannot read blocks the plan form rather than recording without it). It books nothing.","needs":"A non-departed admission with valid home hospital, mode and legal status. A provider, if given, must be listed; a typed CAD must pass the CAD rule; an estimate, if given, must be finite. An unanswered prior plan may later be agreed once; an agreed plan cannot be agreed again while its return remains open; after a did_not_proceed closure a distinct new attempt may be agreed. An involuntary stay cannot be logged as a voluntary return. Any still-open return for the source stay refuses another plan. A retained agreed plan may start a distinct new attempt only after its linked return closed did_not_proceed; this retry qualification does not allow duplicate live returns or duplicate agreement of an active plan.","changes":"Creates or updates the telephone plan. Each distinct plan’s first agreement creates an open placement_requested return movement linked to the source stay; it does not itself book transport or transfer the patient. A retry preserves its prior closed journey and a flat earlier plan snapshot while replacing the single current plan for that stay. Agreed return origin site/ED lookup follows the saved scenario network. Local restore validates flat prior records and retains typed CAD values only as the redaction placeholder. An agreement that does not repeat the plan's provider or estimated time keeps the plan's own; a value it gives wins.","reasons":["TRANSPORT_PROVIDERS","TRANSPORT_LEGAL_STATUSES"],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":512}},{"when":"Guard: existingRecord && (existingRecord.receivingWardAgreed || event.receivingWardAgreed !== true)","message":"admission ${admission.id} already has a repatriation record","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":537}},{"when":"Guard: !scenarioHasSite(state.scenario, event.homeHospital)","message":"RECORD_REPATRIATION homeHospital ${event.homeHospital} does not name a real site","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":540}},{"when":"Guard: typeof event.receivingWardAgreed !== \"boolean\"","message":"RECORD_REPATRIATION receivingWardAgreed must be answered, and it has no default","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":543}},{"when":"Guard: !(REPATRIATION_MODES as readonly string[]).includes(event.mode)","message":"RECORD_REPATRIATION mode must be chosen from REPATRIATION_MODES","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":546}},{"when":"Guard: event.provider !== undefined && !(TRANSPORT_PROVIDERS as readonly string[]).includes(event.provider)","message":"RECORD_REPATRIATION provider must be chosen from TRANSPORT_PROVIDERS","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":549}}],"screen":{"screen":"out-of-area-board.tsx","control":"Record repatriation After the latest linked return journey is closed did_not_proceed, the Out of area screen reopens the return-plan form rather than treating the older agreed plan as still active. Historical records remain; retry acceptance and creation of another journey remain engine decisions."},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":582,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":530,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/out-of-area/out-of-area-board.tsx","line":418,"sha256":"0e5d43b3a020ff60e265e2e4fb200f16d505dd667d737677943fdc01ff23f26d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":533,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":558,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":561,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":564,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":567,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":570,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_HANDOVER_SIGN_OFF","name":"Sign off the shift handover","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["coordinator","ward"],"does":"Records that the shift handover was signed off.","needs":"A permitted role and, when supplied, a real ward. A sign-off cannot name both a ward and the whole network; signed/shared scope further limits the acting desk.","changes":"Appends role/time plus the selected ward id or network flag. It records no personal name/note and makes no claim that a sheet was sent.","reasons":[],"refuses":[{"when":"Guard: event.unitId !== undefined && !findUnit(state, event.unitId)","message":"no ward found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":493}},{"when":"Guard: event.network === true && event.unitId !== undefined","message":"a sign-off names one ward or the whole network, not both","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":496}}],"screen":{"screen":"handover/handover-scope-rules.ts","control":"Sign off the handover The handover being reviewed retains outgoing ward journeys through the linked source stay or referral origin and outgoing community journeys through their originating team. Display inclusion does not widen the desk allowed to sign off."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":591,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":509,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/handover/handover-scope-rules.ts","line":113,"sha256":"a5ef90b1a994a20b49344788004bcd8160e5f58383e77fa48a82bde80e67f198"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":514,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":517,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_CLINICAL_CONTACT","name":"Record that a team was contacted","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["community","coordinator"],"does":"Records that somebody contacted a community team. This is the contact itself, not a message sent through the system.","needs":"A community team that exists.","changes":"Stores the team, the time and the role.","reasons":[],"refuses":[{"when":"Guard: !team","message":"RECORD_CLINICAL_CONTACT teamId ${event.teamId} does not name a real team","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":689}}],"screen":{"screen":"community/use-community-contact-save.ts","control":"Contacted"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":599,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":711,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/community/use-community-contact-save.ts","line":154,"sha256":"6503061cec64069859f3ed3a8f52042ef6d18bce27c5de7c37f88bfe8ab5da8e"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":715,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"DISPATCH_BROADCAST_ALERT","name":"Send a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","bed_manager"],"does":"Sends an alert to wards and emergency departments across the network, with a severity, a category, who it is aimed at and how long it lasts.","needs":"Nonblank title/message; listed severity/category/scope; finite positive duration; directive or bed_call kind; any explicit recipients must be real ward/ED desks. A bed call requires at least one targeted ward.","changes":"Adds the alert as active, with nobody yet acknowledging it. It belongs to no patient.","reasons":[],"refuses":[{"when":"Guard: !event.title.trim() || !event.message.trim()","message":"DISPATCH_BROADCAST_ALERT requires a non-empty title and message","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":71}},{"when":"Guard: finiteInstant(event.durationMinutes) === null || event.durationMinutes \u003c= 0","message":"DISPATCH_BROADCAST_ALERT durationMinutes must be a finite positive number","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":92}}],"screen":{"screen":"alerts-screen.tsx","control":"+ Broadcast Network Alert"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":626,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":69,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":827,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":71,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":92,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}},{"event":"ACKNOWLEDGE_BROADCAST_ALERT","name":"Acknowledge a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","ward","ed","officer","community","bed_manager"],"does":"Records that one ward or desk has seen a network-wide alert.","needs":"An active alert and known ward/ED desk not already acknowledged; the special coordinator desk id requires coordinator role. Signed access must match the actor’s actual desk.","changes":"Adds the unit to the alert's acknowledged list.","reasons":[],"refuses":[{"when":"Guard: !target","message":"ACKNOWLEDGE_BROADCAST_ALERT alertId ${event.alertId} not found","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":155}},{"when":"Guard: !isAlertActive(target, event.now)","message":"ACKNOWLEDGE_BROADCAST_ALERT alertId ${event.alertId} is no longer active","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":178}}],"screen":{"screen":"shell/ward-broadcast-banner-body.tsx; shell/ward-broadcast-banner.tsx","control":"Acknowledge this directive for your desk; desk comes from current signed/route context"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":627,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":151,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/shell/ward-broadcast-banner-body.tsx","line":130,"sha256":"a96ae00d184b52341105eb90f8a0438f5f5561f787c2522f97e0e7ea62e87178"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":155,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":178,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}},{"event":"STAND_DOWN_BROADCAST_ALERT","name":"Stand down a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","bed_manager"],"does":"Ends a network-wide alert once the pressure has passed.","needs":"An alert that exists and has not already been stood down.","changes":"Marks the alert stood down, with the time and who did it.","reasons":[],"refuses":[{"when":"Guard: !target","message":"STAND_DOWN_BROADCAST_ALERT alertId ${event.alertId} not found","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":202}},{"when":"Guard: target.status === \"stood_down\"","message":"STAND_DOWN_BROADCAST_ALERT alertId ${event.alertId} is already stood down","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":208}}],"screen":{"screen":"alerts-screen.tsx","control":"Stand Down Directive"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":628,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":198,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":861,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/shell/ward-broadcast-banner.tsx","line":125,"sha256":"d34087fc1cfb2356065997d7942882cd1bc9791e3041e71ec0fb0d279fe429be"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":202,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":208,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}}],"stages":{"width":2880,"height":4832,"spineX":910,"nodes":[{"id":"srcCommunity","lane":"expected","x":60,"y":66,"w":236,"h":62,"label":"A community team","phase":"front"},{"id":"srcCrisis","lane":"expected","x":312,"y":66,"w":236,"h":62,"label":"A crisis service","phase":"front"},{"id":"srcPolice","lane":"expected","x":564,"y":66,"w":236,"h":62,"label":"Police","phase":"front"},{"id":"srcAmbulance","lane":"expected","x":816,"y":66,"w":236,"h":62,"label":"Ambulance","phase":"front"},{"id":"srcHospital","lane":"expected","x":1068,"y":66,"w":236,"h":62,"label":"Another hospital","phase":"front"},{"id":"srcEd","lane":"expected","x":1320,"y":66,"w":236,"h":62,"label":"A doctor in an ED","phase":"front"},{"id":"srcGp","lane":"expected","x":1572,"y":66,"w":236,"h":62,"label":"A GP","phase":"front"},{"id":"hdr-src","lane":"heading","x":60,"y":14,"w":700,"h":40,"label":"Who raises it  ·  seven","sub":"A doctor in an ED may only raise it as an ED referral — they cannot claim another source.","phase":"front"},{"id":"raised","lane":"expected","x":700,"y":200,"w":420,"h":80,"label":"A referral is raised","sub":"Somebody has decided this person needs to go somewhere.","patient":"Wherever they already were.","bed":"Nothing yet.","phase":"front"},{"id":"addressed","lane":"expected","x":700,"y":320,"w":420,"h":86,"label":"Addressed to up to three places at once","sub":"Up to the configured recipient cap. Distinct named psychiatric wards can be addressed together; duplicate recipients and mixing a broad ward request with named ward requests are refused.","patient":"Still where they were.","bed":"Nothing yet.","phase":"front"},{"id":"armCommunity","lane":"expected","x":60,"y":460,"w":460,"h":90,"label":"①  Sent to a community team","sub":"Named as free text — there is no register of teams to choose from.","patient":"At home, or wherever they were.","bed":"Nothing. This arm never involves one.","phase":"front"},{"id":"armWard","lane":"expected","x":700,"y":460,"w":420,"h":90,"label":"②  Sent to a psychiatric ward","sub":"Carries what the bed must be: sex, gender, secure, involuntary, high-acuity nursing.","patient":"Still waiting.","bed":"Nothing reserved.","phase":"front"},{"id":"armEd","lane":"expected","x":1300,"y":460,"w":500,"h":90,"label":"③  Sent to an emergency department","sub":"Must say what it is FOR: a bed, a psychiatric review, or a medical assessment.","patient":"On their way to, or already in, that department.","bed":"Nothing.","phase":"front"},{"id":"cmhtAnswers","lane":"expected","x":60,"y":600,"w":460,"h":70,"label":"The team answers","phase":"front"},{"id":"cmhtAccepted","lane":"end","x":60,"y":720,"w":460,"h":90,"label":"Accepted — community follow-up","sub":"The arm ends here. It never becomes a bed search.","phase":"front"},{"id":"cmhtDeclined","lane":"end","x":60,"y":860,"w":460,"h":112,"label":"Declined — four reasons","sub":"Outside the team's catchment · needs inpatient care, not community follow-up · the client declined or could not be contacted · already open to another team.","phase":"front"},{"id":"cmhtNothing","lane":"stall","x":60,"y":1012,"w":460,"h":104,"label":"No answer yet","sub":"The arm remains queued until answered or withdrawn. Other acceptances do not cancel a community arm. Displayed waiting/overdue indicators do not decide or close it.","finding":"Nothing anywhere can close a queued community arm except the team answering or the referrer.","phase":"front"},{"id":"cmhtWithdrawn","lane":"stall","x":60,"y":1152,"w":460,"h":110,"label":"The referrer withdraws just this arm","sub":"A narrow exception added 17 September 2026, and only while the arm is still queued — a team that has already answered keeps its answer. The bed request stands.","phase":"front"},{"id":"cmhtFromSearch","lane":"diversion","x":60,"y":1298,"w":460,"h":110,"label":"It can also begin part-way through a bed search","sub":"Redirecting a bed search to a community team raises a real referral of this kind — or reuses a queued arm already asking that same team, rather than asking twice. So this arm does not only start at the front door.","phase":"front"},{"id":"cmhtExempt","lane":"note","x":60,"y":1444,"w":460,"h":100,"label":"This arm is exempt from the automatic cancellation","sub":"In both directions. A ward accepting does not close it, and it accepting does not close the bed search. It is the only arm that behaves this way.","phase":"front"},{"id":"wardAnswers","lane":"expected","x":700,"y":600,"w":420,"h":70,"label":"The ward answers","phase":"front"},{"id":"wardAccepted","lane":"expected","x":700,"y":720,"w":420,"h":90,"label":"Accepted","sub":"Records the ward answer, with an optional named bed reservation on the referral. It creates no movement or admission.","patient":"Still waiting.","bed":"No movement pull yet; a named bed can be reserved on this answer.","phase":"front"},{"id":"wardDeclined","lane":"end","x":700,"y":860,"w":420,"h":112,"label":"Declined — seven reasons","sub":"No suitable bed · age band not provided here · no bed of that designation · no secure bed · belongs to another service · referred elsewhere · another reason.","phase":"front"},{"id":"wardNothing","lane":"stall","x":700,"y":1022,"w":420,"h":96,"label":"No answer at all","sub":"The destination remains waiting until answered, withdrawn or cancelled by a competing acceptance. Current target/overdue displays can flag waiting; they do not choose an answer.","phase":"front"},{"id":"othersCancelled","lane":"diversion","x":700,"y":1168,"w":420,"h":100,"label":"Every other waiting arm is cancelled","sub":"Automatically, the moment a ward OR a department accepts — except the community arm, which is exempt in both directions. The referrer is neither asked nor told.","phase":"front"},{"id":"wardWithdrawn","lane":"diversion","x":700,"y":1310,"w":420,"h":130,"label":"The referrer takes the WHOLE referral back","sub":"The default, and the opposite of the community arm's one-arm exception: every still-queued destination goes at once. If a bed search is already running it releases the held bed and cancels the transport, and closes as 'did not proceed'. Refused once transport has collected the patient — that needs a coordinator, not an automatic withdrawal.","phase":"front"},{"id":"wardBlocked","lane":"stall","x":700,"y":1470,"w":420,"h":116,"label":"A ward cannot accept while a department's bed search is live","sub":"One referral, two arms: if the emergency department already raised the bed search, the ward arm is refused until that movement closes or arrives. Neither arm's screen shows the other.","phase":"front"},{"id":"edBoard","lane":"expected","x":1300,"y":600,"w":500,"h":90,"label":"It lands on that department's board","sub":"And the referrer can see their patient sitting there.","phase":"front"},{"id":"edExpected","lane":"expected","x":1300,"y":740,"w":500,"h":90,"label":"Expected to arrive","sub":"Triaged, and not here yet. It sits on a separate list from the referrals.","patient":"Not here yet.","bed":"Nothing.","phase":"front"},{"id":"edNeverArrives","lane":"stall","x":1300,"y":880,"w":500,"h":120,"label":"Expected, and never arrives","sub":"A queued ED arm can be declined or withdrawn before arrival, removing this expectation. Otherwise it stays until arrival; past 72 hours the screen adds a reminder but changes no record.","finding":"A queued ED arm can be declined or withdrawn before arrival; the expectation then disappears without an arrival stamp.","phase":"front"},{"id":"edArrived","lane":"expected","x":1300,"y":1040,"w":500,"h":86,"label":"Marked present","sub":"The only door between the two lists. Stamped once; a repeat keeps the earliest time.","patient":"Physically in the department.","bed":"Nothing.","phase":"front"},{"id":"edAnswers","lane":"expected","x":1300,"y":1176,"w":500,"h":70,"label":"The department answers, or acts","phase":"front"},{"id":"edAccepted","lane":"expected","x":1300,"y":1296,"w":500,"h":104,"label":"Accepted — the department takes them","sub":"And every other destination still waiting is cancelled on the spot, including the ward request sent alongside it. The referrer is not asked.","patient":"In the department.","bed":"Nothing — accepting reserves none.","phase":"front"},{"id":"edDeclined","lane":"end","x":1300,"y":1450,"w":500,"h":104,"label":"Declined — three reasons only","sub":"Belongs to another service · referred elsewhere · another reason. The four bed-shaped reasons are withheld on purpose: an ED is not being asked for a bed.","phase":"front"},{"id":"edRaise","lane":"expected","x":1300,"y":1604,"w":500,"h":104,"label":"A doctor raises a bed search from here","sub":"This is what creates the record that moves. It can be linked back to the referral that sent them, or raised for somebody nobody referred.","patient":"In the department.","bed":"Nothing yet.","phase":"front"},{"id":"edOutcome","lane":"end","x":1300,"y":1758,"w":500,"h":112,"label":"The department decides no bed is needed","sub":"Two labels, one behaviour: 'for community follow-up' raises no referral and tells no team — only the separate action below does that. Unwinds a held bed, an uncollected transport job and every live ward request. Refused once transport has collected them.","phase":"bed"},{"id":"edToCommunity","lane":"diversion","x":1300,"y":1920,"w":500,"h":124,"label":"Referred straight to a community team instead","sub":"Ends the bed search and creates or reuses a real community referral. Available from the moment the bed search exists until the patient is collected — not only from a department. Refused once they are collected, and while a legal form has no conclusive examination outcome.","phase":"bed"},{"id":"edLeft","lane":"end","x":1300,"y":2084,"w":500,"h":90,"label":"Left the department","sub":"Only recordable after an outcome has been recorded first.","phase":"bed"},{"id":"seam","lane":"seam","x":700,"y":1700,"w":420,"h":100,"label":"A separate movement is raised","sub":"Acceptance does not create the bed-search record. RAISE_REFERRAL creates it separately and can link it to the referral.","patient":"Unchanged.","bed":"Still nothing.","phase":"bed"},{"id":"placement","lane":"expected","x":700,"y":1854,"w":420,"h":60,"label":"Placement requested","patient":"Waiting, wherever they are.","bed":"Nothing yet.","phase":"bed"},{"id":"asked","lane":"expected","x":700,"y":1968,"w":420,"h":76,"label":"Wards are asked","sub":"One at a time, or several at once, up to three.","patient":"Still waiting.","bed":"Nothing yet.","phase":"bed"},{"id":"inPrinciple","lane":"expected","x":700,"y":2098,"w":420,"h":76,"label":"A ward accepts in principle","sub":"Still no bed set aside.","patient":"Still waiting.","bed":"Promised, not reserved.","phase":"bed"},{"id":"pulled","lane":"expected","x":700,"y":2228,"w":420,"h":90,"label":"A bed is pulled and held","sub":"Empty, offered to nobody else. Four hours is the default, not a rule — a coordinator can set the hold anywhere between thirty minutes and four hours. The admission this creates now names the movement it came from — a join added by owner ruling on 21 September, and the first pointer of any kind between the patient's track and the bed's; it is empty for the beds seeded as already occupied, so anything reading it has to cope with nothing being there.","patient":"Still where they were.","bed":"Held.","phase":"bed"},{"id":"booked","lane":"expected","x":700,"y":2372,"w":420,"h":76,"label":"Transport is booked","sub":"Five answers, none defaulted — provider, escort, CAD number, voluntary or involuntary, estimated time.","patient":"Waiting, with a journey arranged.","bed":"Held.","phase":"bed"},{"id":"handover","lane":"expected","x":700,"y":2502,"w":420,"h":60,"label":"Handover ready","patient":"Ready to be collected.","bed":"Held.","phase":"bed"},{"id":"enroute","lane":"expected","x":700,"y":2616,"w":420,"h":70,"label":"The crew accepts, and sets off","patient":"Still where they were.","bed":"Held.","phase":"bed"},{"id":"collected","lane":"expected","x":700,"y":2740,"w":420,"h":76,"label":"The patient is collected","sub":"After this point, everything changes.","patient":"In a vehicle, between two places.","bed":"Held.","phase":"bed"},{"id":"arrived","lane":"expected","x":700,"y":2870,"w":420,"h":76,"label":"The ward says they have arrived","sub":"Ward confirmation closes the movement and records the occupied stay. An officer Delivered stamp ends only the transport leg. STEP_BACK_STAGE refuses arrival; a separate scoped, time-limited Undo can correct the latest unchanged arrival snapshot.","patient":"On the ward.","bed":"Occupied.","phase":"ward"},{"id":"occupied","lane":"expected","x":700,"y":3000,"w":420,"h":60,"label":"Occupied — on the ward","patient":"Being treated.","bed":"Theirs, through leave and absence.","phase":"ward"},{"id":"ready","lane":"expected","x":700,"y":3114,"w":420,"h":86,"label":"Clinically ready to leave","sub":"The patient's departure and the named bed-release record proceed on two tracks.","patient":"Finished with hospital, possibly still in the bed.","bed":"Occupied.","phase":"ward"},{"id":"sWardDecline","lane":"stall","x":60,"y":1968,"w":460,"h":96,"label":"A ward declines — seven reasons","sub":"No bed · sex mix · no specialling · acuity mix · capability mismatch · bed pulled for an earlier referral · out of catchment.","phase":"bed"},{"id":"sWithdrawWard","lane":"stall","x":60,"y":2104,"w":460,"h":96,"label":"One ward's request is taken back","sub":"Seven reasons. The other wards asked carry on considering.","phase":"bed"},{"id":"sAcceptWithdrawn","lane":"stall","x":60,"y":2240,"w":460,"h":96,"label":"The acceptance is withdrawn","sub":"A listed reason records why the acceptance is withdrawn. An uncollected pulled or stepped-back hold is released in the same act; cancel a live job first. Handover-ready and moving are refused.","phase":"bed"},{"id":"sAbandoned","lane":"end","x":60,"y":2376,"w":460,"h":96,"label":"The bed search is abandoned","sub":"Pulled from every ward still considering it, or — once a ward has accepted — the acceptance revoked and any held bed given back. It closes as 'did not proceed'. This is also where an examination outcome of a community order, or a revocation, lands while no bed is held yet.","phase":"bed"},{"id":"sPullReleased","lane":"stall","x":60,"y":2512,"w":460,"h":96,"label":"The held bed is given back — four reasons","sub":"NINE different actions delete that admission, not one — releasing the pull (four reasons of its own), releasing a held bed after transport was stopped, abandoning the bed search, the referrer withdrawing it, the department deciding no bed is needed, sending them to a community team instead, an examination outcome that ends it, releasing the bed a diverted journey held, and releasing the bed while reopening the search. Whichever it was, the admission record is deleted outright: nobody was ever in this bed.","phase":"bed"},{"id":"sCancelTransport","lane":"stall","x":60,"y":2648,"w":460,"h":96,"label":"Transport cancelled before collection","sub":"A listed reason removes the job without moving the stage or automatically rebooking. The held-bed notice checks the admission link as well as stage, including a stepped-back pull.","finding":"The role/booking-place, collected, delivered and closed checks are distinct; an officer delivery can precede ward arrival without closure.","phase":"bed"},{"id":"sStopTransport","lane":"diversion","x":60,"y":2784,"w":460,"h":96,"label":"The journey is stopped after collection","sub":"Three reasons, and somebody must say where the patient now is. The movement closes and the bed stays held.","finding":"An officer delivery can precede ward arrival without closure, so delivered and closed refusal paths are distinct.","phase":"bed"},{"id":"sAbscond","lane":"record","x":60,"y":3000,"w":460,"h":96,"label":"Absent without leave is recorded","sub":"The occupied stay and held bed remain. The ward records absence, its steps and return against the admission; the current order can also create an action-inbox fact.","phase":"ward"},{"id":"dForced","lane":"forced","x":1300,"y":2284,"w":500,"h":100,"label":"A coordinator places them anyway","sub":"Eight of the bed checks can be passed by recording one of five reasons — the receiving team has agreed despite the mismatch · clinical urgency outweighs it · the bed information is known to be out of date · continuity with an earlier admission here · closer to home or family. Running out of one-to-one nursing or of high-acuity capacity can be passed the same way, and passing the acuity one also demands that the nurse unit manager was consulted.","phase":"bed"},{"id":"dGenderHard","lane":"stall","x":1300,"y":2424,"w":500,"h":100,"label":"The one refusal nothing can override","sub":"If the ward is designated for one gender and the patient's recorded gender is the other, no reason passes it and the app will not even offer the list. Non-binary, Different term, and not-recorded genders can use the coordinator-reviewed exception. Every other bed check here can be forced; this one cannot.","phase":"bed"},{"id":"dNonBinary","lane":"forced","x":1300,"y":2564,"w":500,"h":100,"label":"A patient with a non-binary, Different term, or unrecorded gender onto a single-gender ward","sub":"Only a coordinator, and only with one of six recorded reasons — a single room is available · the patient's stated preference, agreed with the ward · no single room is free and the ward agreed a plan for privacy · the only suitable ready bed, agreed with the ward · they know this ward from an earlier stay · closer to home or supports.","phase":"bed"},{"id":"dStatutory","lane":"record","x":1300,"y":2704,"w":500,"h":100,"label":"Record a form from the Forms page","sub":"The form selector and checked paper time reach the supported form-writing handler. Authorised users can save; refusal keeps the draft and shows the reason. This does not issue a legal instrument or calculate its statutory expiry.","phase":"bed"},{"id":"dNoTransport","lane":"diversion","x":1300,"y":2844,"w":500,"h":100,"label":"No transport needed","sub":"Marked arrived straight from the held bed, with no journey recorded at all.","phase":"bed"},{"id":"dRepull","lane":"record","x":1300,"y":2984,"w":500,"h":100,"label":"Pulling again when the bed is already held","sub":"Restoring an already-linked hold preserves its bed rather than consuming another. Current code rechecks the matching admission, patient placement, observation/high-acuity staffing, legal authority and gender before restoring the pulled stage.","finding":"Restoring a hold does not consume a second bed; staffing, legal, gender and matching-admission checks still run.","phase":"ward"},{"id":"dNoLongerSuits","lane":"stall","x":1300,"y":3124,"w":500,"h":100,"label":"A held destination no longer suits","sub":"Current gender/legal facts are checked at forward steps. WITHDRAW_ACCEPTANCE can release an uncollected pulled or stepped-back hold atomically after any live job is cancelled; no obsolete three-step sequence should be assumed.","finding":"A held acceptance can now be withdrawn atomically after cancelling a live job; handover-ready/moving still require the supported earlier-stage path.","phase":"ward"},{"id":"dCancelLie","lane":"record","x":1300,"y":3264,"w":500,"h":100,"label":"Cancellation keeps the bed facts separate","sub":"The hold is detected from the linked admission OR the pulled-or-later stage. Cancelling removes the job and preserves the bed and current stage, including after a step back.","finding":"Cancellation checks both the admission link and stage before describing whether the bed stays held.","phase":"ward"},{"id":"dRevoked","lane":"record","x":1300,"y":3404,"w":500,"h":100,"label":"The legal authority is revoked before collection","sub":"A revoked examination while a bed is held records the examination and flags release without refunding the bed. Acceptance, en-route and collection refuse while that hold is unresolved; physical arrival remains recordable.","phase":"ward"},{"id":"dAway","lane":"diversion","x":1300,"y":3544,"w":500,"h":100,"label":"Away at an ED, or on leave","sub":"An ED trip and leave name the occupied admission. Return records clear the relevant absence. Leave also records its kind and optional psychiatrist-authorisation answer; the bed stays held while away.","phase":"ward"},{"id":"dClosedRecord","lane":"record","x":1300,"y":3684,"w":500,"h":100,"label":"Closure limits corrections; admitted forms have a separate route","sub":"Most movement actions refuse closure. The admitting ward can still record a supported written form or typed expiry for a current occupied stay. STEP_BACK_STAGE refuses arrival, while a separate scoped Undo can reverse the latest unchanged transport/arrival snapshot within its window.","finding":"Most movement commands refuse closure, but admitted-ward form and expiry commands have explicit supported post-arrival routes.","phase":"ward"},{"id":"dRepat","lane":"diversion","x":1300,"y":3824,"w":500,"h":100,"label":"Sending a country patient home","sub":"Logged against the admission once it has been arranged off the system: home hospital, whether its ward agreed, road or flight, provider and tracking number. It books nothing. Only when the home ward agreed does it also open a new movement asking for a bed at home.","phase":"ward"},{"id":"personLeaves","lane":"expected","x":400,"y":4044,"w":440,"h":96,"label":"Track one — the person leaves","sub":"Eight recorded departure destinations. A psychiatric transfer releases the sending ward bed while taking a receiving bed.","patient":"Gone.","bed":"Normally empty and allocatable rise once and the live release completes; an over-capacity arrival conflict is reconciled without inventing an extra bed.","phase":"leaving"},{"id":"bedReleased","lane":"expected","x":920,"y":4044,"w":440,"h":96,"label":"Track two — the bed is released","sub":"Expected can go directly to discharged or pass through confirmed. The named admission leaving completes its release in the same write; capacity reconciliation prevents counting an already-recorded release or an over-capacity arrival twice.","patient":"Names the stay it belongs to, and nothing else about them.","bed":"Counted as available again, at the last step only.","phase":"leaving"},{"id":"bedStuck","lane":"stall","x":1440,"y":4044,"w":400,"h":96,"label":"Stuck, or waiting on something","sub":"Seven things it can wait on, nine reasons it can be stuck. Neither is a stage.","phase":"leaving"},{"id":"end0","lane":"end","x":60,"y":4274,"w":230,"h":112,"label":"Discharged to the community","sub":"Frees a bed.","phase":"leaving"},{"id":"end1","lane":"diversion","x":312,"y":4274,"w":230,"h":112,"label":"Transferred to another psychiatric ward","sub":"Frees THIS ward's bed and gains the state nothing — the only one that is not a release.","phase":"leaving"},{"id":"end2","lane":"end","x":564,"y":4274,"w":230,"h":112,"label":"Transferred to a general hospital","sub":"Frees a bed.","phase":"leaving"},{"id":"end3","lane":"end","x":816,"y":4274,"w":230,"h":112,"label":"Moved to residential care","sub":"Frees a bed.","phase":"leaving"},{"id":"end4","lane":"end","x":1068,"y":4274,"w":230,"h":112,"label":"Left against advice","sub":"Frees a bed.","phase":"leaving"},{"id":"end5","lane":"end","x":1320,"y":4274,"w":230,"h":112,"label":"Died on the ward","sub":"Frees a bed.","phase":"leaving"},{"id":"end6","lane":"end","x":1572,"y":4274,"w":230,"h":112,"label":"Transferred to police or prison custody","sub":"Frees a bed.","phase":"leaving"},{"id":"end7","lane":"end","x":1824,"y":4274,"w":230,"h":112,"label":"Did not return","sub":"Frees a bed.","phase":"leaving"},{"id":"rkDuplicate","lane":"record","x":2400,"y":460,"w":420,"h":104,"label":"Is this the same person already?","sub":"Duplicate matching warns about number and demographic similarities. A duplicate record number blocks registration in both form and reducer; name similarity alone remains a review warning.","phase":"alongside"},{"id":"rkIntakeLost","lane":"record","x":2400,"y":588,"w":420,"h":104,"label":"Add patient saves identity; referral saves intake","sub":"The current Add patient form asks for identity, optional gender and Aboriginal or Torres Strait Islander status. Clinical intake and location belong to the referral flow. Obsolete non-working Print/Save draft controls are hidden; the historical silent-discard finding no longer describes this screen.","phase":"alongside"},{"id":"rkClearance","lane":"record","x":2400,"y":1031,"w":420,"h":104,"label":"Is the patient medically cleared?","sub":"Three answers, not two — unrecorded, cleared, and explicitly not cleared.","phase":"alongside"},{"id":"rkClock","lane":"absent","x":2400,"y":1832,"w":420,"h":104,"label":"The display follows wall-clock time","sub":"The provider updates elapsed wall-clock time at minute boundaries and catches up when the page becomes visible. A controlled test clock is separate. A display becoming overdue does not by itself prove that a domain action ran; check the event handler for that action.","phase":"alongside"},{"id":"rkSettings","lane":"record","x":2400,"y":1960,"w":420,"h":104,"label":"Settings change current operational defaults","sub":"WardConfiguration carries twelve fields: access/decision/transfer/booking targets, parallel-recipient cap, pull hold, morning deadline, due-soon warnings and Forecast thresholds. A valid full draft is merged against its baseline or refused for conflicting fields; old optional keys take documented defaults.","phase":"alongside"},{"id":"rkQueue","lane":"record","x":2400,"y":2088,"w":420,"h":104,"label":"Where they sit in the queue","sub":"Flagged urgent first, then the urgency tier, then whoever has waited longest, then the record's own id as a tie-break. Nothing else moves anybody up.","phase":"alongside"},{"id":"rkClash","lane":"record","x":2400,"y":2216,"w":420,"h":104,"label":"Duplicate bed requests are surfaced","sub":"The current duplicate-bed-request derivation finds multiple active requests for one linked patient and creates a coordinator fact row. It does not rank patients or choose a winner. This is distinct from a physical double-booking check.","phase":"alongside"},{"id":"rkUrgent","lane":"record","x":2400,"y":2344,"w":420,"h":104,"label":"Flagged urgent","sub":"Ten reasons. Lifts the patient above every urgency level, and re-sorts nothing on its own.","phase":"alongside"},{"id":"rkEscalate","lane":"record","x":2400,"y":2472,"w":420,"h":104,"label":"Escalated","sub":"Which wards were tried and who was rung. Six people it can be escalated to.","phase":"alongside"},{"id":"rkCapacity","lane":"record","x":2400,"y":2600,"w":420,"h":104,"label":"A ward states how many beds it can allocate","sub":"Set outright rather than counted up, and refused if it claims more beds than the ward physically has. Asking a ward to refresh it records that somebody asked, and moves no number at all.","phase":"alongside"},{"id":"rkLegalStatus","lane":"record","x":2400,"y":2728,"w":420,"h":104,"label":"The legal status changes","sub":"Four values. Changing it triggers nothing — even if it makes the accepted ward unlawful.","phase":"alongside"},{"id":"rkForm","lane":"record","x":2400,"y":2856,"w":420,"h":104,"label":"The legal paperwork arrives","sub":"Nine forms can be recorded as received — 1A, 3A, 3C, 3D, 5A, 5B, 6A, 6B, 6C. Receipt can be undone and recorded again; every expiry is a time a clinician typed.","phase":"alongside"},{"id":"rkExam","lane":"record","x":2400,"y":2984,"w":420,"h":104,"label":"An examination is recorded","sub":"Four outcomes. Only “a further examination is ordered” allows a second one.","phase":"alongside"},{"id":"rkLegalWritten","lane":"record","x":2400,"y":3112,"w":420,"h":104,"label":"The paperwork is written, continued, or attached","sub":"Written and continued forms record paper facts and clear legacy calculated clocks; same-form written-time edits preserve applicable typed facts. An admitted ward has a post-arrival route. A3C after3D is refused. A country1A extension requires a current country setting and a finite typed later paper expiry; no statutory duration is computed.","phase":"alongside"},{"id":"rkLegalMismatch","lane":"record","x":2400,"y":3240,"w":420,"h":104,"label":"The ward's authority does not match the person's status","sub":"Two shapes, both named: an involuntary patient on a voluntary ward, and a voluntary patient on a locked one. It can be flagged, and it cannot be overridden: ward authority for an involuntary patient is never overridable (owner ruling, 25 September).","phase":"alongside"},{"id":"rkNotice","lane":"record","x":2400,"y":3368,"w":420,"h":104,"label":"Somebody is told","sub":"Twenty-four kinds of notice. Written once, never rewritten, never deleted, never expiring.","phase":"alongside"},{"id":"rkDiversion","lane":"record","x":2400,"y":3496,"w":420,"h":104,"label":"The journey is diverted while it is under way","sub":"Only once the patient is actually in the vehicle — it is refused before collection, after arrival, and a second time on a movement already diverted. It records a reason and where they were taken instead. The held bed does not come back on its own: giving it back is a separate act, and refused unless this movement was in fact diverted.","phase":"alongside"},{"id":"rkExpiryShut","lane":"stall","x":2400,"y":3624,"w":420,"h":104,"label":"Expiry can be recorded for an admitted patient","sub":"The legal-event handler permits the ward to record a typed expiry for its admitted patient even when the movement is closed. This is a recorded time, not a computed legal limit. See ward-flow-record-legal-events.ts.","finding":"The admitted-patient expiry route is implemented for the ward. Read the current legal-event handler; the old closed-movement gap is retired.","phase":"alongside"},{"id":"rkExpectFlag","lane":"record","x":2400,"y":3752,"w":420,"h":104,"label":"A clock somebody starts by hand","sub":"Two kinds, forty-eight hours and seven days, raised against a movement and cleared again. Only one can be open at a time — raising a second is refused, and so is clearing one that was never raised. Nothing starts it automatically and nothing expires it; it is a note about time, not a timer.","phase":"alongside"},{"id":"rkAwayRule","lane":"record","x":2400,"y":3880,"w":420,"h":104,"label":"The rule for a bed kept during a medical trip","sub":"The unwired retention helper keeps the bed by default, including above the24-hour threshold; above threshold adds requiresReview. Only an explicit override changes freesBed. The numeric constant is24 while an adjacent historical provenance comment still says48.","phase":"alongside"},{"id":"rkInbox","lane":"record","x":2400,"y":4008,"w":420,"h":104,"label":"A row appears in the coordinator's inbox","sub":"The current inbox derives fact rows from movements, stays, planned bookings and bed-meeting actions. Facts are acknowledged/owned/snoozed, never ticked away. The daily check is a commitment; its day-shaped ID can be completed and reopened.","finding":"Completion applies to commitment IDs; fact rows use their source condition and bed-meeting actions have a dedicated completion event.","phase":"alongside"},{"id":"rkDischargePlan","lane":"record","x":2400,"y":4136,"w":420,"h":104,"label":"Step-down, and what is holding the discharge up","sub":"Two settings on a known admission: step-down candidacy and one discharge barrier. The acting ward must match; a substantive barrier is refused for a stay under seven days. Neither moves a bed figure.","phase":"alongside"},{"id":"rkDischarge","lane":"record","x":2400,"y":4264,"w":420,"h":104,"label":"A discharge recorded the other way","sub":"A second event does exactly what recording a departure does, but only for a patient whose identity is linked, and only against the revision number the screen last read. Same result, different door.","phase":"alongside"},{"id":"rkPrep","lane":"record","x":2400,"y":4392,"w":420,"h":104,"label":"The bed is being prepared","sub":"Cleaning/repair is a separate preparation flag. It does not directly rewrite the ward count; the pull handler separately refuses when every free bed is still being made ready.","phase":"alongside"},{"id":"rkOwnership","lane":"record","x":2400,"y":4520,"w":420,"h":104,"label":"Only the ward it belongs to may touch it","sub":"Confirming a release, reversing it, flagging it stuck, clearing that flag, marking the bed being cleaned, and finally freeing it are each refused to any other ward. It is what stops one ward's freed bed landing in another ward's figures.","phase":"alongside"},{"id":"rkWardDay","lane":"record","x":2400,"y":4648,"w":420,"h":104,"label":"The ward's own day, beside the patient's","sub":"A morning count a ward confirms, a message it can be sent, and a sweep that works out which beds on leave are worth warning about. None of them belongs to any one patient, which is why they sit off the journey rather than on it.","phase":"alongside"},{"id":"hdr-rec","lane":"heading","x":2400,"y":380,"w":420,"h":60,"label":"Recorded alongside  ·","sub":"Happens at some point without moving the journey.","phase":"alongside"},{"id":"hdr-left","lane":"heading","x":60,"y":1892,"w":460,"h":56,"label":"←  Stalls, undos and endings","sub":"Grey goes back into the route. Teal does not.","phase":"bed"},{"id":"hdr-spine","lane":"heading","x":700,"y":1614,"w":420,"h":56,"label":"Read down the middle  ↓","sub":"Read straight down.","phase":"front"},{"id":"hdr-right","lane":"heading","x":1300,"y":2208,"w":500,"h":56,"label":"Diversions  →","sub":"It carries on, somewhere other than expected.","phase":"bed"}],"edges":[{"from":"srcCommunity","to":"raised","d":"M 178 128 L 178 152 Q 178 164 190 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[178,128],[178,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcCrisis","to":"raised","d":"M 430 128 L 430 152 Q 430 164 442 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[430,128],[430,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcPolice","to":"raised","d":"M 682 128 L 682 152 Q 682 164 694 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[682,128],[682,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcAmbulance","to":"raised","d":"M 934 128 L 934 152 Q 934 164 922 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[934,128],[934,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcHospital","to":"raised","d":"M 1186 128 L 1186 152 Q 1186 164 1174 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1186,128],[1186,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcEd","to":"raised","d":"M 1438 128 L 1438 152 Q 1438 164 1426 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1438,128],[1438,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcGp","to":"raised","d":"M 1690 128 L 1690 152 Q 1690 164 1678 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1690,128],[1690,164],[910,164],[910,200]],"lane":"expected"},{"from":"raised","to":"addressed","d":"M 910 280 L 910 320","p":[[910,280],[910,320]],"lane":"expected"},{"from":"addressed","to":"armCommunity","d":"M 910 406 L 910 421 Q 910 433 898 433 L 302 433 Q 290 433 290 445 L 290 460","p":[[910,406],[910,433],[290,433],[290,460]],"lane":"expected"},{"from":"addressed","to":"armWard","d":"M 910 406 L 910 460","p":[[910,406],[910,460]],"lane":"expected"},{"from":"addressed","to":"armEd","d":"M 910 406 L 910 421 Q 910 433 922 433 L 1538 433 Q 1550 433 1550 445 L 1550 460","p":[[910,406],[910,433],[1550,433],[1550,460]],"lane":"expected"},{"from":"armCommunity","to":"cmhtAnswers","d":"M 290 550 L 290 600","p":[[290,550],[290,600]],"lane":"expected"},{"from":"cmhtAnswers","to":"cmhtAccepted","d":"M 290 670 L 290 720","p":[[290,670],[290,720]],"lane":"end","terminal":true},{"from":"cmhtAnswers","to":"cmhtDeclined","d":"M 290 670 L 290 681 Q 290 692 301 692 L 544 692 Q 556 692 556 704 L 556 826 Q 556 838 544 838 L 301 838 Q 290 838 290 849 L 290 860","p":[[290,670],[290,692],[556,692],[556,838],[290,838],[290,860]],"lane":"end","terminal":true},{"from":"cmhtAnswers","to":"cmhtNothing","d":"M 290 670 L 290 681 Q 290 692 279 692 L 36 692 Q 24 692 24 704 L 24 978 Q 24 990 36 990 L 279 990 Q 290 990 290 1001 L 290 1012","p":[[290,670],[290,692],[24,692],[24,990],[290,990],[290,1012]],"lane":"stall"},{"from":"cmhtAnswers","to":"cmhtWithdrawn","d":"M 290 670 L 290 681 Q 290 692 301 692 L 566 692 Q 578 692 578 704 L 578 1118 Q 578 1130 566 1130 L 301 1130 Q 290 1130 290 1141 L 290 1152","p":[[290,670],[290,692],[578,692],[578,1130],[290,1130],[290,1152]],"lane":"stall"},{"from":"cmhtFromSearch","to":"cmhtAnswers","d":"M 290 1298 L 290 1287 Q 290 1276 301 1276 L 588 1276 Q 600 1276 600 1264 L 600 704 Q 600 692 588 692 L 301 692 Q 290 692 290 681 L 290 670","p":[[290,1298],[290,1276],[600,1276],[600,692],[290,692],[290,670]],"lane":"expected"},{"from":"armWard","to":"wardAnswers","d":"M 910 550 L 910 600","p":[[910,550],[910,600]],"lane":"expected"},{"from":"wardAnswers","to":"wardWithdrawn","d":"M 910 670 L 910 681 Q 910 692 921 692 L 1144 692 Q 1156 692 1156 704 L 1156 1276 Q 1156 1288 1144 1288 L 921 1288 Q 910 1288 910 1299 L 910 1310","p":[[910,670],[910,692],[1156,692],[1156,1288],[910,1288],[910,1310]],"lane":"diversion"},{"from":"wardAnswers","to":"wardBlocked","d":"M 910 670 L 910 681 Q 910 692 899 692 L 676 692 Q 664 692 664 704 L 664 1436 Q 664 1448 676 1448 L 899 1448 Q 910 1448 910 1459 L 910 1470","p":[[910,670],[910,692],[664,692],[664,1448],[910,1448],[910,1470]],"lane":"stall"},{"from":"wardAnswers","to":"wardAccepted","d":"M 910 670 L 910 720","p":[[910,670],[910,720]],"lane":"expected"},{"from":"wardAnswers","to":"wardDeclined","d":"M 910 670 L 910 681 Q 910 692 921 692 L 1166 692 Q 1178 692 1178 704 L 1178 826 Q 1178 838 1166 838 L 921 838 Q 910 838 910 849 L 910 860","p":[[910,670],[910,692],[1178,692],[1178,838],[910,838],[910,860]],"lane":"end","terminal":true},{"from":"wardAnswers","to":"wardNothing","d":"M 910 670 L 910 681 Q 910 692 899 692 L 654 692 Q 642 692 642 704 L 642 988 Q 642 1000 654 1000 L 899 1000 Q 910 1000 910 1011 L 910 1022","p":[[910,670],[910,692],[642,692],[642,1000],[910,1000],[910,1022]],"lane":"stall"},{"from":"wardAccepted","to":"othersCancelled","d":"M 910 810 L 910 821 Q 910 832 921 832 L 1188 832 Q 1200 832 1200 844 L 1200 1134 Q 1200 1146 1188 1146 L 921 1146 Q 910 1146 910 1157 L 910 1168","p":[[910,810],[910,832],[1200,832],[1200,1146],[910,1146],[910,1168]],"lane":"diversion","auto":true},{"from":"armEd","to":"edBoard","d":"M 1550 550 L 1550 600","p":[[1550,550],[1550,600]],"lane":"expected"},{"from":"edBoard","to":"edExpected","d":"M 1550 690 L 1550 740","p":[[1550,690],[1550,740]],"lane":"expected"},{"from":"edExpected","to":"edArrived","d":"M 1550 830 L 1550 841 Q 1550 852 1561 852 L 1824 852 Q 1836 852 1836 864 L 1836 1006 Q 1836 1018 1824 1018 L 1561 1018 Q 1550 1018 1550 1029 L 1550 1040","p":[[1550,830],[1550,852],[1836,852],[1836,1018],[1550,1018],[1550,1040]],"lane":"expected"},{"from":"edExpected","to":"edNeverArrives","d":"M 1550 830 L 1550 880","p":[[1550,830],[1550,880]],"lane":"stall"},{"from":"edArrived","to":"edAnswers","d":"M 1550 1126 L 1550 1176","p":[[1550,1126],[1550,1176]],"lane":"expected"},{"from":"edAnswers","to":"edAccepted","d":"M 1550 1246 L 1550 1296","p":[[1550,1246],[1550,1296]],"lane":"expected"},{"from":"edAnswers","to":"edDeclined","d":"M 1550 1246 L 1550 1257 Q 1550 1268 1561 1268 L 1824 1268 Q 1836 1268 1836 1280 L 1836 1416 Q 1836 1428 1824 1428 L 1561 1428 Q 1550 1428 1550 1439 L 1550 1450","p":[[1550,1246],[1550,1268],[1836,1268],[1836,1428],[1550,1428],[1550,1450]],"lane":"end","terminal":true},{"from":"edAccepted","to":"edRaise","d":"M 1550 1400 L 1550 1411 Q 1550 1422 1539 1422 L 1276 1422 Q 1264 1422 1264 1434 L 1264 1570 Q 1264 1582 1276 1582 L 1539 1582 Q 1550 1582 1550 1593 L 1550 1604","p":[[1550,1400],[1550,1422],[1264,1422],[1264,1582],[1550,1582],[1550,1604]],"lane":"expected"},{"from":"edAccepted","to":"othersCancelled","d":"M 1300 1348 L 1120 1218","p":[[1300,1348],[1120,1218]],"lane":"diversion","auto":true},{"from":"edRaise","to":"edOutcome","d":"M 1550 1708 L 1550 1758","p":[[1550,1708],[1550,1758]],"lane":"end","terminal":true},{"from":"edRaise","to":"edToCommunity","d":"M 1550 1708 L 1550 1719 Q 1550 1730 1561 1730 L 1824 1730 Q 1836 1730 1836 1742 L 1836 1886 Q 1836 1898 1824 1898 L 1561 1898 Q 1550 1898 1550 1909 L 1550 1920","p":[[1550,1708],[1550,1730],[1836,1730],[1836,1898],[1550,1898],[1550,1920]],"lane":"diversion"},{"from":"edOutcome","to":"edLeft","d":"M 1550 1870 L 1550 1881 Q 1550 1892 1539 1892 L 1276 1892 Q 1264 1892 1264 1904 L 1264 2050 Q 1264 2062 1276 2062 L 1539 2062 Q 1550 2062 1550 2073 L 1550 2084","p":[[1550,1870],[1550,1892],[1264,1892],[1264,2062],[1550,2062],[1550,2084]],"lane":"end","terminal":true},{"from":"seam","to":"placement","d":"M 910 1800 L 910 1854","p":[[910,1800],[910,1854]],"lane":"expected"},{"from":"placement","to":"asked","d":"M 910 1914 L 910 1968","p":[[910,1914],[910,1968]],"lane":"expected"},{"from":"asked","to":"inPrinciple","d":"M 910 2044 L 910 2098","p":[[910,2044],[910,2098]],"lane":"expected"},{"from":"inPrinciple","to":"pulled","d":"M 910 2174 L 910 2228","p":[[910,2174],[910,2228]],"lane":"expected"},{"from":"pulled","to":"booked","d":"M 910 2318 L 910 2372","p":[[910,2318],[910,2372]],"lane":"expected"},{"from":"booked","to":"handover","d":"M 910 2448 L 910 2502","p":[[910,2448],[910,2502]],"lane":"expected"},{"from":"handover","to":"enroute","d":"M 910 2562 L 910 2616","p":[[910,2562],[910,2616]],"lane":"expected"},{"from":"enroute","to":"collected","d":"M 910 2686 L 910 2740","p":[[910,2686],[910,2740]],"lane":"expected"},{"from":"collected","to":"arrived","d":"M 910 2816 L 910 2870","p":[[910,2816],[910,2870]],"lane":"expected"},{"from":"arrived","to":"occupied","d":"M 910 2946 L 910 3000","p":[[910,2946],[910,3000]],"lane":"expected"},{"from":"occupied","to":"ready","d":"M 910 3060 L 910 3114","p":[[910,3060],[910,3114]],"lane":"expected"},{"from":"wardAccepted","to":"seam","d":"M 910 810 L 910 824 Q 910 836 898 836 L 672 836 Q 660 836 660 848 L 660 1738 Q 660 1750 672 1750 L 700 1750","p":[[910,810],[910,836],[660,836],[660,1750],[700,1750]],"lane":"seam"},{"from":"edRaise","to":"placement","d":"M 1550 1708 L 1550 1722 Q 1550 1734 1538 1734 L 1252 1734 Q 1240 1734 1240 1746 L 1240 1872 Q 1240 1884 1228 1884 L 1120 1884","p":[[1550,1708],[1550,1734],[1240,1734],[1240,1884],[1120,1884]],"lane":"expected"},{"from":"asked","to":"sWardDecline","d":"M 700 2006 L 585 2006 Q 580 2006 580 2011 L 580 2011 Q 580 2016 575 2016 L 520 2016","p":[[700,2006],[580,2006],[580,2016],[520,2016]],"lane":"stall","both":true},{"from":"asked","to":"sWithdrawWard","d":"M 700 2006 L 592 2006 Q 580 2006 580 2018 L 580 2140 Q 580 2152 568 2152 L 520 2152","p":[[700,2006],[580,2006],[580,2152],[520,2152]],"lane":"stall","both":true},{"from":"inPrinciple","to":"sAcceptWithdrawn","d":"M 700 2136 L 592 2136 Q 580 2136 580 2148 L 580 2276 Q 580 2288 568 2288 L 520 2288","p":[[700,2136],[580,2136],[580,2288],[520,2288]],"lane":"stall","both":true},{"from":"inPrinciple","to":"sAbandoned","d":"M 700 2136 L 592 2136 Q 580 2136 580 2148 L 580 2412 Q 580 2424 568 2424 L 520 2424","p":[[700,2136],[580,2136],[580,2424],[520,2424]],"lane":"end","terminal":true},{"from":"pulled","to":"sPullReleased","d":"M 700 2273 L 592 2273 Q 580 2273 580 2285 L 580 2548 Q 580 2560 568 2560 L 520 2560","p":[[700,2273],[580,2273],[580,2560],[520,2560]],"lane":"stall","both":true},{"from":"booked","to":"sCancelTransport","d":"M 700 2410 L 592 2410 Q 580 2410 580 2422 L 580 2684 Q 580 2696 568 2696 L 520 2696","p":[[700,2410],[580,2410],[580,2696],[520,2696]],"lane":"stall","both":true},{"from":"collected","to":"sStopTransport","d":"M 700 2778 L 592 2778 Q 580 2778 580 2790 L 580 2820 Q 580 2832 568 2832 L 520 2832","p":[[700,2778],[580,2778],[580,2832],[520,2832]],"lane":"diversion"},{"from":"occupied","to":"sAbscond","d":"M 700 3030 L 589 3030 Q 580 3030 580 3039 L 580 3039 Q 580 3048 571 3048 L 520 3048","p":[[700,3030],[580,3030],[580,3048],[520,3048]],"lane":"record"},{"from":"asked","to":"dForced","d":"M 1120 2006 L 1168 2006 Q 1180 2006 1180 2018 L 1180 2322 Q 1180 2334 1192 2334 L 1300 2334","p":[[1120,2006],[1180,2006],[1180,2334],[1300,2334]],"lane":"forced"},{"from":"dForced","to":"dForced","d":"M 1300 2334 L 1262 2334","p":[[1300,2334],[1262,2334]],"lane":"forced","terminal":true},{"from":"asked","to":"dGenderHard","d":"M 1120 2006 L 1168 2006 Q 1180 2006 1180 2018 L 1180 2462 Q 1180 2474 1192 2474 L 1300 2474","p":[[1120,2006],[1180,2006],[1180,2474],[1300,2474]],"lane":"stall"},{"from":"dGenderHard","to":"dGenderHard","d":"M 1300 2474 L 1262 2474","p":[[1300,2474],[1262,2474]],"lane":"stall","terminal":true},{"from":"inPrinciple","to":"dNonBinary","d":"M 1120 2136 L 1168 2136 Q 1180 2136 1180 2148 L 1180 2602 Q 1180 2614 1192 2614 L 1300 2614","p":[[1120,2136],[1180,2136],[1180,2614],[1300,2614]],"lane":"forced"},{"from":"dNonBinary","to":"dNonBinary","d":"M 1300 2614 L 1262 2614","p":[[1300,2614],[1262,2614]],"lane":"forced","terminal":true},{"from":"inPrinciple","to":"dStatutory","d":"M 1120 2136 L 1168 2136 Q 1180 2136 1180 2148 L 1180 2742 Q 1180 2754 1192 2754 L 1300 2754","p":[[1120,2136],[1180,2136],[1180,2754],[1300,2754]],"lane":"record"},{"from":"dStatutory","to":"dStatutory","d":"M 1300 2754 L 1262 2754","p":[[1300,2754],[1262,2754]],"lane":"record","terminal":true},{"from":"pulled","to":"dNoTransport","d":"M 1120 2273 L 1168 2273 Q 1180 2273 1180 2285 L 1180 2882 Q 1180 2894 1192 2894 L 1300 2894","p":[[1120,2273],[1180,2273],[1180,2894],[1300,2894]],"lane":"diversion"},{"from":"dNoTransport","to":"arrived","d":"M 1550 2944 L 1550 2958 Q 1550 2970 1562 2970 L 1848 2970 Q 1860 2970 1860 2958 L 1860 2920 Q 1860 2908 1848 2908 L 1120 2908","p":[[1550,2944],[1550,2970],[1860,2970],[1860,2908],[1120,2908]],"lane":"expected"},{"from":"pulled","to":"dRepull","d":"M 1120 2273 L 1168 2273 Q 1180 2273 1180 2285 L 1180 3022 Q 1180 3034 1192 3034 L 1300 3034","p":[[1120,2273],[1180,2273],[1180,3034],[1300,3034]],"lane":"record","both":true},{"from":"handover","to":"dNoLongerSuits","d":"M 1120 2532 L 1168 2532 Q 1180 2532 1180 2544 L 1180 3162 Q 1180 3174 1192 3174 L 1300 3174","p":[[1120,2532],[1180,2532],[1180,3174],[1300,3174]],"lane":"stall"},{"from":"dNoLongerSuits","to":"dNoLongerSuits","d":"M 1300 3174 L 1262 3174","p":[[1300,3174],[1262,3174]],"lane":"stall","terminal":true},{"from":"booked","to":"dCancelLie","d":"M 1120 2410 L 1168 2410 Q 1180 2410 1180 2422 L 1180 3302 Q 1180 3314 1192 3314 L 1300 3314","p":[[1120,2410],[1180,2410],[1180,3314],[1300,3314]],"lane":"record"},{"from":"dCancelLie","to":"dCancelLie","d":"M 1300 3314 L 1262 3314","p":[[1300,3314],[1262,3314]],"lane":"record","terminal":true},{"from":"enroute","to":"dRevoked","d":"M 1120 2651 L 1168 2651 Q 1180 2651 1180 2663 L 1180 3442 Q 1180 3454 1192 3454 L 1300 3454","p":[[1120,2651],[1180,2651],[1180,3454],[1300,3454]],"lane":"record"},{"from":"dRevoked","to":"dRevoked","d":"M 1300 3454 L 1262 3454","p":[[1300,3454],[1262,3454]],"lane":"record","terminal":true},{"from":"occupied","to":"dAway","d":"M 1120 3030 L 1168 3030 Q 1180 3030 1180 3042 L 1180 3582 Q 1180 3594 1192 3594 L 1300 3594","p":[[1120,3030],[1180,3030],[1180,3594],[1300,3594]],"lane":"diversion","both":true},{"from":"arrived","to":"dClosedRecord","d":"M 1120 2908 L 1168 2908 Q 1180 2908 1180 2920 L 1180 3722 Q 1180 3734 1192 3734 L 1300 3734","p":[[1120,2908],[1180,2908],[1180,3734],[1300,3734]],"lane":"record"},{"from":"dClosedRecord","to":"dClosedRecord","d":"M 1300 3734 L 1262 3734","p":[[1300,3734],[1262,3734]],"lane":"record","terminal":true},{"from":"ready","to":"dRepat","d":"M 1120 3157 L 1168 3157 Q 1180 3157 1180 3169 L 1180 3862 Q 1180 3874 1192 3874 L 1300 3874","p":[[1120,3157],[1180,3157],[1180,3874],[1300,3874]],"lane":"diversion"},{"from":"dRepat","to":"dRepat","d":"M 1300 3874 L 1262 3874","p":[[1300,3874],[1262,3874]],"lane":"diversion","terminal":true},{"from":"ready","to":"personLeaves","d":"M 910 3200 L 910 3610 Q 910 3622 898 3622 L 632 3622 Q 620 3622 620 3634 L 620 4044","p":[[910,3200],[910,3622],[620,3622],[620,4044]],"lane":"expected"},{"from":"ready","to":"bedReleased","d":"M 910 3200 L 910 3610 Q 910 3622 922 3622 L 1128 3622 Q 1140 3622 1140 3634 L 1140 4044","p":[[910,3200],[910,3622],[1140,3622],[1140,4044]],"lane":"expected"},{"from":"bedReleased","to":"bedStuck","d":"M 1360 4092 L 1440 4092","p":[[1360,4092],[1440,4092]],"lane":"stall","both":true},{"from":"personLeaves","to":"end0","d":"M 620 4140 L 620 4195 Q 620 4207 608 4207 L 187 4207 Q 175 4207 175 4219 L 175 4274","p":[[620,4140],[620,4207],[175,4207],[175,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end1","d":"M 620 4140 L 620 4195 Q 620 4207 608 4207 L 439 4207 Q 427 4207 427 4219 L 427 4274","p":[[620,4140],[620,4207],[427,4207],[427,4274]],"lane":"diversion"},{"from":"personLeaves","to":"end2","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 667 4207 Q 679 4207 679 4219 L 679 4274","p":[[620,4140],[620,4207],[679,4207],[679,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end3","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 919 4207 Q 931 4207 931 4219 L 931 4274","p":[[620,4140],[620,4207],[931,4207],[931,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end4","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1171 4207 Q 1183 4207 1183 4219 L 1183 4274","p":[[620,4140],[620,4207],[1183,4207],[1183,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end5","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1423 4207 Q 1435 4207 1435 4219 L 1435 4274","p":[[620,4140],[620,4207],[1435,4207],[1435,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end6","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1675 4207 Q 1687 4207 1687 4219 L 1687 4274","p":[[620,4140],[620,4207],[1687,4207],[1687,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end7","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1927 4207 Q 1939 4207 1939 4219 L 1939 4274","p":[[620,4140],[620,4207],[1939,4207],[1939,4274]],"lane":"end","terminal":true},{"from":"raised","to":"rkDuplicate","d":"M 1120 240 L 2342 240 Q 2354 240 2354 252 L 2354 500 Q 2354 512 2366 512 L 2400 512","p":[[1120,240],[2354,240],[2354,512],[2400,512]],"lane":"record","dashed":true},{"from":"raised","to":"rkIntakeLost","d":"M 1120 240 L 2342 240 Q 2354 240 2354 252 L 2354 628 Q 2354 640 2366 640 L 2400 640","p":[[1120,240],[2354,240],[2354,640],[2400,640]],"lane":"record","dashed":true},{"from":"edArrived","to":"rkClearance","d":"M 1800 1083 L 2354 1083 L 2354 1083 L 2400 1083","p":[[1800,1083],[2354,1083],[2354,1083],[2400,1083]],"lane":"record","dashed":true},{"from":"placement","to":"rkClock","d":"M 1120 1884 L 2354 1884 L 2354 1884 L 2400 1884","p":[[1120,1884],[2354,1884],[2354,1884],[2400,1884]],"lane":"absent","terminal":true,"dashed":true},{"from":"placement","to":"rkSettings","d":"M 1120 1884 L 2342 1884 Q 2354 1884 2354 1896 L 2354 2000 Q 2354 2012 2366 2012 L 2400 2012","p":[[1120,1884],[2354,1884],[2354,2012],[2400,2012]],"lane":"record","dashed":true},{"from":"asked","to":"rkQueue","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2128 Q 2354 2140 2366 2140 L 2400 2140","p":[[1120,2006],[2354,2006],[2354,2140],[2400,2140]],"lane":"record","dashed":true},{"from":"asked","to":"rkClash","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2256 Q 2354 2268 2366 2268 L 2400 2268","p":[[1120,2006],[2354,2006],[2354,2268],[2400,2268]],"lane":"record","dashed":true},{"from":"asked","to":"rkUrgent","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2384 Q 2354 2396 2366 2396 L 2400 2396","p":[[1120,2006],[2354,2006],[2354,2396],[2400,2396]],"lane":"record","dashed":true},{"from":"asked","to":"rkEscalate","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2512 Q 2354 2524 2366 2524 L 2400 2524","p":[[1120,2006],[2354,2006],[2354,2524],[2400,2524]],"lane":"record","dashed":true},{"from":"asked","to":"rkCapacity","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2640 Q 2354 2652 2366 2652 L 2400 2652","p":[[1120,2006],[2354,2006],[2354,2652],[2400,2652]],"lane":"record","dashed":true},{"from":"inPrinciple","to":"rkLegalStatus","d":"M 1120 2136 L 2342 2136 Q 2354 2136 2354 2148 L 2354 2768 Q 2354 2780 2366 2780 L 2400 2780","p":[[1120,2136],[2354,2136],[2354,2780],[2400,2780]],"lane":"record","dashed":true},{"from":"pulled","to":"rkForm","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 2896 Q 2354 2908 2366 2908 L 2400 2908","p":[[1120,2273],[2354,2273],[2354,2908],[2400,2908]],"lane":"record","dashed":true},{"from":"pulled","to":"rkExam","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3024 Q 2354 3036 2366 3036 L 2400 3036","p":[[1120,2273],[2354,2273],[2354,3036],[2400,3036]],"lane":"record","dashed":true},{"from":"pulled","to":"rkLegalWritten","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3152 Q 2354 3164 2366 3164 L 2400 3164","p":[[1120,2273],[2354,2273],[2354,3164],[2400,3164]],"lane":"record","dashed":true},{"from":"pulled","to":"rkLegalMismatch","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3280 Q 2354 3292 2366 3292 L 2400 3292","p":[[1120,2273],[2354,2273],[2354,3292],[2400,3292]],"lane":"record","dashed":true},{"from":"collected","to":"rkNotice","d":"M 1120 2778 L 2342 2778 Q 2354 2778 2354 2790 L 2354 3408 Q 2354 3420 2366 3420 L 2400 3420","p":[[1120,2778],[2354,2778],[2354,3420],[2400,3420]],"lane":"record","dashed":true},{"from":"collected","to":"rkDiversion","d":"M 1120 2778 L 2342 2778 Q 2354 2778 2354 2790 L 2354 3536 Q 2354 3548 2366 3548 L 2400 3548","p":[[1120,2778],[2354,2778],[2354,3548],[2400,3548]],"lane":"record","dashed":true},{"from":"arrived","to":"rkExpiryShut","d":"M 1120 2908 L 2342 2908 Q 2354 2908 2354 2920 L 2354 3664 Q 2354 3676 2366 3676 L 2400 3676","p":[[1120,2908],[2354,2908],[2354,3676],[2400,3676]],"lane":"stall","dashed":true},{"from":"arrived","to":"rkExpectFlag","d":"M 1120 2908 L 2342 2908 Q 2354 2908 2354 2920 L 2354 3792 Q 2354 3804 2366 3804 L 2400 3804","p":[[1120,2908],[2354,2908],[2354,3804],[2400,3804]],"lane":"record","dashed":true},{"from":"occupied","to":"rkAwayRule","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 3920 Q 2354 3932 2366 3932 L 2400 3932","p":[[1120,3030],[2354,3030],[2354,3932],[2400,3932]],"lane":"record","dashed":true},{"from":"occupied","to":"rkInbox","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 4048 Q 2354 4060 2366 4060 L 2400 4060","p":[[1120,3030],[2354,3030],[2354,4060],[2400,4060]],"lane":"record","dashed":true},{"from":"occupied","to":"rkDischargePlan","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 4176 Q 2354 4188 2366 4188 L 2400 4188","p":[[1120,3030],[2354,3030],[2354,4188],[2400,4188]],"lane":"record","dashed":true},{"from":"ready","to":"rkDischarge","d":"M 1120 3157 L 2342 3157 Q 2354 3157 2354 3169 L 2354 4304 Q 2354 4316 2366 4316 L 2400 4316","p":[[1120,3157],[2354,3157],[2354,4316],[2400,4316]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkPrep","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4432 Q 2354 4444 2366 4444 L 2400 4444","p":[[1360,4092],[2354,4092],[2354,4444],[2400,4444]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkOwnership","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4560 Q 2354 4572 2366 4572 L 2400 4572","p":[[1360,4092],[2354,4092],[2354,4572],[2400,4572]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkWardDay","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4688 Q 2354 4700 2366 4700 L 2400 4700","p":[[1360,4092],[2354,4092],[2354,4700],[2400,4700]],"lane":"record","dashed":true},{"from":"cmhtAccepted","to":"cmhtAccepted","d":"M 60 765 L 22 765","p":[[60,765],[22,765]],"lane":"end","terminal":true},{"from":"cmhtDeclined","to":"cmhtDeclined","d":"M 60 916 L 22 916","p":[[60,916],[22,916]],"lane":"end","terminal":true},{"from":"cmhtNothing","to":"cmhtNothing","d":"M 60 1064 L 22 1064","p":[[60,1064],[22,1064]],"lane":"stall","terminal":true},{"from":"cmhtWithdrawn","to":"cmhtWithdrawn","d":"M 60 1207 L 22 1207","p":[[60,1207],[22,1207]],"lane":"stall","terminal":true},{"from":"wardDeclined","to":"wardDeclined","d":"M 700 916 L 662 916","p":[[700,916],[662,916]],"lane":"end","terminal":true},{"from":"wardNothing","to":"wardNothing","d":"M 700 1070 L 662 1070","p":[[700,1070],[662,1070]],"lane":"stall","terminal":true},{"from":"othersCancelled","to":"othersCancelled","d":"M 700 1218 L 662 1218","p":[[700,1218],[662,1218]],"lane":"diversion","terminal":true},{"from":"wardWithdrawn","to":"wardWithdrawn","d":"M 700 1375 L 662 1375","p":[[700,1375],[662,1375]],"lane":"diversion","terminal":true},{"from":"wardBlocked","to":"wardBlocked","d":"M 700 1528 L 662 1528","p":[[700,1528],[662,1528]],"lane":"stall","terminal":true},{"from":"edNeverArrives","to":"edNeverArrives","d":"M 1300 940 L 1262 940","p":[[1300,940],[1262,940]],"lane":"stall","terminal":true},{"from":"edDeclined","to":"edDeclined","d":"M 1300 1502 L 1262 1502","p":[[1300,1502],[1262,1502]],"lane":"end","terminal":true},{"from":"edToCommunity","to":"edToCommunity","d":"M 1300 1982 L 1262 1982","p":[[1300,1982],[1262,1982]],"lane":"diversion","terminal":true},{"from":"edLeft","to":"edLeft","d":"M 1300 2129 L 1262 2129","p":[[1300,2129],[1262,2129]],"lane":"end","terminal":true},{"from":"sWardDecline","to":"sWardDecline","d":"M 60 2016 L 22 2016","p":[[60,2016],[22,2016]],"lane":"stall","terminal":true},{"from":"sWithdrawWard","to":"sWithdrawWard","d":"M 60 2152 L 22 2152","p":[[60,2152],[22,2152]],"lane":"stall","terminal":true},{"from":"sAcceptWithdrawn","to":"sAcceptWithdrawn","d":"M 60 2288 L 22 2288","p":[[60,2288],[22,2288]],"lane":"stall","terminal":true},{"from":"sAbandoned","to":"sAbandoned","d":"M 60 2424 L 22 2424","p":[[60,2424],[22,2424]],"lane":"end","terminal":true},{"from":"sPullReleased","to":"sPullReleased","d":"M 60 2560 L 22 2560","p":[[60,2560],[22,2560]],"lane":"stall","terminal":true},{"from":"sCancelTransport","to":"sCancelTransport","d":"M 60 2696 L 22 2696","p":[[60,2696],[22,2696]],"lane":"stall","terminal":true},{"from":"sStopTransport","to":"sStopTransport","d":"M 60 2832 L 22 2832","p":[[60,2832],[22,2832]],"lane":"diversion","terminal":true},{"from":"dForced","to":"dForced","d":"M 1300 2334 L 1262 2334","p":[[1300,2334],[1262,2334]],"lane":"forced","terminal":true},{"from":"dGenderHard","to":"dGenderHard","d":"M 1300 2474 L 1262 2474","p":[[1300,2474],[1262,2474]],"lane":"stall","terminal":true},{"from":"dNonBinary","to":"dNonBinary","d":"M 1300 2614 L 1262 2614","p":[[1300,2614],[1262,2614]],"lane":"forced","terminal":true},{"from":"dNoLongerSuits","to":"dNoLongerSuits","d":"M 1300 3174 L 1262 3174","p":[[1300,3174],[1262,3174]],"lane":"stall","terminal":true},{"from":"dAway","to":"dAway","d":"M 1300 3594 L 1262 3594","p":[[1300,3594],[1262,3594]],"lane":"diversion","terminal":true},{"from":"dRepat","to":"dRepat","d":"M 1300 3874 L 1262 3874","p":[[1300,3874],[1262,3874]],"lane":"diversion","terminal":true},{"from":"bedStuck","to":"bedStuck","d":"M 1440 4092 L 1402 4092","p":[[1440,4092],[1402,4092]],"lane":"stall","terminal":true},{"from":"end0","to":"end0","d":"M 60 4330 L 22 4330","p":[[60,4330],[22,4330]],"lane":"end","terminal":true},{"from":"end1","to":"end1","d":"M 427 4386 L 427 4424","p":[[427,4386],[427,4424]],"lane":"diversion","terminal":true},{"from":"end2","to":"end2","d":"M 679 4386 L 679 4424","p":[[679,4386],[679,4424]],"lane":"end","terminal":true},{"from":"end3","to":"end3","d":"M 931 4386 L 931 4424","p":[[931,4386],[931,4424]],"lane":"end","terminal":true},{"from":"end4","to":"end4","d":"M 1183 4386 L 1183 4424","p":[[1183,4386],[1183,4424]],"lane":"end","terminal":true},{"from":"end5","to":"end5","d":"M 1435 4386 L 1435 4424","p":[[1435,4386],[1435,4424]],"lane":"end","terminal":true},{"from":"end6","to":"end6","d":"M 1687 4386 L 1687 4424","p":[[1687,4386],[1687,4424]],"lane":"end","terminal":true},{"from":"end7","to":"end7","d":"M 2054 4330 L 2092 4330","p":[[2054,4330],[2092,4330]],"lane":"end","terminal":true},{"from":"rkClock","to":"rkClock","d":"M 2400 1884 L 2362 1884","p":[[2400,1884],[2362,1884]],"lane":"absent","terminal":true},{"from":"rkExpiryShut","to":"rkExpiryShut","d":"M 2400 3676 L 2362 3676","p":[[2400,3676],[2362,3676]],"lane":"stall","terminal":true}]},"machines":{"machines":[{"id":"referral","name":"A referral destination","subject":"One addressed destination. A referral can name several distinct wards within the configured recipient cap; answers and reassessments belong to the individual destination.","width":1064,"height":456,"states":[{"id":"start","kind":"start","x":482,"y":20,"w":80,"h":40,"label":"raised"},{"id":"queued","kind":"normal","x":412,"y":110,"w":220,"h":76,"label":"Waiting","sub":"Doing nothing is a real answer, and the commonest one. It stays here indefinitely."},{"id":"accepted","kind":"terminal","x":804,"y":110,"w":220,"h":76,"label":"Accepted","sub":"Records a destination answer. Acceptance creates no movement or admission; a ward answer may also reserve a named bed on the referral."},{"id":"declined","kind":"terminal","x":20,"y":110,"w":220,"h":76,"label":"Declined","sub":"Ends this answer. An explicit clinical reassessment can reconsider a declined destination."},{"id":"cancelled","kind":"terminal","x":804,"y":270,"w":220,"h":86,"label":"Cancelled","sub":"Closed automatically because another destination accepted. Nobody is asked."},{"id":"withdrawn","kind":"flag","x":20,"y":270,"w":220,"h":96,"label":"Withdrawn — a flag, not a state","sub":"Stamped on every destination still waiting. The arm stays waiting; it does not end."}],"transitions":[{"from":"start","to":"queued","action":"RECEIVE_REFERRAL","route":"down"},{"from":"queued","to":"accepted","action":"ACCEPT_REFERRAL","route":"straight"},{"from":"queued","to":"declined","action":"DECLINE_REFERRAL","route":"straight","guard":"the reason must come from this destination kind's own list"},{"from":"declined","to":"accepted","action":"ACCEPT_REFERRAL","route":"below","offset":0,"kind":"back","label":"on clinical reassessment","guard":"only as an explicit clinical reassessment of this destination"},{"from":"queued","to":"cancelled","action":"ACCEPT_REFERRAL","route":"below","offset":40,"label":"another arm accepted","kind":"side","guard":"a community arm is exempt in both directions and is never cancelled"},{"from":"queued","to":"withdrawn","action":"RECORD_REFERRER_WITHDRAWAL","route":"below","offset":40,"guard":"refused once anything is accepted, and refused outright once transport has collected the patient","kind":"side","label":"stamps every waiting arm"}],"note":"The destination states remain queued, accepted, declined and cancelled. A withdrawal stamps still-queued arms without rewriting their state. A clinical reassessment can update an accepted answer or turn a decline into acceptance; the ordinary first-acceptance cancellation excludes community arms in both directions."},{"id":"movement","name":"A movement","subject":"The separate bed-search record created by RAISE_REFERRAL, or created already arrived by an admitted-ward transfer. Front-door acceptance alone creates no movement. Seven stages plus a separate closure.","width":3122,"height":900,"states":[{"id":"start","kind":"start","x":20,"y":370,"w":230,"h":60,"label":"Movement created"},{"id":"placement_requested","kind":"normal","x":20,"y":180,"w":230,"h":86,"label":"Placement requested","sub":"Wards can be asked from here."},{"id":"destination_review","kind":"normal","x":492,"y":180,"w":230,"h":86,"label":"Destination review","sub":"Wards can be asked from here too — and only from these two."},{"id":"accepted_awaiting_bed","kind":"normal","x":964,"y":180,"w":230,"h":86,"label":"Accepted, awaiting bed","sub":"A ward has said yes. No bed is set aside."},{"id":"pulled","kind":"normal","x":1436,"y":180,"w":230,"h":86,"label":"Bed pulled","sub":"A bed is pulled and linked to an admission. The hold uses current configuration and any applicable extra-travel extension; expiry flags it for a person rather than releasing it."},{"id":"handover_ready","kind":"normal","x":1908,"y":180,"w":230,"h":86,"label":"Handover ready","sub":"Requires a booked job or an explicitly recorded no-transport-needed answer, plus current held-bed gender and legal checks."},{"id":"moving","kind":"normal","x":2380,"y":180,"w":230,"h":86,"label":"Moving","sub":"The patient is in the vehicle."},{"id":"arrived","kind":"terminal","x":2852,"y":180,"w":230,"h":86,"label":"Arrived","sub":"STEP_BACK_STAGE cannot reverse arrival. A separate scoped Undo may reverse the latest unchanged recorded arrival within its window and restored-bed checks."},{"id":"closed","kind":"terminal","x":1396,"y":760,"w":310,"h":90,"label":"Closed — did not proceed","sub":"Not a stage. The stage it closed at is still recorded."}],"transitions":[{"from":"start","to":"placement_requested","action":"RAISE_REFERRAL","route":"up","label":"creates it"},{"from":"placement_requested","to":"destination_review","action":"REFER_TO_UNITS","route":"straight"},{"from":"destination_review","to":"destination_review","action":"DECLINE","route":"self","offset":0,"label":"a ward says no","guard":"that ward drops off the list; the stage does not move"},{"from":"destination_review","to":"destination_review","action":"WITHDRAW_WARD_REQUEST","route":"self","offset":34,"label":"take one ward back"},{"from":"destination_review","to":"destination_review","action":"REFER_TO_UNITS","route":"self","offset":68,"label":"ask more wards"},{"from":"destination_review","to":"accepted_awaiting_bed","action":"ACCEPT_IN_PRINCIPLE","route":"straight"},{"from":"accepted_awaiting_bed","to":"destination_review","action":"WITHDRAW_ACCEPTANCE","route":"below","offset":40,"kind":"back","guard":"Allowed while awaiting a bed or with a pulled/stepped-back hold. A held bed is released atomically; cancel a live transport job first. Refused at handover-ready/moving."},{"from":"accepted_awaiting_bed","to":"pulled","action":"PULL_PATIENT","route":"straight"},{"from":"pulled","to":"accepted_awaiting_bed","action":"RELEASE_PULL","route":"below","offset":90,"kind":"back"},{"from":"pulled","to":"handover_ready","action":"HANDOVER_READY","route":"straight"},{"from":"handover_ready","to":"moving","action":"PATIENT_COLLECTED","route":"straight","guard":"refused while a revoked examination still holds the bed, or while restrictive practice is still recorded as in use for the patient at the sending ward"},{"from":"moving","to":"arrived","action":"PATIENT_ARRIVED","route":"straight"},{"from":"pulled","to":"arrived","action":"PATIENT_ARRIVED","route":"above","offset":30,"label":"no transport needed","kind":"skip"},{"from":"pulled","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":0,"kind":"exit"},{"from":"pulled","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":38,"kind":"exit"},{"from":"pulled","to":"closed","action":"REFER_TO_COMMUNITY_TEAM","route":"exit","offset":76,"kind":"exit"},{"from":"pulled","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":114,"kind":"exit","label":"community order or revoked","guard":"A community order before transport commitment closes and refunds. Revocation while a bed is held retains it and flags release; commitment or collection also retains the bed."},{"from":"moving","to":"closed","action":"STOP_TRANSPORT","route":"exit","offset":0,"kind":"exit","guard":"the bed deliberately stays held; only releasing the held bed gives it back"},{"from":"arrived","to":"closed","action":"PATIENT_ARRIVED","route":"exit","offset":0,"kind":"side","label":"closes as arrived, not as did-not-proceed"},{"from":"start","to":"arrived","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"skip","label":"ward transfer arrival: created already arrived","guard":"only a coordinator recording a transfer as arrived, for an occupied admission, into a ward with a suitable free bed and staffing; the new movement is opened and closed as arrived in one write, never raised in a department"},{"from":"moving","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":130,"kind":"back","label":"to ANY strictly earlier stage","guard":"refused once arrived; touches nothing but the stage — no bed given back, no transport cancelled"},{"from":"destination_review","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":90,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"accepted_awaiting_bed","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":100,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"pulled","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":110,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"handover_ready","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":120,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"pulled","to":"destination_review","action":"WITHDRAW_ACCEPTANCE","route":"below","offset":120,"kind":"back","guard":"the held bed is released in the same write; cancel a live transport job first"},{"from":"placement_requested","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":150,"kind":"exit"},{"from":"placement_requested","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":174,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"destination_review","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":198,"kind":"exit"},{"from":"destination_review","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":222,"kind":"exit"},{"from":"destination_review","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":246,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"accepted_awaiting_bed","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":270,"kind":"exit"},{"from":"accepted_awaiting_bed","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":294,"kind":"exit"},{"from":"accepted_awaiting_bed","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":318,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"handover_ready","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":342,"kind":"exit"},{"from":"handover_ready","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":366,"kind":"exit"}],"note":"STEP_BACK_STAGE records a strictly earlier stage with a reason, leaving bed and transport intact. It refuses a closure, an arrived stage or a delivered transport leg. WITHDRAW_ACCEPTANCE can release an uncollected hold atomically after cancelling a live job. The separate scoped UNDO_TRANSPORT_STEP route may reverse the latest recorded arrival while its time-window, unchanged-snapshot, actor and restored-bed checks pass. Withdrawing the referral (after placement is requested), an ED outcome (before Moving) and a community order (before a bed is pulled) close the movement from every open stage the engine allows, not only from Bed pulled; tests/ward-audit-m26-machine-moves.test.ts checks every arrow against the engine."},{"id":"admission","name":"An admission","subject":"The held or occupied stay. A new pull creates a held admission; supported direct placement/planned-arrival and ward-transfer paths can create an occupied admission without passing through Held.","width":1684,"height":426,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":190,"h":76,"label":"No admission"},{"id":"pulled","kind":"normal","x":458,"y":60,"w":230,"h":76,"label":"Held","sub":"A bed is theirs. They are not here yet."},{"id":"occupied","kind":"normal","x":936,"y":60,"w":230,"h":76,"label":"Occupied","sub":"Stays theirs through leave, an ED trip, and an absconding."},{"id":"departed","kind":"terminal","x":1414,"y":60,"w":230,"h":76,"label":"Departed","sub":"Kept. Ended, never deleted."},{"id":"deleted","kind":"flag","x":423,"y":250,"w":300,"h":86,"label":"Removed — not a state","sub":"There is no “deleted” among the four admission states. The record itself is taken away."},{"id":"waitlisted","kind":"unreachable","x":1434,"y":250,"w":190,"h":86,"label":"Waitlisted","sub":"No action in the engine can produce this. Only the starting fixture writes it."}],"transitions":[{"from":"none","to":"pulled","action":"PULL_PATIENT","route":"straight","label":"creates it"},{"from":"pulled","to":"occupied","action":"PATIENT_ARRIVED","route":"straight"},{"from":"occupied","to":"departed","action":"RECORD_LEAVING","route":"straight","guard":"only from occupied, and only by the ward they are on"},{"from":"occupied","to":"departed","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"side","label":"transferred to another ward","guard":"only when a coordinator records the transfer as arrived; the stay ends with the destination transferred-to-another-psychiatric-ward and any live bed release is completed"},{"from":"none","to":"occupied","action":"RECORD_ADMISSION_CARE","route":"below","offset":60,"kind":"skip","label":"transfer arrival: new admission, already occupied","guard":"the receiving ward gets a NEW admission with a new linked movement; no bed is pulled first, so it never passes through Held"},{"from":"occupied","to":"occupied","action":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","route":"self","offset":0,"label":"away at an ED — bed untouched"},{"from":"occupied","to":"occupied","action":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","route":"self","offset":34,"label":"and back"},{"from":"pulled","to":"deleted","action":"RELEASE_PULL","route":"exit","offset":0,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RELEASE_HELD_BED","route":"exit","offset":38,"kind":"exit"},{"from":"pulled","to":"deleted","action":"WITHDRAW_REFERRAL","route":"exit","offset":76,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RECORD_ED_OUTCOME","route":"exit","offset":114,"kind":"exit"},{"from":"pulled","to":"deleted","action":"REFER_TO_COMMUNITY_TEAM","route":"exit","offset":152,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RECORD_EXAMINATION","route":"exit","offset":190,"kind":"exit"}],"note":"Ending and deleting are deliberately different. A departed admission is kept as a record that somebody was here; a released pull is removed, because the claim that they would be here is being retracted."},{"id":"transport","name":"A transport job","subject":"Booked by phone and logged here. Collection is the line that changes what is possible.","width":2390,"height":436,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":170,"h":76,"label":"No job"},{"id":"booked","kind":"normal","x":432,"y":60,"w":190,"h":76,"label":"Booked"},{"id":"accepted","kind":"normal","x":864,"y":60,"w":190,"h":76,"label":"Crew accepted"},{"id":"enroute","kind":"normal","x":1296,"y":60,"w":190,"h":76,"label":"En route"},{"id":"collected","kind":"normal","x":1728,"y":60,"w":190,"h":76,"label":"Collected","sub":"After this, cancelling is impossible."},{"id":"arrived","kind":"terminal","x":2160,"y":60,"w":190,"h":76,"label":"Arrived"},{"id":"stopped","kind":"terminal","x":1683,"y":260,"w":280,"h":86,"label":"Stopped","sub":"Somebody must say where the patient now is."}],"transitions":[{"from":"none","to":"booked","action":"BOOK_TRANSPORT","route":"straight","guard":"five answers, none defaulted"},{"from":"booked","to":"accepted","action":"TRANSPORT_ACCEPTED","route":"straight"},{"from":"accepted","to":"enroute","action":"TRANSPORT_EN_ROUTE","route":"straight","guard":"Requires an open movement at handover-ready, an accepted job and no earlier en-route timestamp. Refused while a revoked/community-order examination retains a bed or awaits release; this handler itself does not rerun held-unit gender/legal checks."},{"from":"enroute","to":"collected","action":"PATIENT_COLLECTED","route":"straight","guard":"refused while restrictive practice is still recorded as in use for the patient at the sending ward"},{"from":"collected","to":"arrived","action":"PATIENT_ARRIVED","route":"straight"},{"from":"booked","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":0,"kind":"exit","label":"the job is deleted, not marked"},{"from":"accepted","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":20,"kind":"exit"},{"from":"enroute","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":40,"kind":"exit","guard":"The booking ward/team must match the supplied acting place; an ED claim is checked against the recorded booking place when both are present. Coordinator access remains subject to the authenticated access boundary."},{"from":"collected","to":"stopped","action":"STOP_TRANSPORT","route":"exit","offset":0,"kind":"exit"}],"note":"Cancel and stop are not two names for one thing. Cancel deletes a job before collection and leaves the bed held; stop ends a journey already underway, closes the movement, and also leaves the bed held — but only stop demands to know where the patient is."},{"id":"bedrelease","name":"A bed release","subject":"A ward's plan for a bed coming free. It names the stay it belongs to, and nothing else about the person leaving.","width":1709,"height":566,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":170,"h":76,"label":"Not flagged"},{"id":"expected","kind":"normal","x":463,"y":60,"w":210,"h":76,"label":"Expected","sub":"Carries what it is waiting on — one of seven."},{"id":"confirmed","kind":"normal","x":946,"y":60,"w":210,"h":76,"label":"Confirmed","sub":"Decided. Still not a free bed."},{"id":"discharged","kind":"terminal","x":1429,"y":60,"w":240,"h":76,"label":"Discharged","sub":"The only step here that moves a real bed count."},{"id":"blocked","kind":"flag","x":428,"y":420,"w":280,"h":86,"label":"Stuck — a flag, not a stage","sub":"One of nine reasons. Sits on top of expected or confirmed; either can be flagged."},{"id":"preparing","kind":"flag","x":1250,"y":420,"w":300,"h":86,"label":"Being made ready — a flag","sub":"Cleaning or repair is a separate flag. It can be set on an expected, confirmed or discharged release, and recording the departure (or a ward transfer arriving) sets it too, except item 18's \"Left the ward, waiting for transport\", where the bed is Ready at once. It does not rewrite the ward count, but a new pull refuses when every free bed is still being prepared."}],"transitions":[{"from":"none","to":"expected","action":"FLAG_BED_RELEASE","route":"straight"},{"from":"expected","to":"confirmed","action":"CONFIRM_BED_RELEASE","route":"straight"},{"from":"confirmed","to":"expected","action":"REVERT_BED_RELEASE","route":"below","offset":40,"kind":"back"},{"from":"confirmed","to":"discharged","action":"RECORD_LEAVING","route":"straight"},{"from":"expected","to":"discharged","action":"RECORD_LEAVING","route":"above","offset":30,"kind":"skip","label":"straight from expected"},{"from":"confirmed","to":"discharged","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"side","label":"the patient's ward transfer completes it"},{"from":"expected","to":"discharged","action":"RECORD_ADMISSION_CARE","route":"below","offset":60,"kind":"skip","label":"straight from expected, by ward transfer"},{"from":"expected","to":"blocked","action":"BLOCK_BED_RELEASE","route":"exit","offset":0,"kind":"side"},{"from":"confirmed","to":"blocked","action":"BLOCK_BED_RELEASE","route":"exit","offset":90,"kind":"side"},{"from":"blocked","to":"expected","action":"CLEAR_BED_RELEASE_BLOCK","route":"exit","offset":0,"kind":"side"},{"from":"expected","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":110,"kind":"side"},{"from":"confirmed","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":130,"kind":"side"},{"from":"discharged","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":150,"kind":"side","label":"made ready after the person leaves"},{"from":"expected","to":"preparing","action":"RECORD_LEAVING","route":"exit","offset":170,"kind":"side","label":"the departure also marks the bed, unless left waiting for transport"},{"from":"confirmed","to":"preparing","action":"RECORD_LEAVING","route":"exit","offset":190,"kind":"side","label":"the departure also marks the bed, unless left waiting for transport"},{"from":"expected","to":"preparing","action":"RECORD_ADMISSION_CARE","route":"exit","offset":210,"kind":"side","label":"a ward transfer arriving also marks the bed"},{"from":"confirmed","to":"preparing","action":"RECORD_ADMISSION_CARE","route":"exit","offset":230,"kind":"side","label":"a ward transfer arriving also marks the bed"}],"note":"Being stuck used to be a fourth stage and was deliberately removed on 28 August 2026, because each stage says only how certain the discharge is. Stuck-ness and cleaning are two separate flags sitting on top."},{"id":"expects","name":"The front door — an expect becomes a referral","subject":"A door the earlier drawing missed entirely. A referral that has been triaged but whose patient has not arrived sits on a separate list; marking them present is what moves it.","width":2011,"height":240,"states":[{"id":"raised","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Raised"},{"id":"expected","kind":"normal","x":537,"y":60,"w":260,"h":90,"label":"Expected to arrive","sub":"Triaged, and the patient is not here yet. It sits on the Expects list."},{"id":"present","kind":"normal","x":1114,"y":60,"w":260,"h":90,"label":"In the department","sub":"Marked present. It now reads as a referral rather than an expect."},{"id":"cleared","kind":"flag","x":1691,"y":60,"w":280,"h":90,"label":"Medically cleared — or not","sub":"Three answers, not two: unrecorded, cleared, and explicitly not cleared."}],"transitions":[{"from":"raised","to":"expected","action":"RECEIVE_REFERRAL","route":"straight"},{"from":"expected","to":"present","action":"RECORD_ARRIVED_IN_DEPARTMENT","route":"straight","guard":"stamped once; a repeat keeps the earliest time"},{"from":"present","to":"cleared","action":"RECORD_MEDICAL_CLEARANCE","route":"straight","kind":"side"},{"from":"expected","to":"cleared","action":"RECORD_MEDICAL_CLEARANCE","route":"below","offset":0,"kind":"side","label":"clearance can come first"}],"note":"The owner's own words for this, quoted in the model: “When expects arrive and are marked as arrived, they become referrals.” Being marked present is the only door between the two lists."},{"id":"legalstatus","name":"A patient's legal status","subject":"Four values on an open movement. CHANGE_LEGAL_STATUS records a change and history; it does not itself release a bed or advance the journey. Sending-desk kind and authenticated place scope still apply.","width":1683,"height":226,"states":[{"id":"voluntary","kind":"normal","x":20,"y":60,"w":240,"h":76,"label":"Voluntary"},{"id":"referred","kind":"normal","x":451,"y":60,"w":280,"h":76,"label":"Referred for psychiatric examination"},{"id":"detained","kind":"normal","x":922,"y":60,"w":280,"h":76,"label":"Detained awaiting examination"},{"id":"involuntary","kind":"normal","x":1393,"y":60,"w":250,"h":76,"label":"Involuntary inpatient"}],"transitions":[{"from":"voluntary","to":"referred","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"referred","to":"detained","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"detained","to":"involuntary","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"involuntary","to":"voluntary","action":"CHANGE_LEGAL_STATUS","route":"below","offset":20,"kind":"back","label":"any value to any other"}],"note":"Any value can be recorded as another; arrows illustrate examples rather than an enforced legal sequence. The handler requires a listed reason and an open movement. A newly unsuitable accepted ward is surfaced for a person; forward placement/transport steps recheck legal authority, so the change can block later progress."},{"id":"examination","name":"An examination","subject":"Four outcomes. Two of them end the bed search; one of them asks for another examination and is the only way a second one is allowed.","width":1757,"height":426,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Not examined"},{"id":"further","kind":"normal","x":449,"y":60,"w":260,"h":90,"label":"Further examination ordered","sub":"The only outcome that allows another examination."},{"id":"inpatient","kind":"terminal","x":938,"y":60,"w":250,"h":90,"label":"Inpatient order","sub":"Recorded. Nothing else changes."},{"id":"ended","kind":"terminal","x":1417,"y":60,"w":300,"h":90,"label":"Community order, or revoked","sub":"A community order or revocation is recorded. Closure/release depends on the held-bed and transport facts."},{"id":"superseded","kind":"flag","x":320,"y":250,"w":300,"h":86,"label":"Superseded","sub":"The previous examination is kept, not overwritten."}],"transitions":[{"from":"none","to":"further","action":"RECORD_EXAMINATION","route":"straight"},{"from":"none","to":"inpatient","action":"RECORD_EXAMINATION","route":"above","offset":26,"kind":"skip"},{"from":"none","to":"ended","action":"RECORD_EXAMINATION","route":"above","offset":60,"kind":"skip"},{"from":"further","to":"superseded","action":"RECORD_EXAMINATION","route":"exit","offset":0,"kind":"side","label":"a second examination","guard":"a second examination is refused unless the last one ordered a further one"}],"note":"A community order before transport commitment closes the search and releases its hold. Revocation with a held bed retains the bed and admission, keeps the movement open and flags a person to act. At handover-ready, moving or after collection either ending outcome also retains it. Acceptance, en-route and collection refuse an unresolved examination/hold; physical arrival remains recordable."},{"id":"notice","name":"A notice","subject":"Twenty-four kinds of message, addressed to one role at one place. Written once, never rewritten, never deleted and never expiring.","width":1442,"height":246,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Nothing sent"},{"id":"unread","kind":"normal","x":531,"y":60,"w":280,"h":96,"label":"Raised, unread","sub":"Its wording is frozen at the moment it is written, even if the thing it describes later changes."},{"id":"read","kind":"terminal","x":1122,"y":60,"w":280,"h":96,"label":"Read","sub":"Only the addressee can mark it, only by clicking, and only once."}],"transitions":[{"from":"none","to":"unread","action":"ACCEPT_REFERRAL","route":"straight","label":"one of twenty-four kinds","guard":"raised as a side-effect of an action, never on its own"},{"from":"unread","to":"read","action":"MARK_NOTICE_READ","route":"straight","guard":"refused if you are not the addressee, and refused a second time"}],"note":"Opening the drawer does not mark a notice read. MARK_NOTICE_READ requires the addressed role/place and an unread notice. These are append-only authored messages, separate from derived action-inbox rows and from broadcast alerts. Referral-answer notices resolve the referring ED for ed_medical referrals; other source kinds currently have no safe referrer addressee."},{"id":"inbox","name":"A row in the coordinator's inbox","subject":"Derived fact rows come from movements, stays, planned bookings and bed-meeting actions. A separate daily nobody-missed check is a commitment with append-only completion history.","width":1640,"height":416,"states":[{"id":"absent","kind":"start","x":20,"y":60,"w":220,"h":70,"label":"Not showing"},{"id":"showing","kind":"normal","x":620,"y":60,"w":300,"h":96,"label":"Showing","sub":"A current fact category is true, or a commitment is due. The current categories live in INBOX_CATEGORIES rather than a fixed five-item list."},{"id":"acknowledged","kind":"normal","x":1300,"y":60,"w":300,"h":96,"label":"Acknowledged","sub":"Somebody has seen a fact row. The row stays exactly where it was. A commitment is never acknowledged."},{"id":"ticked","kind":"normal","x":1140,"y":230,"w":300,"h":96,"label":"Commitment completed","sub":"The daily check can be completed and reopened. Live fact categories cannot be ticked away; bed-meeting actions use their dedicated completion event."}],"transitions":[{"from":"absent","to":"showing","action":"ACKNOWLEDGE_INBOX_ITEM","route":"straight","label":"the situation becomes true","kind":"side","guard":"nothing raises a row — it is derived, and appears on its own"},{"from":"showing","to":"acknowledged","action":"ACKNOWLEDGE_INBOX_ITEM","route":"straight","guard":"hides nothing and removes nothing; a second person acknowledging is a second real fact"},{"from":"showing","to":"ticked","action":"COMPLETE_INBOX_ITEM","route":"exit","offset":0,"kind":"side","label":"commitments only","guard":"Only commitment IDs; daily-check IDs require the day-N shape, and an already-complete history refuses. A commitment is completed straight from Showing and is never acknowledged. Facts remain until their underlying situation changes."},{"from":"ticked","to":"showing","action":"REOPEN_INBOX_ITEM","route":"above","offset":0,"kind":"back","label":"back to showing"}],"note":"Acknowledgement, ownership, snoozing and completion are separate histories. Real fact rows are never completed by COMPLETE_INBOX_ITEM. The daily check uses a day-shaped identifier rather than a movement; bed-meeting actions use COMPLETE_BED_MEETING_ACTION. CANCEL_TRANSPORT appends a returned snooze and a released ownership entry to the job's awaiting-departure and booking-estimate-passed rows. Completion validates category and day syntax, not whether the day is the current day."},{"id":"legalform","name":"A legal form's receipt","subject":"Whether the paperwork has physically arrived. It can be undone, and then happen again.","width":1382,"height":240,"states":[{"id":"not","kind":"start","x":20,"y":60,"w":240,"h":76,"label":"Not recorded as received"},{"id":"received","kind":"normal","x":521,"y":60,"w":260,"h":90,"label":"Recorded as received","sub":"Any of the nine forms with a legal clock, not only 1A. A second receipt is refused. A typed received time is kept as typed and cannot be later than now."},{"id":"expiry","kind":"flag","x":1042,"y":60,"w":300,"h":90,"label":"An expiry, typed by a clinician","sub":"Expiry comes from checked paper facts. An extension must be later; a correction with matching prior form/time/expiry and a listed reason may move it earlier."}],"transitions":[{"from":"not","to":"received","action":"RECORD_LEGAL_FORM_RECEIVED","route":"straight"},{"from":"received","to":"not","action":"CORRECT_LEGAL_FORM_RECEIPT","route":"below","offset":20,"kind":"back","guard":"three reasons: recorded in error, recorded against the wrong movement, or the form had not physically arrived"},{"from":"received","to":"expiry","action":"RECORD_LEGAL_FORM_EXPIRY","route":"straight","kind":"side"},{"from":"not","to":"expiry","action":"RECORD_LEGAL_FORM_EXPIRY","route":"above","offset":0,"kind":"side","label":"before a receipt"}],"note":"Receipt correction appends its reason and clears the receipt without erasing history. Expiry entry need not wait for a receipt: it requires a recorded form. The admitted ward may record a typed expiry on an arrived/closed movement; a checked correction and a later extension are distinct paths."}],"resources":{"title":"A ward's two bed counts","blurb":"The illustrated routes below show the principal stored-count changes; the current event models also cover planned admissions, direct placement and undo. A normal departure completes the named live release and raises empty/allocatable once. A departure resolving an arrival-capacity conflict clears that conflict instead of inventing another bed. Ready capacity also excludes closed wards, individually closed beds and other journeys' pending numbered reservations.","counts":[{"name":"Allocatable","means":"Beds the ward will let a coordinator take.","moves":[{"action":"PULL_PATIENT","effect":"− 1"},{"action":"RELEASE_PULL","effect":"+ 1"},{"action":"RELEASE_HELD_BED","effect":"+ 1"},{"action":"WITHDRAW_REFERRAL","effect":"+ 1","note":"via the same release"},{"action":"RECORD_ED_OUTCOME","effect":"+ 1","note":"via the same release"},{"action":"REFER_TO_COMMUNITY_TEAM","effect":"+ 1","note":"via the same release"},{"action":"RECORD_EXAMINATION","effect":"+ 1","note":"Community order before commitment can release a hold; revocation with a held bed retains it for a person to release."},{"action":"RECORD_LEAVING","effect":"+ 1","note":"the named patient leaving, which also completes their bed release"},{"action":"RECORD_ADMISSION_CARE","effect":"+ 1 on the ward they leave, − 1 on the ward they arrive at","note":"only a transfer recorded as arrived; the source ward's live bed release is completed in the same write"},{"action":"CONFIRM_CAPACITY","effect":"set outright","note":"a ward's own self-report, which can put it above the empty count"}]},{"name":"Empty","means":"Beds with physically nobody in them.","moves":[{"action":"PATIENT_ARRIVED","effect":"Usually −1, floored at zero; a pre-counted seeded pull is not decremented twice. Arrival into no empty bed is recorded as a capacity conflict."},{"action":"RECORD_LEAVING","effect":"+ 1","note":"Normally +1, bounded by authored capacity; resolving an arrival conflict or already-counted release does not create an extra free bed."},{"action":"RECORD_ADMISSION_CARE","effect":"+ 1 on the ward they leave, − 1 on the ward they arrive at","note":"only a transfer recorded as arrived"}]}]},"gates":{"title":"Can this ward take this patient?","blurb":"Thirteen possible eligibility labels across two paths, not thirteen blocking checks at every step. Eight labels belong to the suitability-override list. Acuity and specialling rows are information only; their actual staffing checks occur at placement. Gender designation has no override; Ready-bed and other physical-record checks run separately.","overridable":"Overridable means a coordinator may proceed anyway by choosing one of five recorded reasons: the receiving team has agreed despite the mismatch; clinical urgency outweighs the mismatch; the bed information is known to be out of date; continuity with a previous admission at this unit; closer to the person's home or family.","rows":[{"gate":"Authorisation","override":true,"referral":false,"movement":true,"asks":"If this patient is not voluntary, is the ward authorised under the Mental Health Act?"},{"gate":"Legal status","override":true,"referral":true,"movement":false,"asks":"The same question, asked at the front door instead — is an authorised bed needed, and does this ward have one?"},{"gate":"Cohort","override":true,"referral":false,"movement":true,"asks":"Does the ward's cohort match the patient's — adult, older adult, or youth?"},{"gate":"Age","override":true,"referral":true,"movement":false,"asks":"The same question at the front door, asked against the age band on the referral."},{"gate":"Security","override":true,"referral":true,"movement":true,"differs":true,"asks":"Does the patient need a locked bed?","note":"THE SAME NAME, TWO DIFFERENT QUESTIONS. At the front door it asks whether a locked bed is free right now. On a movement it asks only whether the ward has locked beds at all. The gap is known and written down."},{"gate":"Sex mix","override":true,"referral":true,"movement":true,"differs":true,"asks":"Is there already an occupant of the same sex, or more than one free bed?","note":"Both current sex-mix paths use Ready availability, with recorded gender and the defined recorded-sex fallback for non-binary or absent gender. Do not repeat the former front-door-versus-movement capacity difference for this row."},{"gate":"Forensic","override":true,"referral":true,"movement":true,"asks":"Is this a forensic ward? If so it is never offered."},{"gate":"Capacity freshness","override":true,"referral":true,"movement":true,"asks":"How long ago did the ward last confirm its numbers? A stale figure fails."},{"gate":"Gender designation","override":false,"referral":true,"movement":true,"hard":true,"asks":"Does the ward's designation suit the gender recorded at referral?","note":"Gender designation is checked before suitability overrides. A binary gender conflicting with the ward cannot be overridden. Non-binary, Different term and unrecorded gender can use an explicit coordinator placement record, subject to the current ward-checked reason requirements."},{"gate":"Acuity","override":false,"referral":true,"movement":true,"hard":true,"asks":"Information only: what high-acuity staffing is authored for the ward? Current use is checked at placement.","note":"This eligibility row always passes with info:true. PULL_PATIENT separately checks remaining high-acuity staffing and requires a valid reason plus nurse unit manager consultation for its supported exception."},{"gate":"Specialling","override":false,"referral":true,"movement":true,"hard":true,"differs":true,"asks":"Information only: what observation staffing is authored, and what does the recorded level need?","note":"This row always passes with info:true. A referral does not record observation level. PULL_PATIENT checks actual remaining observation staff; the eligibility row is not itself a hard refusal."},{"gate":"Prior decline","override":false,"referral":false,"movement":true,"hard":true,"asks":"Has this ward previously declined this movement? This is historical context; the reducer does not enforce it as a suitability refusal."},{"gate":"A bed to allocate","override":false,"referral":true,"movement":true,"hard":true,"differs":true,"asks":"Is there a bed to give?","note":"Movement matching can accept in principle on allocatable capacity; immediate referral matching requires Ready availability. PULL_PATIENT requires a Ready bed. Physical arrival is still recorded at zero empty capacity and creates an arrival-capacity conflict rather than refusing a patient in transit."}],"outside":{"title":"Placement and held-destination checks outside the label table","blurb":"These checks answer physical reservations, staffing and record consistency at their actual handlers. They are not all evaluated on every path; an already-held restoration has its own checks and physical arrival has a separate record-first path.","items":["A new pull needs a Ready bed, including closed-ward and closed-bed adjustments and live pulled admissions; when beds are being made ready it needs more Ready beds than pending ones (planned arrivals likewise). An arrival into zero empty capacity is recorded as a capacity conflict.","Every free bed still being prepared prevents a new pull.","Current observation staff and high-acuity capacity are checked at placement; supported exceptions need their recorded facts and acuity also needs nurse unit manager consultation.","A Secure request using an open bed requires the supported recorded reason; naming an unavailable numbered reservation still refuses.","Coordinator gender-placement records are required for the cases defined by genderReviewNeeded, and a binary designation conflict has no suitability override.","A restored hold rechecks its matching admission, current staffing, legal authority and gender rather than consuming another bed.","A no-transport arrival rechecks gender/legal status before arrival; an already-moving patient is recorded without stranding them at the door."]}},"gaps":[{"title":"The stored Unit.held field is not the live operational count","body":"Operational held/closed/Ready figures are derived. Unit.held remains seed and storage-validation data, so saying it is read in zero places is false. Filling this stored field is not a way to change the live derived figure.","question":"Would retiring this legacy storage field improve the model? Any removal needs a separately scoped migration and compatibility review."},{"title":"A patient-shaped placement wrapper remains separate from the live matching path","body":"genderEligibility is called by validateGenderPlacement, while live referral and movement matching share genderDesignationResult. These are distinct API shapes; the old claim that genderEligibility is never called is false. The wrapper currently has no production caller found in this source scan.","question":"Should the unused wrapper be retained as a public contract or retired under a separately reviewed API change? Its existence does not mean current matching skips gender."},{"title":"Inbox completion is for commitments; fact rows need their source condition resolved","body":"The daily nobody-missed check is a completable commitment, while derived fact rows cannot be ticked away. Bed-meeting actions have a separate completion event. COMPLETE_INBOX_ITEM validates the daily-check identifier shape and appends history; it does not verify that the named day is today.","question":"Should the daily-check API allow retrospective/future day records? Keep that product decision separate from the rule that live facts cannot be silenced."}],"review":{"reviewedOn":"2026-11-05","basis":"Source comparison of eleven machines, route nodes, gates, resources and current gap notes; not runtime or clinical acceptance. 5 November follow-up: explicit handler, payload, authority and caller review reconciled the consolidated audit repairs. Accepted observation sequence and legacy-tie fallback, current place/Undo provenance, safe world reset/import identity, return retry, meeting occurrence metadata and UI draft/completion ownership qualify existing transitions; they add no clinical decision or new physical transport stage. See CURRENT-REVIEW.md for the source-by-source review scope and reused versus fresh evidence. Main29f61/domain1430 reconciliation: accepted observation order is max(retained history,0)+1 with positive-safe restore metadata and sequence preserved through arrival; legacy ties retain compatibility fallback. Import and archive Undo share normalized retained identity, excluding explicit missing/privacy sentinels. Complete inverses preserve occupied-stay/leave consistency. No transition geometry or clinical rule changed; see CURRENT-REVIEW.md. #1447 consolidation, 5 November: other journeys' pending numbered bed reservations come off Ready and the free locked/open counts in the pull and planned-arrival gates; a pull release clears its held bed number and refuses a release matching no reservation; a coordinator transfer recorded as arrived needs a Ready bed; restore refuses a save whose live absences, active stays or numbered beds have more than one owner and names the broken rule. No transition geometry or clinical rule changed. 10 November (items 3, 9, 10/16/27, 26/46): escalation calls and police or ambulance crew times add record-only movement fields and events; the ward card fit lines, home team heads-up and transfer notes copy are screen reads. Cited sources compared line by line; no transition geometry or clinical rule changed. 11 November (D-141): RECORD_ARRIVAL_MODE marks an ED arrival brought by police or ambulance, a record-only movement field; the home team heads-up adds the patient's UMRN as a screen read. Cited sources compared line by line (additions only); no transition geometry or clinical rule changed.","sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":619,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":1,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/legal-forms/legal-forms-sheets.tsx","line":325,"sha256":"2d9f381246fc35b7c04bfcd41c26e67d584e594d41f73d8ddf1f913b7036c2bc"},{"path":"src/components/ward-management/patients/add-patient.tsx","line":87,"sha256":"e4d277572fc48f16fc5a3746118fc7ab1758d274ed28ae459d9cd1821a2de4f0"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":1,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/shell/ward-broadcast-banner-body.tsx","line":1,"sha256":"a96ae00d184b52341105eb90f8a0438f5f5561f787c2522f97e0e7ea62e87178"},{"path":"src/components/ward-management/shell/ward-broadcast-banner.tsx","line":1,"sha256":"d34087fc1cfb2356065997d7942882cd1bc9791e3041e71ec0fb0d279fe429be"},{"path":"src/components/ward-management/shell/ward-facade.ts","line":32,"sha256":"1f67e3da9d32ff7085af624d524b3bcefe1c1c7790164963a98d21da4c830d6b"},{"path":"src/components/ward-management/ward-change-reasons.ts","line":1,"sha256":"b22acd93e5b480a06ecaa78e29979f31d274e4700187416623afd9e32553b2e4"},{"path":"src/components/ward-management/ward-configuration.ts","line":34,"sha256":"3e6cffc45878c910d85d900ae10360c06b6c647bbb4cf749875aaf5bb5640ca8"},{"path":"src/components/ward-management/ward-derivations-transport.ts","line":265,"sha256":"877a3c89501efb8f518b4bae3e30b51efd042e38b4b066f2db6ebbc81591ebba"},{"path":"src/components/ward-management/ward-derivations.ts","line":1,"sha256":"c254f1512e5602170a15419774de985744bf603ba81113e8ecd46f21d5adccfe"},{"path":"src/components/ward-management/ward-duplicate-bed-requests.ts","line":1,"sha256":"1bef25c3e6a549941d0753e095e0c7aa4bb26a1fc2dd12e8a526e1f8d2f9ddf6"},{"path":"src/components/ward-management/ward-eligibility.ts","line":49,"sha256":"5a876b1943bbfa47b1db277fb4a5b36b37d80de4c4ff9bb6b620366d7217800d"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":621,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-departure.ts","line":18,"sha256":"624ccc1fda2f7732e2704270f7281dcea991daac85485619881b0d1790aacb62"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":1,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":430,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":1,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":606,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":428,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1176,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":392,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-storage-validation.ts","line":452,"sha256":"235c28653c50815296ac813352251daa8bfdc0d045f34784be71ad4387965ac5"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":270,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":58,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-model-leave.ts","line":1,"sha256":"ef7c345e94d36c3ee2e7ee4c1eda650106340a856d29afdb1da1feadc38aea4e"},{"path":"src/components/ward-management/ward-model-notices.ts","line":1,"sha256":"9f4ca23254737cc5eec8353ee99d05265b4f9fe7bc04d17fe7c2abd954c08678"},{"path":"src/components/ward-management/ward-model-referral-parts.ts","line":1,"sha256":"a23ccdb01397d9807f0455c3baed92c6c8700422593ebcb89f5a51e990281fb6"},{"path":"src/components/ward-management/ward-model.ts","line":1,"sha256":"6cc372267168e04e8bb4a3365d5db08888f67c6cbd08a372e5f57d40b6614e46"},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":77,"sha256":"9e0f9c39d6d4a7f8f406fd438e09cd9ea7b7c6631a7bdd5e059d1f38de3caac4"},{"path":"src/components/ward-management/ward-ready-beds.ts","line":1,"sha256":"489095566f42be24921c7ba289b59a13514c656bf4846cf9cf94fad5a5aeb13c"},{"path":"src/components/ward-management/ward-undo.ts","line":1,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"},{"path":"src/components/ward-management/ward-retained-umrn.ts","line":13,"sha256":"7968243f077b9d5c9a6fe6a56385f48ff6a97aa39cfdeec8fe97f05919693d80"}]}},"coverage":{"total":98,"mapped":46,"refusalSitesInSelectedFiles":160,"sampledSourceFiles":["ward-flow-reducer.ts","ward-flow-record-events.ts","ward-flow-undo-events.ts"],"refusalsNamed":248,"rows":[{"name":"Raise a referral at the front door","event":"RECEIVE_REFERRAL","transitions":["A referral destination: raised → Waiting","The front door — an expect becomes a referral: Raised → Expected to arrive"],"writes":""},{"name":"Add a person who is not on file","event":"ADD_PATIENT","transitions":[],"writes":"Creates a patient record."},{"name":"Record whether they are medically cleared","event":"RECORD_MEDICAL_CLEARANCE","transitions":["The front door — an expect becomes a referral: In the department → Medically cleared — or not","The front door — an expect becomes a referral: Expected to arrive → Medically cleared — or not"],"writes":"Replaces the referral answer and the matching movements’ clearance. Positive re-clearance stamps resumedAt and restates their blocker; it does not restore a released bed or booking."},{"name":"Mark that an expected patient has turned up","event":"RECORD_ARRIVED_IN_DEPARTMENT","transitions":["The front door — an expect becomes a referral: Expected to arrive → In the department"],"writes":"The arrival time, on a referral. Stamped once; a repeat is harmless."},{"name":"Accept the referral","event":"ACCEPT_REFERRAL","transitions":["A referral destination: Waiting → Accepted","A referral destination: Declined → Accepted","A referral destination: Waiting → Cancelled","A notice: Nothing sent → Raised, unread"],"writes":""},{"name":"Decline the referral","event":"DECLINE_REFERRAL","transitions":["A referral destination: Waiting → Declined"],"writes":""},{"name":"The referrer takes the referral back","event":"RECORD_REFERRER_WITHDRAWAL","transitions":["A referral destination: Waiting → Withdrawn — a flag, not a state"],"writes":""},{"name":"Add a correction to a referral","event":"ADD_REFERRAL_CORRECTION","transitions":[],"writes":"Appends a correction note to a referral. Never overwrites."},{"name":"Record that a bed closer to home was looked for","event":"RECORD_LOCAL_BED_SOUGHT","transitions":[],"writes":"That a closer-to-home bed was looked for, on a referral."},{"name":"Start a bed search from a department","event":"RAISE_REFERRAL","transitions":["A movement: Movement created → Placement requested"],"writes":""},{"name":"Ask one or more wards","event":"REFER_TO_UNITS","transitions":["A movement: Placement requested → Destination review","A movement: Destination review → Destination review"],"writes":""},{"name":"A ward accepts in principle","event":"ACCEPT_IN_PRINCIPLE","transitions":["A movement: Destination review → Accepted, awaiting bed"],"writes":""},{"name":"A ward declines the bed search","event":"DECLINE","transitions":["A movement: Destination review → Destination review"],"writes":""},{"name":"Take back one ward's request","event":"WITHDRAW_WARD_REQUEST","transitions":["A movement: Destination review → Destination review"],"writes":""},{"name":"Undo a ward's acceptance","event":"WITHDRAW_ACCEPTANCE","transitions":["A movement: Accepted, awaiting bed → Destination review","A movement: Bed pulled → Destination review"],"writes":""},{"name":"Abandon the bed search","event":"WITHDRAW_REFERRAL","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","A movement: Handover ready → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Send them to a community team instead","event":"REFER_TO_COMMUNITY_TEAM","transitions":["A movement: Bed pulled → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"The department decides they need no bed","event":"RECORD_ED_OUTCOME","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Placement requested → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","A movement: Handover ready → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Record that nobody referred them","event":"RECORD_NO_REFERRAL","transitions":[],"writes":"That nobody referred this patient, on a movement."},{"name":"Record an escalation","event":"RECORD_ESCALATION","transitions":[],"writes":"The wards tried and who was contacted, on a movement."},{"name":"Correct the record backwards","event":"STEP_BACK_STAGE","transitions":["A movement: Moving → Placement requested","A movement: Destination review → Placement requested","A movement: Accepted, awaiting bed → Placement requested","A movement: Bed pulled → Placement requested","A movement: Handover ready → Placement requested"],"writes":""},{"name":"Take the bed","event":"PULL_PATIENT","transitions":["A movement: Accepted, awaiting bed → Bed pulled","An admission: No admission → Held"],"writes":""},{"name":"Give the held bed back","event":"RELEASE_PULL","transitions":["A movement: Bed pulled → Accepted, awaiting bed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Release a bed left held by a stopped journey","event":"RELEASE_HELD_BED","transitions":["An admission: Held → Removed — not a state"],"writes":""},{"name":"Record whether transport is needed","event":"RECORD_TRANSPORT_NEED","transitions":[],"writes":"Whether transport is needed, on a movement. This is what allows arrival with no journey."},{"name":"Book the transport","event":"BOOK_TRANSPORT","transitions":["A transport job: No job → Booked"],"writes":""},{"name":"Confirm handover is ready","event":"HANDOVER_READY","transitions":["A movement: Bed pulled → Handover ready"],"writes":""},{"name":"The crew accepts the job","event":"TRANSPORT_ACCEPTED","transitions":["A transport job: Booked → Crew accepted"],"writes":""},{"name":"The crew sets off","event":"TRANSPORT_EN_ROUTE","transitions":["A transport job: Crew accepted → En route"],"writes":""},{"name":"The patient is picked up","event":"PATIENT_COLLECTED","transitions":["A movement: Handover ready → Moving","A transport job: En route → Collected"],"writes":""},{"name":"The ward says they have arrived","event":"PATIENT_ARRIVED","transitions":["A movement: Moving → Arrived","A movement: Bed pulled → Arrived","A movement: Arrived → Closed — did not proceed","An admission: Held → Occupied","A transport job: Collected → Arrived"],"writes":""},{"name":"Cancel the transport before collection","event":"CANCEL_TRANSPORT","transitions":["A transport job: Booked → No job","A transport job: Crew accepted → No job","A transport job: En route → No job"],"writes":""},{"name":"Stop the journey after collection","event":"STOP_TRANSPORT","transitions":["A movement: Moving → Closed — did not proceed","A transport job: Collected → Stopped"],"writes":""},{"name":"Record that they have left the department","event":"RECORD_LEFT_DEPARTMENT","transitions":[],"writes":"The time they physically left the department, on a movement."},{"name":"Record an examination outcome","event":"RECORD_EXAMINATION","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Placement requested → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","An admission: Held → Removed — not a state","An examination: Not examined → Further examination ordered","An examination: Not examined → Inpatient order","An examination: Not examined → Community order, or revoked","An examination: Further examination ordered → Superseded"],"writes":""},{"name":"Change the legal status","event":"CHANGE_LEGAL_STATUS","transitions":["A patient's legal status: Voluntary → Referred for psychiatric examination","A patient's legal status: Referred for psychiatric examination → Detained awaiting examination","A patient's legal status: Detained awaiting examination → Involuntary inpatient","A patient's legal status: Involuntary inpatient → Voluntary"],"writes":"The Mental Health Act status, on a movement, plus a log entry. Triggers nothing."},{"name":"Mark a form as physically received","event":"RECORD_LEGAL_FORM_RECEIVED","transitions":["A legal form's receipt: Not recorded as received → Recorded as received"],"writes":"That the Form 1A physically arrived, on a movement."},{"name":"Undo a form receipt","event":"CORRECT_LEGAL_FORM_RECEIPT","transitions":["A legal form's receipt: Recorded as received → Not recorded as received"],"writes":"Clears that receipt and appends the correction."},{"name":"Record or extend a form's expiry","event":"RECORD_LEGAL_FORM_EXPIRY","transitions":["A legal form's receipt: Recorded as received → An expiry, typed by a clinician","A legal form's receipt: Not recorded as received → An expiry, typed by a clinician"],"writes":"Stores the typed expiry, clears any calculated legacy clock, appends basis/author/time history and, for a correction, its previous facts and reason."},{"name":"Correct the recorded gender","event":"RECORD_MOVEMENT_GENDER","transitions":[],"writes":"The recorded gender on a movement, plus a notice if a bed is involved."},{"name":"Record that the patient has left","event":"RECORD_LEAVING","transitions":["An admission: Occupied → Departed","A bed release: Confirmed → Discharged","A bed release: Expected → Discharged","A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag"],"writes":""},{"name":"Record that they are away at an ED","event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","transitions":["An admission: Occupied → Occupied"],"writes":""},{"name":"Record that they are back","event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","transitions":["An admission: Occupied → Occupied"],"writes":""},{"name":"Record a bed as on leave","event":"RECORD_LEAVE_BED","transitions":[],"writes":"Creates a leave record against a ward's bed."},{"name":"End a bed's leave","event":"END_LEAVE_BED","transitions":[],"writes":"Removes that leave record."},{"name":"Flag a bed as coming free","event":"FLAG_BED_RELEASE","transitions":["A bed release: Not flagged → Expected"],"writes":""},{"name":"Confirm the discharge is going ahead","event":"CONFIRM_BED_RELEASE","transitions":["A bed release: Expected → Confirmed"],"writes":""},{"name":"Put a confirmed discharge back to expected","event":"REVERT_BED_RELEASE","transitions":["A bed release: Confirmed → Expected"],"writes":""},{"name":"Flag a discharge as stuck","event":"BLOCK_BED_RELEASE","transitions":["A bed release: Expected → Stuck — a flag, not a stage","A bed release: Confirmed → Stuck — a flag, not a stage"],"writes":""},{"name":"Clear the stuck flag","event":"CLEAR_BED_RELEASE_BLOCK","transitions":["A bed release: Stuck — a flag, not a stage → Expected"],"writes":""},{"name":"Mark a bed as being made ready","event":"SET_BED_PREPARATION","transitions":["A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag","A bed release: Discharged → Being made ready — a flag"],"writes":""},{"name":"Restate how many beds a ward has","event":"CONFIRM_CAPACITY","transitions":[],"writes":"Sets a ward's allocatable count outright — see the two bed counts."},{"name":"Record what is restricting a ward's intake","event":"RECORD_WARD_INTAKE_CONSTRAINTS","transitions":[],"writes":"Replaces a ward's list of intake restrictions."},{"name":"Ask a ward to refresh its numbers","event":"REQUEST_CAPACITY_REFRESH","transitions":[],"writes":"Logs that somebody asked a ward to refresh. Moves no count."},{"name":"Change how urgent it is","event":"CHANGE_URGENCY","transitions":[],"writes":"The urgency level on a movement, plus a log entry. Re-sorts nothing."},{"name":"Flag it urgent","event":"FLAG_MOVEMENT_URGENT","transitions":[],"writes":"The urgent flag on a movement, and opens a history entry."},{"name":"Clear the urgent flag","event":"CLEAR_MOVEMENT_URGENT_FLAG","transitions":[],"writes":"Clears that flag and closes the history entry."},{"name":"Say what is holding this up","event":"RECORD_MOVEMENT_BLOCKER","transitions":[],"writes":"Free text describing what is holding a movement up."},{"name":"Say nothing is holding it up","event":"CLEAR_MOVEMENT_BLOCKER","transitions":[],"writes":"Writes the sentinel meaning nothing is holding it up."},{"name":"Mark a notice read","event":"MARK_NOTICE_READ","transitions":["A notice: Raised, unread → Read"],"writes":"Who read a notice, and when."},{"name":"Acknowledge an inbox row","event":"ACKNOWLEDGE_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Not showing → Showing","A row in the coordinator's inbox: Showing → Acknowledged"],"writes":"Logs that a coordinator has seen an inbox row."},{"name":"Tick off an inbox row","event":"COMPLETE_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Showing → Commitment completed"],"writes":"Appends completed role/time history without mutating patient, movement or unit facts."},{"name":"Reopen a completed row","event":"REOPEN_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Commitment completed → Showing"],"writes":"Logs an inbox row as reopened, keeping that it was once done."},{"name":"Move the demonstration clock","event":"ADVANCE_CLOCK","transitions":[],"writes":"Adds the simulation clock offset; the provider also follows wall time at visible minute ticks."},{"name":"Reset the board","event":"RESET_SCENARIO","transitions":[],"writes":"Re-seeds all board state around the current visible time and clears the simulation offset, preserving the visible clock rather than always selecting the standard scenario."},{"name":"Switch to a different simulated night","event":"SET_SCENARIO","transitions":[],"writes":"Replaces the whole board with a different simulated night."},{"name":"Change the coordinator's settings","event":"SET_CONFIGURATION","transitions":[],"writes":"Applies the validated configuration or field merge atomically. It does not silently overwrite a conflicting baseline."},{"name":"Record a patient’s physical departure","event":"RECORD_PATIENT_DISCHARGE","transitions":[],"writes":"Departs the stay through the shared departure helper, adjusts resources, retains audit and a bounded step-undo record. A stale or inaccessible request refuses."},{"name":"Open an authorised discharge record","event":"OPEN_DISCHARGE_RECORD","transitions":[],"writes":"Records an accepted read audit event; changes no admission or bed figure."},{"name":"Record a governance review","event":"REVIEW_AUDIT_EVENT","transitions":[],"writes":"Appends a uniquely sequenced review and its audit record. A later review changes the expected count; UNDO_AUDIT_REVIEW is a separate recorded action."},{"name":"Divert a journey already under way","event":"RECORD_DIVERSION","transitions":[],"writes":"That a journey already under way was diverted, with a reason and where the patient went instead."},{"name":"Give back the bed a diverted patient was holding","event":"RELEASE_DIVERTED_BED","transitions":[],"writes":"Gives back the bed a diverted movement was still holding. Refused unless it really was diverted."},{"name":"Record how and when they are expected","event":"SET_ARRIVAL_DETAILS","transitions":[],"writes":"Stores arrival mode, optional tracking and estimate, retaining first-record author/time and later update provenance. Keeps the pull-expiry timer. An already-late estimate can send one-time ED/ward notices; it reserves no bed and moves no stage."},{"name":"Work out whether an expected arrival is late","event":"EVALUATE_ARRIVAL_LATENESS","transitions":[],"writes":"When late, stamps the movement and sends ED and ward notices; changes no stage."},{"name":"Mark somebody as a step-down candidate","event":"SET_STEP_DOWN_CANDIDATE","transitions":[],"writes":"Whether this admission is a candidate to step down to a lower level of care."},{"name":"Record what is holding a discharge up","event":"SET_DISCHARGE_BARRIER","transitions":[],"writes":"Stores a listed discharge barrier or clears it; no seven-day reducer gate and no bed count change."},{"name":"Record clinically ready and why not gone","event":"SET_CLINICALLY_READY","transitions":[],"writes":"Stores the day an on-ward patient became clinically ready and one listed reason they have not gone, or clears both (Josh, 9 Nov 2026); no bed count change."},{"name":"Set or move the expected discharge date","event":"UPDATE_EXPECTED_DISCHARGE","transitions":[],"writes":"Sets the expected time, increments date-move count only when an existing date differs, and stamps when. A ward setter is Nurse in charge; coordinator setter is null. Pending linked bed-release dates follow; completed release dates stay historical."},{"name":"Record care journey fact","event":"RECORD_ADMISSION_CARE","transitions":["A movement: Movement created → Arrived","An admission: Occupied → Departed","An admission: No admission → Occupied","A bed release: Confirmed → Discharged","A bed release: Expected → Discharged","A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag"],"writes":""},{"name":"Record follow-up arrangement","event":"RECORD_ADMISSION_FOLLOW_UP","transitions":[],"writes":"Follow-up contact arrangements recorded against an admission on the discharge board."},{"name":"Record medical clearance against the movement","event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","transitions":[],"writes":"Replaces clearance on the movement, matching linked referral and matching sibling movements. Positive fresh clearance records resumedAt for satisfied pauses; it does not restore released resources."},{"name":"Attach a file to the movement","event":"UPLOAD_PATIENT_FORM","transitions":[],"writes":"Appends generated document id, formName, fileType, sizeBytes and role/time metadata; no file body or original filename is retained."},{"name":"Record that a legal form was written","event":"RECORD_LEGAL_FORM_WRITTEN","transitions":[],"writes":"Stores current paper facts and history, preserves matching same-form paper facts on a time edit, and clears a calculated legacy clock. A different form clears the old receipt."},{"name":"Record that a form was continued","event":"RECORD_LEGAL_FORM_CONTINUATION","transitions":[],"writes":"The continued form and clinician-typed times; clears the old legal clock."},{"name":"Record a typed country Form 1A extension","event":"RECORD_COUNTRY_EXTENSION","transitions":[],"writes":"For eligible country Form1A, records typed paper expiry through the ordinary expiry handler; computes no statutory deadline."},{"name":"Flag that the ward's authority does not match","event":"FLAG_LEGAL_MISMATCH","transitions":[],"writes":"That a ward's authority does not match this person's legal status, in one of two shapes."},{"name":"Start a forty-eight-hour or seven-day clock by hand","event":"RAISE_EXPECT_FLAG","transitions":[],"writes":"Records the current manually raised flag. Replacing a previously cleared flag keeps that prior record in expectFlagHistory; no automatic state transition is implied."},{"name":"Clear that hand-set clock","event":"CLEAR_EXPECT_FLAG","transitions":[],"writes":"Stamps clearedAt and clearedBy on the flag; it is retained rather than removed."},{"name":"Give the bed back and reopen the search, in one act","event":"RELEASE_AND_REOPEN_SEARCH","transitions":[],"writes":"Returns any matching held bed, clears acceptance/hold/requests/transport and moves to placement_requested. Logs pull release when held, otherwise acceptance withdrawal."},{"name":"Confirm the ward's morning count","event":"CONFIRM_MORNING_ROLLUP","transitions":[],"writes":"A ward confirming its own morning count of expected discharges."},{"name":"Send a message to a ward","event":"SEND_WARD_BUZZ","transitions":[],"writes":"Appends a refresh request with a listed message and optional urgency; blank messages refuse and nothing is sent externally."},{"name":"Sweep the beds held during leave","event":"EVALUATE_LEAVE_BED_WARNINGS","transitions":[],"writes":"For each leave bed over the open-warning threshold that has not been warned, records openWarningAt and sends a ward notice. It does not release the bed or move capacity."},{"name":"Log a repatriation arranged by phone","event":"RECORD_REPATRIATION","transitions":[],"writes":"Creates or updates the telephone plan. First agreement creates an open placement_requested return movement linked to the source stay; it does not itself book transport or transfer the patient."},{"name":"Sign off the shift handover","event":"RECORD_HANDOVER_SIGN_OFF","transitions":[],"writes":"Appends role/time plus the selected ward id or network flag. It records no personal name/note and makes no claim that a sheet was sent."},{"name":"Record that a team was contacted","event":"RECORD_CLINICAL_CONTACT","transitions":[],"writes":"Which community team was contacted, when, and by which role."},{"name":"Send a network-wide alert","event":"DISPATCH_BROADCAST_ALERT","transitions":[],"writes":"A network-wide alert, active, with nobody yet acknowledging it. Belongs to no patient."},{"name":"Acknowledge a network-wide alert","event":"ACKNOWLEDGE_BROADCAST_ALERT","transitions":[],"writes":"One more unit on the alert's acknowledged list."},{"name":"Stand down a network-wide alert","event":"STAND_DOWN_BROADCAST_ALERT","transitions":[],"writes":"The alert marked stood down, with the time and the role."}]},"catalogue":[{"event":"RECORD_ADMISSION_CARE","roles":["ward","coordinator","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":20},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":214},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1466}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ADMISSION_FOLLOW_UP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":21},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":214},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1465}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_PATIENT_DISCHARGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":22},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1464}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"UPDATE_EXPECTED_DISCHARGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":23},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":226},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1658}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"OPEN_DISCHARGE_RECORD","roles":["coordinator","ward","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":25},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":179},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1461}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REVIEW_AUDIT_EVENT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":26},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":132},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1462}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RAISE_REFERRAL","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":37},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1459},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":92}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_EXAMINATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":38},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":553},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1758}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_MEDICAL_CLEARANCE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":39},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":171},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1749}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ARRIVED_IN_DEPARTMENT","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":43},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":220},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1750}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_TRANSPORT_NEED","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":52},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":233},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1751}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_RECEIVED","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":59},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":438},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1432}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CORRECT_LEGAL_FORM_RECEIPT","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":65},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1739},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":429}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_EXPIRY","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":75},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1363},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1755}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_MOVEMENT_GENDER","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":80},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":484},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1756}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_NO_REFERRAL","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":81},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":301},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1752}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ED_OUTCOME","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":84},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":332},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1753}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REFER_TO_UNITS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":85},"sources":[{"path":"src/components/ward-management/ward-flow-overridable-events.ts","line":24},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1741},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":675}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACCEPT_IN_PRINCIPLE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":86},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":897},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":108}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PULL_PATIENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":90},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":79},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":701}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"DECLINE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":91},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1792},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":240}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"HANDOVER_READY","roles":["ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":94},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1887},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TRANSPORT_ACCEPTED","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":95},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1888},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":128}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TRANSPORT_EN_ROUTE","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":96},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1889},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":178}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PATIENT_COLLECTED","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":97},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1890},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":229},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":11}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PATIENT_ARRIVED","roles":["officer","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":98},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1489},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":315}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_CAPACITY","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":100},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":300},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1660}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_WARD_INTAKE_CONSTRAINTS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":103},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":771},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1765}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_INTAKE_WINDOW","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":105},"sources":[{"path":"src/components/ward-management/ward-flow-intake-window-events.ts","line":15},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1832}],"status":"modelled","model":{"subject":"One ward's intake window for tonight (Unit.intakeWindow)","before":"Ward has no intake window, or has one","after":"intake sets from, to, at and by; intake null removes the window","payload":["unitId; actingUnitId; intake {from, to} as whole-minute instants, or null to clear","role and now"],"scope":"Ward for itself (actingUnitId must equal unitId) or coordinator. EVENT_ROLE alone is not place authority.","guards":["A ward acting for another ward is refused; unknown unit refused","Clearing needs an existing window; start within today's intake day; end after start and within a day"],"effects":["Information only: moves no counts, blocks no referral and ranks no ward","Shown on Capacity's Tonight's intake windows card and the ward's own control"],"sources":[{"path":"src/components/ward-management/ward-flow-intake-window-events.ts","line":23,"sha256":"684c43bea941ad6f148ed493ee263dc60d9d21199df62f32203403047e6b91de"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":105,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":607,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"}],"tests":["tests/ward-intake-window.test.ts"]},"reason":"Source-reviewed command model: sets or clears one ward's intake hours for tonight; information only."},{"event":"RECORD_ESCALATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":106},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1069},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1772}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADVANCE_CLOCK","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":107},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1703}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RESET_SCENARIO","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":108},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1481}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_SCENARIO","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":109},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1481}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_CONFIGURATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":111},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1714}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CHANGE_URGENCY","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":114},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1745},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1178}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CHANGE_LEGAL_STATUS","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":115},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1746},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_PULL","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":116},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":493},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1881}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EXTEND_PULL","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":118},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":454},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1880}],"status":"modelled","model":{"subject":"One open movement whose bed is pulled now","before":"A pulled bed with its Pull time limit","after":"The same pulled bed with a later Pull time limit and one more pullExtensions entry","payload":["movementId; minutes (60, 120 or 240 from PULL_HOLD_EXTENSION_MINUTES); actingUnitId for a ward caller; now; role."],"scope":"coordinator and ward in the role table; a ward acts only for the unit holding the bed (claim, not proof).","guards":["The movement exists, is not closed, is at stage pulled with a Pull time limit, and its patient has not been collected.","minutes is on the fixed list.","The new limit stays within PULL_HOLD_MAX_TOTAL_MINUTES (12 hours) of the pull; a lapsed limit is extended from now."],"effects":["Moves Movement.pullExpiresAt later and appends { at, by, minutes } to Movement.pullExtensions; no bed count, stage or notice changes. PULL_PATIENT clears the list on a new pull."],"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":454,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-bed-hold-extension.ts","line":48,"sha256":"668e77dbccc3fcaa5409abea768e539bb949659a919c68a81b0bfb4578cd04dc"}],"tests":["tests/ward-extend-pull.test.ts"]},"reason":"Reviewed command model (feature 11, 9 Nov 2026): the ward or coordinator adds a fixed amount to a pulled bed's Pull time limit."},{"event":"BOOK_TRANSPORT","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":155},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1892},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CANCEL_TRANSPORT","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":177},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1893},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":840}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STOP_TRANSPORT","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":187},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1894},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1018}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_TRANSPORT_CAD","roles":["ed","ward","community","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":190},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1897},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1131},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":30}],"status":"modelled","model":{"subject":"A movement’s current transport job","before":"Live, unarrived, uncancelled transport with no nonblank CAD number","after":"Same job carrying a trimmed CAD number and cadAdded time/role","payload":["movementId; cadNumber is required text, trimmed after validation","actingUnitId required in practice for ward callers; role and now"],"scope":"ED, ward, community, coordinator or officer in EVENT_ROLE. Ward acts only for the sending stay/ward; shared scope also restricts ED to origin ED and community to the sending team. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Existing open movement and live job; no existing nonblank CAD number","Reject blank or placeholder CAD values; ward’s actingUnitId must identify the sending ward"],"effects":["Updates only movement.transport.cadNumber and cadAdded; does not dispatch, accept or advance the job"],"sources":[{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1126,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":191,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":30,"sha256":"1ebf665a65645eb14f53647d07db90bef0a947b2a7e298f2b6f203b7c78d3496"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-transport-cad-to-follow.test.ts"]},"reason":"Source-reviewed command model: Same job carrying a trimmed CAD number and cadAdded time/role."},{"event":"RELEASE_HELD_BED","roles":["coordinator","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":192},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":619},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1882}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_DIVERSION","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":194},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1096},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1773}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_DIVERTED_BED","roles":["coordinator","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":196},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":687},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1883}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REFER_TO_COMMUNITY_TEAM","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":197},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1740},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":477}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEFT_DEPARTMENT","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":198},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":533},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1757}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_CREW_TIMES","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":200},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1373},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1786}],"status":"modelled","model":{"subject":"One ED-origin movement whose arrivalMode is police or ambulance","before":"crewArrivedAt, crewHandedOverAt and crewReleasedAt absent, or some already typed","after":"Each typed time is set on the movement; a time left out keeps what was recorded","payload":["movementId; optional crewArrivedAt, crewHandedOverAt and crewReleasedAt (typed clock times)","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist, have come through an emergency department and have arrivalMode police or ambulance","A finite current time; at least one time; each typed time finite, not later than now and within the last 24 hours","The recorded set must run in order: arrived, handed over, released"],"effects":["Sets only the typed times; never clears, fills in or derives a time","Does not change the stage, beds, queue order or any legal figure; no target, countdown or overdue state"],"sources":[{"path":"src/components/ward-management/ward-crew-handover.ts","line":128,"sha256":"e03c42feb71f228fbb2b07f987ddee2dfce355bcf900136aa81ef7369906ec2a"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1374,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1787,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":201,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-crew-times.test.ts","tests/ward-ed-crew-times.dom.test.tsx","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (item 9, D-93): records a police or ambulance crew's typed times on an ED arrival; nothing is filled in or worked out."},{"event":"RECORD_ARRIVAL_MODE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":202},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1376},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1787}],"status":"modelled","model":{"subject":"One ED-origin movement","before":"arrivalMode absent, self, or the other crew mode","after":"Movement.arrivalMode = police or ambulance; recorded crew times are kept","payload":["movementId; arrivalMode (police or ambulance)","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist and have come through an emergency department","arrivalMode must be police or ambulance","The same mode again changes nothing"],"effects":["Sets only arrivalMode; the record then offers the crew's three typed times (RECORD_CREW_TIMES)","Does not change the stage, beds, queue order, crew times or any legal figure"],"sources":[{"path":"src/components/ward-management/ward-crew-handover.ts","line":153,"sha256":"e03c42feb71f228fbb2b07f987ddee2dfce355bcf900136aa81ef7369906ec2a"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1377,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1788,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":203,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-crew-times.test.ts","tests/ward-ed-crew-times.dom.test.tsx","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (D-141, 11 Nov 2026): marks an ED arrival \"Brought by: Police\" or \"Ambulance\" so its crew times can be typed; a fixed two-value choice, no typed text."},{"event":"FLAG_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":205},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":374},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1661}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":206},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":468},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1662}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REVERT_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":210},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":507},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1663}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"BLOCK_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":211},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":546},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1664}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_BED_RELEASE_BLOCK","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":212},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":586},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1665}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_BED_PREPARATION","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":213},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":623},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1666}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEAVE_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":214},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1352},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":369},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1766}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"END_LEAVE_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":215},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":658},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1667}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ABSENT_WITHOUT_LEAVE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":219},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1353},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":424},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1767}],"status":"modelled","model":{"subject":"An occupied admission and its held leave-bed record","before":"Occupied stay, not away at ED, with no recorded absence","after":"Leave-bed record carries absentWithoutLeave {since,steps:[]}; stay remains occupied","payload":["admissionId; actingUnitId must match the stay’s ward; role and now"],"scope":"Ward or coordinator; every caller supplies the admission ward claim. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Stay must exist and be occupied","Reject another ward, existing absence, or a stay recorded away at an ED"],"effects":["Updates an existing leave-bed record or creates one with expectedReturn=now; preserves existing leave details","Keeps the admission and bed occupancy; return is recorded separately through END_LEAVE_BED"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":424,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":221,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1396,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts","tests/ward-away-from-ward-exclusive.test.ts"]},"reason":"Source-reviewed command model: Leave-bed record carries absentWithoutLeave {since,steps:[]}; stay remains occupied."},{"event":"RECORD_ABSENCE_STEP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":220},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1354},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":476},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1768}],"status":"modelled","model":{"subject":"An existing absence without leave","before":"Absence has no record of this listed missing-person step","after":"Same absence with one timed step appended","payload":["admissionId; actingUnitId; step from ABSENCE_STEPS; role and now"],"scope":"Ward or coordinator; actingUnitId must equal the absence record’s unit. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["An absence record must exist for the admission","Step must be listed, not already recorded, and not earlier than absence.since"],"effects":["Appends {step,at} to absentWithoutLeave.steps; does not end absence, release a bed or contact anyone"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":476,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":222,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1405,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Same absence with one timed step appended."},{"event":"RECORD_COMMUNITY_TREATMENT_ORDER","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":221},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1364},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":155},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1769}],"status":"modelled","model":{"subject":"A patient’s recorded community treatment order","before":"Patient exists with no current order, no occupied stay and no open non-arrived placement","after":"Form 5A recorded with time and desk label; any ended order retained in earlier history","payload":["patientId; role and now; no user-supplied lapse time"],"scope":"Community or coordinator. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Reject missing patient or a current order without endedAt","Reject an occupied admission or open movement whose stage is not arrived; waitlisted/pulled stays alone do not block"],"effects":["Writes patient.communityTreatmentOrder; moves prior ended order and its earlier history into earlier","No automatic expiry, placement, legal-status change or bed move","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window, filed against the patient record."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":155,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":223,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1414,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Form 5A recorded with time and desk label; any ended order retained in earlier history."},{"event":"END_COMMUNITY_TREATMENT_ORDER","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":222},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":671},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1668}],"status":"modelled","model":{"subject":"A patient’s current community treatment order","before":"Order exists and has no endedAt","after":"Same order retained with endedAt=now","payload":["patientId; role and now"],"scope":"Community or coordinator. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient and an unended order must exist; repeat ending is refused"],"effects":["Adds endedAt; retains the order and earlier history; no timer or automatic end","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window, filed against the patient record."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":669,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":224,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1421,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Same order retained with endedAt=now."},{"event":"RECORD_LEAVING","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":226},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1347},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":125},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1487}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"MARK_TRANSPORT_COLLECTED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":228},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1348},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":224},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1760}],"status":"modelled","model":{"subject":"One departed admission's waitingForTransport mark","before":"Admission departed with waitingForTransport (left the ward, transport still to come)","after":"waitingForTransport removed; the person leaves the Waiting for transport list","payload":["admissionId; actingUnitId","role and finite now"],"scope":"Ward or coordinator; actingUnitId must equal the admission's unit. EVENT_ROLE alone is not place authority.","guards":["Non-finite time refused","Unknown admission, another unit's admission, or an admission not waiting for transport refused"],"effects":["Clears the wait only: the bed was already freed when they left the ward (D-115 Ready count unchanged)"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":224,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":229,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-left-ward.ts","line":29,"sha256":"e1502ae05ba4ab5b28c4d8cf330a7ad579d7420b7e90f3bfaaab6b382b78eee0"}],"tests":["tests/ward-left-ward-transport.test.ts"]},"reason":"Source-reviewed command model: ends a departed person's wait for transport; no bed figure moves."},{"event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":240},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1349},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":260},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1762}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":241},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1350},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":296},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1763}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_STAY_DISCHARGE_BLOCKER","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":244},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1351},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":316},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1764}],"status":"modelled","model":{"subject":"An occupied admission and its pending bed releases","before":"Occupied stay with no blocker or another recorded blocker","after":"Stay blockReason and linked nondischarged releases carry the chosen blocker","payload":["admissionId; actingUnitId; blocker from BED_RELEASE_BLOCKERS; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal admission.unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Admission must exist, be occupied and match actingUnitId","blocker must be a nonempty member of BED_RELEASE_BLOCKERS"],"effects":["Replaces admission.blockReason","For all linked releases not discharged, updates blocker, blockedBy, blockerRecordedAt and confirmedAt; moves no capacity figure or bed state"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":316,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":246,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1856,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-stay-discharge-blocker.test.ts"]},"reason":"Source-reviewed command model: Stay blockReason and linked nondischarged releases carry the chosen blocker."},{"event":"CLEAR_STAY_DISCHARGE_BLOCKER","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":245},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":249},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1659}],"status":"modelled","model":{"subject":"An admission’s current discharge blocker","before":"Admission carries a non-null blockReason","after":"Admission blockReason=null; clearance retained on matching pending release or admission","payload":["admissionId; actingUnitId; optional reason from DISCHARGE_DELAY_CLEAR_REASONS; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal admission.unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Admission and a current blocker must exist","If reason supplied it must be listed; no default reason is invented"],"effects":["Clears the stay blocker","If a same-ward nondischarged release has the same blocker, clears its blocker/blockedBy and appends clearance history there; otherwise appends stayBlockClearances","Does not release the bed or change admission state"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":247,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":247,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1873,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-stay-discharge-blocker.test.ts"]},"reason":"Source-reviewed command model: Admission blockReason=null; clearance retained on matching pending release or admission."},{"event":"RECORD_OBSERVATION_LEVEL","roles":["ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":248},"sources":[{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1789}],"status":"modelled","model":{"subject":"An open movement or occupied admission and its agreeing live counterpart","before":"Target has its recorded observation and retained change-count token","after":"Named target and any agreeing linked open counterpart carry the new observation and append from/to history","payload":["target is {kind:movement,movementId,actingUnitId?} or {kind:admission,admissionId,actingUnitId}","observation is a valid Observation; expected editing token required once the target has prior changes; role and now"],"scope":"EVENT_ROLE applies. Ward movement updates require its accepted ward; admission target requires its ward claim and refuses ED callers. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Valid observation; target exists; movement open or admission bed occupied","New value must differ; token must match and linked records must agree; missing token refused after first recorded change","Seeded links without matching observations stay unlinked rather than silently overwriting the other record","Accepted edits require a safe retained sequence allocator below Number.MAX_SAFE_INTEGER; exhaustion refuses before writing.","Accepted observation sequence is reducer-generated from retained movement/admission history, independent of the audit counter; restore permits missing legacy metadata or positive safe integers and refuses zero, fractions and unsafe values."],"effects":["Updates observation and appends {at,sequence,from,to} on each linked record","No new placement or capacity allocation; staffing eligibility remains a separate pull check","Accepted observation history entries also carry sequence=max(all retained movement/admission observation sequences,0)+1; an agreeing linked counterpart receives that same edit sequence. PATIENT_ARRIVED uses retained accepted order before legacy minute timestamps. Genuinely unordered legacy ties retain the previous fallback; no historical order is invented.","An accepted edit marks its audit decision accepted with no reason code."],"sources":[{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33,"sha256":"7e10fb51b2f76135bdfacbcd7643473e686dd0eb797e9e7906e427cdf26563cd"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":250,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33,"sha256":"7e10fb51b2f76135bdfacbcd7643473e686dd0eb797e9e7906e427cdf26563cd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"}],"tests":["tests/ward-observation-levels.test.ts","tests/ward-observation-expected-token.test.ts","tests/ward-audit-s2-observation-join.test.ts","tests/ward-consolidated-domain-20261104.test.ts"]},"reason":"Source-reviewed command model: Named target and any agreeing linked open counterpart carry the new observation and append from/to history."},{"event":"RECORD_MOVEMENT_BLOCKER","roles":["ed","community","ward","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":288},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":714},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1761}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_MOVEMENT_BLOCKER","roles":["ed","community","ward","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":295},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2030}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"FLAG_MOVEMENT_TURNAROUND_PRIORITY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":316},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1917}],"status":"modelled","model":{"subject":"A waiting movement’s receiving-unit preference","before":"Waiting unplaced movement with an open suitable ward request and current turnaround source","after":"Same movement carries {unitId,flaggedAt,source}; no bed is promised","payload":["movementId; unitId; optional source cld or departure; finite now; role"],"scope":"Coordinator only, within its shared authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Unit and target must exist; current source must be CLD-ready occupied criteria with feature enabled, or confirmed unblocked departure on an occupied stay","Clinical/legal gates must pass (allocation/freshness and the helper’s locked-bed security exception are separate); open request must match selected unit","Movement must be open, not arrived and unaccepted","Same unit/source preference already recorded is refused"],"effects":["Sets turnaroundPriority only; does not hold capacity, discharge anybody, accept a request or advance stage","Selectors later hide a preference whose original readiness source no longer qualifies"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1907,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":318,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":708,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-turnaround-priority.ts","line":65,"sha256":"f4a062f776b7e676eb045bd32daf9aac4a636392dab5599a571687cbf47db4b8"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-cld-turnaround-priority.test.ts"]},"reason":"Source-reviewed command model: Same movement carries {unitId,flaggedAt,source}; no bed is promised."},{"event":"FLAG_REFERRAL_TURNAROUND_PRIORITY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":317},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1918}],"status":"modelled","model":{"subject":"A waiting referral’s receiving-unit preference","before":"Waiting unplaced referral with an open suitable ward request and current turnaround source","after":"Same referral carries {unitId,flaggedAt,source}; no bed is promised","payload":["referralId; unitId; optional source cld or departure; finite now; role"],"scope":"Coordinator only, within its shared authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Unit and target must exist; current source must be CLD-ready occupied criteria with feature enabled, or confirmed unblocked departure on an occupied stay","Clinical/legal gates must pass (allocation/freshness and the helper’s locked-bed security exception are separate); open request must match selected unit","Referral must still be queued with an unwithdrawn ward request; no linked movement may exist","Same unit/source preference already recorded is refused"],"effects":["Sets turnaroundPriority only; does not hold capacity, discharge anybody, accept a request or advance stage","Selectors later hide a preference whose original readiness source no longer qualifies"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1908,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":319,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":717,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-turnaround-priority.ts","line":65,"sha256":"f4a062f776b7e676eb045bd32daf9aac4a636392dab5599a571687cbf47db4b8"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-cld-turnaround-priority.test.ts"]},"reason":"Source-reviewed command model: Same referral carries {unitId,flaggedAt,source}; no bed is promised."},{"event":"MARK_REFERRAL_OPENED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":320},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1799},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":17}],"status":"modelled","model":{"subject":"One addressed ward’s copy of a referral","before":"Ward copy exists without openedAt","after":"Same copy has openedAt=now; answer state unchanged","payload":["referralId; unitId; actingUnitId; role and now"],"scope":"Ward or coordinator; actingUnitId must equal unitId even for the coordinator. Named copy preferred, otherwise an unnamed ward copy. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral and an applicable ward copy must exist","Reject mismatched actingUnitId and a copy already stamped opened"],"effects":["Stamps openedAt once; does not answer, stop the decision clock or alter decidedAt"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":102,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":322,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":732,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts"]},"reason":"Source-reviewed command model: Same copy has openedAt=now; answer state unchanged."},{"event":"REQUEST_REFERRAL_INFORMATION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":321},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1800},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":118}],"status":"modelled","model":{"subject":"One awaiting ward copy’s information checklist","before":"Ward copy queued and unwithdrawn","after":"New listed needs appended; existing open needs retained without duplication","payload":["referralId; unitId; needs is a nonempty list from REFERRAL_INFORMATION_NEEDS","actingUnitId optional in type but required for ward’s own-unit check; role and now"],"scope":"Ward for its own copy or coordinator; named copy preferred over unnamed. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Applicable ward copy must still await answer","Every need must be listed; at least one deduplicated need must not already be open"],"effects":["Appends {need,at,by} to informationNeeds; met historical needs can be requested again","No referral decision or decision-clock change"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":118,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":323,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":745,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts"]},"reason":"Source-reviewed command model: New listed needs appended; existing open needs retained without duplication."},{"event":"MARK_REFERRAL_INFORMATION_MET","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":323},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1801},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":55}],"status":"modelled","model":{"subject":"One information category requested by one or all current requesting wards","before":"At least one requested listed need remains unmet on a queued, unwithdrawn ward copy","after":"Selected open request(s) stamped metAt and metBy; checklist history retained","payload":["referralId; need from REFERRAL_INFORMATION_NEED_IDS","Exactly one target shape: wardUnitId string, or allRequestingWards:true; role and now"],"scope":"Sending ED/community/ward desk or coordinator. Ward requires referral.source=psychiatric_ward; shared boundary verifies the stored sender rather than destination ward identity. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Reject invalid/ambiguous target or off-list need","Named target requires awaiting copy and an unmet need; all-target needs at least one current matching request"],"effects":["Named target stamps its first unmet matching entry; all-target stamps matching unmet entries on every awaiting ward copy","Does not answer any ward or stop its decision clock"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":148,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":325,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":756,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts","tests/ward-sender-information-supplied.test.ts"]},"reason":"Source-reviewed command model: Selected open request(s) stamped metAt and metBy; checklist history retained."},{"event":"ASSIGN_REFERRAL","roles":["coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":326},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1807},{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":21}],"status":"modelled","model":{"subject":"The desk chasing a front-door referral","before":"Referral not accepted or fully withdrawn; owner desk differs or is absent","after":"ownerHistory appended; its last owner is the current chasing desk","payload":["referralId; owner from REFERRAL_OWNER_DESKS; role and finite now"],"scope":"Coordinator may assign any listed owner desk; ED/community may take only for their own role. Not a lock on other permitted actions. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must exist and not be accepted or fully withdrawn; the follow-up helper does not require a queued arm","Owner must be listed; reject another desk’s self-assignment and same current owner"],"effects":["Appends {owner,at,by}; destinations, answers and decision clock unchanged"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":44,"sha256":"13b724abff93f6ec86c6b232d9ea7f00e66609f8297122508a7976198f8ce19e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":328,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":780,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-owner-and-calls.test.ts","tests/ward-referral-owner-and-calls-scope.test.ts"]},"reason":"Source-reviewed command model: ownerHistory appended; its last owner is the current chasing desk."},{"event":"LOG_REFERRAL_CONTACT","roles":["coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":327},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1808},{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":67}],"status":"modelled","model":{"subject":"A front-door referral’s call log","before":"Referral not accepted or fully withdrawn, with prior contact history or none","after":"New checked contact/outcome entry appended","payload":["referralId; contact is psychiatric_ward/unitId, community_team/teamId, or referrer","outcome from REFERRAL_CONTACT_OUTCOMES; role and finite now"],"scope":"Coordinator, ED or community, subject to record/place scope; contact names the called place, not acting authority. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must exist and not be accepted or fully withdrawn; the follow-up helper does not require a queued arm","Contact kind and outcome must be listed; named ward/team must exist"],"effects":["Appends checked {contact,outcome,at,by}; drops unrecognised contact fields","A logged call does not decide referral or pause its decision clock"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":67,"sha256":"13b724abff93f6ec86c6b232d9ea7f00e66609f8297122508a7976198f8ce19e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":329,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":795,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-owner-and-calls.test.ts"]},"reason":"Source-reviewed command model: New checked contact/outcome entry appended."},{"event":"RECORD_REFERRAL_COMMITMENT","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":329},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1815},{"path":"src/components/ward-management/ward-flow-referral-commitment-events.ts","line":24}],"status":"modelled","model":{"subject":"One awaiting ward copy’s response commitment","before":"Open referral awaiting this ward, commitment absent or not resolved","after":"Checked step/promise/callback entry appended without answering referral","payload":["referralId; unitId; actingUnitId for ward; role and finite now","step and/or nextCallbackAt required; promisedFor required only with step=promised","promisedFor and nextCallbackAt must be finite and at or after now"],"scope":"Coordinator records any listed step/callback; ward only its own acknowledged/promised step. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward and addressed, queued, unwithdrawn copy on open referral","Listed steps move forward; repeated response_requested and promised allowed; resolved blocks further entries","Ward cannot make callback-only entry; promise time refused on other steps"],"effects":["Appends commitment with unitId, at and desk label; keeps earlier entries","Does not change state, decidedAt, clocks or automatically call anyone"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-commitment-events.ts","line":24,"sha256":"a304422664462b4413fa82c9ae19d0425aef260d8ccf65239ca708d722b08994"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":331,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":812,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"},{"path":"src/components/ward-management/referrals/referral-commitments-model.ts","line":73,"sha256":"b8ad888efb64576aa225df86d86b58d9e31306fda7791fe9815a00a4c6c82325"}],"tests":["tests/ward-referral-commitments.test.ts"]},"reason":"Source-reviewed command model: Checked step/promise/callback entry appended without answering referral."},{"event":"ASK_MORE_WARDS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":330},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1821},{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24}],"status":"modelled","model":{"subject":"An open community referral’s addressed wards","before":"Open community referral has named ward request(s) with reusable bed requirements","after":"Additional named wards queued, preserving existing destinations","payload":["referralId; nonempty distinct unitIds named by coordinator; role and now"],"scope":"Coordinator only; no automatic ranking or suggestion. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must be community source and not closed/withdrawn","Existing ward request must name a ward; any unnamed ward arm blocks expansion","Each new unit must exist, not have been asked before, be open and currently eligible","Awaiting existing wards plus additions must stay within parallelReferralCap"],"effects":["Copies original ward bed requirements into each new queued arm; stamps referredAt and addedBy","Does not answer existing arms, create a movement or reserve a bed"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24,"sha256":"d3c249774b280ef5c1b57d1f4c7575d2dce9ef721ec1f85ed2ac2c53e7874d08"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":332,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24,"sha256":"d3c249774b280ef5c1b57d1f4c7575d2dce9ef721ec1f85ed2ac2c53e7874d08"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-ask-more-wards.test.ts"]},"reason":"Source-reviewed command model: Additional named wards queued, preserving existing destinations."},{"event":"CLOSE_WARD_TO_ADMISSIONS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":333},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1828},{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":17}],"status":"modelled","model":{"subject":"A ward’s admissions closure","before":"Known ward open to admissions","after":"isClosed=true with admissionsClosure reason/time/desk and optional expected reopening","payload":["unitId; reason from WARD_CLOSURE_REASONS; optional until","actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist and not already be closed","Listed reason; supplied until later than now and no farther than largest WARD_REOPEN_AFTER_HOURS choice"],"effects":["Writes closure record; existing holds/acceptances and bed figures remain","Eligibility/shortlists refuse new admissions; until is a prompt, never automatic reopening"],"sources":[{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":44,"sha256":"2fd18c518e21b86c1cda4b425c6cf5163251b409d3cddffd1f8a3b225f5142ef"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":335,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":831,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-closure.test.ts"]},"reason":"Source-reviewed command model: isClosed=true with admissionsClosure reason/time/desk and optional expected reopening."},{"event":"REOPEN_WARD_TO_ADMISSIONS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":334},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1829},{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":72}],"status":"modelled","model":{"subject":"A ward’s admissions closure","before":"Known ward marked closed","after":"isClosed=false; admissionsClosure removed","payload":["unitId; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist and be closed"],"effects":["Removes closure record rather than advancing any waiting move; changes no bed count","Reopening is a person’s action; old closure-linked review/transition records are no longer current"],"sources":[{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":72,"sha256":"2fd18c518e21b86c1cda4b425c6cf5163251b409d3cddffd1f8a3b225f5142ef"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":336,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":840,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-closure.test.ts","tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: isClosed=false; admissionsClosure removed."},{"event":"SET_BED_CLOSED","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":336},"sources":[{"path":"src/components/ward-management/ward-flow-bed-closure-events.ts","line":24},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1835}],"status":"modelled","model":{"subject":"One exact numbered bed’s closure mark","before":"Empty offerable bed is open, or numbered bed has active closed mark","after":"closed=true appends a mark; closed=false stamps active mark reopenedAt","payload":["unitId; actingUnitId; integer bedNumber within 1..unit.beds; closed boolean","Optional listed reason and optional review time (later than now, at most 48 hours) when closing; neither when reopening; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Closing rejects already-closed, occupied/replayed seat, pulled/held bed, or no Ready capacity","Reopening requires an active mark and refuses any supplied reason"],"effects":["Records exact numbered mark and retains reopening history; does not rewrite allocatable confirmation","Derived Ready excludes active closed marks and recovers after reopen; existing stay seating retained"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-closure-events.ts","line":56,"sha256":"a7fb4804deda7184f118bef984d2f6d7c61a4cd48f26da5976e6140cc6f26716"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":337,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":848,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":700,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-closed-mark.test.ts","tests/ward-bed-closed-mark-kinds.test.ts"]},"reason":"Source-reviewed command model: closed=true appends a mark; closed=false stamps active mark reopenedAt."},{"event":"RECORD_BED_MEETING_ACTION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":341},"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":30},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1869}],"status":"modelled","model":{"subject":"A movement or admission’s agreed meeting task","before":"Subject exists and has no open action of this kind","after":"meetingActions appended with chosen task, owner and due time","payload":["subject {kind:movement|admission,id}; action from BED_MEETING_ACTION_KINDS","owner from BED_MEETING_ACTION_OWNERS; known unitId required for ward owner; dueAt later than now; role and now"],"scope":"Coordinator chair only; owner names a role, not a person. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Subject exists; action/owner listed; ward owner must name known ward","Reject dueAt not later than now or an existing open same-kind action"],"effects":["Appends task with recordedAt; does not change patient stage, occupancy or placement","No automatic execution when due","Before a new occurrence reuses its stable meeting inbox id, append returned snooze and released ownership boundaries where prior histories exist. Even a same-minute replacement starts without the preceding occurrence owner/snooze; histories are retained and the new occurrence may be claimed/snoozed again."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":61,"sha256":"b28604a0b11e841e1daf151279719831992a89765e8553a84974993d57ed5e2c"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":343,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":866,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-meeting-actions.test.ts","tests/ward-consolidated-meeting-counts-20261104.test.ts"]},"reason":"Source-reviewed command model: meetingActions appended with chosen task, owner and due time."},{"event":"COMPLETE_BED_MEETING_ACTION","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":342},"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":105},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1870}],"status":"modelled","model":{"subject":"An open task on a movement or admission","before":"Chosen subject carries an open action of this kind","after":"Same action stamped doneAt and doneBy","payload":["subject {kind:movement|admission,id}; listed action; actingUnitId for ward owner; role and now"],"scope":"Coordinator or owning ward/ED/community role; ward must match ownerUnitId. Site bed manager denied by EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Subject and open listed action must exist","Caller must be coordinator or correct owning role/place"],"effects":["Retains task and stamps completion; does not enact the action or change subject’s stage"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":105,"sha256":"b28604a0b11e841e1daf151279719831992a89765e8553a84974993d57ed5e2c"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":344,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":881,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-meeting-actions.test.ts","tests/ward-bed-manager-actions.test.ts","tests/ward-consolidated-meeting-counts-20261104.test.ts"]},"reason":"Source-reviewed command model: Same action stamped doneAt and doneBy."},{"event":"RECORD_RESTRICTIVE_PRACTICE_START","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":346},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1842},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":61}],"status":"modelled","model":{"subject":"A ward’s operational restrictive-practice episodes","before":"Occupied stay on this ward with no open same-practice episode","after":"New episode with typed start and recording metadata appended","payload":["unitId; admissionId; practice from RESTRICTIVE_PRACTICE_IDS; startedAt","actingUnitId for ward; role and now; typed time finite and within last 24h, not future"],"scope":"Ward for itself or coordinator; site bed manager cannot record episodes. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward, occupied admission belonging to it, listed practice","Reject invalid typed time and duplicate open practice for same stay"],"effects":["Appends Unit.restrictivePractice.episodes with generated id, startedAt, recordedAt and desk label","No legal limit or order computed; no occupancy change; separate departure guards require open episodes ended"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":61,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":348,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":136,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts","tests/ward-audit-s3-restrictive-practice-departure.test.ts"]},"reason":"Source-reviewed command model: New episode with typed start and recording metadata appended."},{"event":"RECORD_RESTRICTIVE_PRACTICE_END","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":347},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1843},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":95}],"status":"modelled","model":{"subject":"One ward’s open restrictive-practice episode","before":"Episode exists without endedAt","after":"Same episode stamped with typed endedAt","payload":["unitId; episodeId; endedAt; actingUnitId for ward; role and now","endedAt finite, within last 24h, not future or before startedAt"],"scope":"Ward for itself or coordinator; site bed manager cannot end episodes. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward and open episode","Reject invalid/before-start typed time or already-ended episode; current admission occupancy is not required"],"effects":["Sets endedAt on episode and retains its start/recording metadata","No patient transfer, bed move or legal decision performed"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":95,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":349,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":147,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: Same episode stamped with typed endedAt."},{"event":"RECORD_RESTRICTIVE_PRACTICE_FOLLOW_UP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":349},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1844},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":109}],"status":"modelled","model":{"subject":"One restrictive-practice episode on a ward","before":"Episode ended, with its follow-up tasks marked so far","after":"The chosen follow-up task marked done or cleared","payload":["unitId; episodeId; task from RESTRICTIVE_PRACTICE_FOLLOW_UP_TASKS; done (boolean); now; role."],"scope":"ward or coordinator in the role table; authenticated reference scope applies.","guards":["The episode exists on the ward.","The episode has an end time recorded.","task is a listed follow-up task and done is a boolean."],"effects":["Sets or removes the task in the episode's followUp; an empty followUp is removed."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1836,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":109,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"}],"tests":["tests/ward-legal-form-gap-items.test.ts"]},"reason":"Reviewed command model: marks or clears one follow-up task on an ended restrictive-practice episode."},{"event":"RECORD_WARD_INCIDENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":350},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1845},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":131}],"status":"modelled","model":{"subject":"A ward’s operational incident list","before":"Known ward with existing or empty incident history","after":"New category/time incident appended","payload":["unitId; category from WARD_INCIDENT_CATEGORY_IDS; at finite within last24h and not future","actingUnitId for ward; role and now; no patient id or narrative"],"scope":"Ward for itself or coordinator; site bed manager cannot record incidents. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward, listed category and valid typed time"],"effects":["Appends ward incident id/category/at/recordedAt/recordedBy","No patient, bed, stay or legal record changes; detailed incident report remains outside this app"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":131,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":352,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":160,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: New category/time incident appended."},{"event":"SET_SECLUSION_ROOM_STATUS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":351},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1846},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":152}],"status":"modelled","model":{"subject":"A ward’s recorded seclusion-room availability","before":"Room status absent or different","after":"seclusionRoom replaced with status, time and desk label","payload":["unitId; status from SECLUSION_ROOM_STATUS_IDS; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward; listed status; repeat identical status refused"],"effects":["Writes only Unit.restrictivePractice.seclusionRoom","Does not start/end an episode or alter beds; selectors show an open seclusion episode as in use over the recorded availability"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":152,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":353,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":184,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: seclusionRoom replaced with status, time and desk label."},{"event":"MARK_CANCELLED_MOVE_CHECK","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":355},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":58},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1857}],"status":"modelled","model":{"subject":"A cancelled move’s follow-up checklist","before":"Move is cancelled, with prior mark or no mark for selected item","after":"Selected item’s mark replaced with addressed/not_applicable and time/desk","payload":["movementId; item from CANCELLED_MOVE_CHECK_ITEMS; mark from CANCELLED_MOVE_CHECK_MARKS","actingUnitId for ward; role and now"],"scope":"Coordinator or ward that accepted this move. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement exists and is cancelled; item/mark listed","Cannot mark pulled_bed addressed while cancelled move still holds a bed"],"effects":["Keeps one current mark per item; does not release beds, cancel transport or change movement stage"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":58,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":357,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":225,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Selected item’s mark replaced with addressed/not_applicable and time/desk."},{"event":"RECORD_ACCEPTANCE_CONDITION","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":356},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":79},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1858}],"status":"modelled","model":{"subject":"A standing acceptance’s operational conditions","before":"Open accepted move without this current condition","after":"New condition appended tied to acceptedUnitId and acceptedAt","payload":["movementId; condition from ACCEPTANCE_CONDITION_KINDS; agreedWith from its list","readyAt required only for bed_after_time: later than now and within largest ACCEPTANCE_BED_AFTER_HOURS choice","actingUnitId for ward; role and now"],"scope":"Coordinator or the accepting ward. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement must exist, be open and accepted","Reject duplicate current condition, off-list values, missing/out-of-range bed-after time or time on another condition"],"effects":["Appends condition and agreement provenance; does not hold a bed, change stage or modify eligibility","Times prompt review; no automatic condition completion"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":79,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":358,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":239,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: New condition appended tied to acceptedUnitId and acceptedAt."},{"event":"MARK_ACCEPTANCE_CONDITION_MET","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":357},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":80},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1859}],"status":"modelled","model":{"subject":"A current acceptance’s unmet condition","before":"Open accepted move has this current condition not met","after":"Condition retained with met {at,by}","payload":["movementId; listed condition; actingUnitId for ward; role and now"],"scope":"Coordinator or the accepting ward. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement open and accepted; selected current condition exists and is not already met"],"effects":["Stamps met on that exact condition; leaves stage, placement, capacity and acceptance unchanged"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":80,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":359,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":250,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Condition retained with met {at,by}."},{"event":"RECORD_RESTRICTION_REVIEW","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":358},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":139},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1860}],"status":"modelled","model":{"subject":"A ward’s active restriction review reminder","before":"Restriction currently active, with prior review or none","after":"One current review for restriction recorded/replaced","payload":["unitId; restriction from WARD_RESTRICTION_KINDS; reviewer from RESTRICTION_REVIEWER_ROLES","expectedAt later than now and within largest RESTRICTION_REVIEW_AFTER_HOURS choice; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward exists and named restriction is currently active; listed restriction/reviewer","Review time must be later than now and bounded by listed choices"],"effects":["Replaces review for same restriction, preserving others; closure review captures closure.startedAt","Does not lift restriction or reopen ward when time passes"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":139,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":360,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":262,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: One current review for restriction recorded/replaced."},{"event":"MARK_CLOSURE_TRANSITION_ITEM","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":359},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":169},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1861}],"status":"modelled","model":{"subject":"A closed ward’s current handover checklist","before":"Ward has admissionsClosure and selected still-pointing record is unmarked","after":"Closure transitionMarks appended with current derived item and recording metadata","payload":["unitId; item from CLOSURE_TRANSITION_ITEM_KINDS; actingUnitId for ward; role and now","Record id: referralId for referral, plannedAdmissionId for booked_arrival, movementId for other listed item kinds"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist, be closed and carry admissionsClosure","Item must still point at the ward according to closureTransitionItems and must not already be marked"],"effects":["Appends derived item with at/by to current closure; does not move, cancel, reassign or release the underlying record"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":169,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":361,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":276,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Closure transitionMarks appended with current derived item and recording metadata."},{"event":"FLAG_MOVEMENT_URGENT","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":360},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1970}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_MOVEMENT_URGENT_FLAG","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":361},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1994}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_REFERRAL","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":381},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1742},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":883}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REQUEST_CAPACITY_REFRESH","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":384},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":686},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1669}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECEIVE_REFERRAL","roles":["community","ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":399},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1793},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":362}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADD_PATIENT","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":403},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1678},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":39}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ARCHIVE_PATIENT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":405},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1680},{"path":"src/components/ward-management/ward-patient-archive-reducer.ts","line":10}],"status":"modelled","model":{"subject":"An erroneous standalone patient registration","before":"Patient has only registration fields and no care records/references elsewhere","after":"Patient removed from active patients list; audit event and sequence retained","payload":["patientId; reason from PATIENT_ARCHIVE_REASONS (duplicate, test, wrong_person); role and now"],"scope":"Coordinator only, with shared record scope applied. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; listed archive reason","Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact or any state/audit care reference; prior archive-attempt audit entries do not block"],"effects":["Filters patient from patients; keeps sequence so id is not reused","Reducer audit wrapper retains the archive event/reason; no care record is removed","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window."],"sources":[{"path":"src/components/ward-management/ward-patient-archive-reducer.ts","line":10,"sha256":"bfd91bd2e7955ee0c776cf1c8e5fb3ecb1dd76d2cd0d2c9a71a9789270b95898"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":407,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-archive.ts","line":30,"sha256":"2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3"},{"path":"src/components/ward-management/ward-patient-archive.ts","line":44,"sha256":"2738c8d1a80a5d8fc418865719058ee2603141bb9493d55954cae83742455eb3"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-patient-archive.test.ts"]},"reason":"Source-reviewed command model: Patient removed from active patients list; audit event and sequence retained."},{"event":"ACCEPT_REFERRAL","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":435},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":880},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":728}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"HOLD_REFERRAL_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":436},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1795},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":695}],"status":"modelled","model":{"subject":"An accepted ward arm’s exact numbered bed hold","before":"Current accepted, unwithdrawn ward arm without started bed journey; old numbered hold may exist","after":"Same arm carries chosen heldBedNumber","payload":["referralId; unitId; actingUnitId; bedNumber; role and now"],"scope":"Ward for its own beds or coordinator; shared place/record boundary also applies. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known referral and currently accepted arm for unit; no linked movement or pulled/occupied/departed referral stay","Ward open; numbered bed valid, free, unheld and of required kind","Recheck current suitability using only override already recorded at acceptance"],"effects":["Sets/reassigns arm.heldBedNumber; retains acceptance author/time and referral state","Does not mint movement/admission or overwrite allocatable confirmation; hold is considered by bed availability checks"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":680,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":438,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1554,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-review-engine-regressions.test.ts","tests/ward-override-surfaces.test.ts"]},"reason":"Source-reviewed command model: Same arm carries chosen heldBedNumber."},{"event":"DECLINE_REFERRAL","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":447},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1796},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1148}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LOCAL_BED_SOUGHT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":453},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1049},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1771}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_REFERRER_WITHDRAWAL","roles":["coordinator","community","ed","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":485},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":805},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1770}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADD_REFERRAL_CORRECTION","roles":["community","ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":492},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1744},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1124}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STEP_BACK_STAGE","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":499},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":751},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1884}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_ACCEPTANCE","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":500},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1797},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1308}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_WARD_REQUEST","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":503},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1743},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1069}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"MARK_NOTICE_READ","roles":["coordinator","ed","ward","officer","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":513},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2079},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":290}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACKNOWLEDGE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":534},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2080},{"path":"src/components/ward-management/ward-inbox-events.ts","line":41},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":312}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"COMPLETE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":535},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2081},{"path":"src/components/ward-management/ward-inbox-events.ts","line":71},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":350}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REOPEN_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":536},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082},{"path":"src/components/ward-management/ward-inbox-events.ts","line":99},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":385}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TAKE_INBOX_ITEM_OWNERSHIP","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":538},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2083},{"path":"src/components/ward-management/ward-inbox-events.ts","line":111},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":403}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Real current inbox row not already owned by this desk","after":"Ownership history appended; current owner is acting role’s label","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["Row must exist; same current owner for this occurrence refused"],"effects":["Appends {at,by} to inboxOwnership; underlying row/fact and its visibility unchanged"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":403,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":540,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":111,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Ownership history appended; current owner is acting role’s label."},{"event":"RELEASE_INBOX_ITEM_OWNERSHIP","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":539},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084},{"path":"src/components/ward-management/ward-inbox-events.ts","line":121},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":423}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Ownership history’s current entry belongs to acting role, applying a current-row start when available","after":"Ownership history appended with kind=released; ownership relinquished","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["A blank or non-text inboxItemId is refused before any history is read","Current owner must match acting role after filtering entries older than the row’s current occurrence, if a start is available; this branch does not independently require row existence"],"effects":["Appends released history entry; does not delete prior ownership, resolve fact or hide row"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":423,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":541,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":121,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-alerts-release-ownership.dom.test.tsx","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Ownership history appended with kind=released; ownership relinquished."},{"event":"SNOOZE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":540},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2085},{"path":"src/components/ward-management/ward-inbox-events.ts","line":133},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":439}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Real current inbox row visible or previously snoozed","after":"Latest snoozed entry hides row until chosen return time while fact remains","payload":["inboxItemId; reason from SNOOZE_REASON_IDS; finite until after now; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["Real row and listed reason","until within SNOOZE_MAX_MINUTES (currently24h); act-now row limited by RED_ROW_SNOOZE_CAP_MINUTES (currently60min)"],"effects":["Appends {kind:snoozed,at,by,until,reason}; no mutation of underlying patient/unit fact","Current-occurrence selectors return row when until passes or a newer occurrence starts"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":436,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":542,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":133,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Latest snoozed entry hides row until chosen return time while fact remains."},{"event":"UNSNOOZE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":541},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2086},{"path":"src/components/ward-management/ward-inbox-events.ts","line":142},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":473}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"History has an active snooze, applying a current-row start when available","after":"Snooze history appended with kind=returned; active snooze ends now","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["A blank or non-text inboxItemId is refused before any history is read","Active snooze must exist after occurrence filtering; expired or older-occurrence entry refused; this branch does not independently require row existence"],"effects":["Appends returned entry, retaining earlier history; an underlying row, if still present, returns to the active list without resolving its fact"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":470,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":543,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":142,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Snooze history appended with kind=returned; active snooze ends now."},{"event":"SET_ARRIVAL_DETAILS","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":542},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1895},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1170}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_STEP_DOWN_CANDIDATE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":543},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":706},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1670}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_WARD_DIAGNOSIS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":545},"sources":[{"path":"src/components/ward-management/ward-flow-diagnosis-events.ts","line":14},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2248}],"status":"modelled","model":{"subject":"One current admission","before":"No ward diagnosis, or a different ward diagnosis block","after":"Latest ward diagnosis block with recording time and desk","payload":["admissionId; block from TentativeDiagnosisBlock; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit; authenticated scoped access must also permit the admission.","guards":["Admission exists and is not departed.","Block is listed and differs from the current ward block."],"effects":["Replaces admission.wardDiagnosis only; does not overwrite the referrer's tentativeDiagnosis or move a bed."],"sources":[{"path":"src/components/ward-management/ward-flow-diagnosis-events.ts","line":29,"sha256":"c0c3188726823be6157098eb593cf59300372f9328512b293328cd76d8a16e4a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":547,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ward-diagnosis.test.ts"]},"reason":"Reviewed command model: Latest ward diagnosis block with recording time and desk."},{"event":"MARK_WEEKEND_DISCHARGE_REVIEWED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":547},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2250},{"path":"src/components/ward-management/ward-flow-weekend-review-events.ts","line":15}],"status":"modelled","model":{"subject":"One current inpatient admission","before":"No review tick for this weekend","after":"Weekend discharge review tick with weekend, time and desk","payload":["admissionId; weekendStart instant; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit; authenticated scoped access must also permit the admission.","guards":["Admission exists and is pulled or occupied.","Weekend is within a week of now and not already ticked."],"effects":["Appends to admission.weekendDischargeReviews only; changes no date, bed or plan."],"sources":[{"path":"src/components/ward-management/ward-flow-weekend-review-events.ts","line":23,"sha256":"1360db583261541d85f5978b485e46777413053f2ab988012b22b8aac4280ab2"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":549,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-weekend-discharge-review.test.ts"]},"reason":"Reviewed command model: Weekend discharge review tick with weekend, time and desk."},{"event":"RECORD_CHIEF_PSYCHIATRIST_NOTIFIED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":549},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2251},{"path":"src/components/ward-management/ward-flow-under-18-events.ts","line":14}],"status":"modelled","model":{"subject":"One current stay's chiefPsychiatristNotice","before":"Pulled or occupied stay with or without an earlier notice record","after":"chiefPsychiatristNotice {notifiedAt, at, by} replaces any earlier one","payload":["admissionId; actingUnitId; notifiedAt (typed, never pre-filled, D-93)","role and now"],"scope":"Ward for its own stay, or coordinator. EVENT_ROLE alone is not place authority.","guards":["Unknown admission, another ward's stay, or a stay that is not current refused","Non-finite times, or a notified time later than now, refused"],"effects":["Quietens the under 18 on an adult ward notice; computes no deadline and blocks no bed offer","A transfer starts the receiving stay without it"],"sources":[{"path":"src/components/ward-management/ward-flow-under-18-events.ts","line":22,"sha256":"040429c9d51419da086ae64aae4b653e5b0251d906ebde5a79fa77c66f33500d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":551,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-item4-under-18-adult-ward.dom.test.tsx"]},"reason":"Source-reviewed command model: records the typed time the Chief Psychiatrist was told a person under 18 is on an adult ward; information only (item 4, held)."},{"event":"SET_DISCHARGE_BARRIER","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":550},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":729},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1671}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_CLINICALLY_READY","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":552},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":759},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1672}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_DISCHARGE_CRITERIA","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":553},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":802},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1673}],"status":"modelled","model":{"subject":"An occupied admission's criteria-led discharge record","before":"Unset, current, paused or lapsed criteria","after":"Criteria set/reviewed, cleared, or one stored criterion ticked/unticked","payload":["admissionId; criteria string[] or null; met string[]; setByTreatingPsychiatrist boolean; optional patientSpecific string[] or tick {criterion,met}; actingUnitId for ward; finite now."],"scope":"ward or coordinator, with ward actingUnitId equal to the stay's unit and authenticated admission scope.","guards":["Admission must be occupied and time finite.","For setting or ticking criteria, only recorded voluntary patients are eligible; involuntary, CTO and unknown legal status refuse. criteria:null clears before this eligibility check.","Setting/changing the list needs the treating-psychiatrist flag; an ordinary tick keeps the stored list and refuses a lapsed review. Clearing with criteria:null does not require that flag.","Listed criteria must be unique and valid; patient-specific items obey count/length/trim bounds; ticks must name stored criteria."],"effects":["Writes admission.dischargeCriteria; review resets its validity time and review-bound/lapsed ticks, while retained applicable ticks persist.","No departure, bed release or clinical eligibility decision is performed; typed patient-specific payloads follow the typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":755,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-discharge-criteria.ts","line":271,"sha256":"70e720fb09a6a8bd9ab6952b29e786e949b7c635b3eded6a97c9be8582648c5b"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2132,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-criteria-led-discharge.test.ts"]},"reason":"Reviewed command model: Criteria set/reviewed, cleared, or one stored criterion ticked/unticked."},{"event":"RECORD_ED_MEDICAL_DETERIORATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":554},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1169},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1774}],"status":"modelled","model":{"subject":"An accepted originating-ED movement before collection","before":"Accepted/pulled pre-transfer placement with optional live transport","after":"placement_requested, medically uncleared and explicitly paused; acceptance and reservation removed","payload":["movementId; actingPlaceId naming the originating ED; finite now not before movement.openedAt; role."],"scope":"ed or coordinator; actingPlaceId must equal movement.originEdId even for coordinator. A source-admission transfer cannot use this path; authenticated movement/place scope also applies.","guards":["Movement exists, has an accepted psychiatric destination and is not closed, moving or already collected.","An unrecovered deterioration already recorded refuses; any held admission must be a consistent pulled reservation."],"effects":["Releases pulled bed/admission and matching referral bed hold; clears acceptance, pull timer, admission linkage and ward request lists.","Cancels live transport, records withdrawal/release/cancellation unwind history, false medical clearance and deterioration stamp.","Copies negative clearance to the identity-matching referral and appends an acceptance-withdrawn notice to the former ward. A later re-clearance does not reallocate a bed."],"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1170,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2152,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-medical-deterioration-ui.dom.test.tsx","tests/ward-reservation-release-capacity.test.ts"]},"reason":"Reviewed command model: placement_requested, medically uncleared and explicitly paused; acceptance and reservation removed."},{"event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":555},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1275},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1775}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"UPLOAD_PATIENT_FORM","roles":["coordinator","ed","ward","community","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":556},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":820},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1674}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_WRITTEN","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":558},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1365},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":275},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1776}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_CODE","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":560},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1366},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":274},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1777}],"status":"modelled","model":{"subject":"A movement's current legal-form record","before":"Current form, or no form recorded","after":"Chosen form code without an invented written time","payload":["movementId; recognised formCode; now; role. No writtenAt, region, ageBand or paperExpiresAt is carried by this command."],"scope":"ed, coordinator or ward. Ward requires an admitted stay in its own scoped unit; ED cannot amend a closed movement. An admitted ward/coordinator may record a later form despite arrival closure.","guards":["Movement exists; ward has an admitted stay.","Form code is recognised, differs from the current code, and is not 3C after 3D.","A closed record refuses except admitted non-ED recording."],"effects":["Replaces legalForm code/kind with its retained form history, removes formedAt, prior paper expiry/receipt for a different form and legacy legalClock.","Does not calculate legal expiry or default the written time. Undo is part of UNDO_LEGAL_FORM_RECORD.","A new form code also clears the typed receipt mark and any paper details typed for the old form."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":274,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2186,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":882,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Chosen form code without an invented written time."},{"event":"RECORD_ED_PRESENTATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":562},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1367},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":205},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1778}],"status":"modelled","model":{"subject":"An open movement's ED presentation choices","before":"Recorded ED presentation list or none","after":"Canonical fixed-list choices, or field removed for an empty selection","payload":["movementId; presentations array of EdPresentation choices; now; role."],"scope":"ed or coordinator, additionally subject to authenticated movement/place scope.","guards":["Movement exists and has no closure.","presentations must be an array and every item must be in the fixed ED list."],"effects":["Filters choices into canonical list order, deduplicating them; empty choice removes edPresentations.","Does not change movement stage, diagnosis, legal status or capacity. Included in ED-step Undo."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":205,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2212,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":92,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Canonical fixed-list choices, or field removed for an empty selection."},{"event":"RECORD_LEGAL_FORM_DETAILS","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":564},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1368},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":222},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1779}],"status":"modelled","model":{"subject":"The current legal form on one movement","before":"Form recorded, details as last typed","after":"Form carries the typed maker, copy given, ending, consent and review-by values","payload":["movementId; formCode; optional madeBy, copyGiven, endedBy, consent, reviewBy (omitted keeps, null clears); now; role."],"scope":"ed, coordinator or ward in the role table; a ward only for a person admitted to its own bed.","guards":["The movement exists; a closed movement only when admitted and not ED.","formCode matches the movement's current form.","Each detail is from its list; reviewBy is a finite time; consent only for a Form 6B."],"effects":["Replaces the form's details with the merged values; other form fields are unchanged."],"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":100,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":222,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}],"tests":["tests/ward-legal-form-gap-items.test.ts"]},"reason":"Reviewed command model: records the written legal form's typed details on the movement's current form."},{"event":"RECORD_COUNTRY_EXTENSION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":565},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1369},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":382},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1780}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_CONTINUATION","roles":["ed","coordinator","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":566},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1370},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":415},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1781}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EVALUATE_ARRIVAL_LATENESS","roles":["coordinator","ed","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":567},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1896},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1260}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_AND_REOPEN_SEARCH","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":568},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":813},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1885}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_EXPECT_FLAG","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":569},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2092}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REQUEST_PSYCH_REVIEW","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":571},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2107},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":20}],"status":"modelled","model":{"subject":"One open movement","before":"No psychReview recorded","after":"psychReview.requestedAt = now","payload":["movementId","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement as for other movement commands.","guards":["Movement must exist and not be closed","Refused when a review is already asked for"],"effects":["Writes psychReview.requestedAt only; the ED Awaiting review list keeps its order","Undone by UNDO_ED_STEP"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":68,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2103,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":573,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): the emergency department records that a psychiatric review was asked for; a time only, nothing ordered or scored."},{"event":"RECORD_PSYCH_REVIEW_SEEN","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":572},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2108},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":27}],"status":"modelled","model":{"subject":"One open movement with a review asked for","before":"psychReview without the named grade seen","after":"psychReview.registrarSeenAt or consultantSeenAt = now","payload":["movementId; grade registrar or consultant","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist and not be closed","Grade from PSYCH_REVIEW_GRADES","A review must have been asked for; each grade recorded once"],"effects":["Writes the seen time only; no examination, placement or order follows","Undone by UNDO_ED_STEP"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":76,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2104,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":576,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): records that the registrar or consultant saw the person for the review asked for; a time only."},{"event":"RECORD_ESCALATION_CALL","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":574},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2106},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":58}],"status":"modelled","model":{"subject":"One open movement waiting at an ED wait step (D-108)","before":"escalationCalls without a call for the step, or with an earlier one","after":"escalationCalls holds the latest call for the step: step, roleCalled, outcome, at = now, by = role","payload":["movementId; step 1 to 4; roleCalled from ESCALATION_CONTACT_ROLES; outcome from ESCALATION_CALL_OUTCOMES","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Finite time; step 1 to 4; roleCalled must be the step's role (ESCALATION_STEP_ROLE)","Outcome from the fixed list only; no typed text","Movement must exist, not be closed and be an ED wait (isEdOriginJourney)","The step must have been reached by now, timed as the ED board row times it; an earlier step stays recordable"],"effects":["Replaces the step's latest call on the movement; earlier calls are not kept on the record","Does not change the step, its hours, the queue order (D-71), beds or any patient stage"],"sources":[{"path":"src/components/ward-management/escalation/escalation-calls.ts","line":94,"sha256":"1e5e6bd8fc4b2a775653431ae515f6feeddb6ed51189be600247b87aa9b94ea7"},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":58,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2107,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":575,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-escalation-calls.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (item 3, D-133): records who was called at an ED wait step and one outcome from a fixed list; a shared record, nothing dials."},{"event":"MARK_WARD_READY_FOR_NEXT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":575},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2109},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":35}],"status":"modelled","model":{"subject":"One ward","before":"readyForNextAt absent (or present, for cancel)","after":"Unit.readyForNextAt = now, or removed on cancel","payload":["unitId; optional cancel","actingUnitId for ward; role and now"],"scope":"Ward for itself or coordinator (EVENT_ROLE); shared command scope checks the unit.","guards":["Ward acts only for itself","Unit must exist","Mark refused when closed to admissions or already marked; cancel refused when not marked"],"effects":["Coordinator Home shows the ward and the first on its wait list as a fact; nothing is pulled","A PULL_PATIENT into the ward clears the mark"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":91,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2108,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":577,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): a ward says it is ready for its next patient, or cancels that; a fact for the coordinator, who still pulls by hand."},{"event":"RAISE_EXPECT_FLAG","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":576},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2118}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"FLAG_LEGAL_MISMATCH","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":577},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2140}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EVALUATE_LEAVE_BED_WARNINGS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":578},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":864},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1675}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_MORNING_ROLLUP","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":579},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2163}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SEND_WARD_BUZZ","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":580},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2194}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_REPATRIATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":582},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1356},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":530},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1783}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_HOME_SERVICE_RETURN","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":584},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2256}],"status":"modelled","model":{"subject":"One current stay's home-service return discussion","before":"No request, a request without agreement, or an earlier recorded answer","after":"Fresh requested record, or request with agreed/not_yet_agreed/declined answer","payload":["admissionId; step requested|answered; homeHospital required for request; answer required for answered; optional prerequisites from RETURN_PREREQUISITES and finite nextReviewAt; now; role."],"scope":"coordinator only; authenticated scope must permit the admission. A valid home site need not itself be the current admission site.","guards":["Admission exists and is not departed; optional review date finite.","Request names a site in the current scenario. Answer requires an existing request and a listed answer.","Prerequisites are listed; a declined answer cannot carry agreed prerequisites."],"effects":["Latest record per stay; fresh request clears earlier answer/prerequisites. Answer retains request and appends answer time/desk, with prerequisites unique in listed order.","Records a discussion only: does not book transport or a bed, raise a return movement or change the stay."],"sources":[{"path":"src/components/ward-management/out-of-area/home-service-return.ts","line":122,"sha256":"2f3fbdc6ba3e36b6eb890a51a7707e8b26f71eba4a803181220c17c63d1249d7"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2244,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":584,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-home-service-return.test.ts"]},"reason":"Reviewed command model: Fresh requested record, or request with agreed/not_yet_agreed/declined answer."},{"event":"FLAG_RETURN_EARLY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":586},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2261}],"status":"modelled","model":{"subject":"One current out-of-area stay","before":"No early-return flag on the stay","after":"An early-return flag naming the home hospital, time and role","payload":["admissionId; homeHospital (listed site code); now; role."],"scope":"coordinator in the role table.","guards":["The stay exists and has not departed.","homeHospital is a listed site.","The stay is not already flagged."],"effects":["Appends a returnEarlyFlags record; the home ward site, community and officer desks see an alert while the stay is current."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":410,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/out-of-area/return-early.ts","line":70,"sha256":"28c9ec25e8d1fc5808db7af91d11f76ce64b235c292fdddfa60d1423ac2eedb3"}],"tests":["tests/ward-return-early.test.ts"]},"reason":"Reviewed command model: the coordinator flags an out-of-area stay as ready to return early to a home hospital."},{"event":"RECORD_DIRECTORY_CHECK","roles":["coordinator","bed_manager","ward","ed","community","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":588},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2258}],"status":"modelled","model":{"subject":"An on-call directory entry identifier","before":"Seeded check metadata or a previously recorded check","after":"Latest {entryId, at, by} check for that identifier","payload":["entryId matching the 1–80 character slug pattern; now; role."],"scope":"coordinator, bed_manager, ward, ed, community or officer. This reducer validates identifier shape, not membership in the seeded directory; authenticated access remains separate.","guards":["entryId must be a string matching the directory-entry slug grammar."],"effects":["Replaces the latest check for the same identifier while retaining checks for other identifiers; audit records successive checks.","Does not change the directory's phone/contact data or verify it against an external service."],"sources":[{"path":"src/components/ward-management/on-call/on-call-checks.ts","line":40,"sha256":"4c75385ac14339cbc7d98efc18af52257bb6ae185011b80e244fcf21f6d68e9d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":588,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2284,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}],"tests":["tests/ward-on-call-checks.test.ts"]},"reason":"Reviewed command model: Latest {entryId, at, by} check for that identifier."},{"event":"RECORD_HANDOVER_SIGN_OFF","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":591},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1355},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":509},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1782}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_SITE_HANDOVER_SIGN_OFF","roles":["bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":595},"sources":[{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off-reducer.ts","line":28},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2264}],"status":"modelled","model":{"subject":"One site and upcoming shift handover","before":"No sign-off for this site/shift","after":"Site sign-off with a snapshot of unsigned wards and unanswered bed calls","payload":["siteCode; integer finite shiftAt at a configured shift start; now; role."],"scope":"bed_manager for its own site or whole-network coordinator. A service coordinator is refused by authenticated command scope; signing does not sign any ward's sheet.","guards":["Site has at least one ward.","shiftAt is the next handover in the one-shift sign-off window.","Site/shift has not already been signed. Open checks do not block signing."],"effects":["Appends siteHandoverSignOffs with at/by/siteCode/shiftAt and reducer-derived unsignedUnitIds/unansweredBedCallIds.","Leaves ward sign-offs and bed calls open and unchanged. Creates the site-specific step Undo."],"sources":[{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off-reducer.ts","line":26,"sha256":"dc671972ed160a7492f79cde72ca6dab6dad70b59921bd378ecee4721b326db5"},{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off.ts","line":80,"sha256":"abebadfb3e48655f6e362172ed644ae06615e26916f33334ce17419955567a33"},{"path":"src/components/ward-management/ward-access-state.ts","line":737,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":595,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-site-handover-sign-off.test.ts","tests/ward-handover-site-sign-off.dom.test.tsx"]},"reason":"Reviewed command model: Site sign-off with a snapshot of unsigned wards and unanswered bed calls."},{"event":"RECORD_TRIAGE_SIGNED","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":599},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2274}],"status":"modelled","model":{"subject":"One person on this workspace","before":"No signed triage, or earlier signed triages, on the person","after":"One more signed triage record on the person: time, desk role and closed-list codes","payload":["patientId; now; role; urgency (A to G); outcome (listed); legal (listed code); review (listed code); flags (RAMP factor keys marked present); problems and actions (webPSOLIS list codes, in the order chosen); venue and referralType (webPSOLIS list code or null)."],"scope":"ed, community, ward and coordinator in the role table, the same desks as RAISE_REFERRAL; a shared desk is sent a record only with a person it is sent.","guards":["The person exists on this workspace.","Urgency is one of A to G.","Outcome, legal status and review are each from their fixed lists.","Every flag is a RAMP factor key; unknown fields are dropped.","Problems and actions are arrays of at most 60 codes from their webPSOLIS lists (kept once each, in the order chosen); venue and referral type are null or a code from their list. Typed text is refused."],"effects":["Appends a triages record (codes only); the patient record's Now tab lists it. No Undo: it is a signed record. Typed text (assessment, mental state, formulation, plan) stays in the form and is never in the event."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2275,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/triage/triage-signed-reducer.ts","line":46,"sha256":"88ebffb9dc86dd544d9bdac7f561fcf4998a3af62d9a19ffe4211c5325142666"},{"path":"src/components/ward-management/ward-access-state.ts","line":371,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-triage-signed.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (7 Nov 2026): a clinician signs a mental health triage and risk assessment (SMHMR900 and SMHMR905) for one person; closed-list codes only, never typed text."},{"event":"REQUEST_WARD_STAFF","roles":["ward","coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":603},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2266}],"status":"modelled","model":{"subject":"A ward's staff request for this shift or next shift","before":"Known ward; no open request for that ward and shift, or one to update","after":"staffRequests holds one open request for the ward and shift with count and ordered reasons","payload":["unitId; shift this or next; count 1, 2, 3 or 4 or more","reasons: one or more distinct items from STAFF_REQUEST_REASONS; actingUnitId for ward callers; role and now","optional shiftStartAt: the start of the shift the person chose; kept only when it is that shift's start at now or 5 minutes earlier, otherwise the shift at now is used"],"scope":"Ward, coordinator or site bed manager in EVENT_ROLE; a ward acts only for its own ward (actingUnitId must equal unitId). Executive changes nothing (D-80). Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known unit; shift and count from their lists","Reject empty, duplicate or unlisted reasons, and a ward naming another ward"],"effects":["Appends a record, or updates count, reasons and updatedAt on the open one; never names a patient","Does not change beds, placement, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2268,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/staffing/staff-requests.ts","line":156,"sha256":"e47b9fadc1f70f84b56bd4e91eb36f5b95f85da6234e10f6251bea10c3f6237a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":605,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-staff-requests.test.ts"]},"reason":"Source-reviewed command model: one open staff request per ward per shift, added or updated in place."},{"event":"CLOSE_WARD_STAFF_REQUEST","roles":["ward","coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":604},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2267}],"status":"modelled","model":{"subject":"An open staff request on a ward","before":"Request exists on the named ward and is still open","after":"Request carries closedAt, closedBy and outcome","payload":["requestId and unitId; outcome from STAFF_REQUEST_OUTCOMES","actingUnitId for ward callers; role and now"],"scope":"Ward, coordinator or site bed manager in EVENT_ROLE; a ward acts only for its own ward (actingUnitId must equal unitId). Executive changes nothing (D-80). Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. A ward may only withdraw; the coordinator or bed manager records any other outcome.","guards":["Request found on that ward and open; outcome listed","Reject a ward recording an outcome other than withdrawn"],"effects":["Closes the one record; open lists and alerts drop it","Does not change beds, placement, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2269,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/staffing/staff-requests.ts","line":195,"sha256":"e47b9fadc1f70f84b56bd4e91eb36f5b95f85da6234e10f6251bea10c3f6237a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":615,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-staff-requests.test.ts"]},"reason":"Source-reviewed command model: an open staff request closed as arranged, not available or withdrawn."},{"event":"SET_SITE_FEATURE_SWITCH","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":609},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":51},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2269}],"status":"modelled","model":{"subject":"A site's switched-off features","before":"A site with wards in this workspace; the listed feature is on there (to switch off) or off there (to switch back on)","after":"siteFeatureSwitches holds one record per site and feature switched off (site code, feature, time, and by: the role, or admin when the access admin switched it); switching back on removes it","payload":["siteCode; feature from SITE_SWITCHABLE_FEATURES; off true or false","role and now; byAccessAdmin, which the shared server sets or clears from the desk's membership (deskCommand), never the browser"],"scope":"Coordinator only in EVENT_ROLE. The shared server admits the statewide coordinator and, by D-142 (Josh, 11 Nov 2026, amending D-80 for this one action), the statewide access admin, which sends it under the coordinator role (SITE_FEATURE_SWITCH_ROLE) from Features at this site on its Access tab (mayChangeSiteFeatures via siteFeatureSwitchRefusal). Every other desk, a service coordinator or service admin included, is refused; the executive changes nothing (D-80).","guards":["Refuse a protected feature by name (SITE_PROTECTED_FEATURES: safety notices, legal times, ruling guards, role access, AWOL bed hold review, ward closure, demo reset) and any feature off the allow-list","Refuse a missing off/on, a site with no wards, switching off a feature already off and switching on one not off"],"effects":["Adds or removes the one record; every desk at that site reads the feature as off and no other site changes","Does not change beds, placement, movements, confirmations or any patient stage; dispatched from the access admin's Features at this site card (settings/site-features-card.tsx, D-142), which offers an undo"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":51,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2270,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-site-feature-switches.ts","line":102,"sha256":"28c257371212025f04befc60adc5bf0d36c87b1d1d5173b082ccd7a03d84c7e0"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":610,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-ruling-guardrails.test.ts","tests/ward-event-permissions.test.ts","tests/ward-site-features-card.dom.test.tsx"]},"reason":"Source-reviewed command model: one listed feature switched off, or back on, at one site (Batch 4 item 20, D-135; access admin by D-142)."},{"event":"RECORD_DOWNTIME_PACK_PRINTED","roles":["coordinator","bed_manager","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":611},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":53},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2270}],"status":"modelled","model":{"subject":"Each ward's downtime pack print times","before":"Every ward named is in this workspace","after":"downtimePackPrints holds one record (ward, time, role) per ward on the pack, keeping the newest 12 per ward","payload":["unitIds: the wards on the printed pack, ids only, each once","role and now (the time the print window opened)"],"scope":"Coordinator, site bed manager, ward or ED in EVENT_ROLE; dispatched from the downtime pack's print hook. Shared authenticated command scope additionally requires every named ward to be inside the desk's place; EVENT_ROLE alone is not place authority. Executive and access admin change nothing (D-80).","guards":["Refuse an empty or repeated ward list","Refuse a ward not in this workspace; a second print of the same wards in the same minute records nothing new"],"effects":["Appends print times only; the pack content stays in the tab and leaves only as paper or a saved file (D-18, D-72 item 2); the coordinator's old packs band and the ward screen's pack printed line read the times (D-142)","A pack is listed as old after PACK_OLD_AFTER_MINUTES (24 hours, D-135); does not change beds, confirmations, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":53,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2271,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-downtime-pack-prints.ts","line":49,"sha256":"e767d9065a60c199968fdc71210406000a397a8dd769b58fb836e8b1a7d7b033"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":612,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-downtime-pack-device-storage.dom.test.tsx","tests/ward-event-permissions.test.ts","tests/ward-outage-catch-up-screens.dom.test.tsx"]},"reason":"Source-reviewed command model: when each ward's downtime pack was printed or saved as a PDF, never the pack itself (Batch 4 item 24, D-135)."},{"event":"RECORD_OUTAGE_WINDOW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":613},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":55},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2271}],"status":"modelled","model":{"subject":"The workspace's recorded outage windows","before":"Both times typed; the window is not already recorded","after":"outageWindows holds a new OUT-n record (from, to, recordedAt, role); the most recently recorded window is the active one, so a correction replaces the earlier entry; a ward is caught up only once it confirms Beds still correct itself at or after the outage ended (CapacityFigure.wardConfirmedAt keeps that confirm when another desk confirms later)","payload":["from and to: whole times typed by the coordinator, never pre-filled","role and now"],"scope":"Coordinator only in EVENT_ROLE, and on the shared server the statewide coordinator only: the record is network-wide, so commandRefusal refuses a service coordinator (D-142 review follow-up, 11 Nov 2026). The ward confirms with the existing CONFIRM_CAPACITY rather than recording the outage. Executive and access admin change nothing (D-80).","guards":["Refuse a missing or non-whole time, an end not after the start and an end later than now","Refuse a window with the same start and end as one already recorded"],"effects":["Appends the record only; nothing is read from the device or carried over from before the outage","Does not change any bed figure, confirmation, stay or movement; dispatched from the coordinator's Record an outage form on the downtime pack (reports/downtime-pack-record-outage.tsx, D-142); each ward's catch-up card, its bed tags and Home's catch-up card then read it"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":55,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2272,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-outage-catch-up.ts","line":51,"sha256":"eda536beceed5d18ab57717139eff4b0cf1fa174dd4cc2278bf6374359344276"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":614,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-event-permissions.test.ts","tests/ward-outage-catch-up-screens.dom.test.tsx"]},"reason":"Source-reviewed command model: a coordinator types the outage window, starting the catch-up prompt; nothing is guessed (Batch 4 item 25, D-135)."},{"event":"HAND_OVER_ITEM","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":617},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":68},{"path":"src/components/ward-management/handover-work-reducer.ts","line":121}],"status":"modelled","model":{"subject":"One open item this desk owns: a referral it handles, a bed meeting chase or a carer callback","before":"The item is open and owned by the sending desk","after":"A pending hand-over to another desk; the item's owner is unchanged until it is accepted","payload":["item (referral id, chase action kind with movement or stay id, or callback id), rebuilt from checked fields; toRole; actingUnitId for a ward; now; role."],"scope":"coordinator, ward, ed or community. Only the desk that owns the item (a ward names its own ward) may hand it on; record ids are checked by authenticated command scope.","guards":["The item names one of the three kinds and is still open.","The sender is the item's owner.","The receiving role is one the item's record can be owned by, not its owner now; a ward only as the item's own ward."],"effects":["Appends handedItems with a reducer-minted HI-N id, the item, from and to desks and handedAt.","Changes no owner, referral, chase or callback. A later hand-over of the same item replaces a pending one."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":121,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":158,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"},{"path":"src/components/ward-management/handover-work-events.ts","line":70,"sha256":"822cf66f714f89453b9c377faffdc8906a7544022bf30c895c34c144334b1241"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: a pending hand-over of one open item, owner unchanged."},{"event":"ACCEPT_HANDED_ITEM","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":618},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":80},{"path":"src/components/ward-management/handover-work-reducer.ts","line":134}],"status":"modelled","model":{"subject":"One pending hand-over","before":"A pending hand-over whose item is still open and still owned by the sender","after":"The hand-over accepted; the item's owner is the receiving desk on its own record","payload":["handedItemId (HI-N); actingUnitId for a ward; now; role."],"scope":"coordinator, ward, ed or community; only the desk named as the receiver.","guards":["The hand-over exists, is not accepted and is the latest for its item.","The item is still open and its owner is still the sender, so a lapsed hand-over moves nothing.","The accepting desk is the named receiver."],"effects":["Referral: appends an ownerHistory entry. Chase: moves the open action's owner (and ward). Callback: moves its owner.","Stamps acceptedAt on the hand-over."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":134,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":174,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: the receiving desk accepts, moving the owner on the item's own record."},{"event":"RECORD_CARER_CALLBACK","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":621},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":88},{"path":"src/components/ward-management/handover-work-reducer.ts","line":150}],"status":"modelled","model":{"subject":"One current stay or open bed request","before":"No open carer callback for this person, or one with an earlier time","after":"One open carer callback with bestAfter, owned by the recording desk","payload":["admissionId or movementId (exactly one); bestAfter instant; actingUnitId for a ward; now; role. No typed text field."],"scope":"ward for its own patients, or the coordinator.","guards":["Exactly one subject, a current stay or an open bed request.","A ward names the subject's own ward.","bestAfter is a whole instant from now to the same time tomorrow."],"effects":["Appends carerCallbacks with a reducer-minted CB-N id, the subject's ward, times and owner desk; asking again moves an open callback's time."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":150,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-events.ts","line":90,"sha256":"822cf66f714f89453b9c377faffdc8906a7544022bf30c895c34c144334b1241"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: a carer wants a call back, best after a typed time; no name or number held."},{"event":"MARK_CARER_CALLBACK_MADE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":622},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":99},{"path":"src/components/ward-management/handover-work-reducer.ts","line":199}],"status":"modelled","model":{"subject":"One open carer callback","before":"An open carer callback","after":"The callback ticked off with madeAt and madeBy","payload":["callbackId (CB-N); actingUnitId for a ward; now; role."],"scope":"ward for its own patients, or the coordinator.","guards":["The callback exists and is not already made.","A ward names the callback's own ward."],"effects":["Stamps madeAt and madeBy. A pending hand-over of it lapses."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":199,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":79,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: the call back was made, which clears it from promises due."},{"event":"RECORD_CLINICAL_CONTACT","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":626},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1357},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":716},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1784}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"DISPATCH_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":630},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":69},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2219}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACKNOWLEDGE_BROADCAST_ALERT","roles":["coordinator","ward","ed","officer","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":631},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":151},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2220}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STAND_DOWN_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":632},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":198},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2221}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EXTEND_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":633},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":228},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2222}],"status":"modelled","model":{"subject":"An active broadcast alert","before":"Active alert with current expiry/duration","after":"Same active alert with expiry and duration each extended by the fixed default","payload":["alertId; now; role. Added duration is DEFAULT_BROADCAST_EXTENSION_MINUTES, not client text or a client-selected number."],"scope":"coordinator or bed_manager. A scoped actor must control every recipient of the existing alert, not merely see one recipient.","guards":["Alert exists and is active at now; stood-down or expired alerts cannot be revived by extension."],"effects":["Adds 30 minutes (current default) to stored durationMinutes and to existing expiresAt; preserves recipients, replies and acknowledgements."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":228,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":461,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2413,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":758,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-top25-broadcast-extend.dom.test.tsx"]},"reason":"Reviewed command model: Same active alert with expiry and duration each extended by the fixed default."},{"event":"ADD_BROADCAST_ALERT_UNITS","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":634},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":243},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2223}],"status":"modelled","model":{"subject":"An active directive or bed call's recipients","before":"Existing recipient scope/list","after":"Existing recipients plus new unique named desks","payload":["alertId; non-empty unitIds array naming real desks; now; role."],"scope":"coordinator or bed_manager. Authenticated scope must cover the existing alert's full recipient set and every newly added desk.","guards":["Alert exists and is active; Pull now cannot add recipients.","Bed calls accept real wards only; directives may also name real ED desks.","At least one named desk has not already been asked."],"effects":["Resolves previous scope into an explicit targetUnitIds list, appends only new ids and recomputes targetScopeLabel.","Does not reset expiry or clear previous replies/acknowledgements."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":243,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2412,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":758,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-broadcast-add-units.test.ts"]},"reason":"Reviewed command model: Existing recipients plus new unique named desks."},{"event":"RAISE_PULL_NOW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":638},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":293},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2224}],"status":"modelled","model":{"subject":"A waiting movement and a new patient-specific broadcast","before":"Waiting open movement with wards considering/accepting it, no live Pull now","after":"Same movement plus active Pull now addressed to the relevant wards","payload":["movementId; now; role. Recipients, text, severity, deadlines and id are generated from state/constants."],"scope":"coordinator only; authenticated scope must permit the movement and every ward selected by pullNowWards.","guards":["Movement exists, is open and in PULL_NOW_LIVE_STAGES.","No currently live still-applicable Pull now exists for this movement.","At least one real relevant ward can be asked."],"effects":["Prepends an active critical pull_now alert, increments broadcastSequence and records answerBy/expiry and movement stage-change count at dispatch.","Recipients are accepting ward, else real referred wards. Does not itself pull a bed, move the patient or change movement stage."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":293,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-model.ts","line":317,"sha256":"b27896e799de72fbb71c7782bc2a571627809762c61a40dcecb86b07007ca647"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2434,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":779,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-global-alerts.test.ts"]},"reason":"Reviewed command model: Same movement plus active Pull now addressed to the relevant wards."},{"event":"REPLY_BROADCAST_ALERT","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":640},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":348},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2225}],"status":"modelled","model":{"subject":"One desk's answer to a bed call or Pull now","before":"Active applicable alert with no answer or a different latest answer for this desk","after":"Reply appended; desk also acknowledged","payload":["alertId; real unitId; answer from this alert kind's fixed list; optional beds, readyAt or reason as required by answer; now; role."],"scope":"ward, bed_manager or coordinator, with authenticated place/record scope. A bed call accepts wards only; Pull now accepts only its target wards.","guards":["Alert exists and is active; Pull now's movement must still be waiting; directives use acknowledgement instead.","Unit is real and included when recipients are explicit; answer belongs to kind-specific list.","can_take needs whole beds in 1..BED_CALL_MAX_BEDS; after_discharge/bed_ready_at needs finite future readyAt within the configured horizon; Pull now cannot needs a listed decline reason.","An identical latest answer is refused."],"effects":["Appends reply {unitId,answer,at,role,...conditional detail}; adds desk to acknowledgedUnits once.","Answers are reported capacity statements, not bed allocation or automatic movement transitions."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":348,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2433,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-global-alerts.test.ts","tests/ward-broadcast-audience-bed-call-wards.test.ts"]},"reason":"Reviewed command model: Reply appended; desk also acknowledged."},{"event":"BOOK_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":643},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":78},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2231}],"status":"modelled","model":{"subject":"A future planned admission","before":"No booking for this linked patient, or an initials-only booking to create","after":"New PA-* record in booked state, holding no bed","payload":["Exactly one of patientId or initials; sex; ageBand; reason; unitId; expectedArrivalAt; expectedStayDays; legalStatus; now/role. Optional gender, overrideReason, actingUnitId. Linked patient requires calendarDate for age validation."],"scope":"coordinator, bed_manager or ward; ward may book its own ward only. Authenticated place/record scope additionally applies.","guards":["Finite now and arrival, listed reason/legal status/gender and bounded whole expectedStayDays; destination unit exists.","Arrival must fall within the configured booking window; a newly chosen arrival cannot be in the past.","Ward caller must name its actingUnitId and all affected wards must be that unit.","Admission authorisation gate needs a listed override reason when applicable; other placement gates are rechecked on conversion.","Ward must be open to new admissions. Sex and ageBand are listed.","Linked patient exists, has no occupied/pulled bed or existing booked planned admission; recorded birth date matches cohort on arrival date. Initials-only requires 1–3 letters; the panel names digits and more than three letters separately, while blank initials get the generic \"Initials are one to three letters.\" line; a direct event with neither patient nor initials is rejected by the patient-or-initials guard."],"effects":["Appends a booked plan and increments plannedAdmissionSequence; linked gender comes from patient record, never event.","Stores a required same-ward authorisation override. No bed count or admission changes until conversion; initials invoke the typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":334,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":298,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2449,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-audit24-1-planned-booking-authorised.test.ts"]},"reason":"Reviewed command model: New PA-* record in booked state, holding no bed."},{"event":"CHANGE_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":644},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":423},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2236}],"status":"modelled","model":{"subject":"An existing booked planned admission","before":"booked plan with current ward/date/stay/reason/legal status/gender","after":"Still booked, with revised fields, changedAt and incremented changeCount","payload":["plannedAdmissionId; replacement reason/unitId/expectedArrivalAt/expectedStayDays/legalStatus; now/role. Optional gender, overrideReason, actingUnitId; calendarDate when a linked arrival changes calendar day."],"scope":"coordinator, bed_manager or ward; a ward may change neither from nor to another ward. Authenticated record and destination scope also applies.","guards":["Finite now and arrival, listed reason/legal status/gender and bounded whole expectedStayDays; destination unit exists.","Arrival must fall within the configured booking window; a newly chosen arrival cannot be in the past.","Ward caller must name its actingUnitId and all affected wards must be that unit.","Admission authorisation gate needs a listed override reason when applicable; other placement gates are rechecked on conversion.","Plan exists and remains booked.","Changing to a different closed ward refuses; an existing booking at a newly closed ward may remain there.","An overdue booking may retain its old arrival time while other fields change; moving a linked arrival date must still match its recorded cohort.","Authorisation override may persist for the same standing ward/gate; moving away drops an irrelevant override."],"effects":["Replaces planning fields, records changedAt/count and record-derived linked gender. No bed is held or released."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":418,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":298,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2506,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-audit24-1-planned-booking-authorised.test.ts"]},"reason":"Reviewed command model: Still booked, with revised fields, changedAt and incremented changeCount."},{"event":"CANCEL_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":645},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":499},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2241}],"status":"modelled","model":{"subject":"One booked planned admission","before":"booked","after":"cancelled with cancel reason and time","payload":["plannedAdmissionId; unitId equal to booking's ward; listed cancellation reason; finite now; role; actingUnitId when ward."],"scope":"coordinator, bed_manager or ward, with own-ward identity for ward and authenticated booking scope.","guards":["Booking exists and state is booked.","Reason is listed; unitId matches booking; ward scope matches; now finite."],"effects":["Retains the booking record, changing state/cancelledAt/cancelReason.","No capacity refund occurs because booking held no bed. Cancelled plans no longer count as pending arrivals.","The step can be taken back by UNDO_RELEASE_STEP within the Undo window, filed against the booking."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":494,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2506,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts"]},"reason":"Reviewed command model: cancelled with cancel reason and time."},{"event":"CONVERT_PLANNED_ADMISSION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":646},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":523},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":750}],"status":"modelled","model":{"subject":"A booked plan and its receiving ward","before":"booked plan, no current linked bed/journey, ready eligible capacity","after":"Plan arrived and linked to a new occupied admission","payload":["plannedAdmissionId; unitId equal to booking's ward; finite now; role; actingUnitId for ward."],"scope":"ward or coordinator only; ward must name its own booked ward. Authenticated booking/ward scope additionally applies.","guards":["Plan exists and is booked; unit matches and is open. Linked patient has neither another held/occupied bed nor an open movement.","A Ready bed exists (pulledBedAvailability, counting live pulled admissions) and, when beds are pending preparation, more Ready beds than pending ones. Secure request requires a free locked bed. Other journeys' pending numbered reservations at the ward come off Ready and off the free locked and open counts first.","Current placement eligibility gates pass; only a recorded same-ward authorisation override waives that specific gate.","A gender-placement review requirement refuses this shortcut; use referral journey instead."],"effects":["Creates an occupied AD-ARR-* admission with recorded patient/sex/gender/planned legal status, without a movement/referral; increments admissionSequence.","Decrements ward empty and allocatable counts by one, locked count when used, and increments sex mix.","Marks plan arrived with convertedAt/admissionId; does not create a numbered bed assignment or admit merely because its date passed."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":518,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2534,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-planned-arrival-closed-bed.test.ts"]},"reason":"Reviewed command model: Plan arrived and linked to a new occupied admission."},{"event":"RECORD_SUPPORT_NOTIFICATION","roles":["ward","coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":650},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1358},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":728},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1785}],"status":"modelled","model":{"subject":"One completed involuntary arrival/transfer or discharge, and one support party","before":"No or earlier checklist Tell record","after":"Another told/not_applicable record appended","payload":["occasion admission|transfer|discharge; party from checklist; outcome told|not_applicable; now/role. Arrival/transfer names movementId only; discharge admissionId only. told needs nonblank bounded who and optional contactedAt\u003c=now; not_applicable needs nonblank bounded reason and forbids who/contactedAt."],"scope":"ward or coordinator. Authenticated arriving movement must belong to its accepted ward scope; admission references and acting place are separately scoped.","guards":["now finite; occasion/party/outcome listed.","Named subject exists and meets completed involuntary arrival/transfer/discharge eligibility; arrival occasion matches recorded source.","Conditional text fields obey exclusive shape and length/time rules."],"effects":["Appends uniquely numbered SN-* record with subject/occasion/party/desk/time and outcome detail; creates step Undo.","Advisory recording only: neither calculates legal duties/deadlines nor blocks or advances the journey. Typed who/reason invokes typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":723,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2537,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":937,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-support-notifications.test.ts","tests/ward-discharge-support-notification.test.ts"]},"reason":"Reviewed command model: Another told/not_applicable record appended."},{"event":"SEND_RELEASE_SUPPORT_NOTICE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":651},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1848},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":31}],"status":"modelled","model":{"subject":"One confirmed bed release and a support service","before":"confirmed release with no Sent record for chosen service","after":"confirmed release with service marked Sent","payload":["releaseId; service from SUPPORT_SERVICE_TYPES; actingUnitId required and equal to release.unitId; now; role."],"scope":"ward or coordinator; actingUnitId must equal the release's ward even for coordinator, and authenticated scope also applies.","guards":["Release exists and remains confirmed.","Service is listed and has not already been notified.","Acting unit is the release's own unit."],"effects":["Appends {service,at,by} to supportNoticesSent.","This prototype writes the record; no external pharmacy, transport or cleaning integration is invoked by this handler. No bed/stage change."],"sources":[{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":55,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":30,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-release-notices.test.ts"]},"reason":"Reviewed command model: confirmed release with service marked Sent."},{"event":"RECORD_DISCHARGE_DEPENDENCY","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":653},"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":34},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1851}],"status":"modelled","model":{"subject":"One non-discharged bed release and one logistics kind","before":"Missing or existing dependency for this kind","after":"Latest outstanding/done/not_needed state and owner recorded","payload":["releaseId; actingUnitId equal to release ward; kind/owner/state from closed lists; now; role."],"scope":"ward or coordinator, requiring release's own actingUnitId and authenticated release scope.","guards":["Release exists and is not discharged.","Kind, owner and state are listed.","Repeating the same already-outstanding owner/state refuses; done/not_needed can be reconfirmed."],"effects":["Adds or replaces the dependency by kind, recording time and desk label.","Does not alter release stage, blocker, bed counts, or call an external service."],"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":60,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":78,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-discharge-dependencies.test.ts"]},"reason":"Reviewed command model: Latest outstanding/done/not_needed state and owner recorded."},{"event":"RECORD_DISCHARGE_PLAN_CHANGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":654},"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":49},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1852}],"status":"modelled","model":{"subject":"One non-discharged bed release's logistics plan","before":"Current expected time or planned destination","after":"One changed fact, with recorded change history where applicable","payload":["releaseId; actingUnitId equal to release ward; exactly one of finite expectedAt or listed leavingDestination; now; role."],"scope":"ward or coordinator, requiring release's own actingUnitId and authenticated release scope.","guards":["Release exists and is not discharged.","Exactly one fact is carried and it differs from the current recorded fact.","Date is finite; destination is in LEAVING_DESTINATIONS."],"effects":["Date branch updates BedRelease.expectedAt and appends planChanges; destination branch writes plannedDestination and appends a change only if a prior destination existed.","Done dependencies relying on a changed fact can be shown as needing recheck by selectors. Handler does not itself cancel logistics, change release stage or bed counts.","A date change on a release linked to a stay that has not departed also updates that stay's expected discharge date, date-move count and set-by (updateExpectedDischargeDate), and the stay's other pending releases."],"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":101,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":49,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-discharge-dependencies.test.ts"]},"reason":"Reviewed command model: One changed fact, with recorded change history where applicable."},{"event":"RECORD_DISCHARGE_CHECK","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":656},"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":37},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2252}],"status":"modelled","model":{"subject":"One stay with a bed (not waitlisted) and one checklist item","before":"Item not ticked, or ticked with a different state","after":"One discharge checklist item recorded as done, not needed or outstanding","payload":["admissionId; item and state from closed lists; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit.","guards":["Admission exists and is not waitlisted.","Item and state are listed, and the state differs from the item's current ticked state."],"effects":["Sets admission.dischargeChecks[item] with time and desk role.","Advisory only: never blocks RECORD_LEAVING or RECORD_PATIENT_DISCHARGE and changes no release or bed figure."],"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":60,"sha256":"584c52430b354fe68ebf1f0504c424400f28a32eb8f081f08ffb27a7016896d1"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":658,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-discharge-follow-through.test.ts"]},"reason":"Reviewed command model: One discharge checklist item recorded as done, not needed or outstanding."},{"event":"RECORD_FOLLOW_UP_REPLY","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":658},"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":51},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2253}],"status":"modelled","model":{"subject":"One stay with a bed (not waitlisted) referred to the acting community team","before":"No reply, or a different reply or decline reason","after":"The community team's follow-up reply recorded, with a listed reason when declined","payload":["admissionId; reply from awaiting/accepted/declined; declineReason from a closed list only with declined; now and role; actingTeamId when acting as a community team."],"scope":"community or coordinator. A community desk must name a known team the admission's referral named.","guards":["Admission exists and is not waitlisted.","A community desk names its team, and the stay belongs to that team.","Reply is listed; a decline carries a listed reason and nothing else does; the same reply is not recorded twice."],"effects":["Sets admission.followUpReply with time and desk role; the ward reads it on the discharge board and checklist.","Does not change the ward's followUp record, the care journey, any release or bed figure."],"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":60,"sha256":"584c52430b354fe68ebf1f0504c424400f28a32eb8f081f08ffb27a7016896d1"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":660,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-discharge-follow-through.test.ts"]},"reason":"Reviewed command model: The community team's follow-up reply recorded, with a listed reason when declined."},{"event":"RECORD_ARRIVAL_CHECK","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":659},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1854},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":47}],"status":"modelled","model":{"subject":"An open movement's pre-transfer checklist flag","before":"Contraband-search or medication-chart flag false/unrecorded or true","after":"Chosen flag set to the opposite recorded boolean","payload":["movementId; check from ARRIVAL_CHECKS; done boolean; now; role."],"scope":"ed or coordinator; authenticated movement/place scope additionally applies.","guards":["Movement exists and has no closure.","Check is listed and done is boolean.","Unrecorded counts as false; trying to record the same effective value refuses."],"effects":["Writes contrabandSearchDone or medicationChartDone only. false takes a mistaken tick back.","Does not itself certify a clinical assessment, create a notice or advance stage."],"sources":[{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":102,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":46,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-release-notices.test.ts","tests/ward-top25-admission-checklist.dom.test.tsx"]},"reason":"Reviewed command model: Chosen flag set to the opposite recorded boolean."},{"event":"UNDO_REFERRAL_DECISION","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":663},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1638},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":98}],"status":"modelled","model":{"subject":"The latest accepted/declined decision snapshot on a referral","before":"Referral exactly as the latest undoable decision left it","after":"Referral restored to its pre-decision snapshot","payload":["referralId; now; role; optional recordSeq to bind the exact decision; actingUnitId when ward."],"scope":"ward, coordinator, ed or community in role table, then original acting role (and ward) or coordinator; authenticated reference scope applies.","guards":["Referral and its decision Undo record exist; supplied recordSeq matches newest record.","now is not before the decision and is within UNDO_WINDOW_MINUTES (currently five).","Current referral deeply equals saved after snapshot; original-role/ward check passes.","An undone ACCEPT_REFERRAL refuses while a movement for the referral is not closed as did_not_proceed, or a stay from it holds a bed."],"effects":["Restores full referral before snapshot, removes only notices created by that decision id/time, and consumes the Undo record.","Does not remove the audit evidence of the decision or Undo; a later reassessment can make this Undo inapplicable."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":98,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1350,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-undo-toast-record-seq.dom.test.tsx"]},"reason":"Reviewed command model: Referral restored to its pre-decision snapshot."},{"event":"UNDO_AUDIT_REVIEW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":665},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":105},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1463}],"status":"modelled","model":{"subject":"One captured-event review in the current world generation","before":"Latest review on its captured event","after":"That review removed while audit history remains","payload":["reviewId; expectedGeneration matching current worldGeneration; finite now; role."],"scope":"coordinator only, with authenticated review/record scope; role check occurs before protected payload handling.","guards":["expectedGeneration is a safe current counter; review exists uniquely in this generation.","No later review on that event remains; undo newest first.","Time is at or after review and within UNDO_WINDOW_MINUTES."],"effects":["Removes that review from auditReviews and appends audited Undo; audit review ids are not reused.","Does not erase the reviewed event or its original review/Undo audit entries."],"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":105,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2611,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-governance.dom.test.tsx"]},"reason":"Reviewed command model: That review removed while audit history remains."},{"event":"PLACE_IN_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":667},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":99},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1657}],"status":"modelled","model":{"subject":"A current occupied/pulled stay on one ward","before":"Stay in another numbered bed or with known kind but no number","after":"Same stay recorded in the selected numbered bed and matching bed kind","payload":["admissionId; integer bedNumber within unit.beds; now/role; actingUnitId for ward; optional listed overrideReason when moving a locked/secure/involuntary stay to an open bed."],"scope":"ward or coordinator; ward must name admission's own unit. Authenticated stay/ward scope applies.","guards":["Admission exists and bedIsOccupied; unit exists; new bed differs and is in range, unoccupied and not held by another journey.","Prior bed kind can be determined safely; resulting locked/free counts are supported.","Open-bed move that needs an override has a listed reason."],"effects":["Updates admission bedNumber/bedKind, adjusts allocatableLocked only for kind changes; total empty/allocatable counts stay unchanged.","For a linked pulled stay, keeps movement heldBedNumber and accepted referral arm heldBedNumber aligned.","Captures the exact bed-placement Undo snapshot including prior kind, capacity revision and linked holds."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":97,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2616,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-release-pull-undo-guard.test.ts"]},"reason":"Reviewed command model: Same stay recorded in the selected numbered bed and matching bed kind."},{"event":"UNDO_PLACE_IN_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":668},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1639},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":134}],"status":"modelled","model":{"subject":"A stay's latest numbered-bed move","before":"Stay still in saved destination bed; any changed kind capacity/linked holds unchanged","after":"Prior bed number/kind and associated hold numbers restored","payload":["admissionId; now; role; optional recordSeq; actingUnitId when ward."],"scope":"ward or coordinator; original acting role/ward or coordinator, plus authenticated stay scope.","guards":["Latest move record exists; exact supplied recordSeq, time-window and acting-role checks pass.","Stay remains current on same unit/in afterBed; changed kind capacity revision/count and linked pulled movement/referral arm still match saved after values.","Every restored numbered bed remains valid, unoccupied and unheld by another journey."],"effects":["Restores bedNumber (or absence), bedKind (or absence), changed free-locked count and linked hold numbers without overwriting unrelated rows.","Consumes bed-placement Undo; same-kind moves do not overwrite or block on unrelated later capacity changes."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":134,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2636,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-release-pull-undo-guard.test.ts"]},"reason":"Reviewed command model: Prior bed number/kind and associated hold numbers restored."},{"event":"UNDO_REFER_TO_UNITS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":671},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1640},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261}],"status":"modelled","model":{"subject":"Latest undoable REFER_TO_UNITS on the named subject","before":"Saved step record and unchanged post-step state","after":"Movement offer/ward-referral changes reversed","payload":["movementId; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator only. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for REFER_TO_UNITS; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts"]},"reason":"Reviewed command model: Movement offer/ward-referral changes reversed."},{"event":"UNDO_ACCEPT_IN_PRINCIPLE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":672},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1641},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":262}],"status":"modelled","model":{"subject":"Latest undoable ACCEPT_IN_PRINCIPLE on the named subject","before":"Saved step record and unchanged post-step state","after":"Acceptance, held bed/admission and generated notices restored to pre-acceptance","payload":["movementId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original ward actingUnitId or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for ACCEPT_IN_PRINCIPLE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts"]},"reason":"Reviewed command model: Acceptance, held bed/admission and generated notices restored to pre-acceptance."},{"event":"UNDO_LEGAL_FORM_RECORD","roles":["ed","coordinator","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":673},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1642},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":263}],"status":"modelled","model":{"subject":"Latest undoable RECORD_LEGAL_FORM_WRITTEN, RECORD_LEGAL_FORM_CODE, RECORD_LEGAL_FORM_RECEIVED or RECORD_LEGAL_FORM_EXPIRY on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest recorded form/time/receipt/expiry and accompanying changed rows restored","payload":["movementId; now; role; optional recordSeq matching the exact newest step."],"scope":"ed, coordinator, ward or community; original acting role or coordinator (role eligibility is not authority over another place). Authenticated record/place scope remains required. A ward must match the original ward captured in the saved Undo record, not merely a ward eligible to view or act on the movement now. Missing legacy ward provenance refuses a ward caller; coordinator handling remains available.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The legitimate legal-form Undo payload omits actingUnitId: reducer role consistency falls back to the saved record.unitId, while shared authenticated scope independently compares that original ward with the caller's scope.","The original ward is recorded on the source legal-form step even when its legitimate caller omitted actingUnitId: receipt provenance uses the sending stay or ward referral, while other form entries use the receiving stay. Another eligible ward cannot substitute for that original ward; coordinator and original-role rules otherwise remain.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_LEGAL_FORM_WRITTEN, RECORD_LEGAL_FORM_CODE, RECORD_LEGAL_FORM_RECEIVED or RECORD_LEGAL_FORM_EXPIRY; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-audit-legal-group.test.ts","tests/ward-ed-handover-events.test.ts","tests/ward-consolidated-authority.test.ts"]},"reason":"Reviewed command model: Newest recorded form/time/receipt/expiry and accompanying changed rows restored."},{"event":"UNDO_SUPPORT_NOTIFICATION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":674},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1643},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":264}],"status":"modelled","model":{"subject":"Latest undoable RECORD_SUPPORT_NOTIFICATION on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest Tell record removed from the subject's checklist","payload":["movementId or admissionId identifying the original Tell subject; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role or coordinator; arriving movement must remain inside accepted-ward scope. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_SUPPORT_NOTIFICATION; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-support-notifications.test.ts"]},"reason":"Reviewed command model: Newest Tell record removed from the subject's checklist."},{"event":"UNDO_REPATRIATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":675},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1644},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":265}],"status":"modelled","model":{"subject":"Latest undoable RECORD_REPATRIATION on the named subject","before":"Saved step record and unchanged post-step state","after":"Return transport record and all generated journey/notice changes restored","payload":["admissionId; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator only. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_REPATRIATION; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-out-of-area-repatriation.test.ts"]},"reason":"Reviewed command model: Return transport record and all generated journey/notice changes restored."},{"event":"UNDO_FLAG_RETURN_EARLY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":676},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1645},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":266}],"status":"modelled","model":{"subject":"The newest FLAG_RETURN_EARLY on one stay","before":"Stay flagged early by that step","after":"Stay as it was before the flag","payload":["admissionId; now; role; optional recordSeq."],"scope":"coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1393,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":266,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-return-early.test.ts"]},"reason":"Reviewed command model: takes back the newest early-return flag on a stay within the Undo window."},{"event":"UNDO_HANDOVER_SIGN_OFF","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":677},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1646},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":267}],"status":"modelled","model":{"subject":"Latest undoable RECORD_HANDOVER_SIGN_OFF on the named subject","before":"Saved step record and unchanged post-step state","after":"Latest sign-off for that ward or network removed","payload":["unitId for ward sign-off; omitted names network subject; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator or ward; original acting role/ward or coordinator; a ward must name its own ward. Authenticated record/place scope remains required. Only the statewide coordinator may omit unitId for a whole-network subject; a scoped coordinator must name a ward inside its scope.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","Shared scoped callers cannot resolve a missing unitId to the whole-network sign-off; an ordinary in-scope ward target remains allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_HANDOVER_SIGN_OFF; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-consolidated-authority.test.ts"]},"reason":"Reviewed command model: Latest sign-off for that ward or network removed."},{"event":"UNDO_SITE_HANDOVER_SIGN_OFF","roles":["bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":680},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1647},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":268}],"status":"modelled","model":{"subject":"Latest undoable RECORD_SITE_HANDOVER_SIGN_OFF on the named subject","before":"Saved step record and unchanged post-step state","after":"Latest sign-off for that site removed; no ward sign-off changed","payload":["siteCode; now; role; optional recordSeq matching the exact newest step."],"scope":"bed_manager only for its own site; coordinator is not eligible even if it signed as cover. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_SITE_HANDOVER_SIGN_OFF; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":283,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-site-handover-sign-off.test.ts"]},"reason":"Reviewed command model: Latest sign-off for that site removed; no ward sign-off changed."},{"event":"UNDO_ED_STEP","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":681},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1648},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":269}],"status":"modelled","model":{"subject":"Latest undoable RECORD_ARRIVED_IN_DEPARTMENT, RECORD_EXAMINATION, RECORD_MEDICAL_CLEARANCE, RECORD_TRANSPORT_NEED, RECORD_ED_PRESENTATION, HANDOVER_READY, REQUEST_PSYCH_REVIEW or RECORD_PSYCH_REVIEW_SEEN on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest ED board step and all records it changed restored","payload":["movementId or referralId identifying original subject; now; role; optional recordSeq matching the exact newest step."],"scope":"ed, ward, community or coordinator; original acting role or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_ARRIVED_IN_DEPARTMENT, RECORD_EXAMINATION, RECORD_MEDICAL_CLEARANCE, RECORD_TRANSPORT_NEED, RECORD_ED_PRESENTATION, HANDOVER_READY, REQUEST_PSYCH_REVIEW or RECORD_PSYCH_REVIEW_SEEN; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-examination-save.dom.test.tsx","tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Newest ED board step and all records it changed restored."},{"event":"UNDO_TRANSPORT_STEP","roles":["officer","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":682},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1649},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":270}],"status":"modelled","model":{"subject":"Latest undoable TRANSPORT_ACCEPTED, TRANSPORT_EN_ROUTE, PATIENT_COLLECTED or PATIENT_ARRIVED on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest transport stage reversed, including arrival-created stay and affected bed/resource changes","payload":["movementId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"officer, ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for TRANSPORT_ACCEPTED, TRANSPORT_EN_ROUTE, PATIENT_COLLECTED or PATIENT_ARRIVED; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-undo-dependent-records.test.ts"]},"reason":"Reviewed command model: Newest transport stage reversed, including arrival-created stay and affected bed/resource changes."},{"event":"UNDO_DEPARTURE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":683},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1650},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":271}],"status":"modelled","model":{"subject":"Latest undoable RECORD_LEAVING or RECORD_PATIENT_DISCHARGE on the named subject","before":"Saved step record and unchanged post-step state","after":"Departure reversed, stay and capacity restored if still safe","payload":["admissionId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_LEAVING or RECORD_PATIENT_DISCHARGE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-departure-undo-integrity.test.ts"]},"reason":"Reviewed command model: Departure reversed, stay and capacity restored if still safe."},{"event":"UNDO_ABSENT_WITHOUT_LEAVE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":684},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1651},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":272}],"status":"modelled","model":{"subject":"Latest undoable RECORD_ABSENT_WITHOUT_LEAVE on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest absence record and related row changes reversed","payload":["admissionId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_ABSENT_WITHOUT_LEAVE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-engine-safety.test.ts"]},"reason":"Reviewed command model: Newest absence record and related row changes reversed."},{"event":"UNDO_BED_MEETING_ACTION","roles":["coordinator","ward","ed","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":686},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1652},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":273}],"status":"modelled","model":{"subject":"Latest undoable COMPLETE_BED_MEETING_ACTION or RECORD_BED_MEETING_ACTION on the named subject","before":"Saved step record and unchanged post-step state","after":"One completed meeting action reopened to its exact prior state","payload":["subject {kind:movement|admission,id}; action BedMeetingActionKind; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator, ward, ed, community or bed_manager; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for COMPLETE_BED_MEETING_ACTION or RECORD_BED_MEETING_ACTION (Chase Undo); removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-bed-meeting-undo-event-type.ts","line":10,"sha256":"a112bd8031c48d720a344b7a3fe9821b6f41db2d88956a2b001f8e5fca8fdb41"}],"tests":["tests/ward-bed-meeting-undo.test.ts"]},"reason":"Reviewed command model: One completed meeting action reopened to its exact prior state."},{"event":"UNDO_BED_STEP","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":688},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1653},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":274}],"status":"modelled","model":{"subject":"One bed (unitId and bedNumber) or one leave bed record","before":"Bed as the SET_BED_CLOSED or END_LEAVE_BED step left it","after":"Bed or leave record restored to before that step","payload":["now; role; optional recordSeq; actingUnitId when ward; leaveBedId, or unitId and bedNumber."],"scope":"ward, bed_manager or coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1401,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":274,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-tier1-undo.test.ts","tests/ward-undo-dependent-records.test.ts"]},"reason":"Reviewed command model: takes back a bed closed or reopened, or a return from leave, within the Undo window."},{"event":"UNDO_RELEASE_STEP","roles":["coordinator","ward","ed","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":689},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1654},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":275}],"status":"modelled","model":{"subject":"One movement, one bed release, or one planned admission","before":"As the release, confirm, cancel or withdraw step left it","after":"Restored to before that step","payload":["now; role; optional recordSeq; actingUnitId when ward; movementId, releaseId or plannedAdmissionId."],"scope":"coordinator, ward, ed, community or bed_manager in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1402,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":275,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-tier1-undo.test.ts"]},"reason":"Reviewed command model: takes back a released bed, confirmed discharge sign-off, cancelled transport, withdrawn ward request or cancelled planned admission."},{"event":"UNDO_PATIENT_RECORD","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":690},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1655},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":276}],"status":"modelled","model":{"subject":"One patient record","before":"As the CTO or archive step left it","after":"Patient record restored to before that step","payload":["patientId; now; role; optional recordSeq."],"scope":"community or coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1403,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":276,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-retained-umrn.ts","line":25,"sha256":"7968243f077b9d5c9a6fe6a56385f48ff6a97aa39cfdeec8fe97f05919693d80"}],"tests":["tests/ward-tier1-undo.test.ts","tests/ward-retained-umrn.test.ts"]},"reason":"Reviewed command model: takes back a community treatment order recorded or ended, or a record archived in error."},{"event":"RECORD_CARE_PLAN","roles":["ward","ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":694},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":14},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":44}],"status":"modelled","model":{"subject":"A patient record's care plans","before":"Patient exists, holding zero or more care plans (at most one Current)","after":"New Current plan appended; any earlier Current plan marked Superseded, never deleted","payload":["patientId; plan with type and what helps from fixed lists, agreed by (short text), typed dates, optional key contact and one short note","optional attachment as file type and size only (never the file or its name); role and now"],"scope":"Ward, ED, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; plan type and helps on their lists; agreed by and agreed date required","Short text over its limit refused, never shortened; attachment needs a listed type and a positive byte size; at most 20 plans per person"],"effects":["Replaces the patient's carePlans with the superseded list plus the new Current plan","Typed-text event: a session that sends it stops saving to browser storage"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":44,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":696,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":98,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: a new Current care plan on the patient; the previous Current plan becomes Superseded."},{"event":"RECORD_TRIBUNAL_HEARING","roles":["ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":695},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":22},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":81}],"status":"modelled","model":{"subject":"A patient record's tribunal hearing","before":"Patient exists, with or without an earlier hearing date","after":"tribunalHearing holds the typed date, optional typed time, role and time recorded; any earlier hearing and outcome replaced","payload":["patientId; date as YYYY-MM-DD; optional time as HH:MM; role and now"],"scope":"Ward, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; a real calendar date; a 24-hour time when given"],"effects":["Shown as typed, never a countdown (D-93); a worded flag once the date has passed with no outcome"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":81,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":697,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":149,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: a Mental Health Tribunal hearing date held on the patient as typed."},{"event":"RECORD_TRIBUNAL_OUTCOME","roles":["ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":696},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":33},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":95}],"status":"modelled","model":{"subject":"A patient record's tribunal hearing","before":"Patient exists with a recorded hearing date","after":"tribunalHearing.outcome holds Held, Adjourned or Cancelled with role and time recorded","payload":["patientId; outcome from TRIBUNAL_OUTCOMES; role and now"],"scope":"Ward, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; a hearing date must be recorded; outcome on the list"],"effects":["Clears the hearing-date-passed flag"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":95,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":698,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}]},"reason":"Source-reviewed command model: the outcome of the recorded tribunal hearing, held beside its date."},{"event":"SET_CULTURAL_SUPPORT_REQUEST","roles":["ward","ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":697},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":41},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":107}],"status":"modelled","model":{"subject":"A patient record's cultural support request","before":"Patient exists, with or without a request","after":"culturalSupportRequested holds the listed request, or is removed when request is null","payload":["patientId; request from CULTURAL_SUPPORT_REQUESTS or null; role and now"],"scope":"Ward, ED, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; request on the list or null"],"effects":["Never derived from the Aboriginal status field; set only by this event"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":107,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":699,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":168,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: cultural support the person or family asked for, set or taken off."}],"contractSha256":"7cfda9a71c556b4d10a573977f0ef64456a4f9bb9890c7a236952cd73bbb52ad","made":{"builtAt":"2026-11-11T22:24:35.725Z","commit":"a867ee3e7a1a846aa19495989254b0a60d143a4f","branch":"claude/project-thread-e15xqk","dirty":true,"dirtyCount":70},"refusalCoverage":null};
+      const DATA = {"vocab":{"vocabularies":{"DECLINE_REASONS":{"file":"ward-model.ts","members":["no_suitable_bed","age_band_not_provided_here","sex_designation_unavailable","secure_bed_unavailable","belongs_to_another_service","referred_elsewhere","specialling_unavailable","acuity_mix","capability_mismatch","bed_pulled_for_earlier_referral","another_reason"]},"SUPPORT_SERVICE_TYPES":{"file":"ward-model-bed-release.ts","members":["pharmacy","transport","cleaning"]},"ARRIVAL_CHECKS":{"file":"ward-model-bed-release.ts","members":["contraband_search","medication_chart","interpreter_booked","aboriginal_liaison_offered"]},"BED_RELEASE_STATES":{"file":"ward-model-bed-release.ts","members":["expected","confirmed","discharged"]},"BED_RELEASE_WAITING_ON":{"file":"ward-model-bed-release.ts","members":["Awaiting ward round","Awaiting family or carer agreement","Awaiting accommodation","Awaiting community team acceptance","Awaiting legal or Mental Health Act process","Awaiting transport","Nothing outstanding"]},"HEALTH_SERVICES":{"file":"ward-model-vocabulary.ts","members":["North Metro","South Metro","East Metro","WACHS","CAHS","Private"]},"COHORTS":{"file":"ward-model-vocabulary.ts","members":["Adult","Older adult","Youth"]},"BLOCKERS_MEANING_NOTHING_IS_BLOCKING":{"file":"ward-model-vocabulary.ts","members":["No blocker","None — in transit","None — handover complete","None — the movement did not proceed","None — cleared"]},"SEXES":{"file":"ward-model-vocabulary.ts","members":["Female","Male"]},"RECORDED_SEXES":{"file":"ward-model-vocabulary.ts","members":["Another term","Not recorded"]},"URGENCY_LEVELS":{"file":"ward-model-vocabulary.ts","members":["1","2","3"]},"ATS_CATEGORIES":{"file":"ward-model-vocabulary.ts","members":["1","2","3","4","5"]},"TRAVEL_MODES":{"file":"ward-model-vocabulary.ts","members":["Ambulance (St John)","Mental Health Transport","Patient transport service","RFDS","Police escort","Ward escort","Family or carer"]},"ARRIVAL_MODES":{"file":"ward-model-vocabulary.ts","members":["ambulance","mental_health_transport","hospital_transfer","rfds","police","ward_escort","self"]},"UPLOADED_FILE_TYPES":{"file":"ward-model-vocabulary.ts","members":["PDF","JPEG","PNG","Other"]},"SEX_DESIGNATIONS":{"file":"ward-model-vocabulary.ts","members":["Undesignated","Female only","Male only"]},"REFERRAL_GENDERS":{"file":"ward-model-vocabulary.ts","members":["Female","Male","Non-binary","Different term"]},"MOVEMENT_STAGES":{"file":"ward-model-vocabulary.ts","members":["placement_requested","destination_review","accepted_awaiting_bed","pulled","handover_ready","moving","arrived"]},"STEP_BACK_REASONS":{"file":"ward-model-vocabulary.ts","members":["recorded_in_error","the_decision_changed","the_patient_situation_changed","the_bed_was_lost"]},"PAPER_EXPIRY_CORRECTION_REASONS":{"file":"ward-model-vocabulary.ts","members":["transcription_error","paper_rechecked"]},"LEGAL_FORM_MAKER_ROLES":{"file":"ward-model-vocabulary.ts","members":["medical_practitioner","amhp","psychiatrist","mental_health_practitioner","person_in_charge"]},"LEGAL_FORM_COPY_STATES":{"file":"ward-model-vocabulary.ts","members":["yes","declined","not_yet"]},"LEGAL_FORM_ENDINGS":{"file":"ward-model-vocabulary.ts","members":["revoked","form_3e","replaced","ended_as_typed"]},"LEGAL_FORM_CONSENT_STATES":{"file":"ward-model-vocabulary.ts","members":["yes","not_yet"]},"TRANSPORT_PROVIDERS":{"file":"ward-model-movement-parts.ts","members":["Ambulance service"]},"TRANSPORT_LEGAL_STATUSES":{"file":"ward-model-movement-parts.ts","members":["voluntary","involuntary"]},"TRANSPORT_EXCEPTION_GAPS":{"file":"ward-model-movement-parts.ts","members":["legal_status_differs","transport_order_missing","fit_to_travel_missing"]},"TRANSPORT_EXCEPTION_REASONS":{"file":"ward-model-movement-parts.ts","members":["paper_sighted","treating_team_confirmed","urgent_to_follow"]},"MOVEMENT_REFERRAL_ABSENCE_REASONS":{"file":"ward-model-movement-parts.ts","members":["none_raised","not_asked"]},"EXAMINATION_OUTCOMES":{"file":"ward-model-movement-parts.ts","members":["inpatient_order","community_order","revoked","further_examination_ordered"]},"PSYCH_REVIEW_GRADES":{"file":"ward-model-movement-parts.ts","members":["registrar","consultant"]},"ED_OUTCOMES":{"file":"ward-model-movement-parts.ts","members":["for_discharge","for_community_follow_up"]},"REFERRAL_SOURCES":{"file":"ward-model-referral-parts.ts","members":["community","crisis_service","ambulance","inter_hospital","ed_medical","gp","psychiatric_ward"]},"REFERRAL_STATES":{"file":"ward-model-referral-parts.ts","members":["queued","accepted","declined"]},"COMMUNITY_DECLINE_REASONS":{"file":"ward-model-referral-parts.ts","members":["outside_the_teams_catchment","needs_inpatient_care_not_community_follow_up","client_declined_or_could_not_be_contacted","already_open_to_another_community_team"]},"HOME_REGIONS":{"file":"ward-model-referral-parts.ts","members":["Perth Metropolitan","Peel","South West","Great Southern","Wheatbelt","Goldfields-Esperance","Mid West","Gascoyne","Pilbara","Kimberley"]},"REFERRAL_DESTINATION_KINDS":{"file":"ward-model-referral-parts.ts","members":["psychiatric_ward","emergency_department","community_team"]},"REFERRAL_PURPOSES":{"file":"ward-model-referral-parts.ts","members":["bed","psychiatric_review","medical_assessment"]},"COMMUNITY_REFERRAL_PURPOSES":{"file":"ward-model-referral-parts.ts","members":["follow_up","assess_for_admission"]},"REFERRAL_ADDRESSING_STATES":{"file":"ward-model-referral-parts.ts","members":["queued","accepted","declined","cancelled"]},"SUBURB_UNKNOWN_REASONS":{"file":"ward-model-referral-parts.ts","members":["not_known"]},"ABSENCE_STEPS":{"file":"ward-model-leave.ts","members":["searched","psychiatrist_told","return_order_made","description_recorded","police_notified","next_of_kin_told"]},"URGENCY_CHANGE_REASONS":{"file":"ward-change-reasons.ts","members":["reassessed","new_information","correcting_an_error"]},"LEGAL_STATUS_CHANGE_REASONS":{"file":"ward-change-reasons.ts","members":["recorded_by_treating_team","correcting_an_error"]},"LEGAL_FORM_RECEIPT_CORRECTION_REASONS":{"file":"ward-change-reasons.ts","members":["recorded_in_error","recorded_against_wrong_movement","form_had_not_physically_arrived"]},"RELEASE_PULL_REASONS":{"file":"ward-change-reasons.ts","members":["patient_no_longer_coming","bed_needed_for_another_patient","ward_withdrew_the_bed","pull_made_in_error"]},"CANCEL_TRANSPORT_REASONS":{"file":"ward-change-reasons.ts","members":["provider_unavailable","patient_not_ready","destination_changed","job_created_in_error"]},"STOP_TRANSPORT_REASONS":{"file":"ward-change-reasons.ts","members":["The examination was revoked","The referral was withdrawn","The receiving ward can no longer take the patient","Absconded in transit, whereabouts unknown"]},"TRANSPORT_WHEREABOUTS":{"file":"ward-change-reasons.ts","members":["Back at the sending emergency department","At another emergency department","At a general hospital","With the transport crew","Another place — needs follow-up"]},"DIVERSION_REASONS":{"file":"ward-change-reasons.ts","members":["Needs urgent medical care on the way","The vehicle or crew was sent to an emergency","The receiving ward can no longer take the patient","Another reason — needs follow-up"]},"ESCALATION_CONTACTS":{"file":"ward-change-reasons.ts","members":["State bed coordination desk","Duty psychiatrist","Bed management","Nurse unit manager (destination ward)","Escort or transport provider","Other service"]},"BED_RELEASE_BLOCKERS":{"file":"ward-change-reasons.ts","members":["Awaiting clean","Awaiting pharmacy","Awaiting placement confirmation","Awaiting service coordination","Awaiting accommodation","Awaiting transport","Awaiting receiving-service acceptance","Awaiting family or carer arrangement","Funding or plan decision pending"]},"WITHDRAWAL_REASONS":{"file":"ward-change-reasons.ts","members":["another_unit_accepted","referrer_withdrew","coordinator_withdrew","ed_outcome_recorded"]},"WARD_REQUEST_WITHDRAWAL_REASONS":{"file":"ward-change-reasons.ts","members":["no_answer_from_the_ward","bed_no_longer_available","needs_changed_ward_no_longer_suits","closer_to_home_or_family_elsewhere","making_room_within_the_referral_limit","referred_in_error","another_reason"]},"OVERRIDE_REASONS":{"file":"ward-change-reasons.ts","members":["The receiving team has agreed despite the mismatch","Clinical urgency outweighs the mismatch","The bed information is known to be out of date","Continuity with a previous admission at this unit","Closer to the person's home or family"]},"REFERRAL_CAP_REASONS":{"file":"ward-change-reasons.ts","members":["No answer yet from the wards already asked","Clinical urgency needs a wider search","The wards already asked are unlikely to have a bed soon"]},"NOT_ON_SENDING_WARD_REASONS":{"file":"ward-change-reasons.ts","members":["Recently discharged from this ward","Known to this ward's team but not in a bed"]},"BED_PREPARATION_NOTES":{"file":"ward-change-reasons.ts","members":["Being cleaned","Awaiting maintenance or repair"]},"GENDER_PLACEMENT_REASONS":{"file":"ward-change-reasons.ts","members":["A single room is available on this ward","The patient's stated preference, agreed with the ward","No single room is free; the ward agreed a bed and a plan for privacy","The only suitable Ready bed, agreed with the ward","The patient knows this ward from an earlier stay","Closer to the patient's home or supports"]},"URGENT_MARK_REASONS":{"file":"ward-change-reasons.ts","members":["cannot_safely_prevent_leaving","cannot_be_observed_safely_here","safety_of_others_in_this_setting","no_psychiatric_cover_at_this_site","needs_medical_care_unavailable_here","escort_in_place_and_unsustainable","cannot_protect_from_others_here","setting_unsuitable_for_age_group","this_setting_cannot_continue_current_care","another_reason_not_listed"]},"WARD_INTAKE_CONSTRAINTS":{"file":"ward-change-reasons.ts","members":["staffing_shortage","infection_control","bay_or_room_closed","high_acuity_on_ward","waiting_for_bed_clean","other_call_the_ward"]},"DISCHARGE_DELAY_CLEAR_REASONS":{"file":"ward-change-reasons.ts","members":["resolved_clinically","package_confirmed","accommodation_secured","transport_arranged","family_carer_ready","entered_in_error","other"]},"ADMISSION_STATES":{"file":"ward-admissions.ts","members":["waitlisted","pulled","occupied","departed"]},"FOLLOW_UP_STATES":{"file":"ward-admissions.ts","members":["arranged","not_arranged"]},"DISCHARGE_BARRIERS":{"file":"ward-admissions.ts","members":["Accommodation / Housing","NDIS","SAT / Public Guardian","RACF / Aged Care","Clinical / Treatment","Social / Family","Several"]},"DISCHARGE_ROLE_LABELS":{"file":"ward-admissions.ts","members":["Nurse in charge"]},"PLANNED_ADMISSION_REASONS":{"file":"ward-admissions.ts","members":["court_ordered","planned_ect","respite","planned_transfer","other"]},"PLANNED_ADMISSION_CANCEL_REASONS":{"file":"ward-admissions.ts","members":["no_longer_needed","admitted_elsewhere","rebooked","booked_in_error"]},"PLANNED_ADMISSION_STATES":{"file":"ward-admissions.ts","members":["booked","cancelled","arrived"]},"RELEASE_BANDS":{"file":"ward-bed-availability.ts","members":["now","by-midday","by-1600","tonight","tomorrow"]},"GENDERS":{"file":"ward-patients.ts","members":["Female","Male","Non-binary","Different term"]},"PATIENT_FIELDS":{"file":"ward-patients.ts","members":["id","umrn","givenName","familyName","dateOfBirth","preferredName","sex","gender","address","suburb","generalPractitioner","catchmentCommunityTeam","legalStatus","aboriginalOrTorresStraitIslanderStatus","interpreterLanguage","communityTreatmentOrder","addedAt","registrationScope","mobilePhone","otherPhone","email","postcode","nextOfKinName","nextOfKinRelationship","nextOfKinPhone","supportPersonRole","supportPersonName","supportPersonPhone","medicareNumber","medicareReference","medicareExpiry","dvaFileNumber","healthFund","concessionCard","gpPhone","countryOfBirth","interpreterRequired","maritalStatus","advanceHealthDirective","enduringGuardian","carePlans","tribunalHearing","culturalSupportRequested"]},"ELIGIBILITY_GATES":{"file":"ward-eligibility.ts","members":["acuity","age","allocatable_bed","authorisation","capacity_freshness","cohort","forensic","legal_status","prior_decline","security","gender_designation","sex_mix","specialling"]},"CARE_PLAN_TYPES":{"file":"ward-patient-care-plans.ts","members":["Crisis/safety plan","Frequent presenter plan","Community care plan","Other"]},"CARE_PLAN_HELPS":{"file":"ward-patient-care-plans.ts","members":["Quiet space","Known staff member","Family or carer involved early","Clear plan explained","Interpreter","Cultural support","Contact the community team"]},"TRIBUNAL_OUTCOMES":{"file":"ward-patient-care-plans.ts","members":["Held","Adjourned","Cancelled"]},"CULTURAL_SUPPORT_REQUESTS":{"file":"ward-patient-care-plans.ts","members":["Aboriginal liaison officer","Other cultural support"]}},"labels":{"stepBackReasonLabels":{"recorded_in_error":"Recorded in error","the_decision_changed":"The decision changed","the_patient_situation_changed":"The situation changed","the_bed_was_lost":"The bed was lost"},"suburbUnknownLabels":{"not_known":"Suburb not known"},"legalFormReceiptCorrectionReasonLabels":{"recorded_in_error":"Recorded in error","recorded_against_wrong_movement":"Recorded against the wrong movement","form_had_not_physically_arrived":"Form had not physically arrived"},"withdrawalReasonLabels":{"another_unit_accepted":"Withdrawn — another unit accepted this patient.","referrer_withdrew":"Withdrawn by the referrer.","coordinator_withdrew":"Withdrawn by the coordinator.","ed_outcome_recorded":"Withdrawn — the department recorded an outcome for this patient."},"wardRequestWithdrawalReasonLabels":{"no_answer_from_the_ward":"No answer from the ward yet","bed_no_longer_available":"The bed is no longer available","needs_changed_ward_no_longer_suits":"Needs have changed; this ward no longer suits","closer_to_home_or_family_elsewhere":"Closer to home or family elsewhere","making_room_within_the_referral_limit":"Making room within the referral limit","referred_in_error":"Referred in error","another_reason":"Another reason — needs follow-up"},"changeReasonLabels":{"cannot_be_observed_safely_here":"Cannot be observed safely here","no_psychiatric_cover_at_this_site":"No psychiatric cover at this site","cannot_safely_prevent_leaving":"Cannot safely prevent leaving","needs_medical_care_unavailable_here":"Needs medical care unavailable here","safety_of_others_in_this_setting":"Safety of others in this setting","escort_in_place_and_unsustainable":"Escort in place and unsustainable","cannot_protect_from_others_here":"Cannot protect from harm by others here","setting_unsuitable_for_age_group":"No age-appropriate area here","this_setting_cannot_continue_current_care":"This setting cannot continue current care","another_reason_not_listed":"Another reason, not listed here","reassessed":"Reassessed","new_information":"New information","correcting_an_error":"Correcting an error","not_given":"No reason given","recorded_by_treating_team":"Recorded by treating team","patient_no_longer_coming":"No longer coming","bed_needed_for_another_patient":"Bed needed elsewhere","ward_withdrew_the_bed":"Ward withdrew the bed","pull_made_in_error":"Pull made in error","provider_unavailable":"Provider unavailable","patient_not_ready":"Not yet ready","destination_changed":"Destination changed","job_created_in_error":"Job created in error"},"wardIntakeConstraintLabels":{"staffing_shortage":"Staffing shortage","infection_control":"Infection control","bay_or_room_closed":"Bay or room closed","high_acuity_on_ward":"High acuity on the ward","waiting_for_bed_clean":"Waiting for a bed to be cleaned","other_call_the_ward":"Other — call the ward"}}},"actions":[{"event":"RECEIVE_REFERRAL","name":"Raise a referral at the front door","group":"At the front door","lane":"expected","nodes":["raised","addressed","armCommunity","armWard","armEd","srcCommunity","srcCrisis","srcPolice","srcAmbulance","srcHospital","srcEd","srcGp"],"roles":["community","ed","ward","coordinator"],"does":"Creates a front-door referral to the chosen destinations, bounded by the configured parallel-referral cap. Distinct named wards may be asked together; duplicate recipients and a broad ward arm mixed with named ward arms are refused.","needs":"A known patient and source, valid destination/intake answers and a unique submission id when supplied. An ED uses ed_medical; a ward uses psychiatric_ward and its own origin ward, and must carry that ward's site. Form rule (design audit FORM-REF, 5 Nov 2026): the home region may be left out (it warns in the drawer and shows as not recorded), and the engine also accepts a referral with no origin site, though the drawer fills an ED or community referral's location and referring service from the sending desk and blocks Send when it cannot (Josh, 5 Nov 2026); one that is given must be listed, and a supplied originSiteCode must resolve in the world's state.scenario network, including a fictional-network scenario. The intake may carry an unconfirmed catchment, a pending clearance with no expected time or contact, and blank referrer contact details, but a referrer phone that is typed must be a phone number (digits and the form's own characters; audit M39, 10 Nov 2026); the legal status, clearance answer, age band, urgency and gender still block in the drawer.","changes":"Creates the referral with every destination set to waiting.","reasons":["COHORTS","REFERRAL_DESTINATION_KINDS","REFERRAL_PURPOSES","SEXES","REFERRAL_GENDERS","REFERRAL_SOURCES","HOME_REGIONS"],"refuses":[{"when":"Guard: event.destinations.length === 0","message":"RECEIVE_REFERRAL needs at least one destination","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":381}},{"when":"Guard: event.destinations.length > state.configuration.parallelReferralCap","message":"RECEIVE_REFERRAL may address at most ${state.configuration.parallelReferralCap} destinations, not ${event.destinations.length}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":387}},{"when":"Guard: new Set(recipientKeys).size !== recipientKeys.length || (broadWard && kinds.filter((kind) => kind === \"psychiatric_ward\").length > 1)","message":"RECEIVE_REFERRAL cannot address the same destination kind twice","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":405}},{"when":"Guard: !scenarioEmergencyDepartments(state.scenario).some((department) => department.id === edDestination.edId)","message":"RECEIVE_REFERRAL edId must resolve to a real emergency department","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":419}},{"when":"Guard: event.role === \"ed\" && event.source !== \"ed_medical\"","message":"RECEIVE_REFERRAL raised as role ed must carry source ed_medical, not ${event.source}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":482}},{"when":"Guard: event.source === \"ed_medical\" && !originSite.emergencyDepartment","message":"RECEIVE_REFERRAL source ed_medical requires an origin site with an emergency department","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":546}}],"screen":{"screen":"use-ward-referral-drawer-state.ts (+ command completion helper)","control":"Send referral A recoverable draft keeps one submission id, so reopening the sheet after an uncertain send reconciles that same submission instead of minting another referral."},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":401,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":362,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/referrals/use-ward-referral-drawer-state.ts","line":997,"sha256":"d97d86918bafd69a286053ba13087a5b9809f740ca07d7ab3106e0f044275909"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":386,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":392,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":410,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":424,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":487,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":551,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"ADD_PATIENT","name":"Add a person who is not on file","group":"At the front door","lane":"record","nodes":["raised","rkDuplicate","rkIntakeLost"],"roles":["ed","community","ward","coordinator"],"does":"Registers somebody with no referral, movement or bed record yet — the “searched, nobody came up, so add them” record.","needs":"A unique nonblank UMRN, given and family names, a real date of birth from 1900 through the applicable Perth day, and valid optional sex, gender, Indigenous-status and source-desk values. Optional preferred name, address, general practitioner, catchment community team, interpreter language and the 22 optional administrative details (ADMIN_DETAIL_FIELDS: contacts, next of kin and support person, Medicare and funding, planning) are trimmed; blank means not recorded.","changes":"Creates a new patient record, including any optional typed details given.","reasons":["GENDERS"],"refuses":[{"when":"Gender not from the list","message":"ADD_PATIENT gender must be chosen from GENDERS"}],"screen":{"screen":"add-patient.tsx (+1 other)","control":"Add patient"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":405,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":37,"sha256":"9e0f9c39d6d4a7f8f406fd438e09cd9ea7b7c6631a7bdd5e059d1f38de3caac4"},{"path":"src/components/ward-management/patients/add-patient.tsx","line":611,"sha256":"e4d277572fc48f16fc5a3746118fc7ab1758d274ed28ae459d9cd1821a2de4f0"},{"path":"src/components/ward-management/referrals/use-referral-command-completion.ts","line":426,"sha256":"4dc5c8e0880f6118448453f12bb3df5c80ec20db2762669c955b2de29bae2feb"}]}},{"event":"RECORD_MEDICAL_CLEARANCE","name":"Record whether they are medically cleared","group":"At the front door","lane":"record","nodes":["addressed","rkClearance","edArrived"],"roles":["ed","coordinator"],"does":"Records the current medical-clearance answer on a referral and synchronises its matching linked movements. Fresh positive clearance resumes a recorded medical-deterioration pause.","needs":"An existing referral, finite recording time and boolean answer. Re-clearance must be later than any unresolved linked deterioration.","changes":"Replaces the referral answer and the matching movements’ clearance. Positive re-clearance stamps resumedAt and restates their blocker; it does not restore a released bed or booking.","reasons":[],"refuses":[{"when":"Guard: !referral","message":"no referral found for id ${event.referralId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":167}},{"when":"Current handler guard; inspect the cited source for its full condition","message":"Re-clearance must be recorded after the medical deterioration.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":180}}],"screen":{"screen":"ed/ed-lists-desktop.tsx","control":"Record medically cleared"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":39,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":172,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-lists-desktop.tsx","line":186,"sha256":"ffc826779fff9455a88d5d6613c00d692ecdb7933bf87882fe31bcc756c16eb9"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":174,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":187,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_ARRIVED_IN_DEPARTMENT","name":"Mark that an expected patient has turned up","group":"At the front door","lane":"record","nodes":["addressed","edExpected","edArrived","edNeverArrives"],"roles":["ed","coordinator"],"does":"Marks that a patient the department was expecting has physically arrived.","needs":"The referral exists. The first recorded arrival wins; a later call leaves it unchanged rather than taking the minimum supplied timestamp.","changes":"Stamps the arrival time, once.","reasons":[],"refuses":[{"when":"Guard: !referral","message":"no referral found for id ${event.referralId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":216}}],"screen":{"screen":"ed/ed-lists-desktop.tsx","control":"Mark arrived in department"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":43,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":221,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-lists-desktop.tsx","line":366,"sha256":"ffc826779fff9455a88d5d6613c00d692ecdb7933bf87882fe31bcc756c16eb9"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":223,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"ACCEPT_REFERRAL","name":"Accept the referral","group":"At the front door","lane":"expected","nodes":["wardAnswers","wardAccepted","othersCancelled","cmhtAnswers","cmhtAccepted","edAnswers","edAccepted","cmhtNothing","wardBlocked","dForced","dNonBinary"],"roles":["ward","coordinator","ed","community"],"does":"A ward, emergency department or community team says yes to the destination addressed to it. The first yes automatically cancels every other destination still waiting — except a community arm, which never competes for the bed.","needs":"The destination was addressed to the acting desk and has not been withdrawn. Normally it is queued. An explicit reassessment can turn a decline into acceptance; updates on an already accepted arm add history rather than accepting twice. Ward eligibility and bed criteria still apply. At the shared authenticated boundary, a scoped caller must be authorised for the stored receiving ED or community team (including a community team in its scoped service); outbound visibility alone does not authorise the answer. The statewide coordinator retains whole-network authority. On the referral match screen the coordinator answers any arm and a desk answers only its own kind; a ward desk answers only when working in a ward scope, dispatching as ward with its acting ward.","changes":"Marks that destination accepted, cancels the other waiting non-community destinations, notifies the referrer and the receiving ward. No bed is pulled and no movement is created.","reasons":["GENDER_PLACEMENT_REASONS","OVERRIDE_REASONS"],"override":true,"refuses":[{"when":"Guard: !addressing","message":"referral ${referral.id} was not addressed to ${event.destinationKind.replace(/_/g, \" \")}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":805}},{"when":"Guard: event.destinationKind !== \"community_team\" && referralState(referral) === \"accepted\" && !(hasClinicalReassessment && addressing.state === \"accepted\")","message":"referral ${referral.id} has already been accepted elsewhere","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":836}},{"when":"Guard: addressing.state !== \"queued\" && !( (hasClinicalReassessment && addressing.state === \"accepted\") || (event.reassessment === true && addressing.state === \"declined\") )","message":"${event.destinationKind.replace(/_/g, \" \")} has already answered referral ${referral.id} (${addressing.state})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":852}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so ${event.destinationKind.replace(/_/g, \" \")} cannot accept it","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":863}},{"when":"Guard: openLinkedMovement","message":"referral ${referral.id} already has an open movement (${openLinkedMovement.id}); it cannot also be accepted into a ward while that movement is open","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":941}},{"when":"Guard: !event.unitId","message":"ACCEPT_REFERRAL into a psychiatric ward must name a unit","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":946}}],"screen":{"screen":"referral-match.tsx (+1 other)","control":"Accept at the named ward"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":437,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":745,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/community/community-screen.tsx","line":599,"sha256":"b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1330,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":421,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":813,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":844,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":860,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":871,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":949,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":954,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"DECLINE_REFERRAL","name":"Decline the referral","group":"At the front door","lane":"stall","nodes":["wardAnswers","wardDeclined","cmhtAnswers","cmhtDeclined","edAnswers","edDeclined","cmhtNothing"],"roles":["ward","coordinator","ed","community"],"does":"Records the destination’s answer. A substantive decline closes that arm; bed-unavailable reasons on a ward arm waitlist it and keep it live. Gender mismatch is not a decline reason.","needs":"A known addressed destination, matching desk kind/place and a valid reason. Re-answering a decided arm requires the documented reassessment path. At the shared authenticated boundary, a scoped caller must be authorised for the stored receiving ED or community team (including a community team in its scoped service); outbound visibility alone does not authorise the answer. The statewide coordinator retains whole-network authority. On the referral match screen the coordinator answers any arm and a desk answers only its own kind; a ward desk answers only when working in a ward scope, dispatching as ward with its acting ward.","changes":"Records a decline or waitlist history entry and the corresponding notices, retaining other arms.","reasons":["REFERRAL_DECLINE_REASONS","COMMUNITY_DECLINE_REASONS"],"refuses":[{"when":"Guard: event.destinationKind !== \"community_team\" && referralState(referral) === \"accepted\"","message":"referral ${referral.id} has already been accepted elsewhere","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1187}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so ${event.destinationKind.replace(/_/g, \" \")} cannot decline it","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1202}},{"when":"Guard: !declineReasonsFor[event.destinationKind].includes(event.reason)","message":"DECLINE_REFERRAL reason must be chosen from ${declineReasonListName[event.destinationKind]}, the vocabulary for ${event.destinationKind.replace(/_/g, \" \")} destinations","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1227}}],"screen":{"screen":"referral-match.tsx (+2 others)","control":"Decline referral"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":449,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1141,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/community/community-screen.tsx","line":539,"sha256":"b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"},{"path":"src/components/ward-management/ed/use-ed-screen-decline.ts","line":133,"sha256":"f32c28822c1a39a28697617ed37d1cada5fa8bbce0c6ec1d2d9454107f60d01f"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":466,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1195,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1210,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1235,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"RECORD_REFERRER_WITHDRAWAL","name":"The referrer takes the referral back","group":"At the front door","lane":"stall","nodes":["wardAnswers","cmhtWithdrawn","wardNothing","cmhtNothing","wardWithdrawn"],"roles":["coordinator","community","ed","ward"],"does":"The referring party withdraws — either just the community half, leaving the bed request standing, or the whole referral, which also gives back any held bed and cancels any transport.","needs":"The recorded sender desk/place or coordinator. Whole-referral withdrawal requires waiting non-withdrawn arms and no accepted placement or collected linked journey. The separately scoped community-arm path has its own reason and state checks.","changes":"Stamps the withdrawal on every still-waiting destination; closes any linked open movement as “did not proceed”.","reasons":["WARD_REQUEST_WITHDRAWAL_REASONS"],"refuses":[{"when":"Guard: event.reason === undefined || !WARD_REQUEST_WITHDRAWAL_REASONS.includes(event.reason)","message":"RECORD_REFERRER_WITHDRAWAL scoped to community_team must give a reason from WARD_REQUEST_WITHDRAWAL_REASONS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":945}},{"when":"Guard: referralState(referral) === \"accepted\"","message":"referral ${referral.id} has already been accepted, so it cannot be withdrawn","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":984}},{"when":"Guard: referral.destinations.some( (addressing) => addressing.destination.kind !== \"community_team\" && addressing.withdrawnAt !== undefined, )","message":"referral ${referral.id} has already been recorded as withdrawn by its referrer","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":991}},{"when":"Guard: waiting.length === 0","message":"every destination on referral ${referral.id} has already answered","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1001}},{"when":"Guard: collectedLinkedMovement","message":"referral ${referral.id} is linked to movement ${collectedLinkedMovement.id}, whose transport has already been collected; this needs a coordinator decision (see STOP_TRANSPORT) rather than an automatic withdrawal","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1022}}],"screen":{"screen":"referral-match.tsx","control":"Withdraw referral to community team"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":487,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":806,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/referrals/use-referral-match-state.tsx","line":202,"sha256":"5c100c488ba449b9b76e099dfa98e04a34fa726d633e9fa56b592c125f01344b"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":556,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":902,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":941,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":948,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":958,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":979,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"ADD_REFERRAL_CORRECTION","name":"Add a correction to a referral","group":"At the front door","lane":"record","nodes":["wardAnswers","addressed"],"roles":["community","ed","ward","coordinator"],"does":"Adds a dated, attributed note correcting something on a referral, at any point in its life. What was said before stays readable.","needs":"An existing referral and a nonblank note within the correction limit. It can be at any stage, but sender-kind/place restrictions apply to ward, ED and community desks.","changes":"Appends the note. Never overwrites.","reasons":[],"refuses":[{"when":"Guard: note.length === 0","message":"ADD_REFERRAL_CORRECTION note must say something — a blank is not a correction","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1209}},{"when":"Guard: note.length > REFERRAL_CORRECTION_NOTE_MAX_CHARACTERS","message":"ADD_REFERRAL_CORRECTION note is ${note.length} characters and the limit is ${REFERRAL_CORRECTION_NOTE_MAX_CHARACTERS} — it is refused rather than shortened","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1217}}],"screen":{"screen":"referrals/referral-history-corrections.tsx","control":"Add a correction"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":494,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1124,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/referrals/referral-history-corrections.tsx","line":73,"sha256":"da6432d4f3190b3305d3890162266ab68e46e2bd8a8bd22649fc91ff66499107"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1159,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1167,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LOCAL_BED_SOUGHT","name":"Record that a bed closer to home was looked for","group":"At the front door","lane":"record","nodes":["wardAnswers","addressed"],"roles":["coordinator"],"does":"Records that somebody looked for a bed nearer the person's home before sending them further. It never gates an acceptance — it exists so the search can be shown to have happened.","needs":"The referral is still undecided and no earlier local-bed search is already recorded.","changes":"Stamps the search and who did it.","reasons":[],"refuses":[{"when":"Guard: referralState(referral) !== \"queued\"","message":"referral ${referral.id} was already decided (${referralState(referral)})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1109}},{"when":"Guard: referral.localBedSought !== undefined","message":"referral ${referral.id} already records a local bed search","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1114}}],"screen":{"screen":"referral-match.tsx","control":"Record that a local bed was sought and none was suitable"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":455,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1050,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/referrals/referral-match.tsx","line":447,"sha256":"12f313fd1b9c2dcfa081b3f54ce46a20ee163651084afcc31bdceeae335ea044"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1057,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1062,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RAISE_REFERRAL","name":"Start a bed search from a department","group":"Finding a bed","lane":"expected","nodes":["seam","placement","edRaise"],"roles":["ed","community","ward","coordinator"],"does":"Creates the movement that tracks placement. An ED journey may link its addressed referral; an accepting ward or coordinator may continue an accepted direct ED/community referral. pullBed requests an atomic raise-and-pull through both ordinary checks.","needs":"Valid draft facts and a real ED unless continuing an accepted direct community referral. A linked referral and destination must match, be live and fund no other open movement; direct continuation has its own accepting-ward checks. A community continuation needs its referring service and location on the referral (the drawer fills them from the sending desk and blocks Send without them) and is refused without either, never starting at an empty site. A supplied patientId, or one inherited from the linked referral, must still name a current patient; an omitted identity remains supported.","changes":"Creates a placement_requested movement, or accepted_awaiting_bed for a valid direct continuation. Captures typed legal-paper facts; pullBed also reserves the bed only when both steps succeed.","reasons":["REFERRAL_GENDERS"],"refuses":[{"when":"Guard: !raisedFrom","message":"RAISE_REFERRAL referralId must name a referral this system already holds, and ${event.referralId} names none","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":161}},{"when":"Guard: !addressing","message":"referral ${referral.id} was never addressed to ${department?.name ?? \"this ward\"}, so a journey raised there did not come from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":229}},{"when":"Guard: addressing.withdrawnAt !== undefined","message":"referral ${referral.id} was withdrawn by its referrer, so no journey can be raised from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":241}},{"when":"Guard: addressing.state === \"declined\"","message":"${department?.name ?? \"This ward\"} declined referral ${referral.id}, so no journey can be raised from it","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":251}},{"when":"Guard: blockingLinkedMovement","message":"referral ${referral.id} already has a linked movement (${blockingLinkedMovement.id}) that did not close as \"did not proceed\"; a second journey cannot be raised while it stands","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":270}}],"screen":{"screen":"ed-screen.tsx","control":"Ask for a bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":37,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":92,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward/ward-accepted-referral-placement-form.tsx","line":100,"sha256":"09fa59dfc3618d8943dcf23a008c14b4747a9a1deae31e892a762db3808f8c4f"},{"path":"src/components/ward-management/ed/ed-screen.tsx","line":333,"sha256":"c4987128df9afd2b09fe2bd0636cfa523fa2fae4bf693c0b58e6c78a16144a9f"},{"path":"src/components/ward-management/referrals/pull-accepted-referral.tsx","line":133,"sha256":"e7628cba7f522dcaab9c9b1c7091518dfc979f1178a7e44d3d93d1555926976f"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":160,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":216,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":228,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":238,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":257,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"REFER_TO_UNITS","name":"Ask one or more wards","group":"Finding a bed","lane":"expected","nodes":["asked","dForced"],"roles":["coordinator"],"does":"Adds new wards to an open placement request without dropping live requests. The configured cap warns and records an over-cap act; it does not prohibit asking more wards.","needs":"An open referrable stage, real new wards, valid optional reasons, eligibility and any required recorded gender-placement check. Already-live wards are not rechecked or counted twice.","changes":"Adds those wards to the live list and moves the record to destination review.","reasons":["OVERRIDE_REASONS","GENDER_PLACEMENT_REASONS"],"override":true,"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":707}},{"when":"Guard: movement.closure","message":"cannot refer a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":709}},{"when":"Guard: !REFERRABLE_MOVEMENT_STAGES.includes(movement.stage)","message":"cannot refer a movement at its current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":729}},{"when":"Guard: unknown","message":"no unit found for id ${unknown}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":734}}],"screen":{"screen":"shortlist-panel.tsx","control":"Refer"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":85,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":675,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/capacity/step-down-board.tsx","line":48,"sha256":"d40940bff7a00cac5ae44bf3b2dfb7a8894e9578bf624275b4bb2fb8fe4d7fc0"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":316,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/coordinator/shortlist-panel.tsx","line":844,"sha256":"6f864c8eff0bea759c1460ed1e8ebaf9bb4dc7d80aa3d515d0788709c109f9d0"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":677,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":679,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":699,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":704,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"ACCEPT_IN_PRINCIPLE","name":"A ward accepts in principle","group":"Finding a bed","lane":"expected","nodes":["inPrinciple","dForced","dGenderHard"],"roles":["ward","coordinator"],"does":"A ward formally accepts the patient and becomes the destination. Every other ward asked is withdrawn automatically. Still no bed is set aside.","needs":"An open movement at destination_review, a live request to the acting ward, no earlier acceptance, current ward availability and eligibility. A supplied bed number must be valid, suitable and neither occupied nor held; required gender/override records must exist.","changes":"Records the accepting ward, clears every other live request, and tells the referring department.","reasons":[],"override":true,"refuses":[{"when":"Guard: movement.closure","message":"cannot accept a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":114}},{"when":"Guard: movement.acceptedUnitId","message":"movement ${movement.id} is already accepted at ${already?.name ?? movement.acceptedUnitId}; the referral to ${attemptedUnit?.name ?? event.unitId} was withdrawn","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":122}},{"when":"Guard: movement.stage !== \"destination_review\"","message":"cannot accept a movement at its current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":129}},{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":133}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Accept in principle"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":86,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":108,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1292,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":476,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":295,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":114,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":122,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":129,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":133,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"DECLINE","name":"A ward declines the bed search","group":"Finding a bed","lane":"stall","nodes":["sWardDecline"],"roles":["ward","coordinator"],"does":"A ward records a substantive decline or a bed-unavailable waitlist answer. A waitlist keeps the ward request live; gender mismatch does not decline it.","needs":"The record is at destination review and this ward holds a live request.","changes":"A substantive decline removes that ward and appends history and a referrer notice. A waitlist keeps the request, records waitlisted history and notifies the referrer; the stage remains destination_review.","reasons":["DECLINE_REASONS"],"refuses":[{"when":"Guard: movement.stage !== \"destination_review\"","message":"cannot decline at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":254}},{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":258}},{"when":"Guard: !DECLINE_REASONS.includes(event.reason) && !Object.hasOwn(LEGACY_DECLINE_REASONS, event.reason)","message":"DECLINE reason must be chosen from DECLINE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":309}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Confirm decline"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":91,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":240,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1383,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":409,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":254,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":258,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":312,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"WITHDRAW_WARD_REQUEST","name":"Take back one ward's request","group":"Finding a bed","lane":"stall","nodes":["asked","sWithdrawWard"],"roles":["coordinator"],"does":"Withdraws the request from one named ward only. Every other ward asked carries on considering.","needs":"That ward holds a live request.","changes":"Removes that one ward and tells it why.","reasons":["WARD_REQUEST_WITHDRAWAL_REASONS"],"refuses":[{"when":"Guard: !movement.referredUnitIds.includes(event.unitId)","message":"${event.unitId} does not hold a live referral for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1132}},{"when":"Guard: !WARD_REQUEST_WITHDRAWAL_REASONS.includes(event.reason)","message":"WITHDRAW_WARD_REQUEST reason must be chosen from WARD_REQUEST_WITHDRAWAL_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1135}}],"screen":{"screen":"shortlist-panel.tsx","control":"Withdraw this request"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":505,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1069,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/coordinator/shortlist-panel.tsx","line":886,"sha256":"6f864c8eff0bea759c1460ed1e8ebaf9bb4dc7d80aa3d515d0788709c109f9d0"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1082,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1085,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"WITHDRAW_ACCEPTANCE","name":"Undo a ward's acceptance","group":"Finding a bed","lane":"stall","nodes":["sAcceptWithdrawn"],"roles":["coordinator"],"does":"Withdraws an acceptance before handover, including a pulled bed or a movement stepped back while retaining its held admission. A matching bed is released in the same act.","needs":"An open movement at accepted_awaiting_bed, pulled, or an earlier stepped-back stage with a held admission, plus a listed correction reason. Cancel a live booking first; collection refuses withdrawal.","changes":"Clears the accepting ward and time and any released hold fields (including the referral arm's numbered bed hold), appends withdrawal/release history and notices. Ordinarily returns to destination_review; an earlier stepped-back stage stays as found. It does not re-refer the ward. For an agreed return identified by sourceAdmissionId, the bed-release notice goes to that source stay's sending ward rather than its ED alias.","reasons":["STEP_BACK_REASONS"],"refuses":[{"when":"Guard: holdsBed && movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has been collected; use STOP_TRANSPORT","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1329}},{"when":"Guard: holdsBed && movement.transport !== undefined && movement.transport.cancelledAt === undefined","message":"movement ${movement.id} has a transport job booked; cancel it (CANCEL_TRANSPORT) before withdrawing the acceptance","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1335}},{"when":"Guard: holdsBed && bedReleased === state","message":"movement ${movement.id}'s pulled bed matches no releasable reservation","source":{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1345}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Withdraw the acceptance"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":502,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1301,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1794,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1341,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1347,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1357,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"}]}},{"event":"WITHDRAW_REFERRAL","name":"Abandon the bed search","group":"Finding a bed","lane":"end","nodes":["sAbandoned"],"roles":["ed","community","ward","coordinator"],"does":"Cancels the search outright — either pulling it from every ward still being asked, or, once accepted, revoking the acceptance and giving back any held bed.","needs":"An open movement and the recorded sending desk/place or coordinator. After acceptance this path is restricted to the originating ED or coordinator and refuses after collection; other sending desks cannot revoke an accepted movement here. Execution uses canonical actingPlaceId, or a ward's actingUnitId, before the legacy placeId fallback; a supplied legacy alias that disagrees with the canonical claim is refused. Shared scope validates legacy placeId as an authority claim too.","changes":"Closes the movement as “did not proceed”, releases any held bed, cancels any live transport.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"movement ${movement.id} has already closed and cannot be withdrawn","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":919}},{"when":"Guard: event.role !== \"coordinator\" && event.role !== \"ed\"","message":"movement ${movement.id} has already been accepted by ${movement.acceptedUnitId}; only the referrer or the coordinator may revoke it now","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":990}},{"when":"Guard: movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has already been collected; use STOP_TRANSPORT to stop the journey instead of withdrawing the referral","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":999}},{"when":"Guard: movement.referredUnitIds.length === 0","message":"movement ${movement.id} holds no live referral to withdraw","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1065}}],"screen":{"screen":"ward-flow-raise.ts; ed/ed-screen-actions.ts; patients/patient-transit-operations.tsx","control":"Withdraw referral"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":383,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":883,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-raise.ts","line":13,"sha256":"a077d0f6d55ef4d03e7beca435fcbce745b6eee1628698b0f6b9acd30289c207"},{"path":"src/components/ward-management/ed/ed-screen-actions.ts","line":40,"sha256":"69b93a5f2adbb5c42be0b7ba826c12ec1b3eec58ed2a3d08ac99273ef66d4636"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":983,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":889,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":960,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":969,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1021,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"REFER_TO_COMMUNITY_TEAM","name":"Send them to a community team instead","group":"Finding a bed","lane":"diversion","nodes":["edToCommunity","cmhtFromSearch"],"roles":["ed","coordinator"],"does":"Instead of admitting, refers the patient straight to a named community team — ends the bed search, creates or reuses a real community referral, and tells everybody involved.","needs":"The record is open and transport has not collected the patient. If they are on a legal form, a conclusive examination outcome must already be recorded.","changes":"Gives back any held bed, cancels transport, withdraws live ward requests, closes the movement, and raises or reuses the community arm. When creating a new community referral, the movement's origin ED site is looked up within state.scenario, preserving the fictional-network origin when available; queued-arm reuse is unchanged.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot refer a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":487}},{"when":"Guard: !communityTeamOptions().includes(event.team)","message":"team \"${event.team}\" is not a valid community mental health team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":490}},{"when":"Guard: movement.transport?.collectedAt !== undefined","message":"movement ${movement.id}'s patient has already been collected; use STOP_TRANSPORT to stop the journey instead of referring to a community team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":500}},{"when":"Guard: isOnForm && (!movement.examination || movement.examination.outcome === \"further_examination_ordered\")","message":"movement ${movement.id} is on a legal form; a conclusive examination outcome must be recorded before referring to a community team","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":513}}],"screen":{"screen":"ed/ed-screen-row-forms.tsx","control":"Confirm CMHT referral"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":198,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":477,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ed/ed-screen-row-forms.tsx","line":693,"sha256":"092ace45298789630ea1548b50896070d092ccf6e1e2ff5efa2be02b089f0dfd"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":481,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":484,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":494,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":507,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_ED_OUTCOME","name":"The department decides they need no bed","group":"Finding a bed","lane":"end","nodes":["edOutcome","edAnswers"],"roles":["ed","coordinator"],"does":"Records that the patient no longer needs a psychiatric bed — going home, or to community follow-up — and unwinds everything already in motion.","needs":"The record is open and transport has not collected the patient. For “for discharge” on a legal form, a conclusive examination outcome must already be recorded.","changes":"Releases a held bed, cancels an uncollected transport job, drops live ward requests, closes the movement, and notifies every ward affected.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record an ED outcome for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":333}},{"when":"Current handler guard; inspect the cited source for its full condition","message":"movement ${movement.id}'s patient is actively in transit; use STOP_TRANSPORT to stop the journey instead of recording an ED outcome","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":348}},{"when":"Guard: event.outcome === \"for_discharge\" && isOnLegalFormForDischarge && (!movement.examination || movement.examination.outcome === \"further_examination_ordered\")","message":"movement ${movement.id} is on a legal form; a conclusive examination outcome must be recorded before recording \"for discharge\"","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":364}}],"screen":{"screen":"ed/ed-screen-row-forms.tsx","control":"For discharge"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":84,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":333,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-forms.tsx","line":298,"sha256":"092ace45298789630ea1548b50896070d092ccf6e1e2ff5efa2be02b089f0dfd"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":340,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":355,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":371,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_NO_REFERRAL","name":"Record that nobody referred them","group":"Finding a bed","lane":"record","nodes":["placement","edRaise"],"roles":["ed","coordinator"],"does":"Records that, on checking, nobody actually referred this patient in.","needs":"The record is open and is not already linked to a referral.","changes":"Stamps the absence and its reason.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record a referral answer for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":302}},{"when":"Guard: movement.referralId !== undefined","message":"movement ${movement.id} was raised from referral ${movement.referralId}, so it cannot also record that nobody referred this patient","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":313}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"No referral raised"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":81,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":302,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":481,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":309,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":320,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_ESCALATION","name":"Record an escalation","group":"Finding a bed","lane":"record","nodes":["asked","rkEscalate"],"roles":["coordinator"],"does":"Records that the search was escalated — which wards were tried, and who was contacted.","needs":"The record is open.","changes":"Stamps the escalation, the wards tried and the contact, and adds it to the journey's escalation history (item 28, 9 Nov 2026).","reasons":["ESCALATION_CONTACTS"],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1124}},{"when":"Guard: movement.closure","message":"cannot escalate a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1126}}],"screen":{"screen":"ward-tasks-drawer.tsx; alerts/alerts-screen.tsx; delays/delays-screen.tsx","control":"Record escalation"},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":107,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1070,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":673,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":738,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/delays/delays-screen.tsx","line":170,"sha256":"da99c0834991445b845454355401c6a6a5fa156c5e433f242c08d24ef23e9297"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1099,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1074,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"STEP_BACK_STAGE","name":"Correct the record backwards","group":"Finding a bed","lane":"record","nodes":["asked","inPrinciple","pulled"],"roles":["coordinator"],"does":"Moves the record back to an earlier point. A pure record correction — it deliberately releases no bed and cancels no transport.","needs":"An open, unarrived movement, an earlier valid stage and listed correction reason. A stage-only seeded bed hold cannot be stepped back before pulled because that would lose its reservation.","changes":"Moves the stage and logs the correction. Nothing else is touched at all.","reasons":["STEP_BACK_REASONS"],"refuses":[{"when":"Guard: movement.stage === \"arrived\" || movement.transport?.arrivedAt !== undefined","message":"cannot step back an arrived movement (invariant I-05: physical arrival is irreversible)","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":698}},{"when":"Guard: toIndex >= fromIndex","message":"STEP_BACK_STAGE target must be strictly before the movement's current stage (movement ${movement.id} is at ${stageCopy[movement.stage].label}, target was ${stageCopy[event.to].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":713}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; patients/patient-transit-operations.tsx","control":"Correct the record"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":501,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":750,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1902,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":928,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":757,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":772,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"PULL_PATIENT","name":"Take the bed","group":"Holding the bed","lane":"expected","nodes":["pulled","dRepull","dForced","dGenderHard","dNoLongerSuits"],"roles":["ward","coordinator"],"does":"The ward claims the bed it accepted, and an admission record is created marked held — not occupied. A patient is not arrived until the ward says they have arrived.","needs":"An open movement at accepted_awaiting_bed and the accepting ward, consistent reservation/identity, current capacity (the Ready figure counts live pulled admissions, and beds still being made ready must not use up all of it), eligibility, bed-kind/gender/legal checks and no conflicting active placement. Other journeys' pending numbered bed reservations at the ward (a held bed number on another movement or referral arm) also come off Ready and off the free locked and open counts, so a pull cannot take a bed another record was promised.","changes":"Reserves an allocatable bed, creates or consistently adopts the held admission and starts the configured hold timer. The bed is held rather than occupied.","reasons":["OVERRIDE_REASONS"],"override":true,"refuses":[{"when":"Guard: movement.acceptedUnitId !== event.unitId","message":"movement ${movement.id} was accepted at ${movement.acceptedUnitId ?? \"no unit\"}, not ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":92}},{"when":"Guard: !speciallingAnsweredRestore && lacksObservationStaff(movement.observation, restoreUnit, admissionsExcludingOwn)","message":"${restoreUnit.name} has not enough observation staff left; this patient needs ${observationSummary(movement.observation)} and the ward cannot staff it","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":154}},{"when":"Guard: !acuityAnsweredRestore && acuityOverrideNeededRestore","message":"${restoreUnit.name} ${HIGH_ACUITY_STAFFING_REFUSAL}. This placement ${OVERRIDE_REASON_REQUIRED} and the nurse unit manager consulted.","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":167}},{"when":"Guard: pullReady \u003c= 0","message":"no Ready bed remains at ${unit.name} (allocatable ${unit.allocatable.value}, physically empty ${unit.empty.value})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":210}},{"when":"Guard: pending > 0 && pullReady \u003c= pending","message":"every free bed at ${unit.name} is still being made ready (${pending} pending); a patient cannot be pulled to a bed that is not open","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":227}},{"when":"Guard: !speciallingAnswered && lacksObservationStaff(movement.observation, unit, state.admissions)","message":"${unit.name} has not enough observation staff left (${remainingSpeciallingCapacity(unit, state.admissions)} of ${unit.speciallingCapacity} free); this patient needs ${observationSummary(movement.observation)} and the ward cannot staff it","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":249}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Pull a bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":90,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":79,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1428,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":484,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":306,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":98,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":160,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":173,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":223,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":241,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":262,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RELEASE_PULL","name":"Give the held bed back","group":"Holding the bed","lane":"stall","nodes":["sPullReleased"],"roles":["coordinator","ward"],"does":"A ward gives back a bed it was holding before the patient arrived. The admission record is deleted outright — nobody was ever in this bed.","needs":"An open movement at pulled, a listed release reason, an authorised holding ward/coordinator and no physical collection. Cancel a live booking first. An Undo carrying expectedPull must still name this exact pull.","changes":"Returns the bed to the ward, deletes the admission, sends the record back to “accepted, awaiting bed”, and tells the department. For a return movement with sourceAdmissionId, the in-app release/withdrawal notice targets the actual sending stay ward. Ordinary ED/community origins retain their existing recipient paths; no external-provider delivery is implied. The movement's and its referral arm's held bed numbers are cleared with the pull. A release that matches no releasable bed reservation is refused rather than recorded.","reasons":["RELEASE_PULL_REASONS"],"refuses":[{"when":"Guard: movement.stage !== \"pulled\"","message":"cannot release a pull at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":483}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_PULL was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":492}},{"when":"Guard: !RELEASE_PULL_REASONS.includes(event.reason)","message":"RELEASE_PULL reason must be chosen from RELEASE_PULL_REASONS","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":501}},{"when":"Guard: bedReleased === state","message":"movement ${movement.id}'s pulled bed matches no releasable reservation","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":524}}],"screen":{"screen":"alerts/alerts-screen.tsx; ward/ward-screen.tsx; patients/patient-transit-operations.tsx","control":"Release the pulled bed"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":117,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":453,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":723,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1826,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":867,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":537,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":546,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":555,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RELEASE_HELD_BED","name":"Release a bed left held by a stopped journey","group":"Holding the bed","lane":"stall","nodes":["sStopTransport"],"roles":["coordinator","ward","ed"],"does":"Releases the bed that stopping a transport deliberately left held, once it is decided the patient is not coming after all. The only way to give that bed back.","needs":"The journey was stopped after collection, and a bed is still held.","changes":"Releases the bed and deletes the admission.","reasons":[],"refuses":[{"when":"Guard: !isStoppedTransport && !isRevokedExamHold && !awaitingRelease","message":"movement ${movement.id} was not stopped by STOP_TRANSPORT and has no examination-revoked hold, so there is no pulled bed to release this way","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":573}},{"when":"Guard: !heldBedOutstanding","message":"movement ${movement.id} has no bed pulled — it may already have been released","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":583}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_HELD_BED was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":591}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; ward/ward-arrivals-corridor.tsx","control":"Release the held bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":193,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":618,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1167,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward/ward-arrivals-corridor.tsx","line":630,"sha256":"572956c1b4769defd00bc1a5dc027ff2d76c476388cee6d36833c8321e3824a4"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":632,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":642,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":650,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"RECORD_TRANSPORT_NEED","name":"Record whether transport is needed","group":"The journey","lane":"record","nodes":["booked","dNoTransport"],"roles":["ed","ward","community","coordinator"],"does":"Records whether the patient will need help getting to the ward. Answering “no” is what lets them be marked arrived with no journey at all.","needs":"An open movement. The ward must be the sending ward; a supplied ED place must match the origin. Cancel a live booking before recording that transport is not needed.","changes":"Sets or replaces the answer.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record a transport need for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":235}},{"when":"Guard: !sendingWard","message":"RECORD_TRANSPORT_NEED was raised by ward ${event.actingUnitId ?? \"(unnamed)\"}, but this patient did not start on a ward","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":253}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"No transport needed"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":52,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":234,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":458,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":242,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":260,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"BOOK_TRANSPORT","name":"Book the transport","group":"The journey","lane":"expected","nodes":["booked"],"roles":["ed","ward","community","coordinator"],"does":"Logs an already arranged booking: provider, explicit escort and transport-legal-status answers, an optional estimate, and optional typed CAD number. It calls no transport service.","needs":"An open movement at pulled or handover_ready with an accepted destination or admission and no live booking. Desk/place must match sender or coordinator; global medical-clearance/deterioration guards apply. A blank CAD is permitted for later recording. A blank estimated time is permitted too (W32, 5 Nov 2026: it warns in the form); one that is given must be a finite time. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Creates the transport job and records who booked it — which decides who may later cancel it.","reasons":["TRANSPORT_PROVIDERS","TRANSPORT_LEGAL_STATUSES"],"refuses":[{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"handover_ready\"","message":"cannot book transport at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654}},{"when":"Guard: movement.transport && movement.transport.cancelledAt === undefined","message":"transport for movement ${movement.id} is already booked","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":660}},{"when":"Guard: typeof event.escortRequired !== \"boolean\"","message":"BOOK_TRANSPORT escortRequired must be answered, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":669}},{"when":"Guard: event.estimatedAt !== undefined && (typeof event.estimatedAt !== \"number\" || !Number.isFinite(event.estimatedAt))","message":"BOOK_TRANSPORT estimatedAt must be a real time when it is given","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":690}},{"when":"Guard: event.role === \"ward\" && !event.actingUnitId","message":"BOOK_TRANSPORT raised as ward must state its actingUnitId, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":695}},{"when":"Guard: event.role === \"community\" && !event.actingPlaceId","message":"BOOK_TRANSPORT raised as community must state its actingPlaceId, and it has no default","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":733}}],"screen":{"screen":"officer/officer-needs-transport.tsx; community/use-community-screen-overlays.ts; ed/ed-screen-actions.ts; patients/patient-transit-operations.tsx; patients/patient-now-screen.tsx","control":"Transport booked The officer booking form guards entered answers and pending saves on outer close or job change. Keep editing retains the draft; only an accepted current save clears the booking without a discard question. A held uncertain command stays owned for same-command recovery rather than sending a duplicate."},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":156,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-needs-transport.tsx","line":349,"sha256":"a10acca50b2c048546f9b0018a94030b1f6534d508d75c456787087a8aab4b1e"},{"path":"src/components/ward-management/community/use-community-screen-overlays.ts","line":122,"sha256":"647d6312cc81bb2edcb34ac5b2f6214fccfcd4bec1eb3e2f5742fe286eafbb23"},{"path":"src/components/ward-management/ed/ed-screen-actions.ts","line":47,"sha256":"69b93a5f2adbb5c42be0b7ba826c12ec1b3eec58ed2a3d08ac99273ef66d4636"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":640,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":521,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":666,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":672,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":681,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":702,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":707,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":745,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"HANDOVER_READY","name":"Confirm handover is ready","group":"The journey","lane":"expected","nodes":["handover","dNoLongerSuits"],"roles":["ed","community","coordinator"],"does":"Confirms the patient is ready for the booked crew to collect.","needs":"An open movement at pulled, the sending desk or coordinator, and either a booked job or recorded no-transport answer. Explicit negative medical clearance or unresolved deterioration, gender/legal bed issues refuse onward movement.","changes":"Moves the record to handover ready.","reasons":[],"refuses":[{"when":"Guard: movement.stage !== \"pulled\"","message":"cannot ready a handover at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":97}},{"when":"Guard: !movement.transport && !noTransportNeeded","message":"cannot ready a handover before transport is booked (BOOK_TRANSPORT)","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":107}}],"screen":{"screen":"patients/patient-transit-operations.tsx","control":"Mark handover ready"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":94,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":664,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":99,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":109,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"TRANSPORT_ACCEPTED","name":"The crew accepts the job","group":"The journey","lane":"expected","nodes":["enroute","dNoLongerSuits"],"roles":["officer","coordinator"],"does":"Records that the transport provider has accepted the collection job.","needs":"An open handover-ready movement, a booked job with no existing acceptance and current medical, gender and legal checks. A revoked/community-order examination while a bed is held must be resolved.","changes":"Stamps the acceptance.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot accept transport for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":130}},{"when":"Guard: movement.transport.acceptedAt !== undefined","message":"transport for movement ${movement.id} was already accepted","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":158}}],"screen":{"screen":"officer-screen.tsx","control":"Accepted"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":95,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":128,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":522,"sha256":"adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":685,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":132,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":160,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"TRANSPORT_EN_ROUTE","name":"The crew sets off","group":"The journey","lane":"expected","nodes":["enroute"],"roles":["officer","coordinator"],"does":"Records that an accepted provider has set off towards the patient. Global medical pause/clearance and examination-held-bed blockers apply; this event does not itself rerun the held-unit gender or legal-authorisation helpers.","needs":"An open handover-ready movement, an accepted job not already en route, and no unresolved medical or examination/held-bed restriction.","changes":"Stamps the departure.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot move transport for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":180}},{"when":"Guard: movement.transport.enRouteAt !== undefined","message":"transport for movement ${movement.id} is already en route","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":216}}],"screen":{"screen":"officer-screen.tsx","control":"En route"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":96,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":178,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":529,"sha256":"adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":705,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":182,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":218,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"PATIENT_COLLECTED","name":"The patient is picked up","group":"The journey","lane":"expected","nodes":["collected","dNoLongerSuits"],"roles":["officer","coordinator"],"does":"Records that the patient has physically been collected and the journey has begun. After this, cancelling is no longer possible — only stopping.","needs":"An open handover-ready movement with a booked en-route job and current medical, gender and legal checks. A valid supplied exception/identity-check record is retained; collection can restore moving after a stage correction without replacing its original physical time. No restrictive practice may still be recorded as in use for the patient at the sending ward.","changes":"Moves the record to moving and stamps the collection.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot collect a patient for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":231}},{"when":"Guard: examinationRevokedHoldingBed || awaitingRelease","message":"cannot collect a patient for movement ${movement.id}: the examination was revoked and this movement still has a bed pulled — a person must release the bed first","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":246}},{"when":"Guard: sourceRestrictiveRefusal","message":"${what} is still recorded as in use for this patient. Record when it ended before they leave the ward","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":278}}],"screen":{"screen":"officer-screen.tsx","control":"Collected"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":97,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":229,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":545,"sha256":"adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":726,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":233,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":248,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"PATIENT_ARRIVED","name":"The ward says they have arrived","group":"The journey","lane":"expected","nodes":["arrived","dNoTransport"],"roles":["officer","ward","coordinator"],"does":"The officer records delivery of the transport leg only. The receiving ward or coordinator confirms physical arrival, occupies the reserved bed and closes the movement. Physical arrival is irreversible.","needs":"An open movement with collection recorded at moving, or no transport needed and no live job at pulled/handover_ready. The receiving ward must identify itself. Ward arrival additionally checks the matching reservation, identity, bed eligibility and any source stay.","changes":"Officer: stamps transport.arrivedAt and leaves moving open. Ward/coordinator: occupies the held admission, adjusts bed figures and closes arrived; a linked source stay is departed on transfer arrival. When linked journey/stay observation levels diverge, retained accepted-edit sequence decides which is later, including same-minute edits and new edits against legacy history. If neither entry has sequence, the existing timestamp fallback remains (journey wins ties); a winning journey level appends reconciliation history to the stay. A winning journey observation sequence is retained in the stay reconciliation history; genuinely unordered legacy ties retain the existing timestamp/journey fallback.","reasons":[],"refuses":[{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"handover_ready\"","message":"cannot arrive a patient with no transport needed at the movement's current stage (${stageCopy[movement.stage].label}); the bed must be pulled first","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":346}},{"when":"Guard: movement.stage !== \"moving\" || movement.transport?.collectedAt === undefined","message":"cannot arrive a patient at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":353}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"ward ${event.actingUnitId} cannot confirm arrival for a patient accepted at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":372}}],"screen":{"screen":"officer/officer-screen.tsx; tools/ward-tool-feed.tsx; board/ward-board.tsx; patients/patient-transit-operations.tsx","control":"Confirm Arrival"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":98,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":315,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/officer/officer-screen.tsx","line":564,"sha256":"adc8d3dcda4dd8012363494a18a22910aecaf0a41698dfe2675eeac869e24dd8"},{"path":"src/components/ward-management/tools/ward-tool-feed.tsx","line":217,"sha256":"35b50e734a9396586e280e12df0c557991ce7b20cf0601d932b279a1734add90"},{"path":"src/components/ward-management/board/ward-board.tsx","line":376,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-transit-operations.tsx","line":781,"sha256":"46eec4eb89318cfa453c751fab6f5d6dab2c345eb6a2c5c1cad56be0c69ffc5f"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":354,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":361,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":380,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"}]}},{"event":"CANCEL_TRANSPORT","name":"Cancel the transport before collection","group":"The journey","lane":"stall","nodes":["sCancelTransport","dCancelLie"],"roles":["coordinator","ed","ward","community"],"does":"Cancels an uncollected live booking, recording its identity and CAD in unwind history. The coordinator may act; ward/community must match their booked sender and a supplied ED place must match booking provenance. Nothing is rebooked.","needs":"An open movement with a live uncollected, undelivered job, an authorised booking desk/place and a listed cancellation reason.","changes":"Deletes the job entirely. The stage does not move and the bed stays held. The job's awaiting-departure and booking-estimate-passed inbox rows get a returned snooze entry and a released ownership entry appended, keeping their earlier history.","reasons":["CANCEL_TRANSPORT_REASONS"],"refuses":[{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"cannot cancel transport for movement ${movement.id} — the patient has arrived","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":834}},{"when":"Guard: movement.transport.collectedAt !== undefined","message":"cannot cancel transport for movement ${movement.id} — the patient has departed","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":837}},{"when":"Guard: movement.transport.bookedBy?.role !== \"ward\" || !event.actingUnitId || movement.transport.bookedBy.unitId !== event.actingUnitId","message":"CANCEL_TRANSPORT raised as ward acting as ${event.actingUnitId} may only cancel transport it booked for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":856}},{"when":"Guard: movement.transport.bookedBy?.placeId && movement.transport.bookedBy.placeId !== event.actingPlaceId","message":"CANCEL_TRANSPORT raised as ED acting as ${event.actingPlaceId} may only cancel transport it booked for movement ${movement.id}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":880}},{"when":"Guard: !CANCEL_TRANSPORT_REASONS.includes(event.reason)","message":"CANCEL_TRANSPORT reason must be chosen from CANCEL_TRANSPORT_REASONS","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":889}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; community/use-community-screen-overlays.ts","control":"Cancel transport"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":178,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":835,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1444,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/community/use-community-screen-overlays.ts","line":140,"sha256":"647d6312cc81bb2edcb34ac5b2f6214fccfcd4bec1eb3e2f5742fe286eafbb23"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":848,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":851,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":870,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":894,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":903,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"STOP_TRANSPORT","name":"Stop the journey after collection","group":"The journey","lane":"diversion","nodes":["sStopTransport"],"roles":["coordinator","ed"],"does":"Stops a journey with the patient already in the vehicle. Somebody must say where the patient now is. The movement closes and the bed deliberately stays held.","needs":"The patient has been collected, and has not arrived or already been stopped.","changes":"Stamps the stop, its reason and the whereabouts; closes the movement; leaves the bed held until it is separately released.","reasons":["STOP_TRANSPORT_REASONS","TRANSPORT_WHEREABOUTS"],"refuses":[{"when":"Guard: movement.transport.collectedAt === undefined","message":"movement ${movement.id}'s transport has not been collected yet; use CANCEL_TRANSPORT instead","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":990}},{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"movement ${movement.id}'s patient has already arrived","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":996}},{"when":"Guard: !TRANSPORT_WHEREABOUTS.includes(event.whereabouts)","message":"STOP_TRANSPORT whereabouts must be chosen from TRANSPORT_WHEREABOUTS","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1015}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Stop transport"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":188,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1013,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1557,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1026,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1032,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1051,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"RECORD_LEFT_DEPARTMENT","name":"Record that they have left the department","group":"The journey","lane":"record","nodes":["edLeft"],"roles":["ed","coordinator"],"does":"Records the time the patient physically left the emergency department.","needs":"An outcome has already been recorded, and this has not been recorded before.","changes":"Stamps the departure time.","reasons":[],"refuses":[{"when":"Guard: movement.leftDepartmentAt !== undefined","message":"movement ${movement.id} has already been recorded as left department","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":557}},{"when":"Guard: movement.edOutcome === undefined","message":"movement ${movement.id} has no ed outcome recorded; record an outcome before marking left department","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":563}}],"screen":{"screen":"ed/ed-screen-row-menu.tsx","control":"Left the department"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":204,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":534,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-row-menu.tsx","line":605,"sha256":"00d889ba5d86974abf82e2dd2ac8644e8de2a6d5c4e736ae39b00c927c49b205"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":538,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":544,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_EXAMINATION","name":"Record an examination outcome","group":"Legal status and examinations","lane":"breach","nodes":["dRevoked","rkExam","sAbandoned"],"roles":["ed","coordinator"],"does":"Records an examination or a permitted repeat. Inpatient/further-examination outcomes record facts only. Revocation while any bed is held retains that bed for a person to release, even before transport commitment. A community order before commitment may close and release.","needs":"The record is open. A second examination is only allowed if the last one ordered a further examination.","changes":"Keeps superseded examinations. After collection or at handover_ready/moving, community-order/revocation records a blocker without refund or closure; revocation with any held bed does the same and tells its ward. Otherwise community-order/revocation closes the search, releases any matching hold, cancels uncollected transport and withdraws requests.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot record an examination for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":582}},{"when":"Guard: previousExamination && previousExamination.outcome !== \"further_examination_ordered\"","message":"movement ${movement.id} was already examined","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":593}}],"screen":{"screen":"ed/use-ed-examination-save.ts","control":"Confirm examination outcome"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":38,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":554,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/use-ed-examination-save.ts","line":145,"sha256":"357b8af4b99fb9c0609a07c4d6230c6be722e71a5f396c7d627909a9ef141fea"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":563,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":574,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CHANGE_LEGAL_STATUS","name":"Change the legal status","group":"Legal status and examinations","lane":"record","nodes":["occupied","asked","rkLegalStatus"],"roles":["coordinator","ed","ward","community"],"does":"Changes the patient's status under the Mental Health Act, recording who changed it and why. It never reacts on its own — even if this makes an already-accepted bed unlawful, that only surfaces for a human to look at.","needs":"An open movement, sender-kind permission and a listed legal-status-change reason; signed/shared scope further binds the actual sender.","changes":"Sets the status and logs the change.","reasons":["LEGAL_STATUS_CHANGE_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot change legal status for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1277}},{"when":"Guard: !LEGAL_STATUS_CHANGE_REASONS.includes(event.reason)","message":"CHANGE_LEGAL_STATUS reason must be chosen from LEGAL_STATUS_CHANGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1285}}],"screen":{"screen":"movements/sent-journey-changes.tsx","control":"Record legal status change"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":116,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/movements/sent-journey-changes.tsx","line":196,"sha256":"2bc1df9ee01cd20bf12d9fc8d7dee1a31c82589a2c354a0f5d595bd8cca25072"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1227,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1235,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LEGAL_FORM_RECEIVED","name":"Mark a form as physically received","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm"],"roles":["ed","ward","community","coordinator"],"does":"Marks that a patient's legal form has physically arrived. Any of the nine forms with a legal clock (1A, 3A, 3C, 3D, 5A, 5B, 6A, 6B, 6C) can be marked, not only Form 1A (owner ruling D-16).","needs":"An open movement sent by this desk kind or coordinator, a supported recorded legal-clock form and no previous receipt. Signed/shared scope further limits the actual sender. An optional typed received time must not be later than now.","changes":"Stamps the receipt: the typed received time when given (marked as typed), otherwise now.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"cannot mark legal form received for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":475}},{"when":"Guard: movement.legalFormReceivedAt !== undefined","message":"legal form for movement ${movement.id} was already marked as received","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":479}},{"when":"Guard: !movement.legalForm || !isLegalClockFormCode(movement.legalForm.code)","message":"movement ${movement.id} does not carry a receivable legal form (legal form ${movement.legalForm?.code ?? \"none\"}), so a legal form receipt cannot be recorded against it","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":487}},{"when":"Guard: event.receivedAt !== undefined && (!Number.isFinite(event.receivedAt) || event.receivedAt > event.now)","message":"The time received can't be later than now. Check the time on the form.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":493}}],"screen":{"screen":"legal-forms/legal-forms-screen.tsx","control":"Mark Form 1A received (the legal forms screen marks the other eight)"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":59,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":439,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":365,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":450,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":454,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":462,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CORRECT_LEGAL_FORM_RECEIPT","name":"Undo a form receipt","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm"],"roles":["ed","ward","community","coordinator"],"does":"Undoes a receipt logged by mistake, keeping a record that a correction happened and why.","needs":"An open movement sent by this desk kind, an existing receipt and a listed correction reason; signed/shared scope further binds the actual sender.","changes":"Clears the receipt, and its typed-time mark, and appends the correction.","reasons":["LEGAL_FORM_RECEIPT_CORRECTION_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot correct a legal form receipt for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":447}},{"when":"Guard: movement.legalFormReceivedAt === undefined","message":"movement ${movement.id} has no recorded legal form receipt to correct","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":451}}],"screen":{"screen":"ed/use-ed-record-save.ts","control":"Save correction"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":65,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":429,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ed/use-ed-record-save.ts","line":200,"sha256":"b2d00eed8f4b907f3817792ae148eaa015d1b860de762bc4d38abd2eb1045de5"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":440,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":444,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"RECORD_LEGAL_FORM_EXPIRY","name":"Record or extend a form's expiry","group":"Legal status and examinations","lane":"record","nodes":["occupied","rkForm","rkExpiryShut"],"roles":["ed","coordinator","ward"],"does":"Records typed paper expiry or a later extension. An explicit correction may move it earlier only with a reason and matching expected paper facts. No statutory duration is computed.","needs":"An existing form and finite typed expiry on an open movement, or the admitting ward’s admitted-stay path. An extension is strictly later; a correction must differ and match the current code, written time and previous expiry.","changes":"Stores the typed expiry, clears any calculated legacy clock, appends basis/author/time history tagged with the zero-based form instance (the count of earlier forms) and, for a correction, its previous facts and reason.","reasons":[],"refuses":[{"when":"Guard: !movement.legalForm","message":"There is no legal form on this record to add an expiry to.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":60}},{"when":"Guard: !Number.isFinite(event.dueAt)","message":"Enter the expiry written on the form.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":65}},{"when":"Guard: correction === undefined && isExtension && event.dueAt \u003c= currentDueAt","message":"An extension's new expiry must be later than the expiry already recorded.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":106}}],"screen":{"screen":"ed/use-ed-expiry-save.ts; legal-forms/legal-forms-screen.tsx","control":"Save expiry"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":75,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ed/use-ed-expiry-save.ts","line":119,"sha256":"390d0c109a96a4045b56601ad724774fdd964536984fefba4aac3c67787059c9"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":1303,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":68,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":73,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":114,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_MOVEMENT_GENDER","name":"Correct the recorded gender","group":"Legal status and examinations","lane":"record","nodes":["asked","pulled"],"roles":["ed","coordinator"],"does":"Corrects the gender recorded on an open record and, if a ward already holds or has accepted the bed, tells the coordinator to check the placement still suits.","needs":"The record is open and the new value differs from what is there.","changes":"Sets the gender, logs the change, and raises a notice where a bed is involved.","reasons":["REFERRAL_GENDERS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot record gender for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":508}},{"when":"Guard: movement.gender === event.gender","message":"movement ${movement.id} is already recorded as gender ${event.gender}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":514}}],"screen":{"screen":"ed/ed-screen-referred.tsx","control":"Record gender"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":80,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":485,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-screen-referred.tsx","line":266,"sha256":"0b0d6dde9843e2750f4dbadd23e4e7d9c30b2c2c9eee9e4f2c539961a97568aa"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":489,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":495,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RECORD_LEAVING","name":"Record that the patient has left","group":"On the ward","lane":"expected","nodes":["personLeaves","bedReleased","end0","end1","end2","end3","end4","end5","end6","end7"],"roles":["ward","coordinator"],"does":"Records physical departure from an occupied stay and retains the departed admission. The person may still be on site waiting for transport. It is distinct from the protected revision-checked RECORD_PATIENT_DISCHARGE path.","needs":"The caller names the stay’s ward and a listed destination at a finite time no earlier than arrival. No active transit, restrictive-practice or open return-movement conflict. An involuntary community/against-advice departure needs a recorded permitted paper transition.","changes":"Ends the admission and raises the ward's empty and allocatable counts by one (only the timestamps move if this person's release had already been completed), gives back a locked bed, adjusts the sex mix, ends any leave bed, and completes this person's pending bed release. With awaitingTransport it also puts them on the Waiting for transport list until collected, and the freed bed is ready at once.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== admission.unitId","message":"RECORD_LEAVING was raised acting as unit ${event.actingUnitId} but admission ${admission.id} belongs to unit ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":137}},{"when":"Guard: admission.state === \"departed\"","message":"admission ${admission.id} has already left","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":143}},{"when":"Guard: admission.state !== \"occupied\"","message":"admission ${admission.id} is ${admission.state}, and only somebody occupying a bed can leave one","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":151}}],"screen":{"screen":"ward-board.tsx (+1 other)","control":"Record that they have left The ward departure caller retains one pending subject through an uncertain failed outcome that carries confirmation, follows only the same command receipt and scopes Undo to the receipt-created departure step. Old-world completions must not free a replacement world command or advertise stale Undo; ordinary reset keeps the screen DOM so opener focus can be restored."},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":228,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":126,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1227,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1724,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/tools/ward-tool-feed.tsx","line":218,"sha256":"35b50e734a9396586e280e12df0c557991ce7b20cf0601d932b279a1734add90"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":268,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":952,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":138,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":144,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":152,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","name":"Record that they are away at an ED","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Notes that an admitted patient has gone to an emergency department for a medical problem, while the ward keeps their bed.","needs":"An occupied stay on the named acting ward, no existing ED absence, and no simultaneous leave or absence-without-leave record. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Stamps the absence. No bed figure moves at all.","reasons":[],"refuses":[{"when":"Guard: admission.awayAtEmergencyDepartmentSince !== null","message":"admission ${admission.id} is already recorded as away at an emergency department","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":270}},{"when":"Guard: heldBed","message":"admission ${admission.id} is ${heldBed.absentWithoutLeave ? \"absent without leave\" : \"on leave\"} (${heldBed.id}); record the return first","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":279}}],"screen":{"screen":"ward-board.tsx","control":"Record that they have gone to an emergency department"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":242,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":260,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":286,"sha256":"0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":461,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":974,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":710,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":281,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":290,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","name":"Record that they are back","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Notes that a patient who went to an emergency department is back on the ward, in the bed that was kept for them.","needs":"The named acting ward owns the stay and it is recorded away at ED. The handler does not additionally require occupied state, so a recorded absence can be cleared. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Clears the absence.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":287}},{"when":"Guard: admission.awayAtEmergencyDepartmentSince === null","message":"admission ${admission.id} is not recorded as away at an emergency department","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":298}}],"screen":{"screen":"ward-board.tsx","control":"Record that they are back on the ward"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":243,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":296,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":297,"sha256":"0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":493,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/board/ward-board.tsx","line":1070,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":726,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":298,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":309,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_LEAVE_BED","name":"Record a bed as on leave","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Records that a bed is held for somebody on approved leave, with an expected return. It does not go back into circulation while they are away.","needs":"A real occupied admission on the named acting ward, no existing leave/absence and no current ED absence. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Creates the leave record.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"RECORD_LEAVE_BED was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":355}},{"when":"Guard: onLeave.unitId !== event.unitId","message":"RECORD_LEAVE_BED names admission ${onLeave.id} on unit ${onLeave.unitId}, not unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":367}}],"screen":{"screen":"patients/patient-now-screen.tsx","control":"Leave recording through the patient workspace; command dispatch is present"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":216,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":369,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":689,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":376,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":388,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"END_LEAVE_BED","name":"End a bed's leave","group":"On the ward","lane":"diversion","nodes":["dAway"],"roles":["ward","coordinator"],"does":"Ends a bed's recorded leave period.","needs":"The leave record exists and belongs to this ward. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Removes the leave record. The step can be taken back by UNDO_BED_STEP within the Undo window.","reasons":[],"refuses":[{"when":"Guard: !leaveBed","message":"no leave bed found for id ${event.leaveBedId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":674}},{"when":"Guard: event.actingUnitId !== leaveBed.unitId","message":"END_LEAVE_BED was raised acting as unit ${event.actingUnitId} but leave bed ${leaveBed.id} belongs to unit ${leaveBed.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":679}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Ended"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":217,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":656,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1749,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/board/ward-board.tsx","line":1062,"sha256":"cb123d712470e357c438b7d24b642a5d3e7ed1f7836698e7a2ae4a4cb57ebbc5"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":632,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":658,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":663,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"FLAG_BED_RELEASE","name":"Flag a bed as coming free","group":"The bed coming free","lane":"expected","nodes":["bedReleased","ready"],"roles":["ward","bed_manager","coordinator"],"does":"A ward flags an upcoming discharge for a named occupying admission, saying when and what it is waiting on.","needs":"The ward may only flag a stay on its own ward, with no other live release for that stay.","changes":"Creates the bed release at “expected”.","reasons":["BED_RELEASE_WAITING_ON","BED_RELEASE_BLOCKERS"],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"FLAG_BED_RELEASE was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":400}},{"when":"Guard: event.blocker !== undefined && !BED_RELEASE_BLOCKERS.includes(event.blocker)","message":"FLAG_BED_RELEASE blocker must be chosen from BED_RELEASE_BLOCKERS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":445}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":207,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":372,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":379,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":424,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CONFIRM_BED_RELEASE","name":"Confirm the discharge is going ahead","group":"The bed coming free","lane":"expected","nodes":["bedReleased","ready"],"roles":["ward","bed_manager","coordinator"],"does":"Confirms an expected discharge is now decided. It does not free the bed — that is a separate step.","needs":"The release is currently expected.","changes":"Moves expected to confirmed, clears waitingOn and records the linked admission’s discharge decision. A blocker survives; no bed is freed. A sign-off from Ward Decisions can be taken back for a short time by UNDO_RELEASE_STEP on the same release (M37, D-129).","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"CONFIRM_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":494}},{"when":"Guard: release.state !== \"expected\"","message":"cannot move release ${release.id} from ${release.state} to confirmed","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":500}}],"screen":{"screen":"ward-screen.tsx","control":"Confirm"},"review":{"reviewedOn":"2026-11-10","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":208,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":466,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1662,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":475,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":481,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"REVERT_BED_RELEASE","name":"Put a confirmed discharge back to expected","group":"The bed coming free","lane":"stall","nodes":["bedReleased","bedStuck","ready"],"roles":["ward","bed_manager","coordinator"],"does":"Reverses a confirmed discharge decision, restating what it is now waiting on. The only step of the three that goes backwards.","needs":"The release is currently confirmed.","changes":"Moves confirmed to expected with listed waitingOn and clears the linked admission’s discharge decision. The blocker survives.","reasons":["BED_RELEASE_WAITING_ON"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"REVERT_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":533}},{"when":"Guard: release.state !== \"confirmed\"","message":"cannot move release ${release.id} from ${release.state} to expected","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":539}},{"when":"Guard: !BED_RELEASE_WAITING_ON.includes(event.waitingOn)","message":"REVERT_BED_RELEASE waitingOn must be chosen from BED_RELEASE_WAITING_ON","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":544}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":212,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":505,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":514,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":520,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":525,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"BLOCK_BED_RELEASE","name":"Flag a discharge as stuck","group":"The bed coming free","lane":"stall","nodes":["bedStuck"],"roles":["ward","bed_manager","coordinator"],"does":"Flags that a discharge — expected or confirmed — is currently stuck, and says why. Being stuck is a flag, not a stage.","needs":"The bed has not already been released.","changes":"Stores the listed blocker and actor/time on the release and linked stay. The release stage remains unchanged.","reasons":["BED_RELEASE_BLOCKERS"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"BLOCK_BED_RELEASE was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":570}},{"when":"Guard: !event.blocker || !BED_RELEASE_BLOCKERS.includes(event.blocker)","message":"BLOCK_BED_RELEASE requires a blocker chosen from BED_RELEASE_BLOCKERS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":576}},{"when":"Guard: release.state === \"discharged\"","message":"cannot block release ${release.id} because it is already released","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":583}}],"screen":{"screen":"board/ward-board-blocker-dialog.tsx","control":"Confirm blocked"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":213,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":544,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-blocker-dialog.tsx","line":73,"sha256":"6d6cfae35d61c34b3ac76b235a2a8e23875c7be085ecef1532dbd5f3f36a174c"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":551,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":557,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":564,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CLEAR_BED_RELEASE_BLOCK","name":"Clear the stuck flag","group":"The bed coming free","lane":"expected","nodes":["bedStuck"],"roles":["ward","bed_manager","coordinator"],"does":"Clears the stuck flag once whatever was holding the discharge up has been resolved.","needs":"There is a flag to clear.","changes":"Clears the release and linked stay blocker; retains clearance time/role, prior blocker and any supplied listed clearance reason.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"CLEAR_BED_RELEASE_BLOCK was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":607}},{"when":"Guard: release.blocker === null","message":"release ${release.id} carries no blocked flag to clear","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":613}}],"screen":{"screen":"ward-screen.tsx","control":"No longer held up"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":214,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":584,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1681,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/discharges/discharge-board.tsx","line":489,"sha256":"3544153ef78971f9107c01a45121dbabc02833a68a630be1efba6c288d25f977"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":591,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":597,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_BED_PREPARATION","name":"Mark a bed as being made ready","group":"The bed coming free","lane":"record","nodes":["bedReleased","rkPrep"],"roles":["ward","bed_manager","coordinator"],"does":"Marks a bed as being cleaned or awaiting repair. This is information only — it never stops the bed being counted as available or offered to somebody.","needs":"The ward may only set it on its own release.","changes":"Sets the note. No capacity figure moves.","reasons":["BED_PREPARATION_NOTES"],"refuses":[{"when":"Guard: event.actingUnitId !== release.unitId","message":"SET_BED_PREPARATION was raised acting as unit ${event.actingUnitId} but release ${release.id} belongs to unit ${release.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":647}},{"when":"Guard: requestedNote !== undefined && !(BED_PREPARATION_NOTES as readonly string[]).includes(requestedNote)","message":"SET_BED_PREPARATION note must be chosen from BED_PREPARATION_NOTES","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":655}}],"screen":{"screen":"ward/ward-screen-overlays.tsx","control":"Confirm being made ready"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":215,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":621,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":309,"sha256":"0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":631,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":639,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CONFIRM_CAPACITY","name":"Restate how many beds a ward has","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["ward","bed_manager","coordinator"],"does":"A ward restates how many beds it can currently allocate. This does move a real bed count.","needs":"The ward may only restate its own, with a current revision and a nonnegative whole number no greater than its bed count.","changes":"Sets the allocatable figure, marks it as ward-sourced, and stamps the time.","reasons":[],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"CONFIRM_CAPACITY was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":329}},{"when":"Guard: event.value > unit.beds","message":"CONFIRM_CAPACITY says unit ${unit.id} can allocate ${event.value} beds, which is more than the ${unit.beds} beds it has","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":350}}],"screen":{"screen":"ward-screen.tsx (+1 other)","control":"Confirm capacity"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":100,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":298,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1570,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward/ward-answer-view.tsx","line":499,"sha256":"ae73e59b8e0c1829643e2c018e727d0f3bc9f81d54ec9dbc898d575e4ed74bde"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":308,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":329,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_WARD_INTAKE_CONSTRAINTS","name":"Record what is restricting a ward's intake","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["ward","coordinator"],"does":"A ward records the restrictions it is currently operating under — staffing, infection control, a closed bay, and so on.","needs":"The ward may only record its own.","changes":"Replaces its constraint list.","reasons":["WARD_INTAKE_CONSTRAINTS"],"refuses":[{"when":"Guard: event.actingUnitId !== event.unitId","message":"RECORD_WARD_INTAKE_CONSTRAINTS was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":822}},{"when":"Guard: event.codes.some((code) => !WARD_INTAKE_CONSTRAINTS.includes(code))","message":"RECORD_WARD_INTAKE_CONSTRAINTS codes must all be chosen from WARD_INTAKE_CONSTRAINTS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":832}}],"screen":{"screen":"NONE","control":"Source references only; full route reachability and control wording need rendered proof."},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":103,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":772,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":779,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":789,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"REQUEST_CAPACITY_REFRESH","name":"Ask a ward to refresh its numbers","group":"The ward's own numbers","lane":"record","nodes":["asked"],"roles":["coordinator"],"does":"Records that somebody asked a ward to refresh its bed numbers. It changes no bed count itself.","needs":"The ward exists.","changes":"Logs the request.","reasons":[],"refuses":[{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":704}}],"screen":{"screen":"capacity-screen.tsx","control":"Request update"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":386,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":684,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/hub/hub-screen.tsx","line":725,"sha256":"48bf478fbb659cdfe32bf9915e52a2e396c9fde1f33e09c3c2fa4c82f27f20c8"},{"path":"src/components/ward-management/capacity/capacity-ward-drawer.tsx","line":237,"sha256":"c491da820b4c6f942c6a98ef83eef3742c493a612a36e6e9abae92fd892ab554"},{"path":"src/components/ward-management/capacity/capacity-screen.tsx","line":205,"sha256":"4db45d88db294323b638d75a37a96c124ce6ba3e111730b562eafdb53dffc03b"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":688,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"CHANGE_URGENCY","name":"Change how urgent it is","group":"Urgency and blockers","lane":"record","nodes":["asked","rkUrgent"],"roles":["coordinator","ed","ward","community"],"does":"Changes the urgency, recording who changed it and why. It triggers no re-sorting or re-referral on its own.","needs":"An open movement, sender-kind permission and a listed urgency level. A supplied reason must be listed; omission is recorded as not_given. Signed/shared scope further binds the actual sender.","changes":"Sets the urgency and logs the change.","reasons":["URGENCY_CHANGE_REASONS","URGENCY_LEVELS"],"refuses":[{"when":"Guard: !URGENCY_LEVELS.includes(event.urgency as (typeof URGENCY_LEVELS)[number])","message":"CHANGE_URGENCY urgency must be chosen from URGENCY_LEVELS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1239}},{"when":"Guard: event.reason !== undefined && !URGENCY_CHANGE_REASONS.includes(event.reason)","message":"CHANGE_URGENCY reason must be chosen from URGENCY_CHANGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1248}}],"screen":{"screen":"movements/sent-journey-changes.tsx","control":"Record urgency change"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":115,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1178,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/movements/sent-journey-changes.tsx","line":170,"sha256":"2bc1df9ee01cd20bf12d9fc8d7dee1a31c82589a2c354a0f5d595bd8cca25072"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1189,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1198,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"}]}},{"event":"FLAG_MOVEMENT_URGENT","name":"Flag it urgent","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","rkUrgent","rkQueue"],"roles":["coordinator","ed"],"does":"Marks the patient urgent so they sit above every urgency level in the coordinator's queue, recording who and why.","needs":"The record is open and not already flagged.","changes":"Sets the flag and opens a history entry.","reasons":["URGENT_MARK_REASONS"],"refuses":[{"when":"Guard: movement.flaggedUrgent","message":"movement ${movement.id} is already flagged urgent","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1951}},{"when":"Guard: !URGENT_MARK_REASONS.includes(event.reason)","message":"FLAG_MOVEMENT_URGENT reason must be chosen from URGENT_MARK_REASONS","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1954}}],"screen":{"screen":"movement-drawer.tsx (+1 other)","control":"Flag this patient as urgent"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":362,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1960,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-drawer.tsx","line":401,"sha256":"0078e33c1bd4d2308ec3cffeb86545370c49996efe564c889909e00005d07550"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1261,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1992,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1995,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"CLEAR_MOVEMENT_URGENT_FLAG","name":"Clear the urgent flag","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","rkUrgent"],"roles":["coordinator","ed"],"does":"Removes the urgent flag once it is no longer needed.","needs":"It is currently flagged. Deliberately allowed even on a closed record.","changes":"Clears the flag and closes the history entry.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1969}},{"when":"Guard: !movement.flaggedUrgent","message":"movement ${movement.id} is not flagged urgent","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1973}}],"screen":{"screen":"movement-drawer.tsx (+1 other)","control":"Remove the urgent flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":363,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1984,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-drawer.tsx","line":358,"sha256":"0078e33c1bd4d2308ec3cffeb86545370c49996efe564c889909e00005d07550"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1211,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1986,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2018,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RECORD_MOVEMENT_BLOCKER","name":"Say what is holding this up","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","handover"],"roles":["ed","community","ward","coordinator","officer"],"does":"Free text describing what is actually holding the patient up. The only free-text field of its kind in the engine.","needs":"An open movement and nonblank text. An unresolved revoked-examination or diversion hold cannot be overwritten; a case-only variant of a no-blocker sentinel refuses and directs to CLEAR_MOVEMENT_BLOCKER.","changes":"Replaces the blocker text.","reasons":[],"refuses":[{"when":"Guard: blocker.length === 0","message":"RECORD_MOVEMENT_BLOCKER blocker must say something — a blank is not a statement","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":789}},{"when":"Guard: nearMiss !== undefined","message":"\"${blocker}\" differs from \"${nearMiss}\" only in case, and would be stored as an active blocker — use CLEAR_MOVEMENT_BLOCKER to say nothing is holding this up","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":807}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Record it"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":290,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":715,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1304,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":746,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":764,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"CLEAR_MOVEMENT_BLOCKER","name":"Say nothing is holding it up","group":"Urgency and blockers","lane":"record","nodes":["asked","pulled","handover"],"roles":["ed","community","ward","coordinator","officer"],"does":"Records that nothing is holding the patient up any more — which is a different statement from nobody ever having recorded one.","needs":"An open movement with an active blocker, and no unresolved revoked-examination or diversion hold. The explicit hold must be resolved through reassessment/release rather than cleared as prose.","changes":"Writes “None — cleared”.","reasons":["BLOCKERS_MEANING_NOTHING_IS_BLOCKING"],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2005}},{"when":"Guard: BLOCKERS_MEANING_NOTHING_IS_BLOCKING.some((inactive) => inactive === movement.blocker.trim())","message":"movement ${movement.id} already records that nothing is holding it up","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2034}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx","control":"Clear — nothing is holding this up"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":297,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2020,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1365,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2022,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2051,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"MARK_NOTICE_READ","name":"Mark a notice read","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","ed","ward","officer","community","bed_manager"],"does":"Marks a notice as read by the person or team it was actually addressed to.","needs":"You are the addressee, exactly, and it is not already marked.","changes":"Stamps who read it and when.","reasons":[],"refuses":[{"when":"Guard: notice.to.role !== event.role || notice.to.placeId !== event.actingPlaceId","message":"MARK_NOTICE_READ role/actingPlaceId (${event.role}/${event.actingPlaceId ?? \"none\"}) must match notice ${event.noticeId}'s own addressee (${notice.to.role}/${notice.to.placeId ?? \"none\"})","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":297}},{"when":"Guard: notice.readAt !== undefined","message":"notice ${event.noticeId} is already marked read","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":301}}],"screen":{"screen":"shell/ward-bar-state.ts; community/community-screen.tsx; ward/ward-screen.tsx","control":"Mark as read"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":515,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":290,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/shell/ward-bar-state.ts","line":316,"sha256":"8272a84387337469217e8a70798c6b37922f30bb1e3eaf8a185fdc504f9a34a3"},{"path":"src/components/ward-management/community/community-screen.tsx","line":842,"sha256":"b72e4223d7053454c47367a1c990a63eca503324c13fe6567a8a01054648d058"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1105,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":297,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":301,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"ACKNOWLEDGE_INBOX_ITEM","name":"Acknowledge an inbox row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Records that the coordinator has seen a row and is on top of it, without removing or hiding it.","needs":"The row names a real category and a real record.","changes":"Logs the acknowledgement. Touches nothing else.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"ACKNOWLEDGE_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":316}},{"when":"Guard: !inboxCategory || !namesRecord","message":"ACKNOWLEDGE_INBOX_ITEM inboxItemId ${inboxItemId} does not name a real inbox row — its prefix must be one of INBOX_CATEGORIES and its remainder an existing record for that category","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":337}}],"screen":{"screen":"alerts-screen.tsx (+1 other)","control":"Acknowledge Alert"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":536,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":312,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":428,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":670,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":316,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":337,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"COMPLETE_INBOX_ITEM","name":"Tick off an inbox row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Records completion of a classified human commitment. The current commitment is the coordinator’s daily check, whose id must name a signed integer day. Live fact rows cannot be ticked away.","needs":"A nonblank classified commitment id, a valid daily-check day suffix and no current completion. This is a daily-check record, not proof that any patient/bed action was performed.","changes":"Appends completed role/time history without mutating patient, movement or unit facts.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"COMPLETE_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":353}},{"when":"Guard: inboxItemId.startsWith(INBOX_CATEGORIES.daily_check.idPrefix) && !/^day-(?:0|-?[1-9]\\d*)$/.test(inboxItemId.slice(INBOX_CATEGORIES.daily_check.idPrefix.length))","message":"inbox row ${inboxItemId} does not name a day for the daily check","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":370}},{"when":"Guard: inboxItemCompletionState(history) === \"complete\"","message":"inbox row ${inboxItemId} is already complete","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":374}}],"screen":{"screen":"delays/daily-check-line.tsx; ward-tasks-drawer.tsx","control":"Daily check completion; generic commitment action when supplied"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":537,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":350,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":432,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/delays/daily-check-line.tsx","line":286,"sha256":"488ea1f4f5286bbff224f264bfd40e405af78caae5ac7fe88f197679394d43f0"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":353,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":370,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":374,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"REOPEN_INBOX_ITEM","name":"Reopen a completed row","group":"The coordinator's inbox","lane":"record","nodes":["rkInbox"],"roles":["coordinator"],"does":"Undoes a completed row, while keeping the fact that it was once completed.","needs":"It is currently complete.","changes":"Logs the reopening.","reasons":[],"refuses":[{"when":"Guard: inboxItemId.length === 0","message":"REOPEN_INBOX_ITEM inboxItemId must name a row — a blank names nothing","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":388}},{"when":"Guard: inboxItemCompletionState(history) !== \"complete\"","message":"inbox row ${inboxItemId} is not complete, so there is nothing to reopen","source":{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":392}}],"screen":{"screen":"ward-tasks-drawer.tsx","control":"Generic completion-history reopening action when a completed commitment is supplied"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":538,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":385,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-tasks-drawer.tsx","line":436,"sha256":"f14b8983f1421e5ab23f25dd3d11d6489cf9119e06884a1fcb58e8374c68018f"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":388,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":392,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"}]}},{"event":"ADVANCE_CLOCK","name":"Move the demonstration clock","group":"Running the demonstration","lane":"record","nodes":["rkClock"],"roles":["demo"],"does":"Adds a finite nonnegative simulation offset to the app clock. Ordinary provider time follows wall time, refreshing at minute boundaries while visible and catching up on return; initialNow pins deterministic test/render time.","needs":"The demo role and finite nonnegative minutes; coordinator is not in this event’s permission list.","changes":"Increases clockOffsetMinutes; it does not itself create a legal expiry or resolve a timed task. In the local provider, command acceptance precedes device durability: the saved-on-device flag remains false until the matching committed safe copy is written, and owned unsaved work is protected on unload. These persistence indicators do not add an engine transition.","reasons":[],"refuses":[{"when":"Guard: finiteInstant(event.minutes) === null || event.minutes \u003c 0","message":"ADVANCE_CLOCK minutes must be a finite, non-negative number","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1681}}],"screen":{"screen":"ward-global-search.tsx; tools/ward-demo-panel.tsx","control":"Global Search offers Advance demo clock (+15m), dispatching minutes=15 under role demo; the Demo panel also offers +15 min and +1 hour. D-150 (11 Nov 2026): the signed-in shared site runs on real Perth time, so both controls are hidden in shared mode and remain on the public demo only. Imperative search navigation and desk switching first consult the composed unsaved-work guard."},"review":{"reviewedOn":"2026-11-11","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":108,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1692,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-global-search.tsx","line":802,"sha256":"da7ec0be180ef0f2d0009261ed09aa538703e8153afb3ef84b292aac44d21c73"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":271,"sha256":"ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":450,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/use-ward-minute-tick.ts","line":12,"sha256":"5637f3746158c8b09a50abf19699294ced1b1d25e91be6a7b03e870c746f7fa7"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1696,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RESET_SCENARIO","name":"Reset the board","group":"Running the demonstration","lane":"record","nodes":[],"roles":["demo"],"does":"Restores the currently loaded recognised scenario, falling back to standard for a damaged scenario value.","needs":"Nothing.","changes":"Re-seeds all board state around the current visible time and clears the simulation offset, preserving the visible clock rather than always selecting the standard scenario. A genuine accepted reseed advances worldGeneration exactly once; wrong-role/rejected reseeds do not. A non-safe or exhausted generation refuses replacement by retaining the old state, so generation is never wrapped or reused. Reset also invalidates older asynchronous local scenario-file import requests. A newer import, reset, changed world generation or retired provider lifetime prevents an older read from replacing the current day. Imported local state is not reported durable before its device copy is written.","reasons":[],"refuses":[],"screen":{"screen":"ward-flow-provider.tsx; tools/ward-demo-panel.tsx","control":"Reset scenario"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":109,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1674,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1143,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":197,"sha256":"ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"}]}},{"event":"SET_SCENARIO","name":"Switch to a different simulated night","group":"Running the demonstration","lane":"record","nodes":[],"roles":["demo"],"does":"Switches to a different pre-built simulated night, resetting every patient, ward and record.","needs":"A recognised scenario.","changes":"Replaces the whole state. A genuine accepted reseed advances worldGeneration exactly once; wrong-role/rejected reseeds do not. A non-safe or exhausted generation refuses replacement by retaining the old state, so generation is never wrapped or reused.","reasons":["WARD_SCENARIOS"],"refuses":[{"when":"Guard: !WARD_SCENARIOS.includes(event.scenario)","message":"SET_SCENARIO scenario must be chosen from WARD_SCENARIOS","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1672}}],"screen":{"screen":"demo-reset/ward-demo-reset.tsx; tools/ward-demo-panel.tsx","control":"Both pickers ask before replacing the synthetic world. The separate Demo reset waits for the command outcome, keeps choices unavailable while it is pending, and reports a current accepted replacement as complete. Failed, refused, cancelled or unknown completion is not reported as success, and obsolete or unmounted results do not announce into a replacement workspace."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":110,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1682,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/demo-reset/ward-demo-reset.tsx","line":131,"sha256":"8e2f79f5ec7d9a3e37df33fde6bad92cafe4a8412191b49c10751dd2bf600c9e"},{"path":"src/components/ward-management/tools/ward-demo-panel.tsx","line":197,"sha256":"ba6e115ccc6fb129eb4b2aeb72e975e106930bdd55c7e6cc5cdc17a0d8bb685f"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1687,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"SET_CONFIGURATION","name":"Change the coordinator's settings","group":"Running the demonstration","lane":"record","nodes":["rkSettings"],"roles":["coordinator"],"does":"Saves the tunable settings the rest of the system reads — access-time targets, the parallel referral cap, how long a bed hold lasts.","needs":"A validated complete configuration and, when supplied, a valid baseline. Conflicting edits since that baseline refuse; non-conflicting draft fields merge. Signed/shared access also enforces coordinator scope.","changes":"Applies the validated configuration or field merge atomically. It does not silently overwrite a conflicting baseline.","reasons":[],"refuses":[],"screen":{"screen":"settings-screen.tsx","control":"Save Configuration"},"review":{"reviewedOn":"2026-11-08","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":112,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1703,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/settings/settings-screen.tsx","line":444,"sha256":"59b6fc559d0d40fdd16cd3444d0db3e3c673cdbb3591f5bda4000b36120a3928"}]}},{"event":"RECORD_PATIENT_DISCHARGE","name":"Record a patient’s physical departure","group":"Not wired up here","lane":"record","nodes":["rkDischarge","personLeaves"],"roles":["ward","coordinator"],"does":"The protected discharge handler records physical departure of a linked occupied admission. It runs before the generic reducer switch; the later grouped switch case is not the behaviour.","needs":"Permitted ward/coordinator actor, finite time, current world generation and discharge revision, matching linked patient/stay, lawful destination and no active transit/restrictive-practice/open-return conflict.","changes":"Departs the stay through the shared departure helper, adjusts resources, retains audit and a bounded step-undo record. A stale or inaccessible request refuses.","reasons":[],"refuses":[{"when":"Guard: dischargeBlockingTransit(state, admission)","message":"Patient is currently in transit to another facility.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":447}}],"screen":{"screen":"ward-flow-provider.tsx (discharge context)","control":"Record departure through the discharge record context"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":22,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":476,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1248,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":486,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"}]}},{"event":"OPEN_DISCHARGE_RECORD","name":"Open an authorised discharge record","group":"Not wired up here","lane":"record","nodes":["rkDischarge"],"roles":["coordinator","ward","community","bed_manager"],"does":"Checks actor access to a discharge record and appends its protected open/read audit receipt. It runs before the generic switch.","needs":"A valid actor, current generation, valid request id/optional namespace and an accessible admission. A coordinator must also give an on-behalf-of-the-ward reason from the closed `ON_BEHALF_REASONS` list (D-80 item 17); any other desk sends none. A repeated matching receipt is reused only while that read remains allowed.","changes":"Records an accepted read audit event, carrying the coordinator's listed reason as `onBehalfReason`; changes no admission or bed figure.","reasons":[],"refuses":[{"when":"Guard: event.role === \"coordinator\" ? !isOnBehalfReason(event.onBehalfReason) : event.onBehalfReason !== undefined","message":"Choose why you are opening this ward's record on the ward's behalf. Nothing was opened.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":188}}],"screen":{"screen":"ward-flow-provider.tsx (discharge context)","control":"Open the discharge record through its audited context; the Discharges board and the Capacity ward drawer ask a coordinator for the reason first"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":25,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":180,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-provider.tsx","line":1278,"sha256":"057612a8c45f7785638e5ce4a43d954f953ac5723162c6afc639279690ff9ea0"}]}},{"event":"REVIEW_AUDIT_EVENT","name":"Record a governance review","group":"Not wired up here","lane":"record","nodes":[],"roles":["coordinator"],"does":"The coordinator records one listed review decision against an accessible audit event, including supported synthetic governance entries. It runs before the generic switch.","needs":"Coordinator, finite time, current generation and expected review count, a non-review audit entry in this generation and safe counters.","changes":"Appends a uniquely sequenced review and its audit record. A later review changes the expected count; UNDO_AUDIT_REVIEW is a separate recorded action.","reasons":[],"refuses":[],"screen":{"screen":"governance-registers.tsx","control":"Governance review decision"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":26,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":133,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/governance-registers.tsx","line":546,"sha256":"198ab9034a632ffca21ae9f719bed97ce6b53f40f7148085fb9ddd034da46a2c"}]}},{"event":"RECORD_DIVERSION","name":"Divert a journey already under way","group":"The journey","lane":"diversion","nodes":["rkDiversion"],"roles":["officer","coordinator"],"does":"Records that a patient already in the vehicle was taken somewhere other than the ward expecting them, with a reason and the place they went.","needs":"A transport job that has been collected, on a movement that is open, not arrived, not already stopped or cancelled, and not already diverted.","changes":"Marks the movement diverted and records where the patient is. The held bed is NOT given back by this act.","reasons":["DIVERSION_REASONS"],"refuses":[{"when":"Guard: movement.transport.collectedAt === undefined","message":"movement ${movement.id}'s transport has not been collected yet; diversion is only for a journey already under way","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1152}},{"when":"Guard: movement.transport.arrivedAt !== undefined","message":"movement ${movement.id}'s patient has already arrived","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1156}},{"when":"Guard: movement.transport.stoppedAt !== undefined || movement.transport.cancelledAt !== undefined","message":"movement ${movement.id}'s transport was already stopped or cancelled","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1159}},{"when":"Guard: movement.transport.diversion","message":"movement ${movement.id} was already diverted","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1162}},{"when":"Guard: !DIVERSION_REASONS.includes(event.reason)","message":"RECORD_DIVERSION reason must be chosen from DIVERSION_REASONS","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1165}}],"screen":{"screen":"officer/officer-job-detail.tsx (via use-officer-diversion-save.ts); movements/movement-workspace-cockpit.tsx","control":"Divert Diversion reason/place and pending save are guarded against outer dismissal. Draft and completion belong to the same access lifetime, movement and transport job; another job is not recorded or dismissed by an old completion."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":195,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1097,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/officer/use-officer-diversion-save.ts","line":66,"sha256":"bd611831cda3c81a8e99cf89c4d375acbb2e9e95948890a8880e7a9b4425b77b"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1678,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1110,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1114,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1117,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1120,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1123,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"RELEASE_DIVERTED_BED","name":"Give back the bed a diverted patient was holding","group":"Holding the bed","lane":"record","nodes":["rkDiversion"],"roles":["coordinator","ward","ed"],"does":"Releases the bed still held for a movement that was diverted. Separate from the diversion itself, deliberately: diverting somebody does not decide what happens to their bed.","needs":"A movement that really was diverted, and that still holds a bed.","changes":"Returns the bed to the ward's figures.","reasons":[],"refuses":[{"when":"Guard: movement.transport?.diversion === undefined","message":"movement ${movement.id} was not diverted, so there is no diverted bed to release this way","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":634}},{"when":"Guard: movement.closure !== undefined || !movementHoldsBedByStage(movement)","message":"movement ${movement.id} has no bed pulled — it may already have been released","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":640}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_DIVERTED_BED was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is pulled at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":646}}],"screen":{"screen":"movements/movement-workspace-cockpit.tsx; ward/ward-arrivals-corridor.tsx; ed/ed-screen-referred.tsx","control":"Release the diverted bed"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":197,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":686,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workspace-cockpit.tsx","line":1168,"sha256":"2ef8ebba0653d4efbf1d7e0928f60095bef89af5668a243bfec29833df47d09e"},{"path":"src/components/ward-management/ward/ward-arrivals-corridor.tsx","line":662,"sha256":"572956c1b4769defd00bc1a5dc027ff2d76c476388cee6d36833c8321e3824a4"},{"path":"src/components/ward-management/ed/ed-screen-referred.tsx","line":357,"sha256":"0b0d6dde9843e2750f4dbadd23e4e7d9c30b2c2c9eee9e4f2c539961a97568aa"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":693,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":699,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":705,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"SET_ARRIVAL_DETAILS","name":"Record how and when they are expected","group":"The journey","lane":"record","nodes":["edExpected"],"roles":["coordinator","ed","ward","community"],"does":"Records the way the patient is travelling, any tracking number, and the time they are expected.","needs":"An open movement with an accepted ward. A ward names itself and matches that receiving ward; coordinator may also act.","changes":"Stores arrival mode, optional tracking and estimate, retaining first-record author/time and later update provenance. Keeps the pull-expiry timer. An already-late estimate can send one-time ED/ward notices; it reserves no bed and moves no stage.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1132}},{"when":"Guard: movement.closure","message":"cannot update arrival details on closed movement","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1134}}],"screen":{"screen":"arrival-time-modal.tsx","control":"Set arrival details The arrival dialog names the patient and record, keeps edited answers on Keep editing, requires explicit Discard details before an unsaved close, and blocks dismissal while pending. A delayed discard only closes the unchanged current mounted draft; saving closes only on a current accepted outcome."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":544,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1165,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/referrals/arrival-time-modal.tsx","line":173,"sha256":"b4b6a5c54f7517706f955942876fa195982fdfccf9fe481094705fa9ceae98f5"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1167,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1169,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"EVALUATE_ARRIVAL_LATENESS","name":"Work out whether an expected arrival is late","group":"The journey","lane":"record","nodes":["edExpected"],"roles":["coordinator","ed","ward"],"does":"Compares the expected arrival time against the clock and records whether it has passed.","needs":"A movement, and a role allowed to ask.","changes":"When late, stamps the movement and sends notices to the emergency department and ward. When on time, leaves it unchanged. No journey stage moves.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1216}},{"when":"Guard: movement.closure","message":"This movement is closed.","source":{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1217}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Review late arrival"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":567,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1250,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":140,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1252,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1253,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"}]}},{"event":"SET_STEP_DOWN_CANDIDATE","name":"Mark somebody as a step-down candidate","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records that this admission could move to a lower level of care.","needs":"An existing admission. A ward must name that admission’s ward; coordinator permission is separate.","changes":"Sets the flag, and nothing else. No bed figure moves.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":722}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_STEP_DOWN_CANDIDATE was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":728}}],"screen":{"screen":"board/ward-board-detail-panel.tsx","control":"Step-down candidate"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":545,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":704,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":524,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":706,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":712,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_DISCHARGE_BARRIER","name":"Record what is holding a discharge up","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records the single thing in the way of this discharge, or that nothing is.","needs":"An existing admission, the acting ward when role is ward, and a listed barrier or None/null. The reducer does not impose a seven-day minimum.","changes":"Replaces the discharge-barrier field, with None normalised to null. It records a reason; it does not free or reserve a bed.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":745}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_DISCHARGE_BARRIER was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":750}}],"screen":{"screen":"ward/ward-screen-overlays.tsx; board/ward-board-detail-panel.tsx","control":"Discharge barrier"},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":552,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":727,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-screen-overlays.tsx","line":344,"sha256":"0d4efcd48b41c5c0d1b0c81ae4d555cf2028f9257dfab37db9b903cd2188aea3"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":566,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":729,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":734,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"SET_CLINICALLY_READY","name":"Record clinically ready and why not gone","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records the day a patient on the ward became clinically ready for discharge and the one reason they have not gone, or clears both (Josh, 9 Nov 2026).","needs":"An occupied admission, the acting ward when role is ward, a day from arrival to today and a reason from DELAYED_DISCHARGE_REASONS (the long-stay list less Clinical / Treatment), or null to clear.","changes":"Sets or clears clinicallyReadySince and delayedDischargeReason together. Delayed bed days by reason are derived from them; no bed is freed or reserved.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":761}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== admission.unitId","message":"SET_CLINICALLY_READY was raised acting as unit ${event.actingUnitId} but admission ${admission.id} is at ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":766}},{"when":"Guard: admission.state !== \"occupied\" || admission.arrivedAt === null","message":"SET_CLINICALLY_READY applies only to a patient on the ward","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":770}},{"when":"Guard: !isDelayedDischargeReason(ready.reason)","message":"SET_CLINICALLY_READY reason must be chosen from DELAYED_DISCHARGE_REASONS","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":776}},{"when":"Guard: the day is not finite, is before the arrival day or after today","message":"SET_CLINICALLY_READY date must fall between arrival and today","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":784}}],"screen":{"screen":"board/ward-board-clinically-ready.tsx","control":"Clinically ready since"},"review":{"reviewedOn":"2026-11-09","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":554,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":759,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/board/ward-board-clinically-ready.tsx","line":95,"sha256":"e96eb8cc65cf8106ffb61275d82972e5b40617de1b68c6dceb0737fb47a3ef78"}]}},{"event":"UPDATE_EXPECTED_DISCHARGE","name":"Set or move the expected discharge date","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Sets when this admission is expected to leave. Moving a date already set counts as one more move.","needs":"An admission that has not already left. A ward can only set it for its own patients. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Sets the expected time, increments date-move count only when an existing date differs, and stamps when. A ward setter is Nurse in charge; coordinator setter is null. Pending linked bed-release dates follow; completed release dates stay historical.","reasons":[],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":226}},{"when":"Guard: admission.state === \"departed\"","message":"cannot update expected discharge for departed admission ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":229}},{"when":"Guard: event.role === \"ward\" && (!event.actingUnitId || event.actingUnitId !== admission.unitId)","message":"UPDATE_EXPECTED_DISCHARGE was raised acting as unit ${event.actingUnitId ?? \"unspecified\"} but admission ${admission.id} belongs to unit ${admission.unitId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":235}},{"when":"Guard: typeof event.expectedDischargeAt !== \"number\" || !Number.isFinite(event.expectedDischargeAt)","message":"UPDATE_EXPECTED_DISCHARGE expectedDischargeAt must be a valid timestamp","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":239}}],"screen":{"screen":"ward/ward-drawer-discharge-date.tsx; board/ward-board-detail-panel.tsx; patients/patient-now-screen.tsx; discharges/discharge-detail-panes.tsx","control":"Update expected departure The ward drawer fixes its day choices when the editor opens, so a save made just after midnight keeps the day that was chosen."},"review":{"reviewedOn":"2026-11-07","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":23,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":224,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward/ward-drawer-discharge-date.tsx","line":81,"sha256":"54731b0b51ea23bdd098e653f19cefc60e759ac91e8a170418a96e9837f3aa87"},{"path":"src/components/ward-management/board/ward-board-detail-panel.tsx","line":401,"sha256":"403fc9988b2da12a35f0efbd2c4ea67e47eacd5a00bef6d74f9d05f0eb27b961"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":743,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/discharges/discharge-detail-panes.tsx","line":304,"sha256":"e5336a5cf0037d9c50af5a381b33e5ac5f8278de1a800067197254a82a19aec3"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":227,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":230,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":236,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":240,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_ADMISSION_CARE","name":"Record care journey fact","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator","community"],"does":"Records a care journey fact (such as a transfer, transport, clinical plan or document) against an admission on the discharge board.","needs":"Current generation/revision, permitted ward/coordinator/community actor and accessible linked occupied/departed stay. Community writes only its allowed care kinds for its own team; transfer acceptance and cancellation are coordinator-only, and an accepted or handover transfer step needs a linked placement record (a ward referral or agreed repatriation). Change-kind validation and sequence-specific guards apply. A transfer recorded as arrived also needs a Ready bed at the receiving ward once its live pulls are counted.","changes":"Appends or updates the care journey record. Moves no bed figure — except a transfer recorded as arrived, which also ends this admission as transferred, opens a new occupied admission and an arrived movement at the receiving ward, completes any live bed release for the leaver, and moves both wards' bed figures.","reasons":[],"refuses":[{"when":"Guard: patientRecordIsInvoluntary(patient?.legalStatus) || stayLegalStatusIsInvoluntary(state, admission)","message":"Record the checked transport authority for this involuntary arrangement.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":256}},{"when":"Guard: previous !== \"5A\" && previous !== \"5B\"","message":"A Form 5B continuation needs a recorded Form 5A or earlier Form 5B for this stay.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":264}},{"when":"Guard: transfer accepted/handover && !dischargeMovement(state, admission)","message":"Create a linked placement record through a ward referral or agreed repatriation before recording this transfer.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":257}},{"when":"Guard: pulledBedAvailability(receiving, livePulled).ready \u003c= 0","message":"No Ready bed remains at the receiving ward.","source":{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":332}}],"screen":{"screen":"discharge-care-journey.tsx","control":"Record care fact"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":20,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":230,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1622,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward/ward-leave-paper-authority.tsx","line":141,"sha256":"e8727edeed2ac11af122dcd34039702137c3355dc9404cf567e5d1316f14fff7"},{"path":"src/components/ward-management/discharges/discharge-care-journey.tsx","line":122,"sha256":"ccb0ccd1a1dd746abeef58fb9f7c3aa79e38c0316a68b6a3160ffe85c7dd44f4"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":276,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":284,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"}]}},{"event":"RECORD_ADMISSION_FOLLOW_UP","name":"Record follow-up arrangement","group":"On the ward","lane":"record","nodes":["rkDischargePlan"],"roles":["ward","coordinator"],"does":"Records follow-up contact arrangements against an admission on the discharge board.","needs":"Current generation/revision, permitted ward/coordinator actor and accessible linked occupied/departed stay. The listed follow-up state cannot be recorded after death on the ward, or before arrival.","changes":"Updates the follow-up arrangement on the admission. Moves no bed figure.","reasons":[],"refuses":[],"screen":{"screen":"discharge-follow-up.tsx","control":"Record follow-up"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":21,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":453,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1623,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/discharges/discharge-follow-up.tsx","line":87,"sha256":"807a917c3e51421e00d0e3aea3f79340f47939406bd66baea66e7312372dcce6"}]}},{"event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","name":"Record medical clearance against the movement","group":"Finding a bed","lane":"record","nodes":["rkClearance"],"roles":["ed","coordinator"],"does":"Records clearance on a movement and synchronises its matching linked referral. Fresh positive clearance resumes a recorded deterioration pause.","needs":"An existing movement, ED/coordinator role, finite recording time and boolean answer; an ED must name itself and be the journey's origin ED (M2); positive re-clearance must follow the recorded deterioration. In the patient workspace, an exceptional record opening is read only: patient-scoped UI gates do not offer this mutation. An ordinary authorised caller retains its own route role and the relevant stay/receiving-ward claim; a desk-switch hint grants no authority.","changes":"Replaces clearance on the movement, matching linked referral and matching sibling movements. Positive fresh clearance records resumedAt for satisfied pauses; it does not restore released resources.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1323}},{"when":"Guard: event.role !== \"ed\" && event.role !== \"coordinator\"","message":"role ${event.role} cannot record movement medical clearance; only ed or coordinator may record clearance","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1328}},{"when":"Guard: event.role === \"ed\" && actingPlaceId is not the journey's originEdId","message":"Only the originating ED may record medical clearance for this journey.","source":{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1285}}],"screen":{"screen":"ed/ed-medical-placement-controls.tsx; patients/patient-now-screen.tsx","control":"Medically cleared"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":555,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1276,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ed/ed-medical-placement-controls.tsx","line":148,"sha256":"89a5797a48cde8abca855128c5449c6b73e4dae9a065352fb94e6810d203dbec"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":1434,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1278,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1283,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"}]}},{"event":"UPLOAD_PATIENT_FORM","name":"Attach a file to the movement","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["coordinator","ed","ward","community","officer"],"does":"Records document type, recognised file type and byte size as attachment metadata. The selected file’s name and bytes are not stored by this event.","needs":"An existing movement, nonblank document type, recognised file type and positive safe-integer byte size. Legacy filenames are read only to derive their type.","changes":"Appends generated document id, formName, fileType, sizeBytes and role/time metadata; no file body or original filename is retained.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":791}},{"when":"Guard: event.fileType === undefined && (typeof legacyName !== \"string\" || legacyName.trim().length === 0)","message":"Document details need a recognised file type.","source":{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":802}}],"screen":{"screen":"upload-forms-modal.tsx","control":"Upload a form"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":556,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":773,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/officer/officer-forms-pack.tsx","line":293,"sha256":"bec740b858e305b841f30e084461ba51f96e7c63b939c2394771c1ab06728d02"},{"path":"src/components/ward-management/referrals/upload-forms-modal.tsx","line":75,"sha256":"070b8a39d8755ece7a56af9cb756aaf8714457c3751d29f1c468ef6a7cf4b18b"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":779,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":790,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"}]}},{"event":"RECORD_LEGAL_FORM_WRITTEN","name":"Record that a legal form was written","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator","ward"],"does":"Records which form was written, with typed start and expiry times.","needs":"A supported form, finite typed written time and any typed expiry. A ward requires an admitted stay; ED requires an open movement, while an admitted stay permits the coordinator/ward path after arrival. 3C after3D refuses; this event cannot shorten existing same-form paper expiry.","changes":"Stores current paper facts and history, preserves matching same-form paper facts on a time edit, and clears a calculated legacy clock. A different form clears the old receipt. A same-form time edit also keeps the details typed from that paper and the typed receipt mark; a different form clears them.","reasons":[],"refuses":[{"when":"Guard: movement.closure && !(admitted && event.role !== \"ed\")","message":"cannot record a written form for a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":233}},{"when":"Guard: !isLegalClockFormCode(event.formCode)","message":"That form is not a recognised legal form in this prototype","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":244}},{"when":"Guard: event.formCode === \"3C\" && form3CRefusedAfter3D(movement.legalForm?.code ?? movement.legalClock?.code)","message":"Form 3C is refused when the person arrived on a Form 3D","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":247}}],"screen":{"screen":"legal-forms-screen.tsx","control":"Record a written form"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":558,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":275,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":531,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":299,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":313,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":316,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_LEGAL_FORM_CONTINUATION","name":"Record that a form was continued","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator","ward","community"],"does":"Records a continuation with typed times. A 5B continues a 5A; other supported forms can replace paper facts without a prior form.","needs":"An open movement, supported form and valid typed start and expiry times. On a ward desk only the ward that accepted the person may record it (D-128); the app checks the named ward and the shared server checks it is the caller's own place.","changes":"Stores the paper form and typed expiry, clears the old legal clock and the typed receipt mark.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":345}},{"when":"Guard: !isLegalClockFormCode(event.formCode)","message":"That form is not a recognised legal form in this prototype","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":355}},{"when":"Guard: event.role === \"ward\" && actingUnitId is not movement.acceptedUnitId","message":"Only the ward that accepted this person can record a continuation.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":425}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Record legal form continuation"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":566,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":415,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":322,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":417,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":437,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"RECORD_COUNTRY_EXTENSION","name":"Record a typed country Form 1A extension","group":"Legal status and examinations","lane":"record","nodes":["rkLegalWritten"],"roles":["ed","coordinator"],"does":"For an eligible open country Form1A, forwards the clinician’s typed paper expiry through RECORD_LEGAL_FORM_EXPIRY. It computes no statutory deadline.","needs":"An existing open movement carrying current Form1A with paper region country, a finite paperExpiresAt and the ordinary expiry extension rules.","changes":"Records the typed expiry and expiry history through the standard expiry handler, clearing any calculated legacy clock.","reasons":[],"refuses":[{"when":"Guard: movement.closure || event.paperExpiresAt === undefined || !Number.isFinite(event.paperExpiresAt)","message":"Country extensions are recorded as a typed expiry. Enter the new expiry written on the country extension form.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":317}},{"when":"Guard: !countryExtensionEligible(movement)","message":"A country extension requires a current Form 1A with its paper setting recorded as country.","source":{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":323}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Record country paper extension"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":565,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":382,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":359,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":389,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":395,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}]}},{"event":"FLAG_LEGAL_MISMATCH","name":"Flag that the ward's authority does not match","group":"Legal status and examinations","lane":"record","nodes":["rkLegalMismatch"],"roles":["ward","coordinator"],"does":"Records one of two mismatches: an involuntary patient on a voluntary ward, or a voluntary patient on a locked one.","needs":"An open movement and real ward. The submitted mismatch kind must match the current patient legal status and ward authority/bed configuration.","changes":"Raises the flag. It does not stop anything by itself.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2103}},{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2106}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Flag current legal placement mismatch"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":571,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2158,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":187,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2134,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2160,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RAISE_EXPECT_FLAG","name":"Start a forty-eight-hour or seven-day clock by hand","group":"Urgency and blockers","lane":"record","nodes":["rkExpectFlag"],"roles":["ward","coordinator","ed","community"],"does":"Raises one of two hand-set clocks against a movement.","needs":"An open movement with no uncleared flag and kind voluntary_48h or involuntary_7d.","changes":"Records the current manually raised flag. Replacing a previously cleared flag keeps that prior record in expectFlagHistory; no automatic state transition is implied.","reasons":[],"refuses":[{"when":"Guard: movement.closure","message":"This movement is closed.","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082}},{"when":"Guard: movement.expectFlag && movement.expectFlag.clearedAt === undefined","message":"movement ${movement.id} already has an open expect flag","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Raise expectation review flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":570,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2096,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":116,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2132,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2137,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"CLEAR_EXPECT_FLAG","name":"Clear that hand-set clock","group":"Urgency and blockers","lane":"record","nodes":["rkExpectFlag"],"roles":["ward","coordinator","ed","community"],"does":"Clears the flag raised above.","needs":"An open movement with an uncleared expect flag.","changes":"Stamps clearedAt and clearedBy on the flag; it is retained rather than removed.","reasons":[],"refuses":[{"when":"Guard: !movement","message":"no movement found for id ${event.movementId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2067}},{"when":"Guard: !movement.expectFlag || movement.expectFlag.clearedAt !== undefined","message":"movement ${movement.id} has no open expect flag to clear","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2070}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Clear expectation review flag"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":569,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":114,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2087,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"RELEASE_AND_REOPEN_SEARCH","name":"Give the bed back and reopen the search, in one act","group":"Holding the bed","lane":"stall","nodes":["sPullReleased"],"roles":["coordinator","ward"],"does":"Releases the held bed AND puts the movement back into the bed search together, rather than as two separate steps.","needs":"An open movement at pulled or accepted_awaiting_bed, a listed release reason and no live booking; a ward must match the accepting ward. A bed need not already be held on the accepted-only branch.","changes":"Returns any matching held bed, clears acceptance/hold/requests/transport and moves to placement_requested. Logs pull release when held, otherwise acceptance withdrawal. For a return movement with sourceAdmissionId, the in-app release/withdrawal notice targets the actual sending stay ward. Ordinary ED/community origins retain their existing recipient paths; no external-provider delivery is implied.","reasons":["RELEASE_PULL_REASONS"],"refuses":[{"when":"Guard: movement.closure","message":"cannot release and reopen a closed movement (${movement.closure.reason})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":757}},{"when":"Guard: movement.stage !== \"pulled\" && movement.stage !== \"accepted_awaiting_bed\"","message":"cannot release and reopen at the movement's current stage (${stageCopy[movement.stage].label})","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":763}},{"when":"Guard: !RELEASE_PULL_REASONS.includes(event.reason)","message":"RELEASE_AND_REOPEN_SEARCH reason must be chosen from RELEASE_PULL_REASONS","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":774}},{"when":"Guard: event.role === \"ward\" && event.actingUnitId !== movement.acceptedUnitId","message":"RELEASE_AND_REOPEN_SEARCH was raised acting as unit ${event.actingUnitId} but movement ${movement.id}'s bed is at ${movement.acceptedUnitId}","source":{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":780}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Release held bed and reopen search"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":568,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":812,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":228,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":816,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":822,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":833,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":839,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"}]}},{"event":"CONFIRM_MORNING_ROLLUP","name":"Confirm the ward's morning count","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["ward","bed_manager","coordinator"],"does":"A ward confirming how many discharges it expects that morning.","needs":"The acting ward must match the target; the count must be a nonnegative safe integer.","changes":"Records the confirmed number against the ward.","reasons":[],"refuses":[{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2126}},{"when":"Guard: (event.role === \"ward\" && event.actingUnitId === undefined) || (event.actingUnitId !== undefined && event.actingUnitId !== event.unitId)","message":"CONFIRM_MORNING_ROLLUP was raised acting as unit ${event.actingUnitId} but targets unit ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2136}}],"screen":{"screen":"ward-screen.tsx","control":"Confirm the morning rollup"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":579,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2155,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward/ward-screen.tsx","line":1085,"sha256":"c28c05d4b218898ae15792b2cfe12206b73373de30ef399cbc3940a61e9716bf"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2157,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2147,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"SEND_WARD_BUZZ","name":"Send a message to a ward","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["coordinator","bed_manager"],"does":"Records a ward refresh request with a listed message and optional urgent boolean. It sends no external message.","needs":"A real unit, a message from WARD_BUZZ_MESSAGES and, if supplied, a boolean urgent answer. Blank/unlisted messages refuse.","changes":"Appends a refresh-request record with role/time, message and urgency; moves no bed figure.","reasons":[],"refuses":[{"when":"Guard: !WARD_BUZZ_MESSAGES.includes(event.message) || (event.urgent !== undefined && typeof event.urgent !== \"boolean\")","message":"Choose a valid ward refresh message.","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2160}},{"when":"Guard: !unit","message":"no unit found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2162}}],"screen":{"screen":"movement-workflow-actions.tsx","control":"Request ward capacity review"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":580,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2186,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":210,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2191,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2218,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}]}},{"event":"EVALUATE_LEAVE_BED_WARNINGS","name":"Sweep the beds held during leave","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["ward","coordinator"],"does":"Works out which beds being held while somebody is on leave are worth warning about.","needs":"Nothing but the clock — it takes no patient and no ward.","changes":"For each leave bed over the open-warning threshold that has not been warned, records openWarningAt and sends a ward notice. It does not release the bed or move capacity.","reasons":[],"refuses":[],"screen":{"screen":"movement-workflow-actions.tsx","control":"Review leave bed warnings"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":578,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":821,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/movements/movement-workflow-actions.tsx","line":163,"sha256":"650137e651d6fe56400b63cee0f307dfbbf5021f929fcefe34a7f6af50ed48ee"}]}},{"event":"RECORD_REPATRIATION","name":"Log a repatriation arranged by phone","group":"The journey","lane":"record","nodes":["dRepat"],"roles":["coordinator"],"does":"Logs a repatriation already arranged off the system: the home hospital, whether its ward agreed, road or flight, and voluntary or involuntary, with the provider, the CAD or tracking number and an estimated time when known (W13, 5 Nov 2026: each left out warns, and a blank CAD is CAD to follow; a typed depart time the form cannot read blocks the plan form rather than recording without it). It books nothing.","needs":"A non-departed admission with valid home hospital, mode and legal status. A provider, if given, must be listed; a typed CAD must pass the CAD rule; an estimate, if given, must be finite. An unanswered prior plan may later be agreed once; an agreed plan cannot be agreed again while its return remains open; after a did_not_proceed closure a distinct new attempt may be agreed. An involuntary stay cannot be logged as a voluntary return. Any still-open return for the source stay refuses another plan. A retained agreed plan may start a distinct new attempt only after its linked return closed did_not_proceed; this retry qualification does not allow duplicate live returns or duplicate agreement of an active plan.","changes":"Creates or updates the telephone plan. Each distinct plan’s first agreement creates an open placement_requested return movement linked to the source stay; it does not itself book transport or transfer the patient. A retry preserves its prior closed journey and a flat earlier plan snapshot while replacing the single current plan for that stay. Agreed return origin site/ED lookup follows the saved scenario network. Local restore validates flat prior records and retains typed CAD values only as the redaction placeholder. An agreement that does not repeat the plan's provider or estimated time keeps the plan's own; a value it gives wins.","reasons":["TRANSPORT_PROVIDERS","TRANSPORT_LEGAL_STATUSES"],"refuses":[{"when":"Guard: !admission","message":"no admission found for id ${event.admissionId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":512}},{"when":"Guard: existingRecord && (existingRecord.receivingWardAgreed || event.receivingWardAgreed !== true)","message":"admission ${admission.id} already has a repatriation record","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":537}},{"when":"Guard: !scenarioHasSite(state.scenario, event.homeHospital)","message":"RECORD_REPATRIATION homeHospital ${event.homeHospital} does not name a real site","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":540}},{"when":"Guard: typeof event.receivingWardAgreed !== \"boolean\"","message":"RECORD_REPATRIATION receivingWardAgreed must be answered, and it has no default","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":543}},{"when":"Guard: !(REPATRIATION_MODES as readonly string[]).includes(event.mode)","message":"RECORD_REPATRIATION mode must be chosen from REPATRIATION_MODES","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":546}},{"when":"Guard: event.provider !== undefined && !(TRANSPORT_PROVIDERS as readonly string[]).includes(event.provider)","message":"RECORD_REPATRIATION provider must be chosen from TRANSPORT_PROVIDERS","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":549}}],"screen":{"screen":"out-of-area-board.tsx","control":"Record repatriation After the latest linked return journey is closed did_not_proceed, the Out of area screen reopens the return-plan form rather than treating the older agreed plan as still active. Historical records remain; retry acceptance and creation of another journey remain engine decisions."},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":582,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":530,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/out-of-area/out-of-area-board.tsx","line":418,"sha256":"0e5d43b3a020ff60e265e2e4fb200f16d505dd667d737677943fdc01ff23f26d"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":533,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":558,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":561,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":564,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":567,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":570,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_HANDOVER_SIGN_OFF","name":"Sign off the shift handover","group":"The ward's own numbers","lane":"record","nodes":["rkWardDay"],"roles":["coordinator","ward"],"does":"Records that the shift handover was signed off.","needs":"A permitted role and, when supplied, a real ward. A sign-off cannot name both a ward and the whole network; signed/shared scope further limits the acting desk.","changes":"Appends role/time plus the selected ward id or network flag. It records no personal name/note and makes no claim that a sheet was sent.","reasons":[],"refuses":[{"when":"Guard: event.unitId !== undefined && !findUnit(state, event.unitId)","message":"no ward found for id ${event.unitId}","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":493}},{"when":"Guard: event.network === true && event.unitId !== undefined","message":"a sign-off names one ward or the whole network, not both","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":496}}],"screen":{"screen":"handover/handover-scope-rules.ts","control":"Sign off the handover The handover being reviewed retains outgoing ward journeys through the linked source stay or referral origin and outgoing community journeys through their originating team. Display inclusion does not widen the desk allowed to sign off."},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":591,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":509,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/handover/handover-scope-rules.ts","line":113,"sha256":"a5ef90b1a994a20b49344788004bcd8160e5f58383e77fa48a82bde80e67f198"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":514,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":517,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"RECORD_CLINICAL_CONTACT","name":"Record that a team was contacted","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["community","coordinator"],"does":"Records that somebody contacted a community team. This is the contact itself, not a message sent through the system.","needs":"A community team that exists.","changes":"Stores the team, the time and the role.","reasons":[],"refuses":[{"when":"Guard: !team","message":"RECORD_CLINICAL_CONTACT teamId ${event.teamId} does not name a real team","source":{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":689}}],"screen":{"screen":"community/use-community-contact-save.ts","control":"Contacted"},"review":{"reviewedOn":"2026-11-05","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":599,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":711,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/community/use-community-contact-save.ts","line":154,"sha256":"6503061cec64069859f3ed3a8f52042ef6d18bce27c5de7c37f88bfe8ab5da8e"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":715,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"}]}},{"event":"DISPATCH_BROADCAST_ALERT","name":"Send a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","bed_manager"],"does":"Sends an alert to wards and emergency departments across the network, with a severity, a category, who it is aimed at and how long it lasts.","needs":"Nonblank title/message; listed severity/category/scope; finite positive duration; directive or bed_call kind; any explicit recipients must be real ward/ED desks. A bed call requires at least one targeted ward.","changes":"Adds the alert as active, with nobody yet acknowledging it. It belongs to no patient.","reasons":[],"refuses":[{"when":"Guard: !event.title.trim() || !event.message.trim()","message":"DISPATCH_BROADCAST_ALERT requires a non-empty title and message","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":71}},{"when":"Guard: finiteInstant(event.durationMinutes) === null || event.durationMinutes \u003c= 0","message":"DISPATCH_BROADCAST_ALERT durationMinutes must be a finite positive number","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":92}}],"screen":{"screen":"alerts-screen.tsx","control":"+ Broadcast Network Alert"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":626,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":69,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":827,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":71,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":92,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}},{"event":"ACKNOWLEDGE_BROADCAST_ALERT","name":"Acknowledge a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","ward","ed","officer","community","bed_manager"],"does":"Records that one ward or desk has seen a network-wide alert.","needs":"An active alert and known ward/ED desk not already acknowledged; the special coordinator desk id requires coordinator role. Signed access must match the actor’s actual desk.","changes":"Adds the unit to the alert's acknowledged list.","reasons":[],"refuses":[{"when":"Guard: !target","message":"ACKNOWLEDGE_BROADCAST_ALERT alertId ${event.alertId} not found","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":155}},{"when":"Guard: !isAlertActive(target, event.now)","message":"ACKNOWLEDGE_BROADCAST_ALERT alertId ${event.alertId} is no longer active","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":178}}],"screen":{"screen":"shell/ward-broadcast-banner-body.tsx; shell/ward-broadcast-banner.tsx","control":"Acknowledge this directive for your desk; desk comes from current signed/route context"},"review":{"reviewedOn":"2026-11-03","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":627,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":151,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/shell/ward-broadcast-banner-body.tsx","line":130,"sha256":"a96ae00d184b52341105eb90f8a0438f5f5561f787c2522f97e0e7ea62e87178"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":155,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":178,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}},{"event":"STAND_DOWN_BROADCAST_ALERT","name":"Stand down a network-wide alert","group":"The coordinator's inbox","lane":"record","nodes":["rkNotice"],"roles":["coordinator","bed_manager"],"does":"Ends a network-wide alert once the pressure has passed.","needs":"An alert that exists and has not already been stood down.","changes":"Marks the alert stood down, with the time and who did it.","reasons":[],"refuses":[{"when":"Guard: !target","message":"STAND_DOWN_BROADCAST_ALERT alertId ${event.alertId} not found","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":202}},{"when":"Guard: target.status === \"stood_down\"","message":"STAND_DOWN_BROADCAST_ALERT alertId ${event.alertId} is already stood down","source":{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":208}}],"screen":{"screen":"alerts-screen.tsx","control":"Stand Down Directive"},"review":{"reviewedOn":"2026-11-06","sources":[{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":628,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":198,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/alerts-screen.tsx","line":861,"sha256":"f6c8553c1f95d0d24d39598f85249f0988d98668dc7e9bbc951fd80bce56ab72"},{"path":"src/components/ward-management/shell/ward-broadcast-banner.tsx","line":125,"sha256":"d34087fc1cfb2356065997d7942882cd1bc9791e3041e71ec0fb0d279fe429be"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":202,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":208,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"}]}}],"stages":{"width":2880,"height":4832,"spineX":910,"nodes":[{"id":"srcCommunity","lane":"expected","x":60,"y":66,"w":236,"h":62,"label":"A community team","phase":"front"},{"id":"srcCrisis","lane":"expected","x":312,"y":66,"w":236,"h":62,"label":"A crisis service","phase":"front"},{"id":"srcPolice","lane":"expected","x":564,"y":66,"w":236,"h":62,"label":"Police","phase":"front"},{"id":"srcAmbulance","lane":"expected","x":816,"y":66,"w":236,"h":62,"label":"Ambulance","phase":"front"},{"id":"srcHospital","lane":"expected","x":1068,"y":66,"w":236,"h":62,"label":"Another hospital","phase":"front"},{"id":"srcEd","lane":"expected","x":1320,"y":66,"w":236,"h":62,"label":"A doctor in an ED","phase":"front"},{"id":"srcGp","lane":"expected","x":1572,"y":66,"w":236,"h":62,"label":"A GP","phase":"front"},{"id":"hdr-src","lane":"heading","x":60,"y":14,"w":700,"h":40,"label":"Who raises it  ·  seven","sub":"A doctor in an ED may only raise it as an ED referral — they cannot claim another source.","phase":"front"},{"id":"raised","lane":"expected","x":700,"y":200,"w":420,"h":80,"label":"A referral is raised","sub":"Somebody has decided this person needs to go somewhere.","patient":"Wherever they already were.","bed":"Nothing yet.","phase":"front"},{"id":"addressed","lane":"expected","x":700,"y":320,"w":420,"h":86,"label":"Addressed to up to three places at once","sub":"Up to the configured recipient cap. Distinct named psychiatric wards can be addressed together; duplicate recipients and mixing a broad ward request with named ward requests are refused.","patient":"Still where they were.","bed":"Nothing yet.","phase":"front"},{"id":"armCommunity","lane":"expected","x":60,"y":460,"w":460,"h":90,"label":"①  Sent to a community team","sub":"Named as free text — there is no register of teams to choose from.","patient":"At home, or wherever they were.","bed":"Nothing. This arm never involves one.","phase":"front"},{"id":"armWard","lane":"expected","x":700,"y":460,"w":420,"h":90,"label":"②  Sent to a psychiatric ward","sub":"Carries what the bed must be: sex, gender, secure, involuntary, high-acuity nursing.","patient":"Still waiting.","bed":"Nothing reserved.","phase":"front"},{"id":"armEd","lane":"expected","x":1300,"y":460,"w":500,"h":90,"label":"③  Sent to an emergency department","sub":"Must say what it is FOR: a bed, a psychiatric review, or a medical assessment.","patient":"On their way to, or already in, that department.","bed":"Nothing.","phase":"front"},{"id":"cmhtAnswers","lane":"expected","x":60,"y":600,"w":460,"h":70,"label":"The team answers","phase":"front"},{"id":"cmhtAccepted","lane":"end","x":60,"y":720,"w":460,"h":90,"label":"Accepted — community follow-up","sub":"The arm ends here. It never becomes a bed search.","phase":"front"},{"id":"cmhtDeclined","lane":"end","x":60,"y":860,"w":460,"h":112,"label":"Declined — four reasons","sub":"Outside the team's catchment · needs inpatient care, not community follow-up · the client declined or could not be contacted · already open to another team.","phase":"front"},{"id":"cmhtNothing","lane":"stall","x":60,"y":1012,"w":460,"h":104,"label":"No answer yet","sub":"The arm remains queued until answered or withdrawn. Other acceptances do not cancel a community arm. Displayed waiting/overdue indicators do not decide or close it.","finding":"Nothing anywhere can close a queued community arm except the team answering or the referrer.","phase":"front"},{"id":"cmhtWithdrawn","lane":"stall","x":60,"y":1152,"w":460,"h":110,"label":"The referrer withdraws just this arm","sub":"A narrow exception added 17 September 2026, and only while the arm is still queued — a team that has already answered keeps its answer. The bed request stands.","phase":"front"},{"id":"cmhtFromSearch","lane":"diversion","x":60,"y":1298,"w":460,"h":110,"label":"It can also begin part-way through a bed search","sub":"Redirecting a bed search to a community team raises a real referral of this kind — or reuses a queued arm already asking that same team, rather than asking twice. So this arm does not only start at the front door.","phase":"front"},{"id":"cmhtExempt","lane":"note","x":60,"y":1444,"w":460,"h":100,"label":"This arm is exempt from the automatic cancellation","sub":"In both directions. A ward accepting does not close it, and it accepting does not close the bed search. It is the only arm that behaves this way.","phase":"front"},{"id":"wardAnswers","lane":"expected","x":700,"y":600,"w":420,"h":70,"label":"The ward answers","phase":"front"},{"id":"wardAccepted","lane":"expected","x":700,"y":720,"w":420,"h":90,"label":"Accepted","sub":"Records the ward answer, with an optional named bed reservation on the referral. It creates no movement or admission.","patient":"Still waiting.","bed":"No movement pull yet; a named bed can be reserved on this answer.","phase":"front"},{"id":"wardDeclined","lane":"end","x":700,"y":860,"w":420,"h":112,"label":"Declined — seven reasons","sub":"No suitable bed · age band not provided here · no bed of that designation · no secure bed · belongs to another service · referred elsewhere · another reason.","phase":"front"},{"id":"wardNothing","lane":"stall","x":700,"y":1022,"w":420,"h":96,"label":"No answer at all","sub":"The destination remains waiting until answered, withdrawn or cancelled by a competing acceptance. Current target/overdue displays can flag waiting; they do not choose an answer.","phase":"front"},{"id":"othersCancelled","lane":"diversion","x":700,"y":1168,"w":420,"h":100,"label":"Every other waiting arm is cancelled","sub":"Automatically, the moment a ward OR a department accepts — except the community arm, which is exempt in both directions. The referrer is neither asked nor told.","phase":"front"},{"id":"wardWithdrawn","lane":"diversion","x":700,"y":1310,"w":420,"h":130,"label":"The referrer takes the WHOLE referral back","sub":"The default, and the opposite of the community arm's one-arm exception: every still-queued destination goes at once. If a bed search is already running it releases the held bed and cancels the transport, and closes as 'did not proceed'. Refused once transport has collected the patient — that needs a coordinator, not an automatic withdrawal.","phase":"front"},{"id":"wardBlocked","lane":"stall","x":700,"y":1470,"w":420,"h":116,"label":"A ward cannot accept while a department's bed search is live","sub":"One referral, two arms: if the emergency department already raised the bed search, the ward arm is refused until that movement closes or arrives. Neither arm's screen shows the other.","phase":"front"},{"id":"edBoard","lane":"expected","x":1300,"y":600,"w":500,"h":90,"label":"It lands on that department's board","sub":"And the referrer can see their patient sitting there.","phase":"front"},{"id":"edExpected","lane":"expected","x":1300,"y":740,"w":500,"h":90,"label":"Expected to arrive","sub":"Triaged, and not here yet. It sits on a separate list from the referrals.","patient":"Not here yet.","bed":"Nothing.","phase":"front"},{"id":"edNeverArrives","lane":"stall","x":1300,"y":880,"w":500,"h":120,"label":"Expected, and never arrives","sub":"A queued ED arm can be declined or withdrawn before arrival, removing this expectation. Otherwise it stays until arrival; past 72 hours the screen adds a reminder but changes no record.","finding":"A queued ED arm can be declined or withdrawn before arrival; the expectation then disappears without an arrival stamp.","phase":"front"},{"id":"edArrived","lane":"expected","x":1300,"y":1040,"w":500,"h":86,"label":"Marked present","sub":"The only door between the two lists. Stamped once; a repeat keeps the earliest time.","patient":"Physically in the department.","bed":"Nothing.","phase":"front"},{"id":"edAnswers","lane":"expected","x":1300,"y":1176,"w":500,"h":70,"label":"The department answers, or acts","phase":"front"},{"id":"edAccepted","lane":"expected","x":1300,"y":1296,"w":500,"h":104,"label":"Accepted — the department takes them","sub":"And every other destination still waiting is cancelled on the spot, including the ward request sent alongside it. The referrer is not asked.","patient":"In the department.","bed":"Nothing — accepting reserves none.","phase":"front"},{"id":"edDeclined","lane":"end","x":1300,"y":1450,"w":500,"h":104,"label":"Declined — three reasons only","sub":"Belongs to another service · referred elsewhere · another reason. The four bed-shaped reasons are withheld on purpose: an ED is not being asked for a bed.","phase":"front"},{"id":"edRaise","lane":"expected","x":1300,"y":1604,"w":500,"h":104,"label":"A doctor raises a bed search from here","sub":"This is what creates the record that moves. It can be linked back to the referral that sent them, or raised for somebody nobody referred.","patient":"In the department.","bed":"Nothing yet.","phase":"front"},{"id":"edOutcome","lane":"end","x":1300,"y":1758,"w":500,"h":112,"label":"The department decides no bed is needed","sub":"Two labels, one behaviour: 'for community follow-up' raises no referral and tells no team — only the separate action below does that. Unwinds a held bed, an uncollected transport job and every live ward request. Refused once transport has collected them.","phase":"bed"},{"id":"edToCommunity","lane":"diversion","x":1300,"y":1920,"w":500,"h":124,"label":"Referred straight to a community team instead","sub":"Ends the bed search and creates or reuses a real community referral. Available from the moment the bed search exists until the patient is collected — not only from a department. Refused once they are collected, and while a legal form has no conclusive examination outcome.","phase":"bed"},{"id":"edLeft","lane":"end","x":1300,"y":2084,"w":500,"h":90,"label":"Left the department","sub":"Only recordable after an outcome has been recorded first.","phase":"bed"},{"id":"seam","lane":"seam","x":700,"y":1700,"w":420,"h":100,"label":"A separate movement is raised","sub":"Acceptance does not create the bed-search record. RAISE_REFERRAL creates it separately and can link it to the referral.","patient":"Unchanged.","bed":"Still nothing.","phase":"bed"},{"id":"placement","lane":"expected","x":700,"y":1854,"w":420,"h":60,"label":"Placement requested","patient":"Waiting, wherever they are.","bed":"Nothing yet.","phase":"bed"},{"id":"asked","lane":"expected","x":700,"y":1968,"w":420,"h":76,"label":"Wards are asked","sub":"One at a time, or several at once, up to three.","patient":"Still waiting.","bed":"Nothing yet.","phase":"bed"},{"id":"inPrinciple","lane":"expected","x":700,"y":2098,"w":420,"h":76,"label":"A ward accepts in principle","sub":"Still no bed set aside.","patient":"Still waiting.","bed":"Promised, not reserved.","phase":"bed"},{"id":"pulled","lane":"expected","x":700,"y":2228,"w":420,"h":90,"label":"A bed is pulled and held","sub":"Empty, offered to nobody else. Four hours is the default, not a rule — a coordinator can set the hold anywhere between thirty minutes and four hours. The admission this creates now names the movement it came from — a join added by owner ruling on 21 September, and the first pointer of any kind between the patient's track and the bed's; it is empty for the beds seeded as already occupied, so anything reading it has to cope with nothing being there.","patient":"Still where they were.","bed":"Held.","phase":"bed"},{"id":"booked","lane":"expected","x":700,"y":2372,"w":420,"h":76,"label":"Transport is booked","sub":"Five answers, none defaulted — provider, escort, CAD number, voluntary or involuntary, estimated time.","patient":"Waiting, with a journey arranged.","bed":"Held.","phase":"bed"},{"id":"handover","lane":"expected","x":700,"y":2502,"w":420,"h":60,"label":"Handover ready","patient":"Ready to be collected.","bed":"Held.","phase":"bed"},{"id":"enroute","lane":"expected","x":700,"y":2616,"w":420,"h":70,"label":"The crew accepts, and sets off","patient":"Still where they were.","bed":"Held.","phase":"bed"},{"id":"collected","lane":"expected","x":700,"y":2740,"w":420,"h":76,"label":"The patient is collected","sub":"After this point, everything changes.","patient":"In a vehicle, between two places.","bed":"Held.","phase":"bed"},{"id":"arrived","lane":"expected","x":700,"y":2870,"w":420,"h":76,"label":"The ward says they have arrived","sub":"Ward confirmation closes the movement and records the occupied stay. An officer Delivered stamp ends only the transport leg. STEP_BACK_STAGE refuses arrival; a separate scoped, time-limited Undo can correct the latest unchanged arrival snapshot.","patient":"On the ward.","bed":"Occupied.","phase":"ward"},{"id":"occupied","lane":"expected","x":700,"y":3000,"w":420,"h":60,"label":"Occupied — on the ward","patient":"Being treated.","bed":"Theirs, through leave and absence.","phase":"ward"},{"id":"ready","lane":"expected","x":700,"y":3114,"w":420,"h":86,"label":"Clinically ready to leave","sub":"The patient's departure and the named bed-release record proceed on two tracks.","patient":"Finished with hospital, possibly still in the bed.","bed":"Occupied.","phase":"ward"},{"id":"sWardDecline","lane":"stall","x":60,"y":1968,"w":460,"h":96,"label":"A ward declines — seven reasons","sub":"No bed · sex mix · no specialling · acuity mix · capability mismatch · bed pulled for an earlier referral · out of catchment.","phase":"bed"},{"id":"sWithdrawWard","lane":"stall","x":60,"y":2104,"w":460,"h":96,"label":"One ward's request is taken back","sub":"Seven reasons. The other wards asked carry on considering.","phase":"bed"},{"id":"sAcceptWithdrawn","lane":"stall","x":60,"y":2240,"w":460,"h":96,"label":"The acceptance is withdrawn","sub":"A listed reason records why the acceptance is withdrawn. An uncollected pulled or stepped-back hold is released in the same act; cancel a live job first. Handover-ready and moving are refused.","phase":"bed"},{"id":"sAbandoned","lane":"end","x":60,"y":2376,"w":460,"h":96,"label":"The bed search is abandoned","sub":"Pulled from every ward still considering it, or — once a ward has accepted — the acceptance revoked and any held bed given back. It closes as 'did not proceed'. This is also where an examination outcome of a community order, or a revocation, lands while no bed is held yet.","phase":"bed"},{"id":"sPullReleased","lane":"stall","x":60,"y":2512,"w":460,"h":96,"label":"The held bed is given back — four reasons","sub":"NINE different actions delete that admission, not one — releasing the pull (four reasons of its own), releasing a held bed after transport was stopped, abandoning the bed search, the referrer withdrawing it, the department deciding no bed is needed, sending them to a community team instead, an examination outcome that ends it, releasing the bed a diverted journey held, and releasing the bed while reopening the search. Whichever it was, the admission record is deleted outright: nobody was ever in this bed.","phase":"bed"},{"id":"sCancelTransport","lane":"stall","x":60,"y":2648,"w":460,"h":96,"label":"Transport cancelled before collection","sub":"A listed reason removes the job without moving the stage or automatically rebooking. The held-bed notice checks the admission link as well as stage, including a stepped-back pull.","finding":"The role/booking-place, collected, delivered and closed checks are distinct; an officer delivery can precede ward arrival without closure.","phase":"bed"},{"id":"sStopTransport","lane":"diversion","x":60,"y":2784,"w":460,"h":96,"label":"The journey is stopped after collection","sub":"Three reasons, and somebody must say where the patient now is. The movement closes and the bed stays held.","finding":"An officer delivery can precede ward arrival without closure, so delivered and closed refusal paths are distinct.","phase":"bed"},{"id":"sAbscond","lane":"record","x":60,"y":3000,"w":460,"h":96,"label":"Absent without leave is recorded","sub":"The occupied stay and held bed remain. The ward records absence, its steps and return against the admission; the current order can also create an action-inbox fact.","phase":"ward"},{"id":"dForced","lane":"forced","x":1300,"y":2284,"w":500,"h":100,"label":"A coordinator places them anyway","sub":"Eight of the bed checks can be passed by recording one of five reasons — the receiving team has agreed despite the mismatch · clinical urgency outweighs it · the bed information is known to be out of date · continuity with an earlier admission here · closer to home or family. Running out of one-to-one nursing or of high-acuity capacity can be passed the same way, and passing the acuity one also demands that the nurse unit manager was consulted.","phase":"bed"},{"id":"dGenderHard","lane":"stall","x":1300,"y":2424,"w":500,"h":100,"label":"The one refusal nothing can override","sub":"If the ward is designated for one gender and the patient's recorded gender is the other, no reason passes it and the app will not even offer the list. Non-binary, Different term, and not-recorded genders can use the coordinator-reviewed exception. Every other bed check here can be forced; this one cannot.","phase":"bed"},{"id":"dNonBinary","lane":"forced","x":1300,"y":2564,"w":500,"h":100,"label":"A patient with a non-binary, Different term, or unrecorded gender onto a single-gender ward","sub":"Only a coordinator, and only with one of six recorded reasons — a single room is available · the patient's stated preference, agreed with the ward · no single room is free and the ward agreed a plan for privacy · the only suitable ready bed, agreed with the ward · they know this ward from an earlier stay · closer to home or supports.","phase":"bed"},{"id":"dStatutory","lane":"record","x":1300,"y":2704,"w":500,"h":100,"label":"Record a form from the Forms page","sub":"The form selector and checked paper time reach the supported form-writing handler. Authorised users can save; refusal keeps the draft and shows the reason. This does not issue a legal instrument or calculate its statutory expiry.","phase":"bed"},{"id":"dNoTransport","lane":"diversion","x":1300,"y":2844,"w":500,"h":100,"label":"No transport needed","sub":"Marked arrived straight from the held bed, with no journey recorded at all.","phase":"bed"},{"id":"dRepull","lane":"record","x":1300,"y":2984,"w":500,"h":100,"label":"Pulling again when the bed is already held","sub":"Restoring an already-linked hold preserves its bed rather than consuming another. Current code rechecks the matching admission, patient placement, observation/high-acuity staffing, legal authority and gender before restoring the pulled stage.","finding":"Restoring a hold does not consume a second bed; staffing, legal, gender and matching-admission checks still run.","phase":"ward"},{"id":"dNoLongerSuits","lane":"stall","x":1300,"y":3124,"w":500,"h":100,"label":"A held destination no longer suits","sub":"Current gender/legal facts are checked at forward steps. WITHDRAW_ACCEPTANCE can release an uncollected pulled or stepped-back hold atomically after any live job is cancelled; no obsolete three-step sequence should be assumed.","finding":"A held acceptance can now be withdrawn atomically after cancelling a live job; handover-ready/moving still require the supported earlier-stage path.","phase":"ward"},{"id":"dCancelLie","lane":"record","x":1300,"y":3264,"w":500,"h":100,"label":"Cancellation keeps the bed facts separate","sub":"The hold is detected from the linked admission OR the pulled-or-later stage. Cancelling removes the job and preserves the bed and current stage, including after a step back.","finding":"Cancellation checks both the admission link and stage before describing whether the bed stays held.","phase":"ward"},{"id":"dRevoked","lane":"record","x":1300,"y":3404,"w":500,"h":100,"label":"The legal authority is revoked before collection","sub":"A revoked examination while a bed is held records the examination and flags release without refunding the bed. Acceptance, en-route and collection refuse while that hold is unresolved; physical arrival remains recordable.","phase":"ward"},{"id":"dAway","lane":"diversion","x":1300,"y":3544,"w":500,"h":100,"label":"Away at an ED, or on leave","sub":"An ED trip and leave name the occupied admission. Return records clear the relevant absence. Leave also records its kind and optional psychiatrist-authorisation answer; the bed stays held while away.","phase":"ward"},{"id":"dClosedRecord","lane":"record","x":1300,"y":3684,"w":500,"h":100,"label":"Closure limits corrections; admitted forms have a separate route","sub":"Most movement actions refuse closure. The admitting ward can still record a supported written form or typed expiry for a current occupied stay. STEP_BACK_STAGE refuses arrival, while a separate scoped Undo can reverse the latest unchanged transport/arrival snapshot within its window.","finding":"Most movement commands refuse closure, but admitted-ward form and expiry commands have explicit supported post-arrival routes.","phase":"ward"},{"id":"dRepat","lane":"diversion","x":1300,"y":3824,"w":500,"h":100,"label":"Sending a country patient home","sub":"Logged against the admission once it has been arranged off the system: home hospital, whether its ward agreed, road or flight, provider and tracking number. It books nothing. Only when the home ward agreed does it also open a new movement asking for a bed at home.","phase":"ward"},{"id":"personLeaves","lane":"expected","x":400,"y":4044,"w":440,"h":96,"label":"Track one — the person leaves","sub":"Eight recorded departure destinations. A psychiatric transfer releases the sending ward bed while taking a receiving bed.","patient":"Gone.","bed":"Normally empty and allocatable rise once and the live release completes; an over-capacity arrival conflict is reconciled without inventing an extra bed.","phase":"leaving"},{"id":"bedReleased","lane":"expected","x":920,"y":4044,"w":440,"h":96,"label":"Track two — the bed is released","sub":"Expected can go directly to discharged or pass through confirmed. The named admission leaving completes its release in the same write; capacity reconciliation prevents counting an already-recorded release or an over-capacity arrival twice.","patient":"Names the stay it belongs to, and nothing else about them.","bed":"Counted as available again, at the last step only.","phase":"leaving"},{"id":"bedStuck","lane":"stall","x":1440,"y":4044,"w":400,"h":96,"label":"Stuck, or waiting on something","sub":"Seven things it can wait on, nine reasons it can be stuck. Neither is a stage.","phase":"leaving"},{"id":"end0","lane":"end","x":60,"y":4274,"w":230,"h":112,"label":"Discharged to the community","sub":"Frees a bed.","phase":"leaving"},{"id":"end1","lane":"diversion","x":312,"y":4274,"w":230,"h":112,"label":"Transferred to another psychiatric ward","sub":"Frees THIS ward's bed and gains the state nothing — the only one that is not a release.","phase":"leaving"},{"id":"end2","lane":"end","x":564,"y":4274,"w":230,"h":112,"label":"Transferred to a general hospital","sub":"Frees a bed.","phase":"leaving"},{"id":"end3","lane":"end","x":816,"y":4274,"w":230,"h":112,"label":"Moved to residential care","sub":"Frees a bed.","phase":"leaving"},{"id":"end4","lane":"end","x":1068,"y":4274,"w":230,"h":112,"label":"Left against advice","sub":"Frees a bed.","phase":"leaving"},{"id":"end5","lane":"end","x":1320,"y":4274,"w":230,"h":112,"label":"Died on the ward","sub":"Frees a bed.","phase":"leaving"},{"id":"end6","lane":"end","x":1572,"y":4274,"w":230,"h":112,"label":"Transferred to police or prison custody","sub":"Frees a bed.","phase":"leaving"},{"id":"end7","lane":"end","x":1824,"y":4274,"w":230,"h":112,"label":"Did not return","sub":"Frees a bed.","phase":"leaving"},{"id":"rkDuplicate","lane":"record","x":2400,"y":460,"w":420,"h":104,"label":"Is this the same person already?","sub":"Duplicate matching warns about number and demographic similarities. A duplicate record number blocks registration in both form and reducer; name similarity alone remains a review warning.","phase":"alongside"},{"id":"rkIntakeLost","lane":"record","x":2400,"y":588,"w":420,"h":104,"label":"Add patient saves identity; referral saves intake","sub":"The current Add patient form asks for identity, optional gender and Aboriginal or Torres Strait Islander status. Clinical intake and location belong to the referral flow. Obsolete non-working Print/Save draft controls are hidden; the historical silent-discard finding no longer describes this screen.","phase":"alongside"},{"id":"rkClearance","lane":"record","x":2400,"y":1031,"w":420,"h":104,"label":"Is the patient medically cleared?","sub":"Three answers, not two — unrecorded, cleared, and explicitly not cleared.","phase":"alongside"},{"id":"rkClock","lane":"absent","x":2400,"y":1832,"w":420,"h":104,"label":"The display follows wall-clock time","sub":"The provider updates elapsed wall-clock time at minute boundaries and catches up when the page becomes visible. A controlled test clock is separate. A display becoming overdue does not by itself prove that a domain action ran; check the event handler for that action.","phase":"alongside"},{"id":"rkSettings","lane":"record","x":2400,"y":1960,"w":420,"h":104,"label":"Settings change current operational defaults","sub":"WardConfiguration carries twelve fields: access/decision/transfer/booking targets, parallel-recipient cap, pull hold, morning deadline, due-soon warnings and Forecast thresholds. A valid full draft is merged against its baseline or refused for conflicting fields; old optional keys take documented defaults.","phase":"alongside"},{"id":"rkQueue","lane":"record","x":2400,"y":2088,"w":420,"h":104,"label":"Where they sit in the queue","sub":"Flagged urgent first, then the urgency tier, then whoever has waited longest, then the record's own id as a tie-break. Nothing else moves anybody up.","phase":"alongside"},{"id":"rkClash","lane":"record","x":2400,"y":2216,"w":420,"h":104,"label":"Duplicate bed requests are surfaced","sub":"The current duplicate-bed-request derivation finds multiple active requests for one linked patient and creates a coordinator fact row. It does not rank patients or choose a winner. This is distinct from a physical double-booking check.","phase":"alongside"},{"id":"rkUrgent","lane":"record","x":2400,"y":2344,"w":420,"h":104,"label":"Flagged urgent","sub":"Ten reasons. Lifts the patient above every urgency level, and re-sorts nothing on its own.","phase":"alongside"},{"id":"rkEscalate","lane":"record","x":2400,"y":2472,"w":420,"h":104,"label":"Escalated","sub":"Which wards were tried and who was rung. Six people it can be escalated to.","phase":"alongside"},{"id":"rkCapacity","lane":"record","x":2400,"y":2600,"w":420,"h":104,"label":"A ward states how many beds it can allocate","sub":"Set outright rather than counted up, and refused if it claims more beds than the ward physically has. Asking a ward to refresh it records that somebody asked, and moves no number at all.","phase":"alongside"},{"id":"rkLegalStatus","lane":"record","x":2400,"y":2728,"w":420,"h":104,"label":"The legal status changes","sub":"Four values. Changing it triggers nothing — even if it makes the accepted ward unlawful.","phase":"alongside"},{"id":"rkForm","lane":"record","x":2400,"y":2856,"w":420,"h":104,"label":"The legal paperwork arrives","sub":"Nine forms can be recorded as received — 1A, 3A, 3C, 3D, 5A, 5B, 6A, 6B, 6C. Receipt can be undone and recorded again; every expiry is a time a clinician typed.","phase":"alongside"},{"id":"rkExam","lane":"record","x":2400,"y":2984,"w":420,"h":104,"label":"An examination is recorded","sub":"Four outcomes. Only “a further examination is ordered” allows a second one.","phase":"alongside"},{"id":"rkLegalWritten","lane":"record","x":2400,"y":3112,"w":420,"h":104,"label":"The paperwork is written, continued, or attached","sub":"Written and continued forms record paper facts and clear legacy calculated clocks; same-form written-time edits preserve applicable typed facts. An admitted ward has a post-arrival route. A3C after3D is refused. A country1A extension requires a current country setting and a finite typed later paper expiry; no statutory duration is computed.","phase":"alongside"},{"id":"rkLegalMismatch","lane":"record","x":2400,"y":3240,"w":420,"h":104,"label":"The ward's authority does not match the person's status","sub":"Two shapes, both named: an involuntary patient on a voluntary ward, and a voluntary patient on a locked one. It can be flagged, and it cannot be overridden: ward authority for an involuntary patient is never overridable (owner ruling, 25 September).","phase":"alongside"},{"id":"rkNotice","lane":"record","x":2400,"y":3368,"w":420,"h":104,"label":"Somebody is told","sub":"Twenty-four kinds of notice. Written once, never rewritten, never deleted, never expiring.","phase":"alongside"},{"id":"rkDiversion","lane":"record","x":2400,"y":3496,"w":420,"h":104,"label":"The journey is diverted while it is under way","sub":"Only once the patient is actually in the vehicle — it is refused before collection, after arrival, and a second time on a movement already diverted. It records a reason and where they were taken instead. The held bed does not come back on its own: giving it back is a separate act, and refused unless this movement was in fact diverted.","phase":"alongside"},{"id":"rkExpiryShut","lane":"stall","x":2400,"y":3624,"w":420,"h":104,"label":"Expiry can be recorded for an admitted patient","sub":"The legal-event handler permits the ward to record a typed expiry for its admitted patient even when the movement is closed. This is a recorded time, not a computed legal limit. See ward-flow-record-legal-events.ts.","finding":"The admitted-patient expiry route is implemented for the ward. Read the current legal-event handler; the old closed-movement gap is retired.","phase":"alongside"},{"id":"rkExpectFlag","lane":"record","x":2400,"y":3752,"w":420,"h":104,"label":"A clock somebody starts by hand","sub":"Two kinds, forty-eight hours and seven days, raised against a movement and cleared again. Only one can be open at a time — raising a second is refused, and so is clearing one that was never raised. Nothing starts it automatically and nothing expires it; it is a note about time, not a timer.","phase":"alongside"},{"id":"rkAwayRule","lane":"record","x":2400,"y":3880,"w":420,"h":104,"label":"The rule for a bed kept during a medical trip","sub":"The unwired retention helper keeps the bed by default, including above the24-hour threshold; above threshold adds requiresReview. Only an explicit override changes freesBed. The numeric constant is24 while an adjacent historical provenance comment still says48.","phase":"alongside"},{"id":"rkInbox","lane":"record","x":2400,"y":4008,"w":420,"h":104,"label":"A row appears in the coordinator's inbox","sub":"The current inbox derives fact rows from movements, stays, planned bookings and bed-meeting actions. Facts are acknowledged/owned/snoozed, never ticked away. The daily check is a commitment; its day-shaped ID can be completed and reopened.","finding":"Completion applies to commitment IDs; fact rows use their source condition and bed-meeting actions have a dedicated completion event.","phase":"alongside"},{"id":"rkDischargePlan","lane":"record","x":2400,"y":4136,"w":420,"h":104,"label":"Step-down, and what is holding the discharge up","sub":"Two settings on a known admission: step-down candidacy and one discharge barrier. The acting ward must match; a substantive barrier is refused for a stay under seven days. Neither moves a bed figure.","phase":"alongside"},{"id":"rkDischarge","lane":"record","x":2400,"y":4264,"w":420,"h":104,"label":"A discharge recorded the other way","sub":"A second event does exactly what recording a departure does, but only for a patient whose identity is linked, and only against the revision number the screen last read. Same result, different door.","phase":"alongside"},{"id":"rkPrep","lane":"record","x":2400,"y":4392,"w":420,"h":104,"label":"The bed is being prepared","sub":"Cleaning/repair is a separate preparation flag. It does not directly rewrite the ward count; the pull handler separately refuses when every free bed is still being made ready.","phase":"alongside"},{"id":"rkOwnership","lane":"record","x":2400,"y":4520,"w":420,"h":104,"label":"Only the ward it belongs to may touch it","sub":"Confirming a release, reversing it, flagging it stuck, clearing that flag, marking the bed being cleaned, and finally freeing it are each refused to any other ward. It is what stops one ward's freed bed landing in another ward's figures.","phase":"alongside"},{"id":"rkWardDay","lane":"record","x":2400,"y":4648,"w":420,"h":104,"label":"The ward's own day, beside the patient's","sub":"A morning count a ward confirms, a message it can be sent, and a sweep that works out which beds on leave are worth warning about. None of them belongs to any one patient, which is why they sit off the journey rather than on it.","phase":"alongside"},{"id":"hdr-rec","lane":"heading","x":2400,"y":380,"w":420,"h":60,"label":"Recorded alongside  ·","sub":"Happens at some point without moving the journey.","phase":"alongside"},{"id":"hdr-left","lane":"heading","x":60,"y":1892,"w":460,"h":56,"label":"←  Stalls, undos and endings","sub":"Grey goes back into the route. Teal does not.","phase":"bed"},{"id":"hdr-spine","lane":"heading","x":700,"y":1614,"w":420,"h":56,"label":"Read down the middle  ↓","sub":"Read straight down.","phase":"front"},{"id":"hdr-right","lane":"heading","x":1300,"y":2208,"w":500,"h":56,"label":"Diversions  →","sub":"It carries on, somewhere other than expected.","phase":"bed"}],"edges":[{"from":"srcCommunity","to":"raised","d":"M 178 128 L 178 152 Q 178 164 190 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[178,128],[178,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcCrisis","to":"raised","d":"M 430 128 L 430 152 Q 430 164 442 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[430,128],[430,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcPolice","to":"raised","d":"M 682 128 L 682 152 Q 682 164 694 164 L 898 164 Q 910 164 910 176 L 910 200","p":[[682,128],[682,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcAmbulance","to":"raised","d":"M 934 128 L 934 152 Q 934 164 922 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[934,128],[934,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcHospital","to":"raised","d":"M 1186 128 L 1186 152 Q 1186 164 1174 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1186,128],[1186,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcEd","to":"raised","d":"M 1438 128 L 1438 152 Q 1438 164 1426 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1438,128],[1438,164],[910,164],[910,200]],"lane":"expected"},{"from":"srcGp","to":"raised","d":"M 1690 128 L 1690 152 Q 1690 164 1678 164 L 922 164 Q 910 164 910 176 L 910 200","p":[[1690,128],[1690,164],[910,164],[910,200]],"lane":"expected"},{"from":"raised","to":"addressed","d":"M 910 280 L 910 320","p":[[910,280],[910,320]],"lane":"expected"},{"from":"addressed","to":"armCommunity","d":"M 910 406 L 910 421 Q 910 433 898 433 L 302 433 Q 290 433 290 445 L 290 460","p":[[910,406],[910,433],[290,433],[290,460]],"lane":"expected"},{"from":"addressed","to":"armWard","d":"M 910 406 L 910 460","p":[[910,406],[910,460]],"lane":"expected"},{"from":"addressed","to":"armEd","d":"M 910 406 L 910 421 Q 910 433 922 433 L 1538 433 Q 1550 433 1550 445 L 1550 460","p":[[910,406],[910,433],[1550,433],[1550,460]],"lane":"expected"},{"from":"armCommunity","to":"cmhtAnswers","d":"M 290 550 L 290 600","p":[[290,550],[290,600]],"lane":"expected"},{"from":"cmhtAnswers","to":"cmhtAccepted","d":"M 290 670 L 290 720","p":[[290,670],[290,720]],"lane":"end","terminal":true},{"from":"cmhtAnswers","to":"cmhtDeclined","d":"M 290 670 L 290 681 Q 290 692 301 692 L 544 692 Q 556 692 556 704 L 556 826 Q 556 838 544 838 L 301 838 Q 290 838 290 849 L 290 860","p":[[290,670],[290,692],[556,692],[556,838],[290,838],[290,860]],"lane":"end","terminal":true},{"from":"cmhtAnswers","to":"cmhtNothing","d":"M 290 670 L 290 681 Q 290 692 279 692 L 36 692 Q 24 692 24 704 L 24 978 Q 24 990 36 990 L 279 990 Q 290 990 290 1001 L 290 1012","p":[[290,670],[290,692],[24,692],[24,990],[290,990],[290,1012]],"lane":"stall"},{"from":"cmhtAnswers","to":"cmhtWithdrawn","d":"M 290 670 L 290 681 Q 290 692 301 692 L 566 692 Q 578 692 578 704 L 578 1118 Q 578 1130 566 1130 L 301 1130 Q 290 1130 290 1141 L 290 1152","p":[[290,670],[290,692],[578,692],[578,1130],[290,1130],[290,1152]],"lane":"stall"},{"from":"cmhtFromSearch","to":"cmhtAnswers","d":"M 290 1298 L 290 1287 Q 290 1276 301 1276 L 588 1276 Q 600 1276 600 1264 L 600 704 Q 600 692 588 692 L 301 692 Q 290 692 290 681 L 290 670","p":[[290,1298],[290,1276],[600,1276],[600,692],[290,692],[290,670]],"lane":"expected"},{"from":"armWard","to":"wardAnswers","d":"M 910 550 L 910 600","p":[[910,550],[910,600]],"lane":"expected"},{"from":"wardAnswers","to":"wardWithdrawn","d":"M 910 670 L 910 681 Q 910 692 921 692 L 1144 692 Q 1156 692 1156 704 L 1156 1276 Q 1156 1288 1144 1288 L 921 1288 Q 910 1288 910 1299 L 910 1310","p":[[910,670],[910,692],[1156,692],[1156,1288],[910,1288],[910,1310]],"lane":"diversion"},{"from":"wardAnswers","to":"wardBlocked","d":"M 910 670 L 910 681 Q 910 692 899 692 L 676 692 Q 664 692 664 704 L 664 1436 Q 664 1448 676 1448 L 899 1448 Q 910 1448 910 1459 L 910 1470","p":[[910,670],[910,692],[664,692],[664,1448],[910,1448],[910,1470]],"lane":"stall"},{"from":"wardAnswers","to":"wardAccepted","d":"M 910 670 L 910 720","p":[[910,670],[910,720]],"lane":"expected"},{"from":"wardAnswers","to":"wardDeclined","d":"M 910 670 L 910 681 Q 910 692 921 692 L 1166 692 Q 1178 692 1178 704 L 1178 826 Q 1178 838 1166 838 L 921 838 Q 910 838 910 849 L 910 860","p":[[910,670],[910,692],[1178,692],[1178,838],[910,838],[910,860]],"lane":"end","terminal":true},{"from":"wardAnswers","to":"wardNothing","d":"M 910 670 L 910 681 Q 910 692 899 692 L 654 692 Q 642 692 642 704 L 642 988 Q 642 1000 654 1000 L 899 1000 Q 910 1000 910 1011 L 910 1022","p":[[910,670],[910,692],[642,692],[642,1000],[910,1000],[910,1022]],"lane":"stall"},{"from":"wardAccepted","to":"othersCancelled","d":"M 910 810 L 910 821 Q 910 832 921 832 L 1188 832 Q 1200 832 1200 844 L 1200 1134 Q 1200 1146 1188 1146 L 921 1146 Q 910 1146 910 1157 L 910 1168","p":[[910,810],[910,832],[1200,832],[1200,1146],[910,1146],[910,1168]],"lane":"diversion","auto":true},{"from":"armEd","to":"edBoard","d":"M 1550 550 L 1550 600","p":[[1550,550],[1550,600]],"lane":"expected"},{"from":"edBoard","to":"edExpected","d":"M 1550 690 L 1550 740","p":[[1550,690],[1550,740]],"lane":"expected"},{"from":"edExpected","to":"edArrived","d":"M 1550 830 L 1550 841 Q 1550 852 1561 852 L 1824 852 Q 1836 852 1836 864 L 1836 1006 Q 1836 1018 1824 1018 L 1561 1018 Q 1550 1018 1550 1029 L 1550 1040","p":[[1550,830],[1550,852],[1836,852],[1836,1018],[1550,1018],[1550,1040]],"lane":"expected"},{"from":"edExpected","to":"edNeverArrives","d":"M 1550 830 L 1550 880","p":[[1550,830],[1550,880]],"lane":"stall"},{"from":"edArrived","to":"edAnswers","d":"M 1550 1126 L 1550 1176","p":[[1550,1126],[1550,1176]],"lane":"expected"},{"from":"edAnswers","to":"edAccepted","d":"M 1550 1246 L 1550 1296","p":[[1550,1246],[1550,1296]],"lane":"expected"},{"from":"edAnswers","to":"edDeclined","d":"M 1550 1246 L 1550 1257 Q 1550 1268 1561 1268 L 1824 1268 Q 1836 1268 1836 1280 L 1836 1416 Q 1836 1428 1824 1428 L 1561 1428 Q 1550 1428 1550 1439 L 1550 1450","p":[[1550,1246],[1550,1268],[1836,1268],[1836,1428],[1550,1428],[1550,1450]],"lane":"end","terminal":true},{"from":"edAccepted","to":"edRaise","d":"M 1550 1400 L 1550 1411 Q 1550 1422 1539 1422 L 1276 1422 Q 1264 1422 1264 1434 L 1264 1570 Q 1264 1582 1276 1582 L 1539 1582 Q 1550 1582 1550 1593 L 1550 1604","p":[[1550,1400],[1550,1422],[1264,1422],[1264,1582],[1550,1582],[1550,1604]],"lane":"expected"},{"from":"edAccepted","to":"othersCancelled","d":"M 1300 1348 L 1120 1218","p":[[1300,1348],[1120,1218]],"lane":"diversion","auto":true},{"from":"edRaise","to":"edOutcome","d":"M 1550 1708 L 1550 1758","p":[[1550,1708],[1550,1758]],"lane":"end","terminal":true},{"from":"edRaise","to":"edToCommunity","d":"M 1550 1708 L 1550 1719 Q 1550 1730 1561 1730 L 1824 1730 Q 1836 1730 1836 1742 L 1836 1886 Q 1836 1898 1824 1898 L 1561 1898 Q 1550 1898 1550 1909 L 1550 1920","p":[[1550,1708],[1550,1730],[1836,1730],[1836,1898],[1550,1898],[1550,1920]],"lane":"diversion"},{"from":"edOutcome","to":"edLeft","d":"M 1550 1870 L 1550 1881 Q 1550 1892 1539 1892 L 1276 1892 Q 1264 1892 1264 1904 L 1264 2050 Q 1264 2062 1276 2062 L 1539 2062 Q 1550 2062 1550 2073 L 1550 2084","p":[[1550,1870],[1550,1892],[1264,1892],[1264,2062],[1550,2062],[1550,2084]],"lane":"end","terminal":true},{"from":"seam","to":"placement","d":"M 910 1800 L 910 1854","p":[[910,1800],[910,1854]],"lane":"expected"},{"from":"placement","to":"asked","d":"M 910 1914 L 910 1968","p":[[910,1914],[910,1968]],"lane":"expected"},{"from":"asked","to":"inPrinciple","d":"M 910 2044 L 910 2098","p":[[910,2044],[910,2098]],"lane":"expected"},{"from":"inPrinciple","to":"pulled","d":"M 910 2174 L 910 2228","p":[[910,2174],[910,2228]],"lane":"expected"},{"from":"pulled","to":"booked","d":"M 910 2318 L 910 2372","p":[[910,2318],[910,2372]],"lane":"expected"},{"from":"booked","to":"handover","d":"M 910 2448 L 910 2502","p":[[910,2448],[910,2502]],"lane":"expected"},{"from":"handover","to":"enroute","d":"M 910 2562 L 910 2616","p":[[910,2562],[910,2616]],"lane":"expected"},{"from":"enroute","to":"collected","d":"M 910 2686 L 910 2740","p":[[910,2686],[910,2740]],"lane":"expected"},{"from":"collected","to":"arrived","d":"M 910 2816 L 910 2870","p":[[910,2816],[910,2870]],"lane":"expected"},{"from":"arrived","to":"occupied","d":"M 910 2946 L 910 3000","p":[[910,2946],[910,3000]],"lane":"expected"},{"from":"occupied","to":"ready","d":"M 910 3060 L 910 3114","p":[[910,3060],[910,3114]],"lane":"expected"},{"from":"wardAccepted","to":"seam","d":"M 910 810 L 910 824 Q 910 836 898 836 L 672 836 Q 660 836 660 848 L 660 1738 Q 660 1750 672 1750 L 700 1750","p":[[910,810],[910,836],[660,836],[660,1750],[700,1750]],"lane":"seam"},{"from":"edRaise","to":"placement","d":"M 1550 1708 L 1550 1722 Q 1550 1734 1538 1734 L 1252 1734 Q 1240 1734 1240 1746 L 1240 1872 Q 1240 1884 1228 1884 L 1120 1884","p":[[1550,1708],[1550,1734],[1240,1734],[1240,1884],[1120,1884]],"lane":"expected"},{"from":"asked","to":"sWardDecline","d":"M 700 2006 L 585 2006 Q 580 2006 580 2011 L 580 2011 Q 580 2016 575 2016 L 520 2016","p":[[700,2006],[580,2006],[580,2016],[520,2016]],"lane":"stall","both":true},{"from":"asked","to":"sWithdrawWard","d":"M 700 2006 L 592 2006 Q 580 2006 580 2018 L 580 2140 Q 580 2152 568 2152 L 520 2152","p":[[700,2006],[580,2006],[580,2152],[520,2152]],"lane":"stall","both":true},{"from":"inPrinciple","to":"sAcceptWithdrawn","d":"M 700 2136 L 592 2136 Q 580 2136 580 2148 L 580 2276 Q 580 2288 568 2288 L 520 2288","p":[[700,2136],[580,2136],[580,2288],[520,2288]],"lane":"stall","both":true},{"from":"inPrinciple","to":"sAbandoned","d":"M 700 2136 L 592 2136 Q 580 2136 580 2148 L 580 2412 Q 580 2424 568 2424 L 520 2424","p":[[700,2136],[580,2136],[580,2424],[520,2424]],"lane":"end","terminal":true},{"from":"pulled","to":"sPullReleased","d":"M 700 2273 L 592 2273 Q 580 2273 580 2285 L 580 2548 Q 580 2560 568 2560 L 520 2560","p":[[700,2273],[580,2273],[580,2560],[520,2560]],"lane":"stall","both":true},{"from":"booked","to":"sCancelTransport","d":"M 700 2410 L 592 2410 Q 580 2410 580 2422 L 580 2684 Q 580 2696 568 2696 L 520 2696","p":[[700,2410],[580,2410],[580,2696],[520,2696]],"lane":"stall","both":true},{"from":"collected","to":"sStopTransport","d":"M 700 2778 L 592 2778 Q 580 2778 580 2790 L 580 2820 Q 580 2832 568 2832 L 520 2832","p":[[700,2778],[580,2778],[580,2832],[520,2832]],"lane":"diversion"},{"from":"occupied","to":"sAbscond","d":"M 700 3030 L 589 3030 Q 580 3030 580 3039 L 580 3039 Q 580 3048 571 3048 L 520 3048","p":[[700,3030],[580,3030],[580,3048],[520,3048]],"lane":"record"},{"from":"asked","to":"dForced","d":"M 1120 2006 L 1168 2006 Q 1180 2006 1180 2018 L 1180 2322 Q 1180 2334 1192 2334 L 1300 2334","p":[[1120,2006],[1180,2006],[1180,2334],[1300,2334]],"lane":"forced"},{"from":"dForced","to":"dForced","d":"M 1300 2334 L 1262 2334","p":[[1300,2334],[1262,2334]],"lane":"forced","terminal":true},{"from":"asked","to":"dGenderHard","d":"M 1120 2006 L 1168 2006 Q 1180 2006 1180 2018 L 1180 2462 Q 1180 2474 1192 2474 L 1300 2474","p":[[1120,2006],[1180,2006],[1180,2474],[1300,2474]],"lane":"stall"},{"from":"dGenderHard","to":"dGenderHard","d":"M 1300 2474 L 1262 2474","p":[[1300,2474],[1262,2474]],"lane":"stall","terminal":true},{"from":"inPrinciple","to":"dNonBinary","d":"M 1120 2136 L 1168 2136 Q 1180 2136 1180 2148 L 1180 2602 Q 1180 2614 1192 2614 L 1300 2614","p":[[1120,2136],[1180,2136],[1180,2614],[1300,2614]],"lane":"forced"},{"from":"dNonBinary","to":"dNonBinary","d":"M 1300 2614 L 1262 2614","p":[[1300,2614],[1262,2614]],"lane":"forced","terminal":true},{"from":"inPrinciple","to":"dStatutory","d":"M 1120 2136 L 1168 2136 Q 1180 2136 1180 2148 L 1180 2742 Q 1180 2754 1192 2754 L 1300 2754","p":[[1120,2136],[1180,2136],[1180,2754],[1300,2754]],"lane":"record"},{"from":"dStatutory","to":"dStatutory","d":"M 1300 2754 L 1262 2754","p":[[1300,2754],[1262,2754]],"lane":"record","terminal":true},{"from":"pulled","to":"dNoTransport","d":"M 1120 2273 L 1168 2273 Q 1180 2273 1180 2285 L 1180 2882 Q 1180 2894 1192 2894 L 1300 2894","p":[[1120,2273],[1180,2273],[1180,2894],[1300,2894]],"lane":"diversion"},{"from":"dNoTransport","to":"arrived","d":"M 1550 2944 L 1550 2958 Q 1550 2970 1562 2970 L 1848 2970 Q 1860 2970 1860 2958 L 1860 2920 Q 1860 2908 1848 2908 L 1120 2908","p":[[1550,2944],[1550,2970],[1860,2970],[1860,2908],[1120,2908]],"lane":"expected"},{"from":"pulled","to":"dRepull","d":"M 1120 2273 L 1168 2273 Q 1180 2273 1180 2285 L 1180 3022 Q 1180 3034 1192 3034 L 1300 3034","p":[[1120,2273],[1180,2273],[1180,3034],[1300,3034]],"lane":"record","both":true},{"from":"handover","to":"dNoLongerSuits","d":"M 1120 2532 L 1168 2532 Q 1180 2532 1180 2544 L 1180 3162 Q 1180 3174 1192 3174 L 1300 3174","p":[[1120,2532],[1180,2532],[1180,3174],[1300,3174]],"lane":"stall"},{"from":"dNoLongerSuits","to":"dNoLongerSuits","d":"M 1300 3174 L 1262 3174","p":[[1300,3174],[1262,3174]],"lane":"stall","terminal":true},{"from":"booked","to":"dCancelLie","d":"M 1120 2410 L 1168 2410 Q 1180 2410 1180 2422 L 1180 3302 Q 1180 3314 1192 3314 L 1300 3314","p":[[1120,2410],[1180,2410],[1180,3314],[1300,3314]],"lane":"record"},{"from":"dCancelLie","to":"dCancelLie","d":"M 1300 3314 L 1262 3314","p":[[1300,3314],[1262,3314]],"lane":"record","terminal":true},{"from":"enroute","to":"dRevoked","d":"M 1120 2651 L 1168 2651 Q 1180 2651 1180 2663 L 1180 3442 Q 1180 3454 1192 3454 L 1300 3454","p":[[1120,2651],[1180,2651],[1180,3454],[1300,3454]],"lane":"record"},{"from":"dRevoked","to":"dRevoked","d":"M 1300 3454 L 1262 3454","p":[[1300,3454],[1262,3454]],"lane":"record","terminal":true},{"from":"occupied","to":"dAway","d":"M 1120 3030 L 1168 3030 Q 1180 3030 1180 3042 L 1180 3582 Q 1180 3594 1192 3594 L 1300 3594","p":[[1120,3030],[1180,3030],[1180,3594],[1300,3594]],"lane":"diversion","both":true},{"from":"arrived","to":"dClosedRecord","d":"M 1120 2908 L 1168 2908 Q 1180 2908 1180 2920 L 1180 3722 Q 1180 3734 1192 3734 L 1300 3734","p":[[1120,2908],[1180,2908],[1180,3734],[1300,3734]],"lane":"record"},{"from":"dClosedRecord","to":"dClosedRecord","d":"M 1300 3734 L 1262 3734","p":[[1300,3734],[1262,3734]],"lane":"record","terminal":true},{"from":"ready","to":"dRepat","d":"M 1120 3157 L 1168 3157 Q 1180 3157 1180 3169 L 1180 3862 Q 1180 3874 1192 3874 L 1300 3874","p":[[1120,3157],[1180,3157],[1180,3874],[1300,3874]],"lane":"diversion"},{"from":"dRepat","to":"dRepat","d":"M 1300 3874 L 1262 3874","p":[[1300,3874],[1262,3874]],"lane":"diversion","terminal":true},{"from":"ready","to":"personLeaves","d":"M 910 3200 L 910 3610 Q 910 3622 898 3622 L 632 3622 Q 620 3622 620 3634 L 620 4044","p":[[910,3200],[910,3622],[620,3622],[620,4044]],"lane":"expected"},{"from":"ready","to":"bedReleased","d":"M 910 3200 L 910 3610 Q 910 3622 922 3622 L 1128 3622 Q 1140 3622 1140 3634 L 1140 4044","p":[[910,3200],[910,3622],[1140,3622],[1140,4044]],"lane":"expected"},{"from":"bedReleased","to":"bedStuck","d":"M 1360 4092 L 1440 4092","p":[[1360,4092],[1440,4092]],"lane":"stall","both":true},{"from":"personLeaves","to":"end0","d":"M 620 4140 L 620 4195 Q 620 4207 608 4207 L 187 4207 Q 175 4207 175 4219 L 175 4274","p":[[620,4140],[620,4207],[175,4207],[175,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end1","d":"M 620 4140 L 620 4195 Q 620 4207 608 4207 L 439 4207 Q 427 4207 427 4219 L 427 4274","p":[[620,4140],[620,4207],[427,4207],[427,4274]],"lane":"diversion"},{"from":"personLeaves","to":"end2","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 667 4207 Q 679 4207 679 4219 L 679 4274","p":[[620,4140],[620,4207],[679,4207],[679,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end3","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 919 4207 Q 931 4207 931 4219 L 931 4274","p":[[620,4140],[620,4207],[931,4207],[931,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end4","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1171 4207 Q 1183 4207 1183 4219 L 1183 4274","p":[[620,4140],[620,4207],[1183,4207],[1183,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end5","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1423 4207 Q 1435 4207 1435 4219 L 1435 4274","p":[[620,4140],[620,4207],[1435,4207],[1435,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end6","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1675 4207 Q 1687 4207 1687 4219 L 1687 4274","p":[[620,4140],[620,4207],[1687,4207],[1687,4274]],"lane":"end","terminal":true},{"from":"personLeaves","to":"end7","d":"M 620 4140 L 620 4195 Q 620 4207 632 4207 L 1927 4207 Q 1939 4207 1939 4219 L 1939 4274","p":[[620,4140],[620,4207],[1939,4207],[1939,4274]],"lane":"end","terminal":true},{"from":"raised","to":"rkDuplicate","d":"M 1120 240 L 2342 240 Q 2354 240 2354 252 L 2354 500 Q 2354 512 2366 512 L 2400 512","p":[[1120,240],[2354,240],[2354,512],[2400,512]],"lane":"record","dashed":true},{"from":"raised","to":"rkIntakeLost","d":"M 1120 240 L 2342 240 Q 2354 240 2354 252 L 2354 628 Q 2354 640 2366 640 L 2400 640","p":[[1120,240],[2354,240],[2354,640],[2400,640]],"lane":"record","dashed":true},{"from":"edArrived","to":"rkClearance","d":"M 1800 1083 L 2354 1083 L 2354 1083 L 2400 1083","p":[[1800,1083],[2354,1083],[2354,1083],[2400,1083]],"lane":"record","dashed":true},{"from":"placement","to":"rkClock","d":"M 1120 1884 L 2354 1884 L 2354 1884 L 2400 1884","p":[[1120,1884],[2354,1884],[2354,1884],[2400,1884]],"lane":"absent","terminal":true,"dashed":true},{"from":"placement","to":"rkSettings","d":"M 1120 1884 L 2342 1884 Q 2354 1884 2354 1896 L 2354 2000 Q 2354 2012 2366 2012 L 2400 2012","p":[[1120,1884],[2354,1884],[2354,2012],[2400,2012]],"lane":"record","dashed":true},{"from":"asked","to":"rkQueue","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2128 Q 2354 2140 2366 2140 L 2400 2140","p":[[1120,2006],[2354,2006],[2354,2140],[2400,2140]],"lane":"record","dashed":true},{"from":"asked","to":"rkClash","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2256 Q 2354 2268 2366 2268 L 2400 2268","p":[[1120,2006],[2354,2006],[2354,2268],[2400,2268]],"lane":"record","dashed":true},{"from":"asked","to":"rkUrgent","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2384 Q 2354 2396 2366 2396 L 2400 2396","p":[[1120,2006],[2354,2006],[2354,2396],[2400,2396]],"lane":"record","dashed":true},{"from":"asked","to":"rkEscalate","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2512 Q 2354 2524 2366 2524 L 2400 2524","p":[[1120,2006],[2354,2006],[2354,2524],[2400,2524]],"lane":"record","dashed":true},{"from":"asked","to":"rkCapacity","d":"M 1120 2006 L 2342 2006 Q 2354 2006 2354 2018 L 2354 2640 Q 2354 2652 2366 2652 L 2400 2652","p":[[1120,2006],[2354,2006],[2354,2652],[2400,2652]],"lane":"record","dashed":true},{"from":"inPrinciple","to":"rkLegalStatus","d":"M 1120 2136 L 2342 2136 Q 2354 2136 2354 2148 L 2354 2768 Q 2354 2780 2366 2780 L 2400 2780","p":[[1120,2136],[2354,2136],[2354,2780],[2400,2780]],"lane":"record","dashed":true},{"from":"pulled","to":"rkForm","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 2896 Q 2354 2908 2366 2908 L 2400 2908","p":[[1120,2273],[2354,2273],[2354,2908],[2400,2908]],"lane":"record","dashed":true},{"from":"pulled","to":"rkExam","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3024 Q 2354 3036 2366 3036 L 2400 3036","p":[[1120,2273],[2354,2273],[2354,3036],[2400,3036]],"lane":"record","dashed":true},{"from":"pulled","to":"rkLegalWritten","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3152 Q 2354 3164 2366 3164 L 2400 3164","p":[[1120,2273],[2354,2273],[2354,3164],[2400,3164]],"lane":"record","dashed":true},{"from":"pulled","to":"rkLegalMismatch","d":"M 1120 2273 L 2342 2273 Q 2354 2273 2354 2285 L 2354 3280 Q 2354 3292 2366 3292 L 2400 3292","p":[[1120,2273],[2354,2273],[2354,3292],[2400,3292]],"lane":"record","dashed":true},{"from":"collected","to":"rkNotice","d":"M 1120 2778 L 2342 2778 Q 2354 2778 2354 2790 L 2354 3408 Q 2354 3420 2366 3420 L 2400 3420","p":[[1120,2778],[2354,2778],[2354,3420],[2400,3420]],"lane":"record","dashed":true},{"from":"collected","to":"rkDiversion","d":"M 1120 2778 L 2342 2778 Q 2354 2778 2354 2790 L 2354 3536 Q 2354 3548 2366 3548 L 2400 3548","p":[[1120,2778],[2354,2778],[2354,3548],[2400,3548]],"lane":"record","dashed":true},{"from":"arrived","to":"rkExpiryShut","d":"M 1120 2908 L 2342 2908 Q 2354 2908 2354 2920 L 2354 3664 Q 2354 3676 2366 3676 L 2400 3676","p":[[1120,2908],[2354,2908],[2354,3676],[2400,3676]],"lane":"stall","dashed":true},{"from":"arrived","to":"rkExpectFlag","d":"M 1120 2908 L 2342 2908 Q 2354 2908 2354 2920 L 2354 3792 Q 2354 3804 2366 3804 L 2400 3804","p":[[1120,2908],[2354,2908],[2354,3804],[2400,3804]],"lane":"record","dashed":true},{"from":"occupied","to":"rkAwayRule","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 3920 Q 2354 3932 2366 3932 L 2400 3932","p":[[1120,3030],[2354,3030],[2354,3932],[2400,3932]],"lane":"record","dashed":true},{"from":"occupied","to":"rkInbox","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 4048 Q 2354 4060 2366 4060 L 2400 4060","p":[[1120,3030],[2354,3030],[2354,4060],[2400,4060]],"lane":"record","dashed":true},{"from":"occupied","to":"rkDischargePlan","d":"M 1120 3030 L 2342 3030 Q 2354 3030 2354 3042 L 2354 4176 Q 2354 4188 2366 4188 L 2400 4188","p":[[1120,3030],[2354,3030],[2354,4188],[2400,4188]],"lane":"record","dashed":true},{"from":"ready","to":"rkDischarge","d":"M 1120 3157 L 2342 3157 Q 2354 3157 2354 3169 L 2354 4304 Q 2354 4316 2366 4316 L 2400 4316","p":[[1120,3157],[2354,3157],[2354,4316],[2400,4316]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkPrep","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4432 Q 2354 4444 2366 4444 L 2400 4444","p":[[1360,4092],[2354,4092],[2354,4444],[2400,4444]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkOwnership","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4560 Q 2354 4572 2366 4572 L 2400 4572","p":[[1360,4092],[2354,4092],[2354,4572],[2400,4572]],"lane":"record","dashed":true},{"from":"bedReleased","to":"rkWardDay","d":"M 1360 4092 L 2342 4092 Q 2354 4092 2354 4104 L 2354 4688 Q 2354 4700 2366 4700 L 2400 4700","p":[[1360,4092],[2354,4092],[2354,4700],[2400,4700]],"lane":"record","dashed":true},{"from":"cmhtAccepted","to":"cmhtAccepted","d":"M 60 765 L 22 765","p":[[60,765],[22,765]],"lane":"end","terminal":true},{"from":"cmhtDeclined","to":"cmhtDeclined","d":"M 60 916 L 22 916","p":[[60,916],[22,916]],"lane":"end","terminal":true},{"from":"cmhtNothing","to":"cmhtNothing","d":"M 60 1064 L 22 1064","p":[[60,1064],[22,1064]],"lane":"stall","terminal":true},{"from":"cmhtWithdrawn","to":"cmhtWithdrawn","d":"M 60 1207 L 22 1207","p":[[60,1207],[22,1207]],"lane":"stall","terminal":true},{"from":"wardDeclined","to":"wardDeclined","d":"M 700 916 L 662 916","p":[[700,916],[662,916]],"lane":"end","terminal":true},{"from":"wardNothing","to":"wardNothing","d":"M 700 1070 L 662 1070","p":[[700,1070],[662,1070]],"lane":"stall","terminal":true},{"from":"othersCancelled","to":"othersCancelled","d":"M 700 1218 L 662 1218","p":[[700,1218],[662,1218]],"lane":"diversion","terminal":true},{"from":"wardWithdrawn","to":"wardWithdrawn","d":"M 700 1375 L 662 1375","p":[[700,1375],[662,1375]],"lane":"diversion","terminal":true},{"from":"wardBlocked","to":"wardBlocked","d":"M 700 1528 L 662 1528","p":[[700,1528],[662,1528]],"lane":"stall","terminal":true},{"from":"edNeverArrives","to":"edNeverArrives","d":"M 1300 940 L 1262 940","p":[[1300,940],[1262,940]],"lane":"stall","terminal":true},{"from":"edDeclined","to":"edDeclined","d":"M 1300 1502 L 1262 1502","p":[[1300,1502],[1262,1502]],"lane":"end","terminal":true},{"from":"edToCommunity","to":"edToCommunity","d":"M 1300 1982 L 1262 1982","p":[[1300,1982],[1262,1982]],"lane":"diversion","terminal":true},{"from":"edLeft","to":"edLeft","d":"M 1300 2129 L 1262 2129","p":[[1300,2129],[1262,2129]],"lane":"end","terminal":true},{"from":"sWardDecline","to":"sWardDecline","d":"M 60 2016 L 22 2016","p":[[60,2016],[22,2016]],"lane":"stall","terminal":true},{"from":"sWithdrawWard","to":"sWithdrawWard","d":"M 60 2152 L 22 2152","p":[[60,2152],[22,2152]],"lane":"stall","terminal":true},{"from":"sAcceptWithdrawn","to":"sAcceptWithdrawn","d":"M 60 2288 L 22 2288","p":[[60,2288],[22,2288]],"lane":"stall","terminal":true},{"from":"sAbandoned","to":"sAbandoned","d":"M 60 2424 L 22 2424","p":[[60,2424],[22,2424]],"lane":"end","terminal":true},{"from":"sPullReleased","to":"sPullReleased","d":"M 60 2560 L 22 2560","p":[[60,2560],[22,2560]],"lane":"stall","terminal":true},{"from":"sCancelTransport","to":"sCancelTransport","d":"M 60 2696 L 22 2696","p":[[60,2696],[22,2696]],"lane":"stall","terminal":true},{"from":"sStopTransport","to":"sStopTransport","d":"M 60 2832 L 22 2832","p":[[60,2832],[22,2832]],"lane":"diversion","terminal":true},{"from":"dForced","to":"dForced","d":"M 1300 2334 L 1262 2334","p":[[1300,2334],[1262,2334]],"lane":"forced","terminal":true},{"from":"dGenderHard","to":"dGenderHard","d":"M 1300 2474 L 1262 2474","p":[[1300,2474],[1262,2474]],"lane":"stall","terminal":true},{"from":"dNonBinary","to":"dNonBinary","d":"M 1300 2614 L 1262 2614","p":[[1300,2614],[1262,2614]],"lane":"forced","terminal":true},{"from":"dNoLongerSuits","to":"dNoLongerSuits","d":"M 1300 3174 L 1262 3174","p":[[1300,3174],[1262,3174]],"lane":"stall","terminal":true},{"from":"dAway","to":"dAway","d":"M 1300 3594 L 1262 3594","p":[[1300,3594],[1262,3594]],"lane":"diversion","terminal":true},{"from":"dRepat","to":"dRepat","d":"M 1300 3874 L 1262 3874","p":[[1300,3874],[1262,3874]],"lane":"diversion","terminal":true},{"from":"bedStuck","to":"bedStuck","d":"M 1440 4092 L 1402 4092","p":[[1440,4092],[1402,4092]],"lane":"stall","terminal":true},{"from":"end0","to":"end0","d":"M 60 4330 L 22 4330","p":[[60,4330],[22,4330]],"lane":"end","terminal":true},{"from":"end1","to":"end1","d":"M 427 4386 L 427 4424","p":[[427,4386],[427,4424]],"lane":"diversion","terminal":true},{"from":"end2","to":"end2","d":"M 679 4386 L 679 4424","p":[[679,4386],[679,4424]],"lane":"end","terminal":true},{"from":"end3","to":"end3","d":"M 931 4386 L 931 4424","p":[[931,4386],[931,4424]],"lane":"end","terminal":true},{"from":"end4","to":"end4","d":"M 1183 4386 L 1183 4424","p":[[1183,4386],[1183,4424]],"lane":"end","terminal":true},{"from":"end5","to":"end5","d":"M 1435 4386 L 1435 4424","p":[[1435,4386],[1435,4424]],"lane":"end","terminal":true},{"from":"end6","to":"end6","d":"M 1687 4386 L 1687 4424","p":[[1687,4386],[1687,4424]],"lane":"end","terminal":true},{"from":"end7","to":"end7","d":"M 2054 4330 L 2092 4330","p":[[2054,4330],[2092,4330]],"lane":"end","terminal":true},{"from":"rkClock","to":"rkClock","d":"M 2400 1884 L 2362 1884","p":[[2400,1884],[2362,1884]],"lane":"absent","terminal":true},{"from":"rkExpiryShut","to":"rkExpiryShut","d":"M 2400 3676 L 2362 3676","p":[[2400,3676],[2362,3676]],"lane":"stall","terminal":true}]},"machines":{"machines":[{"id":"referral","name":"A referral destination","subject":"One addressed destination. A referral can name several distinct wards within the configured recipient cap; answers and reassessments belong to the individual destination.","width":1064,"height":456,"states":[{"id":"start","kind":"start","x":482,"y":20,"w":80,"h":40,"label":"raised"},{"id":"queued","kind":"normal","x":412,"y":110,"w":220,"h":76,"label":"Waiting","sub":"Doing nothing is a real answer, and the commonest one. It stays here indefinitely."},{"id":"accepted","kind":"terminal","x":804,"y":110,"w":220,"h":76,"label":"Accepted","sub":"Records a destination answer. Acceptance creates no movement or admission; a ward answer may also reserve a named bed on the referral."},{"id":"declined","kind":"terminal","x":20,"y":110,"w":220,"h":76,"label":"Declined","sub":"Ends this answer. An explicit clinical reassessment can reconsider a declined destination."},{"id":"cancelled","kind":"terminal","x":804,"y":270,"w":220,"h":86,"label":"Cancelled","sub":"Closed automatically because another destination accepted. Nobody is asked."},{"id":"withdrawn","kind":"flag","x":20,"y":270,"w":220,"h":96,"label":"Withdrawn — a flag, not a state","sub":"Stamped on every destination still waiting. The arm stays waiting; it does not end."}],"transitions":[{"from":"start","to":"queued","action":"RECEIVE_REFERRAL","route":"down"},{"from":"queued","to":"accepted","action":"ACCEPT_REFERRAL","route":"straight"},{"from":"queued","to":"declined","action":"DECLINE_REFERRAL","route":"straight","guard":"the reason must come from this destination kind's own list"},{"from":"declined","to":"accepted","action":"ACCEPT_REFERRAL","route":"below","offset":0,"kind":"back","label":"on clinical reassessment","guard":"only as an explicit clinical reassessment of this destination"},{"from":"queued","to":"cancelled","action":"ACCEPT_REFERRAL","route":"below","offset":40,"label":"another arm accepted","kind":"side","guard":"a community arm is exempt in both directions and is never cancelled"},{"from":"queued","to":"withdrawn","action":"RECORD_REFERRER_WITHDRAWAL","route":"below","offset":40,"guard":"refused once anything is accepted, and refused outright once transport has collected the patient","kind":"side","label":"stamps every waiting arm"}],"note":"The destination states remain queued, accepted, declined and cancelled. A withdrawal stamps still-queued arms without rewriting their state. A clinical reassessment can update an accepted answer or turn a decline into acceptance; the ordinary first-acceptance cancellation excludes community arms in both directions."},{"id":"movement","name":"A movement","subject":"The separate bed-search record created by RAISE_REFERRAL, or created already arrived by an admitted-ward transfer. Front-door acceptance alone creates no movement. Seven stages plus a separate closure.","width":3122,"height":900,"states":[{"id":"start","kind":"start","x":20,"y":370,"w":230,"h":60,"label":"Movement created"},{"id":"placement_requested","kind":"normal","x":20,"y":180,"w":230,"h":86,"label":"Placement requested","sub":"Wards can be asked from here."},{"id":"destination_review","kind":"normal","x":492,"y":180,"w":230,"h":86,"label":"Destination review","sub":"Wards can be asked from here too — and only from these two."},{"id":"accepted_awaiting_bed","kind":"normal","x":964,"y":180,"w":230,"h":86,"label":"Accepted, awaiting bed","sub":"A ward has said yes. No bed is set aside."},{"id":"pulled","kind":"normal","x":1436,"y":180,"w":230,"h":86,"label":"Bed pulled","sub":"A bed is pulled and linked to an admission. The hold uses current configuration and any applicable extra-travel extension; expiry flags it for a person rather than releasing it."},{"id":"handover_ready","kind":"normal","x":1908,"y":180,"w":230,"h":86,"label":"Handover ready","sub":"Requires a booked job or an explicitly recorded no-transport-needed answer, plus current held-bed gender and legal checks."},{"id":"moving","kind":"normal","x":2380,"y":180,"w":230,"h":86,"label":"Moving","sub":"The patient is in the vehicle."},{"id":"arrived","kind":"terminal","x":2852,"y":180,"w":230,"h":86,"label":"Arrived","sub":"STEP_BACK_STAGE cannot reverse arrival. A separate scoped Undo may reverse the latest unchanged recorded arrival within its window and restored-bed checks."},{"id":"closed","kind":"terminal","x":1396,"y":760,"w":310,"h":90,"label":"Closed — did not proceed","sub":"Not a stage. The stage it closed at is still recorded."}],"transitions":[{"from":"start","to":"placement_requested","action":"RAISE_REFERRAL","route":"up","label":"creates it"},{"from":"placement_requested","to":"destination_review","action":"REFER_TO_UNITS","route":"straight"},{"from":"destination_review","to":"destination_review","action":"DECLINE","route":"self","offset":0,"label":"a ward says no","guard":"that ward drops off the list; the stage does not move"},{"from":"destination_review","to":"destination_review","action":"WITHDRAW_WARD_REQUEST","route":"self","offset":34,"label":"take one ward back"},{"from":"destination_review","to":"destination_review","action":"REFER_TO_UNITS","route":"self","offset":68,"label":"ask more wards"},{"from":"destination_review","to":"accepted_awaiting_bed","action":"ACCEPT_IN_PRINCIPLE","route":"straight"},{"from":"accepted_awaiting_bed","to":"destination_review","action":"WITHDRAW_ACCEPTANCE","route":"below","offset":40,"kind":"back","guard":"Allowed while awaiting a bed or with a pulled/stepped-back hold. A held bed is released atomically; cancel a live transport job first. Refused at handover-ready/moving."},{"from":"accepted_awaiting_bed","to":"pulled","action":"PULL_PATIENT","route":"straight"},{"from":"pulled","to":"accepted_awaiting_bed","action":"RELEASE_PULL","route":"below","offset":90,"kind":"back"},{"from":"pulled","to":"handover_ready","action":"HANDOVER_READY","route":"straight"},{"from":"handover_ready","to":"moving","action":"PATIENT_COLLECTED","route":"straight","guard":"refused while a revoked examination still holds the bed, or while restrictive practice is still recorded as in use for the patient at the sending ward"},{"from":"moving","to":"arrived","action":"PATIENT_ARRIVED","route":"straight"},{"from":"pulled","to":"arrived","action":"PATIENT_ARRIVED","route":"above","offset":30,"label":"no transport needed","kind":"skip"},{"from":"pulled","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":0,"kind":"exit"},{"from":"pulled","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":38,"kind":"exit"},{"from":"pulled","to":"closed","action":"REFER_TO_COMMUNITY_TEAM","route":"exit","offset":76,"kind":"exit"},{"from":"pulled","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":114,"kind":"exit","label":"community order or revoked","guard":"A community order before transport commitment closes and refunds. Revocation while a bed is held retains it and flags release; commitment or collection also retains the bed."},{"from":"moving","to":"closed","action":"STOP_TRANSPORT","route":"exit","offset":0,"kind":"exit","guard":"the bed deliberately stays held; only releasing the held bed gives it back"},{"from":"arrived","to":"closed","action":"PATIENT_ARRIVED","route":"exit","offset":0,"kind":"side","label":"closes as arrived, not as did-not-proceed"},{"from":"start","to":"arrived","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"skip","label":"ward transfer arrival: created already arrived","guard":"only a coordinator recording a transfer as arrived, for an occupied admission, into a ward with a suitable free bed and staffing; the new movement is opened and closed as arrived in one write, never raised in a department"},{"from":"moving","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":130,"kind":"back","label":"to ANY strictly earlier stage","guard":"refused once arrived; touches nothing but the stage — no bed given back, no transport cancelled"},{"from":"destination_review","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":90,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"accepted_awaiting_bed","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":100,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"pulled","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":110,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"handover_ready","to":"placement_requested","action":"STEP_BACK_STAGE","route":"above","offset":120,"kind":"back","guard":"the same step back as from Moving: to any strictly earlier stage, touching nothing but the stage"},{"from":"pulled","to":"destination_review","action":"WITHDRAW_ACCEPTANCE","route":"below","offset":120,"kind":"back","guard":"the held bed is released in the same write; cancel a live transport job first"},{"from":"placement_requested","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":150,"kind":"exit"},{"from":"placement_requested","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":174,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"destination_review","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":198,"kind":"exit"},{"from":"destination_review","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":222,"kind":"exit"},{"from":"destination_review","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":246,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"accepted_awaiting_bed","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":270,"kind":"exit"},{"from":"accepted_awaiting_bed","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":294,"kind":"exit"},{"from":"accepted_awaiting_bed","to":"closed","action":"RECORD_EXAMINATION","route":"exit","offset":318,"kind":"exit","label":"community order","guard":"a community order before a bed is pulled closes the journey"},{"from":"handover_ready","to":"closed","action":"WITHDRAW_REFERRAL","route":"exit","offset":342,"kind":"exit"},{"from":"handover_ready","to":"closed","action":"RECORD_ED_OUTCOME","route":"exit","offset":366,"kind":"exit"}],"note":"STEP_BACK_STAGE records a strictly earlier stage with a reason, leaving bed and transport intact. It refuses a closure, an arrived stage or a delivered transport leg. WITHDRAW_ACCEPTANCE can release an uncollected hold atomically after cancelling a live job. The separate scoped UNDO_TRANSPORT_STEP route may reverse the latest recorded arrival while its time-window, unchanged-snapshot, actor and restored-bed checks pass. Withdrawing the referral (after placement is requested), an ED outcome (before Moving) and a community order (before a bed is pulled) close the movement from every open stage the engine allows, not only from Bed pulled; tests/ward-audit-m26-machine-moves.test.ts checks every arrow against the engine."},{"id":"admission","name":"An admission","subject":"The held or occupied stay. A new pull creates a held admission; supported direct placement/planned-arrival and ward-transfer paths can create an occupied admission without passing through Held.","width":1684,"height":426,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":190,"h":76,"label":"No admission"},{"id":"pulled","kind":"normal","x":458,"y":60,"w":230,"h":76,"label":"Held","sub":"A bed is theirs. They are not here yet."},{"id":"occupied","kind":"normal","x":936,"y":60,"w":230,"h":76,"label":"Occupied","sub":"Stays theirs through leave, an ED trip, and an absconding."},{"id":"departed","kind":"terminal","x":1414,"y":60,"w":230,"h":76,"label":"Departed","sub":"Kept. Ended, never deleted."},{"id":"deleted","kind":"flag","x":423,"y":250,"w":300,"h":86,"label":"Removed — not a state","sub":"There is no “deleted” among the four admission states. The record itself is taken away."},{"id":"waitlisted","kind":"unreachable","x":1434,"y":250,"w":190,"h":86,"label":"Waitlisted","sub":"No action in the engine can produce this. Only the starting fixture writes it."}],"transitions":[{"from":"none","to":"pulled","action":"PULL_PATIENT","route":"straight","label":"creates it"},{"from":"pulled","to":"occupied","action":"PATIENT_ARRIVED","route":"straight"},{"from":"occupied","to":"departed","action":"RECORD_LEAVING","route":"straight","guard":"only from occupied, and only by the ward they are on"},{"from":"occupied","to":"departed","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"side","label":"transferred to another ward","guard":"only when a coordinator records the transfer as arrived; the stay ends with the destination transferred-to-another-psychiatric-ward and any live bed release is completed"},{"from":"none","to":"occupied","action":"RECORD_ADMISSION_CARE","route":"below","offset":60,"kind":"skip","label":"transfer arrival: new admission, already occupied","guard":"the receiving ward gets a NEW admission with a new linked movement; no bed is pulled first, so it never passes through Held"},{"from":"occupied","to":"occupied","action":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","route":"self","offset":0,"label":"away at an ED — bed untouched"},{"from":"occupied","to":"occupied","action":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","route":"self","offset":34,"label":"and back"},{"from":"pulled","to":"deleted","action":"RELEASE_PULL","route":"exit","offset":0,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RELEASE_HELD_BED","route":"exit","offset":38,"kind":"exit"},{"from":"pulled","to":"deleted","action":"WITHDRAW_REFERRAL","route":"exit","offset":76,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RECORD_ED_OUTCOME","route":"exit","offset":114,"kind":"exit"},{"from":"pulled","to":"deleted","action":"REFER_TO_COMMUNITY_TEAM","route":"exit","offset":152,"kind":"exit"},{"from":"pulled","to":"deleted","action":"RECORD_EXAMINATION","route":"exit","offset":190,"kind":"exit"}],"note":"Ending and deleting are deliberately different. A departed admission is kept as a record that somebody was here; a released pull is removed, because the claim that they would be here is being retracted."},{"id":"transport","name":"A transport job","subject":"Booked by phone and logged here. Collection is the line that changes what is possible.","width":2390,"height":436,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":170,"h":76,"label":"No job"},{"id":"booked","kind":"normal","x":432,"y":60,"w":190,"h":76,"label":"Booked"},{"id":"accepted","kind":"normal","x":864,"y":60,"w":190,"h":76,"label":"Crew accepted"},{"id":"enroute","kind":"normal","x":1296,"y":60,"w":190,"h":76,"label":"En route"},{"id":"collected","kind":"normal","x":1728,"y":60,"w":190,"h":76,"label":"Collected","sub":"After this, cancelling is impossible."},{"id":"arrived","kind":"terminal","x":2160,"y":60,"w":190,"h":76,"label":"Arrived"},{"id":"stopped","kind":"terminal","x":1683,"y":260,"w":280,"h":86,"label":"Stopped","sub":"Somebody must say where the patient now is."}],"transitions":[{"from":"none","to":"booked","action":"BOOK_TRANSPORT","route":"straight","guard":"five answers, none defaulted"},{"from":"booked","to":"accepted","action":"TRANSPORT_ACCEPTED","route":"straight"},{"from":"accepted","to":"enroute","action":"TRANSPORT_EN_ROUTE","route":"straight","guard":"Requires an open movement at handover-ready, an accepted job and no earlier en-route timestamp. Refused while a revoked/community-order examination retains a bed or awaits release; this handler itself does not rerun held-unit gender/legal checks."},{"from":"enroute","to":"collected","action":"PATIENT_COLLECTED","route":"straight","guard":"refused while restrictive practice is still recorded as in use for the patient at the sending ward"},{"from":"collected","to":"arrived","action":"PATIENT_ARRIVED","route":"straight"},{"from":"booked","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":0,"kind":"exit","label":"the job is deleted, not marked"},{"from":"accepted","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":20,"kind":"exit"},{"from":"enroute","to":"none","action":"CANCEL_TRANSPORT","route":"below","offset":40,"kind":"exit","guard":"The booking ward/team must match the supplied acting place; an ED claim is checked against the recorded booking place when both are present. Coordinator access remains subject to the authenticated access boundary."},{"from":"collected","to":"stopped","action":"STOP_TRANSPORT","route":"exit","offset":0,"kind":"exit"}],"note":"Cancel and stop are not two names for one thing. Cancel deletes a job before collection and leaves the bed held; stop ends a journey already underway, closes the movement, and also leaves the bed held — but only stop demands to know where the patient is."},{"id":"bedrelease","name":"A bed release","subject":"A ward's plan for a bed coming free. It names the stay it belongs to, and nothing else about the person leaving.","width":1709,"height":566,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":170,"h":76,"label":"Not flagged"},{"id":"expected","kind":"normal","x":463,"y":60,"w":210,"h":76,"label":"Expected","sub":"Carries what it is waiting on — one of seven."},{"id":"confirmed","kind":"normal","x":946,"y":60,"w":210,"h":76,"label":"Confirmed","sub":"Decided. Still not a free bed."},{"id":"discharged","kind":"terminal","x":1429,"y":60,"w":240,"h":76,"label":"Discharged","sub":"The only step here that moves a real bed count."},{"id":"blocked","kind":"flag","x":428,"y":420,"w":280,"h":86,"label":"Stuck — a flag, not a stage","sub":"One of nine reasons. Sits on top of expected or confirmed; either can be flagged."},{"id":"preparing","kind":"flag","x":1250,"y":420,"w":300,"h":86,"label":"Being made ready — a flag","sub":"Cleaning or repair is a separate flag. It can be set on an expected, confirmed or discharged release, and recording the departure (or a ward transfer arriving) sets it too, except item 18's \"Left the ward, waiting for transport\", where the bed is Ready at once. It does not rewrite the ward count, but a new pull refuses when every free bed is still being prepared."}],"transitions":[{"from":"none","to":"expected","action":"FLAG_BED_RELEASE","route":"straight"},{"from":"expected","to":"confirmed","action":"CONFIRM_BED_RELEASE","route":"straight"},{"from":"confirmed","to":"expected","action":"REVERT_BED_RELEASE","route":"below","offset":40,"kind":"back"},{"from":"confirmed","to":"discharged","action":"RECORD_LEAVING","route":"straight"},{"from":"expected","to":"discharged","action":"RECORD_LEAVING","route":"above","offset":30,"kind":"skip","label":"straight from expected"},{"from":"confirmed","to":"discharged","action":"RECORD_ADMISSION_CARE","route":"below","offset":0,"kind":"side","label":"the patient's ward transfer completes it"},{"from":"expected","to":"discharged","action":"RECORD_ADMISSION_CARE","route":"below","offset":60,"kind":"skip","label":"straight from expected, by ward transfer"},{"from":"expected","to":"blocked","action":"BLOCK_BED_RELEASE","route":"exit","offset":0,"kind":"side"},{"from":"confirmed","to":"blocked","action":"BLOCK_BED_RELEASE","route":"exit","offset":90,"kind":"side"},{"from":"blocked","to":"expected","action":"CLEAR_BED_RELEASE_BLOCK","route":"exit","offset":0,"kind":"side"},{"from":"expected","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":110,"kind":"side"},{"from":"confirmed","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":130,"kind":"side"},{"from":"discharged","to":"preparing","action":"SET_BED_PREPARATION","route":"exit","offset":150,"kind":"side","label":"made ready after the person leaves"},{"from":"expected","to":"preparing","action":"RECORD_LEAVING","route":"exit","offset":170,"kind":"side","label":"the departure also marks the bed, unless left waiting for transport"},{"from":"confirmed","to":"preparing","action":"RECORD_LEAVING","route":"exit","offset":190,"kind":"side","label":"the departure also marks the bed, unless left waiting for transport"},{"from":"expected","to":"preparing","action":"RECORD_ADMISSION_CARE","route":"exit","offset":210,"kind":"side","label":"a ward transfer arriving also marks the bed"},{"from":"confirmed","to":"preparing","action":"RECORD_ADMISSION_CARE","route":"exit","offset":230,"kind":"side","label":"a ward transfer arriving also marks the bed"}],"note":"Being stuck used to be a fourth stage and was deliberately removed on 28 August 2026, because each stage says only how certain the discharge is. Stuck-ness and cleaning are two separate flags sitting on top."},{"id":"expects","name":"The front door — an expect becomes a referral","subject":"A door the earlier drawing missed entirely. A referral that has been triaged but whose patient has not arrived sits on a separate list; marking them present is what moves it.","width":2011,"height":240,"states":[{"id":"raised","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Raised"},{"id":"expected","kind":"normal","x":537,"y":60,"w":260,"h":90,"label":"Expected to arrive","sub":"Triaged, and the patient is not here yet. It sits on the Expects list."},{"id":"present","kind":"normal","x":1114,"y":60,"w":260,"h":90,"label":"In the department","sub":"Marked present. It now reads as a referral rather than an expect."},{"id":"cleared","kind":"flag","x":1691,"y":60,"w":280,"h":90,"label":"Medically cleared — or not","sub":"Three answers, not two: unrecorded, cleared, and explicitly not cleared."}],"transitions":[{"from":"raised","to":"expected","action":"RECEIVE_REFERRAL","route":"straight"},{"from":"expected","to":"present","action":"RECORD_ARRIVED_IN_DEPARTMENT","route":"straight","guard":"stamped once; a repeat keeps the earliest time"},{"from":"present","to":"cleared","action":"RECORD_MEDICAL_CLEARANCE","route":"straight","kind":"side"},{"from":"expected","to":"cleared","action":"RECORD_MEDICAL_CLEARANCE","route":"below","offset":0,"kind":"side","label":"clearance can come first"}],"note":"The owner's own words for this, quoted in the model: “When expects arrive and are marked as arrived, they become referrals.” Being marked present is the only door between the two lists."},{"id":"legalstatus","name":"A patient's legal status","subject":"Four values on an open movement. CHANGE_LEGAL_STATUS records a change and history; it does not itself release a bed or advance the journey. Sending-desk kind and authenticated place scope still apply.","width":1683,"height":226,"states":[{"id":"voluntary","kind":"normal","x":20,"y":60,"w":240,"h":76,"label":"Voluntary"},{"id":"referred","kind":"normal","x":451,"y":60,"w":280,"h":76,"label":"Referred for psychiatric examination"},{"id":"detained","kind":"normal","x":922,"y":60,"w":280,"h":76,"label":"Detained awaiting examination"},{"id":"involuntary","kind":"normal","x":1393,"y":60,"w":250,"h":76,"label":"Involuntary inpatient"}],"transitions":[{"from":"voluntary","to":"referred","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"referred","to":"detained","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"detained","to":"involuntary","action":"CHANGE_LEGAL_STATUS","route":"straight"},{"from":"involuntary","to":"voluntary","action":"CHANGE_LEGAL_STATUS","route":"below","offset":20,"kind":"back","label":"any value to any other"}],"note":"Any value can be recorded as another; arrows illustrate examples rather than an enforced legal sequence. The handler requires a listed reason and an open movement. A newly unsuitable accepted ward is surfaced for a person; forward placement/transport steps recheck legal authority, so the change can block later progress."},{"id":"examination","name":"An examination","subject":"Four outcomes. Two of them end the bed search; one of them asks for another examination and is the only way a second one is allowed.","width":1757,"height":426,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Not examined"},{"id":"further","kind":"normal","x":449,"y":60,"w":260,"h":90,"label":"Further examination ordered","sub":"The only outcome that allows another examination."},{"id":"inpatient","kind":"terminal","x":938,"y":60,"w":250,"h":90,"label":"Inpatient order","sub":"Recorded. Nothing else changes."},{"id":"ended","kind":"terminal","x":1417,"y":60,"w":300,"h":90,"label":"Community order, or revoked","sub":"A community order or revocation is recorded. Closure/release depends on the held-bed and transport facts."},{"id":"superseded","kind":"flag","x":320,"y":250,"w":300,"h":86,"label":"Superseded","sub":"The previous examination is kept, not overwritten."}],"transitions":[{"from":"none","to":"further","action":"RECORD_EXAMINATION","route":"straight"},{"from":"none","to":"inpatient","action":"RECORD_EXAMINATION","route":"above","offset":26,"kind":"skip"},{"from":"none","to":"ended","action":"RECORD_EXAMINATION","route":"above","offset":60,"kind":"skip"},{"from":"further","to":"superseded","action":"RECORD_EXAMINATION","route":"exit","offset":0,"kind":"side","label":"a second examination","guard":"a second examination is refused unless the last one ordered a further one"}],"note":"A community order before transport commitment closes the search and releases its hold. Revocation with a held bed retains the bed and admission, keeps the movement open and flags a person to act. At handover-ready, moving or after collection either ending outcome also retains it. Acceptance, en-route and collection refuse an unresolved examination/hold; physical arrival remains recordable."},{"id":"notice","name":"A notice","subject":"Twenty-four kinds of message, addressed to one role at one place. Written once, never rewritten, never deleted and never expiring.","width":1442,"height":246,"states":[{"id":"none","kind":"start","x":20,"y":60,"w":200,"h":70,"label":"Nothing sent"},{"id":"unread","kind":"normal","x":531,"y":60,"w":280,"h":96,"label":"Raised, unread","sub":"Its wording is frozen at the moment it is written, even if the thing it describes later changes."},{"id":"read","kind":"terminal","x":1122,"y":60,"w":280,"h":96,"label":"Read","sub":"Only the addressee can mark it, only by clicking, and only once."}],"transitions":[{"from":"none","to":"unread","action":"ACCEPT_REFERRAL","route":"straight","label":"one of twenty-four kinds","guard":"raised as a side-effect of an action, never on its own"},{"from":"unread","to":"read","action":"MARK_NOTICE_READ","route":"straight","guard":"refused if you are not the addressee, and refused a second time"}],"note":"Opening the drawer does not mark a notice read. MARK_NOTICE_READ requires the addressed role/place and an unread notice. These are append-only authored messages, separate from derived action-inbox rows and from broadcast alerts. Referral-answer notices resolve the referring ED for ed_medical referrals; other source kinds currently have no safe referrer addressee."},{"id":"inbox","name":"A row in the coordinator's inbox","subject":"Derived fact rows come from movements, stays, planned bookings and bed-meeting actions. A separate daily nobody-missed check is a commitment with append-only completion history.","width":1640,"height":416,"states":[{"id":"absent","kind":"start","x":20,"y":60,"w":220,"h":70,"label":"Not showing"},{"id":"showing","kind":"normal","x":620,"y":60,"w":300,"h":96,"label":"Showing","sub":"A current fact category is true, or a commitment is due. The current categories live in INBOX_CATEGORIES rather than a fixed five-item list."},{"id":"acknowledged","kind":"normal","x":1300,"y":60,"w":300,"h":96,"label":"Acknowledged","sub":"Somebody has seen a fact row. The row stays exactly where it was. A commitment is never acknowledged."},{"id":"ticked","kind":"normal","x":1140,"y":230,"w":300,"h":96,"label":"Commitment completed","sub":"The daily check can be completed and reopened. Live fact categories cannot be ticked away; bed-meeting actions use their dedicated completion event."}],"transitions":[{"from":"absent","to":"showing","action":"ACKNOWLEDGE_INBOX_ITEM","route":"straight","label":"the situation becomes true","kind":"side","guard":"nothing raises a row — it is derived, and appears on its own"},{"from":"showing","to":"acknowledged","action":"ACKNOWLEDGE_INBOX_ITEM","route":"straight","guard":"hides nothing and removes nothing; a second person acknowledging is a second real fact"},{"from":"showing","to":"ticked","action":"COMPLETE_INBOX_ITEM","route":"exit","offset":0,"kind":"side","label":"commitments only","guard":"Only commitment IDs; daily-check IDs require the day-N shape, and an already-complete history refuses. A commitment is completed straight from Showing and is never acknowledged. Facts remain until their underlying situation changes."},{"from":"ticked","to":"showing","action":"REOPEN_INBOX_ITEM","route":"above","offset":0,"kind":"back","label":"back to showing"}],"note":"Acknowledgement, ownership, snoozing and completion are separate histories. Real fact rows are never completed by COMPLETE_INBOX_ITEM. The daily check uses a day-shaped identifier rather than a movement; bed-meeting actions use COMPLETE_BED_MEETING_ACTION. CANCEL_TRANSPORT appends a returned snooze and a released ownership entry to the job's awaiting-departure and booking-estimate-passed rows. Completion validates category and day syntax, not whether the day is the current day."},{"id":"legalform","name":"A legal form's receipt","subject":"Whether the paperwork has physically arrived. It can be undone, and then happen again.","width":1382,"height":240,"states":[{"id":"not","kind":"start","x":20,"y":60,"w":240,"h":76,"label":"Not recorded as received"},{"id":"received","kind":"normal","x":521,"y":60,"w":260,"h":90,"label":"Recorded as received","sub":"Any of the nine forms with a legal clock, not only 1A. A second receipt is refused. A typed received time is kept as typed and cannot be later than now."},{"id":"expiry","kind":"flag","x":1042,"y":60,"w":300,"h":90,"label":"An expiry, typed by a clinician","sub":"Expiry comes from checked paper facts. An extension must be later; a correction with matching prior form/time/expiry and a listed reason may move it earlier."}],"transitions":[{"from":"not","to":"received","action":"RECORD_LEGAL_FORM_RECEIVED","route":"straight"},{"from":"received","to":"not","action":"CORRECT_LEGAL_FORM_RECEIPT","route":"below","offset":20,"kind":"back","guard":"three reasons: recorded in error, recorded against the wrong movement, or the form had not physically arrived"},{"from":"received","to":"expiry","action":"RECORD_LEGAL_FORM_EXPIRY","route":"straight","kind":"side"},{"from":"not","to":"expiry","action":"RECORD_LEGAL_FORM_EXPIRY","route":"above","offset":0,"kind":"side","label":"before a receipt"}],"note":"Receipt correction appends its reason and clears the receipt without erasing history. Expiry entry need not wait for a receipt: it requires a recorded form. The admitted ward may record a typed expiry on an arrived/closed movement; a checked correction and a later extension are distinct paths."}],"resources":{"title":"A ward's two bed counts","blurb":"The illustrated routes below show the principal stored-count changes; the current event models also cover planned admissions, direct placement and undo. A normal departure completes the named live release and raises empty/allocatable once. A departure resolving an arrival-capacity conflict clears that conflict instead of inventing another bed. Ready capacity also excludes closed wards, individually closed beds and other journeys' pending numbered reservations.","counts":[{"name":"Allocatable","means":"Beds the ward will let a coordinator take.","moves":[{"action":"PULL_PATIENT","effect":"− 1"},{"action":"RELEASE_PULL","effect":"+ 1"},{"action":"RELEASE_HELD_BED","effect":"+ 1"},{"action":"WITHDRAW_REFERRAL","effect":"+ 1","note":"via the same release"},{"action":"RECORD_ED_OUTCOME","effect":"+ 1","note":"via the same release"},{"action":"REFER_TO_COMMUNITY_TEAM","effect":"+ 1","note":"via the same release"},{"action":"RECORD_EXAMINATION","effect":"+ 1","note":"Community order before commitment can release a hold; revocation with a held bed retains it for a person to release."},{"action":"RECORD_LEAVING","effect":"+ 1","note":"the named patient leaving, which also completes their bed release"},{"action":"RECORD_ADMISSION_CARE","effect":"+ 1 on the ward they leave, − 1 on the ward they arrive at","note":"only a transfer recorded as arrived; the source ward's live bed release is completed in the same write"},{"action":"CONFIRM_CAPACITY","effect":"set outright","note":"a ward's own self-report, which can put it above the empty count"}]},{"name":"Empty","means":"Beds with physically nobody in them.","moves":[{"action":"PATIENT_ARRIVED","effect":"Usually −1, floored at zero; a pre-counted seeded pull is not decremented twice. Arrival into no empty bed is recorded as a capacity conflict."},{"action":"RECORD_LEAVING","effect":"+ 1","note":"Normally +1, bounded by authored capacity; resolving an arrival conflict or already-counted release does not create an extra free bed."},{"action":"RECORD_ADMISSION_CARE","effect":"+ 1 on the ward they leave, − 1 on the ward they arrive at","note":"only a transfer recorded as arrived"}]}]},"gates":{"title":"Can this ward take this patient?","blurb":"Thirteen possible eligibility labels across two paths, not thirteen blocking checks at every step. Eight labels belong to the suitability-override list. Acuity and specialling rows are information only; their actual staffing checks occur at placement. Gender designation has no override; Ready-bed and other physical-record checks run separately.","overridable":"Overridable means a coordinator may proceed anyway by choosing one of five recorded reasons: the receiving team has agreed despite the mismatch; clinical urgency outweighs the mismatch; the bed information is known to be out of date; continuity with a previous admission at this unit; closer to the person's home or family.","rows":[{"gate":"Authorisation","override":true,"referral":false,"movement":true,"asks":"If this patient is not voluntary, is the ward authorised under the Mental Health Act?"},{"gate":"Legal status","override":true,"referral":true,"movement":false,"asks":"The same question, asked at the front door instead — is an authorised bed needed, and does this ward have one?"},{"gate":"Cohort","override":true,"referral":false,"movement":true,"asks":"Does the ward's cohort match the patient's — adult, older adult, or youth?"},{"gate":"Age","override":true,"referral":true,"movement":false,"asks":"The same question at the front door, asked against the age band on the referral."},{"gate":"Security","override":true,"referral":true,"movement":true,"differs":true,"asks":"Does the patient need a locked bed?","note":"THE SAME NAME, TWO DIFFERENT QUESTIONS. At the front door it asks whether a locked bed is free right now. On a movement it asks only whether the ward has locked beds at all. The gap is known and written down."},{"gate":"Sex mix","override":true,"referral":true,"movement":true,"differs":true,"asks":"Is there already an occupant of the same sex, or more than one free bed?","note":"Both current sex-mix paths use Ready availability, with recorded gender and the defined recorded-sex fallback for non-binary or absent gender. Do not repeat the former front-door-versus-movement capacity difference for this row."},{"gate":"Forensic","override":true,"referral":true,"movement":true,"asks":"Is this a forensic ward? If so it is never offered."},{"gate":"Capacity freshness","override":true,"referral":true,"movement":true,"asks":"How long ago did the ward last confirm its numbers? A stale figure fails."},{"gate":"Gender designation","override":false,"referral":true,"movement":true,"hard":true,"asks":"Does the ward's designation suit the gender recorded at referral?","note":"Gender designation is checked before suitability overrides. A binary gender conflicting with the ward cannot be overridden. Non-binary, Different term and unrecorded gender can use an explicit coordinator placement record, subject to the current ward-checked reason requirements."},{"gate":"Acuity","override":false,"referral":true,"movement":true,"hard":true,"asks":"Information only: what high-acuity staffing is authored for the ward? Current use is checked at placement.","note":"This eligibility row always passes with info:true. PULL_PATIENT separately checks remaining high-acuity staffing and requires a valid reason plus nurse unit manager consultation for its supported exception."},{"gate":"Specialling","override":false,"referral":true,"movement":true,"hard":true,"differs":true,"asks":"Information only: what observation staffing is authored, and what does the recorded level need?","note":"This row always passes with info:true. A referral does not record observation level. PULL_PATIENT checks actual remaining observation staff; the eligibility row is not itself a hard refusal."},{"gate":"Prior decline","override":false,"referral":false,"movement":true,"hard":true,"asks":"Has this ward previously declined this movement? This is historical context; the reducer does not enforce it as a suitability refusal."},{"gate":"A bed to allocate","override":false,"referral":true,"movement":true,"hard":true,"differs":true,"asks":"Is there a bed to give?","note":"Movement matching can accept in principle on allocatable capacity; immediate referral matching requires Ready availability. PULL_PATIENT requires a Ready bed. Physical arrival is still recorded at zero empty capacity and creates an arrival-capacity conflict rather than refusing a patient in transit."}],"outside":{"title":"Placement and held-destination checks outside the label table","blurb":"These checks answer physical reservations, staffing and record consistency at their actual handlers. They are not all evaluated on every path; an already-held restoration has its own checks and physical arrival has a separate record-first path.","items":["A new pull needs a Ready bed, including closed-ward and closed-bed adjustments and live pulled admissions; when beds are being made ready it needs more Ready beds than pending ones (planned arrivals likewise). An arrival into zero empty capacity is recorded as a capacity conflict.","Every free bed still being prepared prevents a new pull.","Current observation staff and high-acuity capacity are checked at placement; supported exceptions need their recorded facts and acuity also needs nurse unit manager consultation.","A Secure request using an open bed requires the supported recorded reason; naming an unavailable numbered reservation still refuses.","Coordinator gender-placement records are required for the cases defined by genderReviewNeeded, and a binary designation conflict has no suitability override.","A restored hold rechecks its matching admission, current staffing, legal authority and gender rather than consuming another bed.","A no-transport arrival rechecks gender/legal status before arrival; an already-moving patient is recorded without stranding them at the door."]}},"gaps":[{"title":"The stored Unit.held field is not the live operational count","body":"Operational held/closed/Ready figures are derived. Unit.held remains seed and storage-validation data, so saying it is read in zero places is false. Filling this stored field is not a way to change the live derived figure.","question":"Would retiring this legacy storage field improve the model? Any removal needs a separately scoped migration and compatibility review."},{"title":"A patient-shaped placement wrapper remains separate from the live matching path","body":"genderEligibility is called by validateGenderPlacement, while live referral and movement matching share genderDesignationResult. These are distinct API shapes; the old claim that genderEligibility is never called is false. The wrapper currently has no production caller found in this source scan.","question":"Should the unused wrapper be retained as a public contract or retired under a separately reviewed API change? Its existence does not mean current matching skips gender."},{"title":"Inbox completion is for commitments; fact rows need their source condition resolved","body":"The daily nobody-missed check is a completable commitment, while derived fact rows cannot be ticked away. Bed-meeting actions have a separate completion event. COMPLETE_INBOX_ITEM validates the daily-check identifier shape and appends history; it does not verify that the named day is today.","question":"Should the daily-check API allow retrospective/future day records? Keep that product decision separate from the rule that live facts cannot be silenced."}],"review":{"reviewedOn":"2026-11-05","basis":"Source comparison of eleven machines, route nodes, gates, resources and current gap notes; not runtime or clinical acceptance. 5 November follow-up: explicit handler, payload, authority and caller review reconciled the consolidated audit repairs. Accepted observation sequence and legacy-tie fallback, current place/Undo provenance, safe world reset/import identity, return retry, meeting occurrence metadata and UI draft/completion ownership qualify existing transitions; they add no clinical decision or new physical transport stage. See CURRENT-REVIEW.md for the source-by-source review scope and reused versus fresh evidence. Main29f61/domain1430 reconciliation: accepted observation order is max(retained history,0)+1 with positive-safe restore metadata and sequence preserved through arrival; legacy ties retain compatibility fallback. Import and archive Undo share normalized retained identity, excluding explicit missing/privacy sentinels. Complete inverses preserve occupied-stay/leave consistency. No transition geometry or clinical rule changed; see CURRENT-REVIEW.md. #1447 consolidation, 5 November: other journeys' pending numbered bed reservations come off Ready and the free locked/open counts in the pull and planned-arrival gates; a pull release clears its held bed number and refuses a release matching no reservation; a coordinator transfer recorded as arrived needs a Ready bed; restore refuses a save whose live absences, active stays or numbered beds have more than one owner and names the broken rule. No transition geometry or clinical rule changed. 10 November (items 3, 9, 10/16/27, 26/46): escalation calls and police or ambulance crew times add record-only movement fields and events; the ward card fit lines, home team heads-up and transfer notes copy are screen reads. Cited sources compared line by line; no transition geometry or clinical rule changed. 11 November (D-141): RECORD_ARRIVAL_MODE marks an ED arrival brought by police or ambulance, a record-only movement field; the home team heads-up adds the patient's UMRN as a screen read. Cited sources compared line by line (additions only); no transition geometry or clinical rule changed.","sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":619,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/legal-forms/legal-forms-screen.tsx","line":1,"sha256":"21e9f1961cac15e3deac106f62f32fd6f5b9dccd51020fd7827ebb52043b9d19"},{"path":"src/components/ward-management/legal-forms/legal-forms-sheets.tsx","line":325,"sha256":"2d9f381246fc35b7c04bfcd41c26e67d584e594d41f73d8ddf1f913b7036c2bc"},{"path":"src/components/ward-management/patients/add-patient.tsx","line":87,"sha256":"e4d277572fc48f16fc5a3746118fc7ab1758d274ed28ae459d9cd1821a2de4f0"},{"path":"src/components/ward-management/patients/patient-now-screen.tsx","line":1,"sha256":"cd610648ae632e2fc9bcd4e5c13a16cd74d8c417073d50657d0af061c509a32d"},{"path":"src/components/ward-management/shell/ward-broadcast-banner-body.tsx","line":1,"sha256":"a96ae00d184b52341105eb90f8a0438f5f5561f787c2522f97e0e7ea62e87178"},{"path":"src/components/ward-management/shell/ward-broadcast-banner.tsx","line":1,"sha256":"d34087fc1cfb2356065997d7942882cd1bc9791e3041e71ec0fb0d279fe429be"},{"path":"src/components/ward-management/shell/ward-facade.ts","line":32,"sha256":"1f67e3da9d32ff7085af624d524b3bcefe1c1c7790164963a98d21da4c830d6b"},{"path":"src/components/ward-management/ward-change-reasons.ts","line":1,"sha256":"b22acd93e5b480a06ecaa78e29979f31d274e4700187416623afd9e32553b2e4"},{"path":"src/components/ward-management/ward-configuration.ts","line":34,"sha256":"3e6cffc45878c910d85d900ae10360c06b6c647bbb4cf749875aaf5bb5640ca8"},{"path":"src/components/ward-management/ward-derivations-transport.ts","line":265,"sha256":"877a3c89501efb8f518b4bae3e30b51efd042e38b4b066f2db6ebbc81591ebba"},{"path":"src/components/ward-management/ward-derivations.ts","line":1,"sha256":"c254f1512e5602170a15419774de985744bf603ba81113e8ecd46f21d5adccfe"},{"path":"src/components/ward-management/ward-duplicate-bed-requests.ts","line":1,"sha256":"1bef25c3e6a549941d0753e095e0c7aa4bb26a1fc2dd12e8a526e1f8d2f9ddf6"},{"path":"src/components/ward-management/ward-eligibility.ts","line":49,"sha256":"5a876b1943bbfa47b1db277fb4a5b36b37d80de4c4ff9bb6b620366d7217800d"},{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":621,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-departure.ts","line":18,"sha256":"624ccc1fda2f7732e2704270f7281dcea991daac85485619881b0d1790aacb62"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":1,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":430,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":1,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":606,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":428,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1176,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":392,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219,"sha256":"644830b71eeb2fa2bbe44499954aab3ceb97f4ac99fc2f84f29619632e89e8ff"},{"path":"src/components/ward-management/ward-flow-storage-validation.ts","line":452,"sha256":"235c28653c50815296ac813352251daa8bfdc0d045f34784be71ad4387965ac5"},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":270,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":58,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-model-leave.ts","line":1,"sha256":"ef7c345e94d36c3ee2e7ee4c1eda650106340a856d29afdb1da1feadc38aea4e"},{"path":"src/components/ward-management/ward-model-notices.ts","line":1,"sha256":"9f4ca23254737cc5eec8353ee99d05265b4f9fe7bc04d17fe7c2abd954c08678"},{"path":"src/components/ward-management/ward-model-referral-parts.ts","line":1,"sha256":"a23ccdb01397d9807f0455c3baed92c6c8700422593ebcb89f5a51e990281fb6"},{"path":"src/components/ward-management/ward-model.ts","line":1,"sha256":"6cc372267168e04e8bb4a3365d5db08888f67c6cbd08a372e5f57d40b6614e46"},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":77,"sha256":"9e0f9c39d6d4a7f8f406fd438e09cd9ea7b7c6631a7bdd5e059d1f38de3caac4"},{"path":"src/components/ward-management/ward-ready-beds.ts","line":1,"sha256":"489095566f42be24921c7ba289b59a13514c656bf4846cf9cf94fad5a5aeb13c"},{"path":"src/components/ward-management/ward-undo.ts","line":1,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"},{"path":"src/components/ward-management/ward-retained-umrn.ts","line":13,"sha256":"7968243f077b9d5c9a6fe6a56385f48ff6a97aa39cfdeec8fe97f05919693d80"}]}},"coverage":{"total":98,"mapped":46,"refusalSitesInSelectedFiles":160,"sampledSourceFiles":["ward-flow-reducer.ts","ward-flow-record-events.ts","ward-flow-undo-events.ts"],"refusalsNamed":248,"rows":[{"name":"Raise a referral at the front door","event":"RECEIVE_REFERRAL","transitions":["A referral destination: raised → Waiting","The front door — an expect becomes a referral: Raised → Expected to arrive"],"writes":""},{"name":"Add a person who is not on file","event":"ADD_PATIENT","transitions":[],"writes":"Creates a patient record."},{"name":"Record whether they are medically cleared","event":"RECORD_MEDICAL_CLEARANCE","transitions":["The front door — an expect becomes a referral: In the department → Medically cleared — or not","The front door — an expect becomes a referral: Expected to arrive → Medically cleared — or not"],"writes":"Replaces the referral answer and the matching movements’ clearance. Positive re-clearance stamps resumedAt and restates their blocker; it does not restore a released bed or booking."},{"name":"Mark that an expected patient has turned up","event":"RECORD_ARRIVED_IN_DEPARTMENT","transitions":["The front door — an expect becomes a referral: Expected to arrive → In the department"],"writes":"The arrival time, on a referral. Stamped once; a repeat is harmless."},{"name":"Accept the referral","event":"ACCEPT_REFERRAL","transitions":["A referral destination: Waiting → Accepted","A referral destination: Declined → Accepted","A referral destination: Waiting → Cancelled","A notice: Nothing sent → Raised, unread"],"writes":""},{"name":"Decline the referral","event":"DECLINE_REFERRAL","transitions":["A referral destination: Waiting → Declined"],"writes":""},{"name":"The referrer takes the referral back","event":"RECORD_REFERRER_WITHDRAWAL","transitions":["A referral destination: Waiting → Withdrawn — a flag, not a state"],"writes":""},{"name":"Add a correction to a referral","event":"ADD_REFERRAL_CORRECTION","transitions":[],"writes":"Appends a correction note to a referral. Never overwrites."},{"name":"Record that a bed closer to home was looked for","event":"RECORD_LOCAL_BED_SOUGHT","transitions":[],"writes":"That a closer-to-home bed was looked for, on a referral."},{"name":"Start a bed search from a department","event":"RAISE_REFERRAL","transitions":["A movement: Movement created → Placement requested"],"writes":""},{"name":"Ask one or more wards","event":"REFER_TO_UNITS","transitions":["A movement: Placement requested → Destination review","A movement: Destination review → Destination review"],"writes":""},{"name":"A ward accepts in principle","event":"ACCEPT_IN_PRINCIPLE","transitions":["A movement: Destination review → Accepted, awaiting bed"],"writes":""},{"name":"A ward declines the bed search","event":"DECLINE","transitions":["A movement: Destination review → Destination review"],"writes":""},{"name":"Take back one ward's request","event":"WITHDRAW_WARD_REQUEST","transitions":["A movement: Destination review → Destination review"],"writes":""},{"name":"Undo a ward's acceptance","event":"WITHDRAW_ACCEPTANCE","transitions":["A movement: Accepted, awaiting bed → Destination review","A movement: Bed pulled → Destination review"],"writes":""},{"name":"Abandon the bed search","event":"WITHDRAW_REFERRAL","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","A movement: Handover ready → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Send them to a community team instead","event":"REFER_TO_COMMUNITY_TEAM","transitions":["A movement: Bed pulled → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"The department decides they need no bed","event":"RECORD_ED_OUTCOME","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Placement requested → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","A movement: Handover ready → Closed — did not proceed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Record that nobody referred them","event":"RECORD_NO_REFERRAL","transitions":[],"writes":"That nobody referred this patient, on a movement."},{"name":"Record an escalation","event":"RECORD_ESCALATION","transitions":[],"writes":"The wards tried and who was contacted, on a movement."},{"name":"Correct the record backwards","event":"STEP_BACK_STAGE","transitions":["A movement: Moving → Placement requested","A movement: Destination review → Placement requested","A movement: Accepted, awaiting bed → Placement requested","A movement: Bed pulled → Placement requested","A movement: Handover ready → Placement requested"],"writes":""},{"name":"Take the bed","event":"PULL_PATIENT","transitions":["A movement: Accepted, awaiting bed → Bed pulled","An admission: No admission → Held"],"writes":""},{"name":"Give the held bed back","event":"RELEASE_PULL","transitions":["A movement: Bed pulled → Accepted, awaiting bed","An admission: Held → Removed — not a state"],"writes":""},{"name":"Release a bed left held by a stopped journey","event":"RELEASE_HELD_BED","transitions":["An admission: Held → Removed — not a state"],"writes":""},{"name":"Record whether transport is needed","event":"RECORD_TRANSPORT_NEED","transitions":[],"writes":"Whether transport is needed, on a movement. This is what allows arrival with no journey."},{"name":"Book the transport","event":"BOOK_TRANSPORT","transitions":["A transport job: No job → Booked"],"writes":""},{"name":"Confirm handover is ready","event":"HANDOVER_READY","transitions":["A movement: Bed pulled → Handover ready"],"writes":""},{"name":"The crew accepts the job","event":"TRANSPORT_ACCEPTED","transitions":["A transport job: Booked → Crew accepted"],"writes":""},{"name":"The crew sets off","event":"TRANSPORT_EN_ROUTE","transitions":["A transport job: Crew accepted → En route"],"writes":""},{"name":"The patient is picked up","event":"PATIENT_COLLECTED","transitions":["A movement: Handover ready → Moving","A transport job: En route → Collected"],"writes":""},{"name":"The ward says they have arrived","event":"PATIENT_ARRIVED","transitions":["A movement: Moving → Arrived","A movement: Bed pulled → Arrived","A movement: Arrived → Closed — did not proceed","An admission: Held → Occupied","A transport job: Collected → Arrived"],"writes":""},{"name":"Cancel the transport before collection","event":"CANCEL_TRANSPORT","transitions":["A transport job: Booked → No job","A transport job: Crew accepted → No job","A transport job: En route → No job"],"writes":""},{"name":"Stop the journey after collection","event":"STOP_TRANSPORT","transitions":["A movement: Moving → Closed — did not proceed","A transport job: Collected → Stopped"],"writes":""},{"name":"Record that they have left the department","event":"RECORD_LEFT_DEPARTMENT","transitions":[],"writes":"The time they physically left the department, on a movement."},{"name":"Record an examination outcome","event":"RECORD_EXAMINATION","transitions":["A movement: Bed pulled → Closed — did not proceed","A movement: Placement requested → Closed — did not proceed","A movement: Destination review → Closed — did not proceed","A movement: Accepted, awaiting bed → Closed — did not proceed","An admission: Held → Removed — not a state","An examination: Not examined → Further examination ordered","An examination: Not examined → Inpatient order","An examination: Not examined → Community order, or revoked","An examination: Further examination ordered → Superseded"],"writes":""},{"name":"Change the legal status","event":"CHANGE_LEGAL_STATUS","transitions":["A patient's legal status: Voluntary → Referred for psychiatric examination","A patient's legal status: Referred for psychiatric examination → Detained awaiting examination","A patient's legal status: Detained awaiting examination → Involuntary inpatient","A patient's legal status: Involuntary inpatient → Voluntary"],"writes":"The Mental Health Act status, on a movement, plus a log entry. Triggers nothing."},{"name":"Mark a form as physically received","event":"RECORD_LEGAL_FORM_RECEIVED","transitions":["A legal form's receipt: Not recorded as received → Recorded as received"],"writes":"That the Form 1A physically arrived, on a movement."},{"name":"Undo a form receipt","event":"CORRECT_LEGAL_FORM_RECEIPT","transitions":["A legal form's receipt: Recorded as received → Not recorded as received"],"writes":"Clears that receipt and appends the correction."},{"name":"Record or extend a form's expiry","event":"RECORD_LEGAL_FORM_EXPIRY","transitions":["A legal form's receipt: Recorded as received → An expiry, typed by a clinician","A legal form's receipt: Not recorded as received → An expiry, typed by a clinician"],"writes":"Stores the typed expiry, clears any calculated legacy clock, appends basis/author/time history and, for a correction, its previous facts and reason."},{"name":"Correct the recorded gender","event":"RECORD_MOVEMENT_GENDER","transitions":[],"writes":"The recorded gender on a movement, plus a notice if a bed is involved."},{"name":"Record that the patient has left","event":"RECORD_LEAVING","transitions":["An admission: Occupied → Departed","A bed release: Confirmed → Discharged","A bed release: Expected → Discharged","A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag"],"writes":""},{"name":"Record that they are away at an ED","event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","transitions":["An admission: Occupied → Occupied"],"writes":""},{"name":"Record that they are back","event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","transitions":["An admission: Occupied → Occupied"],"writes":""},{"name":"Record a bed as on leave","event":"RECORD_LEAVE_BED","transitions":[],"writes":"Creates a leave record against a ward's bed."},{"name":"End a bed's leave","event":"END_LEAVE_BED","transitions":[],"writes":"Removes that leave record."},{"name":"Flag a bed as coming free","event":"FLAG_BED_RELEASE","transitions":["A bed release: Not flagged → Expected"],"writes":""},{"name":"Confirm the discharge is going ahead","event":"CONFIRM_BED_RELEASE","transitions":["A bed release: Expected → Confirmed"],"writes":""},{"name":"Put a confirmed discharge back to expected","event":"REVERT_BED_RELEASE","transitions":["A bed release: Confirmed → Expected"],"writes":""},{"name":"Flag a discharge as stuck","event":"BLOCK_BED_RELEASE","transitions":["A bed release: Expected → Stuck — a flag, not a stage","A bed release: Confirmed → Stuck — a flag, not a stage"],"writes":""},{"name":"Clear the stuck flag","event":"CLEAR_BED_RELEASE_BLOCK","transitions":["A bed release: Stuck — a flag, not a stage → Expected"],"writes":""},{"name":"Mark a bed as being made ready","event":"SET_BED_PREPARATION","transitions":["A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag","A bed release: Discharged → Being made ready — a flag"],"writes":""},{"name":"Restate how many beds a ward has","event":"CONFIRM_CAPACITY","transitions":[],"writes":"Sets a ward's allocatable count outright — see the two bed counts."},{"name":"Record what is restricting a ward's intake","event":"RECORD_WARD_INTAKE_CONSTRAINTS","transitions":[],"writes":"Replaces a ward's list of intake restrictions."},{"name":"Ask a ward to refresh its numbers","event":"REQUEST_CAPACITY_REFRESH","transitions":[],"writes":"Logs that somebody asked a ward to refresh. Moves no count."},{"name":"Change how urgent it is","event":"CHANGE_URGENCY","transitions":[],"writes":"The urgency level on a movement, plus a log entry. Re-sorts nothing."},{"name":"Flag it urgent","event":"FLAG_MOVEMENT_URGENT","transitions":[],"writes":"The urgent flag on a movement, and opens a history entry."},{"name":"Clear the urgent flag","event":"CLEAR_MOVEMENT_URGENT_FLAG","transitions":[],"writes":"Clears that flag and closes the history entry."},{"name":"Say what is holding this up","event":"RECORD_MOVEMENT_BLOCKER","transitions":[],"writes":"Free text describing what is holding a movement up."},{"name":"Say nothing is holding it up","event":"CLEAR_MOVEMENT_BLOCKER","transitions":[],"writes":"Writes the sentinel meaning nothing is holding it up."},{"name":"Mark a notice read","event":"MARK_NOTICE_READ","transitions":["A notice: Raised, unread → Read"],"writes":"Who read a notice, and when."},{"name":"Acknowledge an inbox row","event":"ACKNOWLEDGE_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Not showing → Showing","A row in the coordinator's inbox: Showing → Acknowledged"],"writes":"Logs that a coordinator has seen an inbox row."},{"name":"Tick off an inbox row","event":"COMPLETE_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Showing → Commitment completed"],"writes":"Appends completed role/time history without mutating patient, movement or unit facts."},{"name":"Reopen a completed row","event":"REOPEN_INBOX_ITEM","transitions":["A row in the coordinator's inbox: Commitment completed → Showing"],"writes":"Logs an inbox row as reopened, keeping that it was once done."},{"name":"Move the demonstration clock","event":"ADVANCE_CLOCK","transitions":[],"writes":"Adds the simulation clock offset; the provider also follows wall time at visible minute ticks."},{"name":"Reset the board","event":"RESET_SCENARIO","transitions":[],"writes":"Re-seeds all board state around the current visible time and clears the simulation offset, preserving the visible clock rather than always selecting the standard scenario."},{"name":"Switch to a different simulated night","event":"SET_SCENARIO","transitions":[],"writes":"Replaces the whole board with a different simulated night."},{"name":"Change the coordinator's settings","event":"SET_CONFIGURATION","transitions":[],"writes":"Applies the validated configuration or field merge atomically. It does not silently overwrite a conflicting baseline."},{"name":"Record a patient’s physical departure","event":"RECORD_PATIENT_DISCHARGE","transitions":[],"writes":"Departs the stay through the shared departure helper, adjusts resources, retains audit and a bounded step-undo record. A stale or inaccessible request refuses."},{"name":"Open an authorised discharge record","event":"OPEN_DISCHARGE_RECORD","transitions":[],"writes":"Records an accepted read audit event; changes no admission or bed figure."},{"name":"Record a governance review","event":"REVIEW_AUDIT_EVENT","transitions":[],"writes":"Appends a uniquely sequenced review and its audit record. A later review changes the expected count; UNDO_AUDIT_REVIEW is a separate recorded action."},{"name":"Divert a journey already under way","event":"RECORD_DIVERSION","transitions":[],"writes":"That a journey already under way was diverted, with a reason and where the patient went instead."},{"name":"Give back the bed a diverted patient was holding","event":"RELEASE_DIVERTED_BED","transitions":[],"writes":"Gives back the bed a diverted movement was still holding. Refused unless it really was diverted."},{"name":"Record how and when they are expected","event":"SET_ARRIVAL_DETAILS","transitions":[],"writes":"Stores arrival mode, optional tracking and estimate, retaining first-record author/time and later update provenance. Keeps the pull-expiry timer. An already-late estimate can send one-time ED/ward notices; it reserves no bed and moves no stage."},{"name":"Work out whether an expected arrival is late","event":"EVALUATE_ARRIVAL_LATENESS","transitions":[],"writes":"When late, stamps the movement and sends ED and ward notices; changes no stage."},{"name":"Mark somebody as a step-down candidate","event":"SET_STEP_DOWN_CANDIDATE","transitions":[],"writes":"Whether this admission is a candidate to step down to a lower level of care."},{"name":"Record what is holding a discharge up","event":"SET_DISCHARGE_BARRIER","transitions":[],"writes":"Stores a listed discharge barrier or clears it; no seven-day reducer gate and no bed count change."},{"name":"Record clinically ready and why not gone","event":"SET_CLINICALLY_READY","transitions":[],"writes":"Stores the day an on-ward patient became clinically ready and one listed reason they have not gone, or clears both (Josh, 9 Nov 2026); no bed count change."},{"name":"Set or move the expected discharge date","event":"UPDATE_EXPECTED_DISCHARGE","transitions":[],"writes":"Sets the expected time, increments date-move count only when an existing date differs, and stamps when. A ward setter is Nurse in charge; coordinator setter is null. Pending linked bed-release dates follow; completed release dates stay historical."},{"name":"Record care journey fact","event":"RECORD_ADMISSION_CARE","transitions":["A movement: Movement created → Arrived","An admission: Occupied → Departed","An admission: No admission → Occupied","A bed release: Confirmed → Discharged","A bed release: Expected → Discharged","A bed release: Expected → Being made ready — a flag","A bed release: Confirmed → Being made ready — a flag"],"writes":""},{"name":"Record follow-up arrangement","event":"RECORD_ADMISSION_FOLLOW_UP","transitions":[],"writes":"Follow-up contact arrangements recorded against an admission on the discharge board."},{"name":"Record medical clearance against the movement","event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","transitions":[],"writes":"Replaces clearance on the movement, matching linked referral and matching sibling movements. Positive fresh clearance records resumedAt for satisfied pauses; it does not restore released resources."},{"name":"Attach a file to the movement","event":"UPLOAD_PATIENT_FORM","transitions":[],"writes":"Appends generated document id, formName, fileType, sizeBytes and role/time metadata; no file body or original filename is retained."},{"name":"Record that a legal form was written","event":"RECORD_LEGAL_FORM_WRITTEN","transitions":[],"writes":"Stores current paper facts and history, preserves matching same-form paper facts on a time edit, and clears a calculated legacy clock. A different form clears the old receipt."},{"name":"Record that a form was continued","event":"RECORD_LEGAL_FORM_CONTINUATION","transitions":[],"writes":"The continued form and clinician-typed times; clears the old legal clock."},{"name":"Record a typed country Form 1A extension","event":"RECORD_COUNTRY_EXTENSION","transitions":[],"writes":"For eligible country Form1A, records typed paper expiry through the ordinary expiry handler; computes no statutory deadline."},{"name":"Flag that the ward's authority does not match","event":"FLAG_LEGAL_MISMATCH","transitions":[],"writes":"That a ward's authority does not match this person's legal status, in one of two shapes."},{"name":"Start a forty-eight-hour or seven-day clock by hand","event":"RAISE_EXPECT_FLAG","transitions":[],"writes":"Records the current manually raised flag. Replacing a previously cleared flag keeps that prior record in expectFlagHistory; no automatic state transition is implied."},{"name":"Clear that hand-set clock","event":"CLEAR_EXPECT_FLAG","transitions":[],"writes":"Stamps clearedAt and clearedBy on the flag; it is retained rather than removed."},{"name":"Give the bed back and reopen the search, in one act","event":"RELEASE_AND_REOPEN_SEARCH","transitions":[],"writes":"Returns any matching held bed, clears acceptance/hold/requests/transport and moves to placement_requested. Logs pull release when held, otherwise acceptance withdrawal."},{"name":"Confirm the ward's morning count","event":"CONFIRM_MORNING_ROLLUP","transitions":[],"writes":"A ward confirming its own morning count of expected discharges."},{"name":"Send a message to a ward","event":"SEND_WARD_BUZZ","transitions":[],"writes":"Appends a refresh request with a listed message and optional urgency; blank messages refuse and nothing is sent externally."},{"name":"Sweep the beds held during leave","event":"EVALUATE_LEAVE_BED_WARNINGS","transitions":[],"writes":"For each leave bed over the open-warning threshold that has not been warned, records openWarningAt and sends a ward notice. It does not release the bed or move capacity."},{"name":"Log a repatriation arranged by phone","event":"RECORD_REPATRIATION","transitions":[],"writes":"Creates or updates the telephone plan. First agreement creates an open placement_requested return movement linked to the source stay; it does not itself book transport or transfer the patient."},{"name":"Sign off the shift handover","event":"RECORD_HANDOVER_SIGN_OFF","transitions":[],"writes":"Appends role/time plus the selected ward id or network flag. It records no personal name/note and makes no claim that a sheet was sent."},{"name":"Record that a team was contacted","event":"RECORD_CLINICAL_CONTACT","transitions":[],"writes":"Which community team was contacted, when, and by which role."},{"name":"Send a network-wide alert","event":"DISPATCH_BROADCAST_ALERT","transitions":[],"writes":"A network-wide alert, active, with nobody yet acknowledging it. Belongs to no patient."},{"name":"Acknowledge a network-wide alert","event":"ACKNOWLEDGE_BROADCAST_ALERT","transitions":[],"writes":"One more unit on the alert's acknowledged list."},{"name":"Stand down a network-wide alert","event":"STAND_DOWN_BROADCAST_ALERT","transitions":[],"writes":"The alert marked stood down, with the time and the role."}]},"catalogue":[{"event":"RECORD_ADMISSION_CARE","roles":["ward","coordinator","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":20},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":214},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1466}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ADMISSION_FOLLOW_UP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":21},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":214},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1465}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_PATIENT_DISCHARGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":22},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1464}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"UPDATE_EXPECTED_DISCHARGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":23},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":226},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1658}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"OPEN_DISCHARGE_RECORD","roles":["coordinator","ward","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":25},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":179},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1461}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REVIEW_AUDIT_EVENT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":26},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":132},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1462}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RAISE_REFERRAL","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":37},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1459},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":92}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_EXAMINATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":38},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":553},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1758}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_MEDICAL_CLEARANCE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":39},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":171},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1749}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ARRIVED_IN_DEPARTMENT","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":43},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":220},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1750}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_TRANSPORT_NEED","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":52},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":233},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1751}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_RECEIVED","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":59},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":438},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1432}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CORRECT_LEGAL_FORM_RECEIPT","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":65},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1739},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":429}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_EXPIRY","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":75},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1363},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":52},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1755}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_MOVEMENT_GENDER","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":80},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":484},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1756}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_NO_REFERRAL","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":81},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":301},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1752}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ED_OUTCOME","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":84},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":332},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1753}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REFER_TO_UNITS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":85},"sources":[{"path":"src/components/ward-management/ward-flow-overridable-events.ts","line":24},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1741},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":675}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACCEPT_IN_PRINCIPLE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":86},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":897},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":108}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PULL_PATIENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":90},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":79},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":701}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"DECLINE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":91},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1792},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":240}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"HANDOVER_READY","roles":["ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":94},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1887},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":85}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TRANSPORT_ACCEPTED","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":95},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1888},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":128}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TRANSPORT_EN_ROUTE","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":96},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1889},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":178}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PATIENT_COLLECTED","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":97},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1890},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":229},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":11}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"PATIENT_ARRIVED","roles":["officer","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":98},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1489},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":315}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_CAPACITY","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":100},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":300},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1660}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_WARD_INTAKE_CONSTRAINTS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":103},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":771},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1765}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_INTAKE_WINDOW","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":105},"sources":[{"path":"src/components/ward-management/ward-flow-intake-window-events.ts","line":15},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1832}],"status":"modelled","model":{"subject":"One ward's intake window for tonight (Unit.intakeWindow)","before":"Ward has no intake window, or has one","after":"intake sets from, to, at and by; intake null removes the window","payload":["unitId; actingUnitId; intake {from, to} as whole-minute instants, or null to clear","role and now"],"scope":"Ward for itself (actingUnitId must equal unitId) or coordinator. EVENT_ROLE alone is not place authority.","guards":["A ward acting for another ward is refused; unknown unit refused","Clearing needs an existing window; start within today's intake day; end after start and within a day"],"effects":["Information only: moves no counts, blocks no referral and ranks no ward","Shown on Capacity's Tonight's intake windows card and the ward's own control"],"sources":[{"path":"src/components/ward-management/ward-flow-intake-window-events.ts","line":23,"sha256":"684c43bea941ad6f148ed493ee263dc60d9d21199df62f32203403047e6b91de"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":105,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":607,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"}],"tests":["tests/ward-intake-window.test.ts"]},"reason":"Source-reviewed command model: sets or clears one ward's intake hours for tonight; information only."},{"event":"RECORD_ESCALATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":106},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1069},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1772}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADVANCE_CLOCK","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":107},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1703}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RESET_SCENARIO","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":108},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1481}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_SCENARIO","roles":["demo"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":109},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1481}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_CONFIGURATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":111},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1714}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CHANGE_URGENCY","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":114},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1745},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1178}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CHANGE_LEGAL_STATUS","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":115},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1746},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1219}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_PULL","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":116},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":493},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1881}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EXTEND_PULL","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":118},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":454},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1880}],"status":"modelled","model":{"subject":"One open movement whose bed is pulled now","before":"A pulled bed with its Pull time limit","after":"The same pulled bed with a later Pull time limit and one more pullExtensions entry","payload":["movementId; minutes (60, 120 or 240 from PULL_HOLD_EXTENSION_MINUTES); actingUnitId for a ward caller; now; role."],"scope":"coordinator and ward in the role table; a ward acts only for the unit holding the bed (claim, not proof).","guards":["The movement exists, is not closed, is at stage pulled with a Pull time limit, and its patient has not been collected.","minutes is on the fixed list.","The new limit stays within PULL_HOLD_MAX_TOTAL_MINUTES (12 hours) of the pull; a lapsed limit is extended from now."],"effects":["Moves Movement.pullExpiresAt later and appends { at, by, minutes } to Movement.pullExtensions; no bed count, stage or notice changes. PULL_PATIENT clears the list on a new pull."],"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":454,"sha256":"d03d664cb1f66c71f417fab7848bfbb308127dcb374dea22ffdeb14223d5e948"},{"path":"src/components/ward-management/ward-bed-hold-extension.ts","line":48,"sha256":"668e77dbccc3fcaa5409abea768e539bb949659a919c68a81b0bfb4578cd04dc"}],"tests":["tests/ward-extend-pull.test.ts"]},"reason":"Reviewed command model (feature 11, 9 Nov 2026): the ward or coordinator adds a fixed amount to a pulled bed's Pull time limit."},{"event":"BOOK_TRANSPORT","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":155},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1892},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":654}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CANCEL_TRANSPORT","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":177},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1893},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":840}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STOP_TRANSPORT","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":187},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1894},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1018}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_TRANSPORT_CAD","roles":["ed","ward","community","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":190},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1897},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1131},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":30}],"status":"modelled","model":{"subject":"A movement’s current transport job","before":"Live, unarrived, uncancelled transport with no nonblank CAD number","after":"Same job carrying a trimmed CAD number and cadAdded time/role","payload":["movementId; cadNumber is required text, trimmed after validation","actingUnitId required in practice for ward callers; role and now"],"scope":"ED, ward, community, coordinator or officer in EVENT_ROLE. Ward acts only for the sending stay/ward; shared scope also restricts ED to origin ED and community to the sending team. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Existing open movement and live job; no existing nonblank CAD number","Reject blank or placeholder CAD values; ward’s actingUnitId must identify the sending ward"],"effects":["Updates only movement.transport.cadNumber and cadAdded; does not dispatch, accept or advance the job"],"sources":[{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1126,"sha256":"573cd3b2155de245658d45a432a45fd526cd829402d6b9c6b77ad8dc63f904cc"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":191,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-transport-collection-events.ts","line":30,"sha256":"1ebf665a65645eb14f53647d07db90bef0a947b2a7e298f2b6f203b7c78d3496"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-transport-cad-to-follow.test.ts"]},"reason":"Source-reviewed command model: Same job carrying a trimmed CAD number and cadAdded time/role."},{"event":"RELEASE_HELD_BED","roles":["coordinator","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":192},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":619},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1882}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_DIVERSION","roles":["officer","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":194},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1096},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1773}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_DIVERTED_BED","roles":["coordinator","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":196},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":687},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1883}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REFER_TO_COMMUNITY_TEAM","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":197},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1740},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":477}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEFT_DEPARTMENT","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":198},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":533},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1757}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_CREW_TIMES","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":200},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1373},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1786}],"status":"modelled","model":{"subject":"One ED-origin movement whose arrivalMode is police or ambulance","before":"crewArrivedAt, crewHandedOverAt and crewReleasedAt absent, or some already typed","after":"Each typed time is set on the movement; a time left out keeps what was recorded","payload":["movementId; optional crewArrivedAt, crewHandedOverAt and crewReleasedAt (typed clock times)","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist, have come through an emergency department and have arrivalMode police or ambulance","A finite current time; at least one time; each typed time finite, not later than now and within the last 24 hours","The recorded set must run in order: arrived, handed over, released"],"effects":["Sets only the typed times; never clears, fills in or derives a time","Does not change the stage, beds, queue order or any legal figure; no target, countdown or overdue state"],"sources":[{"path":"src/components/ward-management/ward-crew-handover.ts","line":128,"sha256":"e03c42feb71f228fbb2b07f987ddee2dfce355bcf900136aa81ef7369906ec2a"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1374,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1787,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":201,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-crew-times.test.ts","tests/ward-ed-crew-times.dom.test.tsx","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (item 9, D-93): records a police or ambulance crew's typed times on an ED arrival; nothing is filled in or worked out."},{"event":"RECORD_ARRIVAL_MODE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":202},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1376},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1787}],"status":"modelled","model":{"subject":"One ED-origin movement","before":"arrivalMode absent, self, or the other crew mode","after":"Movement.arrivalMode = police or ambulance; recorded crew times are kept","payload":["movementId; arrivalMode (police or ambulance)","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist and have come through an emergency department","arrivalMode must be police or ambulance","The same mode again changes nothing"],"effects":["Sets only arrivalMode; the record then offers the crew's three typed times (RECORD_CREW_TIMES)","Does not change the stage, beds, queue order, crew times or any legal figure"],"sources":[{"path":"src/components/ward-management/ward-crew-handover.ts","line":153,"sha256":"e03c42feb71f228fbb2b07f987ddee2dfce355bcf900136aa81ef7369906ec2a"},{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1377,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1788,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":203,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-crew-times.test.ts","tests/ward-ed-crew-times.dom.test.tsx","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (D-141, 11 Nov 2026): marks an ED arrival \"Brought by: Police\" or \"Ambulance\" so its crew times can be typed; a fixed two-value choice, no typed text."},{"event":"FLAG_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":205},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":374},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1661}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":206},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":468},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1662}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REVERT_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":210},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":507},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1663}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"BLOCK_BED_RELEASE","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":211},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":546},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1664}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_BED_RELEASE_BLOCK","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":212},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":586},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1665}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_BED_PREPARATION","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":213},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":623},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1666}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEAVE_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":214},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1352},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":369},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1766}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"END_LEAVE_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":215},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":658},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1667}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_ABSENT_WITHOUT_LEAVE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":219},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1353},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":424},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1767}],"status":"modelled","model":{"subject":"An occupied admission and its held leave-bed record","before":"Occupied stay, not away at ED, with no recorded absence","after":"Leave-bed record carries absentWithoutLeave {since,steps:[]}; stay remains occupied","payload":["admissionId; actingUnitId must match the stay’s ward; role and now"],"scope":"Ward or coordinator; every caller supplies the admission ward claim. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Stay must exist and be occupied","Reject another ward, existing absence, or a stay recorded away at an ED"],"effects":["Updates an existing leave-bed record or creates one with expectedReturn=now; preserves existing leave details","Keeps the admission and bed occupancy; return is recorded separately through END_LEAVE_BED"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":424,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":221,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1396,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts","tests/ward-away-from-ward-exclusive.test.ts"]},"reason":"Source-reviewed command model: Leave-bed record carries absentWithoutLeave {since,steps:[]}; stay remains occupied."},{"event":"RECORD_ABSENCE_STEP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":220},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1354},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":476},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1768}],"status":"modelled","model":{"subject":"An existing absence without leave","before":"Absence has no record of this listed missing-person step","after":"Same absence with one timed step appended","payload":["admissionId; actingUnitId; step from ABSENCE_STEPS; role and now"],"scope":"Ward or coordinator; actingUnitId must equal the absence record’s unit. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["An absence record must exist for the admission","Step must be listed, not already recorded, and not earlier than absence.since"],"effects":["Appends {step,at} to absentWithoutLeave.steps; does not end absence, release a bed or contact anyone"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":476,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":222,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1405,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Same absence with one timed step appended."},{"event":"RECORD_COMMUNITY_TREATMENT_ORDER","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":221},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1364},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":155},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1769}],"status":"modelled","model":{"subject":"A patient’s recorded community treatment order","before":"Patient exists with no current order, no occupied stay and no open non-arrived placement","after":"Form 5A recorded with time and desk label; any ended order retained in earlier history","payload":["patientId; role and now; no user-supplied lapse time"],"scope":"Community or coordinator. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Reject missing patient or a current order without endedAt","Reject an occupied admission or open movement whose stage is not arrived; waitlisted/pulled stays alone do not block"],"effects":["Writes patient.communityTreatmentOrder; moves prior ended order and its earlier history into earlier","No automatic expiry, placement, legal-status change or bed move","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window, filed against the patient record."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":155,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":223,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1414,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Form 5A recorded with time and desk label; any ended order retained in earlier history."},{"event":"END_COMMUNITY_TREATMENT_ORDER","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":222},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":671},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1668}],"status":"modelled","model":{"subject":"A patient’s current community treatment order","before":"Order exists and has no endedAt","after":"Same order retained with endedAt=now","payload":["patientId; role and now"],"scope":"Community or coordinator. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient and an unended order must exist; repeat ending is refused"],"effects":["Adds endedAt; retains the order and earlier history; no timer or automatic end","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window, filed against the patient record."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":669,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":224,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1421,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-absence-and-cto.test.ts"]},"reason":"Source-reviewed command model: Same order retained with endedAt=now."},{"event":"RECORD_LEAVING","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":226},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1347},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":125},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1487}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"MARK_TRANSPORT_COLLECTED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":228},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1348},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":224},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1760}],"status":"modelled","model":{"subject":"One departed admission's waitingForTransport mark","before":"Admission departed with waitingForTransport (left the ward, transport still to come)","after":"waitingForTransport removed; the person leaves the Waiting for transport list","payload":["admissionId; actingUnitId","role and finite now"],"scope":"Ward or coordinator; actingUnitId must equal the admission's unit. EVENT_ROLE alone is not place authority.","guards":["Non-finite time refused","Unknown admission, another unit's admission, or an admission not waiting for transport refused"],"effects":["Clears the wait only: the bed was already freed when they left the ward (D-115 Ready count unchanged)"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":224,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":229,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-left-ward.ts","line":29,"sha256":"e1502ae05ba4ab5b28c4d8cf330a7ad579d7420b7e90f3bfaaab6b382b78eee0"}],"tests":["tests/ward-left-ward-transport.test.ts"]},"reason":"Source-reviewed command model: ends a departed person's wait for transport; no bed figure moves."},{"event":"RECORD_AWAY_AT_EMERGENCY_DEPARTMENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":240},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1349},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":260},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1762}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_RETURNED_FROM_EMERGENCY_DEPARTMENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":241},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1350},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":296},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1763}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_STAY_DISCHARGE_BLOCKER","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":244},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1351},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":316},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1764}],"status":"modelled","model":{"subject":"An occupied admission and its pending bed releases","before":"Occupied stay with no blocker or another recorded blocker","after":"Stay blockReason and linked nondischarged releases carry the chosen blocker","payload":["admissionId; actingUnitId; blocker from BED_RELEASE_BLOCKERS; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal admission.unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Admission must exist, be occupied and match actingUnitId","blocker must be a nonempty member of BED_RELEASE_BLOCKERS"],"effects":["Replaces admission.blockReason","For all linked releases not discharged, updates blocker, blockedBy, blockerRecordedAt and confirmedAt; moves no capacity figure or bed state"],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":316,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":246,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1856,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-stay-discharge-blocker.test.ts"]},"reason":"Source-reviewed command model: Stay blockReason and linked nondischarged releases carry the chosen blocker."},{"event":"CLEAR_STAY_DISCHARGE_BLOCKER","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":245},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":249},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1659}],"status":"modelled","model":{"subject":"An admission’s current discharge blocker","before":"Admission carries a non-null blockReason","after":"Admission blockReason=null; clearance retained on matching pending release or admission","payload":["admissionId; actingUnitId; optional reason from DISCHARGE_DELAY_CLEAR_REASONS; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal admission.unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Admission and a current blocker must exist","If reason supplied it must be listed; no default reason is invented"],"effects":["Clears the stay blocker","If a same-ward nondischarged release has the same blocker, clears its blocker/blockedBy and appends clearance history there; otherwise appends stayBlockClearances","Does not release the bed or change admission state"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":247,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":247,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1873,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-stay-discharge-blocker.test.ts"]},"reason":"Source-reviewed command model: Admission blockReason=null; clearance retained on matching pending release or admission."},{"event":"RECORD_OBSERVATION_LEVEL","roles":["ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":248},"sources":[{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1789}],"status":"modelled","model":{"subject":"An open movement or occupied admission and its agreeing live counterpart","before":"Target has its recorded observation and retained change-count token","after":"Named target and any agreeing linked open counterpart carry the new observation and append from/to history","payload":["target is {kind:movement,movementId,actingUnitId?} or {kind:admission,admissionId,actingUnitId}","observation is a valid Observation; expected editing token required once the target has prior changes; role and now"],"scope":"EVENT_ROLE applies. Ward movement updates require its accepted ward; admission target requires its ward claim and refuses ED callers. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Valid observation; target exists; movement open or admission bed occupied","New value must differ; token must match and linked records must agree; missing token refused after first recorded change","Seeded links without matching observations stay unlinked rather than silently overwriting the other record","Accepted edits require a safe retained sequence allocator below Number.MAX_SAFE_INTEGER; exhaustion refuses before writing.","Accepted observation sequence is reducer-generated from retained movement/admission history, independent of the audit counter; restore permits missing legacy metadata or positive safe integers and refuses zero, fractions and unsafe values."],"effects":["Updates observation and appends {at,sequence,from,to} on each linked record","No new placement or capacity allocation; staffing eligibility remains a separate pull check","Accepted observation history entries also carry sequence=max(all retained movement/admission observation sequences,0)+1; an agreeing linked counterpart receives that same edit sequence. PATIENT_ARRIVED uses retained accepted order before legacy minute timestamps. Genuinely unordered legacy ties retain the previous fallback; no historical order is invented.","An accepted edit marks its audit decision accepted with no reason code."],"sources":[{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33,"sha256":"7e10fb51b2f76135bdfacbcd7643473e686dd0eb797e9e7906e427cdf26563cd"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":250,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-observation-events.ts","line":33,"sha256":"7e10fb51b2f76135bdfacbcd7643473e686dd0eb797e9e7906e427cdf26563cd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-observation.ts","line":48,"sha256":"b714525f0d4c6d18d050f9a3600f38c8de4e9a013595a77844c5c492fbdc2e3c"}],"tests":["tests/ward-observation-levels.test.ts","tests/ward-observation-expected-token.test.ts","tests/ward-audit-s2-observation-join.test.ts","tests/ward-consolidated-domain-20261104.test.ts"]},"reason":"Source-reviewed command model: Named target and any agreeing linked open counterpart carry the new observation and append from/to history."},{"event":"RECORD_MOVEMENT_BLOCKER","roles":["ed","community","ward","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":288},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":714},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1761}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_MOVEMENT_BLOCKER","roles":["ed","community","ward","coordinator","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":295},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2030}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"FLAG_MOVEMENT_TURNAROUND_PRIORITY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":316},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1917}],"status":"modelled","model":{"subject":"A waiting movement’s receiving-unit preference","before":"Waiting unplaced movement with an open suitable ward request and current turnaround source","after":"Same movement carries {unitId,flaggedAt,source}; no bed is promised","payload":["movementId; unitId; optional source cld or departure; finite now; role"],"scope":"Coordinator only, within its shared authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Unit and target must exist; current source must be CLD-ready occupied criteria with feature enabled, or confirmed unblocked departure on an occupied stay","Clinical/legal gates must pass (allocation/freshness and the helper’s locked-bed security exception are separate); open request must match selected unit","Movement must be open, not arrived and unaccepted","Same unit/source preference already recorded is refused"],"effects":["Sets turnaroundPriority only; does not hold capacity, discharge anybody, accept a request or advance stage","Selectors later hide a preference whose original readiness source no longer qualifies"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1907,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":318,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":708,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-turnaround-priority.ts","line":65,"sha256":"f4a062f776b7e676eb045bd32daf9aac4a636392dab5599a571687cbf47db4b8"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-cld-turnaround-priority.test.ts"]},"reason":"Source-reviewed command model: Same movement carries {unitId,flaggedAt,source}; no bed is promised."},{"event":"FLAG_REFERRAL_TURNAROUND_PRIORITY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":317},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1918}],"status":"modelled","model":{"subject":"A waiting referral’s receiving-unit preference","before":"Waiting unplaced referral with an open suitable ward request and current turnaround source","after":"Same referral carries {unitId,flaggedAt,source}; no bed is promised","payload":["referralId; unitId; optional source cld or departure; finite now; role"],"scope":"Coordinator only, within its shared authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Unit and target must exist; current source must be CLD-ready occupied criteria with feature enabled, or confirmed unblocked departure on an occupied stay","Clinical/legal gates must pass (allocation/freshness and the helper’s locked-bed security exception are separate); open request must match selected unit","Referral must still be queued with an unwithdrawn ward request; no linked movement may exist","Same unit/source preference already recorded is refused"],"effects":["Sets turnaroundPriority only; does not hold capacity, discharge anybody, accept a request or advance stage","Selectors later hide a preference whose original readiness source no longer qualifies"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1908,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":319,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":717,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-turnaround-priority.ts","line":65,"sha256":"f4a062f776b7e676eb045bd32daf9aac4a636392dab5599a571687cbf47db4b8"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-cld-turnaround-priority.test.ts"]},"reason":"Source-reviewed command model: Same referral carries {unitId,flaggedAt,source}; no bed is promised."},{"event":"MARK_REFERRAL_OPENED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":320},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1799},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":17}],"status":"modelled","model":{"subject":"One addressed ward’s copy of a referral","before":"Ward copy exists without openedAt","after":"Same copy has openedAt=now; answer state unchanged","payload":["referralId; unitId; actingUnitId; role and now"],"scope":"Ward or coordinator; actingUnitId must equal unitId even for the coordinator. Named copy preferred, otherwise an unnamed ward copy. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral and an applicable ward copy must exist","Reject mismatched actingUnitId and a copy already stamped opened"],"effects":["Stamps openedAt once; does not answer, stop the decision clock or alter decidedAt"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":102,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":322,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":732,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts"]},"reason":"Source-reviewed command model: Same copy has openedAt=now; answer state unchanged."},{"event":"REQUEST_REFERRAL_INFORMATION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":321},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1800},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":118}],"status":"modelled","model":{"subject":"One awaiting ward copy’s information checklist","before":"Ward copy queued and unwithdrawn","after":"New listed needs appended; existing open needs retained without duplication","payload":["referralId; unitId; needs is a nonempty list from REFERRAL_INFORMATION_NEEDS","actingUnitId optional in type but required for ward’s own-unit check; role and now"],"scope":"Ward for its own copy or coordinator; named copy preferred over unnamed. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Applicable ward copy must still await answer","Every need must be listed; at least one deduplicated need must not already be open"],"effects":["Appends {need,at,by} to informationNeeds; met historical needs can be requested again","No referral decision or decision-clock change"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":118,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":323,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":745,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts"]},"reason":"Source-reviewed command model: New listed needs appended; existing open needs retained without duplication."},{"event":"MARK_REFERRAL_INFORMATION_MET","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":323},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1801},{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":55}],"status":"modelled","model":{"subject":"One information category requested by one or all current requesting wards","before":"At least one requested listed need remains unmet on a queued, unwithdrawn ward copy","after":"Selected open request(s) stamped metAt and metBy; checklist history retained","payload":["referralId; need from REFERRAL_INFORMATION_NEED_IDS","Exactly one target shape: wardUnitId string, or allRequestingWards:true; role and now"],"scope":"Sending ED/community/ward desk or coordinator. Ward requires referral.source=psychiatric_ward; shared boundary verifies the stored sender rather than destination ward identity. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Reject invalid/ambiguous target or off-list need","Named target requires awaiting copy and an unmet need; all-target needs at least one current matching request"],"effects":["Named target stamps its first unmet matching entry; all-target stamps matching unmet entries on every awaiting ward copy","Does not answer any ward or stop its decision clock"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-followup-events.ts","line":148,"sha256":"a7980fe9e58a4d1fcc774d48dfeb4e2673b66d0624fef24d00fae7b1fcf32039"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":325,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":756,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-referral-followup.test.ts","tests/ward-sender-information-supplied.test.ts"]},"reason":"Source-reviewed command model: Selected open request(s) stamped metAt and metBy; checklist history retained."},{"event":"ASSIGN_REFERRAL","roles":["coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":326},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1807},{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":21}],"status":"modelled","model":{"subject":"The desk chasing a front-door referral","before":"Referral not accepted or fully withdrawn; owner desk differs or is absent","after":"ownerHistory appended; its last owner is the current chasing desk","payload":["referralId; owner from REFERRAL_OWNER_DESKS; role and finite now"],"scope":"Coordinator may assign any listed owner desk; ED/community may take only for their own role. Not a lock on other permitted actions. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must exist and not be accepted or fully withdrawn; the follow-up helper does not require a queued arm","Owner must be listed; reject another desk’s self-assignment and same current owner"],"effects":["Appends {owner,at,by}; destinations, answers and decision clock unchanged"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":44,"sha256":"13b724abff93f6ec86c6b232d9ea7f00e66609f8297122508a7976198f8ce19e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":328,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":780,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-owner-and-calls.test.ts","tests/ward-referral-owner-and-calls-scope.test.ts"]},"reason":"Source-reviewed command model: ownerHistory appended; its last owner is the current chasing desk."},{"event":"LOG_REFERRAL_CONTACT","roles":["coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":327},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1808},{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":67}],"status":"modelled","model":{"subject":"A front-door referral’s call log","before":"Referral not accepted or fully withdrawn, with prior contact history or none","after":"New checked contact/outcome entry appended","payload":["referralId; contact is psychiatric_ward/unitId, community_team/teamId, or referrer","outcome from REFERRAL_CONTACT_OUTCOMES; role and finite now"],"scope":"Coordinator, ED or community, subject to record/place scope; contact names the called place, not acting authority. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must exist and not be accepted or fully withdrawn; the follow-up helper does not require a queued arm","Contact kind and outcome must be listed; named ward/team must exist"],"effects":["Appends checked {contact,outcome,at,by}; drops unrecognised contact fields","A logged call does not decide referral or pause its decision clock"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-owner-events.ts","line":67,"sha256":"13b724abff93f6ec86c6b232d9ea7f00e66609f8297122508a7976198f8ce19e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":329,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":795,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-owner-and-calls.test.ts"]},"reason":"Source-reviewed command model: New checked contact/outcome entry appended."},{"event":"RECORD_REFERRAL_COMMITMENT","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":329},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1815},{"path":"src/components/ward-management/ward-flow-referral-commitment-events.ts","line":24}],"status":"modelled","model":{"subject":"One awaiting ward copy’s response commitment","before":"Open referral awaiting this ward, commitment absent or not resolved","after":"Checked step/promise/callback entry appended without answering referral","payload":["referralId; unitId; actingUnitId for ward; role and finite now","step and/or nextCallbackAt required; promisedFor required only with step=promised","promisedFor and nextCallbackAt must be finite and at or after now"],"scope":"Coordinator records any listed step/callback; ward only its own acknowledged/promised step. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward and addressed, queued, unwithdrawn copy on open referral","Listed steps move forward; repeated response_requested and promised allowed; resolved blocks further entries","Ward cannot make callback-only entry; promise time refused on other steps"],"effects":["Appends commitment with unitId, at and desk label; keeps earlier entries","Does not change state, decidedAt, clocks or automatically call anyone"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-commitment-events.ts","line":24,"sha256":"a304422664462b4413fa82c9ae19d0425aef260d8ccf65239ca708d722b08994"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":331,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":812,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"},{"path":"src/components/ward-management/referrals/referral-commitments-model.ts","line":73,"sha256":"b8ad888efb64576aa225df86d86b58d9e31306fda7791fe9815a00a4c6c82325"}],"tests":["tests/ward-referral-commitments.test.ts"]},"reason":"Source-reviewed command model: Checked step/promise/callback entry appended without answering referral."},{"event":"ASK_MORE_WARDS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":330},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1821},{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24}],"status":"modelled","model":{"subject":"An open community referral’s addressed wards","before":"Open community referral has named ward request(s) with reusable bed requirements","after":"Additional named wards queued, preserving existing destinations","payload":["referralId; nonempty distinct unitIds named by coordinator; role and now"],"scope":"Coordinator only; no automatic ranking or suggestion. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Referral must be community source and not closed/withdrawn","Existing ward request must name a ward; any unnamed ward arm blocks expansion","Each new unit must exist, not have been asked before, be open and currently eligible","Awaiting existing wards plus additions must stay within parallelReferralCap"],"effects":["Copies original ward bed requirements into each new queued arm; stamps referredAt and addedBy","Does not answer existing arms, create a movement or reserve a bed"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24,"sha256":"d3c249774b280ef5c1b57d1f4c7575d2dce9ef721ec1f85ed2ac2c53e7874d08"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":332,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-referral-ask-events.ts","line":24,"sha256":"d3c249774b280ef5c1b57d1f4c7575d2dce9ef721ec1f85ed2ac2c53e7874d08"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/referrals/referral-owner-and-calls-model.ts","line":28,"sha256":"783d84f0aa1cc62b1f388bfabaa637c851ef47570a4ebfefc94406d550e4bde3"}],"tests":["tests/ward-referral-ask-more-wards.test.ts"]},"reason":"Source-reviewed command model: Additional named wards queued, preserving existing destinations."},{"event":"CLOSE_WARD_TO_ADMISSIONS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":333},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1828},{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":17}],"status":"modelled","model":{"subject":"A ward’s admissions closure","before":"Known ward open to admissions","after":"isClosed=true with admissionsClosure reason/time/desk and optional expected reopening","payload":["unitId; reason from WARD_CLOSURE_REASONS; optional until","actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist and not already be closed","Listed reason; supplied until later than now and no farther than largest WARD_REOPEN_AFTER_HOURS choice"],"effects":["Writes closure record; existing holds/acceptances and bed figures remain","Eligibility/shortlists refuse new admissions; until is a prompt, never automatic reopening"],"sources":[{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":44,"sha256":"2fd18c518e21b86c1cda4b425c6cf5163251b409d3cddffd1f8a3b225f5142ef"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":335,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":831,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-closure.test.ts"]},"reason":"Source-reviewed command model: isClosed=true with admissionsClosure reason/time/desk and optional expected reopening."},{"event":"REOPEN_WARD_TO_ADMISSIONS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":334},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1829},{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":72}],"status":"modelled","model":{"subject":"A ward’s admissions closure","before":"Known ward marked closed","after":"isClosed=false; admissionsClosure removed","payload":["unitId; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist and be closed"],"effects":["Removes closure record rather than advancing any waiting move; changes no bed count","Reopening is a person’s action; old closure-linked review/transition records are no longer current"],"sources":[{"path":"src/components/ward-management/ward-flow-ward-closure-events.ts","line":72,"sha256":"2fd18c518e21b86c1cda4b425c6cf5163251b409d3cddffd1f8a3b225f5142ef"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":336,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":840,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-closure.test.ts","tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: isClosed=false; admissionsClosure removed."},{"event":"SET_BED_CLOSED","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":336},"sources":[{"path":"src/components/ward-management/ward-flow-bed-closure-events.ts","line":24},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1835}],"status":"modelled","model":{"subject":"One exact numbered bed’s closure mark","before":"Empty offerable bed is open, or numbered bed has active closed mark","after":"closed=true appends a mark; closed=false stamps active mark reopenedAt","payload":["unitId; actingUnitId; integer bedNumber within 1..unit.beds; closed boolean","Optional listed reason and optional review time (later than now, at most 48 hours) when closing; neither when reopening; role and now"],"scope":"Ward, site bed manager or coordinator; actingUnitId must equal unitId. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Closing rejects already-closed, occupied/replayed seat, pulled/held bed, or no Ready capacity","Reopening requires an active mark and refuses any supplied reason"],"effects":["Records exact numbered mark and retains reopening history; does not rewrite allocatable confirmation","Derived Ready excludes active closed marks and recovers after reopen; existing stay seating retained"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-closure-events.ts","line":56,"sha256":"a7fb4804deda7184f118bef984d2f6d7c61a4cd48f26da5976e6140cc6f26716"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":337,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":848,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":700,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-closed-mark.test.ts","tests/ward-bed-closed-mark-kinds.test.ts"]},"reason":"Source-reviewed command model: closed=true appends a mark; closed=false stamps active mark reopenedAt."},{"event":"RECORD_BED_MEETING_ACTION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":341},"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":30},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1869}],"status":"modelled","model":{"subject":"A movement or admission’s agreed meeting task","before":"Subject exists and has no open action of this kind","after":"meetingActions appended with chosen task, owner and due time","payload":["subject {kind:movement|admission,id}; action from BED_MEETING_ACTION_KINDS","owner from BED_MEETING_ACTION_OWNERS; known unitId required for ward owner; dueAt later than now; role and now"],"scope":"Coordinator chair only; owner names a role, not a person. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Subject exists; action/owner listed; ward owner must name known ward","Reject dueAt not later than now or an existing open same-kind action"],"effects":["Appends task with recordedAt; does not change patient stage, occupancy or placement","No automatic execution when due","Before a new occurrence reuses its stable meeting inbox id, append returned snooze and released ownership boundaries where prior histories exist. Even a same-minute replacement starts without the preceding occurrence owner/snooze; histories are retained and the new occurrence may be claimed/snoozed again."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":61,"sha256":"b28604a0b11e841e1daf151279719831992a89765e8553a84974993d57ed5e2c"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":343,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":866,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-meeting-actions.test.ts","tests/ward-consolidated-meeting-counts-20261104.test.ts"]},"reason":"Source-reviewed command model: meetingActions appended with chosen task, owner and due time."},{"event":"COMPLETE_BED_MEETING_ACTION","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":342},"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":105},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1870}],"status":"modelled","model":{"subject":"An open task on a movement or admission","before":"Chosen subject carries an open action of this kind","after":"Same action stamped doneAt and doneBy","payload":["subject {kind:movement|admission,id}; listed action; actingUnitId for ward owner; role and now"],"scope":"Coordinator or owning ward/ED/community role; ward must match ownerUnitId. Site bed manager denied by EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Subject and open listed action must exist","Caller must be coordinator or correct owning role/place"],"effects":["Retains task and stamps completion; does not enact the action or change subject’s stage"],"sources":[{"path":"src/components/ward-management/ward-flow-bed-meeting-events.ts","line":105,"sha256":"b28604a0b11e841e1daf151279719831992a89765e8553a84974993d57ed5e2c"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":344,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":881,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-bed-meeting-actions.test.ts","tests/ward-bed-manager-actions.test.ts","tests/ward-consolidated-meeting-counts-20261104.test.ts"]},"reason":"Source-reviewed command model: Same action stamped doneAt and doneBy."},{"event":"RECORD_RESTRICTIVE_PRACTICE_START","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":346},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1842},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":61}],"status":"modelled","model":{"subject":"A ward’s operational restrictive-practice episodes","before":"Occupied stay on this ward with no open same-practice episode","after":"New episode with typed start and recording metadata appended","payload":["unitId; admissionId; practice from RESTRICTIVE_PRACTICE_IDS; startedAt","actingUnitId for ward; role and now; typed time finite and within last 24h, not future"],"scope":"Ward for itself or coordinator; site bed manager cannot record episodes. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward, occupied admission belonging to it, listed practice","Reject invalid typed time and duplicate open practice for same stay"],"effects":["Appends Unit.restrictivePractice.episodes with generated id, startedAt, recordedAt and desk label","No legal limit or order computed; no occupancy change; separate departure guards require open episodes ended"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":61,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":348,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":136,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts","tests/ward-audit-s3-restrictive-practice-departure.test.ts"]},"reason":"Source-reviewed command model: New episode with typed start and recording metadata appended."},{"event":"RECORD_RESTRICTIVE_PRACTICE_END","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":347},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1843},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":95}],"status":"modelled","model":{"subject":"One ward’s open restrictive-practice episode","before":"Episode exists without endedAt","after":"Same episode stamped with typed endedAt","payload":["unitId; episodeId; endedAt; actingUnitId for ward; role and now","endedAt finite, within last 24h, not future or before startedAt"],"scope":"Ward for itself or coordinator; site bed manager cannot end episodes. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward and open episode","Reject invalid/before-start typed time or already-ended episode; current admission occupancy is not required"],"effects":["Sets endedAt on episode and retains its start/recording metadata","No patient transfer, bed move or legal decision performed"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":95,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":349,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":147,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: Same episode stamped with typed endedAt."},{"event":"RECORD_RESTRICTIVE_PRACTICE_FOLLOW_UP","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":349},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1844},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":109}],"status":"modelled","model":{"subject":"One restrictive-practice episode on a ward","before":"Episode ended, with its follow-up tasks marked so far","after":"The chosen follow-up task marked done or cleared","payload":["unitId; episodeId; task from RESTRICTIVE_PRACTICE_FOLLOW_UP_TASKS; done (boolean); now; role."],"scope":"ward or coordinator in the role table; authenticated reference scope applies.","guards":["The episode exists on the ward.","The episode has an end time recorded.","task is a listed follow-up task and done is a boolean."],"effects":["Sets or removes the task in the episode's followUp; an empty followUp is removed."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1836,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":109,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"}],"tests":["tests/ward-legal-form-gap-items.test.ts"]},"reason":"Reviewed command model: marks or clears one follow-up task on an ended restrictive-practice episode."},{"event":"RECORD_WARD_INCIDENT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":350},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1845},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":131}],"status":"modelled","model":{"subject":"A ward’s operational incident list","before":"Known ward with existing or empty incident history","after":"New category/time incident appended","payload":["unitId; category from WARD_INCIDENT_CATEGORY_IDS; at finite within last24h and not future","actingUnitId for ward; role and now; no patient id or narrative"],"scope":"Ward for itself or coordinator; site bed manager cannot record incidents. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward, listed category and valid typed time"],"effects":["Appends ward incident id/category/at/recordedAt/recordedBy","No patient, bed, stay or legal record changes; detailed incident report remains outside this app"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":131,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":352,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":160,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: New category/time incident appended."},{"event":"SET_SECLUSION_ROOM_STATUS","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":351},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1846},{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":152}],"status":"modelled","model":{"subject":"A ward’s recorded seclusion-room availability","before":"Room status absent or different","after":"seclusionRoom replaced with status, time and desk label","payload":["unitId; status from SECLUSION_ROOM_STATUS_IDS; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known ward; listed status; repeat identical status refused"],"effects":["Writes only Unit.restrictivePractice.seclusionRoom","Does not start/end an episode or alter beds; selectors show an open seclusion episode as in use over the recorded availability"],"sources":[{"path":"src/components/ward-management/ward-flow-restrictive-practice-events.ts","line":152,"sha256":"5e2f0d1e4b5e3a3415d5114400ba622bb5e83a84787491e7a93f4f5a3c7f935b"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":353,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/restrictive-practice/ward-restrictive-practice.ts","line":184,"sha256":"c605b305700a3df7cb0e8f7f1f923ac844971e33743d4227b677773e9ec056aa"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-restrictive-practice.test.ts"]},"reason":"Source-reviewed command model: seclusionRoom replaced with status, time and desk label."},{"event":"MARK_CANCELLED_MOVE_CHECK","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":355},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":58},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1857}],"status":"modelled","model":{"subject":"A cancelled move’s follow-up checklist","before":"Move is cancelled, with prior mark or no mark for selected item","after":"Selected item’s mark replaced with addressed/not_applicable and time/desk","payload":["movementId; item from CANCELLED_MOVE_CHECK_ITEMS; mark from CANCELLED_MOVE_CHECK_MARKS","actingUnitId for ward; role and now"],"scope":"Coordinator or ward that accepted this move. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement exists and is cancelled; item/mark listed","Cannot mark pulled_bed addressed while cancelled move still holds a bed"],"effects":["Keeps one current mark per item; does not release beds, cancel transport or change movement stage"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":58,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":357,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":225,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Selected item’s mark replaced with addressed/not_applicable and time/desk."},{"event":"RECORD_ACCEPTANCE_CONDITION","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":356},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":79},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1858}],"status":"modelled","model":{"subject":"A standing acceptance’s operational conditions","before":"Open accepted move without this current condition","after":"New condition appended tied to acceptedUnitId and acceptedAt","payload":["movementId; condition from ACCEPTANCE_CONDITION_KINDS; agreedWith from its list","readyAt required only for bed_after_time: later than now and within largest ACCEPTANCE_BED_AFTER_HOURS choice","actingUnitId for ward; role and now"],"scope":"Coordinator or the accepting ward. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement must exist, be open and accepted","Reject duplicate current condition, off-list values, missing/out-of-range bed-after time or time on another condition"],"effects":["Appends condition and agreement provenance; does not hold a bed, change stage or modify eligibility","Times prompt review; no automatic condition completion"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":79,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":358,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":239,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: New condition appended tied to acceptedUnitId and acceptedAt."},{"event":"MARK_ACCEPTANCE_CONDITION_MET","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":357},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":80},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1859}],"status":"modelled","model":{"subject":"A current acceptance’s unmet condition","before":"Open accepted move has this current condition not met","after":"Condition retained with met {at,by}","payload":["movementId; listed condition; actingUnitId for ward; role and now"],"scope":"Coordinator or the accepting ward. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Movement open and accepted; selected current condition exists and is not already met"],"effects":["Stamps met on that exact condition; leaves stage, placement, capacity and acceptance unchanged"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":80,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":359,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":250,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Condition retained with met {at,by}."},{"event":"RECORD_RESTRICTION_REVIEW","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":358},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":139},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1860}],"status":"modelled","model":{"subject":"A ward’s active restriction review reminder","before":"Restriction currently active, with prior review or none","after":"One current review for restriction recorded/replaced","payload":["unitId; restriction from WARD_RESTRICTION_KINDS; reviewer from RESTRICTION_REVIEWER_ROLES","expectedAt later than now and within largest RESTRICTION_REVIEW_AFTER_HOURS choice; actingUnitId for ward; role and now"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward exists and named restriction is currently active; listed restriction/reviewer","Review time must be later than now and bounded by listed choices"],"effects":["Replaces review for same restriction, preserving others; closure review captures closure.startedAt","Does not lift restriction or reopen ward when time passes"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":139,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":360,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":262,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: One current review for restriction recorded/replaced."},{"event":"MARK_CLOSURE_TRANSITION_ITEM","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":359},"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":169},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1861}],"status":"modelled","model":{"subject":"A closed ward’s current handover checklist","before":"Ward has admissionsClosure and selected still-pointing record is unmarked","after":"Closure transitionMarks appended with current derived item and recording metadata","payload":["unitId; item from CLOSURE_TRANSITION_ITEM_KINDS; actingUnitId for ward; role and now","Record id: referralId for referral, plannedAdmissionId for booked_arrival, movementId for other listed item kinds"],"scope":"Ward for itself, site bed manager or coordinator within authorised scope. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Ward must exist, be closed and carry admissionsClosure","Item must still point at the ward according to closureTransitionItems and must not already be marked"],"effects":["Appends derived item with at/by to current closure; does not move, cancel, reassign or release the underlying record"],"sources":[{"path":"src/components/ward-management/ward-flow-loop-check-events.ts","line":169,"sha256":"ff8c33075771176af7fe4b39fee199eb3da5c97591401997d25b0455b83f5868"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":361,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/loop-checks/ward-loop-checks.ts","line":276,"sha256":"67b1b35eaafcde31aa39f6d2f2e7a73aa9ae18859d17dd777426ba9a78404921"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-loop-checks.test.ts"]},"reason":"Source-reviewed command model: Closure transitionMarks appended with current derived item and recording metadata."},{"event":"FLAG_MOVEMENT_URGENT","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":360},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1970}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_MOVEMENT_URGENT_FLAG","roles":["coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":361},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1994}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_REFERRAL","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":381},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1742},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":883}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REQUEST_CAPACITY_REFRESH","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":384},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":686},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1669}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECEIVE_REFERRAL","roles":["community","ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":399},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1793},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":362}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADD_PATIENT","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":403},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1678},{"path":"src/components/ward-management/ward-patient-registration-reducer.ts","line":39}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ARCHIVE_PATIENT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":405},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1680},{"path":"src/components/ward-management/ward-patient-archive-reducer.ts","line":10}],"status":"modelled","model":{"subject":"An erroneous standalone patient registration","before":"Patient has only registration fields, and nothing else names it except withdrawn or cancelled front-door referrals, audit rows, or Undo records older than the Undo window (D-149)","after":"Patient removed from active patients list; audit event and sequence retained","payload":["patientId; reason from PATIENT_ARCHIVE_REASONS (duplicate, test, wrong_person); role and now"],"scope":"Coordinator only, with shared record scope applied. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; listed archive reason","Registration facts include the optional typed details (preferred name, address, GP, catchment team, interpreter language, Indigenous status, and the ADMIN_DETAIL_FIELDS administrative details); refuse any non-registration fact, any open or answered referral, or any other state reference. D-149 (Josh, 11 Nov 2026): a front-door referral whose every destination was withdrawn by the referrer or cancelled does not block, audit rows do not block, and an Undo record blocks only while it is inside the Undo window (measured from the event's now). Each refusal names its reason, and the coordinator's card shows it instead of hiding"],"effects":["Filters patient from patients; keeps sequence so id is not reused","D-149: a withdrawn or cancelled referral that named the record stays in the referrals list with its patientId removed, so the stored workspace still validates","D-149 review: an Undo record still naming the record (past the Undo window, or stamped after the board's time) is dropped, so it cannot become usable later and bring back a step naming an archived record","Reducer audit wrapper retains the archive event/reason; no care record is removed","The step can be taken back by UNDO_PATIENT_RECORD within the Undo window."],"sources":[{"path":"src/components/ward-management/ward-patient-archive-reducer.ts","line":10,"sha256":"d62abeda9f9da15c550d60692fddf854fe29ece3c2db0bc472ab46c01886a930"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":407,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-archive.ts","line":32,"sha256":"0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54"},{"path":"src/components/ward-management/ward-patient-archive.ts","line":54,"sha256":"0836301ee769bdc651066d09a763d083ca95047425bac33559d6e1538fed7d54"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-patient-archive.test.ts"]},"reason":"Source-reviewed command model: Patient removed from active patients list (withdrawn-only referrals unlinked, D-149); audit event and sequence retained."},{"event":"ACCEPT_REFERRAL","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":435},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":880},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":728}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"HOLD_REFERRAL_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":436},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1795},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":695}],"status":"modelled","model":{"subject":"An accepted ward arm’s exact numbered bed hold","before":"Current accepted, unwithdrawn ward arm without started bed journey; old numbered hold may exist","after":"Same arm carries chosen heldBedNumber","payload":["referralId; unitId; actingUnitId; bedNumber; role and now"],"scope":"Ward for its own beds or coordinator; shared place/record boundary also applies. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known referral and currently accepted arm for unit; no linked movement or pulled/occupied/departed referral stay","Ward open; numbered bed valid, free, unheld and of required kind","Recheck current suitability using only override already recorded at acceptance"],"effects":["Sets/reassigns arm.heldBedNumber; retains acceptance author/time and referral state","Does not mint movement/admission or overwrite allocatable confirmation; hold is considered by bed availability checks"],"sources":[{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":680,"sha256":"aa1c1e1bdf49c3e38ce3ca99d5e92e542e0d2956c43b9befa32e6915def5d7dc"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":438,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-flow-events.ts","line":1554,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-review-engine-regressions.test.ts","tests/ward-override-surfaces.test.ts"]},"reason":"Source-reviewed command model: Same arm carries chosen heldBedNumber."},{"event":"DECLINE_REFERRAL","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":447},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1796},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1148}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LOCAL_BED_SOUGHT","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":453},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1049},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1771}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_REFERRER_WITHDRAWAL","roles":["coordinator","community","ed","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":485},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":805},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1770}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ADD_REFERRAL_CORRECTION","roles":["community","ed","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":492},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1744},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1124}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STEP_BACK_STAGE","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":499},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":751},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1884}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_ACCEPTANCE","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":500},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1797},{"path":"src/components/ward-management/ward-flow-referral-answer-events.ts","line":1308}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"WITHDRAW_WARD_REQUEST","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":503},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1743},{"path":"src/components/ward-management/ward-flow-referral-send-events.ts","line":1069}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"MARK_NOTICE_READ","roles":["coordinator","ed","ward","officer","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":513},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2079},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":290}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACKNOWLEDGE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":534},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2080},{"path":"src/components/ward-management/ward-inbox-events.ts","line":41},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":312}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"COMPLETE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":535},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2081},{"path":"src/components/ward-management/ward-inbox-events.ts","line":71},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":350}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REOPEN_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":536},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2082},{"path":"src/components/ward-management/ward-inbox-events.ts","line":99},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":385}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"TAKE_INBOX_ITEM_OWNERSHIP","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":538},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2083},{"path":"src/components/ward-management/ward-inbox-events.ts","line":111},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":403}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Real current inbox row not already owned by this desk","after":"Ownership history appended; current owner is acting role’s label","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["Row must exist; same current owner for this occurrence refused"],"effects":["Appends {at,by} to inboxOwnership; underlying row/fact and its visibility unchanged"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":403,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":540,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":111,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Ownership history appended; current owner is acting role’s label."},{"event":"RELEASE_INBOX_ITEM_OWNERSHIP","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":539},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2084},{"path":"src/components/ward-management/ward-inbox-events.ts","line":121},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":423}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Ownership history’s current entry belongs to acting role, applying a current-row start when available","after":"Ownership history appended with kind=released; ownership relinquished","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["A blank or non-text inboxItemId is refused before any history is read","Current owner must match acting role after filtering entries older than the row’s current occurrence, if a start is available; this branch does not independently require row existence"],"effects":["Appends released history entry; does not delete prior ownership, resolve fact or hide row"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":423,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":541,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":121,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-alerts-release-ownership.dom.test.tsx","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Ownership history appended with kind=released; ownership relinquished."},{"event":"SNOOZE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":540},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2085},{"path":"src/components/ward-management/ward-inbox-events.ts","line":133},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":439}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"Real current inbox row visible or previously snoozed","after":"Latest snoozed entry hides row until chosen return time while fact remains","payload":["inboxItemId; reason from SNOOZE_REASON_IDS; finite until after now; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["Real row and listed reason","until within SNOOZE_MAX_MINUTES (currently24h); act-now row limited by RED_ROW_SNOOZE_CAP_MINUTES (currently60min)"],"effects":["Appends {kind:snoozed,at,by,until,reason}; no mutation of underlying patient/unit fact","Current-occurrence selectors return row when until passes or a newer occurrence starts"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":436,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":542,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":133,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Latest snoozed entry hides row until chosen return time while fact remains."},{"event":"UNSNOOZE_INBOX_ITEM","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":541},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2086},{"path":"src/components/ward-management/ward-inbox-events.ts","line":142},{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":473}],"status":"modelled","model":{"subject":"A coordinator inbox row and its occurrence-specific history","before":"History has an active snooze, applying a current-row start when available","after":"Snooze history appended with kind=returned; active snooze ends now","payload":["inboxItemId trimmed before lookup; role and now"],"scope":"Coordinator role only; shared authenticated scope must also permit the row’s subject. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. Scoped state projection retains this metadata for permitted meeting-action subjects by parsing the encoded subject id; metadata for other subjects stays excluded.","guards":["A blank or non-text inboxItemId is refused before any history is read","Active snooze must exist after occurrence filtering; expired or older-occurrence entry refused; this branch does not independently require row existence"],"effects":["Appends returned entry, retaining earlier history; an underlying row, if still present, returns to the active list without resolving its fact"],"sources":[{"path":"src/components/ward-management/ward-inbox-reducer.ts","line":470,"sha256":"08c484bdd2238608d2f341a4d4026e57d200d349d16dacafcf1ba57ec0d0c21e"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":543,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-inbox-events.ts","line":142,"sha256":"c3c63fd47887f9bbabdefc8aa6b6742f72848bc9f744afa55b2aa7efd80f037c"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-inbox-snooze.ts","line":84,"sha256":"eda403a5e8fbf768036d873898501882422dad29ebc3c7362c7766a10daaf1dd"}],"tests":["tests/ward-inbox-snooze.test.ts","tests/ward-consolidated-census-20261104.test.ts"]},"reason":"Source-reviewed command model: Snooze history appended with kind=returned; active snooze ends now."},{"event":"SET_ARRIVAL_DETAILS","roles":["coordinator","ed","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":542},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1895},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1170}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_STEP_DOWN_CANDIDATE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":543},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":706},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1670}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_WARD_DIAGNOSIS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":545},"sources":[{"path":"src/components/ward-management/ward-flow-diagnosis-events.ts","line":14},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2248}],"status":"modelled","model":{"subject":"One current admission","before":"No ward diagnosis, or a different ward diagnosis block","after":"Latest ward diagnosis block with recording time and desk","payload":["admissionId; block from TentativeDiagnosisBlock; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit; authenticated scoped access must also permit the admission.","guards":["Admission exists and is not departed.","Block is listed and differs from the current ward block."],"effects":["Replaces admission.wardDiagnosis only; does not overwrite the referrer's tentativeDiagnosis or move a bed."],"sources":[{"path":"src/components/ward-management/ward-flow-diagnosis-events.ts","line":29,"sha256":"c0c3188726823be6157098eb593cf59300372f9328512b293328cd76d8a16e4a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":547,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ward-diagnosis.test.ts"]},"reason":"Reviewed command model: Latest ward diagnosis block with recording time and desk."},{"event":"MARK_WEEKEND_DISCHARGE_REVIEWED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":547},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2250},{"path":"src/components/ward-management/ward-flow-weekend-review-events.ts","line":15}],"status":"modelled","model":{"subject":"One current inpatient admission","before":"No review tick for this weekend","after":"Weekend discharge review tick with weekend, time and desk","payload":["admissionId; weekendStart instant; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit; authenticated scoped access must also permit the admission.","guards":["Admission exists and is pulled or occupied.","Weekend is within a week of now and not already ticked."],"effects":["Appends to admission.weekendDischargeReviews only; changes no date, bed or plan."],"sources":[{"path":"src/components/ward-management/ward-flow-weekend-review-events.ts","line":23,"sha256":"1360db583261541d85f5978b485e46777413053f2ab988012b22b8aac4280ab2"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":549,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-weekend-discharge-review.test.ts"]},"reason":"Reviewed command model: Weekend discharge review tick with weekend, time and desk."},{"event":"RECORD_CHIEF_PSYCHIATRIST_NOTIFIED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":549},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2251},{"path":"src/components/ward-management/ward-flow-under-18-events.ts","line":14}],"status":"modelled","model":{"subject":"One current stay's chiefPsychiatristNotice","before":"Pulled or occupied stay with or without an earlier notice record","after":"chiefPsychiatristNotice {notifiedAt, at, by} replaces any earlier one","payload":["admissionId; actingUnitId; notifiedAt (typed, never pre-filled, D-93)","role and now"],"scope":"Ward for its own stay, or coordinator. EVENT_ROLE alone is not place authority.","guards":["Unknown admission, another ward's stay, or a stay that is not current refused","Non-finite times, or a notified time later than now, refused"],"effects":["Quietens the under 18 on an adult ward notice; computes no deadline and blocks no bed offer","A transfer starts the receiving stay without it"],"sources":[{"path":"src/components/ward-management/ward-flow-under-18-events.ts","line":22,"sha256":"040429c9d51419da086ae64aae4b653e5b0251d906ebde5a79fa77c66f33500d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":551,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-item4-under-18-adult-ward.dom.test.tsx"]},"reason":"Source-reviewed command model: records the typed time the Chief Psychiatrist was told a person under 18 is on an adult ward; information only (item 4, held)."},{"event":"SET_DISCHARGE_BARRIER","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":550},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":729},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1671}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_CLINICALLY_READY","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":552},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":759},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1672}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SET_DISCHARGE_CRITERIA","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":553},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":802},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1673}],"status":"modelled","model":{"subject":"An occupied admission's criteria-led discharge record","before":"Unset, current, paused or lapsed criteria","after":"Criteria set/reviewed, cleared, or one stored criterion ticked/unticked","payload":["admissionId; criteria string[] or null; met string[]; setByTreatingPsychiatrist boolean; optional patientSpecific string[] or tick {criterion,met}; actingUnitId for ward; finite now."],"scope":"ward or coordinator, with ward actingUnitId equal to the stay's unit and authenticated admission scope.","guards":["Admission must be occupied and time finite.","For setting or ticking criteria, only recorded voluntary patients are eligible; involuntary, CTO and unknown legal status refuse. criteria:null clears before this eligibility check.","Setting/changing the list needs the treating-psychiatrist flag; an ordinary tick keeps the stored list and refuses a lapsed review. Clearing with criteria:null does not require that flag.","Listed criteria must be unique and valid; patient-specific items obey count/length/trim bounds; ticks must name stored criteria."],"effects":["Writes admission.dischargeCriteria; review resets its validity time and review-bound/lapsed ticks, while retained applicable ticks persist.","No departure, bed release or clinical eligibility decision is performed; typed patient-specific payloads follow the typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":755,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-discharge-criteria.ts","line":271,"sha256":"70e720fb09a6a8bd9ab6952b29e786e949b7c635b3eded6a97c9be8582648c5b"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2132,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-criteria-led-discharge.test.ts"]},"reason":"Reviewed command model: Criteria set/reviewed, cleared, or one stored criterion ticked/unticked."},{"event":"RECORD_ED_MEDICAL_DETERIORATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":554},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1169},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1774}],"status":"modelled","model":{"subject":"An accepted originating-ED movement before collection","before":"Accepted/pulled pre-transfer placement with optional live transport","after":"placement_requested, medically uncleared and explicitly paused; acceptance and reservation removed","payload":["movementId; actingPlaceId naming the originating ED; finite now not before movement.openedAt; role."],"scope":"ed or coordinator; actingPlaceId must equal movement.originEdId even for coordinator. A source-admission transfer cannot use this path; authenticated movement/place scope also applies.","guards":["Movement exists, has an accepted psychiatric destination and is not closed, moving or already collected.","An unrecovered deterioration already recorded refuses; any held admission must be a consistent pulled reservation."],"effects":["Releases pulled bed/admission and matching referral bed hold; clears acceptance, pull timer, admission linkage and ward request lists.","Cancels live transport, records withdrawal/release/cancellation unwind history, false medical clearance and deterioration stamp.","Copies negative clearance to the identity-matching referral and appends an acceptance-withdrawn notice to the former ward. A later re-clearance does not reallocate a bed."],"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1170,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2152,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-medical-deterioration-ui.dom.test.tsx","tests/ward-reservation-release-capacity.test.ts"]},"reason":"Reviewed command model: placement_requested, medically uncleared and explicitly paused; acceptance and reservation removed."},{"event":"RECORD_MOVEMENT_MEDICAL_CLEARANCE","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":555},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1275},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1775}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"UPLOAD_PATIENT_FORM","roles":["coordinator","ed","ward","community","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":556},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":820},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1674}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_WRITTEN","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":558},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1365},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":275},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1776}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_CODE","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":560},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1366},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":274},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1777}],"status":"modelled","model":{"subject":"A movement's current legal-form record","before":"Current form, or no form recorded","after":"Chosen form code without an invented written time","payload":["movementId; recognised formCode; now; role. No writtenAt, region, ageBand or paperExpiresAt is carried by this command."],"scope":"ed, coordinator or ward. Ward requires an admitted stay in its own scoped unit; ED cannot amend a closed movement. An admitted ward/coordinator may record a later form despite arrival closure.","guards":["Movement exists; ward has an admitted stay.","Form code is recognised, differs from the current code, and is not 3C after 3D.","A closed record refuses except admitted non-ED recording."],"effects":["Replaces legalForm code/kind with its retained form history, removes formedAt, prior paper expiry/receipt for a different form and legacy legalClock.","Does not calculate legal expiry or default the written time. Undo is part of UNDO_LEGAL_FORM_RECORD.","A new form code also clears the typed receipt mark and any paper details typed for the old form."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":274,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2186,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":882,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Chosen form code without an invented written time."},{"event":"RECORD_ED_PRESENTATION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":562},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1367},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":205},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1778}],"status":"modelled","model":{"subject":"An open movement's ED presentation choices","before":"Recorded ED presentation list or none","after":"Canonical fixed-list choices, or field removed for an empty selection","payload":["movementId; presentations array of EdPresentation choices; now; role."],"scope":"ed or coordinator, additionally subject to authenticated movement/place scope.","guards":["Movement exists and has no closure.","presentations must be an array and every item must be in the fixed ED list."],"effects":["Filters choices into canonical list order, deduplicating them; empty choice removes edPresentations.","Does not change movement stage, diagnosis, legal status or capacity. Included in ED-step Undo."],"sources":[{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":205,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2212,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":92,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Canonical fixed-list choices, or field removed for an empty selection."},{"event":"RECORD_LEGAL_FORM_DETAILS","roles":["ed","coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":564},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1368},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":222},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1779}],"status":"modelled","model":{"subject":"The current legal form on one movement","before":"Form recorded, details as last typed","after":"Form carries the typed maker, copy given, ending, consent and review-by values","payload":["movementId; formCode; optional madeBy, copyGiven, endedBy, consent, reviewBy (omitted keeps, null clears); now; role."],"scope":"ed, coordinator or ward in the role table; a ward only for a person admitted to its own bed.","guards":["The movement exists; a closed movement only when admitted and not ED.","formCode matches the movement's current form.","Each detail is from its list; reviewBy is a finite time; consent only for a Form 6B."],"effects":["Replaces the form's details with the merged values; other form fields are unchanged."],"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":100,"sha256":"5cc4fde885cc7c9b44aabd7b260b5f94371b7d4f06e26736e406c40972fb8d21"},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":222,"sha256":"00105e89a350aa48ec39ce66907880bb7863bbc4cff2f4f31fc02ba659f1c6d9"}],"tests":["tests/ward-legal-form-gap-items.test.ts"]},"reason":"Reviewed command model: records the written legal form's typed details on the movement's current form."},{"event":"RECORD_COUNTRY_EXTENSION","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":565},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1369},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":382},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1780}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_LEGAL_FORM_CONTINUATION","roles":["ed","coordinator","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":566},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1370},{"path":"src/components/ward-management/ward-flow-record-legal-events.ts","line":415},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1781}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EVALUATE_ARRIVAL_LATENESS","roles":["coordinator","ed","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":567},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1896},{"path":"src/components/ward-management/ward-flow-transport-events.ts","line":1260}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RELEASE_AND_REOPEN_SEARCH","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":568},"sources":[{"path":"src/components/ward-management/ward-flow-placement-events.ts","line":813},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1885}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CLEAR_EXPECT_FLAG","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":569},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2092}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"REQUEST_PSYCH_REVIEW","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":571},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2107},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":20}],"status":"modelled","model":{"subject":"One open movement","before":"No psychReview recorded","after":"psychReview.requestedAt = now","payload":["movementId","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement as for other movement commands.","guards":["Movement must exist and not be closed","Refused when a review is already asked for"],"effects":["Writes psychReview.requestedAt only; the ED Awaiting review list keeps its order","Undone by UNDO_ED_STEP"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":68,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2103,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":573,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): the emergency department records that a psychiatric review was asked for; a time only, nothing ordered or scored."},{"event":"RECORD_PSYCH_REVIEW_SEEN","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":572},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2108},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":27}],"status":"modelled","model":{"subject":"One open movement with a review asked for","before":"psychReview without the named grade seen","after":"psychReview.registrarSeenAt or consultantSeenAt = now","payload":["movementId; grade registrar or consultant","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Movement must exist and not be closed","Grade from PSYCH_REVIEW_GRADES","A review must have been asked for; each grade recorded once"],"effects":["Writes the seen time only; no examination, placement or order follows","Undone by UNDO_ED_STEP"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":76,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2104,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":576,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): records that the registrar or consultant saw the person for the review asked for; a time only."},{"event":"RECORD_ESCALATION_CALL","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":574},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2106},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":58}],"status":"modelled","model":{"subject":"One open movement waiting at an ED wait step (D-108)","before":"escalationCalls without a call for the step, or with an earlier one","after":"escalationCalls holds the latest call for the step: step, roleCalled, outcome, at = now, by = role","payload":["movementId; step 1 to 4; roleCalled from ESCALATION_CONTACT_ROLES; outcome from ESCALATION_CALL_OUTCOMES","role and now"],"scope":"ED or coordinator (EVENT_ROLE); shared command scope checks the movement.","guards":["Finite time; step 1 to 4; roleCalled must be the step's role (ESCALATION_STEP_ROLE)","Outcome from the fixed list only; no typed text","Movement must exist, not be closed and be an ED wait (isEdOriginJourney)","The step must have been reached by now, timed as the ED board row times it; an earlier step stays recordable"],"effects":["Replaces the step's latest call on the movement; earlier calls are not kept on the record","Does not change the step, its hours, the queue order (D-71), beds or any patient stage"],"sources":[{"path":"src/components/ward-management/escalation/escalation-calls.ts","line":94,"sha256":"1e5e6bd8fc4b2a775653431ae515f6feeddb6ed51189be600247b87aa9b94ea7"},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":58,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2107,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":575,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-escalation-calls.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (item 3, D-133): records who was called at an ED wait step and one outcome from a fixed list; a shared record, nothing dials."},{"event":"MARK_WARD_READY_FOR_NEXT","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":575},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2109},{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":35}],"status":"modelled","model":{"subject":"One ward","before":"readyForNextAt absent (or present, for cancel)","after":"Unit.readyForNextAt = now, or removed on cancel","payload":["unitId; optional cancel","actingUnitId for ward; role and now"],"scope":"Ward for itself or coordinator (EVENT_ROLE); shared command scope checks the unit.","guards":["Ward acts only for itself","Unit must exist","Mark refused when closed to admissions or already marked; cancel refused when not marked"],"effects":["Coordinator Home shows the ward and the first on its wait list as a fact; nothing is pulled","A PULL_PATIENT into the ward clears the mark"],"sources":[{"path":"src/components/ward-management/ward-flow-review-ready-events.ts","line":91,"sha256":"5cca0ed3af64cbb191c326720a629279f0faaaebecee685b026910c203e2668d"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2108,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":577,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-psych-review-ready-next.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (9 Nov 2026): a ward says it is ready for its next patient, or cancels that; a fact for the coordinator, who still pulls by hand."},{"event":"RAISE_EXPECT_FLAG","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":576},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2118}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"FLAG_LEGAL_MISMATCH","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":577},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2140}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EVALUATE_LEAVE_BED_WARNINGS","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":578},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":864},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1675}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"CONFIRM_MORNING_ROLLUP","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":579},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2163}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"SEND_WARD_BUZZ","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":580},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2194}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_REPATRIATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":582},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1356},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":530},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1783}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_HOME_SERVICE_RETURN","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":584},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2256}],"status":"modelled","model":{"subject":"One current stay's home-service return discussion","before":"No request, a request without agreement, or an earlier recorded answer","after":"Fresh requested record, or request with agreed/not_yet_agreed/declined answer","payload":["admissionId; step requested|answered; homeHospital required for request; answer required for answered; optional prerequisites from RETURN_PREREQUISITES and finite nextReviewAt; now; role."],"scope":"coordinator only; authenticated scope must permit the admission. A valid home site need not itself be the current admission site.","guards":["Admission exists and is not departed; optional review date finite.","Request names a site in the current scenario. Answer requires an existing request and a listed answer.","Prerequisites are listed; a declined answer cannot carry agreed prerequisites."],"effects":["Latest record per stay; fresh request clears earlier answer/prerequisites. Answer retains request and appends answer time/desk, with prerequisites unique in listed order.","Records a discussion only: does not book transport or a bed, raise a return movement or change the stay."],"sources":[{"path":"src/components/ward-management/out-of-area/home-service-return.ts","line":122,"sha256":"2f3fbdc6ba3e36b6eb890a51a7707e8b26f71eba4a803181220c17c63d1249d7"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2244,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":584,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-home-service-return.test.ts"]},"reason":"Reviewed command model: Fresh requested record, or request with agreed/not_yet_agreed/declined answer."},{"event":"FLAG_RETURN_EARLY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":586},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2261}],"status":"modelled","model":{"subject":"One current out-of-area stay","before":"No early-return flag on the stay","after":"An early-return flag naming the home hospital, time and role","payload":["admissionId; homeHospital (listed site code); now; role."],"scope":"coordinator in the role table.","guards":["The stay exists and has not departed.","homeHospital is a listed site.","The stay is not already flagged."],"effects":["Appends a returnEarlyFlags record; the home ward site, community and officer desks see an alert while the stay is current."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":410,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/out-of-area/return-early.ts","line":70,"sha256":"28c9ec25e8d1fc5808db7af91d11f76ce64b235c292fdddfa60d1423ac2eedb3"}],"tests":["tests/ward-return-early.test.ts"]},"reason":"Reviewed command model: the coordinator flags an out-of-area stay as ready to return early to a home hospital."},{"event":"RECORD_DIRECTORY_CHECK","roles":["coordinator","bed_manager","ward","ed","community","officer"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":588},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2258}],"status":"modelled","model":{"subject":"An on-call directory entry identifier","before":"Seeded check metadata or a previously recorded check","after":"Latest {entryId, at, by} check for that identifier","payload":["entryId matching the 1–80 character slug pattern; now; role."],"scope":"coordinator, bed_manager, ward, ed, community or officer. This reducer validates identifier shape, not membership in the seeded directory; authenticated access remains separate.","guards":["entryId must be a string matching the directory-entry slug grammar."],"effects":["Replaces the latest check for the same identifier while retaining checks for other identifiers; audit records successive checks.","Does not change the directory's phone/contact data or verify it against an external service."],"sources":[{"path":"src/components/ward-management/on-call/on-call-checks.ts","line":40,"sha256":"4c75385ac14339cbc7d98efc18af52257bb6ae185011b80e244fcf21f6d68e9d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":588,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2284,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"}],"tests":["tests/ward-on-call-checks.test.ts"]},"reason":"Reviewed command model: Latest {entryId, at, by} check for that identifier."},{"event":"RECORD_HANDOVER_SIGN_OFF","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":591},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1355},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":509},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1782}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"RECORD_SITE_HANDOVER_SIGN_OFF","roles":["bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":595},"sources":[{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off-reducer.ts","line":28},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2264}],"status":"modelled","model":{"subject":"One site and upcoming shift handover","before":"No sign-off for this site/shift","after":"Site sign-off with a snapshot of unsigned wards and unanswered bed calls","payload":["siteCode; integer finite shiftAt at a configured shift start; now; role."],"scope":"bed_manager for its own site or whole-network coordinator. A service coordinator is refused by authenticated command scope; signing does not sign any ward's sheet.","guards":["Site has at least one ward.","shiftAt is the next handover in the one-shift sign-off window.","Site/shift has not already been signed. Open checks do not block signing."],"effects":["Appends siteHandoverSignOffs with at/by/siteCode/shiftAt and reducer-derived unsignedUnitIds/unansweredBedCallIds.","Leaves ward sign-offs and bed calls open and unchanged. Creates the site-specific step Undo."],"sources":[{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off-reducer.ts","line":26,"sha256":"dc671972ed160a7492f79cde72ca6dab6dad70b59921bd378ecee4721b326db5"},{"path":"src/components/ward-management/site-sign-off/site-handover-sign-off.ts","line":80,"sha256":"abebadfb3e48655f6e362172ed644ae06615e26916f33334ce17419955567a33"},{"path":"src/components/ward-management/ward-access-state.ts","line":737,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":595,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-site-handover-sign-off.test.ts","tests/ward-handover-site-sign-off.dom.test.tsx"]},"reason":"Reviewed command model: Site sign-off with a snapshot of unsigned wards and unanswered bed calls."},{"event":"RECORD_TRIAGE_SIGNED","roles":["ed","community","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":599},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2274}],"status":"modelled","model":{"subject":"One person on this workspace","before":"No signed triage, or earlier signed triages, on the person","after":"One more signed triage record on the person: time, desk role and closed-list codes","payload":["patientId; now; role; urgency (A to G); outcome (listed); legal (listed code); review (listed code); flags (RAMP factor keys marked present); problems and actions (webPSOLIS list codes, in the order chosen); venue and referralType (webPSOLIS list code or null)."],"scope":"ed, community, ward and coordinator in the role table, the same desks as RAISE_REFERRAL; a shared desk is sent a record only with a person it is sent.","guards":["The person exists on this workspace.","Urgency is one of A to G.","Outcome, legal status and review are each from their fixed lists.","Every flag is a RAMP factor key; unknown fields are dropped.","Problems and actions are arrays of at most 60 codes from their webPSOLIS lists (kept once each, in the order chosen); venue and referral type are null or a code from their list. Typed text is refused."],"effects":["Appends a triages record (codes only); the patient record's Now tab lists it. No Undo: it is a signed record. Typed text (assessment, mental state, formulation, plan) stays in the form and is never in the event."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2275,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/triage/triage-signed-reducer.ts","line":46,"sha256":"88ebffb9dc86dd544d9bdac7f561fcf4998a3af62d9a19ffe4211c5325142666"},{"path":"src/components/ward-management/ward-access-state.ts","line":371,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-triage-signed.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model (7 Nov 2026): a clinician signs a mental health triage and risk assessment (SMHMR900 and SMHMR905) for one person; closed-list codes only, never typed text."},{"event":"REQUEST_WARD_STAFF","roles":["ward","coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":603},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2266}],"status":"modelled","model":{"subject":"A ward's staff request for this shift or next shift","before":"Known ward; no open request for that ward and shift, or one to update","after":"staffRequests holds one open request for the ward and shift with count and ordered reasons","payload":["unitId; shift this or next; count 1, 2, 3 or 4 or more","reasons: one or more distinct items from STAFF_REQUEST_REASONS; actingUnitId for ward callers; role and now","optional shiftStartAt: the start of the shift the person chose; kept only when it is that shift's start at now or 5 minutes earlier, otherwise the shift at now is used"],"scope":"Ward, coordinator or site bed manager in EVENT_ROLE; a ward acts only for its own ward (actingUnitId must equal unitId). Executive changes nothing (D-80). Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Known unit; shift and count from their lists","Reject empty, duplicate or unlisted reasons, and a ward naming another ward"],"effects":["Appends a record, or updates count, reasons and updatedAt on the open one; never names a patient","Does not change beds, placement, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2268,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/staffing/staff-requests.ts","line":156,"sha256":"e47b9fadc1f70f84b56bd4e91eb36f5b95f85da6234e10f6251bea10c3f6237a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":605,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-staff-requests.test.ts"]},"reason":"Source-reviewed command model: one open staff request per ward per shift, added or updated in place."},{"event":"CLOSE_WARD_STAFF_REQUEST","roles":["ward","coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":604},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2267}],"status":"modelled","model":{"subject":"An open staff request on a ward","before":"Request exists on the named ward and is still open","after":"Request carries closedAt, closedBy and outcome","payload":["requestId and unitId; outcome from STAFF_REQUEST_OUTCOMES","actingUnitId for ward callers; role and now"],"scope":"Ward, coordinator or site bed manager in EVENT_ROLE; a ward acts only for its own ward (actingUnitId must equal unitId). Executive changes nothing (D-80). Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority. A ward may only withdraw; the coordinator or bed manager records any other outcome.","guards":["Request found on that ward and open; outcome listed","Reject a ward recording an outcome other than withdrawn"],"effects":["Closes the one record; open lists and alerts drop it","Does not change beds, placement, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2269,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/staffing/staff-requests.ts","line":195,"sha256":"e47b9fadc1f70f84b56bd4e91eb36f5b95f85da6234e10f6251bea10c3f6237a"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":615,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-staff-requests.test.ts"]},"reason":"Source-reviewed command model: an open staff request closed as arranged, not available or withdrawn."},{"event":"SET_SITE_FEATURE_SWITCH","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":609},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":51},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2269}],"status":"modelled","model":{"subject":"A site's switched-off features","before":"A site with wards in this workspace; the listed feature is on there (to switch off) or off there (to switch back on)","after":"siteFeatureSwitches holds one record per site and feature switched off (site code, feature, time, and by: the role, or admin when the access admin switched it); switching back on removes it","payload":["siteCode; feature from SITE_SWITCHABLE_FEATURES; off true or false","role and now; byAccessAdmin, which the shared server sets or clears from the desk's membership (deskCommand), never the browser"],"scope":"Coordinator only in EVENT_ROLE. The shared server admits the statewide coordinator and, by D-142 (Josh, 11 Nov 2026, amending D-80 for this one action), the statewide access admin, which sends it under the coordinator role (SITE_FEATURE_SWITCH_ROLE) from Features at this site on its Access tab (mayChangeSiteFeatures via siteFeatureSwitchRefusal). Every other desk, a service coordinator or service admin included, is refused; the executive changes nothing (D-80).","guards":["Refuse a protected feature by name (SITE_PROTECTED_FEATURES: safety notices, legal times, ruling guards, role access, AWOL bed hold review, ward closure, demo reset) and any feature off the allow-list","Refuse a missing off/on, a site with no wards, switching off a feature already off and switching on one not off"],"effects":["Adds or removes the one record; every desk at that site reads the feature as off and no other site changes","Does not change beds, placement, movements, confirmations or any patient stage; dispatched from the access admin's Features at this site card (settings/site-features-card.tsx, D-142), which offers an undo"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":51,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2270,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-site-feature-switches.ts","line":102,"sha256":"28c257371212025f04befc60adc5bf0d36c87b1d1d5173b082ccd7a03d84c7e0"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":610,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-ruling-guardrails.test.ts","tests/ward-event-permissions.test.ts","tests/ward-site-features-card.dom.test.tsx"]},"reason":"Source-reviewed command model: one listed feature switched off, or back on, at one site (Batch 4 item 20, D-135; access admin by D-142)."},{"event":"RECORD_DOWNTIME_PACK_PRINTED","roles":["coordinator","bed_manager","ward","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":611},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":53},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2270}],"status":"modelled","model":{"subject":"Each ward's downtime pack print times","before":"Every ward named is in this workspace","after":"downtimePackPrints holds one record (ward, time, role) per ward on the pack, keeping the newest 12 per ward","payload":["unitIds: the wards on the printed pack, ids only, each once","role and now (the time the print window opened)"],"scope":"Coordinator, site bed manager, ward or ED in EVENT_ROLE; dispatched from the downtime pack's print hook. Shared authenticated command scope additionally requires every named ward to be inside the desk's place; EVENT_ROLE alone is not place authority. Executive and access admin change nothing (D-80).","guards":["Refuse an empty or repeated ward list","Refuse a ward not in this workspace; a second print of the same wards in the same minute records nothing new"],"effects":["Appends print times only; the pack content stays in the tab and leaves only as paper or a saved file (D-18, D-72 item 2); the coordinator's old packs band and the ward screen's pack printed line read the times (D-142)","A pack is listed as old after PACK_OLD_AFTER_MINUTES (24 hours, D-135); does not change beds, confirmations, movements or any patient stage"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":53,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2271,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-downtime-pack-prints.ts","line":49,"sha256":"e767d9065a60c199968fdc71210406000a397a8dd769b58fb836e8b1a7d7b033"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":612,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-downtime-pack-device-storage.dom.test.tsx","tests/ward-event-permissions.test.ts","tests/ward-outage-catch-up-screens.dom.test.tsx"]},"reason":"Source-reviewed command model: when each ward's downtime pack was printed or saved as a PDF, never the pack itself (Batch 4 item 24, D-135)."},{"event":"RECORD_OUTAGE_WINDOW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":613},"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":55},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2271}],"status":"modelled","model":{"subject":"The workspace's recorded outage windows","before":"Both times typed; the window is not already recorded","after":"outageWindows holds a new OUT-n record (from, to, recordedAt, role); the most recently recorded window is the active one, so a correction replaces the earlier entry; a ward is caught up only once it confirms Beds still correct itself at or after the outage ended (CapacityFigure.wardConfirmedAt keeps that confirm when another desk confirms later)","payload":["from and to: whole times typed by the coordinator, never pre-filled","role and now"],"scope":"Coordinator only in EVENT_ROLE, and on the shared server the statewide coordinator only: the record is network-wide, so commandRefusal refuses a service coordinator (D-142 review follow-up, 11 Nov 2026). The ward confirms with the existing CONFIRM_CAPACITY rather than recording the outage. Executive and access admin change nothing (D-80).","guards":["Refuse a missing or non-whole time, an end not after the start and an end later than now","Refuse a window with the same start and end as one already recorded"],"effects":["Appends the record only; nothing is read from the device or carried over from before the outage","Does not change any bed figure, confirmation, stay or movement; dispatched from the coordinator's Record an outage form on the downtime pack (reports/downtime-pack-record-outage.tsx, D-142); each ward's catch-up card, its bed tags and Home's catch-up card then read it"],"sources":[{"path":"src/components/ward-management/ward-flow-pilot-control-events.ts","line":55,"sha256":"bdd8a6e00ebe08750497e083d9e58b225b5803e45015caa5ab388a681418e8a2"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2272,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-outage-catch-up.ts","line":51,"sha256":"eda536beceed5d18ab57717139eff4b0cf1fa174dd4cc2278bf6374359344276"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":614,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-pilot-control.test.ts","tests/ward-event-permissions.test.ts","tests/ward-outage-catch-up-screens.dom.test.tsx"]},"reason":"Source-reviewed command model: a coordinator types the outage window, starting the catch-up prompt; nothing is guessed (Batch 4 item 25, D-135)."},{"event":"HAND_OVER_ITEM","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":617},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":68},{"path":"src/components/ward-management/handover-work-reducer.ts","line":121}],"status":"modelled","model":{"subject":"One open item this desk owns: a referral it handles, a bed meeting chase or a carer callback","before":"The item is open and owned by the sending desk","after":"A pending hand-over to another desk; the item's owner is unchanged until it is accepted","payload":["item (referral id, chase action kind with movement or stay id, or callback id), rebuilt from checked fields; toRole; actingUnitId for a ward; now; role."],"scope":"coordinator, ward, ed or community. Only the desk that owns the item (a ward names its own ward) may hand it on; record ids are checked by authenticated command scope.","guards":["The item names one of the three kinds and is still open.","The sender is the item's owner.","The receiving role is one the item's record can be owned by, not its owner now; a ward only as the item's own ward."],"effects":["Appends handedItems with a reducer-minted HI-N id, the item, from and to desks and handedAt.","Changes no owner, referral, chase or callback. A later hand-over of the same item replaces a pending one."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":121,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":158,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"},{"path":"src/components/ward-management/handover-work-events.ts","line":70,"sha256":"822cf66f714f89453b9c377faffdc8906a7544022bf30c895c34c144334b1241"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: a pending hand-over of one open item, owner unchanged."},{"event":"ACCEPT_HANDED_ITEM","roles":["coordinator","ward","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":618},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":80},{"path":"src/components/ward-management/handover-work-reducer.ts","line":134}],"status":"modelled","model":{"subject":"One pending hand-over","before":"A pending hand-over whose item is still open and still owned by the sender","after":"The hand-over accepted; the item's owner is the receiving desk on its own record","payload":["handedItemId (HI-N); actingUnitId for a ward; now; role."],"scope":"coordinator, ward, ed or community; only the desk named as the receiver.","guards":["The hand-over exists, is not accepted and is the latest for its item.","The item is still open and its owner is still the sender, so a lapsed hand-over moves nothing.","The accepting desk is the named receiver."],"effects":["Referral: appends an ownerHistory entry. Chase: moves the open action's owner (and ward). Callback: moves its owner.","Stamps acceptedAt on the hand-over."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":134,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":174,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: the receiving desk accepts, moving the owner on the item's own record."},{"event":"RECORD_CARER_CALLBACK","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":621},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":88},{"path":"src/components/ward-management/handover-work-reducer.ts","line":150}],"status":"modelled","model":{"subject":"One current stay or open bed request","before":"No open carer callback for this person, or one with an earlier time","after":"One open carer callback with bestAfter, owned by the recording desk","payload":["admissionId or movementId (exactly one); bestAfter instant; actingUnitId for a ward; now; role. No typed text field."],"scope":"ward for its own patients, or the coordinator.","guards":["Exactly one subject, a current stay or an open bed request.","A ward names the subject's own ward.","bestAfter is a whole instant from now to the same time tomorrow."],"effects":["Appends carerCallbacks with a reducer-minted CB-N id, the subject's ward, times and owner desk; asking again moves an open callback's time."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":150,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-events.ts","line":90,"sha256":"822cf66f714f89453b9c377faffdc8906a7544022bf30c895c34c144334b1241"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: a carer wants a call back, best after a typed time; no name or number held."},{"event":"MARK_CARER_CALLBACK_MADE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":622},"sources":[{"path":"src/components/ward-management/handover-work-events.ts","line":99},{"path":"src/components/ward-management/handover-work-reducer.ts","line":199}],"status":"modelled","model":{"subject":"One open carer callback","before":"An open carer callback","after":"The callback ticked off with madeAt and madeBy","payload":["callbackId (CB-N); actingUnitId for a ward; now; role."],"scope":"ward for its own patients, or the coordinator.","guards":["The callback exists and is not already made.","A ward names the callback's own ward."],"effects":["Stamps madeAt and madeBy. A pending hand-over of it lapses."],"sources":[{"path":"src/components/ward-management/handover-work-reducer.ts","line":199,"sha256":"5b5850c67f5bab3ff41ad143ad7fe316d7151a3225181d1631d95566617e2673"},{"path":"src/components/ward-management/handover-work-model.ts","line":79,"sha256":"047a949304a510069bb3675c5cf292fa4b0dae24dbf098c3e3ecc6b497a3f20e"}],"tests":["tests/ward-handover-own-work.test.ts","tests/ward-event-permissions.test.ts"]},"reason":"Reviewed command model: the call back was made, which clears it from promises due."},{"event":"RECORD_CLINICAL_CONTACT","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":626},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1357},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":716},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1784}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"DISPATCH_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":630},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":69},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2219}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"ACKNOWLEDGE_BROADCAST_ALERT","roles":["coordinator","ward","ed","officer","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":631},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":151},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2220}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"STAND_DOWN_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":632},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":198},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2221}],"status":"diagram-reviewed","reason":"Diagram action notes reviewed against the recorded source revision. Source digests detect subsequent edits; this is not runtime acceptance."},{"event":"EXTEND_BROADCAST_ALERT","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":633},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":228},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2222}],"status":"modelled","model":{"subject":"An active broadcast alert","before":"Active alert with current expiry/duration","after":"Same active alert with expiry and duration each extended by the fixed default","payload":["alertId; now; role. Added duration is DEFAULT_BROADCAST_EXTENSION_MINUTES, not client text or a client-selected number."],"scope":"coordinator or bed_manager. A scoped actor must control every recipient of the existing alert, not merely see one recipient.","guards":["Alert exists and is active at now; stood-down or expired alerts cannot be revived by extension."],"effects":["Adds 30 minutes (current default) to stored durationMinutes and to existing expiresAt; preserves recipients, replies and acknowledgements."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":228,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":461,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2413,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":758,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-top25-broadcast-extend.dom.test.tsx"]},"reason":"Reviewed command model: Same active alert with expiry and duration each extended by the fixed default."},{"event":"ADD_BROADCAST_ALERT_UNITS","roles":["coordinator","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":634},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":243},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2223}],"status":"modelled","model":{"subject":"An active directive or bed call's recipients","before":"Existing recipient scope/list","after":"Existing recipients plus new unique named desks","payload":["alertId; non-empty unitIds array naming real desks; now; role."],"scope":"coordinator or bed_manager. Authenticated scope must cover the existing alert's full recipient set and every newly added desk.","guards":["Alert exists and is active; Pull now cannot add recipients.","Bed calls accept real wards only; directives may also name real ED desks.","At least one named desk has not already been asked."],"effects":["Resolves previous scope into an explicit targetUnitIds list, appends only new ids and recomputes targetScopeLabel.","Does not reset expiry or clear previous replies/acknowledgements."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":243,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2412,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":758,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-broadcast-add-units.test.ts"]},"reason":"Reviewed command model: Existing recipients plus new unique named desks."},{"event":"RAISE_PULL_NOW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":638},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":293},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2224}],"status":"modelled","model":{"subject":"A waiting movement and a new patient-specific broadcast","before":"Waiting open movement with wards considering/accepting it, no live Pull now","after":"Same movement plus active Pull now addressed to the relevant wards","payload":["movementId; now; role. Recipients, text, severity, deadlines and id are generated from state/constants."],"scope":"coordinator only; authenticated scope must permit the movement and every ward selected by pullNowWards.","guards":["Movement exists, is open and in PULL_NOW_LIVE_STAGES.","No currently live still-applicable Pull now exists for this movement.","At least one real relevant ward can be asked."],"effects":["Prepends an active critical pull_now alert, increments broadcastSequence and records answerBy/expiry and movement stage-change count at dispatch.","Recipients are accepting ward, else real referred wards. Does not itself pull a bed, move the patient or change movement stage."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":293,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/alerts/ward-broadcast-model.ts","line":317,"sha256":"b27896e799de72fbb71c7782bc2a571627809762c61a40dcecb86b07007ca647"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2434,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":779,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-global-alerts.test.ts"]},"reason":"Reviewed command model: Same movement plus active Pull now addressed to the relevant wards."},{"event":"REPLY_BROADCAST_ALERT","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":640},"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":348},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2225}],"status":"modelled","model":{"subject":"One desk's answer to a bed call or Pull now","before":"Active applicable alert with no answer or a different latest answer for this desk","after":"Reply appended; desk also acknowledged","payload":["alertId; real unitId; answer from this alert kind's fixed list; optional beds, readyAt or reason as required by answer; now; role."],"scope":"ward, bed_manager or coordinator, with authenticated place/record scope. A bed call accepts wards only; Pull now accepts only its target wards.","guards":["Alert exists and is active; Pull now's movement must still be waiting; directives use acknowledgement instead.","Unit is real and included when recipients are explicit; answer belongs to kind-specific list.","can_take needs whole beds in 1..BED_CALL_MAX_BEDS; after_discharge/bed_ready_at needs finite future readyAt within the configured horizon; Pull now cannot needs a listed decline reason.","An identical latest answer is refused."],"effects":["Appends reply {unitId,answer,at,role,...conditional detail}; adds desk to acknowledgedUnits once.","Answers are reported capacity statements, not bed allocation or automatic movement transitions."],"sources":[{"path":"src/components/ward-management/alerts/ward-broadcast-reducer.ts","line":348,"sha256":"cd46a2fc3599a4dbc092b05eda177f7da454de1cd8642597fa17bf3281a11907"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2433,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-global-alerts.test.ts","tests/ward-broadcast-audience-bed-call-wards.test.ts"]},"reason":"Reviewed command model: Reply appended; desk also acknowledged."},{"event":"BOOK_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":643},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":78},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2231}],"status":"modelled","model":{"subject":"A future planned admission","before":"No booking for this linked patient, or an initials-only booking to create","after":"New PA-* record in booked state, holding no bed","payload":["Exactly one of patientId or initials; sex; ageBand; reason; unitId; expectedArrivalAt; expectedStayDays; legalStatus; now/role. Optional gender, overrideReason, actingUnitId. Linked patient requires calendarDate for age validation."],"scope":"coordinator, bed_manager or ward; ward may book its own ward only. Authenticated place/record scope additionally applies.","guards":["Finite now and arrival, listed reason/legal status/gender and bounded whole expectedStayDays; destination unit exists.","Arrival must fall within the configured booking window; a newly chosen arrival cannot be in the past.","Ward caller must name its actingUnitId and all affected wards must be that unit.","Admission authorisation gate needs a listed override reason when applicable; other placement gates are rechecked on conversion.","Ward must be open to new admissions. Sex and ageBand are listed.","Linked patient exists, has no occupied/pulled bed or existing booked planned admission; recorded birth date matches cohort on arrival date. Initials-only requires 1–3 letters; the panel names digits and more than three letters separately, while blank initials get the generic \"Initials are one to three letters.\" line; a direct event with neither patient nor initials is rejected by the patient-or-initials guard."],"effects":["Appends a booked plan and increments plannedAdmissionSequence; linked gender comes from patient record, never event.","Stores a required same-ward authorisation override. No bed count or admission changes until conversion; initials invoke the typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":334,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":298,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2449,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-audit24-1-planned-booking-authorised.test.ts"]},"reason":"Reviewed command model: New PA-* record in booked state, holding no bed."},{"event":"CHANGE_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":644},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":423},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2236}],"status":"modelled","model":{"subject":"An existing booked planned admission","before":"booked plan with current ward/date/stay/reason/legal status/gender","after":"Still booked, with revised fields, changedAt and incremented changeCount","payload":["plannedAdmissionId; replacement reason/unitId/expectedArrivalAt/expectedStayDays/legalStatus; now/role. Optional gender, overrideReason, actingUnitId; calendarDate when a linked arrival changes calendar day."],"scope":"coordinator, bed_manager or ward; a ward may change neither from nor to another ward. Authenticated record and destination scope also applies.","guards":["Finite now and arrival, listed reason/legal status/gender and bounded whole expectedStayDays; destination unit exists.","Arrival must fall within the configured booking window; a newly chosen arrival cannot be in the past.","Ward caller must name its actingUnitId and all affected wards must be that unit.","Admission authorisation gate needs a listed override reason when applicable; other placement gates are rechecked on conversion.","Plan exists and remains booked.","Changing to a different closed ward refuses; an existing booking at a newly closed ward may remain there.","An overdue booking may retain its old arrival time while other fields change; moving a linked arrival date must still match its recorded cohort.","Authorisation override may persist for the same standing ward/gate; moving away drops an irrelevant override."],"effects":["Replaces planning fields, records changedAt/count and record-derived linked gender. No bed is held or released."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":418,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":298,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2506,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-audit24-1-planned-booking-authorised.test.ts"]},"reason":"Reviewed command model: Still booked, with revised fields, changedAt and incremented changeCount."},{"event":"CANCEL_PLANNED_ADMISSION","roles":["coordinator","bed_manager","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":645},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":499},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2241}],"status":"modelled","model":{"subject":"One booked planned admission","before":"booked","after":"cancelled with cancel reason and time","payload":["plannedAdmissionId; unitId equal to booking's ward; listed cancellation reason; finite now; role; actingUnitId when ward."],"scope":"coordinator, bed_manager or ward, with own-ward identity for ward and authenticated booking scope.","guards":["Booking exists and state is booked.","Reason is listed; unitId matches booking; ward scope matches; now finite."],"effects":["Retains the booking record, changing state/cancelledAt/cancelReason.","No capacity refund occurs because booking held no bed. Cancelled plans no longer count as pending arrivals.","The step can be taken back by UNDO_RELEASE_STEP within the Undo window, filed against the booking."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":494,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2506,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts"]},"reason":"Reviewed command model: cancelled with cancel reason and time."},{"event":"CONVERT_PLANNED_ADMISSION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":646},"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":523},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":750}],"status":"modelled","model":{"subject":"A booked plan and its receiving ward","before":"booked plan, no current linked bed/journey, ready eligible capacity","after":"Plan arrived and linked to a new occupied admission","payload":["plannedAdmissionId; unitId equal to booking's ward; finite now; role; actingUnitId for ward."],"scope":"ward or coordinator only; ward must name its own booked ward. Authenticated booking/ward scope additionally applies.","guards":["Plan exists and is booked; unit matches and is open. Linked patient has neither another held/occupied bed nor an open movement.","A Ready bed exists (pulledBedAvailability, counting live pulled admissions) and, when beds are pending preparation, more Ready beds than pending ones. Secure request requires a free locked bed. Other journeys' pending numbered reservations at the ward come off Ready and off the free locked and open counts first.","Current placement eligibility gates pass; only a recorded same-ward authorisation override waives that specific gate.","A gender-placement review requirement refuses this shortcut; use referral journey instead."],"effects":["Creates an occupied AD-ARR-* admission with recorded patient/sex/gender/planned legal status, without a movement/referral; increments admissionSequence.","Decrements ward empty and allocatable counts by one, locked count when used, and increments sex mix.","Marks plan arrived with convertedAt/admissionId; does not create a numbered bed assignment or admit merely because its date passed."],"sources":[{"path":"src/components/ward-management/capacity/planned-admissions-reducer.ts","line":518,"sha256":"d91a5be952e2110e25d304edcac7c17bede49897d9115701033cc8be1e0c61df"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2534,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-planned-admissions.test.ts","tests/ward-planned-arrival-closed-bed.test.ts"]},"reason":"Reviewed command model: Plan arrived and linked to a new occupied admission."},{"event":"RECORD_SUPPORT_NOTIFICATION","roles":["ward","coordinator","ed"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":650},"sources":[{"path":"src/components/ward-management/ward-flow-record-events.ts","line":1358},{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":728},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1785}],"status":"modelled","model":{"subject":"One completed involuntary arrival/transfer or discharge, and one support party","before":"No or earlier checklist Tell record","after":"Another told/not_applicable record appended","payload":["occasion admission|transfer|discharge; party from checklist; outcome told|not_applicable; now/role. Arrival/transfer names movementId only; discharge admissionId only. told needs nonblank bounded who and optional contactedAt\u003c=now; not_applicable needs nonblank bounded reason and forbids who/contactedAt."],"scope":"ward or coordinator. Authenticated arriving movement must belong to its accepted ward scope; admission references and acting place are separately scoped.","guards":["now finite; occasion/party/outcome listed.","Named subject exists and meets completed involuntary arrival/transfer/discharge eligibility; arrival occasion matches recorded source.","Conditional text fields obey exclusive shape and length/time rules."],"effects":["Appends uniquely numbered SN-* record with subject/occasion/party/desk/time and outcome detail; creates step Undo.","Advisory recording only: neither calculates legal duties/deadlines nor blocks or advances the journey. Typed who/reason invokes typed-text persistence boundary."],"sources":[{"path":"src/components/ward-management/ward-flow-record-stay-events.ts","line":723,"sha256":"6d2e541a95fe4655e181df60917102587753069caaf78534536b93a4a5b4d4fe"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2537,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":937,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-support-notifications.test.ts","tests/ward-discharge-support-notification.test.ts"]},"reason":"Reviewed command model: Another told/not_applicable record appended."},{"event":"SEND_RELEASE_SUPPORT_NOTICE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":651},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1848},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":31}],"status":"modelled","model":{"subject":"One confirmed bed release and a support service","before":"confirmed release with no Sent record for chosen service","after":"confirmed release with service marked Sent","payload":["releaseId; service from SUPPORT_SERVICE_TYPES; actingUnitId required and equal to release.unitId; now; role."],"scope":"ward or coordinator; actingUnitId must equal the release's ward even for coordinator, and authenticated scope also applies.","guards":["Release exists and remains confirmed.","Service is listed and has not already been notified.","Acting unit is the release's own unit."],"effects":["Appends {service,at,by} to supportNoticesSent.","This prototype writes the record; no external pharmacy, transport or cleaning integration is invoked by this handler. No bed/stage change."],"sources":[{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":55,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":30,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-release-notices.test.ts"]},"reason":"Reviewed command model: confirmed release with service marked Sent."},{"event":"RECORD_DISCHARGE_DEPENDENCY","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":653},"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":34},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1851}],"status":"modelled","model":{"subject":"One non-discharged bed release and one logistics kind","before":"Missing or existing dependency for this kind","after":"Latest outstanding/done/not_needed state and owner recorded","payload":["releaseId; actingUnitId equal to release ward; kind/owner/state from closed lists; now; role."],"scope":"ward or coordinator, requiring release's own actingUnitId and authenticated release scope.","guards":["Release exists and is not discharged.","Kind, owner and state are listed.","Repeating the same already-outstanding owner/state refuses; done/not_needed can be reconfirmed."],"effects":["Adds or replaces the dependency by kind, recording time and desk label.","Does not alter release stage, blocker, bed counts, or call an external service."],"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":60,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":78,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-discharge-dependencies.test.ts"]},"reason":"Reviewed command model: Latest outstanding/done/not_needed state and owner recorded."},{"event":"RECORD_DISCHARGE_PLAN_CHANGE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":654},"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":49},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1852}],"status":"modelled","model":{"subject":"One non-discharged bed release's logistics plan","before":"Current expected time or planned destination","after":"One changed fact, with recorded change history where applicable","payload":["releaseId; actingUnitId equal to release ward; exactly one of finite expectedAt or listed leavingDestination; now; role."],"scope":"ward or coordinator, requiring release's own actingUnitId and authenticated release scope.","guards":["Release exists and is not discharged.","Exactly one fact is carried and it differs from the current recorded fact.","Date is finite; destination is in LEAVING_DESTINATIONS."],"effects":["Date branch updates BedRelease.expectedAt and appends planChanges; destination branch writes plannedDestination and appends a change only if a prior destination existed.","Done dependencies relying on a changed fact can be shown as needing recheck by selectors. Handler does not itself cancel logistics, change release stage or bed counts.","A date change on a release linked to a stay that has not departed also updates that stay's expected discharge date, date-move count and set-by (updateExpectedDischargeDate), and the stay's other pending releases."],"sources":[{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":101,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/discharges/discharge-dependency-events.ts","line":49,"sha256":"dc256c1d387ba227491f407b6f56c3692ba3478fd4bd96dc95a5bb5b45e7e9dd"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-discharge-dependencies.test.ts"]},"reason":"Reviewed command model: One changed fact, with recorded change history where applicable."},{"event":"RECORD_DISCHARGE_CHECK","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":656},"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":37},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2252}],"status":"modelled","model":{"subject":"One stay with a bed (not waitlisted) and one checklist item","before":"Item not ticked, or ticked with a different state","after":"One discharge checklist item recorded as done, not needed or outstanding","payload":["admissionId; item and state from closed lists; now and role; actingUnitId when acting as ward."],"scope":"ward or coordinator. A ward must name the admission's own unit.","guards":["Admission exists and is not waitlisted.","Item and state are listed, and the state differs from the item's current ticked state."],"effects":["Sets admission.dischargeChecks[item] with time and desk role.","Advisory only: never blocks RECORD_LEAVING or RECORD_PATIENT_DISCHARGE and changes no release or bed figure."],"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":60,"sha256":"584c52430b354fe68ebf1f0504c424400f28a32eb8f081f08ffb27a7016896d1"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":658,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-discharge-follow-through.test.ts"]},"reason":"Reviewed command model: One discharge checklist item recorded as done, not needed or outstanding."},{"event":"RECORD_FOLLOW_UP_REPLY","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":658},"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":51},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":2253}],"status":"modelled","model":{"subject":"One stay with a bed (not waitlisted) referred to the acting community team","before":"No reply, or a different reply or decline reason","after":"The community team's follow-up reply recorded, with a listed reason when declined","payload":["admissionId; reply from awaiting/accepted/declined; declineReason from a closed list only with declined; now and role; actingTeamId when acting as a community team."],"scope":"community or coordinator. A community desk must name a known team the admission's referral named.","guards":["Admission exists and is not waitlisted.","A community desk names its team, and the stay belongs to that team.","Reply is listed; a decline carries a listed reason and nothing else does; the same reply is not recorded twice."],"effects":["Sets admission.followUpReply with time and desk role; the ward reads it on the discharge board and checklist.","Does not change the ward's followUp record, the care journey, any release or bed figure."],"sources":[{"path":"src/components/ward-management/discharges/discharge-check-events.ts","line":60,"sha256":"584c52430b354fe68ebf1f0504c424400f28a32eb8f081f08ffb27a7016896d1"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":660,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}],"tests":["tests/ward-discharge-follow-through.test.ts"]},"reason":"Reviewed command model: The community team's follow-up reply recorded, with a listed reason when declined."},{"event":"RECORD_ARRIVAL_CHECK","roles":["ed","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":659},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1854},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":47}],"status":"modelled","model":{"subject":"An open movement's pre-transfer checklist flag","before":"Contraband-search or medication-chart flag false/unrecorded or true","after":"Chosen flag set to the opposite recorded boolean","payload":["movementId; check from ARRIVAL_CHECKS; done boolean; now; role."],"scope":"ed or coordinator; authenticated movement/place scope additionally applies.","guards":["Movement exists and has no closure.","Check is listed and done is boolean.","Unrecorded counts as false; trying to record the same effective value refuses."],"effects":["Writes contrabandSearchDone or medicationChartDone only. false takes a mistaken tick back.","Does not itself certify a clinical assessment, create a notice or advance stage."],"sources":[{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":102,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-flow-release-notice-events.ts","line":46,"sha256":"81d8ce05491f37320f53e7be9054404ad54c2e7244d4484901eaa5ada8f52536"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-release-notices.test.ts","tests/ward-top25-admission-checklist.dom.test.tsx"]},"reason":"Reviewed command model: Chosen flag set to the opposite recorded boolean."},{"event":"UNDO_REFERRAL_DECISION","roles":["ward","coordinator","ed","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":663},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1638},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":98}],"status":"modelled","model":{"subject":"The latest accepted/declined decision snapshot on a referral","before":"Referral exactly as the latest undoable decision left it","after":"Referral restored to its pre-decision snapshot","payload":["referralId; now; role; optional recordSeq to bind the exact decision; actingUnitId when ward."],"scope":"ward, coordinator, ed or community in role table, then original acting role (and ward) or coordinator; authenticated reference scope applies.","guards":["Referral and its decision Undo record exist; supplied recordSeq matches newest record.","now is not before the decision and is within UNDO_WINDOW_MINUTES (currently five).","Current referral deeply equals saved after snapshot; original-role/ward check passes.","An undone ACCEPT_REFERRAL refuses while a movement for the referral is not closed as did_not_proceed, or a stay from it holds a bed."],"effects":["Restores full referral before snapshot, removes only notices created by that decision id/time, and consumes the Undo record.","Does not remove the audit evidence of the decision or Undo; a later reassessment can make this Undo inapplicable."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":98,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1350,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-undo-toast-record-seq.dom.test.tsx"]},"reason":"Reviewed command model: Referral restored to its pre-decision snapshot."},{"event":"UNDO_AUDIT_REVIEW","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":665},"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":105},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1463}],"status":"modelled","model":{"subject":"One captured-event review in the current world generation","before":"Latest review on its captured event","after":"That review removed while audit history remains","payload":["reviewId; expectedGeneration matching current worldGeneration; finite now; role."],"scope":"coordinator only, with authenticated review/record scope; role check occurs before protected payload handling.","guards":["expectedGeneration is a safe current counter; review exists uniquely in this generation.","No later review on that event remains; undo newest first.","Time is at or after review and within UNDO_WINDOW_MINUTES."],"effects":["Removes that review from auditReviews and appends audited Undo; audit review ids are not reused.","Does not erase the reviewed event or its original review/Undo audit entries."],"sources":[{"path":"src/components/ward-management/ward-flow-protected-record-events.ts","line":105,"sha256":"bfc2dbb4d35f590f6a48073fdc1d2a552b38abe82dbebc83dc2131eb52e16828"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2611,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-governance.dom.test.tsx"]},"reason":"Reviewed command model: That review removed while audit history remains."},{"event":"PLACE_IN_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":667},"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":99},{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1657}],"status":"modelled","model":{"subject":"A current occupied/pulled stay on one ward","before":"Stay in another numbered bed or with known kind but no number","after":"Same stay recorded in the selected numbered bed and matching bed kind","payload":["admissionId; integer bedNumber within unit.beds; now/role; actingUnitId for ward; optional listed overrideReason when moving a locked/secure/involuntary stay to an open bed."],"scope":"ward or coordinator; ward must name admission's own unit. Authenticated stay/ward scope applies.","guards":["Admission exists and bedIsOccupied; unit exists; new bed differs and is in range, unoccupied and not held by another journey.","Prior bed kind can be determined safely; resulting locked/free counts are supported.","Open-bed move that needs an override has a listed reason."],"effects":["Updates admission bedNumber/bedKind, adjusts allocatableLocked only for kind changes; total empty/allocatable counts stay unchanged.","For a linked pulled stay, keeps movement heldBedNumber and accepted referral arm heldBedNumber aligned.","Captures the exact bed-placement Undo snapshot including prior kind, capacity revision and linked holds."],"sources":[{"path":"src/components/ward-management/ward-flow-bed-events.ts","line":97,"sha256":"09c601d833dcb66d3e94cb5acb54aaad7c4d3e05569b53d6447aa415d1402954"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2616,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-release-pull-undo-guard.test.ts"]},"reason":"Reviewed command model: Same stay recorded in the selected numbered bed and matching bed kind."},{"event":"UNDO_PLACE_IN_BED","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":668},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1639},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":134}],"status":"modelled","model":{"subject":"A stay's latest numbered-bed move","before":"Stay still in saved destination bed; any changed kind capacity/linked holds unchanged","after":"Prior bed number/kind and associated hold numbers restored","payload":["admissionId; now; role; optional recordSeq; actingUnitId when ward."],"scope":"ward or coordinator; original acting role/ward or coordinator, plus authenticated stay scope.","guards":["Latest move record exists; exact supplied recordSeq, time-window and acting-role checks pass.","Stay remains current on same unit/in afterBed; changed kind capacity revision/count and linked pulled movement/referral arm still match saved after values.","Every restored numbered bed remains valid, unoccupied and unheld by another journey."],"effects":["Restores bedNumber (or absence), bedKind (or absence), changed free-locked count and linked hold numbers without overwriting unrelated rows.","Consumes bed-placement Undo; same-kind moves do not overwrite or block on unrelated later capacity changes."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":134,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-flow-events.ts","line":2636,"sha256":"8a2438031d11683d8648960b9d12ffd41eda8a351a21b1b50037bfd2ab59dde4"},{"path":"src/components/ward-management/ward-undo.ts","line":492,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-and-bed-board.test.ts","tests/ward-release-pull-undo-guard.test.ts"]},"reason":"Reviewed command model: Prior bed number/kind and associated hold numbers restored."},{"event":"UNDO_REFER_TO_UNITS","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":671},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1640},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261}],"status":"modelled","model":{"subject":"Latest undoable REFER_TO_UNITS on the named subject","before":"Saved step record and unchanged post-step state","after":"Movement offer/ward-referral changes reversed","payload":["movementId; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator only. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for REFER_TO_UNITS; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts"]},"reason":"Reviewed command model: Movement offer/ward-referral changes reversed."},{"event":"UNDO_ACCEPT_IN_PRINCIPLE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":672},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1641},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":262}],"status":"modelled","model":{"subject":"Latest undoable ACCEPT_IN_PRINCIPLE on the named subject","before":"Saved step record and unchanged post-step state","after":"Acceptance, held bed/admission and generated notices restored to pre-acceptance","payload":["movementId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original ward actingUnitId or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for ACCEPT_IN_PRINCIPLE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts"]},"reason":"Reviewed command model: Acceptance, held bed/admission and generated notices restored to pre-acceptance."},{"event":"UNDO_LEGAL_FORM_RECORD","roles":["ed","coordinator","ward","community"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":673},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1642},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":263}],"status":"modelled","model":{"subject":"Latest undoable RECORD_LEGAL_FORM_WRITTEN, RECORD_LEGAL_FORM_CODE, RECORD_LEGAL_FORM_RECEIVED or RECORD_LEGAL_FORM_EXPIRY on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest recorded form/time/receipt/expiry and accompanying changed rows restored","payload":["movementId; now; role; optional recordSeq matching the exact newest step."],"scope":"ed, coordinator, ward or community; original acting role or coordinator (role eligibility is not authority over another place). Authenticated record/place scope remains required. A ward must match the original ward captured in the saved Undo record, not merely a ward eligible to view or act on the movement now. Missing legacy ward provenance refuses a ward caller; coordinator handling remains available.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The legitimate legal-form Undo payload omits actingUnitId: reducer role consistency falls back to the saved record.unitId, while shared authenticated scope independently compares that original ward with the caller's scope.","The original ward is recorded on the source legal-form step even when its legitimate caller omitted actingUnitId: receipt provenance uses the sending stay or ward referral, while other form entries use the receiving stay. Another eligible ward cannot substitute for that original ward; coordinator and original-role rules otherwise remain.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_LEGAL_FORM_WRITTEN, RECORD_LEGAL_FORM_CODE, RECORD_LEGAL_FORM_RECEIVED or RECORD_LEGAL_FORM_EXPIRY; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-audit-legal-group.test.ts","tests/ward-ed-handover-events.test.ts","tests/ward-consolidated-authority.test.ts"]},"reason":"Reviewed command model: Newest recorded form/time/receipt/expiry and accompanying changed rows restored."},{"event":"UNDO_SUPPORT_NOTIFICATION","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":674},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1643},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":264}],"status":"modelled","model":{"subject":"Latest undoable RECORD_SUPPORT_NOTIFICATION on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest Tell record removed from the subject's checklist","payload":["movementId or admissionId identifying the original Tell subject; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role or coordinator; arriving movement must remain inside accepted-ward scope. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_SUPPORT_NOTIFICATION; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-support-notifications.test.ts"]},"reason":"Reviewed command model: Newest Tell record removed from the subject's checklist."},{"event":"UNDO_REPATRIATION","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":675},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1644},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":265}],"status":"modelled","model":{"subject":"Latest undoable RECORD_REPATRIATION on the named subject","before":"Saved step record and unchanged post-step state","after":"Return transport record and all generated journey/notice changes restored","payload":["admissionId; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator only. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_REPATRIATION; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-out-of-area-repatriation.test.ts"]},"reason":"Reviewed command model: Return transport record and all generated journey/notice changes restored."},{"event":"UNDO_FLAG_RETURN_EARLY","roles":["coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":676},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1645},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":266}],"status":"modelled","model":{"subject":"The newest FLAG_RETURN_EARLY on one stay","before":"Stay flagged early by that step","after":"Stay as it was before the flag","payload":["admissionId; now; role; optional recordSeq."],"scope":"coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1393,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":266,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-return-early.test.ts"]},"reason":"Reviewed command model: takes back the newest early-return flag on a stay within the Undo window."},{"event":"UNDO_HANDOVER_SIGN_OFF","roles":["coordinator","ward"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":677},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1646},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":267}],"status":"modelled","model":{"subject":"Latest undoable RECORD_HANDOVER_SIGN_OFF on the named subject","before":"Saved step record and unchanged post-step state","after":"Latest sign-off for that ward or network removed","payload":["unitId for ward sign-off; omitted names network subject; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator or ward; original acting role/ward or coordinator; a ward must name its own ward. Authenticated record/place scope remains required. Only the statewide coordinator may omit unitId for a whole-network subject; a scoped coordinator must name a ward inside its scope.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","Shared scoped callers cannot resolve a missing unitId to the whole-network sign-off; an ordinary in-scope ward target remains allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_HANDOVER_SIGN_OFF; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-consolidated-authority.test.ts"]},"reason":"Reviewed command model: Latest sign-off for that ward or network removed."},{"event":"UNDO_SITE_HANDOVER_SIGN_OFF","roles":["bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":680},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1647},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":268}],"status":"modelled","model":{"subject":"Latest undoable RECORD_SITE_HANDOVER_SIGN_OFF on the named subject","before":"Saved step record and unchanged post-step state","after":"Latest sign-off for that site removed; no ward sign-off changed","payload":["siteCode; now; role; optional recordSeq matching the exact newest step."],"scope":"bed_manager only for its own site; coordinator is not eligible even if it signed as cover. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_SITE_HANDOVER_SIGN_OFF; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":283,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-site-handover-sign-off.test.ts"]},"reason":"Reviewed command model: Latest sign-off for that site removed; no ward sign-off changed."},{"event":"UNDO_ED_STEP","roles":["ed","ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":681},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1648},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":269}],"status":"modelled","model":{"subject":"Latest undoable RECORD_ARRIVED_IN_DEPARTMENT, RECORD_EXAMINATION, RECORD_MEDICAL_CLEARANCE, RECORD_TRANSPORT_NEED, RECORD_ED_PRESENTATION, HANDOVER_READY, REQUEST_PSYCH_REVIEW or RECORD_PSYCH_REVIEW_SEEN on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest ED board step and all records it changed restored","payload":["movementId or referralId identifying original subject; now; role; optional recordSeq matching the exact newest step."],"scope":"ed, ward, community or coordinator; original acting role or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_ARRIVED_IN_DEPARTMENT, RECORD_EXAMINATION, RECORD_MEDICAL_CLEARANCE, RECORD_TRANSPORT_NEED, RECORD_ED_PRESENTATION, HANDOVER_READY, REQUEST_PSYCH_REVIEW or RECORD_PSYCH_REVIEW_SEEN; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-ed-examination-save.dom.test.tsx","tests/ward-ed-handover-events.test.ts"]},"reason":"Reviewed command model: Newest ED board step and all records it changed restored."},{"event":"UNDO_TRANSPORT_STEP","roles":["officer","ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":682},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1649},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":270}],"status":"modelled","model":{"subject":"Latest undoable TRANSPORT_ACCEPTED, TRANSPORT_EN_ROUTE, PATIENT_COLLECTED or PATIENT_ARRIVED on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest transport stage reversed, including arrival-created stay and affected bed/resource changes","payload":["movementId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"officer, ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for TRANSPORT_ACCEPTED, TRANSPORT_EN_ROUTE, PATIENT_COLLECTED or PATIENT_ARRIVED; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-undo-steps.test.ts","tests/ward-undo-dependent-records.test.ts"]},"reason":"Reviewed command model: Newest transport stage reversed, including arrival-created stay and affected bed/resource changes."},{"event":"UNDO_DEPARTURE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":683},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1650},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":271}],"status":"modelled","model":{"subject":"Latest undoable RECORD_LEAVING or RECORD_PATIENT_DISCHARGE on the named subject","before":"Saved step record and unchanged post-step state","after":"Departure reversed, stay and capacity restored if still safe","payload":["admissionId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_LEAVING or RECORD_PATIENT_DISCHARGE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-departure-undo-integrity.test.ts"]},"reason":"Reviewed command model: Departure reversed, stay and capacity restored if still safe."},{"event":"UNDO_ABSENT_WITHOUT_LEAVE","roles":["ward","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":684},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1651},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":272}],"status":"modelled","model":{"subject":"Latest undoable RECORD_ABSENT_WITHOUT_LEAVE on the named subject","before":"Saved step record and unchanged post-step state","after":"Newest absence record and related row changes reversed","payload":["admissionId; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"ward or coordinator; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for RECORD_ABSENT_WITHOUT_LEAVE; removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"}],"tests":["tests/ward-engine-safety.test.ts"]},"reason":"Reviewed command model: Newest absence record and related row changes reversed."},{"event":"UNDO_BED_MEETING_ACTION","roles":["coordinator","ward","ed","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":686},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1652},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":273}],"status":"modelled","model":{"subject":"Latest undoable COMPLETE_BED_MEETING_ACTION or RECORD_BED_MEETING_ACTION on the named subject","before":"Saved step record and unchanged post-step state","after":"One completed meeting action reopened to its exact prior state","payload":["subject {kind:movement|admission,id}; action BedMeetingActionKind; actingUnitId when ward; now; role; optional recordSeq matching the exact newest step."],"scope":"coordinator, ward, ed, community or bed_manager; original acting role/ward or coordinator. Authenticated record/place scope remains required.","guards":["A matching newest step Undo record exists for this exact subject/action family; a supplied recordSeq must match.","now is at/after the step and within UNDO_WINDOW_MINUTES (currently five).","Every affected row/whole-list patch still matches saved after values (a created notice may have been read); changed records refuse rather than overwrite newer work.","Any restored occupied/pulled bed is rechecked against current linked-patient, bed-number and hold conflicts; a sending-occupied/receiving-pulled transfer hold is allowed.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Applies only saved before/after patches for COMPLETE_BED_MEETING_ACTION or RECORD_BED_MEETING_ACTION (Chase Undo); removes newly created rows, restores removed/changed rows and removes appended entries.","Consumes that step Undo record; a removed stay loses its bed-placement Undo. Audit history remains; a unit allocatable revision advances instead of being rolled back."],"sources":[{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":261,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-undo.ts","line":74,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":139,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-undo.ts","line":394,"sha256":"3c53075006e38d5b6dac4bfff7b374662ec8511a331c3129f22d9febaefc8186"},{"path":"src/components/ward-management/ward-access-state.ts","line":709,"sha256":"6749082a89387b340bc0b52cfe76a13f8375532e44cbbcdf17a85d696c94e703"},{"path":"src/components/ward-management/ward-bed-meeting-undo-event-type.ts","line":10,"sha256":"a112bd8031c48d720a344b7a3fe9821b6f41db2d88956a2b001f8e5fca8fdb41"}],"tests":["tests/ward-bed-meeting-undo.test.ts"]},"reason":"Reviewed command model: One completed meeting action reopened to its exact prior state."},{"event":"UNDO_BED_STEP","roles":["ward","bed_manager","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":688},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1653},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":274}],"status":"modelled","model":{"subject":"One bed (unitId and bedNumber) or one leave bed record","before":"Bed as the SET_BED_CLOSED or END_LEAVE_BED step left it","after":"Bed or leave record restored to before that step","payload":["now; role; optional recordSeq; actingUnitId when ward; leaveBedId, or unitId and bedNumber."],"scope":"ward, bed_manager or coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1401,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":274,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-tier1-undo.test.ts","tests/ward-undo-dependent-records.test.ts"]},"reason":"Reviewed command model: takes back a bed closed or reopened, or a return from leave, within the Undo window."},{"event":"UNDO_RELEASE_STEP","roles":["coordinator","ward","ed","community","bed_manager"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":689},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1654},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":275}],"status":"modelled","model":{"subject":"One movement, one bed release, or one planned admission","before":"As the release, confirm, cancel or withdraw step left it","after":"Restored to before that step","payload":["now; role; optional recordSeq; actingUnitId when ward; movementId, releaseId or plannedAdmissionId."],"scope":"coordinator, ward, ed, community or bed_manager in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1402,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":275,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"}],"tests":["tests/ward-tier1-undo.test.ts"]},"reason":"Reviewed command model: takes back a released bed, confirmed discharge sign-off, cancelled transport, withdrawn ward request or cancelled planned admission."},{"event":"UNDO_PATIENT_RECORD","roles":["community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":690},"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1655},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":276}],"status":"modelled","model":{"subject":"One patient record","before":"As the CTO or archive step left it","after":"Patient record restored to before that step","payload":["patientId; now; role; optional recordSeq."],"scope":"community or coordinator in the role table.","guards":["A matching Undo record exists for this kind of step on this subject; a supplied recordSeq must match the newest record.","The undoing role is the role (and ward) that acted, or a coordinator; now is within UNDO_WINDOW_MINUTES.","The subject has not changed since the step, and restoring it would not put the patient in a second bed or clash with an occupied bed number.","The complete proposed inverse must keep every leave attached to an occupied same-ward stay, with only one leave per stay; any restored or changed retained UMRN must have no other current owner. Blank, privacy-placeholder and UMRN not recorded values carry no retained identity claim."],"effects":["Restores the saved snapshot of the step, removes notices that step raised and consumes the Undo record.","The audit evidence of the step and of the Undo stays."],"sources":[{"path":"src/components/ward-management/ward-flow-reducer.ts","line":1403,"sha256":"ff62a01c308a19a3cd2f6ea39a1502194855812ad15c7599a441bc8c9e32c4f6"},{"path":"src/components/ward-management/ward-flow-undo-events.ts","line":276,"sha256":"7344423b59a813fb2f73d630be0d158154dd5c64d718ec797aebe6de4c140b5e"},{"path":"src/components/ward-management/ward-retained-umrn.ts","line":25,"sha256":"7968243f077b9d5c9a6fe6a56385f48ff6a97aa39cfdeec8fe97f05919693d80"}],"tests":["tests/ward-tier1-undo.test.ts","tests/ward-retained-umrn.test.ts"]},"reason":"Reviewed command model: takes back a community treatment order recorded or ended, or a record archived in error."},{"event":"RECORD_CARE_PLAN","roles":["ward","ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":694},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":14},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":44}],"status":"modelled","model":{"subject":"A patient record's care plans","before":"Patient exists, holding zero or more care plans (at most one Current)","after":"New Current plan appended; any earlier Current plan marked Superseded, never deleted","payload":["patientId; plan with type and what helps from fixed lists, agreed by (short text), typed dates, optional key contact and one short note","optional attachment as file type and size only (never the file or its name); role and now"],"scope":"Ward, ED, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; plan type and helps on their lists; agreed by and agreed date required","Short text over its limit refused, never shortened; attachment needs a listed type and a positive byte size; at most 20 plans per person"],"effects":["Replaces the patient's carePlans with the superseded list plus the new Current plan","Typed-text event: a session that sends it stops saving to browser storage"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":44,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":696,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":98,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: a new Current care plan on the patient; the previous Current plan becomes Superseded."},{"event":"RECORD_TRIBUNAL_HEARING","roles":["ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":695},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":22},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":81}],"status":"modelled","model":{"subject":"A patient record's tribunal hearing","before":"Patient exists, with or without an earlier hearing date","after":"tribunalHearing holds the typed date, optional typed time, role and time recorded; any earlier hearing and outcome replaced","payload":["patientId; date as YYYY-MM-DD; optional time as HH:MM; role and now"],"scope":"Ward, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; a real calendar date; a 24-hour time when given"],"effects":["Shown as typed, never a countdown (D-93); a worded flag once the date has passed with no outcome"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":81,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":697,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":149,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: a Mental Health Tribunal hearing date held on the patient as typed."},{"event":"RECORD_TRIBUNAL_OUTCOME","roles":["ward","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":696},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":33},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":95}],"status":"modelled","model":{"subject":"A patient record's tribunal hearing","before":"Patient exists with a recorded hearing date","after":"tribunalHearing.outcome holds Held, Adjourned or Cancelled with role and time recorded","payload":["patientId; outcome from TRIBUNAL_OUTCOMES; role and now"],"scope":"Ward, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; a hearing date must be recorded; outcome on the list"],"effects":["Clears the hearing-date-passed flag"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":95,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":698,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"}]},"reason":"Source-reviewed command model: the outcome of the recorded tribunal hearing, held beside its date."},{"event":"SET_CULTURAL_SUPPORT_REQUEST","roles":["ward","ed","community","coordinator"],"permissionSource":{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":697},"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-events.ts","line":41},{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":107}],"status":"modelled","model":{"subject":"A patient record's cultural support request","before":"Patient exists, with or without a request","after":"culturalSupportRequested holds the listed request, or is removed when request is null","payload":["patientId; request from CULTURAL_SUPPORT_REQUESTS or null; role and now"],"scope":"Ward, ED, community or coordinator in EVENT_ROLE. Shared authenticated command scope additionally checks the permitted place and stored record; EVENT_ROLE alone is not place authority.","guards":["Patient must exist; finite now; request on the list or null"],"effects":["Never derived from the Aboriginal status field; set only by this event"],"tests":["tests/ward-patient-care-plans.test.ts","tests/ward-event-permissions.test.ts"],"sources":[{"path":"src/components/ward-management/ward-patient-care-plan-reducer.ts","line":107,"sha256":"ebd947f4ec177d0acb998b35f3ebd66d0ac58b777c9a874e20ed3e67203caa1d"},{"path":"src/components/ward-management/ward-flow-event-roles.ts","line":699,"sha256":"808d614bd517bb11c0ef517ce5632dd3caba8a71758476401f35da82fe26afda"},{"path":"src/components/ward-management/ward-patient-care-plans.ts","line":168,"sha256":"20f25414be8b4ae5eb1b9cc9eee189ba1ba08b0466b00ee6f7139876b963752f"}]},"reason":"Source-reviewed command model: cultural support the person or family asked for, set or taken off."}],"contractSha256":"7cfda9a71c556b4d10a573977f0ef64456a4f9bb9890c7a236952cd73bbb52ad","made":{"builtAt":"2026-11-12T00:50:08.045Z","commit":"b52ff766ad879445cb0a086164bfa7e39516b869","branch":"fix/live-audit-decisions","dirty":true,"dirtyCount":41},"refusalCoverage":null};
 
       // Every lane a node or action can carry, and the colour it draws in.
       const LANE_COLOUR = {
diff --git a/docs/ward-flow/test-fakes.md b/docs/ward-flow/test-fakes.md
index 3730f5f430..b31cadb21f 100644
--- a/docs/ward-flow/test-fakes.md
+++ b/docs/ward-flow/test-fakes.md
@@ -59,6 +59,7 @@ The test fails when a test mocks a module not in this list. Add it here, and to
 @/components/ward-management/shell/ward-access-store
 @/components/ward-management/shell/ward-activity-panel-store
 @/components/ward-management/shell/ward-command-activity
+@/components/ward-management/shell/ward-desk-early
 @/components/ward-management/shell/ward-drawer-bus
 @/components/ward-management/shell/ward-feature-flag-store
 @/components/ward-management/shell/ward-live-region
@@ -103,6 +104,7 @@ The test fails when a test mocks a module not in this list. Add it here, and to
 @/components/ward-management/ward/ward-screen-lazy
 @/components/wf
 @/components/wf/dialog
+@/components/wf/toast-choices
 @/components/wf/use-is-phone
 @/lib/copy-to-clipboard
 @/lib/front-door-pass
diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt
new file mode 100644
index 0000000000..6d52f49ecc
--- /dev/null
+++ b/public/.well-known/security.txt
@@ -0,0 +1,5 @@
+# Ward Flow is a synthetic prototype. See the security policy before testing anything live.
+Contact: https://github.com/BigSimmo/Ward-Flow/security/advisories/new
+Expires: 2027-11-11T00:00:00.000Z
+Policy: https://github.com/BigSimmo/Ward-Flow/blob/main/SECURITY.md
+Preferred-Languages: en
diff --git a/script-budget.json b/script-budget.json
index 0f196337f2..683c92d756 100644
--- a/script-budget.json
+++ b/script-budget.json
@@ -7,7 +7,7 @@
     "/ward-flow/ward/rph-adult-secure": 625.4,
     "/ward-flow/movements/WF-001": 620.3,
     "/ward-flow/capacity": 666.9,
-    "/ward-flow/ed/arm-ed": 678.1,
+    "/ward-flow/ed/arm-ed": 678.6,
     "/ward-flow/bed-meeting": 600.7,
     "/ward-flow/statistics": 641.3
   }
diff --git a/src/app/api/session/route.ts b/src/app/api/session/route.ts
index 5589b82e80..097025b134 100644
--- a/src/app/api/session/route.ts
+++ b/src/app/api/session/route.ts
@@ -142,5 +142,7 @@ export function DELETE(request: NextRequest) {
     "Set-Cookie",
     `${FRONT_DOOR_PASS_COOKIE}=; Path=/; Max-Age=0; SameSite=Lax; HttpOnly${secure}`,
   );
+  // Live audit item 19: the readable marker goes with the pass, so nothing stays after sign-out.
+  response.headers.append("Set-Cookie", `${FRONT_DOOR_MARKER_COOKIE}=; Path=/; Max-Age=0; SameSite=Lax${secure}`);
   return response;
 }
diff --git a/src/components/ward-management/community/community-screen-phone.tsx b/src/components/ward-management/community/community-screen-phone.tsx
index 7ad8130810..adbc3bc33f 100644
--- a/src/components/ward-management/community/community-screen-phone.tsx
+++ b/src/components/ward-management/community/community-screen-phone.tsx
@@ -12,6 +12,7 @@ import { HOME_REGION_NOT_RECORDED } from "@/components/ward-management/ward-mode
 import { currentCareContact } from "../ward-care-journey";
 import { CommunityFollowUp } from "./community-follow-up";
 import { CommunityFollowUpReply } from "./community-follow-up-reply";
+import { CommunityFollowUpReplies } from "./community-follow-up-replies";
 import { FileText, Phone, Users } from "lucide-react";
 import { Badge, Button, PhoneSheet, Radio, SrOnly } from "@/components/wf";
 import { referralWaitLine } from "@/components/ward-management/referrals/referral-wait";
@@ -127,6 +128,7 @@ export function CommunityScreenPhone({ view }: { view: CommunityScreenView }) {
     phoneDeparturePerson,
     closePhoneReferral,
     setToastMessage,
+    umrnLookup,
   } = view;
   const sinceElement = communitySinceElement(view);
   const noticesSection = communityNoticesSection(view);
@@ -323,7 +325,20 @@ export function CommunityScreenPhone({ view }: { view: CommunityScreenView }) {
                 };
               }),
               empty: "Nobody in a bed has a discharge date the ward has written down.",
-              after: <p className={phoneCss.quiet}>Ward-reported plan; elapsed time only. No target is applied.</p>,
+              after: (
+                <>
+                  <p className={phoneCss.quiet}>Ward-reported plan; elapsed time only. No target is applied.</p>
+                  {/* Feature 13: the team's follow-up reply for each, as the desktop Back home list has. */}
+                  <CommunityFollowUpReplies
+                    admissions={lists.expectedBack}
+                    teamId={team.id}
+                    units={units}
+                    now={now}
+                    umrnLookup={umrnLookup}
+                    onMessage={setToastMessage}
+                  />
+                </>
+              ),
             },
             {
               id: "discharged",
diff --git a/src/components/ward-management/community/community-screen.tsx b/src/components/ward-management/community/community-screen.tsx
index 2c9f38f01b..968412791f 100644
--- a/src/components/ward-management/community/community-screen.tsx
+++ b/src/components/ward-management/community/community-screen.tsx
@@ -8,7 +8,8 @@ import { useEffectiveWardAccess } from "@/components/ward-management/shell/ward-
 import { wardScrollBehavior } from "@/components/ward-management/ward-scroll";
 import { currentCareContactCompleted } from "../ward-care-journey";
 import type { DischargeOpenHandle } from "../ward-discharge-records";
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
+import { SharedSessionContext } from "@/components/ward-management/shell/ward-shared-session-context";
 import { Segmented, useIsPhone, useOptionalToast } from "@/components/wf";
 import { usePrintableDisclosures } from "@/components/ward-management/use-printable-disclosures";
 import { useActionToast } from "@/components/ward-management/use-action-toast";
@@ -312,6 +313,10 @@ function useCommunityScreenView({ teamId, admissions, referrals, demonstration =
     "worldGeneration",
   );
   const liveReferrals = useCommunityScopedReferrals();
+  // Live audit item 6 (11 Nov 2026): the signed-in shared workspace (a shared build, or a signed-in
+  // session) never shows the Midland demo team.
+  const sharedWorkspace =
+    useContext(SharedSessionContext) !== null || process.env.NEXT_PUBLIC_WARD_SHARED_ENABLED === "true";
   const sentByAnyTeam = useCommunitySentReferrals();
   const now = useWardFlowClock();
   const raise = useWardRaise("community");
@@ -434,7 +439,7 @@ function useCommunityScreenView({ teamId, admissions, referrals, demonstration =
     generation: worldGeneration,
     shared,
     onAccepted: (source) => {
-      if (MIDLAND_DEMO_TEAM.test(teamId)) recordMidlandContact("team");
+      if (!sharedWorkspace && MIDLAND_DEMO_TEAM.test(teamId)) recordMidlandContact("team");
       if (source === "modal") setActiveModalType((current) => (current === "contact" ? null : current));
       else setToastMessage("Team contact logged. This does not record patient or referral contact.");
     },
@@ -450,8 +455,10 @@ function useCommunityScreenView({ teamId, admissions, referrals, demonstration =
   const hasExplicitProps = Boolean(admissions || referrals);
   const isDemoMode = demonstration && !hasExplicitProps;
   // The live Midland page carries the locked mock-up's demo team (Q126, Q132: Midland only). Supplied
-  // records, and the older demonstration cohort, keep their own lists.
-  const midlandDemo = !hasExplicitProps && !demonstration && MIDLAND_DEMO_TEAM.test(teamId);
+  // records, and the older demonstration cohort, keep their own lists. Live audit item 6 (11 Nov
+  // 2026): the signed-in shared workspace never shows the demo team, so its home lists the shared
+  // referrals and a contact is saved to the workspace, not kept in this browser.
+  const midlandDemo = !hasExplicitProps && !demonstration && !sharedWorkspace && MIDLAND_DEMO_TEAM.test(teamId);
   const midlandDecisions = useMidlandDecisions();
 
   const { demoTeamReferrals, demoVisibleReferrals, demoVisibleInpatients, demoVisibleEgress, demoVisibleCaseload } =
diff --git a/src/components/ward-management/discharges/discharge-ready-to-leave.tsx b/src/components/ward-management/discharges/discharge-ready-to-leave.tsx
index 2bab425fd5..cd3e1dcd42 100644
--- a/src/components/ward-management/discharges/discharge-ready-to-leave.tsx
+++ b/src/components/ward-management/discharges/discharge-ready-to-leave.tsx
@@ -1,10 +1,12 @@
 "use client";
 
 import { Check } from "lucide-react";
-import { useId } from "react";
+import { useContext, useId } from "react";
 
 import { Frac, StatusGlyph, ToastView, cx, useIsPhone } from "@/components/wf";
 
+import { SharedSessionContext } from "../shell/ward-shared-session-context";
+
 import styles from "./discharge-ready-to-leave.module.css";
 
 /**
@@ -55,6 +57,7 @@ export function ReadyToLeave({
   onDismiss: () => void;
 }) {
   const headingId = useId();
+  const signedIn = useContext(SharedSessionContext) !== null;
   // v10 phone: a glyph list (green tick or open circle), not checkbox squares.
   const isPhone = useIsPhone();
   const items: readonly { id: ReadyToLeaveItemId; label: string }[] = onCto
@@ -62,6 +65,9 @@ export function ReadyToLeave({
     : READY_TO_LEAVE_ITEMS;
   const done = items.filter((item) => ticked.includes(item.id)).length;
   const changedLabel = lastChange ? items.find((item) => item.id === lastChange.itemId)?.label : undefined;
+  // Live audit item 7 (11 Nov 2026): the checklist and its ticks are invented for the demo, so the
+  // signed-in shared workspace does not show it until a real shared checklist exists.
+  if (signedIn || process.env.NEXT_PUBLIC_WARD_SHARED_ENABLED === "true") return null;
   return (
     <section className={styles.readyPanel} aria-labelledby={headingId} data-testid="ward-discharge-ready-to-leave">
       <header className={styles.head}>
diff --git a/src/components/ward-management/front-door/front-door-hold.module.css b/src/components/ward-management/front-door/front-door-hold.module.css
new file mode 100644
index 0000000000..500e4f0b70
--- /dev/null
+++ b/src/components/ward-management/front-door/front-door-hold.module.css
@@ -0,0 +1,20 @@
+/*
+ * The four front-door classes the always-loaded holders use (`front-door-lazy.tsx`,
+ * `lock-cards-lazy.tsx`). Composed here so the phone's first load carries these four names, not
+ * the front door's whole class map (budget trim, live audit 11 Nov 2026).
+ */
+.screen {
+  composes: screen from "./front-door.module.css";
+}
+
+.btn {
+  composes: btn from "./front-door.module.css";
+}
+
+.btnPrimary {
+  composes: btnPrimary from "./front-door.module.css";
+}
+
+.link {
+  composes: link from "./front-door.module.css";
+}
diff --git a/src/components/ward-management/front-door/front-door-lazy.tsx b/src/components/ward-management/front-door/front-door-lazy.tsx
index 11ad6f91bc..34c0a8a7c9 100644
--- a/src/components/ward-management/front-door/front-door-lazy.tsx
+++ b/src/components/ward-management/front-door/front-door-lazy.tsx
@@ -5,7 +5,7 @@ import type { ReactNode } from "react";
 
 import { preloadWhenIdle } from "@/components/ward-management/preload-when-idle";
 
-import styles from "./front-door.module.css";
+import styles from "./front-door-hold.module.css";
 
 /**
  * The app's own front door, loaded only when it shows. Every page carries the shared access shell,
diff --git a/src/components/ward-management/front-door/front-door-pass-client.ts b/src/components/ward-management/front-door/front-door-pass-client.ts
index 28bd09909a..2478218a81 100644
--- a/src/components/ward-management/front-door/front-door-pass-client.ts
+++ b/src/components/ward-management/front-door/front-door-pass-client.ts
@@ -7,12 +7,20 @@
 
 const MARKER = "wf_door=1";
 
+/**
+ * Live audit item 19: sign-out removes the marker, so this tab remembers having seen it. A sign-in
+ * in the app after an idle sign-out then still renews the pass.
+ */
+let markerSeen = false;
+
 function frontDoorOn(): boolean {
+  if (markerSeen) return true;
   try {
-    return document.cookie.split(/;\s*/).includes(MARKER);
+    markerSeen = document.cookie.split(/;\s*/).includes(MARKER);
   } catch {
-    return false;
+    // Cookies blocked: no marker to read.
   }
+  return markerSeen;
 }
 
 /**
@@ -62,12 +70,31 @@ export async function renewFrontDoorPass(token: () => Promise<string>): Promise<
   }
 }
 
-/** At sign-out, an idle sign-out or the sign-in limit, end the pass too. Survives the page closing. */
-export function endFrontDoorPass(): void {
-  if (!frontDoorOn()) return;
+/**
+ * At sign-out, an idle sign-out or the sign-in limit, end the pass too. Survives the page closing.
+ * Resolves once the server has answered, or after `END_PASS_DEADLINE_MS`, so Leave the demo can wait
+ * before opening the sign-in page without hanging on a stuck request. True when the server confirmed
+ * the pass ended (or no front door is on); false on an error reply, a network failure or the
+ * deadline. A sign-out ignores the result: the pass still ends at its own time.
+ */
+export const END_PASS_DEADLINE_MS = 8_000;
+
+export function endFrontDoorPass(): Promise<boolean> {
+  if (!frontDoorOn()) return Promise.resolve(true);
   try {
-    void fetch("/api/session", { method: "DELETE", credentials: "same-origin", keepalive: true }).catch(() => {});
+    // The server's reply removes the marker with the pass (live audit item 19). keepalive lets the
+    // request finish if the page closes; the deadline only stops this page waiting for it.
+    const request = fetch("/api/session", { method: "DELETE", credentials: "same-origin", keepalive: true }).then(
+      (response) => response.ok,
+      () => false,
+    );
+    let timer: ReturnType<typeof setTimeout> | undefined;
+    const deadline = new Promise<boolean>((resolve) => {
+      timer = setTimeout(() => resolve(false), END_PASS_DEADLINE_MS);
+    });
+    return Promise.race([request, deadline]).finally(() => clearTimeout(timer));
   } catch {
     // No fetch here: the pass still ends at its own time.
+    return Promise.resolve(false);
   }
 }
diff --git a/src/components/ward-management/front-door/lock-cards-lazy.tsx b/src/components/ward-management/front-door/lock-cards-lazy.tsx
index 23c8cb6782..bdf2a24b27 100644
--- a/src/components/ward-management/front-door/lock-cards-lazy.tsx
+++ b/src/components/ward-management/front-door/lock-cards-lazy.tsx
@@ -4,7 +4,7 @@ import dynamic from "next/dynamic";
 
 import { preloadWhenIdle } from "@/components/ward-management/preload-when-idle";
 
-import doorStyles from "./front-door.module.css";
+import doorStyles from "./front-door-hold.module.css";
 
 /**
  * The idle prompts, out of the phone's first load like the front door. They are fetched once the
diff --git a/src/components/ward-management/officer/officer-screen.tsx b/src/components/ward-management/officer/officer-screen.tsx
index 266a6b109c..88b3c5084e 100644
--- a/src/components/ward-management/officer/officer-screen.tsx
+++ b/src/components/ward-management/officer/officer-screen.tsx
@@ -1,5 +1,6 @@
 "use client";
 
+import { plural } from "../ward-plural";
 import { confirmLeavingShell } from "../shell/ward-leave-guard";
 
 import { usePatientNameDisplay } from "@/components/ward-management/settings/discreet-names";
@@ -658,7 +659,7 @@ export function OfficerScreen() {
       ...lines,
     ].join("\n");
     copyTextToClipboard(text).then(
-      () => showToast(`Handover copied, ${jobs.length} open jobs.`),
+      () => showToast(`Handover copied, ${plural(jobs.length, "open job", "open jobs")}.`),
       () => showToast("Copying is not available in this browser."),
     );
   };
diff --git a/src/components/ward-management/patients/patient-archive-panel.tsx b/src/components/ward-management/patients/patient-archive-panel.tsx
index d4b2019358..2956834bd5 100644
--- a/src/components/ward-management/patients/patient-archive-panel.tsx
+++ b/src/components/ward-management/patients/patient-archive-panel.tsx
@@ -5,7 +5,7 @@ import { useEffect, useRef, useState } from "react";
 
 import { Button, Card, CardBody, CardHead, useToast } from "@/components/wf";
 import { UNDO_TOAST_MS, UNDO_WINDOW_MINUTES } from "@/components/ward-management/ward-operational-defaults";
-import { useWardFlowSelect } from "@/components/ward-management/ward-flow-provider";
+import { useWardFlowClock, useWardFlowSelect } from "@/components/ward-management/ward-flow-provider";
 import { useWardRaise } from "@/components/ward-management/ward-flow-raise";
 import { useRoleGate, useRouteRole } from "@/components/ward-management/ward-role-gate";
 import {
@@ -28,8 +28,9 @@ function useOptionalToast() {
 
 /**
  * #816 (Josh, 26 Oct 2026: archive only, coordinator only): a record added in error can leave every
- * list. Shown only to the coordinator, and only while nothing else names the record, so a person
- * with care recorded against them is never archived. The audit trail keeps the record.
+ * list. Shown only to the coordinator. A person with care recorded against them is never archived;
+ * D-149 (Josh, 11 Nov 2026): the card then says why in one line instead of hiding. The audit trail
+ * keeps the record.
  */
 export function PatientArchivePanel({ patientId, displayName }: { patientId: PatientId; displayName: string }) {
   const gate = useRoleGate();
@@ -41,13 +42,24 @@ export function PatientArchivePanel({ patientId, displayName }: { patientId: Pat
     "bedReleases",
     "leaveBeds",
     "rejections",
+    "undoRecords",
   );
+  const now = useWardFlowClock();
   const [reason, setReason] = useState<PatientArchiveReason | null>(null);
   const [confirming, setConfirming] = useState(false);
   const [problem, setProblem] = useState<string | null>(null);
   if (!gate("ARCHIVE_PATIENT").allowed) return null;
   // The screen's own read of the lists it holds. The engine reads every list and stays the authority.
-  if (patientArchiveProblem(state as Parameters<typeof patientArchiveProblem>[0], patientId) !== undefined) return null;
+  const blocked = patientArchiveProblem(state as Parameters<typeof patientArchiveProblem>[0], patientId, now);
+  if (blocked !== undefined)
+    return (
+      <Card data-testid="ward-patient-archive">
+        <CardHead title="Record added in error" />
+        <CardBody>
+          <p data-testid="ward-patient-archive-why-not">Archive is not available. {blocked}</p>
+        </CardBody>
+      </Card>
+    );
   return (
     <Card data-testid="ward-patient-archive">
       <CardHead title="Record added in error" />
diff --git a/src/components/ward-management/settings/settings-help-and-demo.tsx b/src/components/ward-management/settings/settings-help-and-demo.tsx
index c1a81dd99a..bbf01a627a 100644
--- a/src/components/ward-management/settings/settings-help-and-demo.tsx
+++ b/src/components/ward-management/settings/settings-help-and-demo.tsx
@@ -8,10 +8,22 @@
 
 import Link from "next/link";
 import { type ChangeEvent, type ReactNode } from "react";
-import { BookOpen, Copy, Database, Download, Info, RotateCcw, ShieldCheck, Upload, Wrench } from "lucide-react";
+import {
+  BookOpen,
+  Copy,
+  Database,
+  DoorOpen,
+  Download,
+  Info,
+  RotateCcw,
+  ShieldCheck,
+  Upload,
+  Wrench,
+} from "lucide-react";
 
 import { digestHref } from "@/components/ward-management/shell/ward-facade";
 import { FeatureFlagsCard } from "@/components/ward-management/settings/feature-flags-card";
+import { useCanLeaveDemo, useLeaveDemo } from "@/components/ward-management/shell/leave-demo";
 import { Button, Card, CardHead, buttonClass } from "@/components/wf";
 
 import styles from "@/components/ward-management/settings/settings.module.css";
@@ -184,6 +196,8 @@ export function SettingsDemoTools({
   onCopyDiagnostics?: () => void;
   about?: AboutProps;
 }) {
+  const canLeave = useCanLeaveDemo();
+  const leave = useLeaveDemo();
   return (
     <div className={styles.demoStack} data-setting="demo-tools" data-testid="ward-settings-demo-tools">
       <div className={styles.demoStack}>
@@ -212,6 +226,20 @@ export function SettingsDemoTools({
               </button>
             </SettingRow>
             {onCopyDiagnostics ? <DiagnosticsRow onCopyDiagnostics={onCopyDiagnostics} /> : null}
+            {/* Live audit item 22 (11 Nov 2026): the public demo's way out. */}
+            {canLeave ? (
+              <SettingRow setting="leave-demo" title="Leave the demo" sub="Clears this demo and ends the demo code">
+                <button
+                  type="button"
+                  className={buttonClass({ variant: "ghost", className: styles.pill })}
+                  onClick={leave}
+                  data-testid="btn-leave-demo"
+                >
+                  <DoorOpen size={14} aria-hidden="true" />
+                  Leave
+                </button>
+              </SettingRow>
+            ) : null}
           </Card>
         </div>
         {about ? (
diff --git a/src/components/ward-management/shell-next/next-account-menu.tsx b/src/components/ward-management/shell-next/next-account-menu.tsx
index a1bc82ca6a..251347c4ba 100644
--- a/src/components/ward-management/shell-next/next-account-menu.tsx
+++ b/src/components/ward-management/shell-next/next-account-menu.tsx
@@ -6,6 +6,7 @@ import { useRouter } from "next/navigation";
 
 import { Menu, type MenuItem } from "@/components/wf";
 import { useWardHelpRow } from "@/components/ward-management/help/ward-help-link";
+import { useCanLeaveDemo, useLeaveDemo } from "@/components/ward-management/shell/leave-demo";
 import { SharedSessionContext } from "@/components/ward-management/shell/ward-shared-session-context";
 import { settingsHref } from "@/components/ward-management/shell/ward-facade";
 import rail from "@/components/ward-management/shell/ward-rail.module.css";
@@ -43,6 +44,8 @@ export function RailAccountMenu({
   const session = useContext(SharedSessionContext);
   const router = useRouter();
   const help = useWardHelpRow();
+  const canLeaveDemo = useCanLeaveDemo();
+  const leave = useLeaveDemo();
   const act = (run: () => void) => () => {
     onLeave?.();
     run();
@@ -73,6 +76,12 @@ export function RailAccountMenu({
       { kind: "separator", id: "sep" },
       { id: "sign-out", label: "Sign out", icon: LogOut, onSelect: act(() => session.signOut()) },
     );
+  } else if (canLeaveDemo) {
+    // Live audit item 22: the public demo's way out (`shell/leave-demo.ts`).
+    items.push(
+      { kind: "separator", id: "sep" },
+      { id: "leave-demo", label: "Leave the demo", icon: LogOut, onSelect: act(leave) },
+    );
   }
   const sheet = variant === "sheet";
   return (
diff --git a/src/components/ward-management/shell-next/next-phone-menu-sheet.tsx b/src/components/ward-management/shell-next/next-phone-menu-sheet.tsx
index 936caeb099..0cbe960d41 100644
--- a/src/components/ward-management/shell-next/next-phone-menu-sheet.tsx
+++ b/src/components/ward-management/shell-next/next-phone-menu-sheet.tsx
@@ -47,6 +47,7 @@ import { preloadWhenIdle } from "@/components/ward-management/preload-when-idle"
 import { OperatorSwitcherModal } from "@/components/ward-management/settings/operator-switcher-modal-lazy";
 
 import { useWardDataMode } from "@/components/ward-management/ward-shared-access";
+import { useCanLeaveDemo, useLeaveDemo } from "@/components/ward-management/shell/leave-demo";
 import { SharedSessionContext } from "@/components/ward-management/shell/ward-shared-session-context";
 import { settingsHref, unitHref } from "@/components/ward-management/shell/ward-facade";
 import { announceToWardShell } from "@/components/ward-management/shell/ward-live-region";
@@ -364,10 +365,23 @@ function DataModeRow({ onClose }: { onClose: () => void }) {
   );
 }
 
-/** Sign out of the shared board, with the account it signs out of. Nothing in the local demo. */
+/**
+ * Sign out of the shared board, with the account it signs out of. In the local demo on a front-door
+ * site, Leave the demo instead (live audit item 22); nothing on the open local demo.
+ */
 function SignOutRow() {
   const session = useContext(SharedSessionContext);
-  if (!session) return null;
+  const canLeaveDemo = useCanLeaveDemo();
+  const leave = useLeaveDemo();
+  if (!session) {
+    return canLeaveDemo ? (
+      <li>
+        <button type="button" className={styles.row} data-testid="ward-phone-menu-leave-demo" onClick={leave}>
+          <RowBody icon={LogOut} label="Leave the demo" />
+        </button>
+      </li>
+    ) : null;
+  }
   return (
     <li>
       <button
diff --git a/src/components/ward-management/shell/leave-demo.ts b/src/components/ward-management/shell/leave-demo.ts
new file mode 100644
index 0000000000..cd7b28df73
--- /dev/null
+++ b/src/components/ward-management/shell/leave-demo.ts
@@ -0,0 +1,79 @@
+"use client";
+
+import { useCallback, useContext, useSyncExternalStore } from "react";
+import { useOptionalToast } from "@/components/wf";
+import { endWardFlowBrowserSessionAndPass } from "../ward-browser-data";
+import { SharedSessionContext } from "./ward-shared-session-context";
+
+/**
+ * Live audit item 22 (11 Nov 2026): the public demo had no way to leave. Only a site with the front
+ * door on has its readable marker cookie (`wf_door=1`), so "Leave the demo" shows only there, and
+ * only in the local demo; a signed-in desk has Sign out. Leaving ends the demo the way a sign-out
+ * ends a session (D-88): this browser's demo state and drafts are cleared, the front door's pass
+ * ends through the existing `DELETE /api/session`, and the sign-in page opens.
+ */
+const noChange = () => () => {};
+
+/**
+ * PR #1626 review: a pass end that the server confirms after the deadline still removes the marker,
+ * so this page remembers having seen it. Leave the demo then stays on offer to try again.
+ */
+let markerSeen = false;
+
+function markerPresent(): boolean {
+  if (markerSeen) return true;
+  try {
+    markerSeen = document.cookie.split(/;\s*/).includes("wf_door=1");
+  } catch {
+    // Cookies blocked: no marker to read.
+  }
+  return markerSeen;
+}
+
+/**
+ * True on a front-door site in the browser, in the local demo only. False while the page is drawn on
+ * the server, and always false in a signed-in session, which has Sign out (it revokes the account's
+ * session on the server; leaving the demo would not).
+ */
+export function useCanLeaveDemo(): boolean {
+  const session = useContext(SharedSessionContext);
+  const marker = useSyncExternalStore(noChange, markerPresent, () => false);
+  return marker && !session;
+}
+
+/**
+ * Leave the demo. Resolves false, without leaving, when the server did not confirm the pass ended
+ * (an error reply, no connection or the deadline): opening the sign-in page then would only show
+ * the demo again, because the pass still opens the site.
+ */
+async function leaveDemo(): Promise<boolean> {
+  // The sweep a sign-out runs (D-88). It ends the front door's pass too, awaited here so the sign-in
+  // page never opens while the pass is still good.
+  let ended = false;
+  try {
+    ended = await endWardFlowBrowserSessionAndPass();
+  } catch {
+    ended = false;
+  }
+  if (!ended) return false;
+  // A full load, not a client navigation: the sign-in page must be drawn fresh, and Back must not
+  // return to the demo.
+  window.location.replace("/sign-in");
+  return true;
+}
+
+/** Leave the demo from a button, saying so on a toast when it could not end (try again). */
+export function useLeaveDemo(): () => void {
+  const toast = useOptionalToast();
+  return useCallback(() => {
+    void leaveDemo().then((left) => {
+      if (left) return;
+      toast?.push({
+        tone: "warning",
+        title: "The demo could not end",
+        body: "This browser's demo data was cleared, but the sign-in did not end. Check the connection and try again.",
+        skipOfflineNote: true,
+      });
+    });
+  }, [toast]);
+}
diff --git a/src/components/ward-management/shell/ward-desk-early.ts b/src/components/ward-management/shell/ward-desk-early.ts
index 59fbee2fb0..5aebd312c4 100644
--- a/src/components/ward-management/shell/ward-desk-early.ts
+++ b/src/components/ward-management/shell/ward-desk-early.ts
@@ -37,18 +37,26 @@ const WARD_DESK_WHOLE_NETWORK_VALUE = "0";
 
 const HELD_COOKIE = `${WARD_DESK_HELD_COOKIE}=1;path=/ward-flow;SameSite=Strict`;
 const CLEARED_COOKIE = `${WARD_DESK_HELD_COOKIE}=${WARD_DESK_WHOLE_NETWORK_VALUE};path=/ward-flow;SameSite=Strict`;
+/** Sign-out removes the cookie outright (live audit item 19). With none, the server holds the page (D-137). */
+const REMOVED_COOKIE = `${WARD_DESK_HELD_COOKIE}=;path=/ward-flow;SameSite=Strict;max-age=0`;
 
 /** D-137: the server holds the page unless the request says the desk is the coordinator's. */
 export function wardDeskHeldFromCookie(value: string | undefined): boolean {
   return value !== WARD_DESK_WHOLE_NETWORK_VALUE;
 }
 
-export const WARD_DESK_EARLY_SCRIPT = `(function(){try{var d=JSON.parse(sessionStorage.getItem("wardflow:access-desk-v1")||"null");if(d&&typeof d==="object"){if(d.role==="coordinator"&&d.scope&&d.scope.kind==="statewide"){document.cookie="${CLEARED_COOKIE}";}else{document.documentElement.setAttribute("${WARD_DESK_PENDING_ATTRIBUTE}","");document.cookie="${HELD_COOKIE}";}}}catch(e){/* storage blocked - the cookie stays as it was */}})();`;
+/** Live audit item 19: every write of the desk cookie is Secure over https. */
+export const WARD_DESK_EARLY_SCRIPT = `(function(){try{var d=JSON.parse(sessionStorage.getItem("wardflow:access-desk-v1")||"null"),s=location.protocol==="https:"?";Secure":"";if(d&&typeof d==="object"){if(d.role==="coordinator"&&d.scope&&d.scope.kind==="statewide"){document.cookie="${CLEARED_COOKIE}"+s;}else{document.documentElement.setAttribute("${WARD_DESK_PENDING_ATTRIBUTE}","");document.cookie="${HELD_COOKIE}"+s;}}}catch(e){/* storage blocked - the cookie stays as it was */}})();`;
 
-/** Keeps the cookie in step with the desk this tab has just stored (`ward-access-store.ts`). */
-export function syncWardDeskHeldCookie(wholeNetwork: boolean): void {
+/**
+ * Keeps the cookie in step with the desk this tab has just stored (`ward-access-store.ts`). Sign-out
+ * passes `null`, which removes it, so nothing of the desk stays readable (live audit item 19).
+ */
+export function syncWardDeskHeldCookie(wholeNetwork: boolean | null): void {
   try {
-    document.cookie = wholeNetwork ? CLEARED_COOKIE : HELD_COOKIE;
+    document.cookie =
+      (wholeNetwork === null ? REMOVED_COOKIE : wholeNetwork ? CLEARED_COOKIE : HELD_COOKIE) +
+      (location.protocol === "https:" ? ";Secure" : "");
   } catch {
     // Cookies blocked: the first-load hide above still applies.
   }
diff --git a/src/components/ward-management/shell/ward-shared-save-context.ts b/src/components/ward-management/shell/ward-shared-save-context.ts
index 5835750591..bd390ff618 100644
--- a/src/components/ward-management/shell/ward-shared-save-context.ts
+++ b/src/components/ward-management/shell/ward-shared-save-context.ts
@@ -9,6 +9,8 @@ export type WardSharedSave = {
   status: SharedView["status"];
   error: string | null;
   retry: () => void;
+  /** D-151: `unitId:bedNumber` of each bed a save waiting on this page will change. */
+  waitingBeds?: readonly string[];
 };
 
 export const WardSharedSaveContext = createContext<WardSharedSave | null>(null);
diff --git a/src/components/ward-management/statistics/executive-statistics-contract.ts b/src/components/ward-management/statistics/executive-statistics-contract.ts
index 3ae36f6b2b..6fcc99e476 100644
--- a/src/components/ward-management/statistics/executive-statistics-contract.ts
+++ b/src/components/ward-management/statistics/executive-statistics-contract.ts
@@ -13,6 +13,11 @@ import { ED_WAIT_BANDS } from "./statistics-ed-waits";
 import { reportWeek } from "../reports/weekly-report";
 import { validateConfiguration } from "../ward-configuration";
 
+// Live audit item 23: before the first schema is built, so zod never probes `new Function`, which
+// the production CSP refuses and reports on every executive page. This is Ward Flow's only full-zod
+// schema in the browser (the others use zod/mini, which compiles nothing).
+z.config({ jitless: true });
+
 /** Foundation only. No server or screen adopts this payload until its full reporting contract is ready. */
 const count = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
 const releasedCount = z.discriminatedUnion("kind", [
diff --git a/src/components/ward-management/tools/ward-demo-panel.tsx b/src/components/ward-management/tools/ward-demo-panel.tsx
index 11f96cef09..569046dba6 100644
--- a/src/components/ward-management/tools/ward-demo-panel.tsx
+++ b/src/components/ward-management/tools/ward-demo-panel.tsx
@@ -261,22 +261,27 @@ function OperationalDemoPanel({ oneList = false, grow = false }: { oneList?: boo
           <span className={demo.clock}>
             Demo clock <b>{formatInstant(now)}</b>
           </span>
-          <button
-            type="button"
-            className={demo.small}
-            {...lock}
-            onClick={() => raise("ADVANCE_CLOCK", { minutes: 15 })}
-          >
-            +15 min
-          </button>
-          <button
-            type="button"
-            className={demo.small}
-            {...lock}
-            onClick={() => raise("ADVANCE_CLOCK", { minutes: 60 })}
-          >
-            +1 hour
-          </button>
+          {/* D-150: the signed-in site runs on real Perth time, so its clock is not advanced. */}
+          {shared?.enabled ? null : (
+            <>
+              <button
+                type="button"
+                className={demo.small}
+                {...lock}
+                onClick={() => raise("ADVANCE_CLOCK", { minutes: 15 })}
+              >
+                +15 min
+              </button>
+              <button
+                type="button"
+                className={demo.small}
+                {...lock}
+                onClick={() => raise("ADVANCE_CLOCK", { minutes: 60 })}
+              >
+                +1 hour
+              </button>
+            </>
+          )}
         </div>
         {oneList ? null : (
           <WardDemoReset className={styles.resetBlock} headingClassName={styles.resetHeading} offNoteId={offId} />
diff --git a/src/components/ward-management/use-undoable-step.ts b/src/components/ward-management/use-undoable-step.ts
index 23a5f338e3..0ad3c1cb20 100644
--- a/src/components/ward-management/use-undoable-step.ts
+++ b/src/components/ward-management/use-undoable-step.ts
@@ -58,6 +58,26 @@ type Pending = {
    * toast when the page that raised the toast has gone, because the toast outlives the page.
    */
   sayAfterLeaving?: boolean;
+  /** See `UndoableStep.choices`. */
+  choices?: UndoStepChoices;
+  /** Runs once this step is accepted, in place of its toast: a choice's undo before its redo. */
+  then?: () => void;
+};
+
+/**
+ * D-148: an optional choice on the success toast, such as a bed closure's reason. Choosing undoes
+ * the step and records it again with the choice, so the step itself stays one tap and the audit
+ * trail keeps both. The new step offers Undo as the first did.
+ */
+export type UndoStepChoices = {
+  label: string;
+  items: readonly { id: string; label: string }[];
+  /** The step again with the choice, built when it is chosen. */
+  redo: (id: string, now: Instant) => WardFlowEvent;
+  /** The toast's title once the step with the choice is accepted. */
+  success: (id: string) => string;
+  /** Said if the page has gone when the undo lands, so the step is not redone. */
+  notRedone: string;
 };
 
 type RecordWatch = { undoType: string; subjectId: string; priorSeq?: number; seq?: number };
@@ -90,6 +110,8 @@ export type UndoableStep = {
    * (Josh, 26 Sept 2026), because a shared-board refusal never names the patient (P058).
    */
   who?: string;
+  /** D-148: an optional follow-up choice on the success toast. */
+  choices?: UndoStepChoices;
 };
 
 /** The refusal's words, led by the person's name when the words do not already name them. */
@@ -190,6 +212,10 @@ export function useUndoableStep({
         else onMessage?.(said, "warning");
         continue;
       }
+      if (pending.then) {
+        pending.then();
+        continue;
+      }
       pending.onAccepted?.();
       const build = pending.undo;
       if (!sink) {
@@ -235,42 +261,81 @@ export function useUndoableStep({
               body: `Undo within ${UNDO_WINDOW_MINUTES} min.`,
               undo: {
                 durationMs: UNDO_TOAST_MS,
-                onUndo: () => {
-                  if (pending.outcome?.isCurrent && !pending.outcome.isCurrent()) {
-                    sink.push({
-                      tone: "warning",
-                      title:
-                        "Undo is unavailable because the workspace or working role changed. Review the current board.",
-                    });
-                    return;
-                  }
-                  if (pending.outcome?.canUndo && !pending.outcome.canUndo()) {
-                    sink.push({
-                      tone: "warning",
-                      title:
-                        "Undo is unavailable until the shared board is ready. Wait for it to reconnect, then check the board.",
-                    });
-                    return false;
-                  }
-                  const undoPending = {
-                    prior: rejectionCountRef.current,
-                    success: pending.undone ?? "Undone. Back as it was.",
-                    sayAfterLeaving: true,
-                  };
-                  const undoEvent = {
-                    ...build(nowRef.current),
-                    ...(watch.seq === undefined ? {} : { recordSeq: watch.seq }),
-                  } as WardFlowEvent;
-                  submit(undoEvent, undoPending);
-                  return undefined;
-                },
+                onUndo: () => takeBack(pending, build, watch, { success: pending.undone ?? "Undone. Back as it was." }),
               },
+              ...(pending.choices ? { choices: toastChoices(pending, pending.choices, build, watch) } : {}),
             }),
       });
     }
     // eslint-disable-next-line react-hooks/exhaustive-deps -- The token drives this; `sink`, `routeRole` and the callbacks are read as they are now.
   }, [token, rejections]);
 
+  /** The toast's Undo, or a choice's undo: fenced as one, then sent with the record it was offered for. */
+  function takeBack(
+    pending: Pending,
+    build: (now: Instant) => WardFlowEvent,
+    watch: RecordWatch,
+    next: Pick<Pending, "success" | "then">,
+  ): void | false {
+    if (!sink) return undefined;
+    if (pending.outcome?.isCurrent && !pending.outcome.isCurrent()) {
+      sink.push({
+        tone: "warning",
+        title: "Undo is unavailable because the workspace or working role changed. Review the current board.",
+      });
+      return undefined;
+    }
+    if (pending.outcome?.canUndo && !pending.outcome.canUndo()) {
+      sink.push({
+        tone: "warning",
+        title: "Undo is unavailable until the shared board is ready. Wait for it to reconnect, then check the board.",
+      });
+      return false;
+    }
+    const undoEvent = {
+      ...build(nowRef.current),
+      ...(watch.seq === undefined ? {} : { recordSeq: watch.seq }),
+    } as WardFlowEvent;
+    submit(undoEvent, { prior: rejectionCountRef.current, sayAfterLeaving: true, ...next });
+    return undefined;
+  }
+
+  /** D-148: the toast's choices. Choosing undoes the step, then records it again with the choice. */
+  function toastChoices(
+    pending: Pending,
+    choices: UndoStepChoices,
+    build: (now: Instant) => WardFlowEvent,
+    watch: RecordWatch,
+  ) {
+    return {
+      label: choices.label,
+      items: choices.items,
+      onChoose: (id: string) =>
+        takeBack(pending, build, watch, {
+          success: choices.notRedone,
+          then: () =>
+            runStep(choices.redo(id, nowRef.current), {
+              success: choices.success(id),
+              undo: pending.undo,
+              undone: pending.undone,
+              who: pending.who,
+            }),
+        }),
+    };
+  }
+
+  function runStep(event: WardFlowEvent, step: UndoableStep) {
+    const offered = step.undo?.(nowRef.current);
+    const priorSeq = offered ? undoRecordSeqFor(undoRecords, offered.type, stepUndoSubjectId(offered)) : undefined;
+    // Run after the page has gone (a toast choice's second step): its outcome is said on the layout toast.
+    submit(event, {
+      prior: rejectionCountRef.current,
+      ...step,
+      priorSeq,
+      ...(mountedRef.current ? {} : { sayAfterLeaving: true }),
+    });
+  }
+
   function submit(event: WardFlowEvent, pending: Pending, record?: () => ReturnType<WardCommandDispatch>) {
     let result: ReturnType<WardCommandDispatch>;
     try {
@@ -287,8 +352,18 @@ export function useUndoableStep({
     // After the page has gone, one command says one thing: an unconfirmed save already told the
     // person to check, so the same command's later receipt does not raise a second toast.
     let saidAfterLeaving = false;
+    // PR #1626 review: a toast choice's second step (D-148's reasoned close) still runs after the
+    // page has gone, once its Undo is accepted, even after an earlier "not confirmed" was said.
+    let ranThen = false;
     const publish = (outcome: WardCommandOutcome | void) => {
       if (!mountedRef.current) {
+        if (pending.then && outcome?.status === "accepted" && !(outcome.isCurrent && !outcome.isCurrent())) {
+          if (!ranThen) {
+            ranThen = true;
+            pending.then();
+          }
+          return;
+        }
         if (!saidAfterLeaving) saidAfterLeaving = sayAfterLeaving(pending, outcome || undefined);
         return;
       }
@@ -347,11 +422,7 @@ export function useUndoableStep({
 
   return {
     /** Dispatches `event` now, then offers Undo once the engine has accepted it. */
-    run(event: WardFlowEvent, step: UndoableStep) {
-      const offered = step.undo?.(nowRef.current);
-      const priorSeq = offered ? undoRecordSeqFor(undoRecords, offered.type, stepUndoSubjectId(offered)) : undefined;
-      submit(event, { prior: rejectionCountRef.current, ...step, priorSeq });
-    },
+    run: runStep,
     /** Records through a provider helper while keeping the command's completion and Undo guard. */
     runRecorded(record: () => ReturnType<WardCommandDispatch>, step: UndoableStep) {
       const offered = step.undo?.(nowRef.current);
diff --git a/src/components/ward-management/ward-bed-closure-reason.ts b/src/components/ward-management/ward-bed-closure-reason.ts
new file mode 100644
index 0000000000..4a46950fc8
--- /dev/null
+++ b/src/components/ward-management/ward-bed-closure-reason.ts
@@ -0,0 +1,25 @@
+import { WARD_CLOSURE_REASONS, wardClosureReasonLabel, type WardClosureReason } from "./capacity/ward-closure";
+import type { WardFlowEvent } from "./ward-flow-events";
+import type { UndoStepChoices } from "./use-undoable-step";
+
+/** Re-exported for the bed's History, so the ward screen reads closure words through one file. */
+export { wardClosureReasonLabel };
+
+type BedClose = Extract<WardFlowEvent, { type: "SET_BED_CLOSED" }>;
+
+/**
+ * D-148 (Josh, 11 Nov 2026): "Close this bed" stays one tap with Undo, and its toast offers an
+ * optional reason from the same list a ward closure uses (`WARD_CLOSURE_REASONS`). Choosing one
+ * undoes the close and closes the bed again with the reason, so the audit trail keeps both steps,
+ * the bed's History shows the closure with its reason, and nothing typed is ever stored. No confirm step is added.
+ */
+export function bedClosureReasonChoices(close: Omit<BedClose, "type" | "now" | "closed" | "reason">): UndoStepChoices {
+  const label = (id: string) => wardClosureReasonLabel(id as WardClosureReason);
+  return {
+    label: "Add a reason",
+    items: WARD_CLOSURE_REASONS.map((entry) => ({ id: entry.id, label: entry.label })),
+    redo: (id, now) => ({ ...close, type: "SET_BED_CLOSED", now, closed: true, reason: id as WardClosureReason }),
+    success: (id) => `Bed ${close.bedNumber} closed: ${label(id)}. It is not offered until it is reopened.`,
+    notRedone: `Bed ${close.bedNumber} is open again. Close it again to add a reason.`,
+  };
+}
diff --git a/src/components/ward-management/ward-browser-data.ts b/src/components/ward-management/ward-browser-data.ts
index 63686e6496..4d511cff36 100644
--- a/src/components/ward-management/ward-browser-data.ts
+++ b/src/components/ward-management/ward-browser-data.ts
@@ -1,5 +1,6 @@
 import { endFrontDoorPass } from "@/components/ward-management/front-door/front-door-pass-client";
 import { clearSessionDrafts } from "./ward-session-drafts";
+import { syncWardDeskHeldCookie } from "./shell/ward-desk-early";
 
 /**
  * Ward Flow's browser storage, cleared when a signed-in session ends (overall review 20 Oct 2026,
@@ -153,6 +154,14 @@ function fenceWardLeaveSaves(): void {
  * the storage. A failing reset never stops the others or the sweep.
  */
 export function endWardFlowBrowserSession(): void {
+  void endWardFlowBrowserSessionAndPass();
+}
+
+/**
+ * The same, resolving once the front door's pass has ended (Leave the demo waits on it): true when
+ * the server confirmed it, false when it could not be ended in time.
+ */
+export function endWardFlowBrowserSessionAndPass(): Promise<boolean> {
   fenceWardLeaveSaves();
   clearSessionDrafts();
   for (const reset of sessionEndResets) {
@@ -163,8 +172,9 @@ export function endWardFlowBrowserSession(): void {
     }
   }
   clearWardFlowBrowserData();
+  syncWardDeskHeldCookie(null);
   // The front door's pass ends with the sign-in, so the next person at this browser starts outside.
-  endFrontDoorPass();
+  return endFrontDoorPass();
 }
 
 /**
diff --git a/src/components/ward-management/ward-global-search-commands.tsx b/src/components/ward-management/ward-global-search-commands.tsx
index feed6bb194..f1ad8887fa 100644
--- a/src/components/ward-management/ward-global-search-commands.tsx
+++ b/src/components/ward-management/ward-global-search-commands.tsx
@@ -25,7 +25,8 @@ export function WardSearchCommands({
   resultsCurrent: boolean;
   canRunAction: NonNullable<WardGlobalSearchProps["canRunAction"]>;
   canOpenHref: NonNullable<WardGlobalSearchProps["canOpenHref"]>;
-  onAdvanceClock: () => void;
+  /** Absent in shared mode (D-150): the signed-in site runs on real Perth time. */
+  onAdvanceClock?: () => void;
   onSwitchDesk: (role: DeskRole, href: string) => void;
   onHandover: () => void;
   shortcutsExpanded: boolean;
@@ -50,7 +51,7 @@ export function WardSearchCommands({
         </p>
       ) : null}
       <div className={styles.commandList}>
-        {canRunAction("advance-clock") ? (
+        {canRunAction("advance-clock") && onAdvanceClock ? (
           <button
             type="button"
             className={styles.commandBtn}
diff --git a/src/components/ward-management/ward-global-search.tsx b/src/components/ward-management/ward-global-search.tsx
index ff6a5535a3..7845877b16 100644
--- a/src/components/ward-management/ward-global-search.tsx
+++ b/src/components/ward-management/ward-global-search.tsx
@@ -797,6 +797,11 @@ export function WardGlobalSearch({
     setActiveIndex(-1);
     setHoverIndex(-1);
   }
+  // D-150: the scripted clock is the public demo's; the signed-in site runs on real Perth time.
+  const advanceClock = () => {
+    if (wardFlow) wardFlow.dispatch({ type: "ADVANCE_CLOCK", role: "demo", now: now ?? wardFlow.now, minutes: 15 });
+    close();
+  };
 
   useEffect(() => {
     if (!open) return;
@@ -1270,11 +1275,7 @@ export function WardGlobalSearch({
                 onToggleShortcuts={() => setShowShortcuts((previous) => !previous)}
                 savedHere={myViews.savedHere}
                 onToggleSaveView={myViews.toggleHere}
-                onAdvanceClock={() => {
-                  if (wardFlow)
-                    wardFlow.dispatch({ type: "ADVANCE_CLOCK", role: "demo", now: now ?? wardFlow.now, minutes: 15 });
-                  close();
-                }}
+                onAdvanceClock={wardFlow?.shared?.enabled ? undefined : advanceClock}
                 onSwitchDesk={(role, href) => {
                   navigateWithDirtyGuard(() => {
                     if (deskSwitch.shared) {
diff --git a/src/components/ward-management/ward-patient-archive-reducer.ts b/src/components/ward-management/ward-patient-archive-reducer.ts
index 8d92523b3e..864bf704b7 100644
--- a/src/components/ward-management/ward-patient-archive-reducer.ts
+++ b/src/components/ward-management/ward-patient-archive-reducer.ts
@@ -15,11 +15,29 @@ export function reducePatientArchive(
     return reject(state, event, "ARCHIVE_PATIENT needs a reason from the list");
   // Archived D-14: the event's patient is read through the allow-listed subjectId, not here.
   const patientId = subjectId(event);
-  const problem = patientArchiveProblem(state, patientId);
+  const problem = patientArchiveProblem(state, patientId, event.now);
   if (problem !== undefined) return reject(state, event, problem);
   // The record leaves the lists. Its ADD_PATIENT and this event stay in the audit trail, and the
   // patient sequence is kept, so no later record reuses the id.
   decision.outcome = "accepted";
   decision.reasonCode = "none";
-  return { ...state, patients: state.patients.filter((patient) => patient.id !== patientId) };
+  // D-149: the only referrals still naming the record are ones nobody answered. They stay, but no
+  // longer point at a record that has left the lists, so the stored workspace still checks out.
+  const referrals = state.referrals.map((referral) => {
+    if (referral.patientId !== patientId) return referral;
+    const { patientId: _archived, ...unlinked } = referral;
+    void _archived;
+    return unlinked;
+  });
+  // Any Undo record still naming the record can no longer be used (it is past the window, or stamped
+  // after the board's time by a clock step back). Drop it, so it cannot become usable once the clock
+  // reaches its time and bring back a step naming a record that has left the lists.
+  const quoted = JSON.stringify(patientId);
+  const undoRecords = state.undoRecords?.filter((entry) => !JSON.stringify(entry).includes(quoted));
+  return {
+    ...state,
+    patients: state.patients.filter((patient) => patient.id !== patientId),
+    referrals,
+    ...(undoRecords === undefined ? {} : { undoRecords }),
+  };
 }
diff --git a/src/components/ward-management/ward-patient-archive.ts b/src/components/ward-management/ward-patient-archive.ts
index d10fc361f9..6f4c5de1ef 100644
--- a/src/components/ward-management/ward-patient-archive.ts
+++ b/src/components/ward-management/ward-patient-archive.ts
@@ -2,6 +2,8 @@ import type { Instant } from "./ward-clock";
 import type { WardFlowState } from "./ward-flow-reducer";
 import type { WardFlowRole } from "./ward-flow-roles";
 import type { PatientId } from "./ward-patients";
+import type { Referral } from "./ward-model";
+import { UNDO_WINDOW_MINUTES } from "./ward-operational-defaults";
 
 /**
  * #816 (Josh, 26 Oct 2026: archive only, coordinator only): why a patient record added in error
@@ -35,29 +37,58 @@ export type ArchivePatientEvent = {
 };
 
 /**
- * Why this patient record cannot be archived, or undefined when it can (#816). Archiving is for a
- * record added in error, so a record anything else names (a journey, referral, stay, form or bed
- * record) is refused: that person has care recorded against them. The search reads every list in
- * the state except the record itself and the refusal log, so a list added later is covered too.
- * Kept outside the reducer slice so the archive panel can ask without loading the slice.
+ * Why this patient record cannot be archived, or undefined when it can (#816, D-149). Archiving is
+ * for a record added in error, so a record anything else names (a journey, open or answered
+ * referral, stay, form or bed record) is refused: that person has care recorded against them. The
+ * search reads every list in the state except the record itself and the refusal log, so a list added
+ * later is covered too. Kept outside the reducer slice so the archive panel can ask without loading
+ * the slice.
+ *
+ * D-149 (Josh, 11 Nov 2026): three kinds of link are not care, so they no longer keep the record.
+ * - A front-door referral that was only ever withdrawn or cancelled: no destination answered it.
+ * - Audit rows, which keep the record's history after it is archived.
+ * - An Undo record older than the Undo window, which can no longer be used. One still inside the
+ *   window could bring a referral back, so it keeps the record until the window ends. Without
+ *   `now` every Undo record counts.
  */
-export function patientArchiveProblem(state: WardFlowState, patientId: string): string | undefined {
+export function patientArchiveProblem(state: WardFlowState, patientId: string, now?: Instant): string | undefined {
   const record = state.patients.find((patient) => patient.id === patientId);
   if (!record) return "ARCHIVE_PATIENT names no patient record";
-  const refused = `ARCHIVE_PATIENT refused: patient ${patientId} has care recorded against them, so the record stays`;
   // A fact recorded on the person themselves (a treatment order, alerts, a preferred name) is
   // something beyond what Add patient wrote, so the record stays.
-  if (Object.keys(record).some((key) => !REGISTRATION_FIELDS.has(key))) return refused;
+  if (Object.keys(record).some((key) => !REGISTRATION_FIELDS.has(key)))
+    return "This record has details recorded after it was added, so it has care recorded against them and stays.";
   const quoted = JSON.stringify(patientId);
-  const { patients: _patients, rejections: _rejections, auditEvents, ...rest } = state;
+  const { patients: _patients, rejections: _rejections, auditEvents: _audit, referrals, undoRecords, ...rest } = state;
   void _patients;
   void _rejections;
-  // An earlier archive attempt's own audit row names the record but is not care.
-  const audit = (auditEvents ?? []).filter((entry) => entry.action !== "ARCHIVE_PATIENT");
-  if (JSON.stringify(rest).includes(quoted) || JSON.stringify(audit).includes(quoted)) return refused;
+  void _audit;
+  const live = (referrals ?? []).filter((referral) => !referralOnlyWithdrawn(referral));
+  if (live.some((referral) => JSON.stringify(referral).includes(quoted)))
+    return "This record has an open or answered referral, so it has care recorded against them and stays.";
+  if (JSON.stringify(rest).includes(quoted))
+    return "Something else on the board names this record, so it has care recorded against them and stays.";
+  // Same window as Undo's own check (`undoWindowRefusal`): a step stamped after `now`, which a clock
+  // step back can leave, cannot be undone either, so it does not hold the record.
+  const usable = (undoRecords ?? []).filter(
+    (entry) => now === undefined || (now >= entry.at && now - entry.at <= UNDO_WINDOW_MINUTES),
+  );
+  if (JSON.stringify(usable).includes(quoted))
+    return `A step on this record can still be undone. Archive it once ${UNDO_WINDOW_MINUTES} minutes have passed.`;
   return undefined;
 }
 
+/** A referral nobody answered: every destination was withdrawn by the referrer or cancelled. */
+function referralOnlyWithdrawn(referral: Referral): boolean {
+  return (
+    referral.destinations.length > 0 &&
+    referral.destinations.every(
+      (addressing) =>
+        addressing.state === "cancelled" || (addressing.state === "queued" && addressing.withdrawnAt !== undefined),
+    )
+  );
+}
+
 /** The fields ADD_PATIENT writes. Any other field on the record was recorded later. */
 const REGISTRATION_FIELDS: ReadonlySet<string> = new Set([
   "id",
diff --git a/src/components/ward-management/ward-role-access.ts b/src/components/ward-management/ward-role-access.ts
index 9aef137105..72455b61c8 100644
--- a/src/components/ward-management/ward-role-access.ts
+++ b/src/components/ward-management/ward-role-access.ts
@@ -92,7 +92,6 @@ export function edActingPlaceId(access: WardAccess, originEdId: string | undefin
  */
 export type WardScreenId =
   | "home"
-  | "network"
   | "capacity"
   | "wards"
   | "hub"
@@ -130,7 +129,6 @@ export type WardScreenId =
 
 export const WARD_SCREEN_IDS: readonly WardScreenId[] = [
   "home",
-  "network",
   "capacity",
   "wards",
   "hub",
@@ -373,7 +371,10 @@ export type ScreenAddress = {
 
 const REDIRECT_TARGETS: Readonly<Record<string, WardScreenId>> = {
   command: "home",
-  constellation: "network",
+  // Live audit item 25 (11 Nov 2026): the Network screen was retired on 19 Oct 2026 and its address
+  // redirects to Home, so it (and the older Constellation address) is Home here too, not a screen.
+  network: "home",
+  constellation: "home",
   queue: "delays",
   exceptions: "delays",
   escalation: "delays",
@@ -409,7 +410,6 @@ export function screenForPath(pathname: string): ScreenAddress | undefined {
   // PL1 (3 Nov 2026): Places' Catchments tab is the old community index, so it keeps that access.
   if (first === "hub" && second === "catchments") return third === undefined ? { screen: "community" } : undefined;
   switch (first) {
-    case "network":
     case "capacity":
     case "wards":
     case "hub":
diff --git a/src/components/ward-management/ward-shared-access.tsx b/src/components/ward-management/ward-shared-access.tsx
index fa2ddd8acb..1793d3bb8d 100644
--- a/src/components/ward-management/ward-shared-access.tsx
+++ b/src/components/ward-management/ward-shared-access.tsx
@@ -443,12 +443,28 @@ export function WardSharedAccess({ connection, children }: { connection: WardSha
     connection.status === "saving" || ("unconfirmedSave" in connection && connection.unconfirmedSave === true);
   // Stable, so recovery consumers do not re-render on every poll; it still calls the latest retry.
   const retryLatest = useCallback(() => latest.current.retry(), []);
+  // D-151: one string, so the context changes only when the beds waiting to save do.
+  const waitingBeds = (connection.waitingBeds ?? []).join(" ");
   const saveRecovery = useMemo<WardSharedSave | null>(
     () =>
       connection.enabled && connection.signedIn
-        ? { unconfirmedSave, status: connection.status, error: connection.error, retry: retryLatest }
+        ? {
+            unconfirmedSave,
+            status: connection.status,
+            error: connection.error,
+            retry: retryLatest,
+            waitingBeds: waitingBeds ? waitingBeds.split(" ") : [],
+          }
         : null,
-    [connection.enabled, connection.signedIn, connection.status, connection.error, retryLatest, unconfirmedSave],
+    [
+      connection.enabled,
+      connection.signedIn,
+      connection.status,
+      connection.error,
+      retryLatest,
+      unconfirmedSave,
+      waitingBeds,
+    ],
   );
   return (
     <DowntimePackBoundary
diff --git a/src/components/ward-management/ward-shared-client-helpers.ts b/src/components/ward-management/ward-shared-client-helpers.ts
index beb3608949..bf70000e9a 100644
--- a/src/components/ward-management/ward-shared-client-helpers.ts
+++ b/src/components/ward-management/ward-shared-client-helpers.ts
@@ -28,27 +28,29 @@ export function anySignal(signals: readonly AbortSignal[]): AbortSignal {
   return controller.signal;
 }
 
-/** Settles with `promise`, or rejects with an AbortError as soon as `signal` aborts. */
-export function untilAborted<T>(promise: Promise<T>, signal: AbortSignal | undefined): Promise<T> {
-  if (!signal) return promise;
-  if (signal.aborted) {
+/**
+ * Settles with `promise`, or rejects with an AbortError as soon as `signal` aborts. Only the shared
+ * client's sign-in token wait uses it, so it also gives that wait its own deadline (15 s, as long as
+ * a request may take): a token step that never answers ends in the normal "not refreshed" retry
+ * instead of an endless spinner (live audit item 14).
+ */
+export function untilAborted<T>(promise: Promise<T>, signal: AbortSignal | undefined, ms = 15_000): Promise<T> {
+  if (signal?.aborted) {
     // Cancellation settles the caller, but the token request can still reject later.
     void promise.catch(() => {});
     return Promise.reject(new DOMException("The poll was stopped", "AbortError"));
   }
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let onAbort: (() => void) | undefined;
   return new Promise<T>((resolve, reject) => {
-    const stop = () => reject(new DOMException("The poll was stopped", "AbortError"));
-    signal.addEventListener("abort", stop, { once: true });
-    promise.then(
-      (value) => {
-        signal.removeEventListener("abort", stop);
-        resolve(value);
-      },
-      (error: unknown) => {
-        signal.removeEventListener("abort", stop);
-        reject(error);
-      },
-    );
+    onAbort = () => reject(new DOMException("The poll was stopped", "AbortError"));
+    signal?.addEventListener("abort", onAbort, { once: true });
+    timer = setTimeout(() => reject(new Error("Sign-in check timed out")), ms);
+    // A late answer or failure after either stop is observed here and dropped.
+    promise.then(resolve, reject);
+  }).finally(() => {
+    clearTimeout(timer);
+    if (onAbort) signal?.removeEventListener("abort", onAbort);
   });
 }
 
diff --git a/src/components/ward-management/ward-shared-client-types.ts b/src/components/ward-management/ward-shared-client-types.ts
index a6d422ded3..66d7318738 100644
--- a/src/components/ward-management/ward-shared-client-types.ts
+++ b/src/components/ward-management/ward-shared-client-types.ts
@@ -66,6 +66,8 @@ export type SharedView = {
   recovery?: string;
   recovering?: boolean;
   pendingCount?: number;
+  /** D-151: `unitId:bedNumber` of each bed a waiting save will change, for the tile's marker. */
+  waitingBeds?: readonly string[];
   recoveryStorageUnavailable?: boolean;
   recoveryResults?: readonly import("./ward-command-recovery").RecoveryResult[];
 };
diff --git a/src/components/ward-management/ward-shared-client.ts b/src/components/ward-management/ward-shared-client.ts
index 27b775c8d6..e0e42b53b6 100644
--- a/src/components/ward-management/ward-shared-client.ts
+++ b/src/components/ward-management/ward-shared-client.ts
@@ -56,6 +56,7 @@ export type { SharedBreakGlassOpening, SharedCoverGiven, SharedRecordView } from
 import type { SharedAccessRequest, SharedMembership } from "./ward-shared-access-types";
 import {
   markOwnSave,
+  waitingBedKeys,
   pinToBoard,
   sheetBasis,
   type PendingCommand,
@@ -70,7 +71,6 @@ import {
   mergeSharedPartialView,
 } from "./ward-shared-state-check";
 import { SharedPacing } from "./ward-shared-pacing";
-
 import type { SharedSnapshot, SharedView, SharedChangeResult, WardCommandOutcome } from "./ward-shared-client-types";
 import { SharedIntentKeys } from "./shared-intent-keys";
 export type {
@@ -92,7 +92,6 @@ const NO_ROLE = "No Ward Flow role is assigned to this account";
 export type { SharedActivityAuditEvent, SharedActivityAuditPage } from "./ward-shared-activity-audit";
 /** A member desk reads its part of the workspace in full at least this often (audit F-04). */
 const FULL_READ_EVERY_MS = 60_000;
-
 /** Thrown once by a request whose first 401 is asked again with a fresh token (audit A4-02). */
 const FRESH_TOKEN = new Error("Ask again with a fresh token");
 
@@ -508,6 +507,7 @@ export class SharedWorkspaceClient {
       recovering: this.recoveryPending,
       recoveryStorageUnavailable: this.recoveryStorageUnavailable,
       pendingCount: (this.pending ? 1 : 0) + this.queue.length,
+      waitingBeds: waitingBedKeys([this.pending, ...this.queue], update.snapshot, this.view.snapshot),
       unconfirmedSave: this.pending !== null || this.queue.length > 0 || this.recoveryPending,
       waiting: this.offlineHold ? (this.pending ? 1 : 0) + this.queue.length : 0,
     };
diff --git a/src/components/ward-management/ward-shared-pending-command.ts b/src/components/ward-management/ward-shared-pending-command.ts
index 1959769979..0bf9058233 100644
--- a/src/components/ward-management/ward-shared-pending-command.ts
+++ b/src/components/ward-management/ward-shared-pending-command.ts
@@ -95,3 +95,38 @@ export function pinToBoard(
     queued.sheets = [pin];
   }
 }
+
+type BoardStays = { payload: { state: { admissions: readonly { id: string; unitId: string; bedNumber?: number }[] } } };
+
+/**
+ * D-151: the beds that a save waiting on this page will change, as `unitId:bedNumber`, so the bed
+ * tile can say "Waiting to save". Read from memory only, like the queue itself (D-18, D-72, D-124).
+ * A step on a stay (a bed move, `PLACE_IN_BED`, and its Undo) names no unit, so its beds are found
+ * from the stay on this page's board: the bed it is in now, and the bed it is moving to.
+ */
+export function waitingBedKeys(
+  commands: readonly ({ event: WardFlowEvent } | null)[],
+  next?: BoardStays | null,
+  current?: BoardStays | null,
+): string[] {
+  // The board about to be published (`next`, null when it is cleared), else the one shown now.
+  const admissions = (next === undefined ? current : next)?.payload.state.admissions ?? [];
+  const keys = new Set<string>();
+  for (const command of commands) {
+    const event = command?.event as
+      { unitId?: unknown; bedNumber?: unknown; admissionId?: unknown; actingUnitId?: unknown } | undefined;
+    if (!event) continue;
+    const stay =
+      typeof event.admissionId === "string" ? admissions.find((entry) => entry.id === event.admissionId) : undefined;
+    const unitId =
+      typeof event.unitId === "string"
+        ? event.unitId
+        : typeof event.actingUnitId === "string"
+          ? event.actingUnitId
+          : stay?.unitId;
+    if (typeof unitId === "string" && typeof event.bedNumber === "number") keys.add(`${unitId}:${event.bedNumber}`);
+    if (stay && typeof stay.bedNumber === "number" && typeof event.unitId !== "string")
+      keys.add(`${stay.unitId}:${stay.bedNumber}`);
+  }
+  return [...keys];
+}
diff --git a/src/components/ward-management/ward-shared-save-status.module.css b/src/components/ward-management/ward-shared-save-status.module.css
index 7fe1fe5e9a..29ff873537 100644
--- a/src/components/ward-management/ward-shared-save-status.module.css
+++ b/src/components/ward-management/ward-shared-save-status.module.css
@@ -20,6 +20,16 @@
   font: inherit;
 }
 
+/* Live audit item 8: a calm save inside a sheet is one small line, not the recovery box. */
+.recoveryCalm {
+  gap: 0;
+  padding: var(--wf-s-1) var(--wf-s-3);
+  margin-block-end: var(--wf-s-2);
+  border-color: var(--wf-line);
+  color: var(--wf-ink-2);
+  font-size: var(--wf-fs-12);
+}
+
 .recovery:focus {
   outline: none;
 }
@@ -60,6 +70,25 @@
   white-space: nowrap;
 }
 
+/*
+ * Live audit item 8 (11 Nov 2026): a save in flight shows this small calm pill, not the warning
+ * strip. It floats, so the page never jumps on every save, and takes no taps.
+ */
+.pill {
+  position: fixed;
+  inset-block-end: var(--wf-s-4);
+  inset-inline-start: var(--wf-s-4);
+  z-index: 40;
+  padding: var(--wf-s-1) var(--wf-s-3);
+  border: 1px solid var(--wf-line);
+  border-radius: 999px;
+  color: var(--wf-ink-2);
+  background: var(--wf-surface);
+  font-size: var(--wf-fs-12);
+  line-height: 1.4;
+  pointer-events: none;
+}
+
 /*
  * The strip above the app on the shared board, shown only when a lost connection or an unconfirmed
  * save needs action. One slim row in the shell's own tokens: what is wrong on the left, Retry and
@@ -152,6 +181,10 @@
     flex: none;
   }
 
+  .pill {
+    inset-block-end: calc(var(--wf-dock-clear, calc(72px + max(8px, env(safe-area-inset-bottom, 0px)))) + 0.5rem);
+  }
+
   /* The reload warning must stay readable, so a strip carrying it wraps. */
   .bar:has(> p) {
     flex-wrap: wrap;
diff --git a/src/components/ward-management/ward-shared-save-status.tsx b/src/components/ward-management/ward-shared-save-status.tsx
index 81979cd452..d5861592c8 100644
--- a/src/components/ward-management/ward-shared-save-status.tsx
+++ b/src/components/ward-management/ward-shared-save-status.tsx
@@ -1,12 +1,21 @@
 "use client";
 
-import { useLayoutEffect, useRef, useState, useSyncExternalStore, type ReactNode, type RefObject } from "react";
+import {
+  useEffect,
+  useLayoutEffect,
+  useRef,
+  useState,
+  useSyncExternalStore,
+  type ReactNode,
+  type RefObject,
+} from "react";
 import { createPortal } from "react-dom";
 import { clk, useSharedRefreshLate } from "@/components/wf";
 import { subscribeToSheetStack, topSheetRoot } from "@/components/wf/sheet-focus";
 import type { WardSharedConnection } from "./ward-shared-access";
 import { useWardSharedSave } from "./shell/ward-shared-save-context";
 import { saveProblem } from "./ward-save-failure";
+import { useOnlineStatus } from "./use-online-status";
 import styles from "./ward-shared-save-status.module.css";
 
 /** Offline with saves waiting on this page (Tier 1 item 1). "Held" is only for a leave bed (D-85). */
@@ -17,6 +26,32 @@ function waitingMessage(waiting: number): string {
 
 const RELOAD_WARNING = "Not confirmed yet. Do not reload: reloading now would lose this action. Press Retry first.";
 
+/**
+ * Live audit item 8 (11 Nov 2026): a normal save takes 3 to 4 s, so the full warning flashed on every
+ * save. A save in flight shows a calm "Saving…" first; the warning comes after this long, when the
+ * browser is offline, or once the save has failed.
+ */
+const SAVE_WARNING_AFTER_MS = 8_000;
+
+/**
+ * True once a save has been in flight for `SAVE_WARNING_AFTER_MS`, or at once while offline. A save
+ * sent offline fails within moments, so the failure keeps the warning from then on.
+ */
+function useSaveSlow(saving: boolean): boolean {
+  const [slow, setSlow] = useState(false);
+  // Subscribed, so going offline mid-save shows the warning at once (PR #1626 review).
+  const online = useOnlineStatus();
+  useEffect(() => {
+    if (!saving) return;
+    const timer = setTimeout(() => setSlow(true), SAVE_WARNING_AFTER_MS);
+    return () => {
+      clearTimeout(timer);
+      setSlow(false);
+    };
+  }, [saving]);
+  return saving && (slow || !online);
+}
+
 /** Keep recovery inside the top overlay's focus trap, without reopening or closing any record. */
 function useRecoveryHost(show: boolean): HTMLElement | null {
   "use no memo";
@@ -89,26 +124,46 @@ export function WardSharedSaveStatus({
   "use no memo";
   const save = useWardSharedSave();
   const [retrying, setRetrying] = useState(false);
+  const inFlight = connection.status === "saving";
+  const slow = useSaveSlow(inFlight);
+  // Item 8: a save once left waiting (failed, or held while offline) keeps the full warning through
+  // its retry, until nothing is left unconfirmed. A save only queued behind a refresh has not failed
+  // (PR #1626 review), so it keeps the calm "Saving…".
+  // An error counts only when it ends this save's own run: a note left on the board by an earlier
+  // refused save must not make a new save that has never failed show the full warning.
+  const [failedBefore, setFailedBefore] = useState(false);
+  const [wasInFlight, setWasInFlight] = useState(inFlight);
+  if (wasInFlight !== inFlight) setWasInFlight(inFlight);
+  const waitingAfterFailure =
+    !!save?.unconfirmedSave &&
+    !inFlight &&
+    (connection.status === "unavailable" || (wasInFlight && !!connection.error) || (connection.waiting ?? 0) > 0);
+  if (waitingAfterFailure && !failedBefore) setFailedBefore(true);
+  if (!save?.unconfirmedSave && !inFlight && failedBefore) setFailedBefore(false);
+  // A save in flight with no error stays calm until it is slow or the browser is offline.
+  const calmSave = inFlight && !retrying && !slow && !failedBefore && !connection.error;
   // WF-07: one warning node reused in both strip layouts (was duplicated JSX).
-  const reloadWarning = save?.unconfirmedSave ? (
-    <p className={styles.warning} data-testid="ward-shared-reload-warning">
-      {RELOAD_WARNING}
-    </p>
-  ) : null;
+  const reloadWarning =
+    save?.unconfirmedSave && !calmSave ? (
+      <p className={styles.warning} data-testid="ward-shared-reload-warning">
+        {RELOAD_WARNING}
+      </p>
+    ) : null;
   const stale = useSharedRefreshLate(connection.enabled, 5 * 60_000, false) && connection.receivedAt > 0;
   // Tier 1 item 4 (Josh, 4 Nov 2026): a refresh that is late but not yet failed used to show only on
   // pages with a Live chip. The strip now says when the board last updated, on every screen.
   const late =
     useSharedRefreshLate(connection.enabled && connection.status !== "unavailable") && connection.receivedAt > 0;
   // Inside an open sheet the strip is inert, so a late refresh moves its words and Retry there too.
-  const showRecovery = connection.status === "saving" || connection.status === "unavailable" || late || stale;
+  // A calm save shows its small "Saving…" there as well, with no warning or Retry (PR #1626 review).
+  const showRecovery = inFlight || connection.status === "unavailable" || late || stale;
   const host = useRecoveryHost(showRecovery);
   const saving = connection.status === "saving" || retrying;
   const recoveryRef = useRef<HTMLElement>(null);
   // Josh, 27 Oct 2026 ("it is pointless"): the strip shows only when something needs action, a lost
   // connection or a save not yet confirmed. Otherwise its words stay a screen-reader status, and
   // Sign out lives in the rail and the phone menu (`WardAccountActions`).
-  const problem = connection.status === "unavailable" || !!save?.unconfirmedSave || late || stale;
+  const problem = connection.status === "unavailable" || (!!save?.unconfirmedSave && !calmSave) || late || stale;
   const barRef = useRef<HTMLDivElement>(null);
   useBarHeight(barRef, problem);
   // Retry disappears while the save runs. Park focus on the persistent status, still inside the sheet.
@@ -127,21 +182,23 @@ export function WardSharedSaveStatus({
   const waiting = connection.waiting ?? 0;
   const message = retrying
     ? "Retrying…"
-    : saving
-      ? "Saving shared changes… Keep this page open until the save is confirmed."
-      : connection.status === "unavailable"
-        ? // Tier 1 item 1: saves waiting while offline go by themselves when the connection returns.
-          waiting > 0 && !connection.boardCurrent
-          ? waitingMessage(waiting)
-          : // Audit 24-3 SM-4: the connection is fine when only a save waits on Retry; its message says so.
-            connection.boardCurrent
-            ? ""
-            : saveProblem("connectionUnavailable")
-        : stale
-          ? `Stale. Last updated at ${clk(connection.receivedAt)}. Check updates before acting.`
-          : late
-            ? `Not updated since ${clk(connection.receivedAt)}. Still checking every few seconds.`
-            : `${deskLabel} · shared synthetic workspace`;
+    : calmSave
+      ? "Saving…"
+      : saving
+        ? "Saving shared changes… Keep this page open until the save is confirmed."
+        : connection.status === "unavailable"
+          ? // Tier 1 item 1: saves waiting while offline go by themselves when the connection returns.
+            waiting > 0 && !connection.boardCurrent
+            ? waitingMessage(waiting)
+            : // Audit 24-3 SM-4: the connection is fine when only a save waits on Retry; its message says so.
+              connection.boardCurrent
+              ? ""
+              : saveProblem("connectionUnavailable")
+          : stale
+            ? `Stale. Last updated at ${clk(connection.receivedAt)}. Check updates before acting.`
+            : late
+              ? `Not updated since ${clk(connection.receivedAt)}. Still checking every few seconds.`
+              : `${deskLabel} · shared synthetic workspace`;
   const freshness =
     connection.status === "unavailable" && connection.receivedAt > 0
       ? `${stale ? "Stale. " : ""}Last updated at ${clk(connection.receivedAt)}. Check updates before acting.`
@@ -158,7 +215,7 @@ export function WardSharedSaveStatus({
       <div
         ref={barRef}
         tabIndex={-1}
-        className={problem ? styles.bar : styles.quiet}
+        className={problem ? styles.bar : calmSave ? styles.pill : styles.quiet}
         data-state={connection.status}
         data-testid="ward-shared-status-bar"
         role="status"
@@ -191,7 +248,7 @@ export function WardSharedSaveStatus({
           <section
             ref={recoveryRef}
             tabIndex={-1}
-            className={styles.recovery}
+            className={calmSave ? `${styles.recovery} ${styles.recoveryCalm}` : styles.recovery}
             role="status"
             aria-live="polite"
             data-testid="ward-shared-recovery"
diff --git a/src/components/ward-management/ward/ward-bed-board.tsx b/src/components/ward-management/ward/ward-bed-board.tsx
index fc65ee9c31..aab61f47ca 100644
--- a/src/components/ward-management/ward/ward-bed-board.tsx
+++ b/src/components/ward-management/ward/ward-bed-board.tsx
@@ -1,9 +1,10 @@
 "use client";
 
 import { LayoutGrid, List } from "lucide-react";
-import { useEffect, useRef, useState, type CSSProperties, type KeyboardEvent } from "react";
+import { useEffect, useMemo, useRef, useState, type CSSProperties, type KeyboardEvent } from "react";
 
 import { useEffectiveWardAccess } from "@/components/ward-management/shell/ward-access-store";
+import { useWardSharedSave } from "@/components/ward-management/shell/ward-shared-save-context";
 import type { Unit } from "@/components/ward-management/ward-model";
 import { Card, CardHead, DisabledReason, StatusGlyph, buttonClass, cx, useIsPhone, durMinutes } from "@/components/wf";
 
@@ -251,6 +252,9 @@ export function WardBedBoard({
 }: WardBedBoardProps) {
   const isPhone = useIsPhone();
   const nameFor = usePatientNameDisplay();
+  // D-151: a bed a save waiting on this page will change says so on its tile, as in the bed list.
+  const waitingList = useWardSharedSave()?.waitingBeds;
+  const waitingBeds = useMemo(() => new Set(waitingList ?? []), [waitingList]);
   const pods = podsOf(beds, unit, isMixed);
   const collidingPairs = lookAlikeKeys(beds);
   // Audit 24-4 NA2-09 (Josh, 24 Oct 2026): the ward's own ready figure (beds being made ready
@@ -484,7 +488,14 @@ export function WardBedBoard({
                   const source = picked?.kind === "stay" && picked.fromBed === Number(bed.bedNumber);
                   const glyph = bedGlyphTone(bed);
                   const dim = picked ? !fits && !source : !matchesQuery(bed, query);
-                  const shownSub = fits && picked ? fitReason(bed, picked, isMixed) : cellSub(bed);
+                  const waitingSave = waitingBeds.has(`${unit.id}:${Number(bed.bedNumber)}`);
+                  // A fit reason while picking keeps the waiting mark beside it (PR #1626 review).
+                  const baseSub = fits && picked ? fitReason(bed, picked, isMixed) : cellSub(bed);
+                  const shownSub = waitingSave
+                    ? fits && picked
+                      ? `Waiting to save · ${baseSub}`
+                      : "Waiting to save"
+                    : baseSub;
                   const label = cellLabel(bed, fits, nameFor, shownSub, collidingPairs);
                   const chosen = confirming !== null && Number(confirming.bedNumber) === Number(bed.bedNumber);
                   return (
@@ -498,6 +509,7 @@ export function WardBedBoard({
                       data-act={glyph === "danger" ? "true" : undefined}
                       data-dim={dim ? "true" : undefined}
                       data-placed={placedBed === Number(bed.bedNumber) ? "true" : undefined}
+                      data-waiting-save={waitingSave ? "true" : undefined}
                       aria-pressed={source ? true : undefined}
                       // P087: while a pick is held, a bed it cannot go to is unavailable, not only dimmed.
                       // A press still says why it does not fit.
diff --git a/src/components/ward-management/ward/ward-bed-dossier-drawer.tsx b/src/components/ward-management/ward/ward-bed-dossier-drawer.tsx
index aad0cec46f..d94db83296 100644
--- a/src/components/ward-management/ward/ward-bed-dossier-drawer.tsx
+++ b/src/components/ward-management/ward/ward-bed-dossier-drawer.tsx
@@ -24,6 +24,7 @@ import { BED_RELEASE_BLOCKERS, type BedReleaseBlocker } from "@/components/ward-
 import { useWardModalFocus } from "@/components/ward-management/ward-modal-focus";
 import { BlockerEditor, useBlockerSave } from "./ward-bed-blocker-editor";
 import { BedClosureControls, type BedClosureActions } from "./ward-bed-closure-controls";
+import { wardClosureReasonLabel } from "../ward-bed-closure-reason";
 import {
   openJourneyFromStay,
   SentJourneyChanges,
@@ -540,8 +541,19 @@ export function WardBedDossierDrawer({
         tone: "success",
         label: `Hold-up cleared: ${cleared.blocker}, by ${roleLabel(cleared.by)}`,
       });
-    timeline.sort((left, right) => right.at - left.at);
   }
+  // Live audit item 13 (11 Nov 2026): this bed's own closures (`Unit.closedBeds`), closed and reopened,
+  // with who and why. They belong to the bed, so they show with or without anyone in it.
+  for (const mark of unit.closedBeds ?? []) {
+    if (mark.bedNumber !== selectedBed) continue;
+    timeline.push({
+      at: mark.at,
+      tone: "warning",
+      label: `Bed closed${mark.reason ? `: ${wardClosureReasonLabel(mark.reason)}` : ""}, by ${mark.by}`,
+    });
+    if (mark.reopenedAt !== undefined) timeline.push({ at: mark.reopenedAt, tone: "success", label: "Bed reopened" });
+  }
+  timeline.sort((left, right) => right.at - left.at);
 
   const openBlockerEditor = () => {
     const opening = !quickBlockerOpen;
@@ -877,6 +889,20 @@ export function WardBedDossierDrawer({
       </dl>
     </section>
   );
+  const historyToggle = (
+    <button
+      type="button"
+      className={styles.historyButton}
+      aria-expanded={historyOpen}
+      aria-controls={`${TAB_PREFIX}-history`}
+      data-testid="bed-drawer-history-toggle"
+      onClick={toggleHistory}
+    >
+      <Icon icon={HistoryIcon} size={14} />
+      History
+      <span className={styles.historyCount}>{timeline.length}</span>
+    </button>
+  );
   const history = (
     <section
       ref={historyRef}
@@ -1044,6 +1070,13 @@ export function WardBedDossierDrawer({
               </dl>
               {readyNote}
             </section>
+            {/* Live audit item 13: an empty bed's History holds its closures, so it shows when there are any. */}
+            {timeline.length > 0 ? (
+              <>
+                {historyToggle}
+                {history}
+              </>
+            ) : null}
           </>
         ) : (
           <>
@@ -1076,18 +1109,7 @@ export function WardBedDossierDrawer({
                   );
                 })}
               </div>
-              <button
-                type="button"
-                className={styles.historyButton}
-                aria-expanded={historyOpen}
-                aria-controls={`${TAB_PREFIX}-history`}
-                data-testid="bed-drawer-history-toggle"
-                onClick={toggleHistory}
-              >
-                <Icon icon={HistoryIcon} size={14} />
-                History
-                <span className={styles.historyCount}>{timeline.length}</span>
-              </button>
+              {historyToggle}
             </div>
             {panel(
               "now",
diff --git a/src/components/ward-management/ward/ward-bed-dossier-phone.tsx b/src/components/ward-management/ward/ward-bed-dossier-phone.tsx
index 9c4eb6e564..6c81bfba90 100644
--- a/src/components/ward-management/ward/ward-bed-dossier-phone.tsx
+++ b/src/components/ward-management/ward/ward-bed-dossier-phone.tsx
@@ -163,6 +163,17 @@ export function PhoneBedSheet({
     .filter(Boolean)
     .join(" · ");
   const admissionId = bedItem?.admissionId;
+  const timelineList = (
+    <ul className={styles.timeline}>
+      {timeline.map((event) => (
+        <li key={`${event.label}-${event.at}`}>
+          <StatusGlyph tone={event.tone} />
+          <span className={styles.timelineAt}>{formatInstantWithDay(event.at, now)}</span>
+          <span className={styles.ell}>{event.label}</span>
+        </li>
+      ))}
+    </ul>
+  );
   return (
     <>
       <div
@@ -233,6 +244,13 @@ export function PhoneBedSheet({
                 {bedItem?.designation ? <Row label="Bed">{bedItem.designation}</Row> : null}
               </dl>
               {readyNote}
+              {/* Live audit item 13: an empty bed's closures and reopenings, when it has any. */}
+              {timeline.length > 0 ? (
+                <>
+                  <h3 className={styles.phoneSec}>History</h3>
+                  {timelineList}
+                </>
+              ) : null}
             </>
           ) : (
             <>
@@ -298,15 +316,7 @@ export function PhoneBedSheet({
               ) : null}
               <h3 className={styles.phoneSec}>History</h3>
               {timeline.length > 0 ? (
-                <ul className={styles.timeline}>
-                  {timeline.map((event) => (
-                    <li key={`${event.label}-${event.at}`}>
-                      <StatusGlyph tone={event.tone} />
-                      <span className={styles.timelineAt}>{formatInstantWithDay(event.at, now)}</span>
-                      <span className={styles.ell}>{event.label}</span>
-                    </li>
-                  ))}
-                </ul>
+                timelineList
               ) : (
                 <p className={styles.phoneEmpty}>Nothing recorded for this stay yet.</p>
               )}
diff --git a/src/components/ward-management/ward/ward-beds-matrix.tsx b/src/components/ward-management/ward/ward-beds-matrix.tsx
index 893fdf6ea0..b79aecb160 100644
--- a/src/components/ward-management/ward/ward-beds-matrix.tsx
+++ b/src/components/ward-management/ward/ward-beds-matrix.tsx
@@ -8,6 +8,7 @@ import { bedsPendingPreparation } from "@/components/ward-management/ward-bed-av
 import { useOptionalWardFlowSelect } from "@/components/ward-management/ward-flow-provider";
 import { shiftEndInstant } from "@/components/ward-management/ward-board-time-features";
 import { formatInstantWithDay } from "@/components/ward-management/ward-clock";
+import { useWardSharedSave } from "../shell/ward-shared-save-context";
 import { StatusGlyph, cx, type WfTone } from "@/components/wf";
 import { bedGlyphTone, eddMovedBadge, type BedItem } from "./ward-bed-tone";
 import { observationRatio, observationSummary } from "@/components/ward-management/ward-observation";
@@ -111,11 +112,14 @@ interface WardBedCardProps {
   bed: BedItem;
   isSelected: boolean;
   onSelect: (bed: BedItem) => void;
+  /** D-151: a save waiting on this page will change this bed. */
+  waiting?: boolean;
 }
 
 function areBedCardPropsEqual(prev: WardBedCardProps, next: WardBedCardProps): boolean {
   if (prev.isSelected !== next.isSelected) return false;
   if (prev.onSelect !== next.onSelect) return false;
+  if (prev.waiting !== next.waiting) return false;
   const p = prev.bed;
   const n = next.bed;
   return (
@@ -175,7 +179,7 @@ function leavingCell(bed: BedItem): { text: string; tone: "danger" | "warning" |
   return { text: `In ${plural(bed.expectedDays, "day", "days")}`, tone: bed.expectedDays <= 2 ? "info" : null };
 }
 
-const WardBedCard = React.memo(function WardBedCard({ bed, isSelected, onSelect }: WardBedCardProps) {
+const WardBedCard = React.memo(function WardBedCard({ bed, isSelected, onSelect, waiting }: WardBedCardProps) {
   const stayDaysNum = typeof bed.stayDays === "number" ? bed.stayDays : null;
   const isPastDate = bed.pastDate === true;
   const isReady = bed.status === "ready";
@@ -253,7 +257,8 @@ const WardBedCard = React.memo(function WardBedCard({ bed, isSelected, onSelect
       data-state={bed.status as string}
       data-tone={tone ?? undefined}
       onClick={handleClick}
-      aria-label={formatBedAriaLabel(bed, eddMoved)}
+      aria-label={`${formatBedAriaLabel(bed, eddMoved)}${waiting ? ". A change is waiting to save" : ""}`}
+      data-waiting-save={waiting ? "true" : undefined}
     >
       <span className={styles.cBed}>
         <b>{number}</b>
@@ -294,6 +299,11 @@ const WardBedCard = React.memo(function WardBedCard({ bed, isSelected, onSelect
         {bed.patientAlias && !isPulled && bed.observation ? observationSummary(bed.observation) : null}
       </span>
       <span className={styles.cNow}>
+        {waiting ? (
+          <span className={cx(styles.chip, styles.chipWarn)} data-testid="ward-bed-waiting-save">
+            Waiting to save
+          </span>
+        ) : null}
         {nowChip ? (
           <span className={cx(styles.chip, isAwayAtEd && styles.chipWarn, bed.blockReason && styles.chipAct)}>
             {nowChip}
@@ -336,6 +346,9 @@ export function WardBedsMatrix({
   // The board clock, so the handover named is the current shift's end (Audit 24-6 TC-02).
   const boardNow = useOptionalWardFlowSelect("now")?.now ?? now;
   const pendingPreparation = bedsPendingPreparation(unit.id, bedReleasesList);
+  // D-151: the beds a save waiting on this page will change, shown on their tiles.
+  const waitingList = useWardSharedSave()?.waitingBeds;
+  const waitingBeds = useMemo(() => new Set(waitingList ?? []), [waitingList]);
 
   // Filter by pod / locked / open
   const podFilteredBeds = useMemo(
@@ -793,6 +806,7 @@ export function WardBedsMatrix({
                     bed={bed}
                     isSelected={selectedBed === bed.bedNumber}
                     onSelect={handleBedClick}
+                    waiting={waitingBeds.has(`${unit.id}:${bed.bedNumber}`)}
                   />
                 ))}
               </div>
diff --git a/src/components/ward-management/ward/ward-screen-bed-drawer-lazy.tsx b/src/components/ward-management/ward/ward-screen-bed-drawer-lazy.tsx
new file mode 100644
index 0000000000..6900ce7087
--- /dev/null
+++ b/src/components/ward-management/ward/ward-screen-bed-drawer-lazy.tsx
@@ -0,0 +1,15 @@
+"use client";
+
+// The bed drawer is closed at first paint, so it stays off the ward's first load
+// (PR #1626 phone budget). Lives in its own file so it does not form a cycle with
+// ward-screen-overlays.tsx, which already imports WardBedDossierDrawer from
+// ward-screen-lazy.tsx.
+
+import dynamic from "next/dynamic";
+import { preloadWhenIdle } from "../preload-when-idle";
+
+const loadBedDrawer = () => import("./ward-screen-overlays");
+export const WardScreenBedDrawer = dynamic(() => loadBedDrawer().then((m) => m.WardScreenBedDrawer), {
+  ssr: false,
+});
+preloadWhenIdle(loadBedDrawer);
diff --git a/src/components/ward-management/ward/ward-screen-messages.ts b/src/components/ward-management/ward/ward-screen-messages.ts
new file mode 100644
index 0000000000..bfb4c8b109
--- /dev/null
+++ b/src/components/ward-management/ward/ward-screen-messages.ts
@@ -0,0 +1,19 @@
+import { wardSafeRejectionReason } from "./ward-rejection-text";
+
+/**
+ * The drawer's refusal line: what was refused, then that nothing changed, said once. A shared-board
+ * refusal already ends "Nothing was changed." (audit E-25).
+ */
+export function notRecordedMessage(message?: string): string {
+  const reason = (message ?? "The change was refused").replace(/\s*Nothing was changed\.$/u, "").replace(/\.$/u, "");
+  return `Not recorded: ${reason}. Nothing was changed.`;
+}
+
+/**
+ * D-125 (audit M2): a refused referral answer said on this ward's own toast. It names the person,
+ * as the success message does; the engine's reason is put in ward words first.
+ */
+export function namedNotRecordedMessage(reason: string, who: string): string {
+  const said = wardSafeRejectionReason(reason);
+  return notRecordedMessage(said.includes(who) ? said : `${who}: ${said}`);
+}
diff --git a/src/components/ward-management/ward/ward-screen-overlays.tsx b/src/components/ward-management/ward/ward-screen-overlays.tsx
index 9574bf51e4..994cc2beff 100644
--- a/src/components/ward-management/ward/ward-screen-overlays.tsx
+++ b/src/components/ward-management/ward/ward-screen-overlays.tsx
@@ -11,9 +11,10 @@ import { reviewAtFrom } from "../ward-closure-choice";
 import { admissionCriteriaEligibility } from "@/components/ward-management/ward-flow-reducer";
 import { useWardCommandCompletion, wardCommandFailure } from "./use-ward-command-completion";
 import { useUndoableStep } from "../use-undoable-step";
+import { bedClosureReasonChoices } from "../ward-bed-closure-reason";
 import type { WardFlowRole } from "@/components/ward-management/ward-flow-roles";
 import { WardBedDossierDrawer } from "./ward-screen-lazy";
-import { wardSafeRejectionReason } from "./ward-rejection-text";
+import { notRecordedMessage } from "./ward-screen-messages";
 import type { Dispatch, KeyboardEvent, ReactElement, RefObject, SetStateAction } from "react";
 import type { Admission } from "@/components/ward-management/ward-admissions";
 import type { BedRelease, LeaveBed, Unit } from "@/components/ward-management/ward-model";
@@ -60,23 +61,7 @@ type WardScreenBedDrawerProps = {
   raiseAsRouteRole: WardRaise;
 };
 
-/**
- * The drawer's refusal line: what was refused, then that nothing changed, said once. A shared-board
- * refusal already ends "Nothing was changed." (audit E-25).
- */
-export function notRecordedMessage(message?: string): string {
-  const reason = (message ?? "The change was refused").replace(/\s*Nothing was changed\.$/u, "").replace(/\.$/u, "");
-  return `Not recorded: ${reason}. Nothing was changed.`;
-}
-
-/**
- * D-125 (audit M2): a refused referral answer said on this ward's own toast. It names the person,
- * as the success message does; the engine's reason is put in ward words first.
- */
-export function namedNotRecordedMessage(reason: string, who: string): string {
-  const said = wardSafeRejectionReason(reason);
-  return notRecordedMessage(said.includes(who) ? said : `${who}: ${said}`);
-}
+export { namedNotRecordedMessage, notRecordedMessage } from "./ward-screen-messages";
 
 export function WardScreenBedDrawer({
   selectedBed,
@@ -174,6 +159,19 @@ export function WardScreenBedDrawer({
           ...(bedClosureRole === "ward" ? { actingUnitId: unitId } : {}),
         }),
         undone: closed ? `Undone. Bed ${bedNumber} is open again.` : `Undone. Bed ${bedNumber} is closed again.`,
+        // D-148 (Josh, 11 Nov 2026): closing stays one tap; its toast offers an optional reason.
+        ...(closed
+          ? {
+              choices: bedClosureReasonChoices({
+                role: bedClosureRole,
+                unitId: unit.id,
+                actingUnitId: unitId,
+                bedNumber,
+                // The reasoned close keeps the first close's review time (item 6).
+                ...(reviewAt !== undefined ? { reviewAt } : {}),
+              }),
+            }
+          : {}),
       },
     );
   };
diff --git a/src/components/ward-management/ward/ward-screen.tsx b/src/components/ward-management/ward/ward-screen.tsx
index 6d6fc24d74..d080feff08 100644
--- a/src/components/ward-management/ward/ward-screen.tsx
+++ b/src/components/ward-management/ward/ward-screen.tsx
@@ -126,6 +126,7 @@ import {
   WardDischargeNotices,
   WardPlannedAdmissionsPanel,
 } from "./ward-screen-lazy";
+import { WardScreenBedDrawer } from "./ward-screen-bed-drawer-lazy";
 import { WardScreenReferralsTab } from "./ward-screen-referrals-tab";
 import { WardScreenTopBar } from "./ward-screen-top-bar";
 import { useWardScreenFigures } from "./use-ward-screen-figures";
@@ -135,7 +136,7 @@ import { WardAcceptDialog, WardScreenDecisionJobs } from "./ward-on-demand";
 import type { DecisionReport } from "./ward-decisions-cockpit";
 import { signOffUndo } from "./ward-sign-off-undo";
 import { formatDateOfBirth } from "@/components/ward-management/ward-patients";
-import { namedNotRecordedMessage, notRecordedMessage, WardScreenBedDrawer } from "./ward-screen-overlays";
+import { namedNotRecordedMessage, notRecordedMessage } from "./ward-screen-messages";
 import { WardScreenTabSections } from "./ward-screen-tab-sections";
 import { useHoldOpenForm } from "@/components/ward-management/use-hold-open-form";
 
diff --git a/src/components/ward-redesign/pop-demo/demo-panel.tsx b/src/components/ward-redesign/pop-demo/demo-panel.tsx
index beba5deb31..428e01b6fa 100644
--- a/src/components/ward-redesign/pop-demo/demo-panel.tsx
+++ b/src/components/ward-redesign/pop-demo/demo-panel.tsx
@@ -226,22 +226,27 @@ function OperationalDemoPanel({ oneList = false }: { oneList?: boolean }) {
           <span className={mock.clock}>
             Demo clock <b>{formatInstant(now)}</b>
           </span>
-          <button
-            type="button"
-            className={mock.small}
-            {...lock}
-            onClick={() => raise("ADVANCE_CLOCK", { minutes: 15 })}
-          >
-            +15 min
-          </button>
-          <button
-            type="button"
-            className={mock.small}
-            {...lock}
-            onClick={() => raise("ADVANCE_CLOCK", { minutes: 60 })}
-          >
-            +1 hour
-          </button>
+          {/* D-150: the signed-in site runs on real Perth time, so its clock is not advanced. */}
+          {shared?.enabled ? null : (
+            <>
+              <button
+                type="button"
+                className={mock.small}
+                {...lock}
+                onClick={() => raise("ADVANCE_CLOCK", { minutes: 15 })}
+              >
+                +15 min
+              </button>
+              <button
+                type="button"
+                className={mock.small}
+                {...lock}
+                onClick={() => raise("ADVANCE_CLOCK", { minutes: 60 })}
+              >
+                +1 hour
+              </button>
+            </>
+          )}
         </div>
         <details className={mock.practice}>
           <summary>
diff --git a/src/components/ward-redesign/pop-search/global-search.tsx b/src/components/ward-redesign/pop-search/global-search.tsx
index f5a7d09fc3..855bc33d94 100644
--- a/src/components/ward-redesign/pop-search/global-search.tsx
+++ b/src/components/ward-redesign/pop-search/global-search.tsx
@@ -1158,11 +1158,15 @@ export function GlobalSearch({
             canOpenHref={canOpenHref}
             shortcutsExpanded={shortcutsExpanded}
             onToggleShortcuts={() => setShowShortcuts((previous) => !previous)}
-            onAdvanceClock={() => {
-              if (wardFlow)
-                wardFlow.dispatch({ type: "ADVANCE_CLOCK", role: "demo", now: now ?? wardFlow.now, minutes: 15 });
-              close();
-            }}
+            onAdvanceClock={
+              wardFlow?.shared?.enabled
+                ? undefined
+                : () => {
+                    if (wardFlow)
+                      wardFlow.dispatch({ type: "ADVANCE_CLOCK", role: "demo", now: now ?? wardFlow.now, minutes: 15 });
+                    close();
+                  }
+            }
             onSwitchDesk={(role, href) => {
               if (!confirmLeave()) return;
               setDeskRole(role, href);
diff --git a/src/components/wf/toast-choices-entry.tsx b/src/components/wf/toast-choices-entry.tsx
new file mode 100644
index 0000000000..e047be7e9c
--- /dev/null
+++ b/src/components/wf/toast-choices-entry.tsx
@@ -0,0 +1,43 @@
+"use client";
+
+import { Suspense, lazy } from "react";
+import { Button } from "./button";
+import styles from "./overlay.module.css";
+import type { ToastChoices } from "./toast";
+
+/**
+ * PR #1626 review: until the menu's code arrives, or if it cannot load, plain buttons keep
+ * the choice open within the Undo window.
+ *
+ * This file is loaded only when a toast offers choices (D-148), so the buttons and the kit menu
+ * stay off every page's first load.
+ */
+function PlainChoices({ choices, onDone }: { choices: ToastChoices; onDone?: () => void }) {
+  return (
+    <span role="group" aria-label={choices.label}>
+      {choices.items.map((item) => (
+        <Button
+          key={item.id}
+          variant="ghost"
+          size="sm"
+          className={styles.toastAction}
+          onClick={() => {
+            if (choices.onChoose(item.id) !== false) onDone?.();
+          }}
+        >
+          {item.label}
+        </Button>
+      ))}
+    </span>
+  );
+}
+
+const ToastChoicesMenu = lazy(() => import("./toast-choices").catch(() => ({ default: PlainChoices })));
+
+export default function ToastChoicesSlot({ choices, onDone }: { choices: ToastChoices; onDone?: () => void }) {
+  return (
+    <Suspense fallback={<PlainChoices choices={choices} onDone={onDone} />}>
+      <ToastChoicesMenu choices={choices} onDone={onDone} />
+    </Suspense>
+  );
+}
diff --git a/src/components/wf/toast-choices.tsx b/src/components/wf/toast-choices.tsx
new file mode 100644
index 0000000000..557dd6663a
--- /dev/null
+++ b/src/components/wf/toast-choices.tsx
@@ -0,0 +1,40 @@
+"use client";
+
+import { buttonClass } from "./button";
+import { cx } from "./cx";
+import { Menu } from "./menu";
+import styles from "./overlay.module.css";
+import type { ToastChoices } from "./toast";
+
+/**
+ * The toast's follow-up choice menu (D-148). Its own file, loaded only when a toast offers choices,
+ * so the kit menu stays off the first load of every page that shows toasts.
+ */
+export default function ToastChoicesMenu({ choices, onDone }: { choices: ToastChoices; onDone?: () => void }) {
+  return (
+    <Menu
+      label={choices.label}
+      align="end"
+      items={choices.items.map((item) => ({
+        id: item.id,
+        label: item.label,
+        onSelect: () => {
+          // A blocked choice (Undo unavailable while the board reconnects) keeps the toast and its
+          // Undo, so the person can try again.
+          if (choices.onChoose(item.id) === false) return;
+          onDone?.();
+        },
+      }))}
+      trigger={(props) => (
+        <button
+          {...props}
+          type="button"
+          className={cx(buttonClass({ variant: "ghost", size: "sm" }), styles.toastAction)}
+          data-testid="toast-choices"
+        >
+          {choices.label}
+        </button>
+      )}
+    />
+  );
+}
diff --git a/src/components/wf/toast-provider.tsx b/src/components/wf/toast-provider.tsx
index 43251752a7..799e9d8649 100644
--- a/src/components/wf/toast-provider.tsx
+++ b/src/components/wf/toast-provider.tsx
@@ -15,7 +15,7 @@ import { canRestoreFocusTo } from "./sheet-focus";
 import { ConfirmHost } from "./confirm-dialog";
 import { OverlayPortal } from "./overlay-root";
 import overlayStyles from "./overlay.module.css";
-import { type ToastNextStep, type ToastUndo, ToastView } from "./toast";
+import { type ToastChoices, type ToastNextStep, type ToastUndo, ToastView } from "./toast";
 import { useToastJumpKey } from "./toast-keyboard";
 import { timedToastMs } from "./toast-timing";
 
@@ -41,6 +41,8 @@ export type Toast = {
    * closes itself, so `duration` defaults to 0 here too.
    */
   undo?: ToastUndo;
+  /** An optional follow-up choice, such as a reason (D-148); choosing closes the toast. */
+  choices?: ToastChoices;
   /** Mono meta on the right, such as "1s ago". */
   meta?: string;
   /**
@@ -376,6 +378,7 @@ function ToastCard({
           : undefined
       }
       nextStep={toast.nextStep}
+      choices={toast.choices}
       undo={
         toast.undo
           ? {
diff --git a/src/components/wf/toast.tsx b/src/components/wf/toast.tsx
index 6517c82756..4fb7d69ac0 100644
--- a/src/components/wf/toast.tsx
+++ b/src/components/wf/toast.tsx
@@ -1,7 +1,16 @@
 "use client";
 
 import { X } from "lucide-react";
-import { type CSSProperties, type HTMLAttributes, type ReactNode, useEffect, useRef, useState } from "react";
+import {
+  type CSSProperties,
+  type HTMLAttributes,
+  type ReactNode,
+  Suspense,
+  lazy,
+  useEffect,
+  useRef,
+  useState,
+} from "react";
 import { Button } from "./button";
 import { cx } from "./cx";
 import styles from "./overlay.module.css";
@@ -37,6 +46,21 @@ type ToastTimeout = {
   restartKey?: unknown;
 };
 
+/**
+ * An optional follow-up choice on the toast, such as a reason for the step just taken (D-148). A
+ * kit menu of the choices opens from one button (a plain list until its code has loaded); choosing closes the toast.
+ */
+export type ToastChoices = {
+  /** The menu's accessible name and the button's words. */
+  label: string;
+  items: readonly { id: string; label: string }[];
+  /** False when the choice could not be taken now (Undo blocked): the toast then stays. */
+  onChoose: (id: string) => void | false;
+};
+
+/** Loaded only when a toast offers choices (D-148), so the buttons and kit menu stay off the first load. */
+const ToastChoicesSlot = lazy(() => import("./toast-choices-entry"));
+
 export type ToastNextStep = {
   label: string;
   href?: string;
@@ -56,6 +80,8 @@ export type ToastViewProps = {
   nextStep?: ToastNextStep;
   /** Undo with a time window and its shrinking line. */
   undo?: ToastUndo;
+  /** An optional follow-up choice, shown before Undo (D-148). */
+  choices?: ToastChoices;
   /** Closes the toast after a pausable time. Ignored when `undo` is set: the window is the clock. */
   timeout?: ToastTimeout;
   /**
@@ -184,6 +210,7 @@ export function ToastView({
   action,
   nextStep,
   undo,
+  choices,
   timeout,
   leaving = false,
   onClose,
@@ -277,6 +304,11 @@ export function ToastView({
           </Button>
         )
       ) : null}
+      {choices && (!undo || phase === "running") ? (
+        <Suspense fallback={null}>
+          <ToastChoicesSlot choices={choices} onDone={onClose} />
+        </Suspense>
+      ) : null}
       {undo ? <UndoButton undo={undo} phase={phase} finish={finish} primary={primary === "undo"} /> : null}
       {onClose ? (
         <Button
diff --git a/src/lib/front-door-pass.ts b/src/lib/front-door-pass.ts
index 296c851aa4..0677384c14 100644
--- a/src/lib/front-door-pass.ts
+++ b/src/lib/front-door-pass.ts
@@ -60,6 +60,8 @@ const OPEN_PATHS = new Set([
   "/api/health",
   "/api/local-project-id",
   "/robots.txt",
+  // Live audit item 15: the security contact (RFC 9116) is readable before sign-in.
+  "/.well-known/security.txt",
   "/opengraph-image",
   "/ward-flow-offline.html",
   "/ward-flow-push-sw.js",
diff --git a/src/lib/theme.ts b/src/lib/theme.ts
index d8e08cdd9a..5f7f22895c 100644
--- a/src/lib/theme.ts
+++ b/src/lib/theme.ts
@@ -47,9 +47,10 @@ export const LEGACY_WARD_APPEARANCE_KEY = "ward-flow-appearance";
  * Every catch swallows deliberately, and each says so inline. This runs before React mounts, so
  * there is no logger or toast to report to, and every failure here means the same thing: no
  * explicit pin was readable, so the next fallback applies. Keep the inline notes to one short
- * clause — this string ships in every page's `<head>`.
+ * clause — this string ships in every page's `<head>`. Its cookie write is Secure over https, as in
+ * `./theme-client` (live audit item 18).
  */
-export const THEME_BOOTSTRAP_SCRIPT = `(function(){var K="${THEME_STORAGE_KEY}",L="${LEGACY_WARD_APPEARANCE_KEY}",t=null;try{t=localStorage.getItem(K);var w=localStorage.getItem(L);if(t!=="light"&&t!=="dark"&&(w==="light"||w==="dark")){t=w;localStorage.setItem(K,w);try{document.cookie="${THEME_COOKIE_NAME}="+w+"; path=/; max-age=31536000; SameSite=Lax";}catch(e){/* cookie blocked - storage still holds the pin */}}if(w!==null)localStorage.removeItem(L);}catch(e){/* storage blocked (private/partitioned) - fall through to the cookie, then the OS preference */}if(t!=="light"&&t!=="dark"){t=null;try{var m=document.cookie.match(/(?:^|; )${THEME_COOKIE_NAME}=(light|dark)(?:;|$)/);if(m)t=m[1];}catch(e){/* cookie access blocked (sandboxed frame) - the OS preference below applies */}}var r=document.documentElement,q=null;try{q=window.matchMedia("(prefers-color-scheme: dark)");}catch(e){/* no matchMedia - treat the OS as light */}function paint(d){r.classList.toggle("dark",d);var c=d?"${APP_THEME_COLORS.dark}":"${APP_THEME_COLORS.light}";document.querySelectorAll('meta[name="theme-color"]').forEach(function(x){x.setAttribute("content",c);});}if(r.setAttribute){if(t)r.setAttribute("data-theme",t);else r.removeAttribute("data-theme");}paint(t?t==="dark":!!(q&&q.matches));try{q.addEventListener("change",function(){if(!r.getAttribute("data-theme"))paint(q.matches);});}catch(e){/* old browser - Auto follows the OS on the next load */}})();`;
+export const THEME_BOOTSTRAP_SCRIPT = `(function(){var K="${THEME_STORAGE_KEY}",L="${LEGACY_WARD_APPEARANCE_KEY}",t=null;try{t=localStorage.getItem(K);var w=localStorage.getItem(L);if(t!=="light"&&t!=="dark"&&(w==="light"||w==="dark")){t=w;localStorage.setItem(K,w);try{document.cookie="${THEME_COOKIE_NAME}="+w+"; path=/; max-age=31536000; SameSite=Lax"+(location.protocol==="https:"?"; Secure":"");}catch(e){/* cookie blocked - storage still holds the pin */}}if(w!==null)localStorage.removeItem(L);}catch(e){/* storage blocked (private/partitioned) - fall through to the cookie, then the OS preference */}if(t!=="light"&&t!=="dark"){t=null;try{var m=document.cookie.match(/(?:^|; )${THEME_COOKIE_NAME}=(light|dark)(?:;|$)/);if(m)t=m[1];}catch(e){/* cookie access blocked (sandboxed frame) - the OS preference below applies */}}var r=document.documentElement,q=null;try{q=window.matchMedia("(prefers-color-scheme: dark)");}catch(e){/* no matchMedia - treat the OS as light */}function paint(d){r.classList.toggle("dark",d);var c=d?"${APP_THEME_COLORS.dark}":"${APP_THEME_COLORS.light}";document.querySelectorAll('meta[name="theme-color"]').forEach(function(x){x.setAttribute("content",c);});}if(r.setAttribute){if(t)r.setAttribute("data-theme",t);else r.removeAttribute("data-theme");}paint(t?t==="dark":!!(q&&q.matches));try{q.addEventListener("change",function(){if(!r.getAttribute("data-theme"))paint(q.matches);});}catch(e){/* old browser - Auto follows the OS on the next load */}})();`;
 
 /**
  * Glare mode: a separate on/off preference for ward PCs by bright windows. On sets
diff --git a/tests/front-door-pass.test.ts b/tests/front-door-pass.test.ts
index 5d996f5019..0751364173 100644
--- a/tests/front-door-pass.test.ts
+++ b/tests/front-door-pass.test.ts
@@ -84,9 +84,18 @@ describe("front door switch and secret", () => {
       "/api/health",
       "/ward-flow-offline.html",
       "/ward-flow-push-sw.js",
+      "/.well-known/security.txt",
     ])
       expect(isFrontDoorOpenPath(path)).toBe(true);
-    for (const path of ["/", "/ward-flow", "/api/workspace", "/sign-in/extra", "/ward-flow-sign-in/extra", "/mockups"])
+    for (const path of [
+      "/",
+      "/ward-flow",
+      "/api/workspace",
+      "/sign-in/extra",
+      "/ward-flow-sign-in/extra",
+      "/mockups",
+      "/.well-known/other.txt",
+    ])
       expect(isFrontDoorOpenPath(path)).toBe(false);
   });
 });
@@ -574,12 +583,17 @@ describe("DELETE /api/session", () => {
   it("clears the pass", () => {
     const response = DELETE(new NextRequest(new URL("https://ward.example.test/api/session"), { method: "DELETE" }));
     expect(response.status).toBe(204);
-    expect(response.headers.get("set-cookie")).toMatch(/^wf_pass=; Path=\/; Max-Age=0;.*HttpOnly; Secure$/);
+    const [pass, marker] = response.headers.getSetCookie();
+    expect(pass).toMatch(/^wf_pass=; Path=\/; Max-Age=0;.*HttpOnly; Secure$/);
+    // Live audit item 19: the readable marker goes too, so nothing stays after sign-out.
+    expect(marker).toBe("wf_door=; Path=/; Max-Age=0; SameSite=Lax; Secure");
   });
 
   it("marks the cookie Secure in production even when the app sees plain http behind the edge", () => {
     vi.stubEnv("NODE_ENV", "production");
     const response = DELETE(new NextRequest(new URL("http://ward.example.test/api/session"), { method: "DELETE" }));
-    expect(response.headers.get("set-cookie")).toMatch(/HttpOnly; Secure$/);
+    const [pass, marker] = response.headers.getSetCookie();
+    expect(pass).toMatch(/HttpOnly; Secure$/);
+    expect(marker).toMatch(/; Secure$/);
   });
 });
diff --git a/tests/support/ward-shared-mode-run.mjs b/tests/support/ward-shared-mode-run.mjs
index 7d84e66c78..7a08410633 100644
--- a/tests/support/ward-shared-mode-run.mjs
+++ b/tests/support/ward-shared-mode-run.mjs
@@ -244,6 +244,32 @@ async function buildEngine(runRoot) {
   return pathToFileURL(outfile).href;
 }
 
+/** The scripted demo hour (10:42, `NOW_ANCHOR`), in minutes after a Perth midnight. */
+const SCRIPTED_MINUTE = 10 * 60 + 42;
+
+/**
+ * The real engine, except a new world's clock starts at the scripted 10:42 and runs in real time from
+ * there, as it did before D-150. D-150 puts the signed-in site on real Perth time, so the seeded
+ * board would otherwise depend on the hour CI runs: from five hours into each shift until it ends,
+ * every seeded ward has already confirmed its beds this shift, and the journeys that ask a ward to
+ * confirm find no ward to ask. This changes only this run's throwaway world; production is unchanged.
+ */
+function pinnedClockEngine(engine) {
+  return {
+    ...engine,
+    seedWorld(at) {
+      // A Perth midnight is a multiple of a whole day after 16:00 UTC (Perth is UTC+8 all year).
+      const perthDay = Math.floor((at.getTime() + 8 * 3_600_000) / 86_400_000) * 86_400_000 - 8 * 3_600_000;
+      const world = engine.seedWorld(new Date(perthDay + SCRIPTED_MINUTE * 60_000));
+      return {
+        ...world,
+        dayZero: new Date(at.getTime() - SCRIPTED_MINUTE * 60_000).toISOString(),
+        startedAt: at.toISOString(),
+      };
+    },
+  };
+}
+
 /** backend/ward-flow/server.mjs's own startup, with the local seams its tests use. */
 async function startBackend({ databaseUrl, authOrigin, appOrigin, engineUrl }) {
   const [{ readConfig }, { createBackend }, { createHandler, listen }, { createSupabaseAuthenticator }] =
@@ -285,7 +311,7 @@ async function startBackend({ databaseUrl, authOrigin, appOrigin, engineUrl }) {
           fetch: (url, init) => fetch(String(url).replace(SUPABASE_ORIGIN, authOrigin), init),
         }),
     },
-    engine: () => import(engineUrl),
+    engine: () => import(engineUrl).then(pinnedClockEngine),
   });
   const server = listen(createHandler({ ...store, log: () => {} }), config);
   cleanups.push(async () => {
diff --git a/tests/ward-audit-m44-alert-fatigue.test.ts b/tests/ward-audit-m44-alert-fatigue.test.ts
index 22d7adf4a0..a9250fbc1b 100644
--- a/tests/ward-audit-m44-alert-fatigue.test.ts
+++ b/tests/ward-audit-m44-alert-fatigue.test.ts
@@ -21,7 +21,9 @@ const { freshAlerts, pushPayload } = (await import(new URL("../backend/ward-flow
   pushPayload: (alerts: readonly unknown[]) => PushPayload;
 };
 
-const AT = new Date("2026-10-10T10:00:00Z");
+// D-150 (11 Nov 2026): the shared world runs on real Perth time, so the walk starts at 10:42 Perth,
+// the seed's own opening minute in the day shift, as the scripted clock did before.
+const AT = new Date("2026-10-10T02:42:00Z");
 const STEP = 30; // minutes of demo clock per evaluation, about the phone push sweep's grain
 const STEPS = 48; // 24 hours
 const ROLES: readonly WardChromeRole[] = ["coordinator", "bed_manager", "ed", "ward", "community"];
diff --git a/tests/ward-bed-board.dom.test.tsx b/tests/ward-bed-board.dom.test.tsx
index 91341c2ba5..917d7c2c86 100644
--- a/tests/ward-bed-board.dom.test.tsx
+++ b/tests/ward-bed-board.dom.test.tsx
@@ -2,7 +2,7 @@
 // engine (`PLACE_IN_BED`, `ACCEPT_REFERRAL` with a bed number), and Undo on the toast reverses both
 // the bed and the referral (build guide acceptance check "Place then Undo returns the referral and
 // the bed to their first state").
-import { act, fireEvent, render, screen, within } from "@testing-library/react";
+import { act, cleanup, fireEvent, render, screen, within } from "@testing-library/react";
 import { useEffect, type ReactNode } from "react";
 import { describe, expect, it, vi } from "vitest";
 
@@ -15,6 +15,7 @@ vi.mock("next/link", () => ({
 }));
 
 import { ToastProvider } from "@/components/wf/toast-provider";
+import { WardSharedSaveContext } from "@/components/ward-management/shell/ward-shared-save-context";
 import type { WardFlowEvent } from "@/components/ward-management/ward-flow-events";
 import { WardFlowProvider, useWardFlow } from "@/components/ward-management/ward-flow-provider";
 import { NOW_ANCHOR } from "@/components/ward-management/ward-sites";
@@ -58,6 +59,55 @@ const firstBed = (predicate: (label: string) => boolean) =>
   )!;
 const bedNo = (cell: HTMLElement) => Number(cell.dataset.testid?.replace("ward-board-bed-", ""));
 
+// D-151 (PR #1626 review): the Bed board's tile says "Waiting to save" too, as the bed list does.
+describe("Ward Bed board — a save waiting on this page", () => {
+  it("marks only the bed the waiting save changes", () => {
+    render(
+      <WardFlowProvider initialNow={NOW_ANCHOR}>
+        <ToastProvider>
+          <WardSharedSaveContext.Provider
+            value={{ unconfirmedSave: true, status: "ready", error: null, retry: () => {}, waitingBeds: [`${UNIT}:3`] }}
+          >
+            <WardScreen unitId={UNIT} />
+          </WardSharedSaveContext.Provider>
+        </ToastProvider>
+      </WardFlowProvider>,
+    );
+    fireEvent.click(screen.getByTestId("ward-open-bed-board"));
+    expect(screen.getByTestId("ward-board-bed-3")).toHaveAttribute("data-waiting-save", "true");
+    expect(cellText(3)).toMatch(/Waiting to save/);
+    expect(screen.getByTestId("ward-board-bed-4")).not.toHaveAttribute("data-waiting-save");
+  });
+
+  it("keeps the waiting mark beside a fit reason while a stay is picked up", () => {
+    renderBoard();
+    const to = bedNo(firstBed((label) => /, Ready, Free to place$/.test(label)));
+    cleanup();
+    render(
+      <WardFlowProvider initialNow={NOW_ANCHOR}>
+        <ToastProvider>
+          <WardSharedSaveContext.Provider
+            value={{
+              unconfirmedSave: true,
+              status: "ready",
+              error: null,
+              retry: () => {},
+              waitingBeds: [`${UNIT}:${to}`],
+            }}
+          >
+            <WardScreen unitId={UNIT} />
+          </WardSharedSaveContext.Provider>
+        </ToastProvider>
+      </WardFlowProvider>,
+    );
+    fireEvent.click(screen.getByTestId("ward-open-bed-board"));
+    fireEvent.click(firstBed((label) => !/ready|closed|pulled|waiting/i.test(label)));
+    fireEvent.click(getBedStep("Move to another bed"));
+    expect(screen.getByTestId(`ward-board-bed-${to}`)).toHaveAttribute("data-fits", "true");
+    expect(cellText(to)).toMatch(/Waiting to save · .+, fits$/);
+  });
+});
+
 describe("Ward Bed board — pick up and place, with Undo", () => {
   // Josh, 3 Nov 2026 (WH7, reverses CRIT-07): three view tabs, Ward home, Referrals and Decisions.
   it("opens inside Ward home, leaves three view tabs and draws one cell per bed", () => {
diff --git a/tests/ward-bed-close-reason-toast.dom.test.tsx b/tests/ward-bed-close-reason-toast.dom.test.tsx
new file mode 100644
index 0000000000..a62f52f077
--- /dev/null
+++ b/tests/ward-bed-close-reason-toast.dom.test.tsx
@@ -0,0 +1,217 @@
+import "@testing-library/jest-dom/vitest";
+import { act, fireEvent, render, screen, within } from "@testing-library/react";
+import { describe, expect, it, vi } from "vitest";
+
+import { ToastProvider } from "@/components/wf";
+import type { WardFlowEvent } from "@/components/ward-management/ward-flow-events";
+import { useUndoableStep } from "@/components/ward-management/use-undoable-step";
+import type { WardCommandOutcome } from "@/components/ward-management/ward-shared-client";
+import { bedClosureReasonChoices } from "@/components/ward-management/ward-bed-closure-reason";
+import { waitingBedKeys } from "@/components/ward-management/ward-shared-pending-command";
+
+// D-148 (Josh, 11 Nov 2026): closing a bed stays one tap with Undo, and the toast offers an optional
+// reason from the ward closure list. Choosing one undoes the close and closes it again with the
+// reason. Synthetic records only.
+const close = { role: "ward", unitId: "ward-test", actingUnitId: "ward-test", bedNumber: 4 } as const;
+const stepRecord = (seq: number) => ({
+  undoType: "UNDO_BED_STEP" as const,
+  subjectId: "bed:ward-test:4",
+  seq,
+});
+
+function Page({ dispatch }: { dispatch: (event: WardFlowEvent) => Promise<WardCommandOutcome> }) {
+  const { run } = useUndoableStep({ dispatch, now: 642, routeRole: "ward", rejections: [] });
+  return (
+    <button
+      onClick={() =>
+        run(
+          { ...close, type: "SET_BED_CLOSED", now: 642, closed: true },
+          {
+            success: "Bed 4 closed.",
+            undo: (now) => ({ type: "UNDO_BED_STEP", role: "ward", now, unitId: "ward-test", bedNumber: 4 }),
+            undone: "Undone. Bed 4 is open again.",
+            choices: bedClosureReasonChoices(close),
+          },
+        )
+      }
+    >
+      Close this bed
+    </button>
+  );
+}
+
+describe("bed closure reason on the toast (D-148)", () => {
+  it("closes on one tap, then a chosen reason undoes and closes again with it", async () => {
+    const dispatch = vi
+      .fn<(event: WardFlowEvent) => Promise<WardCommandOutcome>>()
+      .mockResolvedValueOnce({ commandId: "close", status: "accepted", undoStep: stepRecord(3) })
+      .mockResolvedValueOnce({ commandId: "undo", status: "accepted" })
+      .mockResolvedValueOnce({ commandId: "again", status: "accepted", undoStep: stepRecord(5) });
+    render(
+      <ToastProvider>
+        <Page dispatch={dispatch} />
+      </ToastProvider>,
+    );
+    await act(async () => {
+      fireEvent.click(screen.getByText("Close this bed"));
+    });
+    // One tap saved it: no confirm step, and no reason was asked for.
+    expect(dispatch).toHaveBeenCalledTimes(1);
+    expect(dispatch.mock.calls[0][0]).not.toHaveProperty("reason");
+    const toast = screen.getByTestId("toast");
+    expect(within(toast).getByRole("button", { name: "Undo" })).toBeInTheDocument();
+    // The choice menu is loaded on use.
+    const choose = await within(toast).findByTestId("toast-choices");
+    await act(async () => {
+      fireEvent.click(choose);
+    });
+    await act(async () => {
+      fireEvent.click(screen.getByRole("menuitem", { name: "Staffing" }));
+    });
+    expect(dispatch.mock.calls[1][0]).toMatchObject({ type: "UNDO_BED_STEP", bedNumber: 4, recordSeq: 3 });
+    expect(dispatch.mock.calls[2][0]).toMatchObject({
+      type: "SET_BED_CLOSED",
+      bedNumber: 4,
+      closed: true,
+      reason: "staffing",
+    });
+    const again = screen.getByTestId("toast");
+    expect(again).toHaveTextContent("Bed 4 closed: Staffing.");
+    // The step with its reason offers Undo as the first did, and no second reason picker.
+    expect(within(again).getByRole("button", { name: "Undo" })).toBeInTheDocument();
+    expect(within(again).queryByTestId("toast-choices")).toBeNull();
+  });
+
+  // PR #1626 review: leaving the page before the Undo's reply must not lose the chosen reason.
+  it("still closes again with the reason when the page has gone before the Undo is accepted", async () => {
+    let acceptUndo: (outcome: WardCommandOutcome) => void = () => {};
+    const dispatch = vi
+      .fn<(event: WardFlowEvent) => Promise<WardCommandOutcome>>()
+      .mockResolvedValueOnce({ commandId: "close", status: "accepted", undoStep: stepRecord(3) })
+      .mockImplementationOnce(() => new Promise((resolve) => (acceptUndo = resolve)))
+      .mockResolvedValueOnce({ commandId: "again", status: "accepted", undoStep: stepRecord(5) });
+    const view = render(
+      <ToastProvider>
+        <Page dispatch={dispatch} />
+      </ToastProvider>,
+    );
+    await act(async () => {
+      fireEvent.click(screen.getByText("Close this bed"));
+    });
+    const choose = await within(screen.getByTestId("toast")).findByTestId("toast-choices");
+    await act(async () => {
+      fireEvent.click(choose);
+    });
+    await act(async () => {
+      fireEvent.click(screen.getByRole("menuitem", { name: "Staffing" }));
+    });
+    expect(dispatch).toHaveBeenCalledTimes(2);
+    view.rerender(<ToastProvider>{null}</ToastProvider>);
+    await act(async () => {
+      acceptUndo({ commandId: "undo", status: "accepted" });
+    });
+    expect(dispatch).toHaveBeenCalledTimes(3);
+    expect(dispatch.mock.calls[2][0]).toMatchObject({ type: "SET_BED_CLOSED", closed: true, reason: "staffing" });
+    expect(await screen.findByText(/^Bed 4 closed: Staffing\./u)).toBeInTheDocument();
+  });
+
+  // PR #1626 review: after leaving, an Undo first reported as not confirmed and then confirmed still
+  // closes again with the reason.
+  it("still closes again with the reason when the Undo is confirmed after an unconfirmed reply", async () => {
+    let confirmUndo: (outcome: WardCommandOutcome) => void = () => {};
+    let replyUndo: (outcome: WardCommandOutcome) => void = () => {};
+    const confirmation = new Promise<WardCommandOutcome>((resolve) => (confirmUndo = resolve));
+    const dispatch = vi
+      .fn<(event: WardFlowEvent) => Promise<WardCommandOutcome>>()
+      .mockResolvedValueOnce({ commandId: "close", status: "accepted", undoStep: stepRecord(3) })
+      .mockImplementationOnce(() => new Promise((resolve) => (replyUndo = resolve)))
+      .mockResolvedValueOnce({ commandId: "again", status: "accepted", undoStep: stepRecord(5) });
+    const view = render(
+      <ToastProvider>
+        <Page dispatch={dispatch} />
+      </ToastProvider>,
+    );
+    await act(async () => {
+      fireEvent.click(screen.getByText("Close this bed"));
+    });
+    const choose = await within(screen.getByTestId("toast")).findByTestId("toast-choices");
+    await act(async () => {
+      fireEvent.click(choose);
+    });
+    await act(async () => {
+      fireEvent.click(screen.getByRole("menuitem", { name: "Staffing" }));
+    });
+    view.rerender(<ToastProvider>{null}</ToastProvider>);
+    await act(async () => {
+      replyUndo({ commandId: "undo", status: "failed", message: "Not confirmed yet.", confirmation });
+    });
+    expect(dispatch).toHaveBeenCalledTimes(2);
+    await act(async () => {
+      confirmUndo({ commandId: "undo", status: "accepted" });
+    });
+    expect(dispatch).toHaveBeenCalledTimes(3);
+    expect(dispatch.mock.calls[2][0]).toMatchObject({ type: "SET_BED_CLOSED", closed: true, reason: "staffing" });
+  });
+
+  it("does not close again when the undo is refused", async () => {
+    const dispatch = vi
+      .fn<(event: WardFlowEvent) => Promise<WardCommandOutcome>>()
+      .mockResolvedValueOnce({ commandId: "close", status: "accepted", undoStep: stepRecord(3) })
+      .mockResolvedValueOnce({ commandId: "undo", status: "refused", message: "This has changed since" });
+    render(
+      <ToastProvider>
+        <Page dispatch={dispatch} />
+      </ToastProvider>,
+    );
+    await act(async () => {
+      fireEvent.click(screen.getByText("Close this bed"));
+    });
+    const choose = await within(screen.getByTestId("toast")).findByTestId("toast-choices");
+    await act(async () => {
+      fireEvent.click(choose);
+    });
+    await act(async () => {
+      fireEvent.click(screen.getByRole("menuitem", { name: "Infection outbreak" }));
+    });
+    expect(dispatch).toHaveBeenCalledTimes(2);
+    expect(screen.getByTestId("toast")).toHaveTextContent("Not recorded: This has changed since");
+  });
+});
+
+// D-151: the beds a waiting save will change, for the tile's "Waiting to save" marker.
+describe("waiting bed keys (D-151)", () => {
+  it("names each bed a waiting save changes, once, and nothing else", () => {
+    const bed = { type: "SET_BED_CLOSED", now: 1, ...close, closed: true } as WardFlowEvent;
+    const other = {
+      type: "REQUEST_CAPACITY_REFRESH",
+      role: "coordinator",
+      now: 1,
+      unitId: "ward-test",
+    } as WardFlowEvent;
+    expect(waitingBedKeys([null, { event: bed }, { event: bed }, { event: other }])).toEqual(["ward-test:4"]);
+    expect(waitingBedKeys([])).toEqual([]);
+  });
+
+  // PR #1626 review: a bed move names the stay, not the unit, so both its beds come from the board.
+  it("names both beds of a waiting bed move, and the bed an Undo of it returns to", () => {
+    const stays = {
+      payload: { state: { admissions: [{ id: "adm-synthetic-1", unitId: "ward-test", bedNumber: 2 }] } },
+    };
+    const move = {
+      type: "PLACE_IN_BED",
+      role: "ward",
+      now: 1,
+      admissionId: "adm-synthetic-1",
+      bedNumber: 5,
+      actingUnitId: "ward-test",
+    } as WardFlowEvent;
+    expect(waitingBedKeys([{ event: move }], stays).sort()).toEqual(["ward-test:2", "ward-test:5"]);
+    const coordinatorMove = { ...move, actingUnitId: undefined } as WardFlowEvent;
+    expect(waitingBedKeys([{ event: coordinatorMove }], stays).sort()).toEqual(["ward-test:2", "ward-test:5"]);
+    const undo = { type: "UNDO_PLACE_IN_BED", role: "ward", now: 2, admissionId: "adm-synthetic-1" } as WardFlowEvent;
+    expect(waitingBedKeys([{ event: undo }], stays)).toEqual(["ward-test:2"]);
+    expect(waitingBedKeys([{ event: move }])).toEqual(["ward-test:5"]);
+    expect(waitingBedKeys([{ event: undo }], null, stays)).toEqual([]);
+    expect(waitingBedKeys([{ event: undo }], undefined, stays)).toEqual(["ward-test:2"]);
+  });
+});
diff --git a/tests/ward-bed-closed-mark.dom.test.tsx b/tests/ward-bed-closed-mark.dom.test.tsx
index af0a59ca1d..b6492ff166 100644
--- a/tests/ward-bed-closed-mark.dom.test.tsx
+++ b/tests/ward-bed-closed-mark.dom.test.tsx
@@ -1,5 +1,5 @@
 import "@testing-library/jest-dom/vitest";
-import { cleanup, fireEvent, render, screen } from "@testing-library/react";
+import { act, cleanup, fireEvent, render, screen, within } from "@testing-library/react";
 import { useEffect, type ReactNode } from "react";
 import { afterEach, describe, expect, it, vi } from "vitest";
 
@@ -73,6 +73,29 @@ describe("closing the exact bed from the bed drawer", () => {
     expect(card(bed)).toHaveAttribute("data-state", "ready");
     expect(bedsIn("ready")).toHaveLength(ready.length);
   });
+
+  // Live audit item 13 (11 Nov 2026): the bed's History lists its closure and its reopening.
+  it("lists the closure and the reopening in the bed's History", () => {
+    render(
+      <WardFlowProvider initialNow={NOW_ANCHOR}>
+        <ToastProvider>
+          <Grab />
+          <WardScreen unitId={UNIT} />
+        </ToastProvider>
+      </WardFlowProvider>,
+    );
+    const bed = Math.min(...bedsIn("ready"));
+    fireEvent.click(card(bed));
+    fireEvent.click(screen.getByTestId("ward-drawer-close-bed"));
+    fireEvent.click(screen.getByTestId("ward-drawer-reopen-bed"));
+    const toggle = screen.getByTestId("bed-drawer-history-toggle");
+    fireEvent.click(toggle);
+    const history = document.getElementById(toggle.getAttribute("aria-controls")!)!;
+    expect(history).toBeVisible();
+    expect(history).toHaveTextContent(/Bed closed, by /u);
+    expect(history).toHaveTextContent("Bed reopened");
+    expect(toggle).toHaveTextContent("History2");
+  });
 });
 
 describe("closing a bed with a review time (item 6)", () => {
@@ -101,4 +124,36 @@ describe("closing a bed with a review time (item 6)", () => {
     expect(bedsIn("ready")).toHaveLength(ready.length - 1);
     expect(screen.getByTestId("ward-drawer-reopen-bed-note")).toHaveTextContent(/^Review \d\d:\d\d\. Reopening/);
   });
+
+  // PR #1626 review: a reason chosen on the toast (D-148) closes the bed again, and keeps the time.
+  it("keeps the review time when a reason is added from the toast", async () => {
+    render(
+      <WardFlowProvider initialNow={NOW_ANCHOR}>
+        <ToastProvider>
+          <Grab />
+          <WardScreen unitId={UNIT} />
+        </ToastProvider>
+      </WardFlowProvider>,
+    );
+    const bed = Math.min(...bedsIn("ready"));
+    fireEvent.click(card(bed));
+    fireEvent.click(screen.getByRole("button", { name: "In 4 hours" }));
+    fireEvent.click(screen.getByTestId("ward-drawer-close-bed"));
+    const reviewAt = flow!.now + 240;
+    // The menu loads on use (off the first load); until then the same choices are plain buttons.
+    const toast = await screen.findByTestId("toast");
+    const staffing = await within(toast)
+      .findByRole("button", { name: "Staffing" })
+      .catch(() => null);
+    await act(async () => {
+      if (staffing) fireEvent.click(staffing);
+      else fireEvent.click(await within(toast).findByTestId("toast-choices"));
+    });
+    if (!staffing)
+      await act(async () => {
+        fireEvent.click(await screen.findByRole("menuitem", { name: "Staffing" }));
+      });
+    const mark = flow!.units.find((unit) => unit.id === UNIT)!.closedBeds!.at(-1)!;
+    expect(mark).toMatchObject({ bedNumber: bed, reason: "staffing", reviewAt });
+  });
 });
diff --git a/tests/ward-community-midland-demo.dom.test.tsx b/tests/ward-community-midland-demo.dom.test.tsx
index 17819254ee..e22ea95941 100644
--- a/tests/ward-community-midland-demo.dom.test.tsx
+++ b/tests/ward-community-midland-demo.dom.test.tsx
@@ -1,5 +1,5 @@
 import { fireEvent, render, screen, within } from "@testing-library/react";
-import { describe, expect, it } from "vitest";
+import { describe, expect, it, vi } from "vitest";
 import { CommunityScreen } from "@/components/ward-management/community/community-screen";
 import {
   recordMidlandDecision,
@@ -104,3 +104,23 @@ describe("Midland community team demo (locked design)", () => {
     }
   });
 });
+
+// Live audit item 6 (11 Nov 2026): the signed-in shared workspace never shows the Midland demo team,
+// so its home lists the shared referrals and nothing is kept in this browser.
+describe("Midland on the signed-in shared workspace", () => {
+  it("shows the team's own page, not the demo team", () => {
+    vi.stubEnv("NEXT_PUBLIC_WARD_SHARED_ENABLED", "true");
+    try {
+      renderTeam("midland");
+      expect(screen.queryByTestId("community-top-duty")).toBeNull();
+      expect(screen.queryByText("3 need someone today")).toBeNull();
+      expect(screen.getByTestId("ward-community-screen")).toBeInTheDocument();
+      // PR #1626 review: the team's own page, drawn from the board's referrals, not the unresolved page
+      // (which shares the screen's test id).
+      expect(screen.queryByText("Community team not found")).toBeNull();
+      expect(screen.getByText("No referral naming this team is currently waiting for an answer.")).toBeInTheDocument();
+    } finally {
+      vi.unstubAllEnvs();
+    }
+  });
+});
diff --git a/tests/ward-discharge-board-plan-departure-and-kpi.dom.test.tsx b/tests/ward-discharge-board-plan-departure-and-kpi.dom.test.tsx
index 08b308500f..d0e318a1da 100644
--- a/tests/ward-discharge-board-plan-departure-and-kpi.dom.test.tsx
+++ b/tests/ward-discharge-board-plan-departure-and-kpi.dom.test.tsx
@@ -46,6 +46,20 @@ describe("departure readiness lives in the release panel", () => {
     expect(item.getAttribute("aria-pressed")).toBe(before);
   });
 
+  // Live audit item 7 (11 Nov 2026): the checklist's ticks are invented for the demo, so the
+  // signed-in shared workspace leaves it out until a real shared checklist exists.
+  it("leaves the demo Ready to leave checklist out on the shared workspace", () => {
+    vi.stubEnv("NEXT_PUBLIC_WARD_SHARED_ENABLED", "true");
+    try {
+      renderBoard();
+      fireEvent.click(document.querySelector<HTMLElement>('tr[data-act="true"]')!);
+      expect(screen.queryByTestId("ward-discharge-ready-to-leave")).toBeNull();
+      expect(document.body.textContent).not.toContain("invented for the demo");
+    } finally {
+      vi.unstubAllEnvs();
+    }
+  });
+
   it("never renders the excluded barrier option or the false census/invariant claim", () => {
     renderBoard();
 
diff --git a/tests/ward-front-door-page.dom.test.tsx b/tests/ward-front-door-page.dom.test.tsx
index 1b53b8a58b..5a907f1e07 100644
--- a/tests/ward-front-door-page.dom.test.tsx
+++ b/tests/ward-front-door-page.dom.test.tsx
@@ -10,6 +10,7 @@ vi.mock("@/components/ward-management/ward-auth-session", () => ({ createWardAut
 
 import { FrontDoorPage } from "../src/components/ward-management/front-door/front-door-page";
 import {
+  END_PASS_DEADLINE_MS,
   endFrontDoorPass,
   renewFrontDoorPass,
 } from "../src/components/ward-management/front-door/front-door-pass-client";
@@ -264,6 +265,25 @@ describe("the pass from inside the app", () => {
     expect(fetcher.mock.calls.map(([, init]) => init?.method)).toEqual(["POST", "DELETE"]);
   });
 
+  // Review of PR #1626: Leave the demo waits on the end, so it reports failure and never hangs.
+  it("says whether the server ended the pass, and stops waiting at the deadline", async () => {
+    document.cookie = "wf_door=1";
+    await expect(endFrontDoorPass()).resolves.toBe(true);
+    fetcher.mockResolvedValueOnce(answer(500));
+    await expect(endFrontDoorPass()).resolves.toBe(false);
+    fetcher.mockRejectedValueOnce(new TypeError("offline"));
+    await expect(endFrontDoorPass()).resolves.toBe(false);
+    vi.useFakeTimers();
+    try {
+      fetcher.mockImplementationOnce(() => new Promise<Response>(() => {}));
+      const ended = endFrontDoorPass();
+      await vi.advanceTimersByTimeAsync(END_PASS_DEADLINE_MS);
+      await expect(ended).resolves.toBe(false);
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
   it("keeps quiet when the renewal fails", async () => {
     document.cookie = "wf_door=1";
     fetcher.mockRejectedValue(new TypeError("offline"));
diff --git a/tests/ward-live-audit-hardening.test.ts b/tests/ward-live-audit-hardening.test.ts
new file mode 100644
index 0000000000..478a0a1ae0
--- /dev/null
+++ b/tests/ward-live-audit-hardening.test.ts
@@ -0,0 +1,131 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { ROLE_SCREENS, WARD_ACCESS_ROLES } from "@/components/ward-management/ward-role-access";
+import { untilAborted } from "@/components/ward-management/ward-shared-client-helpers";
+import { THEME_BOOTSTRAP_SCRIPT, LEGACY_WARD_APPEARANCE_KEY, THEME_COOKIE_NAME } from "@/lib/theme";
+
+const root = join(__dirname, "..");
+
+afterEach(() => {
+  vi.useRealTimers();
+  vi.unstubAllGlobals();
+});
+
+describe("live audit item 14: the sign-in token wait has its own deadline", () => {
+  it("rejects with a plain error once the wait passes, so the normal retry shows", async () => {
+    vi.useFakeTimers();
+    const stuck = untilAborted(new Promise<string>(() => {}), undefined);
+    const settled = expect(stuck).rejects.toThrow("Sign-in check timed out");
+    await vi.advanceTimersByTimeAsync(15_000);
+    await settled;
+  });
+
+  it("passes an answer or a failure straight through, and still stops with the poll", async () => {
+    await expect(untilAborted(Promise.resolve("token"), undefined, 50)).resolves.toBe("token");
+    await expect(untilAborted(Promise.reject(new Error("refused")), undefined, 50)).rejects.toThrow("refused");
+    const poll = new AbortController();
+    const stopped = untilAborted(new Promise<string>(() => {}), poll.signal, 50);
+    poll.abort();
+    await expect(stopped).rejects.toMatchObject({ name: "AbortError" });
+  });
+});
+
+describe("live audit item 21: the access log says TV board only for a desk that opens it", () => {
+  it("keeps the server's TV roles in step with the roles that open the bed meeting screen", () => {
+    const source = readFileSync(join(root, "backend/ward-flow/shared-http.mjs"), "utf8");
+    const match = /const TV_BOARD_ROLES = new Set\(\[([^\]]*)\]\)/u.exec(source);
+    expect(match).not.toBeNull();
+    const server = [...match![1].matchAll(/"([a-z_]+)"/gu)].map((entry) => entry[1]).sort();
+    const opens = WARD_ACCESS_ROLES.filter((role) => ROLE_SCREENS[role]["bed-meeting"] !== undefined).sort();
+    expect(server).toEqual(opens);
+  });
+});
+
+describe("live audit item 15: security.txt", () => {
+  it("names a contact and a future expiry (RFC 9116)", () => {
+    const text = readFileSync(join(root, "public/.well-known/security.txt"), "utf8");
+    expect(text).toMatch(/^Contact: https:\/\/github\.com\/BigSimmo\/Ward-Flow\/security\/advisories\/new$/mu);
+    const expires = /^Expires: (\S+)$/mu.exec(text)?.[1];
+    expect(Number.isFinite(Date.parse(expires ?? ""))).toBe(true);
+  });
+});
+
+describe("live audit item 18: the theme start-up script's cookie is Secure over https", () => {
+  function migrate(protocol: string) {
+    vi.stubGlobal("location", { protocol });
+    const store: Record<string, string> = { [LEGACY_WARD_APPEARANCE_KEY]: "dark" };
+    const page = {
+      cookie: "",
+      documentElement: {
+        classList: { toggle() {} },
+        setAttribute() {},
+        removeAttribute() {},
+        getAttribute: () => null,
+      },
+      querySelectorAll: () => [],
+    };
+    new Function("localStorage", "window", "document", THEME_BOOTSTRAP_SCRIPT)(
+      {
+        getItem: (key: string) => store[key] ?? null,
+        setItem: (key: string, value: string) => (store[key] = value),
+        removeItem: (key: string) => delete store[key],
+      },
+      { matchMedia: () => ({ matches: false, addEventListener() {} }) },
+      page,
+    );
+    return page.cookie;
+  }
+
+  it("adds Secure on https and leaves it off on plain http", () => {
+    expect(migrate("https:")).toBe(`${THEME_COOKIE_NAME}=dark; path=/; max-age=31536000; SameSite=Lax; Secure`);
+    expect(migrate("http:")).toBe(`${THEME_COOKIE_NAME}=dark; path=/; max-age=31536000; SameSite=Lax`);
+  });
+});
+
+describe("live audit item 19: sign-out leaves no readable Ward Flow cookie", () => {
+  it("clears the desk cookie, Secure over https", async () => {
+    const writes: string[] = [];
+    vi.stubGlobal("location", { protocol: "https:" });
+    vi.stubGlobal("document", {
+      set cookie(value: string) {
+        writes.push(value);
+      },
+      get cookie() {
+        return "";
+      },
+    });
+    const { syncWardDeskHeldCookie } = await import("@/components/ward-management/shell/ward-desk-early");
+    syncWardDeskHeldCookie(false);
+    syncWardDeskHeldCookie(null);
+    expect(writes).toEqual([
+      "wardflow-desk-held=1;path=/ward-flow;SameSite=Strict;Secure",
+      "wardflow-desk-held=;path=/ward-flow;SameSite=Strict;max-age=0;Secure",
+    ]);
+  });
+
+  it("the sign-out sweep clears the desk cookie", async () => {
+    vi.resetModules();
+    const sync = vi.fn();
+    vi.doMock("@/components/ward-management/shell/ward-desk-early", () => ({ syncWardDeskHeldCookie: sync }));
+    try {
+      const { endWardFlowBrowserSession } = await import("@/components/ward-management/ward-browser-data");
+      endWardFlowBrowserSession();
+      expect(sync).toHaveBeenCalledWith(null);
+    } finally {
+      vi.doUnmock("@/components/ward-management/shell/ward-desk-early");
+    }
+  });
+});
+
+describe("live audit item 23: zod builds no code in the browser", () => {
+  it("the executive statistics contract turns zod's jitless mode on as it loads", async () => {
+    const { z } = await import("zod");
+    z.config({ jitless: false });
+    vi.resetModules();
+    await import("@/components/ward-management/statistics/executive-statistics-contract");
+    expect(z.config().jitless).toBe(true);
+  });
+});
diff --git a/tests/ward-next-account-menu.dom.test.tsx b/tests/ward-next-account-menu.dom.test.tsx
index 05f8c5f227..2ffd904fa7 100644
--- a/tests/ward-next-account-menu.dom.test.tsx
+++ b/tests/ward-next-account-menu.dom.test.tsx
@@ -59,11 +59,13 @@ function session(overrides: Partial<SharedSession> = {}): SharedSession {
 function renderRail(signedIn: SharedSession | null = null, onOpenOperatorModal?: () => void) {
   return render(
     // Inside the provider: its own shared-access layer supplies no session in the local demo.
-    <WardFlowProvider initialNow={NOW_ANCHOR}>
-      <SharedSessionContext.Provider value={signedIn}>
-        <NextRailBody onOpenOperatorModal={onOpenOperatorModal} />
-      </SharedSessionContext.Provider>
-    </WardFlowProvider>,
+    <ToastProvider>
+      <WardFlowProvider initialNow={NOW_ANCHOR}>
+        <SharedSessionContext.Provider value={signedIn}>
+          <NextRailBody onOpenOperatorModal={onOpenOperatorModal} />
+        </SharedSessionContext.Provider>
+      </WardFlowProvider>
+    </ToastProvider>,
   );
 }
 
@@ -131,6 +133,101 @@ describe("rail account menu (DK1)", () => {
     const menu = openAccountMenu();
     expect(itemNames(menu)).toEqual(["Settings", expect.stringMatching(/^Help/u), "Sign out"]);
   });
+
+  // Live audit item 22 (11 Nov 2026): on a front-door site the public demo offers Leave the demo,
+  // which ends the demo code's pass through DELETE /api/session and opens the sign-in page.
+  it("on a front-door demo site offers Leave the demo, which ends the pass", async () => {
+    document.cookie = "wf_door=1; path=/";
+    const fetchMock = vi.fn(async () => new Response(null, { status: 204 }));
+    vi.stubGlobal("fetch", fetchMock);
+    const replace = vi.fn();
+    vi.spyOn(window, "location", "get").mockReturnValue({ ...window.location, replace } as Location);
+    try {
+      renderRail();
+      const menu = openAccountMenu();
+      expect(itemNames(menu)).toEqual([
+        "Settings",
+        expect.stringMatching(/^Help/u),
+        "Try another desk (demo)",
+        "Leave the demo",
+      ]);
+      fireEvent.click(within(menu).getByRole("menuitem", { name: "Leave the demo" }));
+      await vi.waitFor(() => expect(replace).toHaveBeenCalledWith("/sign-in"));
+      expect(fetchMock).toHaveBeenCalledWith("/api/session", expect.objectContaining({ method: "DELETE" }));
+    } finally {
+      document.cookie = "wf_door=; path=/; max-age=0";
+      vi.unstubAllGlobals();
+      vi.restoreAllMocks();
+    }
+  });
+
+  // Review of PR #1626: a pass the server did not end still opens the demo, so the sign-in page is
+  // not opened; a toast says so and the item stays to try again.
+  it("stays on the demo and says so when the pass could not be ended", async () => {
+    document.cookie = "wf_door=1; path=/";
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(async () => new Response(null, { status: 500 })),
+    );
+    const replace = vi.fn();
+    vi.spyOn(window, "location", "get").mockReturnValue({ ...window.location, replace } as Location);
+    try {
+      renderRail();
+      fireEvent.click(within(openAccountMenu()).getByRole("menuitem", { name: "Leave the demo" }));
+      expect(await screen.findByText("The demo could not end")).toBeInTheDocument();
+      expect(replace).not.toHaveBeenCalled();
+    } finally {
+      document.cookie = "wf_door=; path=/; max-age=0";
+      vi.unstubAllGlobals();
+      vi.restoreAllMocks();
+    }
+  });
+
+  // Review of PR #1626: a pass end the server confirms after the deadline removes the marker; the
+  // page still offers Leave the demo, so trying again needs no reload.
+  it("keeps Leave the demo on offer when the pass ends after the deadline", async () => {
+    document.cookie = "wf_door=1; path=/";
+    let reply: (response: Response) => void = () => {};
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(() => new Promise<Response>((resolve) => (reply = resolve))),
+    );
+    const replace = vi.fn();
+    vi.spyOn(window, "location", "get").mockReturnValue({ ...window.location, replace } as Location);
+    vi.useFakeTimers({ toFake: ["setTimeout", "clearTimeout"] });
+    try {
+      renderRail();
+      fireEvent.click(within(openAccountMenu()).getByRole("menuitem", { name: "Leave the demo" }));
+      await act(async () => {
+        await vi.advanceTimersByTimeAsync(8_000);
+      });
+      expect(screen.getByText("The demo could not end")).toBeInTheDocument();
+      // The late reply ends the pass and removes the marker.
+      document.cookie = "wf_door=; path=/; max-age=0";
+      await act(async () => {
+        reply(new Response(null, { status: 204 }));
+      });
+      cleanup();
+      renderRail();
+      expect(itemNames(openAccountMenu())).toContain("Leave the demo");
+      expect(replace).not.toHaveBeenCalled();
+    } finally {
+      vi.useRealTimers();
+      document.cookie = "wf_door=; path=/; max-age=0";
+      vi.unstubAllGlobals();
+      vi.restoreAllMocks();
+    }
+  });
+
+  it("never offers Leave the demo in a signed-in session, even on a front-door site", () => {
+    document.cookie = "wf_door=1; path=/";
+    try {
+      renderRail(session());
+      expect(itemNames(openAccountMenu())).not.toContain("Leave the demo");
+    } finally {
+      document.cookie = "wf_door=; path=/; max-age=0";
+    }
+  });
 });
 
 function renderPhoneMenu(signedIn: SharedSession | null = null) {
diff --git a/tests/ward-no-invented-screen-figures.test.ts b/tests/ward-no-invented-screen-figures.test.ts
index 6f762eefce..c56d6314cb 100644
--- a/tests/ward-no-invented-screen-figures.test.ts
+++ b/tests/ward-no-invented-screen-figures.test.ts
@@ -162,6 +162,12 @@ const CONSTANT_EXCLUSIONS: ReadonlyArray<{ id: string; why: string; file?: RegEx
     file: /^ward-role-alerts\.ts$/,
     name: /^ROLE_ALERT_WINDOW_MINUTES$/,
   },
+  {
+    id: "save-warning-pause",
+    why: "Live audit item 8 (11 Nov 2026): how long a save in flight shows the calm Saving… pill before the reload warning; screen timing, never shown, not a clinical limit.",
+    file: /^ward-shared-save-status\.tsx$/,
+    name: /^SAVE_WARNING_AFTER_MS$/,
+  },
   {
     id: "typing-pause",
     why: "The referral draft's autosave pause (9 Oct 2026): how long typing rests before tab memory is updated; never shown, not a limit.",
@@ -294,6 +300,12 @@ const CONSTANT_EXCLUSIONS: ReadonlyArray<{ id: string; why: string; file?: RegEx
     file: /^help\/ward-help-account-memory\.tsx$/,
     name: /^SEND_AFTER_MS$/,
   },
+  {
+    id: "leave-demo-pass-deadline",
+    why: "Live audit item 22 (11 Nov 2026): how long Leave the demo waits for the server to end the front door's pass before saying it could not end; network deadline, never shown, not a clinical limit.",
+    file: /^front-door\/front-door-pass-client\.ts$/,
+    name: /^END_PASS_DEADLINE_MS$/,
+  },
 ];
 
 export const BREACH = /\bbreach(?:es|ed|ing)?\b/i;
diff --git a/tests/ward-patient-archive.test.ts b/tests/ward-patient-archive.test.ts
index fc28961c44..bf47f4fa77 100644
--- a/tests/ward-patient-archive.test.ts
+++ b/tests/ward-patient-archive.test.ts
@@ -5,6 +5,10 @@ import { seedWardFlowState, wardFlowReducer, type WardFlowState } from "@/compon
 import type { WardFlowEvent } from "@/components/ward-management/ward-flow-events";
 import { GENERAL_OBSERVATION } from "@/components/ward-management/ward-observation";
 import { validSharedCommand } from "../backend/ward-flow/command-schemas";
+import { patientArchiveProblem } from "@/components/ward-management/ward-patient-archive";
+import { UNDO_WINDOW_MINUTES } from "@/components/ward-management/ward-operational-defaults";
+import { isValidSharedWardFlowState } from "@/components/ward-management/ward-shared-state-validation";
+import { FIXTURE_HISTORY } from "./helpers/ward-referral-history";
 
 const now = 642;
 type WithoutNow<T> = T extends unknown ? Omit<T, "now"> : never;
@@ -152,3 +156,152 @@ describe("ARCHIVE_PATIENT", () => {
     });
   });
 });
+
+// D-149 (Josh, 11 Nov 2026): a record whose only links are withdrawn or cancelled front-door
+// referrals, audit rows and spent Undo records can be archived; anything else still keeps it.
+describe("ARCHIVE_PATIENT after a withdrawn referral (D-149)", () => {
+  function referred() {
+    const world = withNewPatient();
+    world.send({
+      type: "RECEIVE_REFERRAL",
+      role: "ed",
+      ageBand: "Adult",
+      patientId: world.patient.id,
+      destinations: [
+        {
+          kind: "psychiatric_ward",
+          sex: "Male",
+          secureBedNeeded: false,
+          involuntaryBedNeeded: false,
+          highAcuityNursingNeeded: false,
+        },
+      ],
+      homeRegion: "Perth Metropolitan",
+      suburb: { kind: "named", name: "Perth" },
+      source: "ed_medical",
+      originSiteCode: "RPH",
+      urgency: 3,
+      transportNeeded: false,
+      ...FIXTURE_HISTORY,
+    } as never);
+    const referral = world.state.referrals.find((entry) => entry.patientId === world.patient.id);
+    expect(
+      referral,
+      `the referral was refused (${world.state.rejections.at(-1)?.reason}), so this suite would assert nothing`,
+    ).toBeDefined();
+    // Not a spread: `state` is a getter, and a spread would freeze it at this moment.
+    return Object.assign(world, { referralId: referral!.id });
+  }
+  const later = (minutes: number) => now + minutes;
+
+  it("refuses while the referral is still open, and says why", () => {
+    const world = referred();
+    expect(patientArchiveProblem(world.state, world.patient.id, later(60))).toMatch(/open or answered referral/);
+    world.send({ type: "ARCHIVE_PATIENT", role: "coordinator", patientId: world.patient.id, reason: "test" });
+    expect(world.state.patients.some((patient) => patient.id === world.patient.id)).toBe(true);
+  });
+
+  it("archives once the referrer withdrew it", () => {
+    const world = referred();
+    world.send({ type: "RECORD_REFERRER_WITHDRAWAL", role: "coordinator", referralId: world.referralId } as never);
+    const withdrawn = world.state.referrals.find((entry) => entry.id === world.referralId)!;
+    expect(
+      withdrawn.destinations.every((addressing) => addressing.withdrawnAt !== undefined),
+      `the withdrawal was refused (${world.state.rejections.at(-1)?.reason})`,
+    ).toBe(true);
+    // A referrer's withdrawal is not an Undo step, so nothing is left that could bring it back.
+    expect(patientArchiveProblem(world.state, world.patient.id, now)).toBeUndefined();
+    world.send({ type: "ARCHIVE_PATIENT", role: "coordinator", patientId: world.patient.id, reason: "test" });
+    expect(world.state.patients.some((patient) => patient.id === world.patient.id)).toBe(false);
+    // The withdrawn referral stays, no longer linked to the archived record, and the archived
+    // state is still one the server accepts.
+    const kept = world.state.referrals.find((entry) => entry.id === world.referralId);
+    expect(kept).toBeDefined();
+    expect(kept!.patientId).toBeUndefined();
+    expect(isValidSharedWardFlowState(JSON.parse(JSON.stringify(world.state)))).toBe(true);
+  });
+
+  it("waits out the Undo window while a step naming the record could still be taken back", () => {
+    const world = referred();
+    world.send({ type: "RECORD_REFERRER_WITHDRAWAL", role: "coordinator", referralId: world.referralId } as never);
+    const withUndo = {
+      ...world.state,
+      undoRecords: [
+        ...(world.state.undoRecords ?? []),
+        { kind: "step", undoType: "UNDO_BED_STEP", subjectId: world.patient.id, seq: 1, at: now },
+      ],
+    } as unknown as WardFlowState;
+    expect(patientArchiveProblem(withUndo, world.patient.id, now)).toMatch(/can still be undone/);
+    // At exactly the window Undo is still allowed (`undoWindowRefusal` refuses only past it).
+    expect(patientArchiveProblem(withUndo, world.patient.id, later(UNDO_WINDOW_MINUTES))).toMatch(
+      /can still be undone/,
+    );
+    expect(patientArchiveProblem(withUndo, world.patient.id, later(UNDO_WINDOW_MINUTES + 1))).toBeUndefined();
+    // A step stamped after the board's time (left by a clock step back, D-150) cannot be undone
+    // (`undoWindowRefusal`), so it does not hold the record either.
+    expect(patientArchiveProblem(withUndo, world.patient.id, (now - 60) as typeof now)).toBeUndefined();
+    const inside = wardFlowReducer(withUndo, {
+      type: "ARCHIVE_PATIENT",
+      role: "coordinator",
+      now,
+      patientId: world.patient.id,
+      reason: "test",
+    });
+    expect(inside.patients.some((patient) => patient.id === world.patient.id)).toBe(true);
+    const after = wardFlowReducer(withUndo, {
+      type: "ARCHIVE_PATIENT",
+      role: "coordinator",
+      now: later(UNDO_WINDOW_MINUTES + 1),
+      patientId: world.patient.id,
+      reason: "test",
+    });
+    expect(after.patients.some((patient) => patient.id === world.patient.id)).toBe(false);
+  });
+
+  it("drops a future-stamped Undo step on archive, so it cannot come back once the clock reaches it", () => {
+    const world = referred();
+    world.send({ type: "RECORD_REFERRER_WITHDRAWAL", role: "coordinator", referralId: world.referralId } as never);
+    const otherStep = { kind: "step", undoType: "UNDO_BED_STEP", subjectId: "PT-OTHER", seq: 2, at: now };
+    const withUndo = {
+      ...world.state,
+      undoRecords: [
+        ...(world.state.undoRecords ?? []),
+        { kind: "step", undoType: "UNDO_BED_STEP", subjectId: world.patient.id, seq: 1, at: later(60) },
+        otherStep,
+      ],
+    } as unknown as WardFlowState;
+    // The step is stamped an hour after the board's time (a D-150 clock step back), so archive is allowed.
+    const archived = wardFlowReducer(withUndo, {
+      type: "ARCHIVE_PATIENT",
+      role: "coordinator",
+      now,
+      patientId: world.patient.id,
+      reason: "test",
+    });
+    expect(archived.patients.some((patient) => patient.id === world.patient.id)).toBe(false);
+    // The future-stamped step on the record is gone, so it cannot bring a step on it back later.
+    // The archive's own Undo record, which restores the record itself, is the only one naming it.
+    const naming = (archived.undoRecords ?? []).filter((entry) =>
+      JSON.stringify(entry).includes(JSON.stringify(world.patient.id)),
+    );
+    expect(naming.map((entry) => (entry as { action?: string }).action)).toEqual(["ARCHIVE_PATIENT"]);
+    // An Undo record about anything else is kept.
+    expect(archived.undoRecords).toContainEqual(otherStep);
+  });
+
+  it("still refuses a referral a ward answered", () => {
+    const world = referred();
+    const answered = {
+      ...world.state,
+      referrals: world.state.referrals.map((entry) =>
+        entry.id === world.referralId
+          ? {
+              ...entry,
+              destinations: entry.destinations.map((addressing) => ({ ...addressing, state: "declined" as const })),
+            }
+          : entry,
+      ),
+    };
+    expect(patientArchiveProblem(answered, world.patient.id, later(60))).toMatch(/care recorded against them/);
+  });
+});
diff --git a/tests/ward-patient-link-default-deny.test.ts b/tests/ward-patient-link-default-deny.test.ts
index fcd2f97f3a..1a20641bd6 100644
--- a/tests/ward-patient-link-default-deny.test.ts
+++ b/tests/ward-patient-link-default-deny.test.ts
@@ -493,6 +493,14 @@ const ALLOWLIST: ReadonlyArray<{ file: string; reason: string }> = [
       "this team took with a later ED request for the same person by comparing patientId only, within " +
       "the signed 7-day window. It shows the taking team that person's link and two times, nothing else.",
   },
+  {
+    file: "ward-patient-archive-reducer.ts",
+    reason:
+      "Archive reducer (D-149, Approved by Josh as Ward Lead, 11 Nov 2026, PR #1626): when a record is " +
+      "archived, the only referrals still naming it are withdrawn ones nobody answered. It compares each " +
+      "referral's patientId with the archived id and drops that link so no referral points at a record " +
+      "that has left the lists. Ids only; it writes state, renders nothing and discloses no other stay.",
+  },
 ].map((entry) => ({ ...entry, file: resolve(WARD_DIR, entry.file) }));
 
 const shortPath = (file: string) => relative(process.cwd(), file).replace(/\\/g, "/");
@@ -535,8 +543,10 @@ describe("D-14 default-deny: the patient link is read only where explicitly perm
     // 53 → 58 on 2026-11-07: Josh as Ward Lead allowed the five triage and risk files (PR #1500).
     // 58 → 59 on 2026-11-10: Josh as Ward Lead allowed the M134 hard-case seed overlay (PR #1598, D-131).
     // 59 → 60 on 2026-11-11: Josh allowed the item 28 diversion return review (PR #1605, D-136).
-    // 60 → 61 on 2026-11-11: D-133, the home team heads-up (open episodes only, ED name and time only).
-    expect(ALLOWLIST.length, "the allowlist changed size — re-read this file's own header").toBe(61);
+    // 60 → 61 on 2026-11-11: Approved by Josh as Ward Lead — the D-149 archive reducer unlinks
+    // withdrawn referrals from an archived record (PR #1626).
+    // 61 → 62 on 2026-11-11: D-133, the home team heads-up (open episodes only, ED name and time only).
+    expect(ALLOWLIST.length, "the allowlist changed size — re-read this file's own header").toBe(62);
     for (const { file, reason } of ALLOWLIST) {
       expect(existsSync(file), `${shortPath(file)} is allow-listed but does not exist`).toBe(true);
       expect(reason.length, `${shortPath(file)} is allow-listed with no real reason beside it`).toBeGreaterThan(30);
diff --git a/tests/ward-runtime-archive-outcome.dom.test.tsx b/tests/ward-runtime-archive-outcome.dom.test.tsx
index 8d4a403186..ecf398d3b5 100644
--- a/tests/ward-runtime-archive-outcome.dom.test.tsx
+++ b/tests/ward-runtime-archive-outcome.dom.test.tsx
@@ -5,7 +5,10 @@ import type { WardCommandOutcome } from "@/components/ward-management/ward-share
 const mocks = vi.hoisted(() => ({ raise: vi.fn(), replace: vi.fn() }));
 vi.mock("next/navigation", () => ({ useRouter: () => ({ replace: mocks.replace }) }));
 vi.mock("@/components/ward-management/ward-flow-raise", () => ({ useWardRaise: () => mocks.raise }));
-vi.mock("@/components/ward-management/ward-flow-provider", () => ({ useWardFlowSelect: () => ({}) }));
+vi.mock("@/components/ward-management/ward-flow-provider", () => ({
+  useWardFlowSelect: () => ({}),
+  useWardFlowClock: () => 0,
+}));
 vi.mock("@/components/ward-management/ward-role-gate", () => ({
   useRoleGate: () => () => ({ allowed: true }),
   useRouteRole: () => "coordinator",
diff --git a/tests/ward-shared-save-status-bar.dom.test.tsx b/tests/ward-shared-save-status-bar.dom.test.tsx
index 6058207af2..fe26e28817 100644
--- a/tests/ward-shared-save-status-bar.dom.test.tsx
+++ b/tests/ward-shared-save-status-bar.dom.test.tsx
@@ -1,5 +1,6 @@
-import { render, screen } from "@testing-library/react";
-import { expect, it, vi } from "vitest";
+import { act, render, screen } from "@testing-library/react";
+import type React from "react";
+import { afterEach, describe, expect, it, vi } from "vitest";
 
 import { clk } from "@/components/wf/format";
 import { publishLiveRefresh } from "@/components/wf/live";
@@ -102,3 +103,89 @@ it("stays quiet while the shared refresh is on time", () => {
     publishLiveRefresh(undefined);
   }
 });
+
+// Live audit item 8 (11 Nov 2026): a normal save shows a calm "Saving…" first. The full reload
+// warning comes only after 8 s, while offline, or once the save has failed.
+describe("a save in flight", () => {
+  const saving = (overrides: Partial<WardSharedConnection> = {}) =>
+    ({ ...connection("saving"), error: null, ...overrides }) as unknown as WardSharedConnection;
+  const withSave = (node: React.ReactNode) => (
+    <WardSharedSaveContext.Provider value={{ unconfirmedSave: true, status: "saving", error: null, retry: () => {} }}>
+      {node}
+    </WardSharedSaveContext.Provider>
+  );
+
+  afterEach(() => {
+    vi.useRealTimers();
+    vi.restoreAllMocks();
+  });
+
+  it("shows a calm Saving… pill, then the full warning after 8 s", () => {
+    vi.useFakeTimers();
+    render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    const status = screen.getByTestId("ward-shared-status-bar");
+    expect(status).toHaveTextContent(/^Saving…$/u);
+    expect(status.className).toMatch(/pill/u);
+    expect(screen.queryByTestId("ward-shared-reload-warning")).toBeNull();
+    expect(screen.queryByRole("button")).toBeNull();
+    act(() => {
+      vi.advanceTimersByTime(7_999);
+    });
+    expect(screen.queryByTestId("ward-shared-reload-warning")).toBeNull();
+    act(() => {
+      vi.advanceTimersByTime(1);
+    });
+    expect(screen.getByTestId("ward-shared-reload-warning")).toBeVisible();
+    expect(status).toHaveTextContent("Saving shared changes… Keep this page open until the save is confirmed.");
+  });
+
+  it("warns at once while the browser is offline", () => {
+    vi.spyOn(navigator, "onLine", "get").mockReturnValue(false);
+    render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    expect(screen.getByTestId("ward-shared-reload-warning")).toBeVisible();
+  });
+
+  it("warns at once when the save carries an error", () => {
+    render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving({ error: "Not saved." })} />));
+    expect(screen.getByTestId("ward-shared-reload-warning")).toBeVisible();
+  });
+
+  // PR #1626 review: only a save that failed or was held offline keeps the full warning through its
+  // retry; a save queued behind a refresh has not failed and stays calm once it sends.
+  it("stays calm for a save that was only queued, and keeps the warning after a failure", () => {
+    const queued = { ...connection("ready"), error: null } as unknown as WardSharedConnection;
+    const view = render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={queued} />));
+    view.rerender(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    expect(screen.getByTestId("ward-shared-status-bar")).toHaveTextContent(/^Saving…$/u);
+    view.unmount();
+
+    const failed = { ...connection("unavailable"), error: "Not saved." } as unknown as WardSharedConnection;
+    const again = render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={failed} />));
+    again.rerender(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    expect(screen.getByTestId("ward-shared-reload-warning")).toBeVisible();
+  });
+
+  // An earlier refused save's note stays on the board while it is ready. A new save queued behind a
+  // refresh at that moment has not failed, so it still shows the calm "Saving…" once it sends.
+  it("stays calm for a new save while an earlier refusal's note is still on the board", () => {
+    const refusedEarlier = {
+      ...connection("ready"),
+      error: "That bed has changed. Nothing was changed.",
+    } as unknown as WardSharedConnection;
+    const view = render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={refusedEarlier} />));
+    view.rerender(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    expect(screen.getByTestId("ward-shared-status-bar")).toHaveTextContent(/^Saving…$/u);
+    expect(screen.queryByTestId("ward-shared-reload-warning")).toBeNull();
+  });
+
+  it("keeps the full warning through Retry once its own save ended with an error", () => {
+    const view = render(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    const notConfirmed = {
+      ...connection("ready"),
+      error: "Your last change was not confirmed. The board is up to date. Press Retry to send it.",
+    } as unknown as WardSharedConnection;
+    view.rerender(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={notConfirmed} />));
+    view.rerender(withSave(<WardSharedSaveStatus deskLabel="Coordinator" connection={saving()} />));
+    expect(screen.getByTestId("ward-shared-reload-warning")).toBeVisible();
+  });
+});
diff --git a/tests/ward-shared-world-clock.test.ts b/tests/ward-shared-world-clock.test.ts
new file mode 100644
index 0000000000..150bc97340
--- /dev/null
+++ b/tests/ward-shared-world-clock.test.ts
@@ -0,0 +1,49 @@
+/** @vitest-environment node */
+// D-150 (Josh, 11 Nov 2026): the signed-in site runs on real Perth time. The shared world's clock is
+// the real minutes since its day zero, not the scripted 10:42 the public demo starts from.
+import { describe, expect, it } from "vitest";
+import { seedWorld, worldNow } from "../backend/ward-flow/engine";
+import { demoDayZero } from "@/components/ward-management/ward-clock";
+import { NOW_ANCHOR } from "@/components/ward-management/ward-sites";
+import { seedWardFlowState } from "@/components/ward-management/ward-flow-reducer";
+
+/** A real moment at Perth hour:minute on 11 Nov 2026 (AWST is UTC+8). */
+const perth = (hour: number, minute: number) => new Date(Date.UTC(2026, 10, 11, hour - 8, minute));
+
+describe("shared world clock (D-150)", () => {
+  it("reads the real Perth time for a new world, whatever hour it was made", () => {
+    for (const [hour, minute] of [
+      [9, 54],
+      [10, 42],
+      [17, 5],
+    ] as const) {
+      const at = perth(hour, minute);
+      expect(worldNow(seedWorld(at), at)).toBe(hour * 60 + minute);
+    }
+  });
+
+  it("keeps an existing world on its stored day zero and counts real minutes from it", () => {
+    const madeAt = perth(9, 54);
+    const world = seedWorld(madeAt);
+    // The live audit's case: a world made at 9:54 used to read 10:42 at once, 48 minutes fast.
+    const later = new Date(madeAt.getTime() + 25 * 24 * 60 * 60_000 + 129 * 60_000);
+    expect(worldNow(world, later)).toBe(25 * 1440 + 12 * 60 + 3);
+    expect(world.dayZero).toBe(demoDayZero(madeAt).toISOString());
+  });
+
+  it("re-anchors the seed onto the real time, keeping every relative offset", () => {
+    const at = perth(17, 5);
+    const world = seedWorld(at);
+    const shift = 17 * 60 + 5 - NOW_ANCHOR;
+    const authored = seedWardFlowState();
+    const firstAuthored = authored.movements.find((movement) => typeof movement.openedAt === "number")!;
+    const firstSeeded = world.state.movements.find((movement) => movement.id === firstAuthored.id)!;
+    expect(firstSeeded.openedAt).toBe(firstAuthored.openedAt + shift);
+  });
+
+  it("still adds a clock offset already in a stored world", () => {
+    const at = perth(12, 0);
+    const world = seedWorld(at);
+    expect(worldNow({ ...world, state: { ...world.state, clockOffsetMinutes: 15 } }, at)).toBe(12 * 60 + 15);
+  });
+});
diff --git a/tests/wf-toast-choices-fallback.dom.test.tsx b/tests/wf-toast-choices-fallback.dom.test.tsx
new file mode 100644
index 0000000000..328163ad32
--- /dev/null
+++ b/tests/wf-toast-choices-fallback.dom.test.tsx
@@ -0,0 +1,42 @@
+import "@testing-library/jest-dom/vitest";
+import { act, fireEvent, render, screen, within } from "@testing-library/react";
+import { describe, expect, it, vi } from "vitest";
+
+// PR #1626 review: the toast's reason menu loads on use (D-148). If its code cannot load, plain
+// buttons still offer the choice within the Undo window. Synthetic labels only.
+vi.mock("@/components/wf/toast-choices", () => {
+  throw new Error("Chunk failed to load");
+});
+
+import { ToastView } from "@/components/wf/toast";
+
+describe("toast choices without the menu's code", () => {
+  it("offers the choices as plain buttons, which chooses and closes the toast", async () => {
+    const onChoose = vi.fn();
+    const onClose = vi.fn();
+    render(
+      <ToastView
+        title="Bed 4 closed."
+        choices={{
+          label: "Add a reason",
+          items: [
+            { id: "staffing", label: "Staffing" },
+            { id: "maintenance", label: "Maintenance" },
+          ],
+          onChoose,
+        }}
+        onClose={onClose}
+      />,
+    );
+    // The menu's import has failed, and React has settled on the fallback the failed import gives,
+    // not the Suspense fallback shown while it is pending.
+    await expect(import("@/components/wf/toast-choices")).rejects.toThrow();
+    await act(async () => {
+      await new Promise((resolve) => setTimeout(resolve, 0));
+    });
+    const group = await screen.findByRole("group", { name: "Add a reason" });
+    fireEvent.click(within(group).getByRole("button", { name: "Staffing" }));
+    expect(onChoose).toHaveBeenCalledWith("staffing");
+    expect(onClose).toHaveBeenCalledTimes(1);
+  });
+});