Record requests

Identifier of a known facility (site), such as `site.id` from a visit browse row. The preferred way to identify the facility: Hermes already holds its address and submission preferences. When absent, `siteName` is required and the facility is resolved from the facility fields.

Request records straight out of the site's EHR through its vendor API. Satisfied by a general (patient-level) authorization rather than a site-specific one, and delivered as a C-CDA. Like the other type flags this mints its OWN record request: `medicalRecord + ehr` creates two, grouped under one order number with `-m` / `-e` suffixes. Defaults to `false` when omitted: EHR is an opt-in capability, so an absent flag means "not requested" rather than forcing every caller to send `"ccda": false`.

Facility name, used to identify the facility when `siteId` is absent; required in that case. Send it with `siteAddressLine1`, `siteAddressLine2` (optional), `siteCity`, `siteState` and `siteZip` so Hermes can resolve the facility.

Free text. Surrounding whitespace is trimmed, and an empty or whitespace-only value is rejected.

Primary delivery line (street number + street, or PO Box line). For Puerto Rico addresses with an urbanization, put `URB <name>` on this line. Leave `siteAddressLine2` for suite / unit / apartment.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Optional secondary designator (suite, unit, apartment, floor). A blank, whitespace-only or punctuation-only value becomes `null` instead of being rejected.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

**Backward compatibility only.** Retained so existing external integrations that send a single `siteAddress` string keep working. New integrations should send `siteAddressLine1` / `siteAddressLine2` instead — if either of those is provided, this field is ignored. You *may* pack an entire address into `siteAddressLine1` and we will attempt to resolve it, but resolution will be less accurate than a properly structured two-line address. Puerto Rico urbanization in particular is not reliably parseable from a single line.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Facility city, used with `siteName` when `siteId` is absent. It is checked by the same rules as an address line, not against a list of known cities.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Facility state, used with `siteName` when `siteId` is absent.

A US state, district or territory: its two-letter USPS code, or its full name in any letter case. Washington DC, Washington D.C., US Virgin Islands, U.S. Virgin Islands, United States Virgin Islands and Virgin Islands are also accepted. Surrounding whitespace is trimmed, and any other value is rejected. Returned as the uppercase code.

Facility ZIP code, used with `siteName` when `siteId` is absent.

A US ZIP code: five digits, or ZIP+4 as NNNNN-NNNN. A ZIP+4 without its hyphen is accepted, and a base shorter than five digits is left-padded with zeroes. Surrounding whitespace is trimmed, and the value is always returned as NNNNN or NNNNN-NNNN. Anything else is rejected.

Free-text note of the route by which records for this request are received. No fixed value list. Null when none has been recorded.

Date (YYYY-MM-DD) the request is next due for follow-up with the facility. Null when no follow-up is scheduled.

Date (YYYY-MM-DD) of the most recent contact with the facility about this request. Null when no contact has been recorded.

Date (YYYY-MM-DD) the request was closed out. Set automatically to the current US Pacific date when the request first moves to a closing status such as `Completed`, `NoRecordFound` or `Canceled` and no date is recorded yet; it can also be set or cleared directly. Null when no completion date has been recorded.

Identifier of the facility (site) the request is addressed to. Null when the request was submitted with facility details only and has not yet been matched to a known site.

Facility name as submitted with the request. When the request was created from `siteId` alone, filled from that site's name as it read at creation. Null when neither is available.

First street-address line of the facility as submitted with the request (street number and street, or PO Box). Null when not supplied.

Second street-address line of the facility as submitted with the request (suite, unit or floor). Null when not supplied.

Legacy single-line address. Readers should prefer `submittedSiteAddressLine1` / `submittedSiteAddressLine2` when either is set; this field is retained for existing rows that predate the structured address-line fields and for the `siteAddress` backward-compat surface on `POST /record-requests`.

Facility city as submitted with the request. Null when not supplied.

Facility state as submitted with the request, normally a two-letter US state code. Null when not supplied.

Facility ZIP code as submitted with the request. Treat as text, not a number. Null when not supplied.

Identifier of the user the request is assigned to. Null when the request is unassigned.

Eight-character code printed on the request's provider packet. A facility submits it to the upload-by-code endpoint to return records to this request. Null until a provider packet has been generated.

Dates of service the request is asking for. Required for new requests.

Last date (YYYY-MM-DD) of the service-date window the request asks for; with `startDateOfService` it bounds the visits whose records are requested. Null only on requests created before dates of service were required.

The user the request is assigned to. Null when the request is unassigned.

The facility (site) the request is addressed to. Null when the request has not been matched to a known site.

The facility's department that handles medical-record requests. Null when the request has no site or the site has no such department.

The facility's department that handles facility billing requests. Null when the request has no site or the site has no such department.

The facility's department that handles physician billing requests. Null when the request has no site or the site has no such department.

The facility's department that handles imaging billing requests. Null when the request has no site or the site has no such department.

The facility's department that handles emergency room billing requests. Null when the request has no site or the site has no such department.

The facility's department that handles anesthesiology billing requests. Null when the request has no site or the site has no such department.

The facility's department that handles imaging requests. Null when the request has no site or the site has no such department.

Short-lived presigned URL to download the file. Null when no file is stored yet, or when this response only offers an upload.

Short-lived presigned URL to upload the file: `PUT` the raw bytes to it exactly as issued, with no `Authorization` header. Uploading again replaces the file. Null when this response only offers a download.

The document's extraction (form data under `data`, plus text and page count). Null for non-auth-check files.

The auth-check verdicts derived from `extraction`. Null for non-auth-check files or when the document hasn't been analyzed.

Tally of `verdicts` by status, a readability convenience for API consumers. Null exactly when `verdicts` is null.

Standalone auth-check embed token, pre-minted on the upload path when the caller supplies patient context alongside the request for an upload URL. Equivalent to the token from `POST /v0/auth-check/<filename>/embed-token`, saving that round-trip. Null when no patient context was supplied.

Who or what placed this file. Absent when no attribution was recorded or when this endpoint does not report it.

Short-lived presigned URL to download the file. Null when no file is stored yet, or when this response only offers an upload.

Short-lived presigned URL to upload the file: `PUT` the raw bytes to it exactly as issued, with no `Authorization` header. Uploading again replaces the file. Null when this response only offers a download.

The document's extraction (form data under `data`, plus text and page count). Null for non-auth-check files.

The auth-check verdicts derived from `extraction`. Null for non-auth-check files or when the document hasn't been analyzed.

Tally of `verdicts` by status, a readability convenience for API consumers. Null exactly when `verdicts` is null.

Standalone auth-check embed token, pre-minted on the upload path when the caller supplies patient context alongside the request for an upload URL. Equivalent to the token from `POST /v0/auth-check/<filename>/embed-token`, saving that round-trip. Null when no patient context was supplied.

Who or what placed this file. Absent when no attribution was recorded or when this endpoint does not report it.

The display folder this file sits in, `/`-joined, relative to the listing root. Populated only where a listing presents a tree — a record request's deliverables — and omitted from the payload otherwise.

Who or what placed this file. Absent for older files recorded without attribution.

Short-lived presigned URL to download the file. Null when no file is stored yet, or when this response only offers an upload.

Short-lived presigned URL to upload the file: `PUT` the raw bytes to it exactly as issued, with no `Authorization` header. Uploading again replaces the file. Null when this response only offers a download.

The document's extraction (form data under `data`, plus text and page count). Null for non-auth-check files.

The auth-check verdicts derived from `extraction`. Null for non-auth-check files or when the document hasn't been analyzed.

Tally of `verdicts` by status, a readability convenience for API consumers. Null exactly when `verdicts` is null.

Standalone auth-check embed token, pre-minted on the upload path when the caller supplies patient context alongside the request for an upload URL. Equivalent to the token from `POST /v0/auth-check/<filename>/embed-token`, saving that round-trip. Null when no patient context was supplied.

Who or what placed this file. Absent when no attribution was recorded or when this endpoint does not report it.

Short-lived presigned URL to download the file. Null when no file is stored yet, or when this response only offers an upload.

Short-lived presigned URL to upload the file: `PUT` the raw bytes to it exactly as issued, with no `Authorization` header. Uploading again replaces the file. Null when this response only offers a download.

The document's extraction (form data under `data`, plus text and page count). Null for non-auth-check files.

The auth-check verdicts derived from `extraction`. Null for non-auth-check files or when the document hasn't been analyzed.

Tally of `verdicts` by status, a readability convenience for API consumers. Null exactly when `verdicts` is null.

Standalone auth-check embed token, pre-minted on the upload path when the caller supplies patient context alongside the request for an upload URL. Equivalent to the token from `POST /v0/auth-check/<filename>/embed-token`, saving that round-trip. Null when no patient context was supplied.

Who or what placed this file. Absent when no attribution was recorded or when this endpoint does not report it.

Short-lived presigned URL to download the file. Null when no file is stored yet, or when this response only offers an upload.

Short-lived presigned URL to upload the file: `PUT` the raw bytes to it exactly as issued, with no `Authorization` header. Uploading again replaces the file. Null when this response only offers a download.

The document's extraction (form data under `data`, plus text and page count). Null for non-auth-check files.

The auth-check verdicts derived from `extraction`. Null for non-auth-check files or when the document hasn't been analyzed.

Tally of `verdicts` by status, a readability convenience for API consumers. Null exactly when `verdicts` is null.

Standalone auth-check embed token, pre-minted on the upload path when the caller supplies patient context alongside the request for an upload URL. Equivalent to the token from `POST /v0/auth-check/<filename>/embed-token`, saving that round-trip. Null when no patient context was supplied.

Who or what placed this file. Absent when no attribution was recorded or when this endpoint does not report it.

When the note was last edited. Null when it has never been edited.

Identifier the channel assigned to this activity, such as a fax job number, an email message id or a reference number. Format depends on the channel. Null when the channel issued none.

Current delivery status reported by the channel, looked up when the request is read. Its shape depends on the channel. Null when the channel reports no status or the status could not be retrieved.

Default delivery method to use when the user hasn't picked an override. Computed from the department and site. Null when no method can be recommended.

Pre-minted embed token for iframing a read-only auth-check view. Pass the token to `GET /ui/auth-check/embed?token=...` to render the analysis UI inside your own page without proxying the raw analysis schema. Null when the authorization PDF has not yet been uploaded. Expiry is one hour from fetch time — re-fetch the record request for a fresh token. See [Embedding the auth-check UI](#embedding-the-auth-check-ui).

Identifier of a known facility (site), such as `site.id` from a visit browse row. The preferred way to identify the facility: Hermes already holds its address and submission preferences. When absent, `siteName` is required and the facility is resolved from the facility fields.

Request records straight out of the site's EHR through its vendor API. Satisfied by a general (patient-level) authorization rather than a site-specific one, and delivered as a C-CDA. Like the other type flags this mints its OWN record request: `medicalRecord + ehr` creates two, grouped under one order number with `-m` / `-e` suffixes. Defaults to `false` when omitted: EHR is an opt-in capability, so an absent flag means "not requested" rather than forcing every caller to send `"ccda": false`.

Facility name, used to identify the facility when `siteId` is absent; required in that case. Send it with `siteAddressLine1`, `siteAddressLine2` (optional), `siteCity`, `siteState` and `siteZip` so Hermes can resolve the facility.

Free text. Surrounding whitespace is trimmed, and an empty or whitespace-only value is rejected.

Primary delivery line (street number + street, or PO Box line). For Puerto Rico addresses with an urbanization, put `URB <name>` on this line. Leave `siteAddressLine2` for suite / unit / apartment.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Optional secondary designator (suite, unit, apartment, floor). A blank, whitespace-only or punctuation-only value becomes `null` instead of being rejected.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

**Backward compatibility only.** Retained so existing external integrations that send a single `siteAddress` string keep working. New integrations should send `siteAddressLine1` / `siteAddressLine2` instead — if either of those is provided, this field is ignored. You *may* pack an entire address into `siteAddressLine1` and we will attempt to resolve it, but resolution will be less accurate than a properly structured two-line address. Puerto Rico urbanization in particular is not reliably parseable from a single line.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Facility city, used with `siteName` when `siteId` is absent. It is checked by the same rules as an address line, not against a list of known cities.

One line of a street address. Surrounding whitespace is trimmed, and it must contain at least one letter or digit: an empty, whitespace-only or punctuation-only value is rejected.

Facility state, used with `siteName` when `siteId` is absent.

A US state, district or territory: its two-letter USPS code, or its full name in any letter case. Washington DC, Washington D.C., US Virgin Islands, U.S. Virgin Islands, United States Virgin Islands and Virgin Islands are also accepted. Surrounding whitespace is trimmed, and any other value is rejected. Returned as the uppercase code.

Facility ZIP code, used with `siteName` when `siteId` is absent.

A US ZIP code: five digits, or ZIP+4 as NNNNN-NNNN. A ZIP+4 without its hyphen is accepted, and a base shorter than five digits is left-padded with zeroes. Surrounding whitespace is trimmed, and the value is always returned as NNNNN or NNNNN-NNNN. Anything else is rejected.

Which of the request's columns to return.

Identifier of the record request within its customer, project, and patient scope.

Current record-request workflow status. See the Reading guide for the exported status tokens.

Category of records requested. See the Reading guide for the exported request-type tokens.

Stored route used for receiving records. Source-defined text; no fixed value list is enforced by this field.

Site name supplied when the request was submitted. May differ from site.name.

First street-address line supplied with the record request.

Second street-address line supplied with the record request.

Combined address text supplied with the record request.

City supplied with the record request site address.

State or region supplied with the record request site address.

Postal code supplied with the record request site address. Preserve as text.

Scheduled follow-up date for the record request.

Most recent contact date recorded for the request.

Completion date recorded for the request, when available.

Timestamp when the record request was created.

Timestamp of the most recent recorded update to the request.

Code associated with the request for secure record uploads. Treat as a sensitive workflow value.

Beginning of the service-date period requested. Not necessarily a date on which care occurred.

End of the service-date period requested. Not necessarily a date on which care occurred.

Short reference number assigned when the request was created, zero-padded to four digits, such as 0042. Requests created together share one number and carry a type suffix: -m medical records, -b billing, -i imaging, -c C-CDA. Numbers are reused some time after a request ends, so use the request id as the lasting identifier. Null for sandbox requests.

Identifier of the customer organization associated with the record.

Identifier of the project containing the record.

Identifier of the patient. Join to Patients patient.id using the same companyId and projectId.

Identifier of the resolved site associated with the request. The Sites sheet only lists visit-linked sites and may not contain this site.

Identifier of the user assigned to the record request.

Identifier of the user who created the record request.

Time-limited link to download the request's provider packet, the document package sent to the facility. Null when no packet has been generated.

Time-limited link to download the facility's fee document for releasing the records. Null when none has been uploaded.

Time-limited link to download the patient's authorization on file, the one shared by all of the patient's requests. Null when none has been uploaded.

Time-limited link to download the authorization that applies to this request alone, which takes the place of the patient's authorization. Null when the request has no authorization of its own.

Time-limited link to download the combined chart PDF generated from the records returned for the request. Null when none has been published.

Number of files received for the request, loaded when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export, where it is not the actual number of received files.

Path of the AI chat over the request's combined chart, ending in /deliverable/chat. Present once the combined chart has been analyzed and chat over it is available; null otherwise.

Relative application path to this record. Requires the application host and appropriate access to open.

Age of the request in days since it was created, computed when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export; derive elapsed age from createdAt there.

Bucketed `current_age_days` (`critical`/`high`/`medium`/`normal`).

Number of submissions recorded for the request, computed when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export, where it is not the actual submission count.

Presence marker for outbound submissions. Null when the request has no outbound submissions and present when it has at least one, so filter on null / not null to find requests without or with submissions.

Coarse status grouping, populated from `status.category()` so the Status Category card can `in`-filter without expanding to statuses.

Customer-facing EHR retrieval outcome, the same decision the activity table and sidebar chip share. Gated — resolving it reads the routed department and the patient's enrollment.

Worst auth-check tally (`Passed` / `Warning` / `Failed`), populated from the scored sidecar so the Auth Check card can `in`-filter. Gated — scoring the sidecar is the same S3 work as the `authCheck` slot, so it only runs when this field or the slot is referenced.

Release-of-information vendor resolved from the request type and routed department. Blank for C-CDA requests.

Electronic health record vendor resolved from the request type and routed department, when available.

Sum of non-canceled fees associated with this record request. Monetary amount; the field does not carry a currency code.

Which of the joined company's columns to return. Absent when the row has no company.

Which of the joined project's columns to return. Absent when the row has no project.

Which of the joined patient's columns to return. Absent when the row has no patient.

Which of the joined site's columns to return. Absent when the row has no site.

Which of the joined owner's columns to return. Absent when the row has no owner.

Which of the joined user's columns to return. Absent when the row has no user.

Which of the auth check's columns to return. Absent when the row has no auth check.

The number of authorization checks that passed.

The number of authorization checks that raised a warning.

The number of authorization checks that failed.

Relative embed URL (`/ui/auth-check/embed?token=...`) ready to drop straight into an iframe `src`. Read-only, token-authed; meant for external API consumers who iframe the view from their own sites.

Relative interactive URL (`/ui/companies/<company_id>/projects/<project_id>/patients/<patient_id>/auth-check`) for the signed-in auth-check view with audit and correction tools. Absent unless the caller is permitted to audit auth-checks; use `embedUrl` otherwise.

`true` when the audit has been marked complete, `false` when not yet. Absent unless the caller is permitted to audit auth-checks.

USD cost of the LLM tokens spent producing the extraction. Absent unless the caller is permitted to view token costs, or when no cost was recorded.

Kinds of supporting documents attached to the authorization, from the effective (override-applied) extraction. VOID documents are included — presence is about what accompanies the form — with the void subset flagged in `void_documents`.

The subset of `additional_documents` marked VOID / CANCELLED / REVOKED. Rides the selected row so cells can flag void badges, but is neither filterable nor sortable — filter on `additional_documents`.

Filters on the request's columns.

Identifier of the record request within its customer, project, and patient scope.

Current record-request workflow status. See the Reading guide for the exported status tokens.

Category of records requested. See the Reading guide for the exported request-type tokens.

Stored route used for receiving records. Source-defined text; no fixed value list is enforced by this field.

Site name supplied when the request was submitted. May differ from site.name.

First street-address line supplied with the record request.

Second street-address line supplied with the record request.

Combined address text supplied with the record request.

City supplied with the record request site address.

State or region supplied with the record request site address.

Postal code supplied with the record request site address. Preserve as text.

Scheduled follow-up date for the record request.

Most recent contact date recorded for the request.

Completion date recorded for the request, when available.

Timestamp when the record request was created.

Timestamp of the most recent recorded update to the request.

Code associated with the request for secure record uploads. Treat as a sensitive workflow value.

Beginning of the service-date period requested. Not necessarily a date on which care occurred.

End of the service-date period requested. Not necessarily a date on which care occurred.

Short reference number assigned when the request was created, zero-padded to four digits, such as 0042. Requests created together share one number and carry a type suffix: -m medical records, -b billing, -i imaging, -c C-CDA. Numbers are reused some time after a request ends, so use the request id as the lasting identifier. Null for sandbox requests.

Identifier of the customer organization associated with the record.

Identifier of the project containing the record.

Identifier of the patient. Join to Patients patient.id using the same companyId and projectId.

Identifier of the resolved site associated with the request. The Sites sheet only lists visit-linked sites and may not contain this site.

Identifier of the user assigned to the record request.

Identifier of the user who created the record request.

Time-limited link to download the request's provider packet, the document package sent to the facility. Null when no packet has been generated.

Time-limited link to download the facility's fee document for releasing the records. Null when none has been uploaded.

Time-limited link to download the patient's authorization on file, the one shared by all of the patient's requests. Null when none has been uploaded.

Time-limited link to download the authorization that applies to this request alone, which takes the place of the patient's authorization. Null when the request has no authorization of its own.

Time-limited link to download the combined chart PDF generated from the records returned for the request. Null when none has been published.

Number of files received for the request, loaded when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export, where it is not the actual number of received files.

Path of the AI chat over the request's combined chart, ending in /deliverable/chat. Present once the combined chart has been analyzed and chat over it is available; null otherwise.

Age of the request in days since it was created, computed when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export; derive elapsed age from createdAt there.

Bucketed `current_age_days` (`critical`/`high`/`medium`/`normal`).

Number of submissions recorded for the request, computed when the live request table enriches the row. Zero when no enrichment ran, as in the Master Export, where it is not the actual submission count.

Presence marker for outbound submissions. Null when the request has no outbound submissions and present when it has at least one, so filter on null / not null to find requests without or with submissions.

Coarse status grouping, populated from `status.category()` so the Status Category card can `in`-filter without expanding to statuses.

Customer-facing EHR retrieval outcome, the same decision the activity table and sidebar chip share. Gated — resolving it reads the routed department and the patient's enrollment.

Worst auth-check tally (`Passed` / `Warning` / `Failed`), populated from the scored sidecar so the Auth Check card can `in`-filter. Gated — scoring the sidecar is the same S3 work as the `authCheck` slot, so it only runs when this field or the slot is referenced.

Release-of-information vendor resolved from the request type and routed department. Blank for C-CDA requests.

Electronic health record vendor resolved from the request type and routed department, when available.

Sum of non-canceled fees associated with this record request. Monetary amount; the field does not carry a currency code.

Filters on the joined company's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a company.

Filters on the joined project's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a project.

Filters on the joined patient's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a patient.

Filters on the joined site's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a site.

Filters on the joined owner's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a owner.

Filters on the joined user's columns. `isNull` or `isNotNull` in place of the filters matches the rows without or with a user.

Filters on the auth check's columns. A row with no auth check matches none of these filters.

The number of authorization checks that passed.

The number of authorization checks that raised a warning.

The number of authorization checks that failed.

Relative embed URL (`/ui/auth-check/embed?token=...`) ready to drop straight into an iframe `src`. Read-only, token-authed; meant for external API consumers who iframe the view from their own sites.

Relative interactive URL (`/ui/companies/<company_id>/projects/<project_id>/patients/<patient_id>/auth-check`) for the signed-in auth-check view with audit and correction tools. Absent unless the caller is permitted to audit auth-checks; use `embedUrl` otherwise.

`true` when the audit has been marked complete, `false` when not yet. Absent unless the caller is permitted to audit auth-checks.

USD cost of the LLM tokens spent producing the extraction. Absent unless the caller is permitted to view token costs, or when no cost was recorded.

Kinds of supporting documents attached to the authorization, from the effective (override-applied) extraction. VOID documents are included — presence is about what accompanies the form — with the void subset flagged in `void_documents`.

When true, return the number of rows that match the filter.

Numeric columns to total across the rows that match the filter.

Numeric columns to average across the rows that match the filter.

Numeric columns to find the smallest value of across the rows that match the filter.

Numeric columns to find the largest value of across the rows that match the filter.

When true, return the number of rows that match the filter.

Numeric columns to total across the rows that match the filter.

Numeric columns to average across the rows that match the filter.

Numeric columns to find the smallest value of across the rows that match the filter.

Numeric columns to find the largest value of across the rows that match the filter.

The request's columns, as selected by the request.

The joined company's columns, as selected by the request. Absent when the row has no company.

The joined project's columns, as selected by the request. Absent when the row has no project.

The joined patient's columns, as selected by the request. Absent when the row has no patient.

The joined site's columns, as selected by the request. Absent when the row has no site.

The joined owner's columns, as selected by the request. Absent when the row has no owner.

The joined user's columns, as selected by the request. Absent when the row has no user.

The auth check's columns, as selected by the request. Absent when the row has no auth check.

The number of authorization checks that passed.

The number of authorization checks that raised a warning.

The number of authorization checks that failed.

Relative embed URL (`/ui/auth-check/embed?token=...`) ready to drop straight into an iframe `src`. Read-only, token-authed; meant for external API consumers who iframe the view from their own sites.

Relative interactive URL (`/ui/companies/<company_id>/projects/<project_id>/patients/<patient_id>/auth-check`) for the signed-in auth-check view with audit and correction tools. Absent unless the caller is permitted to audit auth-checks; use `embedUrl` otherwise.

`true` when the audit has been marked complete, `false` when not yet. Absent unless the caller is permitted to audit auth-checks.

USD cost of the LLM tokens spent producing the extraction. Absent unless the caller is permitted to view token costs, or when no cost was recorded.

Kinds of supporting documents attached to the authorization, from the effective (override-applied) extraction. VOID documents are included — presence is about what accompanies the form — with the void subset flagged in `void_documents`.

The subset of `additional_documents` marked VOID / CANCELLED / REVOKED. Rides the selected row so cells can flag void badges, but is neither filterable nor sortable — filter on `additional_documents`.

Number of rows that match the filter. Present when `count` was requested.

Total of each requested numeric column across the rows that match the filter.

Average of each requested numeric column across the rows that match the filter.

Smallest value of each requested numeric column across the rows that match the filter.

Largest value of each requested numeric column across the rows that match the filter.

Number of rows that match the filter. Present when `count` was requested.

Total of each requested numeric column across the rows that match the filter.

Average of each requested numeric column across the rows that match the filter.

Smallest value of each requested numeric column across the rows that match the filter.

Largest value of each requested numeric column across the rows that match the filter.