SUPERSEDED by POST /api/config, which takes the same config plus a metadataFilter selector, a resolvedAt staleness fence and explicit deleteCodes. This route stays for existing callers and gains nothing further.
Applies the same triggers, metadata and flags to every id named.
An id that resolves to no patient is reported in misses[] and as a row with found: false; it does not fail the request. A bulk write half-failing on one bad id would leave the caller unable to tell which half landed.
Every trigger in the payload is validated BEFORE anything is written, so a malformed rule is a 400 that changed nothing rather than a partial write across an arbitrary prefix of the list.
metadata is MERGED into each patient, never replaced — a push that omits project does not clear the stamp that scopes the patient to its facility.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
A trigger failed validation, or its algorithm binding is not satisfiable.
Missing, malformed or unrecognised Basic credentials.
Authenticated, but the client's role does not permit this, or it is not attached to the patient.