Intra-op Edit Plan — Vitals · Events

✅ What EXISTS live

Backend API (aims-api), role-gated SuperAdmin / Anesthesiologist
Vitals → PATCH (audited)
Events → PUT + PATCH + DELETE (soft)
Meds → PUT + PATCH + DELETE (soft)
Immutable amendment log — every PATCH writes who / field / old→new / reason
FlowEditDialog (frontend) — edits V/E/M via PATCH, soft-deletes E/M

Reachable only by tapping a point in graph mode (flow-chronicle) → opens the dialog.

🚫 The GAP what's missing

Default canvas view — tapping a charted point only scrubs the line. No edit / no select.
Vitals have no DELETE — table is amend-only by design (no deleted_at)
Two edit generations: dead PUT popover (#1934, unaudited, orphaned) vs live PATCH dialog (#2878, audited)
Realtime: edit reconciles by local re-GET; no push to other open clients
No “this row was edited” badge / amendment history surfaced in UI

🧭 Surfaces in play

canvas (default) — DirectChartCanvas → worktop. scrub only
graph — flow-chronicle. edit lives here today
grid — timeline-grid (legacy table)

Live readings (SignalR ~15s) are ephemeral — no id until the clinician commits a row. Edit only ever touches persisted rows. Device/HL7 vitals stay immutable (manual-override row instead).

① Expose & wire

Tier 2 · frontend-only · no schema change · the fast win

Add tap / long-press → select → edit on the canvas worktop for V / E / M
Route it to the existing FlowEditDialog (PATCH, already audited)
Add a compact timeline list as a second entry point (scan + edit)
Re-GET via existing refreshVitals/Events/Medications

② Close gaps / harden

Tier 3 if it touches schema/audit · domain review

Vitals delete policy → if “delete erroneous manual only”: deleted_at migration + DELETE endpoint + amendment row
Standardize on PATCH; delete the orphaned PUT popover + handleVitalsEvent dead code
Surface “edited ✎” badge + amendment history (read API already exists)

③ Polish

Optional · post-pilot

Push edits/deletes over SignalR so peers reconcile live (not just local re-GET)
“Reason for change” prompt UX + amendment viewer drawer
Retire dead intraop-phase/** tree

🟡 Open decisions — point & tell me

① Edit UX shape? Tap-on-canvas, a list/table editor, or both?

rec: tap-on-canvas + a small timeline list

② Vitals: delete or amend-only? Add soft-delete, or keep vitals amend-only?

rec: amend-only (matches design; a reading is an observation) — delete only for erroneous manual entries if needed

③ Scope right now? Just expose existing (Phase 1), or also harden (Phase 2)?

rec: Phase 1 ships value fast; Phase 2 next

④ Who can edit? Keep SuperAdmin / Anesthesiologist only?

rec: yes — broader access waits for the RBAC initiative

🛡 Guardrails (non-negotiable)

Audit is the law. Every edit = an immutable amendment row (who / field / old→new / reason). Use PATCH, never the unaudited PUT.
Device / HL7 vitals immutable → 422; clinician adds a manual override row instead of overwriting.
No signing-lock today, but if a “sign anesthesia record” lock lands later, edits must respect it.
RLS / org-scoping already enforced on every table — don't bypass.

Intra-op Edit · Vitals · Events · Meds