From ec2c8a9e71222ccaeab3988450ed54040ba10b2f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc-Andr=C3=A9=20Bombeck?= <mbombeck@gmail.com>
Date: Thu, 30 Jul 2026 19:53:00 +0200
Subject: [PATCH] docs(openapi): publish documentOnly on share-link create and
 list

The field has been served on both routes since v1.28.13 but was
missing from ShareLinkCreated and ShareLinkList, which are
additionalProperties: false.
---
 docs/api/openapi.yaml                   | 6 ++++++
 src/lib/openapi/routes/health-record.ts | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git a/docs/api/openapi.yaml b/docs/api/openapi.yaml
index f976e4b34..9e7b33d60 100644
--- a/docs/api/openapi.yaml
+++ b/docs/api/openapi.yaml
@@ -16160,6 +16160,8 @@ components:
               type: boolean
             documentCount:
               type: number
+            documentOnly:
+              type: boolean
             needsReselection:
               type: boolean
             allowFhirApi:
@@ -16204,6 +16206,7 @@ components:
             - rangeEnd
             - protected
             - documentCount
+            - documentOnly
             - needsReselection
             - allowFhirApi
             - resourceTypes
@@ -16255,6 +16258,8 @@ components:
                     type: boolean
                   documentCount:
                     type: number
+                  documentOnly:
+                    type: boolean
                   needsReselection:
                     type: boolean
                   allowFhirApi:
@@ -16286,6 +16291,7 @@ components:
                   - rangeEnd
                   - protected
                   - documentCount
+                  - documentOnly
                   - needsReselection
                   - allowFhirApi
                   - resourceTypes
diff --git a/src/lib/openapi/routes/health-record.ts b/src/lib/openapi/routes/health-record.ts
index 8877c3fd9..6d60b96dc 100644
--- a/src/lib/openapi/routes/health-record.ts
+++ b/src/lib/openapi/routes/health-record.ts
@@ -26,6 +26,12 @@ const shareLinkSummary = z.object({
   // v1.28 — how many documents this share carries. Never the ids, never the
   // bytes; the share serve route is the only decrypt path.
   documentCount: z.number(),
+  // v1.28.13 — the frozen documents-only flag, written once at creation and
+  // never updated. True means the link carries NO report scope at all (the
+  // create route forces `selection` empty server-side even if the body sent
+  // one) and the share view renders only the frozen document set, never a
+  // health-record section.
+  documentOnly: z.boolean(),
   // Whether this link's frozen scope predates the selection model. Every such
   // link was revoked on upgrade; the sharing list surfaces this so the owner
   // knows to re-mint rather than wondering why a working link stopped.