# POST /v2/layout/list/pdf

PDF-Layout anlegen

Erstellt ein wiederverwendbares PDF-Layout. name, file_name, orientation und html sind erforderlich; orientation wird auf portrait oder landscape normalisiert. HTML und Dateiname können die über placeholders angebotenen Platzhalter verwenden. Seitenränder sind optional. data kann ein Objekt oder ein Array mit bis zu 100 Layouts enthalten.

- Operation-ID: post_v2_layout_list_pdf
- Dokumentation: /docs/api/v2/operations/post-v2-layout-list-pdf-978cfb8b54ef/
- OpenAPI-Version: 3.2.1
- Vollständige Spezifikation: /docs/api/v2/openapi.json
- Dokumentationsstatus: reviewed
- Ändert Zustand: ja
- Für Automation freigegeben: nein

## Server

Serverwerte stammen unverändert aus der Datei. Eine lokale Entwicklungsadresse ist keine bestätigte Produktionsadresse. `API_ORIGIN` muss auf die passende Instanz gesetzt werden.

```json
[
  {
    "url": "https://app2.edoobox.com",
    "description": "edoobox API"
  }
]
```

## Authentifizierung

Eine der folgenden Alternativen genügt (ODER). Innerhalb einer Alternative müssen alle Verfahren gemeinsam erfüllt sein (UND).

1. **bearerAuth** (HTTP bearer) — Existing edoobox v2 access token. Never substitute API key/secret headers. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.
2. **sessionCookie** (cookie: _edlogin) — Existing browser login session, with the same permission checks as Bearer authentication. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.

### Wirksame Security Requirements und vollständige Verfahren

```json
{
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "securitySchemes": {
    "bearerAuth": {
      "type": "http",
      "scheme": "bearer",
      "bearerFormat": "JWT",
      "description": "Existing edoobox v2 access token. Never substitute API key/secret headers."
    },
    "accountContext": {
      "type": "apiKey",
      "in": "header",
      "name": "edid",
      "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
    },
    "sessionCookie": {
      "type": "apiKey",
      "in": "cookie",
      "name": "_edlogin",
      "description": "Existing browser login session, with the same permission checks as Bearer authentication."
    }
  }
}
```

## Parameter

| Name | Ort | Pflicht | Beschreibung |
| --- | --- | --- | --- |
| X-Edoobox-If-Revision | header | nein | Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review. |

### Vollständige wirksame Parameterdefinitionen

```json
[
  {
    "name": "X-Edoobox-If-Revision",
    "in": "header",
    "required": false,
    "schema": {
      "type": "string",
      "pattern": "^[a-f0-9]{32}$",
      "examples": [
        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      ]
    },
    "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
  }
]
```

## Anfrage

```json
{
  "required": true,
  "content": {
    "application/json": {
      "schema": {
        "type": "object",
        "required": [
          "data"
        ],
        "properties": {
          "data": {
            "anyOf": [
              {
                "type": "object",
                "properties": {
                  "id": false,
                  "status": {
                    "x-edoobox-schemaStatus": "source-inferred",
                    "x-edoobox-sourceLine": 64,
                    "x-edoobox-canonicalType": "boolean",
                    "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                    "examples": [
                      false
                    ]
                  },
                  "name": {
                    "x-edoobox-canonicalType": "string",
                    "x-edoobox-maxStoredLength": 150,
                    "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                    "examples": [
                      "Example"
                    ],
                    "x-edoobox-requiredOnCreate": true,
                    "x-edoobox-sourceLine": 74,
                    "description": "Internal PDF layout name; required on create."
                  },
                  "file_name": {
                    "x-edoobox-canonicalType": "string",
                    "x-edoobox-maxStoredLength": 250,
                    "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                    "examples": [
                      "Example"
                    ],
                    "x-edoobox-requiredOnCreate": true,
                    "x-edoobox-sourceLine": 88,
                    "description": "Download filename template; may contain the account's supported PDF placeholders."
                  },
                  "orientation": {
                    "x-edoobox-knownInputs": [
                      "portrait",
                      "landscape"
                    ],
                    "x-edoobox-normalization": "Switch default normalizes other input values; case labels are not an exhaustive accepted-input enum.",
                    "examples": [
                      "portrait"
                    ],
                    "x-edoobox-requiredOnCreate": true,
                    "x-edoobox-sourceLine": 102,
                    "description": "portrait or landscape is canonical; the getter normalizes other values to portrait."
                  },
                  "page_first_margin": {
                    "x-edoobox-schemaStatus": "source-reviewed-normalization",
                    "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                    "examples": [
                      {
                        "top": 16,
                        "right": 15,
                        "bottom": 16,
                        "left": 15
                      }
                    ],
                    "x-edoobox-sourceLine": 130
                  },
                  "page_next_margin": {
                    "x-edoobox-schemaStatus": "source-reviewed-normalization",
                    "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                    "examples": [
                      {
                        "top": 16,
                        "right": 15,
                        "bottom": 16,
                        "left": 15
                      }
                    ],
                    "x-edoobox-sourceLine": 156
                  },
                  "html": {
                    "x-edoobox-canonicalType": "string",
                    "x-edoobox-maxStoredLength": 60000,
                    "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                    "examples": [
                      "Example"
                    ],
                    "x-edoobox-requiredOnCreate": true,
                    "x-edoobox-sourceLine": 183,
                    "description": "HTML template rendered with the account's supported PDF placeholders."
                  },
                  "last_change": {
                    "x-edoobox-schemaStatus": "source-inferred",
                    "x-edoobox-serverValue": "time()",
                    "description": "The getter ignores submitted input and supplies the current server timestamp. No rejecting wire-input type is asserted.",
                    "x-edoobox-writableOnUpdate": false,
                    "x-edoobox-sourceLine": 196
                  }
                },
                "additionalProperties": true,
                "description": "PDF Structure fields. Canonical orientation values normalize; stored text limits are not rejecting JSON maxLength assertions.",
                "required": [
                  "name",
                  "file_name",
                  "orientation",
                  "html"
                ]
              },
              {
                "type": "array",
                "minItems": 1,
                "maxItems": 100,
                "items": {
                  "type": "object",
                  "properties": {
                    "id": false,
                    "status": {
                      "x-edoobox-schemaStatus": "source-inferred",
                      "x-edoobox-sourceLine": 64,
                      "x-edoobox-canonicalType": "boolean",
                      "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                      "examples": [
                        false
                      ]
                    },
                    "name": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 150,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 74,
                      "description": "Internal PDF layout name; required on create."
                    },
                    "file_name": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 250,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 88,
                      "description": "Download filename template; may contain the account's supported PDF placeholders."
                    },
                    "orientation": {
                      "x-edoobox-knownInputs": [
                        "portrait",
                        "landscape"
                      ],
                      "x-edoobox-normalization": "Switch default normalizes other input values; case labels are not an exhaustive accepted-input enum.",
                      "examples": [
                        "portrait"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 102,
                      "description": "portrait or landscape is canonical; the getter normalizes other values to portrait."
                    },
                    "page_first_margin": {
                      "x-edoobox-schemaStatus": "source-reviewed-normalization",
                      "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                      "examples": [
                        {
                          "top": 16,
                          "right": 15,
                          "bottom": 16,
                          "left": 15
                        }
                      ],
                      "x-edoobox-sourceLine": 130
                    },
                    "page_next_margin": {
                      "x-edoobox-schemaStatus": "source-reviewed-normalization",
                      "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                      "examples": [
                        {
                          "top": 16,
                          "right": 15,
                          "bottom": 16,
                          "left": 15
                        }
                      ],
                      "x-edoobox-sourceLine": 156
                    },
                    "html": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 60000,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 183,
                      "description": "HTML template rendered with the account's supported PDF placeholders."
                    },
                    "last_change": {
                      "x-edoobox-schemaStatus": "source-inferred",
                      "x-edoobox-serverValue": "time()",
                      "description": "The getter ignores submitted input and supplies the current server timestamp. No rejecting wire-input type is asserted.",
                      "x-edoobox-writableOnUpdate": false,
                      "x-edoobox-sourceLine": 196
                    }
                  },
                  "additionalProperties": true,
                  "description": "PDF Structure fields. Canonical orientation values normalize; stored text limits are not rejecting JSON maxLength assertions.",
                  "required": [
                    "name",
                    "file_name",
                    "orientation",
                    "html"
                  ]
                }
              }
            ],
            "description": "Single record or native API_DATA batch (1–100 records), with the same per-record required fields."
          }
        },
        "additionalProperties": true
      },
      "examples": {
        "single": {
          "summary": "Synthetic supported request; replace all IDs with values read from this account.",
          "value": {
            "data": {
              "name": "Example layout",
              "file_name": "Example_##OfferName##",
              "orientation": "portrait",
              "html": "<p>##OfferName##</p>"
            }
          }
        },
        "batch": {
          "summary": "Synthetic supported request; replace all IDs with values read from this account.",
          "value": {
            "data": [
              {
                "name": "Example layout",
                "file_name": "Example_##OfferName##",
                "orientation": "portrait",
                "html": "<p>##OfferName##</p>"
              },
              {
                "name": "Second example",
                "file_name": "Example_##OfferName##",
                "orientation": "portrait",
                "html": "<p>##OfferName##</p>"
              }
            ]
          }
        }
      }
    }
  }
}
```

## Antworten

HTTP-Status und Antwortinhalt gemeinsam auswerten. Die folgenden Beschreibungen und Schemata sind die Angaben der Quelldatei.

```json
{
  "200": {
    "description": "data enthält insert und id; bei einem Datensatz ist id eine öffentliche v2-ID, beim Batch ein Array solcher IDs. Bei fehlgeschlagenem Transaktionsabschluss enthält data insert=false und id=null; error ist ED80100.",
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "success": {
              "type": "boolean"
            },
            "error": {
              "type": [
                "boolean",
                "string"
              ]
            },
            "error_code": {
              "type": "string"
            },
            "data": {
              "type": "object",
              "properties": {
                "insert": {
                  "type": "boolean"
                },
                "id": {
                  "oneOf": [
                    {
                      "type": "string",
                      "pattern": "^layoutpdf_[a-f0-9]{12}_-?[0-9]+$",
                      "description": "Öffentliche v2-ID aus diesem Konto; keine Datenbank-ID. Beispiel ist synthetisch.",
                      "examples": [
                        "layoutpdf_012345abcdef_123456"
                      ]
                    },
                    {
                      "type": "array",
                      "items": {
                        "type": "string",
                        "pattern": "^layoutpdf_[a-f0-9]{12}_-?[0-9]+$",
                        "description": "Öffentliche v2-ID aus diesem Konto; keine Datenbank-ID. Beispiel ist synthetisch.",
                        "examples": [
                          "layoutpdf_012345abcdef_123456"
                        ]
                      }
                    },
                    {
                      "type": "null"
                    }
                  ],
                  "description": "Bei erfolgreichem Einzelinsert öffentliche v2-ID, bei erfolgreichem Batch ein Array öffentlicher IDs; bei fehlgeschlagenem Transaktionsabschluss null zusammen mit insert=false und error=ED80100."
                }
              },
              "additionalProperties": true,
              "required": [
                "id",
                "insert"
              ]
            },
            "type": {
              "type": "string"
            }
          },
          "additionalProperties": true
        },
        "examples": {
          "created": {
            "value": {
              "error": false,
              "data": {
                "insert": true,
                "id": "layoutpdf_012345abcdef_123456"
              }
            }
          },
          "createdBatch": {
            "value": {
              "error": false,
              "data": {
                "insert": true,
                "id": [
                  "layoutpdf_012345abcdef_123456",
                  "layoutpdf_012345abcdef_123457"
                ]
              }
            }
          },
          "commitFailure": {
            "value": {
              "error": "ED80100",
              "data": {
                "insert": false,
                "id": null
              }
            }
          },
          "reviewed": {
            "value": {
              "error": false,
              "data": {
                "id": "layoutpdf_012345abcdef_123456",
                "insert": true
              }
            }
          }
        }
      }
    },
    "headers": {
      "X-Edoobox-Revision": {
        "schema": {
          "type": "string",
          "pattern": "^[a-f0-9]{32}$"
        },
        "description": "Rotated account revision supplied for the next action in one reviewed sequence."
      }
    }
  },
  "400": {
    "description": "Invalid request.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40006"
        }
      }
    }
  },
  "401": {
    "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40103"
        }
      }
    }
  },
  "402": {
    "description": "Missing/invalid action data or subscription/operation restriction.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80100"
        }
      }
    }
  },
  "403": {
    "description": "Permission denied. Browser CORS rejection may have an empty body.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40340"
        }
      }
    }
  },
  "404": {
    "description": "Unknown resource/action or unsupported method.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80019"
        }
      }
    }
  },
  "409": {
    "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED40901",
          "error_code": "mutation_revision_conflict"
        }
      }
    }
  },
  "422": {
    "description": "Validation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80020"
        }
      }
    }
  },
  "429": {
    "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED42902"
        }
      }
    },
    "headers": {
      "Retry-After": {
        "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
        "schema": {
          "type": "string",
          "examples": [
            "30"
          ]
        }
      }
    }
  },
  "502": {
    "description": "Server-side operation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED50201"
        }
      }
    }
  },
  "503": {
    "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
    "headers": {
      "Retry-After": {
        "schema": {
          "type": "integer",
          "const": 1
        }
      }
    },
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED50301",
          "error_code": "mutation_revision_busy"
        }
      }
    }
  }
}
```

## Aufrufbeispiele

Anpassen vor dem Ausführen. Platzhalter und veröffentlichte Beispiele sind synthetisch. Die Beispiele senden hier keine Anfrage; sie ergänzen keine unbekannten Pflichtfelder.

### cURL

```sh
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
: "${API_ORIGIN:?API_ORIGIN setzen}"
: "${AUTH_BEARERAUTH:?AUTH_BEARERAUTH setzen}"
: "${AUTH_ACCOUNTCONTEXT:?AUTH_ACCOUNTCONTEXT setzen}"
cat > payload.json <<'EDOOBOX_JSON_EXAMPLE'
{
  "data": {
    "name": "Example layout",
    "file_name": "Example_##OfferName##",
    "orientation": "portrait",
    "html": "<p>##OfferName##</p>"
  }
}
EDOOBOX_JSON_EXAMPLE
curl --request 'POST' \
  --url "${API_ORIGIN%/}"'/v2/layout/list/pdf' \
  --header 'Authorization: Bearer '"${AUTH_BEARERAUTH}" \
  --header 'edid: '"${AUTH_ACCOUNTCONTEXT}" \
  --header 'Content-Type: application/json' \
  --data-binary '@payload.json'
```

### JavaScript (Node.js)

```javascript
// Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
// Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
const required = (name) => {
  const value = process.env[name];
  if (!value) throw new Error(`Set ${name}`);
  return value;
};
let path = "/v2/layout/list/pdf";
const origin = required('API_ORIGIN');
const url = new URL((origin.endsWith('/') ? origin.slice(0, -1) : origin) + path);
const headers = {};
headers["Authorization"] = "Bearer " + required("AUTH_BEARERAUTH");
headers["edid"] = "" + required("AUTH_ACCOUNTCONTEXT");
headers['Content-Type'] = "application/json";
const body = JSON.stringify({
  "data": {
    "name": "Example layout",
    "file_name": "Example_##OfferName##",
    "orientation": "portrait",
    "html": "<p>##OfferName##</p>"
  }
});
const response = await fetch(url, { method: "POST", headers, body, redirect: 'manual' });
const text = await response.text();
console.log(response.status, text);
// HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

### Python

```python
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
import os
import urllib.parse
import urllib.request
import urllib.error

path = "/v2/layout/list/pdf"
url = os.environ["API_ORIGIN"].rstrip("/") + path
headers = {}
headers["Authorization"] = "Bearer " + os.environ["AUTH_BEARERAUTH"]
headers["edid"] = "" + os.environ["AUTH_ACCOUNTCONTEXT"]
headers["Content-Type"] = "application/json"
body = "{\"data\":{\"name\":\"Example layout\",\"file_name\":\"Example_##OfferName##\",\"orientation\":\"portrait\",\"html\":\"<p>##OfferName##</p>\"}}".encode("utf-8")

# Redirects nicht automatisch verfolgen.
class NoRedirect(urllib.request.HTTPRedirectHandler):
    def redirect_request(self, req, fp, code, msg, headers, newurl):
        return None
request = urllib.request.Request(url, headers=headers, method="POST", data=body)
try:
    response = urllib.request.build_opener(NoRedirect).open(request, timeout=30)
except urllib.error.HTTPError as error:
    response = error
print(response.status, response.read().decode("utf-8", errors="replace"))
# HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

## Vollständige Operationsdefinition und edoobox-Hinweise

Alle Originalfelder einschliesslich `x-edoobox-*`, requestBody und responses bleiben erhalten. Teilweise dokumentierte Schemata sind kein vollständiger Validierungsvertrag.

```json
{
  "operationId": "post_v2_layout_list_pdf",
  "summary": "PDF-Layout anlegen",
  "description": "Erstellt ein wiederverwendbares PDF-Layout. name, file_name, orientation und html sind erforderlich; orientation wird auf portrait oder landscape normalisiert. HTML und Dateiname können die über placeholders angebotenen Platzhalter verwenden. Seitenränder sind optional. data kann ein Objekt oder ein Array mit bis zu 100 Layouts enthalten.",
  "tags": [
    "layout"
  ],
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "parameters": [
    {
      "name": "X-Edoobox-If-Revision",
      "in": "header",
      "required": false,
      "schema": {
        "type": "string",
        "pattern": "^[a-f0-9]{32}$",
        "examples": [
          "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      },
      "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
    }
  ],
  "responses": {
    "200": {
      "description": "data enthält insert und id; bei einem Datensatz ist id eine öffentliche v2-ID, beim Batch ein Array solcher IDs. Bei fehlgeschlagenem Transaktionsabschluss enthält data insert=false und id=null; error ist ED80100.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "success": {
                "type": "boolean"
              },
              "error": {
                "type": [
                  "boolean",
                  "string"
                ]
              },
              "error_code": {
                "type": "string"
              },
              "data": {
                "type": "object",
                "properties": {
                  "insert": {
                    "type": "boolean"
                  },
                  "id": {
                    "oneOf": [
                      {
                        "type": "string",
                        "pattern": "^layoutpdf_[a-f0-9]{12}_-?[0-9]+$",
                        "description": "Öffentliche v2-ID aus diesem Konto; keine Datenbank-ID. Beispiel ist synthetisch.",
                        "examples": [
                          "layoutpdf_012345abcdef_123456"
                        ]
                      },
                      {
                        "type": "array",
                        "items": {
                          "type": "string",
                          "pattern": "^layoutpdf_[a-f0-9]{12}_-?[0-9]+$",
                          "description": "Öffentliche v2-ID aus diesem Konto; keine Datenbank-ID. Beispiel ist synthetisch.",
                          "examples": [
                            "layoutpdf_012345abcdef_123456"
                          ]
                        }
                      },
                      {
                        "type": "null"
                      }
                    ],
                    "description": "Bei erfolgreichem Einzelinsert öffentliche v2-ID, bei erfolgreichem Batch ein Array öffentlicher IDs; bei fehlgeschlagenem Transaktionsabschluss null zusammen mit insert=false und error=ED80100."
                  }
                },
                "additionalProperties": true,
                "required": [
                  "id",
                  "insert"
                ]
              },
              "type": {
                "type": "string"
              }
            },
            "additionalProperties": true
          },
          "examples": {
            "created": {
              "value": {
                "error": false,
                "data": {
                  "insert": true,
                  "id": "layoutpdf_012345abcdef_123456"
                }
              }
            },
            "createdBatch": {
              "value": {
                "error": false,
                "data": {
                  "insert": true,
                  "id": [
                    "layoutpdf_012345abcdef_123456",
                    "layoutpdf_012345abcdef_123457"
                  ]
                }
              }
            },
            "commitFailure": {
              "value": {
                "error": "ED80100",
                "data": {
                  "insert": false,
                  "id": null
                }
              }
            },
            "reviewed": {
              "value": {
                "error": false,
                "data": {
                  "id": "layoutpdf_012345abcdef_123456",
                  "insert": true
                }
              }
            }
          }
        }
      },
      "headers": {
        "X-Edoobox-Revision": {
          "schema": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          },
          "description": "Rotated account revision supplied for the next action in one reviewed sequence."
        }
      }
    },
    "400": {
      "description": "Invalid request.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40006"
          }
        }
      }
    },
    "401": {
      "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40103"
          }
        }
      }
    },
    "402": {
      "description": "Missing/invalid action data or subscription/operation restriction.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80100"
          }
        }
      }
    },
    "403": {
      "description": "Permission denied. Browser CORS rejection may have an empty body.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40340"
          }
        }
      }
    },
    "404": {
      "description": "Unknown resource/action or unsupported method.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80019"
          }
        }
      }
    },
    "409": {
      "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED40901",
            "error_code": "mutation_revision_conflict"
          }
        }
      }
    },
    "422": {
      "description": "Validation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80020"
          }
        }
      }
    },
    "429": {
      "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED42902"
          }
        }
      },
      "headers": {
        "Retry-After": {
          "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
          "schema": {
            "type": "string",
            "examples": [
              "30"
            ]
          }
        }
      }
    },
    "502": {
      "description": "Server-side operation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED50201"
          }
        }
      }
    },
    "503": {
      "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
      "headers": {
        "Retry-After": {
          "schema": {
            "type": "integer",
            "const": 1
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED50301",
            "error_code": "mutation_revision_busy"
          }
        }
      }
    }
  },
  "x-edoobox-mutates-state": true,
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "required": [
            "data"
          ],
          "properties": {
            "data": {
              "anyOf": [
                {
                  "type": "object",
                  "properties": {
                    "id": false,
                    "status": {
                      "x-edoobox-schemaStatus": "source-inferred",
                      "x-edoobox-sourceLine": 64,
                      "x-edoobox-canonicalType": "boolean",
                      "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                      "examples": [
                        false
                      ]
                    },
                    "name": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 150,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 74,
                      "description": "Internal PDF layout name; required on create."
                    },
                    "file_name": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 250,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 88,
                      "description": "Download filename template; may contain the account's supported PDF placeholders."
                    },
                    "orientation": {
                      "x-edoobox-knownInputs": [
                        "portrait",
                        "landscape"
                      ],
                      "x-edoobox-normalization": "Switch default normalizes other input values; case labels are not an exhaustive accepted-input enum.",
                      "examples": [
                        "portrait"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 102,
                      "description": "portrait or landscape is canonical; the getter normalizes other values to portrait."
                    },
                    "page_first_margin": {
                      "x-edoobox-schemaStatus": "source-reviewed-normalization",
                      "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                      "examples": [
                        {
                          "top": 16,
                          "right": 15,
                          "bottom": 16,
                          "left": 15
                        }
                      ],
                      "x-edoobox-sourceLine": 130
                    },
                    "page_next_margin": {
                      "x-edoobox-schemaStatus": "source-reviewed-normalization",
                      "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                      "examples": [
                        {
                          "top": 16,
                          "right": 15,
                          "bottom": 16,
                          "left": 15
                        }
                      ],
                      "x-edoobox-sourceLine": 156
                    },
                    "html": {
                      "x-edoobox-canonicalType": "string",
                      "x-edoobox-maxStoredLength": 60000,
                      "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                      "examples": [
                        "Example"
                      ],
                      "x-edoobox-requiredOnCreate": true,
                      "x-edoobox-sourceLine": 183,
                      "description": "HTML template rendered with the account's supported PDF placeholders."
                    },
                    "last_change": {
                      "x-edoobox-schemaStatus": "source-inferred",
                      "x-edoobox-serverValue": "time()",
                      "description": "The getter ignores submitted input and supplies the current server timestamp. No rejecting wire-input type is asserted.",
                      "x-edoobox-writableOnUpdate": false,
                      "x-edoobox-sourceLine": 196
                    }
                  },
                  "additionalProperties": true,
                  "description": "PDF Structure fields. Canonical orientation values normalize; stored text limits are not rejecting JSON maxLength assertions.",
                  "required": [
                    "name",
                    "file_name",
                    "orientation",
                    "html"
                  ]
                },
                {
                  "type": "array",
                  "minItems": 1,
                  "maxItems": 100,
                  "items": {
                    "type": "object",
                    "properties": {
                      "id": false,
                      "status": {
                        "x-edoobox-schemaStatus": "source-inferred",
                        "x-edoobox-sourceLine": 64,
                        "x-edoobox-canonicalType": "boolean",
                        "x-edoobox-normalization": "PHP coercion/normalization is applied by the Structure getter; its return type is not a rejecting wire-input type restriction.",
                        "examples": [
                          false
                        ]
                      },
                      "name": {
                        "x-edoobox-canonicalType": "string",
                        "x-edoobox-maxStoredLength": 150,
                        "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                        "examples": [
                          "Example"
                        ],
                        "x-edoobox-requiredOnCreate": true,
                        "x-edoobox-sourceLine": 74,
                        "description": "Internal PDF layout name; required on create."
                      },
                      "file_name": {
                        "x-edoobox-canonicalType": "string",
                        "x-edoobox-maxStoredLength": 250,
                        "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                        "examples": [
                          "Example"
                        ],
                        "x-edoobox-requiredOnCreate": true,
                        "x-edoobox-sourceLine": 88,
                        "description": "Download filename template; may contain the account's supported PDF placeholders."
                      },
                      "orientation": {
                        "x-edoobox-knownInputs": [
                          "portrait",
                          "landscape"
                        ],
                        "x-edoobox-normalization": "Switch default normalizes other input values; case labels are not an exhaustive accepted-input enum.",
                        "examples": [
                          "portrait"
                        ],
                        "x-edoobox-requiredOnCreate": true,
                        "x-edoobox-sourceLine": 102,
                        "description": "portrait or landscape is canonical; the getter normalizes other values to portrait."
                      },
                      "page_first_margin": {
                        "x-edoobox-schemaStatus": "source-reviewed-normalization",
                        "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                        "examples": [
                          {
                            "top": 16,
                            "right": 15,
                            "bottom": 16,
                            "left": 15
                          }
                        ],
                        "x-edoobox-sourceLine": 130
                      },
                      "page_next_margin": {
                        "x-edoobox-schemaStatus": "source-reviewed-normalization",
                        "description": "Native getter accepts any JSON input. Non-array input uses top=16, right=15, bottom=16, left=15. Array-like input is merged with those defaults; unknown keys are ignored and supplied values that fail is_numeric/value==intval(value) are removed. Kept values are stored as integers. This is normalization and filtering, not a rejecting input shape or integer-range assertion.",
                        "examples": [
                          {
                            "top": 16,
                            "right": 15,
                            "bottom": 16,
                            "left": 15
                          }
                        ],
                        "x-edoobox-sourceLine": 156
                      },
                      "html": {
                        "x-edoobox-canonicalType": "string",
                        "x-edoobox-maxStoredLength": 60000,
                        "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.",
                        "examples": [
                          "Example"
                        ],
                        "x-edoobox-requiredOnCreate": true,
                        "x-edoobox-sourceLine": 183,
                        "description": "HTML template rendered with the account's supported PDF placeholders."
                      },
                      "last_change": {
                        "x-edoobox-schemaStatus": "source-inferred",
                        "x-edoobox-serverValue": "time()",
                        "description": "The getter ignores submitted input and supplies the current server timestamp. No rejecting wire-input type is asserted.",
                        "x-edoobox-writableOnUpdate": false,
                        "x-edoobox-sourceLine": 196
                      }
                    },
                    "additionalProperties": true,
                    "description": "PDF Structure fields. Canonical orientation values normalize; stored text limits are not rejecting JSON maxLength assertions.",
                    "required": [
                      "name",
                      "file_name",
                      "orientation",
                      "html"
                    ]
                  }
                }
              ],
              "description": "Single record or native API_DATA batch (1–100 records), with the same per-record required fields."
            }
          },
          "additionalProperties": true
        },
        "examples": {
          "single": {
            "summary": "Synthetic supported request; replace all IDs with values read from this account.",
            "value": {
              "data": {
                "name": "Example layout",
                "file_name": "Example_##OfferName##",
                "orientation": "portrait",
                "html": "<p>##OfferName##</p>"
              }
            }
          },
          "batch": {
            "summary": "Synthetic supported request; replace all IDs with values read from this account.",
            "value": {
              "data": [
                {
                  "name": "Example layout",
                  "file_name": "Example_##OfferName##",
                  "orientation": "portrait",
                  "html": "<p>##OfferName##</p>"
                },
                {
                  "name": "Second example",
                  "file_name": "Example_##OfferName##",
                  "orientation": "portrait",
                  "html": "<p>##OfferName##</p>"
                }
              ]
            }
          }
        }
      }
    }
  },
  "x-edoobox-action-contract": {
    "review": "layout-pdf-post",
    "status": "source-reviewed-partial",
    "sources": [
      {
        "file": "application/models/v2/Layout.php",
        "sha256": "d5bf4faf862da921710d9d2f553b14778a2b78eb8281a2f195dd5d52f9886eaf",
        "methods": [
          "__construct",
          "setStructure_PDF",
          "postLayout",
          "updateLayout"
        ]
      },
      {
        "file": "application/models/v2/API_DATA.php",
        "sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
        "methods": [
          "return_insert_data",
          "return_update_data"
        ]
      }
    ],
    "preconditions": [
      "Only the selected account owns or changes the layout; placeholder and template expansion use native account context."
    ],
    "errors": [
      {
        "error": "ED80100",
        "meaning": "Required create fields, rejected getter value, or native write validation failed."
      },
      {
        "error": "ED80023",
        "meaning": "Generic batch create exceeds 100 records."
      }
    ],
    "unresolved": [
      "Template placeholders, account data, signed ID integrity and rendering output remain native. Scalar getter coercion is documented without inventing rejecting wire limits."
    ]
  },
  "x-edoobox-runtimeMutationGuard": true,
  "x-edoobox-documentationReview": {
    "file": "docs/openapi/operation-contracts/07-layout-files.json",
    "notes": []
  },
  "x-edoobox-source": {
    "file": "application/models/v2/Layout.php",
    "method": "postLayout",
    "line": 496
  },
  "x-edoobox-documentationStatus": "reviewed",
  "x-edoobox-readOnly": false,
  "x-edoobox-safeForAutomation": false,
  "x-edoobox-permission": {
    "resource": "layout",
    "short": "lyot",
    "checkedByDispatcher": true,
    "levels": [
      2,
      3,
      4
    ],
    "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
  }
}
```
