# POST /v2/support/error-feedback-reports/prepare

Supportbericht und signierte Anhang-Uploads vorbereiten

Speichert Bericht und Anhang-Metadaten und erzeugt signierte PUT-URLs für 30 Minuten. Bilder benötigen positive byteSize bis 8 MiB und MIME image/png, image/jpeg oder image/webp; Replay benötigt positive byteSize bis 50 MiB. sha256 ist optional. Nach dem Byte-Upload finalize aufrufen; bei Screenshot-CORS-Problemen steht upload zur Verfügung. Die placeholder-Variante nutzt dieselbe Modellimplementierung. error=false bestätigt nicht automatisch erfolgreiche Anhänge; deren status muss ausgewertet werden. Berichte mit route.name=pageRegister oder /pages/register werden vom Controller deaktiviert; dann antwortet data.disabled=true mit reason=signup_error_feedback_disabled.

- Operation-ID: post_v2_support_error_feedback_reports_prepare
- Dokumentation: /docs/api/v2/operations/post-v2-support-error-feedback-reports-prepare-15ef627bb3f6/
- OpenAPI-Version: 3.2.1
- Vollständige Spezifikation: /docs/api/v2/openapi.json
- Dokumentationsstatus: reviewed
- Ändert Zustand: ja
- Für Automation freigegeben: nein

## Server

Serverwerte stammen unverändert aus der Datei. Eine lokale Entwicklungsadresse ist keine bestätigte Produktionsadresse. `API_ORIGIN` muss auf die passende Instanz gesetzt werden.

```json
[
  {
    "url": "https://app2.edoobox.com",
    "description": "edoobox API"
  }
]
```

## Authentifizierung

Eine der folgenden Alternativen genügt (ODER). Innerhalb einer Alternative müssen alle Verfahren gemeinsam erfüllt sein (UND).

1. **bearerAuth** (HTTP bearer) — Existing edoobox v2 access token. Never substitute API key/secret headers. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.
2. **sessionCookie** (cookie: _edlogin) — Existing browser login session, with the same permission checks as Bearer authentication. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.

### Wirksame Security Requirements und vollständige Verfahren

```json
{
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "securitySchemes": {
    "bearerAuth": {
      "type": "http",
      "scheme": "bearer",
      "bearerFormat": "JWT",
      "description": "Existing edoobox v2 access token. Never substitute API key/secret headers."
    },
    "accountContext": {
      "type": "apiKey",
      "in": "header",
      "name": "edid",
      "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
    },
    "sessionCookie": {
      "type": "apiKey",
      "in": "cookie",
      "name": "_edlogin",
      "description": "Existing browser login session, with the same permission checks as Bearer authentication."
    }
  }
}
```

## Parameter

| Name | Ort | Pflicht | Beschreibung |
| --- | --- | --- | --- |
| language | header | nein | Account language code, where the resource supports setLanguage(). |
| X-Edoobox-If-Revision | header | nein | Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review. |

### Vollständige wirksame Parameterdefinitionen

```json
[
  {
    "name": "language",
    "in": "header",
    "required": false,
    "description": "Account language code, where the resource supports setLanguage().",
    "schema": {
      "type": "string",
      "examples": [
        "de"
      ]
    }
  },
  {
    "name": "X-Edoobox-If-Revision",
    "in": "header",
    "required": false,
    "schema": {
      "type": "string",
      "pattern": "^[a-f0-9]{32}$",
      "examples": [
        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      ]
    },
    "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
  }
]
```

## Anfrage

```json
{
  "required": true,
  "content": {
    "application/json": {
      "schema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "payloadVersion": {
                "type": [
                  "integer",
                  "string"
                ],
                "description": "Auf 1–99 normalisiert; Standard 1 bei create, 2 bei prepare."
              },
              "trigger": {
                "type": "string",
                "description": "manual erzeugt unread, sonst automatic."
              },
              "feedbackType": {
                "description": "idea bzw. idee normalisiert zu idea; alle anderen Werte werden bug.",
                "examples": [
                  "bug"
                ]
              },
              "feedback_type": {
                "description": "Alias für feedbackType."
              },
              "comment": {
                "description": "Kommentar; auf 6000 Zeichen normalisiert.",
                "x-edoobox-canonicalType": "string"
              },
              "appContext": {
                "type": "object",
                "properties": {
                  "accountId": {
                    "type": "string",
                    "pattern": "^account_[a-f0-9]{12}_-?[0-9]+$",
                    "description": "Öffentliche v2-ID; Beispiel ist synthetisch.",
                    "examples": [
                      "account_012345abcdef_123456"
                    ]
                  },
                  "adminId": {
                    "type": "string",
                    "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                    "description": "Öffentliche v2-ID; Beispiel ist synthetisch.",
                    "examples": [
                      "admin_012345abcdef_123456"
                    ]
                  },
                  "APP_VERSION": {
                    "type": "string"
                  },
                  "appVersion": {
                    "type": "string"
                  },
                  "environment": {
                    "type": "string"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                },
                "additionalProperties": true
              },
              "route": {
                "type": "object",
                "properties": {
                  "name": {
                    "type": "string"
                  },
                  "path": {
                    "type": "string"
                  },
                  "fullPath": {
                    "type": "string"
                  }
                },
                "additionalProperties": true
              },
              "telemetry": {
                "type": "object",
                "properties": {
                  "viewport": {}
                },
                "additionalProperties": true
              },
              "annotations": {},
              "visualScreenshot": {
                "type": "object",
                "properties": {
                  "mimeType": {
                    "type": "string",
                    "description": "Bei create aus dataUrl abgeleitet; bei prepare image/png, image/jpeg oder image/webp."
                  },
                  "width": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "height": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "capturedAt": {
                    "type": "string"
                  },
                  "source": {
                    "type": "string"
                  },
                  "redactedByAnnotatedScreenshot": {
                    "description": "Wird per PHP-Wahrheitsvergleich normalisiert.",
                    "examples": [
                      true
                    ]
                  },
                  "byteSize": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "byte_size": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "sha256": {
                    "type": "string",
                    "description": "Optionaler SHA-256-Inhaltshash (64 Hexzeichen)."
                  }
                },
                "additionalProperties": true
              },
              "annotatedScreenshot": {
                "type": "object",
                "properties": {
                  "mimeType": {
                    "type": "string",
                    "description": "Bei create aus dataUrl abgeleitet; bei prepare image/png, image/jpeg oder image/webp."
                  },
                  "width": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "height": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "capturedAt": {
                    "type": "string"
                  },
                  "source": {
                    "type": "string"
                  },
                  "redactedByAnnotatedScreenshot": {
                    "description": "Wird per PHP-Wahrheitsvergleich normalisiert.",
                    "examples": [
                      true
                    ]
                  },
                  "byteSize": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "byte_size": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "sha256": {
                    "type": "string",
                    "description": "Optionaler SHA-256-Inhaltshash (64 Hexzeichen)."
                  }
                },
                "additionalProperties": true
              },
              "replay": {
                "type": "object",
                "properties": {
                  "capturedAt": {
                    "type": "string"
                  },
                  "meta": {},
                  "eventCount": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "byteSize": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "byte_size": {
                    "type": [
                      "integer",
                      "string"
                    ],
                    "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                  },
                  "sha256": {
                    "type": "string"
                  }
                },
                "additionalProperties": true
              }
            },
            "additionalProperties": true,
            "minProperties": 1
          }
        },
        "additionalProperties": true,
        "required": [
          "data"
        ]
      },
      "examples": {
        "request": {
          "summary": "Supportbericht und signierte Anhang-Uploads vorbereiten",
          "value": {
            "data": {
              "payloadVersion": 2,
              "trigger": "manual",
              "feedbackType": "bug",
              "comment": "Die Angebotsansicht zeigt eine unerwartete Fehlermeldung.",
              "route": {
                "name": "offers",
                "path": "/offers",
                "fullPath": "/offers"
              },
              "appContext": {
                "appVersion": "example"
              }
            }
          }
        }
      }
    }
  }
}
```

## Antworten

HTTP-Status und Antwortinhalt gemeinsam auswerten. Die folgenden Beschreibungen und Schemata sind die Angaben der Quelldatei.

```json
{
  "200": {
    "description": "Berichts-/Anhangstatus stehen auf oberster Ebene, nicht unter data. Tabellen-/Speicherfehler können ebenfalls HTTP 200 verwenden. artifacts.status muss für jeden angeforderten Anhang geprüft werden.",
    "content": {
      "application/json": {
        "schema": {
          "anyOf": [
            {
              "type": "object",
              "properties": {
                "success": {
                  "const": true
                },
                "error": {
                  "const": false
                },
                "status": {
                  "const": "prepared"
                },
                "reportId": {
                  "type": "string",
                  "description": "Öffentlicher Berichtsschlüssel efb_…"
                },
                "receivedAt": {
                  "type": "string",
                  "format": "date-time"
                },
                "artifacts": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "properties": {
                      "key": {
                        "type": "string"
                      },
                      "type": {
                        "type": "string"
                      },
                      "status": {
                        "type": "string"
                      },
                      "byteSize": {
                        "type": "integer"
                      },
                      "mimeType": {
                        "type": "string"
                      },
                      "uploadUrl": {
                        "type": "string",
                        "description": "Kurzlebige signierte PUT-URL; vertraulich behandeln."
                      }
                    },
                    "additionalProperties": true
                  }
                },
                "uploadExpiresAt": {
                  "type": "string",
                  "format": "date-time"
                }
              },
              "additionalProperties": true,
              "required": [
                "success",
                "error"
              ]
            },
            {
              "type": "object",
              "properties": {
                "success": {
                  "const": false
                },
                "error": {
                  "type": "string"
                },
                "error_code": {
                  "type": "string"
                }
              },
              "additionalProperties": true,
              "required": [
                "error"
              ]
            }
          ]
        },
        "example": {
          "success": true,
          "error": false,
          "status": "prepared",
          "reportId": "efb_syntheticexample",
          "receivedAt": "2027-04-01T10:00:00+00:00",
          "artifacts": [],
          "uploadExpiresAt": "2027-04-01T10:30:00+00:00"
        }
      }
    },
    "headers": {
      "X-Edoobox-Revision": {
        "schema": {
          "type": "string",
          "pattern": "^[a-f0-9]{32}$"
        },
        "description": "Rotated account revision supplied for the next action in one reviewed sequence."
      }
    }
  },
  "400": {
    "description": "Invalid request.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40006"
        }
      }
    }
  },
  "401": {
    "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40103"
        }
      }
    }
  },
  "402": {
    "description": "Missing/invalid action data or subscription/operation restriction.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80100"
        }
      }
    }
  },
  "403": {
    "description": "Permission denied. Browser CORS rejection may have an empty body.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40340"
        }
      }
    }
  },
  "404": {
    "description": "Unknown resource/action or unsupported method.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80019"
        }
      }
    }
  },
  "409": {
    "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED40901",
          "error_code": "mutation_revision_conflict"
        }
      }
    }
  },
  "422": {
    "description": "Validation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80020"
        }
      }
    }
  },
  "429": {
    "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED42902"
        }
      }
    },
    "headers": {
      "Retry-After": {
        "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
        "schema": {
          "type": "string",
          "examples": [
            "30"
          ]
        }
      }
    }
  },
  "502": {
    "description": "Server-side operation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED50201"
        }
      }
    }
  },
  "503": {
    "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
    "headers": {
      "Retry-After": {
        "schema": {
          "type": "integer",
          "const": 1
        }
      }
    },
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED50301",
          "error_code": "mutation_revision_busy"
        }
      }
    }
  }
}
```

## Aufrufbeispiele

Anpassen vor dem Ausführen. Platzhalter und veröffentlichte Beispiele sind synthetisch. Die Beispiele senden hier keine Anfrage; sie ergänzen keine unbekannten Pflichtfelder.

### cURL

```sh
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
: "${API_ORIGIN:?API_ORIGIN setzen}"
: "${AUTH_BEARERAUTH:?AUTH_BEARERAUTH setzen}"
: "${AUTH_ACCOUNTCONTEXT:?AUTH_ACCOUNTCONTEXT setzen}"
cat > payload.json <<'EDOOBOX_JSON_EXAMPLE'
{
  "data": {
    "payloadVersion": 2,
    "trigger": "manual",
    "feedbackType": "bug",
    "comment": "Die Angebotsansicht zeigt eine unerwartete Fehlermeldung.",
    "route": {
      "name": "offers",
      "path": "/offers",
      "fullPath": "/offers"
    },
    "appContext": {
      "appVersion": "example"
    }
  }
}
EDOOBOX_JSON_EXAMPLE
curl --request 'POST' \
  --url "${API_ORIGIN%/}"'/v2/support/error-feedback-reports/prepare' \
  --header 'Authorization: Bearer '"${AUTH_BEARERAUTH}" \
  --header 'edid: '"${AUTH_ACCOUNTCONTEXT}" \
  --header 'Content-Type: application/json' \
  --data-binary '@payload.json'
```

### JavaScript (Node.js)

```javascript
// Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
// Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
const required = (name) => {
  const value = process.env[name];
  if (!value) throw new Error(`Set ${name}`);
  return value;
};
let path = "/v2/support/error-feedback-reports/prepare";
const origin = required('API_ORIGIN');
const url = new URL((origin.endsWith('/') ? origin.slice(0, -1) : origin) + path);
const headers = {};
headers["Authorization"] = "Bearer " + required("AUTH_BEARERAUTH");
headers["edid"] = "" + required("AUTH_ACCOUNTCONTEXT");
headers['Content-Type'] = "application/json";
const body = JSON.stringify({
  "data": {
    "payloadVersion": 2,
    "trigger": "manual",
    "feedbackType": "bug",
    "comment": "Die Angebotsansicht zeigt eine unerwartete Fehlermeldung.",
    "route": {
      "name": "offers",
      "path": "/offers",
      "fullPath": "/offers"
    },
    "appContext": {
      "appVersion": "example"
    }
  }
});
const response = await fetch(url, { method: "POST", headers, body, redirect: 'manual' });
const text = await response.text();
console.log(response.status, text);
// HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

### Python

```python
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen.
import os
import urllib.parse
import urllib.request
import urllib.error

path = "/v2/support/error-feedback-reports/prepare"
url = os.environ["API_ORIGIN"].rstrip("/") + path
headers = {}
headers["Authorization"] = "Bearer " + os.environ["AUTH_BEARERAUTH"]
headers["edid"] = "" + os.environ["AUTH_ACCOUNTCONTEXT"]
headers["Content-Type"] = "application/json"
body = "{\"data\":{\"payloadVersion\":2,\"trigger\":\"manual\",\"feedbackType\":\"bug\",\"comment\":\"Die Angebotsansicht zeigt eine unerwartete Fehlermeldung.\",\"route\":{\"name\":\"offers\",\"path\":\"/offers\",\"fullPath\":\"/offers\"},\"appContext\":{\"appVersion\":\"example\"}}}".encode("utf-8")

# Redirects nicht automatisch verfolgen.
class NoRedirect(urllib.request.HTTPRedirectHandler):
    def redirect_request(self, req, fp, code, msg, headers, newurl):
        return None
request = urllib.request.Request(url, headers=headers, method="POST", data=body)
try:
    response = urllib.request.build_opener(NoRedirect).open(request, timeout=30)
except urllib.error.HTTPError as error:
    response = error
print(response.status, response.read().decode("utf-8", errors="replace"))
# HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

## Vollständige Operationsdefinition und edoobox-Hinweise

Alle Originalfelder einschliesslich `x-edoobox-*`, requestBody und responses bleiben erhalten. Teilweise dokumentierte Schemata sind kein vollständiger Validierungsvertrag.

```json
{
  "operationId": "post_v2_support_error_feedback_reports_prepare",
  "summary": "Supportbericht und signierte Anhang-Uploads vorbereiten",
  "description": "Speichert Bericht und Anhang-Metadaten und erzeugt signierte PUT-URLs für 30 Minuten. Bilder benötigen positive byteSize bis 8 MiB und MIME image/png, image/jpeg oder image/webp; Replay benötigt positive byteSize bis 50 MiB. sha256 ist optional. Nach dem Byte-Upload finalize aufrufen; bei Screenshot-CORS-Problemen steht upload zur Verfügung. Die placeholder-Variante nutzt dieselbe Modellimplementierung. error=false bestätigt nicht automatisch erfolgreiche Anhänge; deren status muss ausgewertet werden. Berichte mit route.name=pageRegister oder /pages/register werden vom Controller deaktiviert; dann antwortet data.disabled=true mit reason=signup_error_feedback_disabled.",
  "tags": [
    "support"
  ],
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "parameters": [
    {
      "name": "language",
      "in": "header",
      "required": false,
      "description": "Account language code, where the resource supports setLanguage().",
      "schema": {
        "type": "string",
        "examples": [
          "de"
        ]
      }
    },
    {
      "name": "X-Edoobox-If-Revision",
      "in": "header",
      "required": false,
      "schema": {
        "type": "string",
        "pattern": "^[a-f0-9]{32}$",
        "examples": [
          "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      },
      "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
    }
  ],
  "responses": {
    "200": {
      "description": "Berichts-/Anhangstatus stehen auf oberster Ebene, nicht unter data. Tabellen-/Speicherfehler können ebenfalls HTTP 200 verwenden. artifacts.status muss für jeden angeforderten Anhang geprüft werden.",
      "content": {
        "application/json": {
          "schema": {
            "anyOf": [
              {
                "type": "object",
                "properties": {
                  "success": {
                    "const": true
                  },
                  "error": {
                    "const": false
                  },
                  "status": {
                    "const": "prepared"
                  },
                  "reportId": {
                    "type": "string",
                    "description": "Öffentlicher Berichtsschlüssel efb_…"
                  },
                  "receivedAt": {
                    "type": "string",
                    "format": "date-time"
                  },
                  "artifacts": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "key": {
                          "type": "string"
                        },
                        "type": {
                          "type": "string"
                        },
                        "status": {
                          "type": "string"
                        },
                        "byteSize": {
                          "type": "integer"
                        },
                        "mimeType": {
                          "type": "string"
                        },
                        "uploadUrl": {
                          "type": "string",
                          "description": "Kurzlebige signierte PUT-URL; vertraulich behandeln."
                        }
                      },
                      "additionalProperties": true
                    }
                  },
                  "uploadExpiresAt": {
                    "type": "string",
                    "format": "date-time"
                  }
                },
                "additionalProperties": true,
                "required": [
                  "success",
                  "error"
                ]
              },
              {
                "type": "object",
                "properties": {
                  "success": {
                    "const": false
                  },
                  "error": {
                    "type": "string"
                  },
                  "error_code": {
                    "type": "string"
                  }
                },
                "additionalProperties": true,
                "required": [
                  "error"
                ]
              }
            ]
          },
          "example": {
            "success": true,
            "error": false,
            "status": "prepared",
            "reportId": "efb_syntheticexample",
            "receivedAt": "2027-04-01T10:00:00+00:00",
            "artifacts": [],
            "uploadExpiresAt": "2027-04-01T10:30:00+00:00"
          }
        }
      },
      "headers": {
        "X-Edoobox-Revision": {
          "schema": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          },
          "description": "Rotated account revision supplied for the next action in one reviewed sequence."
        }
      }
    },
    "400": {
      "description": "Invalid request.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40006"
          }
        }
      }
    },
    "401": {
      "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40103"
          }
        }
      }
    },
    "402": {
      "description": "Missing/invalid action data or subscription/operation restriction.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80100"
          }
        }
      }
    },
    "403": {
      "description": "Permission denied. Browser CORS rejection may have an empty body.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40340"
          }
        }
      }
    },
    "404": {
      "description": "Unknown resource/action or unsupported method.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80019"
          }
        }
      }
    },
    "409": {
      "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED40901",
            "error_code": "mutation_revision_conflict"
          }
        }
      }
    },
    "422": {
      "description": "Validation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80020"
          }
        }
      }
    },
    "429": {
      "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED42902"
          }
        }
      },
      "headers": {
        "Retry-After": {
          "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
          "schema": {
            "type": "string",
            "examples": [
              "30"
            ]
          }
        }
      }
    },
    "502": {
      "description": "Server-side operation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED50201"
          }
        }
      }
    },
    "503": {
      "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
      "headers": {
        "Retry-After": {
          "schema": {
            "type": "integer",
            "const": 1
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED50301",
            "error_code": "mutation_revision_busy"
          }
        }
      }
    }
  },
  "x-edoobox-mutates-state": true,
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "data": {
              "type": "object",
              "properties": {
                "payloadVersion": {
                  "type": [
                    "integer",
                    "string"
                  ],
                  "description": "Auf 1–99 normalisiert; Standard 1 bei create, 2 bei prepare."
                },
                "trigger": {
                  "type": "string",
                  "description": "manual erzeugt unread, sonst automatic."
                },
                "feedbackType": {
                  "description": "idea bzw. idee normalisiert zu idea; alle anderen Werte werden bug.",
                  "examples": [
                    "bug"
                  ]
                },
                "feedback_type": {
                  "description": "Alias für feedbackType."
                },
                "comment": {
                  "description": "Kommentar; auf 6000 Zeichen normalisiert.",
                  "x-edoobox-canonicalType": "string"
                },
                "appContext": {
                  "type": "object",
                  "properties": {
                    "accountId": {
                      "type": "string",
                      "pattern": "^account_[a-f0-9]{12}_-?[0-9]+$",
                      "description": "Öffentliche v2-ID; Beispiel ist synthetisch.",
                      "examples": [
                        "account_012345abcdef_123456"
                      ]
                    },
                    "adminId": {
                      "type": "string",
                      "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                      "description": "Öffentliche v2-ID; Beispiel ist synthetisch.",
                      "examples": [
                        "admin_012345abcdef_123456"
                      ]
                    },
                    "APP_VERSION": {
                      "type": "string"
                    },
                    "appVersion": {
                      "type": "string"
                    },
                    "environment": {
                      "type": "string"
                    },
                    "userAgent": {
                      "type": "string"
                    }
                  },
                  "additionalProperties": true
                },
                "route": {
                  "type": "object",
                  "properties": {
                    "name": {
                      "type": "string"
                    },
                    "path": {
                      "type": "string"
                    },
                    "fullPath": {
                      "type": "string"
                    }
                  },
                  "additionalProperties": true
                },
                "telemetry": {
                  "type": "object",
                  "properties": {
                    "viewport": {}
                  },
                  "additionalProperties": true
                },
                "annotations": {},
                "visualScreenshot": {
                  "type": "object",
                  "properties": {
                    "mimeType": {
                      "type": "string",
                      "description": "Bei create aus dataUrl abgeleitet; bei prepare image/png, image/jpeg oder image/webp."
                    },
                    "width": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "height": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "capturedAt": {
                      "type": "string"
                    },
                    "source": {
                      "type": "string"
                    },
                    "redactedByAnnotatedScreenshot": {
                      "description": "Wird per PHP-Wahrheitsvergleich normalisiert.",
                      "examples": [
                        true
                      ]
                    },
                    "byteSize": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "byte_size": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "sha256": {
                      "type": "string",
                      "description": "Optionaler SHA-256-Inhaltshash (64 Hexzeichen)."
                    }
                  },
                  "additionalProperties": true
                },
                "annotatedScreenshot": {
                  "type": "object",
                  "properties": {
                    "mimeType": {
                      "type": "string",
                      "description": "Bei create aus dataUrl abgeleitet; bei prepare image/png, image/jpeg oder image/webp."
                    },
                    "width": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "height": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "capturedAt": {
                      "type": "string"
                    },
                    "source": {
                      "type": "string"
                    },
                    "redactedByAnnotatedScreenshot": {
                      "description": "Wird per PHP-Wahrheitsvergleich normalisiert.",
                      "examples": [
                        true
                      ]
                    },
                    "byteSize": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "byte_size": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "sha256": {
                      "type": "string",
                      "description": "Optionaler SHA-256-Inhaltshash (64 Hexzeichen)."
                    }
                  },
                  "additionalProperties": true
                },
                "replay": {
                  "type": "object",
                  "properties": {
                    "capturedAt": {
                      "type": "string"
                    },
                    "meta": {},
                    "eventCount": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "byteSize": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "byte_size": {
                      "type": [
                        "integer",
                        "string"
                      ],
                      "description": "Wird zur nichtnegativen Ganzzahl normalisiert."
                    },
                    "sha256": {
                      "type": "string"
                    }
                  },
                  "additionalProperties": true
                }
              },
              "additionalProperties": true,
              "minProperties": 1
            }
          },
          "additionalProperties": true,
          "required": [
            "data"
          ]
        },
        "examples": {
          "request": {
            "summary": "Supportbericht und signierte Anhang-Uploads vorbereiten",
            "value": {
              "data": {
                "payloadVersion": 2,
                "trigger": "manual",
                "feedbackType": "bug",
                "comment": "Die Angebotsansicht zeigt eine unerwartete Fehlermeldung.",
                "route": {
                  "name": "offers",
                  "path": "/offers",
                  "fullPath": "/offers"
                },
                "appContext": {
                  "appVersion": "example"
                }
              }
            }
          }
        }
      }
    }
  },
  "x-edoobox-upload-ticket": {
    "provider": "gcs",
    "bucketEnv": "ED_BUCKET_PRIVATE_NAME",
    "objectPrefixEnv": "ED_BUCKET_PRIVATE_PREFIX",
    "urlPointer": "/artifacts/*/uploadUrl",
    "pathPrefixTemplate": "/filemanager/{account_id}/feedback/",
    "method": "PUT",
    "maxBytes": 52428800,
    "imageMaxBytes": 8388608,
    "expiresInSeconds": 1800,
    "mimeTypePointer": "/artifacts/*/mimeType",
    "byteSizePointer": "/artifacts/*/byteSize",
    "source": {
      "file": "application/models/Edsupportfeedbackmodel.php",
      "line": 1644
    },
    "workflow": {
      "metadataCreatedBeforeTransfer": true,
      "requiresApiFinalization": true,
      "scope": "upload-session",
      "finalization": {
        "operationId": "post_v2_support_error_feedback_reports_finalize",
        "argumentBindings": [
          {
            "target": "/body/data/reportId",
            "source": "/reportId"
          }
        ],
        "scope": "upload-session",
        "after": "all-requested-artifact-transfers"
      },
      "successCriteria": {
        "responsePointers": {
          "/error": false
        },
        "artifacts": {
          "selection": "all-requested-artifact-keys",
          "everyStatus": "stored"
        }
      },
      "notes": [
        "One prepare can return several upload tickets. Retain the top-level reportId and match each requested artifact by its opaque key.",
        "Finalize the report only after all intended artifact transfers. Native finalization independently checks storage, MIME, byte size and optional SHA256.",
        "Top-level status stored is insufficient: every requested artifact key must be returned with its own status stored.",
        "There is no account-JWT report read or abort operation. Never invent one or automatically repeat a mutation after an ambiguous outcome."
      ]
    }
  },
  "x-edoobox-runtimeMutationGuard": true,
  "x-edoobox-documentationReview": {
    "file": "docs/openapi/operation-contracts/10-other-resources.json",
    "notes": []
  },
  "x-edoobox-source": {
    "file": "application/models/v2/Support.php",
    "method": "postSupport",
    "line": 10
  },
  "x-edoobox-documentationStatus": "reviewed",
  "x-edoobox-readOnly": false,
  "x-edoobox-safeForAutomation": false,
  "x-edoobox-permission": {
    "resource": "support",
    "short": null,
    "checkedByDispatcher": false,
    "levels": [
      2,
      3,
      4
    ],
    "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
  }
}
```