# PUT /v2/date/{id} Termin aktualisieren Ändert die übergebenen schreibbaren Felder in data für Termin. Die Pfad-ID wählt das Ziel; ein zusätzliches id im JSON-Umschlag hat im Legacy-Handler Vorrang. Nach erfolgreicher Änderung werden zusammengefasste Angebotsdaten (erster/letzter Termin und Ort) neu berechnet; data.offer kann die dabei ermittelten Angebotsdaten enthalten. - Operation-ID: put_v2_date_id - Dokumentation: /docs/api/v2/operations/put-v2-date-id-0e171d7851d8/ - OpenAPI-Version: 3.2.1 - Vollständige Spezifikation: /docs/api/v2/openapi.json - Dokumentationsstatus: reviewed - Ändert Zustand: ja - Für Automation freigegeben: nein ## Server Serverwerte stammen unverändert aus der Datei. Eine lokale Entwicklungsadresse ist keine bestätigte Produktionsadresse. `API_ORIGIN` muss auf die passende Instanz gesetzt werden. ```json [ { "url": "https://app2.edoobox.com", "description": "edoobox API" } ] ``` ## Authentifizierung Eine der folgenden Alternativen genügt (ODER). Innerhalb einer Alternative müssen alle Verfahren gemeinsam erfüllt sein (UND). 1. **bearerAuth** (HTTP bearer) — Existing edoobox v2 access token. Never substitute API key/secret headers. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account. 2. **sessionCookie** (cookie: _edlogin) — Existing browser login session, with the same permission checks as Bearer authentication. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account. ### Wirksame Security Requirements und vollständige Verfahren ```json { "security": [ { "bearerAuth": [], "accountContext": [] }, { "sessionCookie": [], "accountContext": [] } ], "securitySchemes": { "bearerAuth": { "type": "http", "scheme": "bearer", "bearerFormat": "JWT", "description": "Existing edoobox v2 access token. Never substitute API key/secret headers." }, "accountContext": { "type": "apiKey", "in": "header", "name": "edid", "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account." }, "sessionCookie": { "type": "apiKey", "in": "cookie", "name": "_edlogin", "description": "Existing browser login session, with the same permission checks as Bearer authentication." } } } ``` ## Parameter | Name | Ort | Pflicht | Beschreibung | | --- | --- | --- | --- | | id | path | ja | v2 object identifier in the selected account. | | language | header | nein | Account language code, where the resource supports setLanguage(). | | X-Edoobox-If-Revision | header | nein | Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review. | ### Vollständige wirksame Parameterdefinitionen ```json [ { "name": "id", "in": "path", "required": true, "description": "v2 object identifier in the selected account.", "schema": { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.", "examples": [ "date_012345abcdef_123456" ] } }, { "name": "language", "in": "header", "required": false, "description": "Account language code, where the resource supports setLanguage().", "schema": { "type": "string", "examples": [ "de" ] } }, { "name": "X-Edoobox-If-Revision", "in": "header", "required": false, "schema": { "type": "string", "pattern": "^[a-f0-9]{32}$", "examples": [ "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ] }, "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review." } ] ``` ## Anfrage ```json { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": false, "description": { "x-edoobox-canonicalType": "string", "x-edoobox-maxStoredLength": 250, "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.", "examples": [ "Example" ], "x-edoobox-sourceLine": 40 }, "date_start": { "x-edoobox-canonicalType": "string", "description": "dP uses PHP strtotime(); unparseable/falsy results normalize to zero. ISO 8601 text is the canonical client input; no rejecting JSON date-time format assertion is established here. Account/action hooks may add preconditions.", "examples": [ "2026-10-15T10:00:00+02:00" ], "x-edoobox-requiredOnCreate": true, "x-edoobox-sourceLine": 49 }, "date_end": { "x-edoobox-canonicalType": "string", "description": "dP uses PHP strtotime(); unparseable/falsy results normalize to zero. ISO 8601 text is the canonical client input; no rejecting JSON date-time format assertion is established here. Account/action hooks may add preconditions.", "examples": [ "2026-10-15T10:00:00+02:00" ], "x-edoobox-requiredOnCreate": true, "x-edoobox-sourceLine": 62 }, "place": { "anyOf": [ { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque v2 ID returned for a record in the selected account." }, { "const": false }, { "type": "null" }, { "const": "" }, { "const": 0 }, { "const": "0" } ], "description": "A falsey value clears the relation; a nonempty public v2 ID selects the relation.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 77, "reason": "Falsey write input becomes zero; otherwise the public relation ID is decoded.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" }, { "file": "application/models/v2/Date.php", "line": 84, "reason": "Response is a public relation ID or false.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "room": { "anyOf": [ { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque v2 ID returned for a record in the selected account." }, { "const": false }, { "type": "null" }, { "const": "" }, { "const": 0 }, { "const": "0" } ], "description": "A falsey value clears the relation; a nonempty public v2 ID selects the relation.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 90, "reason": "Falsey write input becomes zero; otherwise the public relation ID is decoded.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" }, { "file": "application/models/v2/Date.php", "line": 97, "reason": "Response is a public relation ID or false.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "offer": false, "leader": { "type": "array", "items": { "type": "string", "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$", "description": "Public admin v2 ID returned for a currently existing record in the selected account; signature, resource type and account ownership are checked by the native hook." }, "description": "Assigns administrators as leaders of this date within the current account.\nThe relation hook applies assignments separately from the storage getter.\n\nA JSON list of existing administrators in the selected account. The full deduplicated set is validated before assignment changes; [] removes all leaders. Wrong types, missing or foreign administrators reject the replacement.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Datefunc.php", "line": 174, "lineEnd": 179, "reason": "PUT obtains a fully validated leader list before modifying assignments.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Datefunc.php", "line": 239, "lineEnd": 243, "reason": "POST relation callback consumes the same validated list.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Datefunc.php", "line": 266, "lineEnd": 289, "reason": "Strict list, typed admin decoding, positive IDs and deduplicated same-account user_info existence checks precede relation mutations.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Date.php", "line": 131, "reason": "Response maps joined leaders to an array of public administrator IDs.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "color": { "description": "Canonical #RGB/#RRGGBB. Also accepts unprefixed 4/7 hex chars; strings of other lengths clear. Length 4/7 nonhex rejects. Not equivalent to strict CSS hex regex. Canonical representations are shown; other PHP scalar coercions are not presented as rejection constraints.\n\nfalse or string length other than 4/7 -> empty aP string. At length4/7, hexadecimal after ltrim(all leading #) is required; nonhex returns false. Empty output -> false.\n\nRuntime preconditions / rejection: Length4/7 nonhex text returns strict false -> ED80100.", "x-edoobox-canonicalType": "string or false", "x-edoobox-schemaStatus": "source-reviewed", "examples": [ "#a1b", false ], "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 153, "lineStart": 153, "lineEnd": 172, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "2ec5847a45af791e05db717f2e4f5946198cf290fc3c441b95d55d54f6045814", "reason": "Structure getter, output setter and field flags." }, { "file": "application/helpers/edooboxhelp_helper.php", "line": 11560, "lineStart": 11560, "lineEnd": 11606, "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e", "spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f", "reason": "aP text normalization and aQ output. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength." }, { "file": "application/models/v2/Date.php", "line": 189, "lineStart": 189, "lineEnd": 202, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "d6306bef7b4617f803aff2ac2de39df94f0233667a11ff2c4b269b9a46d47987", "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct." }, { "file": "application/models/v2/Date.php", "line": 237, "lineStart": 237, "lineEnd": 244, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "ccfc31e1b13732e53c6b5ff2f95400c7664e404c4bc10eb0645152b9e3f4bb47", "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct." }, { "file": "docs/openapi/reviews/domain-fields.json", "line": 1, "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.", "sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db" } ] } }, "additionalProperties": true, "description": "Source-declared fields; action-specific and account validation still apply.", "minProperties": 1, "x-edoobox-readOnlyFields": [ "offer" ], "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns." }, "id": { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.", "examples": [ "date_012345abcdef_123456" ] } }, "additionalProperties": true, "required": [ "data" ] }, "examples": { "command": { "summary": "Synthetic request envelope; use fields documented by the resource.", "value": { "data": { "description": "Example" } } } } } } } ``` ## Antworten HTTP-Status und Antwortinhalt gemeinsam auswerten. Die folgenden Beschreibungen und Schemata sind die Angaben der Quelldatei. ```json { "200": { "description": "Ergebnis in data mit den beschriebenen Feldern; error und die Ergebniskennzeichen müssen ausgewertet werden.", "content": { "application/json": { "example": { "success": true, "error": false, "data": { "id": "date_012345abcdef_123456", "update": true } }, "schema": { "type": "object", "properties": { "success": { "type": "boolean" }, "error": { "type": [ "boolean", "string" ] }, "error_code": { "type": "string" }, "data": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^date_[a-f0-9]{12}_-?[0-9]+$", "description": "Öffentliche v2-ID im gewählten Konto; Beispiel ist synthetisch.", "examples": [ "date_012345abcdef_123456" ] }, "update": { "type": "boolean" }, "offer": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$", "description": "Öffentliche v2-ID im gewählten Konto; Beispiel ist synthetisch.", "examples": [ "offer_012345abcdef_123456" ] }, "date_start": { "anyOf": [ { "type": "string" }, { "const": false } ] }, "date_end": { "anyOf": [ { "type": "string" }, { "const": false } ] } }, "additionalProperties": true } }, "additionalProperties": true, "required": [ "id", "update" ] }, "type": { "type": "string" } }, "additionalProperties": true } } }, "headers": { "X-Edoobox-Revision": { "schema": { "type": "string", "pattern": "^[a-f0-9]{32}$" }, "description": "Rotated account revision supplied for the next action in one reviewed sequence." } } }, "400": { "description": "Invalid request.", "content": { "application/json": { "example": { "success": false, "error": "ED40006" } } } }, "401": { "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.", "content": { "application/json": { "example": { "success": false, "error": "ED40103" } } } }, "402": { "description": "Missing/invalid action data or subscription/operation restriction.", "content": { "application/json": { "example": { "success": false, "error": "ED80100" } } } }, "403": { "description": "Permission denied. Browser CORS rejection may have an empty body.", "content": { "application/json": { "example": { "success": false, "error": "ED40340" } } } }, "404": { "description": "Unknown resource/action or unsupported method.", "content": { "application/json": { "example": { "success": false, "error": "ED80019" } } } }, "409": { "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.", "content": { "application/json": { "schema": { "type": "object", "additionalProperties": true }, "example": { "error": "ED40901", "error_code": "mutation_revision_conflict" } } } }, "422": { "description": "Validation failed.", "content": { "application/json": { "example": { "success": false, "error": "ED80020" } } } }, "429": { "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.", "content": { "application/json": { "example": { "success": false, "error": "ED42902" } } }, "headers": { "Retry-After": { "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.", "schema": { "type": "string", "examples": [ "30" ] } } } }, "502": { "description": "Server-side operation failed.", "content": { "application/json": { "example": { "success": false, "error": "ED50201" } } } }, "503": { "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.", "headers": { "Retry-After": { "schema": { "type": "integer", "const": 1 } } }, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": true }, "example": { "error": "ED50301", "error_code": "mutation_revision_busy" } } } } } ``` ## Aufrufbeispiele Anpassen vor dem Ausführen. Platzhalter und veröffentlichte Beispiele sind synthetisch. Die Beispiele senden hier keine Anfrage; sie ergänzen keine unbekannten Pflichtfelder. ### cURL ```sh # Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich. # Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen. # cURL: PATH_* bereits URL-kodiert setzen. JavaScript/Python kodieren die unveränderten Pfadwerte selbst. : "${API_ORIGIN:?API_ORIGIN setzen}" : "${AUTH_BEARERAUTH:?AUTH_BEARERAUTH setzen}" : "${AUTH_ACCOUNTCONTEXT:?AUTH_ACCOUNTCONTEXT setzen}" : "${PATH_ID:?PATH_ID setzen}" cat > payload.json <<'EDOOBOX_JSON_EXAMPLE' { "data": { "description": "Example" } } EDOOBOX_JSON_EXAMPLE curl --request 'PUT' \ --url "${API_ORIGIN%/}"'/v2/date/'"${PATH_ID}"'' \ --header 'Authorization: Bearer '"${AUTH_BEARERAUTH}" \ --header 'edid: '"${AUTH_ACCOUNTCONTEXT}" \ --header 'Content-Type: application/json' \ --data-binary '@payload.json' ``` ### JavaScript (Node.js) ```javascript // Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich. // Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen. const required = (name) => { const value = process.env[name]; if (!value) throw new Error(`Set ${name}`); return value; }; let path = "/v2/date/{id}"; path = path.replaceAll("{id}", encodeURIComponent(required("PATH_ID"))); const origin = required('API_ORIGIN'); const url = new URL((origin.endsWith('/') ? origin.slice(0, -1) : origin) + path); const headers = {}; headers["Authorization"] = "Bearer " + required("AUTH_BEARERAUTH"); headers["edid"] = "" + required("AUTH_ACCOUNTCONTEXT"); headers['Content-Type'] = "application/json"; const body = JSON.stringify({ "data": { "description": "Example" } }); const response = await fetch(url, { method: "PUT", headers, body, redirect: 'manual' }); const text = await response.text(); console.log(response.status, text); // HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen. ``` ### Python ```python # Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich. # Request Body: synthetisches Beispiel aus der Spezifikation; Werte und Vollständigkeit vor Verwendung prüfen. import os import urllib.parse import urllib.request import urllib.error path = "/v2/date/{id}" path = path.replace("{id}", urllib.parse.quote(os.environ["PATH_ID"], safe="")) url = os.environ["API_ORIGIN"].rstrip("/") + path headers = {} headers["Authorization"] = "Bearer " + os.environ["AUTH_BEARERAUTH"] headers["edid"] = "" + os.environ["AUTH_ACCOUNTCONTEXT"] headers["Content-Type"] = "application/json" body = "{\"data\":{\"description\":\"Example\"}}".encode("utf-8") # Redirects nicht automatisch verfolgen. class NoRedirect(urllib.request.HTTPRedirectHandler): def redirect_request(self, req, fp, code, msg, headers, newurl): return None request = urllib.request.Request(url, headers=headers, method="PUT", data=body) try: response = urllib.request.build_opener(NoRedirect).open(request, timeout=30) except urllib.error.HTTPError as error: response = error print(response.status, response.read().decode("utf-8", errors="replace")) # HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen. ``` ## Vollständige Operationsdefinition und edoobox-Hinweise Alle Originalfelder einschliesslich `x-edoobox-*`, requestBody und responses bleiben erhalten. Teilweise dokumentierte Schemata sind kein vollständiger Validierungsvertrag. ```json { "operationId": "put_v2_date_id", "summary": "Termin aktualisieren", "description": "Ändert die übergebenen schreibbaren Felder in data für Termin. Die Pfad-ID wählt das Ziel; ein zusätzliches id im JSON-Umschlag hat im Legacy-Handler Vorrang. Nach erfolgreicher Änderung werden zusammengefasste Angebotsdaten (erster/letzter Termin und Ort) neu berechnet; data.offer kann die dabei ermittelten Angebotsdaten enthalten.", "tags": [ "date" ], "security": [ { "bearerAuth": [], "accountContext": [] }, { "sessionCookie": [], "accountContext": [] } ], "parameters": [ { "name": "id", "in": "path", "required": true, "description": "v2 object identifier in the selected account.", "schema": { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.", "examples": [ "date_012345abcdef_123456" ] } }, { "name": "language", "in": "header", "required": false, "description": "Account language code, where the resource supports setLanguage().", "schema": { "type": "string", "examples": [ "de" ] } }, { "name": "X-Edoobox-If-Revision", "in": "header", "required": false, "schema": { "type": "string", "pattern": "^[a-f0-9]{32}$", "examples": [ "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ] }, "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review." } ], "responses": { "200": { "description": "Ergebnis in data mit den beschriebenen Feldern; error und die Ergebniskennzeichen müssen ausgewertet werden.", "content": { "application/json": { "example": { "success": true, "error": false, "data": { "id": "date_012345abcdef_123456", "update": true } }, "schema": { "type": "object", "properties": { "success": { "type": "boolean" }, "error": { "type": [ "boolean", "string" ] }, "error_code": { "type": "string" }, "data": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^date_[a-f0-9]{12}_-?[0-9]+$", "description": "Öffentliche v2-ID im gewählten Konto; Beispiel ist synthetisch.", "examples": [ "date_012345abcdef_123456" ] }, "update": { "type": "boolean" }, "offer": { "type": "object", "properties": { "id": { "type": "string", "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$", "description": "Öffentliche v2-ID im gewählten Konto; Beispiel ist synthetisch.", "examples": [ "offer_012345abcdef_123456" ] }, "date_start": { "anyOf": [ { "type": "string" }, { "const": false } ] }, "date_end": { "anyOf": [ { "type": "string" }, { "const": false } ] } }, "additionalProperties": true } }, "additionalProperties": true, "required": [ "id", "update" ] }, "type": { "type": "string" } }, "additionalProperties": true } } }, "headers": { "X-Edoobox-Revision": { "schema": { "type": "string", "pattern": "^[a-f0-9]{32}$" }, "description": "Rotated account revision supplied for the next action in one reviewed sequence." } } }, "400": { "description": "Invalid request.", "content": { "application/json": { "example": { "success": false, "error": "ED40006" } } } }, "401": { "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.", "content": { "application/json": { "example": { "success": false, "error": "ED40103" } } } }, "402": { "description": "Missing/invalid action data or subscription/operation restriction.", "content": { "application/json": { "example": { "success": false, "error": "ED80100" } } } }, "403": { "description": "Permission denied. Browser CORS rejection may have an empty body.", "content": { "application/json": { "example": { "success": false, "error": "ED40340" } } } }, "404": { "description": "Unknown resource/action or unsupported method.", "content": { "application/json": { "example": { "success": false, "error": "ED80019" } } } }, "409": { "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.", "content": { "application/json": { "schema": { "type": "object", "additionalProperties": true }, "example": { "error": "ED40901", "error_code": "mutation_revision_conflict" } } } }, "422": { "description": "Validation failed.", "content": { "application/json": { "example": { "success": false, "error": "ED80020" } } } }, "429": { "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.", "content": { "application/json": { "example": { "success": false, "error": "ED42902" } } }, "headers": { "Retry-After": { "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.", "schema": { "type": "string", "examples": [ "30" ] } } } }, "502": { "description": "Server-side operation failed.", "content": { "application/json": { "example": { "success": false, "error": "ED50201" } } } }, "503": { "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.", "headers": { "Retry-After": { "schema": { "type": "integer", "const": 1 } } }, "content": { "application/json": { "schema": { "type": "object", "additionalProperties": true }, "example": { "error": "ED50301", "error_code": "mutation_revision_busy" } } } } }, "x-edoobox-mutates-state": true, "requestBody": { "required": true, "content": { "application/json": { "schema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": false, "description": { "x-edoobox-canonicalType": "string", "x-edoobox-maxStoredLength": 250, "x-edoobox-normalization": "The aP getter trims text, replaces newlines and limits the legacy escaped storage representation to maxStoredLength UTF-8 characters without splitting escape pairs; aQ decodes the stored representation. Non-string input becomes empty text. This getter limit is normalization, not a rejecting input maxLength or proof of a custom action hook or database column capacity.", "examples": [ "Example" ], "x-edoobox-sourceLine": 40 }, "date_start": { "x-edoobox-canonicalType": "string", "description": "dP uses PHP strtotime(); unparseable/falsy results normalize to zero. ISO 8601 text is the canonical client input; no rejecting JSON date-time format assertion is established here. Account/action hooks may add preconditions.", "examples": [ "2026-10-15T10:00:00+02:00" ], "x-edoobox-requiredOnCreate": true, "x-edoobox-sourceLine": 49 }, "date_end": { "x-edoobox-canonicalType": "string", "description": "dP uses PHP strtotime(); unparseable/falsy results normalize to zero. ISO 8601 text is the canonical client input; no rejecting JSON date-time format assertion is established here. Account/action hooks may add preconditions.", "examples": [ "2026-10-15T10:00:00+02:00" ], "x-edoobox-requiredOnCreate": true, "x-edoobox-sourceLine": 62 }, "place": { "anyOf": [ { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque v2 ID returned for a record in the selected account." }, { "const": false }, { "type": "null" }, { "const": "" }, { "const": 0 }, { "const": "0" } ], "description": "A falsey value clears the relation; a nonempty public v2 ID selects the relation.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 77, "reason": "Falsey write input becomes zero; otherwise the public relation ID is decoded.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" }, { "file": "application/models/v2/Date.php", "line": 84, "reason": "Response is a public relation ID or false.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "room": { "anyOf": [ { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque v2 ID returned for a record in the selected account." }, { "const": false }, { "type": "null" }, { "const": "" }, { "const": 0 }, { "const": "0" } ], "description": "A falsey value clears the relation; a nonempty public v2 ID selects the relation.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 90, "reason": "Falsey write input becomes zero; otherwise the public relation ID is decoded.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" }, { "file": "application/models/v2/Date.php", "line": 97, "reason": "Response is a public relation ID or false.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "offer": false, "leader": { "type": "array", "items": { "type": "string", "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$", "description": "Public admin v2 ID returned for a currently existing record in the selected account; signature, resource type and account ownership are checked by the native hook." }, "description": "Assigns administrators as leaders of this date within the current account.\nThe relation hook applies assignments separately from the storage getter.\n\nA JSON list of existing administrators in the selected account. The full deduplicated set is validated before assignment changes; [] removes all leaders. Wrong types, missing or foreign administrators reject the replacement.", "x-edoobox-contractSource": [ { "file": "application/models/v2/Datefunc.php", "line": 174, "lineEnd": 179, "reason": "PUT obtains a fully validated leader list before modifying assignments.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Datefunc.php", "line": 239, "lineEnd": 243, "reason": "POST relation callback consumes the same validated list.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Datefunc.php", "line": 266, "lineEnd": 289, "reason": "Strict list, typed admin decoding, positive IDs and deduplicated same-account user_info existence checks precede relation mutations.", "sha256": "66cb9ba28b2fba16b68a1f1d213c72010ba38750e8bdb34deb9d82bbdf630b1a" }, { "file": "application/models/v2/Date.php", "line": 131, "reason": "Response maps joined leaders to an array of public administrator IDs.", "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264" } ] }, "color": { "description": "Canonical #RGB/#RRGGBB. Also accepts unprefixed 4/7 hex chars; strings of other lengths clear. Length 4/7 nonhex rejects. Not equivalent to strict CSS hex regex. Canonical representations are shown; other PHP scalar coercions are not presented as rejection constraints.\n\nfalse or string length other than 4/7 -> empty aP string. At length4/7, hexadecimal after ltrim(all leading #) is required; nonhex returns false. Empty output -> false.\n\nRuntime preconditions / rejection: Length4/7 nonhex text returns strict false -> ED80100.", "x-edoobox-canonicalType": "string or false", "x-edoobox-schemaStatus": "source-reviewed", "examples": [ "#a1b", false ], "x-edoobox-contractSource": [ { "file": "application/models/v2/Date.php", "line": 153, "lineStart": 153, "lineEnd": 172, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "2ec5847a45af791e05db717f2e4f5946198cf290fc3c441b95d55d54f6045814", "reason": "Structure getter, output setter and field flags." }, { "file": "application/helpers/edooboxhelp_helper.php", "line": 11560, "lineStart": 11560, "lineEnd": 11606, "sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e", "spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f", "reason": "aP text normalization and aQ output. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength." }, { "file": "application/models/v2/Date.php", "line": 189, "lineStart": 189, "lineEnd": 202, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "d6306bef7b4617f803aff2ac2de39df94f0233667a11ff2c4b269b9a46d47987", "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct." }, { "file": "application/models/v2/Date.php", "line": 237, "lineStart": 237, "lineEnd": 244, "sha256": "6c2cc9b158ba60e211d7da77a920adc45001382fdb859ff62c711562d493b264", "spanSha256": "ccfc31e1b13732e53c6b5ff2f95400c7664e404c4bc10eb0645152b9e3f4bb47", "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct." }, { "file": "docs/openapi/reviews/domain-fields.json", "line": 1, "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.", "sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db" } ] } }, "additionalProperties": true, "description": "Source-declared fields; action-specific and account validation still apply.", "minProperties": 1, "x-edoobox-readOnlyFields": [ "offer" ], "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns." }, "id": { "type": "string", "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$", "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.", "examples": [ "date_012345abcdef_123456" ] } }, "additionalProperties": true, "required": [ "data" ] }, "examples": { "command": { "summary": "Synthetic request envelope; use fields documented by the resource.", "value": { "data": { "description": "Example" } } } } } } }, "x-edoobox-runtimeMutationGuard": true, "x-edoobox-documentationReview": { "file": "docs/openapi/operation-contracts/03-offers-places.json", "notes": [] }, "x-edoobox-source": { "file": "application/models/v2/Date.php", "method": "updateDate", "line": 237 }, "x-edoobox-documentationStatus": "reviewed", "x-edoobox-readOnly": false, "x-edoobox-safeForAutomation": false, "x-edoobox-permission": { "resource": "date", "short": "date", "checkedByDispatcher": true, "levels": [ 3, 4 ], "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope." } } ```