/v2/placeVeranstaltungsorte auflisten
Liest Veranstaltungsorte im gewählten Konto. filter, fields, order und limit steuern Auswahl, Felder, Sortierung und Seitengröße; response_type=array liefert eine Liste.
Operation-ID get_v2_place
Vertrag & Verhalten
- Dokumentationsstand
- reviewed
- Ändert Zustand
- Nein
- Als readOnly markiert
- Ja
- Für Automation markiert
- Ja
read
Authentifizierung
Eine der folgenden Alternativen muss erfüllt sein (ODER). Innerhalb jeder Alternative werden alle angegebenen Schemas gemeinsam benötigt (UND).
Alternative 1
bearerAuthhttp · bearerExisting edoobox v2 access token. Never substitute API key/secret headers.
Format: JWT
Security-Schema als JSON
{
"type": "http",
"scheme": "bearer",
"bearerFormat": "JWT",
"description": "Existing edoobox v2 access token. Never substitute API key/secret headers."
}accountContextapiKeySelected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.
header: edid
Security-Schema als JSON
{
"type": "apiKey",
"in": "header",
"name": "edid",
"description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
}Alternative 2
sessionCookieapiKeyExisting browser login session, with the same permission checks as Bearer authentication.
cookie: _edlogin
Security-Schema als JSON
{
"type": "apiKey",
"in": "cookie",
"name": "_edlogin",
"description": "Existing browser login session, with the same permission checks as Bearer authentication."
}accountContextapiKeySelected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.
header: edid
Security-Schema als JSON
{
"type": "apiKey",
"in": "header",
"name": "edid",
"description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
}Parameter
Query-Parameter
fieldsoptionalJSON-encoded fields value consumed by RequestAPIData / API_DATA; specific actions may ignore it.
application/json
Schema-Beispiel
[
"id"
]Array-Elemente
Vollständiges Schema als JSON
{
"type": "array",
"items": {
"type": "string"
},
"examples": [
[
"id"
]
]
}Beispiel
[
"id"
]filteroptionalJSON-encoded filter value consumed by RequestAPIData / API_DATA; specific actions may ignore it.
application/json
Schema-Beispiel
[
{
"property": "id",
"expression": "=",
"value": "place_012345abcdef_123456"
}
]Array-Elemente
property string expression string value Typ nicht eingeschränkt Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
Vollständiges Schema als JSON
{
"type": "array",
"items": {
"type": "object",
"properties": {
"property": {
"type": "string"
},
"expression": {
"type": "string"
},
"value": {}
},
"additionalProperties": true
},
"examples": [
[
{
"property": "id",
"expression": "=",
"value": "place_012345abcdef_123456"
}
]
]
}Beispiel
[
{
"property": "id",
"expression": "=",
"value": "place_012345abcdef_123456"
}
]limitoptionalJSON-encoded limit value consumed by RequestAPIData / API_DATA; specific actions may ignore it.
application/json
Schema-Beispiel
{
"start": 0,
"reply": 25
}start integer - minimum
0
Standardwert: 0
reply integer - maximum
2000
Standardwert: 100
Vollständiges Schema als JSON
{
"type": "object",
"properties": {
"start": {
"type": "integer",
"minimum": 0,
"default": 0
},
"reply": {
"type": "integer",
"maximum": 2000,
"default": 100
}
},
"examples": [
{
"start": 0,
"reply": 25
}
]
}Beispiel
{
"start": 0,
"reply": 25
}orderoptionalJSON-encoded order value consumed by RequestAPIData / API_DATA; specific actions may ignore it.
application/json
Schema-Beispiel
[
{
"property": "id",
"value": "ASC"
}
]Array-Elemente
property string value string "ASC""DESC"Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
Vollständiges Schema als JSON
{
"type": "array",
"items": {
"type": "object",
"properties": {
"property": {
"type": "string"
},
"value": {
"type": "string",
"enum": [
"ASC",
"DESC"
]
}
},
"additionalProperties": true
},
"examples": [
[
{
"property": "id",
"value": "ASC"
}
]
]
}Beispiel
[
{
"property": "id",
"value": "ASC"
}
]response_typeoptionalControls generic collection representation; default is an ID-keyed object.
"array""object"Schema-Beispiel
"array"Vollständiges Schema als JSON
{
"type": "string",
"enum": [
"array",
"object"
],
"examples": [
"array"
]
}Header
languageoptionalAccount language code, where the resource supports setLanguage().
Schema-Beispiel
"de"Vollständiges Schema als JSON
{
"type": "string",
"examples": [
"de"
]
}Request Body
Kein Request Body in der Spezifikation beschrieben.
Antworten
9HTTP-Status und Antwortinhalt gemeinsam auswerten. In dieser API können auch Antworten mit HTTP 200 einen Fehler enthalten.
200application/json
Response; inspect error and success as legacy failures may also use HTTP 200.
application/json
success boolean error boolean | string error_code string data Typ nicht eingeschränkt Generic collection (ID-keyed object by default, array for response_type=array) or resource object. Structure fields are partial and action-dependent.
anyOf · Mindestens eine Variante muss passen
Variante 1 object id string Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.
- pattern
"^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"place_012345abcdef_123456"status boolean Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 38
}name string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 47
}shortcut string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 60
}lat string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 69
}long string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 78
}street string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}postcode string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}town string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}country string - pattern
"^country_[a-f0-9]{12}_-?[0-9]+$"
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}automatic_positioning boolean Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
Variante 2 array Array-Elemente
id string Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.
- pattern
"^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"place_012345abcdef_123456"status boolean Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 38
}name string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 47
}shortcut string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 60
}lat string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 69
}long string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 78
}street string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}postcode string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}town string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}country string - pattern
"^country_[a-f0-9]{12}_-?[0-9]+$"
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}automatic_positioning boolean Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
Variante 3 object Schema für zusätzliche Felder
id string Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.
- pattern
"^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"place_012345abcdef_123456"status boolean Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 38
}name string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 47
}shortcut string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 60
}lat string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 69
}long string Response field from the resource Structure; dynamic values remain unconstrained.
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-sourceLine": 78
}street string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}postcode string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}town string Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}country string - pattern
"^country_[a-f0-9]{12}_-?[0-9]+$"
Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}automatic_positioning boolean Feld-Metadaten aus der Spezifikation
{
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
type string Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.
Vollständiges Schema als JSON
{
"type": "object",
"properties": {
"success": {
"type": "boolean"
},
"error": {
"type": [
"boolean",
"string"
]
},
"error_code": {
"type": "string"
},
"data": {
"description": "Generic collection (ID-keyed object by default, array for response_type=array) or resource object. Structure fields are partial and action-dependent.",
"anyOf": [
{
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
},
{
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
}
},
{
"type": "object",
"additionalProperties": {
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
}
}
]
},
"type": {
"type": "string"
}
},
"additionalProperties": true
}Beispiel
{
"success": true,
"error": false,
"data": {
"place_012345abcdef_123456": {
"id": "place_012345abcdef_123456"
}
},
"limit": {
"start": 0,
"reply": 100,
"total": 1
}
}400application/json
Invalid request.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED40006"
}401application/json
Missing/expired token, missing account context, account paused or model-specific authorization failure.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED40103"
}402application/json
Missing/invalid action data or subscription/operation restriction.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED80100"
}403application/json
Permission denied. Browser CORS rejection may have an empty body.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED40340"
}404application/json
Unknown resource/action or unsupported method.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED80019"
}422application/json
Validation failed.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED80020"
}429application/json
Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.
Response Header
Retry-After
Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.
Schema-Beispiel
"30"Vollständiges Schema als JSON
{
"type": "string",
"examples": [
"30"
]
}application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED42902"
}502application/json
Server-side operation failed.
application/json
Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.
Beispiel
{
"success": false,
"error": "ED50201"
}Quelle & Metadaten
application/models/v2/Place.php:225getPlace()Diese Angaben stammen unverändert aus der gelieferten OpenAPI-Datei. Zusätzliche Freigaben, Vorbedingungen, sensible Felder und Hinweise stehen in den Erweiterungen.
x-edoobox-mutates-state
falsex-edoobox-runtimeMutationGuard
falsex-edoobox-get-effect
"read"x-edoobox-documentationReview
{
"file": "docs/openapi/operation-contracts/03-offers-places.json",
"notes": []
}x-edoobox-source
{
"file": "application/models/v2/Place.php",
"method": "getPlace",
"line": 225
}x-edoobox-documentationStatus
"reviewed"x-edoobox-readOnly
truex-edoobox-safeForAutomation
truex-edoobox-permission
{
"resource": "place",
"short": "plac",
"checkedByDispatcher": true,
"levels": [
1,
3,
4
],
"description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
}Vollständige Operation als JSON
{
"operationId": "get_v2_place",
"summary": "Veranstaltungsorte auflisten",
"description": "Liest Veranstaltungsorte im gewählten Konto. filter, fields, order und limit steuern Auswahl, Felder, Sortierung und Seitengröße; response_type=array liefert eine Liste.",
"tags": [
"place"
],
"security": [
{
"bearerAuth": [],
"accountContext": []
},
{
"sessionCookie": [],
"accountContext": []
}
],
"parameters": [
{
"name": "fields",
"in": "query",
"required": false,
"description": "JSON-encoded fields value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
"content": {
"application/json": {
"schema": {
"type": "array",
"items": {
"type": "string"
},
"examples": [
[
"id"
]
]
},
"example": [
"id"
]
}
}
},
{
"name": "filter",
"in": "query",
"required": false,
"description": "JSON-encoded filter value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
"content": {
"application/json": {
"schema": {
"type": "array",
"items": {
"type": "object",
"properties": {
"property": {
"type": "string"
},
"expression": {
"type": "string"
},
"value": {}
},
"additionalProperties": true
},
"examples": [
[
{
"property": "id",
"expression": "=",
"value": "place_012345abcdef_123456"
}
]
]
},
"example": [
{
"property": "id",
"expression": "=",
"value": "place_012345abcdef_123456"
}
]
}
}
},
{
"name": "limit",
"in": "query",
"required": false,
"description": "JSON-encoded limit value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
"content": {
"application/json": {
"schema": {
"type": "object",
"properties": {
"start": {
"type": "integer",
"minimum": 0,
"default": 0
},
"reply": {
"type": "integer",
"maximum": 2000,
"default": 100
}
},
"examples": [
{
"start": 0,
"reply": 25
}
]
},
"example": {
"start": 0,
"reply": 25
}
}
}
},
{
"name": "order",
"in": "query",
"required": false,
"description": "JSON-encoded order value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
"content": {
"application/json": {
"schema": {
"type": "array",
"items": {
"type": "object",
"properties": {
"property": {
"type": "string"
},
"value": {
"type": "string",
"enum": [
"ASC",
"DESC"
]
}
},
"additionalProperties": true
},
"examples": [
[
{
"property": "id",
"value": "ASC"
}
]
]
},
"example": [
{
"property": "id",
"value": "ASC"
}
]
}
}
},
{
"name": "response_type",
"in": "query",
"required": false,
"schema": {
"type": "string",
"enum": [
"array",
"object"
],
"examples": [
"array"
]
},
"description": "Controls generic collection representation; default is an ID-keyed object."
},
{
"name": "language",
"in": "header",
"required": false,
"description": "Account language code, where the resource supports setLanguage().",
"schema": {
"type": "string",
"examples": [
"de"
]
}
}
],
"responses": {
"200": {
"description": "Response; inspect error and success as legacy failures may also use HTTP 200.",
"content": {
"application/json": {
"example": {
"success": true,
"error": false,
"data": {
"place_012345abcdef_123456": {
"id": "place_012345abcdef_123456"
}
},
"limit": {
"start": 0,
"reply": 100,
"total": 1
}
},
"schema": {
"type": "object",
"properties": {
"success": {
"type": "boolean"
},
"error": {
"type": [
"boolean",
"string"
]
},
"error_code": {
"type": "string"
},
"data": {
"description": "Generic collection (ID-keyed object by default, array for response_type=array) or resource object. Structure fields are partial and action-dependent.",
"anyOf": [
{
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
},
{
"type": "array",
"items": {
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
}
},
{
"type": "object",
"additionalProperties": {
"type": "object",
"properties": {
"id": {
"type": "string",
"pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
"description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
"examples": [
"place_012345abcdef_123456"
]
},
"status": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 38,
"type": "boolean"
},
"name": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 47,
"type": "string"
},
"shortcut": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 60,
"type": "string"
},
"lat": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 69,
"type": "string"
},
"long": {
"description": "Response field from the resource Structure; dynamic values remain unconstrained.",
"x-edoobox-sourceLine": 78,
"type": "string"
},
"street": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 87,
"lineStart": 87,
"lineEnd": 96,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "5a6bf98eca49df40f27438974f92a85486e29811c3774ff99e44c3edbf1299e4",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"postcode": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 97,
"lineStart": 97,
"lineEnd": 106,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "39515d089e7e032f637a9a1eaa57182cd76f2a781057eefdd2c29130fff92f72",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"town": {
"type": "string",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 107,
"lineStart": 107,
"lineEnd": 116,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9b657f3f3e23f190502c1869e4561c1a728d1f80d0ef4937f88b5424164b9bb2",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "application/helpers/edooboxhelp_helper.php",
"line": 11560,
"lineStart": 11560,
"lineEnd": 11606,
"sha256": "090d351b5bde81813c7a829bedf2f1f9f978fce5765f246989779f996198934e",
"spanSha256": "2172cc49e4bcdb6840448b62929037cb9b90c299da3cb6fb0be6a8782881750f",
"reason": "Actual aP inbound string/nonstring handling and aQ outbound conversion. Reviewed aP update preserves legacy encoded storage and aQ read semantics. Truncation removes a dangling final escape backslash rather than creating a broken SQL literal; it remains normalization, not a rejecting raw input maxLength."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"country": {
"type": "string",
"pattern": "^country_[a-f0-9]{12}_-?[0-9]+$",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 117,
"lineStart": 117,
"lineEnd": 130,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "70c9e92d6ef5d8263f0609437598b8a89b475fad34b930847ca8da1dc58b0bb9",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/libraries/edoobox/helper/Api.php",
"line": 8,
"lineStart": 8,
"lineEnd": 106,
"sha256": "b22e6f0474a07f356b625fe20e8b1d15fa87a104f9c155e04978e4c60c8df9fd",
"spanSha256": "9845d13d49fb8d4ca3934aca41a2563ccdb40a3c24b35ad926413ed493ed4816",
"reason": "Actual ID encoder returns type_nan_0 for nonnumeric inputs; decoder is bypassed."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
},
"automatic_positioning": {
"type": "boolean",
"x-edoobox-contractSource": [
{
"file": "application/models/v2/Place.php",
"line": 131,
"lineStart": 131,
"lineEnd": 140,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "9d20b93ec324cbd68a1815f3bf957f3c97b8da4aac409cb6f21ea99ce082725b",
"reason": "Structure getter, output setter and field flags."
},
{
"file": "application/models/v2/Place.php",
"line": 157,
"lineStart": 157,
"lineEnd": 193,
"sha256": "410cf012c1c4f231f46ce98547f69fd93925176cfc07cced44b330fcfefb87c1",
"spanSha256": "e1d9787645b3b99996e0e93c07b8a9f73fd5f8575936077f169c25f1db6237c4",
"reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 77,
"lineStart": 77,
"lineEnd": 97,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "345667d8fdafd0ac9005a07f197967525a4de48d0d59f0013f49223095f40931",
"reason": "Final fixed shared hook aggregates every supplied field assigned to this callable, invokes inbound get(value,fid,true), rejects strict false before address/geocoder reads or writes."
},
{
"file": "application/models/v2/Placefunc.php",
"line": 99,
"lineStart": 99,
"lineEnd": 169,
"sha256": "e1a54837896d2bc7a5448f59b2a9dfa9e223390af14097707b5ad8662550f939",
"spanSha256": "be93cef9daf5ea84d2bed11a5ad567e4fcf372b67c1ccca622c9d2a1d7f8a83d",
"reason": "Final fixed owned place query requires id+fid, throws ED80020 when absent, merges all normalized address components, uses requested automatic-positioning state before geocoding."
},
{
"file": "application/models/v2/API_DATA.php",
"line": 1760,
"lineStart": 1760,
"lineEnd": 1884,
"sha256": "c0e15d26a7a4f3fb3c25e35557d4420ad395b2af3925caec292de08e32ebf44c",
"spanSha256": "eadc56a4dc19ac584c53b2a0c3afa15949c7320db4a7b0a2a8c34ef82f170ab5",
"reason": "Actual generic update decodes target and checks ownership before shared callback; callback runs once but now aggregates all five fields. Final joined writer rejects strict-false getters and unresolved/multi-join metadata before writes, anchors the joined row to the own parent (including account-key parents), and preserves constant join.where constraints as additional AND predicates. Join-only writes verify the own existing parent. Generic simple-owner hard/soft DELETE now verifies the own existing parent before hooks and repeats FID in DML; missing optional hook data no longer warns. Read, insert, signed authority and GET-effect classifications are unchanged."
},
{
"file": "docs/openapi/reviews/domain-fields.json",
"line": 1,
"reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
"sha256": "6b38123b776600a328c8e844b0ecd6e0a579144081a345e335400dad52a9a5db"
}
]
}
},
"additionalProperties": true
}
}
]
},
"type": {
"type": "string"
}
},
"additionalProperties": true
}
}
}
},
"400": {
"description": "Invalid request.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED40006"
}
}
}
},
"401": {
"description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED40103"
}
}
}
},
"402": {
"description": "Missing/invalid action data or subscription/operation restriction.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED80100"
}
}
}
},
"403": {
"description": "Permission denied. Browser CORS rejection may have an empty body.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED40340"
}
}
}
},
"404": {
"description": "Unknown resource/action or unsupported method.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED80019"
}
}
}
},
"422": {
"description": "Validation failed.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED80020"
}
}
}
},
"429": {
"description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED42902"
}
}
},
"headers": {
"Retry-After": {
"description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
"schema": {
"type": "string",
"examples": [
"30"
]
}
}
}
},
"502": {
"description": "Server-side operation failed.",
"content": {
"application/json": {
"example": {
"success": false,
"error": "ED50201"
}
}
}
}
},
"x-edoobox-mutates-state": false,
"x-edoobox-runtimeMutationGuard": false,
"x-edoobox-get-effect": "read",
"x-edoobox-documentationReview": {
"file": "docs/openapi/operation-contracts/03-offers-places.json",
"notes": []
},
"x-edoobox-source": {
"file": "application/models/v2/Place.php",
"method": "getPlace",
"line": 225
},
"x-edoobox-documentationStatus": "reviewed",
"x-edoobox-readOnly": true,
"x-edoobox-safeForAutomation": true,
"x-edoobox-permission": {
"resource": "place",
"short": "plac",
"checkedByDispatcher": true,
"levels": [
1,
3,
4
],
"description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
}
}