Dropto Support API

openapi: 3.2.0
info:
  title: Drop2Run.Api | v1 Support API
  version: 1.0.0
servers:
- description: Production
  url: https://dropto.run
tags:
- name: Support
paths:
  /api/support/reports:
    post:
      operationId: ReportProblem
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ReportProblemRequest'
        required: true
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportProblemResponse'
          description: OK
        '400':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemDetails'
          description: Bad Request
        '429':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemDetails'
          description: Too Many Requests
        '503':
          content:
            application/problem+json:
              schema:
                $ref: '#/components/schemas/ProblemDetails'
          description: Service Unavailable
      security:
      - session: []
      - accessToken: []
      summary: Reports a problem with the product.
      tags:
      - Support
components:
  schemas:
    ReportProblemResponse:
      description: Response of `POST /support/reports`.
      properties:
        reportId:
          description: Reference for the report, for the person to quote if they write again.
          type: string
      required:
      - reportId
      type: object
    SupportReportContext:
      description: 'What a client knew about the failure being reported. Every field is the client''s claim; none is checked

        against the database.'
      properties:
        clientVersion:
          description: The client's own version.
          maxLength: 64
          minLength: 0
          type:
          - 'null'
          - string
        code:
          description: The error code the client was showing.
          maxLength: 100
          minLength: 0
          type:
          - 'null'
          - string
        deployId:
          description: The deploy the client was working on.
          pattern: ^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$
          type:
          - 'null'
          - string
        siteId:
          description: The site the client was working on.
          pattern: ^[0-9A-HJKMNP-TV-Za-hjkmnp-tv-z]{26}$
          type:
          - 'null'
          - string
        source:
          description: 'Which client: `web`, `cli`, `mcp` or `link`. `web` when absent.'
          maxLength: 16
          minLength: 0
          type:
          - 'null'
          - string
        traceId:
          description: The API trace id the client was showing.
          maxLength: 128
          minLength: 0
          type:
          - 'null'
          - string
        url:
          description: The page the report was sent from.
          maxLength: 2048
          minLength: 0
          type:
          - 'null'
          - string
      type: object
    ReportProblemRequest:
      description: Request body of `POST /support/reports`.
      properties:
        context:
          oneOf:
          - type: 'null'
          - $ref: '#/components/schemas/SupportReportContext'
            description: What the client knew about the failure, filled in by the client.
            __uniqueRefKey: '#/components/schemas/SupportReportContext__8'
        email:
          description: Where to answer. Read only without a session; a signed-in user's own address is used.
          maxLength: 320
          minLength: 0
          type:
          - 'null'
          - string
        message:
          description: What happened, in the person's words.
          maxLength: 4000
          minLength: 3
          type: string
        turnstileToken:
          description: The bot check's token. Required without a session, ignored with one.
          maxLength: 4096
          type:
          - 'null'
          - string
      required:
      - message
      type: object
    ProblemDetails:
      properties:
        detail:
          type:
          - 'null'
          - string
        instance:
          type:
          - 'null'
          - string
        status:
          format: int32
          pattern: ^-?(?:0|[1-9]\d*)$
          type:
          - 'null'
          - integer
          - string
        title:
          type:
          - 'null'
          - string
        type:
          type:
          - 'null'
          - string
      type: object
  securitySchemes:
    accessToken:
      description: 'A personal access token, created at /account/tokens. Sent as `Authorization: Bearer d2r_...`. A rejected token answers 401 with `invalid_token`, which is deliberately distinct from the 403 a valid credential gets for something it may not do.'
      scheme: bearer
      type: http
    claimToken:
      description: Returned once when an anonymous site is created, and the only credential that site has until somebody signs in and claims it.
      in: header
      name: X-Claim-Token
      type: apiKey
    session:
      description: The browser session, set by signing in with Google. HttpOnly, so a script cannot read it and a client outside a browser cannot send it.
      in: cookie
      name: d2r_session
      type: apiKey