@rathnasgala2/schemas 3.10.0 → 3.11.0

package/THIRD_PARTY_LICENSES.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "@rathnasgala2/schemas@3.10.0",
+  "package": "@rathnasgala2/schemas@3.11.0",
   "source": "package-lock.json",
   "dependencies": [
     {

package/docs/catalogs/app-components.json

@@ -6232,6 +6232,34 @@
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
     },
+    {
+      "contentKey": "platform.users.screen.conflicted.recovery",
+      "defaultMessage": "Refresh the page, review the current version, and reconfirm before resubmitting.",
+      "description": "Default recovery guidance for the platform.users screen in the CONFLICTED state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.conflicted.status",
+      "defaultMessage": "The resource changed; review the current version.",
+      "description": "Closed default status text for the platform.users screen in the CONFLICTED state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.dirty.recovery",
+      "defaultMessage": "Save or submit your changes, or discard them.",
+      "description": "Default recovery guidance for the platform.users screen in the DIRTY state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.dirty.status",
+      "defaultMessage": "Changes have not been submitted.",
+      "description": "Closed default status text for the platform.users screen in the DIRTY state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
     {
       "contentKey": "platform.users.screen.empty.recovery",
       "defaultMessage": "Try a different search or filter.",
@@ -6302,6 +6330,20 @@
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
     },
+    {
+      "contentKey": "platform.users.screen.rate_limited.recovery",
+      "defaultMessage": "Wait for the indicated time before retrying.",
+      "description": "Default recovery guidance for the platform.users screen in the RATE_LIMITED state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.rate_limited.status",
+      "defaultMessage": "Too many requests; wait before retrying.",
+      "description": "Closed default status text for the platform.users screen in the RATE_LIMITED state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
     {
       "contentKey": "platform.users.screen.ready.recovery",
       "defaultMessage": "No further action is needed.",
@@ -6358,6 +6400,20 @@
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
     },
+    {
+      "contentKey": "platform.users.screen.submitting.recovery",
+      "defaultMessage": "This usually takes a moment.",
+      "description": "Default recovery guidance for the platform.users screen in the SUBMITTING state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.submitting.status",
+      "defaultMessage": "Submitting…",
+      "description": "Closed default status text for the platform.users screen in the SUBMITTING state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
     {
       "contentKey": "platform.users.screen.success.recovery",
       "defaultMessage": "No further action is needed.",
@@ -6386,6 +6442,20 @@
       "placeholders": {},
       "sensitivity": "AUTHENTICATED"
     },
+    {
+      "contentKey": "platform.users.screen.validating.recovery",
+      "defaultMessage": "This usually takes a moment.",
+      "description": "Default recovery guidance for the platform.users screen in the VALIDATING state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
+    {
+      "contentKey": "platform.users.screen.validating.status",
+      "defaultMessage": "Validating…",
+      "description": "Closed default status text for the platform.users screen in the VALIDATING state.",
+      "placeholders": {},
+      "sensitivity": "AUTHENTICATED"
+    },
     {
       "contentKey": "platform.webhooks.by-event-id.screen.capability_unavailable.recovery",
       "defaultMessage": "This isn't available yet. Check back later, or contact support if you need it now.",
@@ -8711,5 +8781,5 @@
       "sensitivity": "AUTHENTICATED"
     }
   ],
-  "digest": "sha256:d0bd001521ad67c76424fd5fc2f98c1f06b3d2731ed7a642bc0d7a6ea9865c49"
+  "digest": "sha256:3d639f35e25361918ebb8ee613c4af3629b7f240df57a61a8ca8d7390852694f"
 }

package/docs/catalogs/app-routes.json

@@ -124,6 +124,8 @@
         "getGithubInstallations",
         "getSelfAuthenticators",
         "getSelfReaderConnections",
+        "postSelfContactEmailGrant",
+        "postSelfContactEmailWithdraw",
         "postSelfIdentityLinks"
       ],
       "componentIds": [
@@ -2234,18 +2236,28 @@
       "pathTemplate": "/platform/users",
       "screenId": "platform.users.screen",
       "authenticationClass": "SESSION_REQUIRED",
-      "capabilityKeys": ["platform.users.view"],
-      "apiOperationIds": ["getPlatformUsers"],
+      "capabilityKeys": ["platform.users.contact", "platform.users.view"],
+      "apiOperationIds": [
+        "getPlatformUsers",
+        "postPlatformUsersByPersonIdContact"
+      ],
       "componentIds": [
         "AppShell",
         "Breadcrumbs",
         "ContextHeader",
         "StatePanel",
+        "FormField",
+        "ValidationSummary",
+        "AsyncCommand",
         "DataTable"
       ],
       "contentKeyIds": [
         "platform.users.screen.capability_unavailable.recovery",
         "platform.users.screen.capability_unavailable.status",
+        "platform.users.screen.conflicted.recovery",
+        "platform.users.screen.conflicted.status",
+        "platform.users.screen.dirty.recovery",
+        "platform.users.screen.dirty.status",
         "platform.users.screen.empty.recovery",
         "platform.users.screen.empty.status",
         "platform.users.screen.forbidden.recovery",
@@ -2256,6 +2268,8 @@
         "platform.users.screen.not_found.status",
         "platform.users.screen.offline.recovery",
         "platform.users.screen.offline.status",
+        "platform.users.screen.rate_limited.recovery",
+        "platform.users.screen.rate_limited.status",
         "platform.users.screen.ready.recovery",
         "platform.users.screen.ready.status",
         "platform.users.screen.ready.summary",
@@ -2264,10 +2278,14 @@
         "platform.users.screen.reconciling.status",
         "platform.users.screen.refreshing.recovery",
         "platform.users.screen.refreshing.status",
+        "platform.users.screen.submitting.recovery",
+        "platform.users.screen.submitting.status",
         "platform.users.screen.success.recovery",
         "platform.users.screen.success.status",
         "platform.users.screen.terminal_failure.recovery",
-        "platform.users.screen.terminal_failure.status"
+        "platform.users.screen.terminal_failure.status",
+        "platform.users.screen.validating.recovery",
+        "platform.users.screen.validating.status"
       ],
       "tokenBearing": false,
       "requiredStates": [
@@ -2281,6 +2299,11 @@
         "CAPABILITY_UNAVAILABLE",
         "RECONCILING",
         "TERMINAL_FAILURE",
+        "DIRTY",
+        "VALIDATING",
+        "SUBMITTING",
+        "CONFLICTED",
+        "RATE_LIMITED",
         "SUCCESS"
       ]
     },
@@ -3181,5 +3204,5 @@
       ]
     }
   ],
-  "digest": "sha256:89469bb975394d8bb896f2419d425f10ade1c2460780b656fec4ce084360f279"
+  "digest": "sha256:c7b9a0364eed013e5fb791e4de022b7630e261717325951bdba044779df1c84c"
 }

package/docs/catalogs/schema-inventory.json

@@ -219,9 +219,9 @@
       "version": "2.0.0",
       "path": "openapi/openapi.yaml",
       "materialized": true,
-      "sourceDigest": "sha256:6cb44277f117370a70e3828a1a5fdadbfbd1ddb5df3e84b317acf205d5913aeb",
+      "sourceDigest": "sha256:b5ab8902d0a3d6990cd2c4bcdc51e6f007ceb33d65119fc2f5e526c0a2260bb1",
       "typescriptRootType": null
     }
   ],
-  "digest": "sha256:d4e90b9bc72fc1069961b4d28223815fd441948bfd67180c01f81ffbd7008eca"
+  "digest": "sha256:1674799155c63105805d8c03254eb52a93e8b0a2db47890d75b79abc9edbd274"
 }

package/openapi/http-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "2.0.0",
   "sourceDesignRevision": "a53052955ceb6c1aa10c886289dc832eedfe6de0a00004df07d353ac19c4403a",
-  "openApiDigest": "sha256:6cb44277f117370a70e3828a1a5fdadbfbd1ddb5df3e84b317acf205d5913aeb",
+  "openApiDigest": "sha256:b5ab8902d0a3d6990cd2c4bcdc51e6f007ceb33d65119fc2f5e526c0a2260bb1",
   "operations": [
     {
       "operationId": "getInternalHealth",
@@ -1604,6 +1604,18 @@
       "actionGrant": "none",
       "sourceFragment": "platform"
     },
+    {
+      "operationId": "postPlatformUsersByPersonIdContact",
+      "method": "POST",
+      "path": "/v2/platform/users/{personId}:contact",
+      "purpose": "contact platform user",
+      "capabilityKey": "platform.users.contact",
+      "conditionalCapabilityKeys": [],
+      "activationGate": "MVP",
+      "assuranceClass": "SESSION",
+      "actionGrant": "none",
+      "sourceFragment": "platform"
+    },
     {
       "operationId": "getPlatformWebhookEvents",
       "method": "GET",
@@ -1844,6 +1856,30 @@
       "actionGrant": "none",
       "sourceFragment": "self"
     },
+    {
+      "operationId": "postSelfContactEmailGrant",
+      "method": "POST",
+      "path": "/v2/self/contact-email:grant",
+      "purpose": "grant contact email",
+      "capabilityKey": null,
+      "conditionalCapabilityKeys": [],
+      "activationGate": "MVP",
+      "assuranceClass": "SESSION",
+      "actionGrant": "none",
+      "sourceFragment": "self"
+    },
+    {
+      "operationId": "postSelfContactEmailWithdraw",
+      "method": "POST",
+      "path": "/v2/self/contact-email:withdraw",
+      "purpose": "withdraw contact email",
+      "capabilityKey": null,
+      "conditionalCapabilityKeys": [],
+      "activationGate": "MVP",
+      "assuranceClass": "SESSION",
+      "actionGrant": "none",
+      "sourceFragment": "self"
+    },
     {
       "operationId": "getSelfExports",
       "method": "GET",
@@ -2121,5 +2157,5 @@
       "sourceFragment": "workloads"
     }
   ],
-  "digest": "sha256:161281d4484ec95bf4980bbd15129efca7630a14a23ba66d30b3820294df714b"
+  "digest": "sha256:e0e3e201cb7a5b7004e158e7bc48261f82817929bdadfde6d4aa0373e9174ecd"
 }

package/openapi/openapi.yaml

@@ -1048,6 +1048,27 @@ components:
         - detail
         - reversible
       type: object
+    ContactEmail:
+      additionalProperties: false
+      description: The verified GitHub primary email the person agreed to receive account and security notices at. The full address never leaves the server; only a masked form is shown.
+      properties:
+        maskedAddress:
+          description: Masked form such as `a…d@example.com`, never the full address. Null or absent unless `state` is `ON_FILE`.
+          maxLength: 320
+          type:
+            - string
+            - "null"
+        state:
+          enum:
+            - NONE
+            - ON_FILE
+            - WITHDRAWN
+          type: string
+        updatedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+      required:
+        - state
+      type: object
     ContentChangeAppearanceEntry:
       additionalProperties: false
       description: |
@@ -4222,6 +4243,8 @@ components:
           uniqueItems: true
         closure:
           $ref: "#/components/schemas/SessionClosure"
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
         credentialEpoch:
           format: int64
           minimum: 0
@@ -6901,6 +6924,9 @@ components:
     PlatformUser:
       additionalProperties: false
       properties:
+        contactEmailOnFile:
+          description: Whether a contact email the person agreed to is on file. The address itself is never returned.
+          type: boolean
         createdAt:
           $ref: "#/components/schemas/PortableProblemRfc3339"
         displayName:
@@ -6943,6 +6969,7 @@ components:
         - lastSignInAt
         - publicationCount
         - planTiers
+        - contactEmailOnFile
       type: object
     PlatformWebhookEvent:
       additionalProperties: false
@@ -14869,6 +14896,46 @@ components:
       required:
         - client
       type: object
+    PostPlatformUsersByPersonIdContactRequest:
+      additionalProperties: false
+      properties:
+        body:
+          maxLength: 5000
+          minLength: 1
+          type: string
+        category:
+          enum:
+            - ACCOUNT
+            - SECURITY
+            - SERVICE
+          type: string
+        reason:
+          $ref: "#/components/schemas/PlatformOperatorReasonCode"
+        subject:
+          maxLength: 200
+          minLength: 1
+          type: string
+      required:
+        - category
+        - subject
+        - body
+        - reason
+      type: object
+    PostPlatformUsersByPersonIdContactResponse:
+      additionalProperties: false
+      properties:
+        messageId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          enum:
+            - QUEUED
+          type: string
+      required:
+        - messageId
+        - state
+      type: object
     PostPublicCommentsByCommentIdAppealsRequest:
       additionalProperties: false
       properties:
@@ -15119,6 +15186,22 @@ components:
         - state
         - fenceAt
       type: object
+    PostSelfContactEmailGrantResponse:
+      additionalProperties: false
+      properties:
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
+      required:
+        - contactEmail
+      type: object
+    PostSelfContactEmailWithdrawResponse:
+      additionalProperties: false
+      properties:
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
+      required:
+        - contactEmail
+      type: object
     PostSelfExportsByExportIdDownloadResponse:
       additionalProperties: false
       properties:
@@ -48601,7 +48684,8 @@ paths:
                   value:
                     hasMore: false
                     items:
-                      - createdAt: "2026-09-01T12:00:00.000Z"
+                      - contactEmailOnFile: true
+                        createdAt: "2026-09-01T12:00:00.000Z"
                         displayName: Ada Reader
                         lastSignInAt: "2026-10-10T11:30:00.000Z"
                         login: ada-reader
@@ -48650,6 +48734,140 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: NONE
+  /v2/platform/users/{personId}:contact:
+    post:
+      description: |
+        Operators only, with recent authentication. Queues one message to the
+        person's contact email, which they agreed to at sign-in. The address is
+        never returned; the message carries the fixed Galascribe wrapper and
+        the operator's text. `category` is `ACCOUNT`, `SECURITY` or `SERVICE`.
+        `reason` is a non-sensitive operator reason code recorded in the audit
+        event. `Idempotency-Key` is the queued-message identity. `202` means the
+        message is queued, not delivered. `404 RESOURCE_NOT_FOUND` for an
+        unknown person; `409 CONTACT_EMAIL_ABSENT` when no contact email is on
+        file or it was withdrawn.
+      operationId: postPlatformUsersByPersonIdContact
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: personId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  body: Your site repository needs attention before we can publish.
+                  category: SERVICE
+                  reason: OPERATOR_REQUESTED
+                  subject: Action needed on your Galascribe site
+            schema:
+              $ref: "#/components/schemas/PostPlatformUsersByPersonIdContactRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    messageId: 018f0000-0000-7000-8000-000000000003
+                    state: QUEUED
+              schema:
+                $ref: "#/components/schemas/PostPlatformUsersByPersonIdContactResponse"
+          description: contact platform user accepted
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                CONTACT_EMAIL_ABSENT:
+                  summary: CONTACT_EMAIL_ABSENT
+                  value:
+                    code: CONTACT_EMAIL_ABSENT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: CONTACT_EMAIL_ABSENT
+                    type: urn:gala:problem:contact-email-absent
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, CONTACT_EMAIL_ABSENT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - CONTACT_EMAIL_ABSENT
+      security:
+        - browserSession: []
+      summary: contact platform user
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.contact
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: contact platform user
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - CONTACT_EMAIL_ABSENT
+        - REAUTH_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: async
+      x-gala-tenant-scope: NONE
   /v2/platform/webhook-events:
     get:
       description: |
@@ -51775,6 +51993,329 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: NONE
+  /v2/self/contact-email:grant:
+    post:
+      description: |
+        Records the person's agreement to receive account and security notices
+        at their verified GitHub primary email. The server reads the address from
+        GitHub with the stored sign-in token, seals it, and answers with the
+        masked form only; the full address never leaves the server. Needs
+        recent authentication: a stale session gets `401 REAUTH_REQUIRED`.
+        `409 CONTACT_EMAIL_UNAVAILABLE` when GitHub reports no verified primary
+        email (`errors[].code` `NO_VERIFIED_PRIMARY_EMAIL`) or the sign-in did
+        not grant the email scope (`SCOPE_NOT_GRANTED`), both at pointer
+        `/contactEmail`; the person signs in again to grant the scope.
+      operationId: postSelfContactEmailGrant
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    contactEmail:
+                      maskedAddress: a…d@example.com
+                      state: ON_FILE
+                      updatedAt: "2026-10-13T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostSelfContactEmailGrantResponse"
+          description: grant contact email succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                CONTACT_EMAIL_UNAVAILABLE:
+                  summary: CONTACT_EMAIL_UNAVAILABLE
+                  value:
+                    code: CONTACT_EMAIL_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors:
+                      - code: NO_VERIFIED_PRIMARY_EMAIL
+                        pointer: /contactEmail
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: CONTACT_EMAIL_UNAVAILABLE
+                    type: urn:gala:problem:contact-email-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, CONTACT_EMAIL_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - CONTACT_EMAIL_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: grant contact email
+      tags:
+        - self
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: null
+      x-gala-concurrency: principal-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: grant contact email
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - COMMAND_REPLAY_CONFLICT
+        - CONTACT_EMAIL_UNAVAILABLE
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
+  /v2/self/contact-email:withdraw:
+    post:
+      description: |
+        Withdraws the agreement to receive notices by email. The sealed address
+        is deleted, the state reads `WITHDRAWN`, and the person is not asked
+        again. Safe to repeat. Needs recent authentication: a stale session
+        gets `401 REAUTH_REQUIRED`.
+      operationId: postSelfContactEmailWithdraw
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    contactEmail:
+                      state: WITHDRAWN
+                      updatedAt: "2026-10-13T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostSelfContactEmailWithdrawResponse"
+          description: withdraw contact email succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+      security:
+        - browserSession: []
+      summary: withdraw contact email
+      tags:
+        - self
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: null
+      x-gala-concurrency: principal-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: withdraw contact email
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - COMMAND_REPLAY_CONFLICT
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
   /v2/self/exports:
     get:
       description: |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rathnasgala2/schemas",
-  "version": "3.10.0",
+  "version": "3.11.0",
   "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
   "type": "module",
   "license": "Apache-2.0",

package/sbom.cdx.json

@@ -97,8 +97,8 @@
       "type": "library",
       "name": "schemas",
       "group": "@rathnasgala2",
-      "version": "3.10.0",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0",
+      "version": "3.11.0",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0",
       "description": "Executable JSON Schema and OpenAPI contracts for Galascribe",
       "licenses": [
         {
@@ -108,7 +108,7 @@
           }
         }
       ],
-      "purl": "pkg:npm/%40rathnasgala2/schemas@3.10.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
+      "purl": "pkg:npm/%40rathnasgala2/schemas@3.11.0?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Frathnasgala2%2Fschema.git",
       "externalReferences": [
         {
           "url": "https://github.com/rathnasgala2/schema/issues",
@@ -153,7 +153,7 @@
       "type": "library",
       "name": "ajv-formats",
       "version": "3.0.1",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|ajv-formats@3.0.1",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|ajv-formats@3.0.1",
       "licenses": [
         {
           "license": {
@@ -187,7 +187,7 @@
       "type": "library",
       "name": "ajv",
       "version": "8.20.0",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|ajv@8.20.0",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|ajv@8.20.0",
       "licenses": [
         {
           "license": {
@@ -221,7 +221,7 @@
       "type": "library",
       "name": "fast-deep-equal",
       "version": "3.1.3",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|fast-deep-equal@3.1.3",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|fast-deep-equal@3.1.3",
       "licenses": [
         {
           "license": {
@@ -255,7 +255,7 @@
       "type": "library",
       "name": "fast-uri",
       "version": "3.1.8",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|fast-uri@3.1.8",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|fast-uri@3.1.8",
       "licenses": [
         {
           "license": {
@@ -289,7 +289,7 @@
       "type": "library",
       "name": "json-schema-traverse",
       "version": "1.0.0",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|json-schema-traverse@1.0.0",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|json-schema-traverse@1.0.0",
       "licenses": [
         {
           "license": {
@@ -323,7 +323,7 @@
       "type": "library",
       "name": "require-from-string",
       "version": "2.0.2",
-      "bom-ref": "@rathnasgala2/schemas@3.10.0|require-from-string@2.0.2",
+      "bom-ref": "@rathnasgala2/schemas@3.11.0|require-from-string@2.0.2",
       "licenses": [
         {
           "license": {
@@ -1064,10 +1064,10 @@
   ],
   "dependencies": [
     {
-      "ref": "@rathnasgala2/schemas@3.10.0",
+      "ref": "@rathnasgala2/schemas@3.11.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.10.0|ajv-formats@3.0.1",
-        "@rathnasgala2/schemas@3.10.0|ajv@8.20.0",
+        "@rathnasgala2/schemas@3.11.0|ajv-formats@3.0.1",
+        "@rathnasgala2/schemas@3.11.0|ajv@8.20.0",
         "pkg:npm/semver@7.8.5",
         "urn:gala:source-data:iana-ipv4-special-registry",
         "urn:gala:source-data:iana-ipv6-special-registry",
@@ -1089,31 +1089,31 @@
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|ajv-formats@3.0.1",
+      "ref": "@rathnasgala2/schemas@3.11.0|ajv-formats@3.0.1",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.10.0|ajv@8.20.0"
+        "@rathnasgala2/schemas@3.11.0|ajv@8.20.0"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|ajv@8.20.0",
+      "ref": "@rathnasgala2/schemas@3.11.0|ajv@8.20.0",
       "dependsOn": [
-        "@rathnasgala2/schemas@3.10.0|fast-deep-equal@3.1.3",
-        "@rathnasgala2/schemas@3.10.0|fast-uri@3.1.8",
-        "@rathnasgala2/schemas@3.10.0|json-schema-traverse@1.0.0",
-        "@rathnasgala2/schemas@3.10.0|require-from-string@2.0.2"
+        "@rathnasgala2/schemas@3.11.0|fast-deep-equal@3.1.3",
+        "@rathnasgala2/schemas@3.11.0|fast-uri@3.1.8",
+        "@rathnasgala2/schemas@3.11.0|json-schema-traverse@1.0.0",
+        "@rathnasgala2/schemas@3.11.0|require-from-string@2.0.2"
       ]
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|fast-deep-equal@3.1.3"
+      "ref": "@rathnasgala2/schemas@3.11.0|fast-deep-equal@3.1.3"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|fast-uri@3.1.8"
+      "ref": "@rathnasgala2/schemas@3.11.0|fast-uri@3.1.8"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|json-schema-traverse@1.0.0"
+      "ref": "@rathnasgala2/schemas@3.11.0|json-schema-traverse@1.0.0"
     },
     {
-      "ref": "@rathnasgala2/schemas@3.10.0|require-from-string@2.0.2"
+      "ref": "@rathnasgala2/schemas@3.11.0|require-from-string@2.0.2"
     },
     {
       "ref": "pkg:npm/semver@7.8.5"