@rathnasgala2/schemas 3.28.0 → 3.30.0

package/openapi/openapi.yaml

@@ -13,6 +13,14 @@ components:
         pattern: ^no-store$
         type: string
         x-gala-const: no-store
+    CacheControlPrivateNoCache:
+      description: "SCHEMA-3.29.0: `private, no-cache` -- a browser may store the body but must revalidate it (`If-None-Match`) before every use. Used by reads that carry a strong `ETag` and answer `304`."
+      required: true
+      schema:
+        enum:
+          - private, no-cache
+          - no-cache, private
+        type: string
     ContentDispositionAttachment:
       description: "The archive is a download: `attachment` with its file name."
       required: true
@@ -621,6 +629,93 @@ components:
         - description
         - group
       type: object
+    AssistanceRequest:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: a request the site made to the Galascribe team."
+      properties:
+        closedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When an operator closed the request. Absent while it is `OPEN`.
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        requestId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          $ref: "#/components/schemas/AssistanceRequestState"
+      required:
+        - requestId
+        - kind
+        - state
+        - createdAt
+      type: object
+    AssistanceRequestCreate:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: a request for help with a site."
+      properties:
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        note:
+          description: Anything the person wants the Galascribe team to know.
+          maxLength: 1000
+          type: string
+      required:
+        - kind
+      type: object
+    AssistanceRequestKind:
+      description: "`GALASCRIBE_HOSTING`: host what GitHub Pages does not allow. `DOMAIN_REGISTRATION`: register the included domain by hand. `DOMAIN_MOVE`: move a registered domain to the author's own account."
+      enum:
+        - GALASCRIBE_HOSTING
+        - DOMAIN_REGISTRATION
+        - DOMAIN_MOVE
+      type: string
+    AssistanceRequestList:
+      additionalProperties: false
+      properties:
+        items:
+          items:
+            $ref: "#/components/schemas/AssistanceRequest"
+          maxItems: 100
+          minItems: 0
+          type: array
+      required:
+        - items
+      type: object
+    AssistanceRequestState:
+      description: "`OPEN`: waiting for the Galascribe team. `CLOSED`: an operator finished it."
+      enum:
+        - OPEN
+        - CLOSED
+      type: string
     AudienceAuthor:
       additionalProperties: false
       description: "SCHEMA-3.23.0: an author of a site as the site names it in `gala/publication.json`. `id` is the author's stable id; follows are keyed by (publication, author id)."
@@ -1491,6 +1586,12 @@ components:
         date. `deleteDate` (SCHEMA-3.25.1, optional and nullable) is the
         header's scheduled-removal date.
       properties:
+        authorIds:
+          description: "SCHEMA-3.29.0: the header's `authors` (stable ids, header order), so a card can show a byline without reading the document; absent when the header names none."
+          items:
+            $ref: "#/components/schemas/PortableContentFrontmatterStableId"
+          maxItems: 32
+          type: array
         contentId:
           $ref: "#/components/schemas/PortableContentFrontmatterStableId"
         createdAt:
@@ -1504,6 +1605,9 @@ components:
           description: "SCHEMA-3.28.0: the post's front-matter description, so the Posts list can show an excerpt without reading each document; absent when the header carries none."
           maxLength: 320
           type: string
+        heroPath:
+          $ref: "#/components/schemas/PortableContentFrontmatterRepoRelativePath"
+          description: "SCHEMA-3.29.0: the repository path of the header's `hero` image, for a card thumbnail; absent when the header carries no hero."
         language:
           $ref: "#/components/schemas/PortableContentFrontmatterBcp47"
         publishAfter:
@@ -1517,6 +1621,12 @@ components:
           $ref: "#/components/schemas/PortableContentFrontmatterSlug"
         status:
           $ref: "#/components/schemas/ContentItemStatus"
+        tags:
+          description: "SCHEMA-3.29.0: the header's `tags`, so a card can show them; absent when the header carries none."
+          items:
+            $ref: "#/components/schemas/PortableContentFrontmatterPlainLabel"
+          maxItems: 32
+          type: array
         title:
           $ref: "#/components/schemas/PortableContentFrontmatterPlainText"
           x-gala-graphemeLength:
@@ -1574,6 +1684,41 @@ components:
         - HEADER_INVALID
         - TOO_LARGE
       type: string
+    ContentPreviewContext:
+      additionalProperties: false
+      description: |
+        SCHEMA-3.29.0. The repository facts a draft preview needs besides the
+        post, all read at `revision`. Every member is best-effort: a file that
+        is absent, unreadable, over 256 KiB or invalid against its schema is
+        `null` (`navigation`, `publication`) or left out of `authors`, and
+        never fails the read. `authors` holds the author files the
+        publication document declares, in the order it declares them, at most
+        200.
+      properties:
+        authors:
+          items:
+            $ref: "#/components/schemas/PortableAuthorDocument"
+          maxItems: 200
+          type: array
+        navigation:
+          description: The `gala/navigation.json` document, validated against its schema; `null` when the file is absent or invalid.
+          oneOf:
+            - $ref: "#/components/schemas/PortableNavigationDocument"
+            - type: "null"
+        publication:
+          description: The `gala/publication.json` document, validated against its schema; `null` when the file is absent or invalid.
+          oneOf:
+            - $ref: "#/components/schemas/PortablePublicationDocument"
+            - type: "null"
+        revision:
+          pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
+          type: string
+      required:
+        - revision
+        - navigation
+        - publication
+        - authors
+      type: object
     ContentPublicationAuthorSummary:
       additionalProperties: false
       properties:
@@ -2231,6 +2376,24 @@ components:
           type: string
         expiresAt:
           $ref: "#/components/schemas/PortableProblemRfc3339"
+        galascribeManaged:
+          additionalProperties: false
+          description: |
+            SCHEMA-3.30.0. Present when Galascribe owns the DNS records of this
+            domain, so the person is never asked to add records and a client
+            shows the steps as "Galascribe is setting this up". Absent for a
+            domain the person brought. `GALASCRIBE_ADDRESS`: a free
+            `name.galascribe.com` address (Basic and Pro). `INCLUDED_DOMAIN`: the
+            domain registered for the organization with its plan (Pro).
+          properties:
+            kind:
+              enum:
+                - GALASCRIBE_ADDRESS
+                - INCLUDED_DOMAIN
+              type: string
+          required:
+            - kind
+          type: object
         hostname:
           description: Lower-case ASCII (IDNA) hostname.
           maxLength: 253
@@ -2427,6 +2590,182 @@ components:
         - code
         - detail
       type: object
+    DomainRegistrant:
+      additionalProperties: false
+      description: The person or business that will own the domain. Sent to the registrar and never stored, logged or returned by Galascribe (write-only).
+      properties:
+        address:
+          $ref: "#/components/schemas/DomainRegistrationAddress"
+        email:
+          format: email
+          maxLength: 254
+          minLength: 3
+          type: string
+        name:
+          maxLength: 200
+          minLength: 1
+          type: string
+        organization:
+          description: The business name, when the owner is a business.
+          maxLength: 200
+          minLength: 1
+          type: string
+        phone:
+          description: Country code and number in the form `+1.5555555555`.
+          pattern: ^\+[0-9]{1,3}\.[0-9]{4,14}$
+          type: string
+      required:
+        - name
+        - email
+        - phone
+        - address
+      type: object
+    DomainRegistration:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: the registration of an included domain. The registrant is never part of it."
+      properties:
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainId:
+          description: The domain binding once the site uses the domain (`ATTACHED`).
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        domainName:
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        failure:
+          additionalProperties: false
+          description: Present for `FAILED` and `ACTION_REQUIRED`.
+          properties:
+            code:
+              description: A short machine-readable reason.
+              maxLength: 100
+              minLength: 1
+              type: string
+            detail:
+              description: A plain sentence for the person.
+              maxLength: 500
+              minLength: 1
+              type: string
+          required:
+            - code
+            - detail
+          type: object
+        registrationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          $ref: "#/components/schemas/DomainRegistrationState"
+        updatedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+      required:
+        - registrationId
+        - domainName
+        - state
+        - createdAt
+        - updatedAt
+      type: object
+    DomainRegistrationAddress:
+      additionalProperties: false
+      properties:
+        city:
+          maxLength: 100
+          minLength: 1
+          type: string
+        countryCode:
+          description: ISO 3166-1 alpha-2, upper case.
+          pattern: ^[A-Z]{2}$
+          type: string
+        postalCode:
+          maxLength: 20
+          minLength: 1
+          type: string
+        region:
+          description: State or province (the region), when the country has them.
+          maxLength: 100
+          minLength: 1
+          type: string
+        street:
+          maxLength: 200
+          minLength: 1
+          type: string
+      required:
+        - street
+        - city
+        - postalCode
+        - countryCode
+      type: object
+    DomainRegistrationCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: whether a name can be registered as the included domain. It carries no price: the domain is included in the plan."
+      properties:
+        name:
+          description: The name that was checked, as Galascribe read it.
+          maxLength: 253
+          minLength: 1
+          type: string
+        reason:
+          $ref: "#/components/schemas/DomainRegistrationCheckReason"
+          description: Why the name cannot be registered. Absent when `registrable` is true.
+        registrable:
+          type: boolean
+      required:
+        - name
+        - registrable
+      type: object
+    DomainRegistrationCheckReason:
+      description: "`UNAVAILABLE`: already registered. `EXTENSION_NOT_SUPPORTED`: Galascribe cannot register that ending. `PREMIUM`: a premium name. `OVER_PRICE_CAP`: the first-year price is above what the included domain covers. `INVALID_NAME`: not a usable domain name. `PLAN_REQUIRED`: the plan has no included domain. `ALREADY_USED`: the organization already used its included domain. `NOT_CONFIGURED`: registration is not set up on this deployment."
+      enum:
+        - UNAVAILABLE
+        - EXTENSION_NOT_SUPPORTED
+        - PREMIUM
+        - OVER_PRICE_CAP
+        - INVALID_NAME
+        - PLAN_REQUIRED
+        - ALREADY_USED
+        - NOT_CONFIGURED
+      type: string
+    DomainRegistrationCreate:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: register the included domain."
+      properties:
+        domainName:
+          description: The domain to register, for example `mayawrites.com`.
+          maxLength: 253
+          minLength: 1
+          type: string
+        registrant:
+          $ref: "#/components/schemas/DomainRegistrant"
+      required:
+        - domainName
+        - registrant
+      type: object
+    DomainRegistrationList:
+      additionalProperties: false
+      properties:
+        items:
+          items:
+            $ref: "#/components/schemas/DomainRegistration"
+          maxItems: 20
+          minItems: 0
+          type: array
+      required:
+        - items
+      type: object
+    DomainRegistrationState:
+      description: "`REQUESTED`: accepted, not started. `REGISTERING`: the registrar is registering the name. `ACTION_REQUIRED`: the registrar needs something Galascribe cannot do alone; the person may ask for help. `REGISTERED`: the name is bought and the site does not use it yet. `ATTACHED`: the site uses it; `domainId` names the binding. `FAILED`: registration did not happen; `failure` says why."
+      enum:
+        - REQUESTED
+        - REGISTERING
+        - ACTION_REQUIRED
+        - REGISTERED
+        - ATTACHED
+        - FAILED
+      type: string
     DomainRouting:
       additionalProperties: false
       properties:
@@ -2560,6 +2899,42 @@ components:
         - displayName
         - followedAt
       type: object
+    GalascribeAddressCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: whether a label can become the site's Galascribe address."
+      properties:
+        available:
+          type: boolean
+        hostname:
+          description: The full address, when the label is well formed.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+        reason:
+          $ref: "#/components/schemas/GalascribeAddressReason"
+          description: Why the label cannot be used. Absent when `available` is true.
+      required:
+        - label
+        - available
+      type: object
+    GalascribeAddressLabel:
+      description: "The part before `.galascribe.com`: 3 to 63 lowercase letters, digits and hyphens, not starting or ending with a hyphen. A label that is not usable is answered by the check as `INVALID`."
+      maxLength: 63
+      minLength: 1
+      type: string
+    GalascribeAddressReason:
+      description: "`INVALID`: not a usable label. `RESERVED`: a name Galascribe keeps for itself. `TAKEN`: another site has it or something already exists at that name. `PLAN_REQUIRED`: the plan has no Galascribe address. `NOT_CONFIGURED`: not set up on this deployment. `ALREADY_HAS_DOMAIN`: the site already has a domain that is not detached."
+      enum:
+        - INVALID
+        - RESERVED
+        - TAKEN
+        - PLAN_REQUIRED
+        - NOT_CONFIGURED
+        - ALREADY_HAS_DOMAIN
+      type: string
     GetClaimsByTokenResponse:
       additionalProperties: false
       properties:
@@ -3040,6 +3415,8 @@ components:
         - items
         - hasMore
       type: object
+    GetOrganizationsByOrganizationIdPlanResponse:
+      $ref: "#/components/schemas/OrganizationPlan"
     GetOrganizationsByOrganizationIdPublicationImportsByImportIdResponse:
       allOf:
         - $ref: "#/components/schemas/PublicationImport"
@@ -3193,6 +3570,8 @@ components:
         - catalog
         - openChange
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse:
+      $ref: "#/components/schemas/AssistanceRequestList"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContactFormSettingsResponse:
       $ref: "#/components/schemas/ContactFormSettings"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContactMessagesResponse:
@@ -3250,6 +3629,8 @@ components:
         - body
         - digest
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdContentPreviewContextResponse:
+      $ref: "#/components/schemas/ContentPreviewContext"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContentResponse:
       additionalProperties: false
       allOf:
@@ -3553,6 +3934,10 @@ components:
         - version
         - state
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationIdResponse:
+      $ref: "#/components/schemas/DomainRegistration"
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse:
+      $ref: "#/components/schemas/DomainRegistrationList"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsByDomainIdDnsConnectionsByConnectionIdResponse:
       allOf:
         - $ref: "#/components/schemas/DnsConnection"
@@ -4146,6 +4531,8 @@ components:
       type: object
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdSharingSettingsResponse:
       $ref: "#/components/schemas/SharingSettings"
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheckResponse:
+      $ref: "#/components/schemas/SiteHostingCheck"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteResponse:
       additionalProperties: false
       allOf:
@@ -4491,6 +4878,8 @@ components:
       required:
         - items
       type: object
+    GetPlatformAssistanceRequestsResponse:
+      $ref: "#/components/schemas/PlatformAssistanceRequestPage"
     GetPlatformAuditEventsResponse:
       additionalProperties: false
       allOf:
@@ -5786,6 +6175,103 @@ components:
         - reasonCode
         - retryable
       type: object
+    HostingFinding:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: one thing the hosting check found. There is at most one finding per `code`."
+      properties:
+        bytes:
+          description: "The measured size in bytes for a size finding: the total for the site and media findings, the largest file for the file findings."
+          format: int64
+          minimum: 0
+          type: integer
+        code:
+          $ref: "#/components/schemas/HostingFindingCode"
+        items:
+          description: Up to 20 of the files or pages concerned, largest or first found first. `pathCount` is the full number.
+          items:
+            $ref: "#/components/schemas/HostingFindingItem"
+          maxItems: 20
+          type: array
+        limitBytes:
+          description: The threshold in bytes the finding is measured against, for a size finding.
+          format: int64
+          minimum: 0
+          type: integer
+        pathCount:
+          description: How many files or pages the finding concerns in all.
+          format: int64
+          minimum: 0
+          type: integer
+        severity:
+          $ref: "#/components/schemas/HostingFindingSeverity"
+        signals:
+          description: What made a `COMMERCE_PAGE` or `SENSITIVE_FORM` finding fire. Absent for other codes.
+          items:
+            $ref: "#/components/schemas/HostingFindingSignal"
+          maxItems: 5
+          type: array
+          uniqueItems: true
+      required:
+        - code
+        - severity
+        - items
+        - pathCount
+      type: object
+    HostingFindingCode:
+      description: "`SITE_OVER_SIZE_LIMIT`: the published files add up to 1 GiB or more, the most GitHub Pages serves. `SITE_NEAR_SIZE_LIMIT`: they add up to 800 MiB or more. `FILE_OVER_SIZE_LIMIT`: one file is 100 MiB or more, which GitHub refuses. `LARGE_FILE`: one file is 50 MiB or more, which GitHub warns about. `DIRECTORY_TOO_LARGE`: one folder holds more than 3,000 entries. `HEAVY_MEDIA`: images, audio, video and PDFs together are 500 MiB or more. `COMMERCE_PAGE`: a page links to a checkout and uses shop words, or is named like a shop, and GitHub does not allow sites that are mainly for selling. `SENSITIVE_FORM`: a page has a password or card-number field, and GitHub does not allow sending passwords or card numbers."
+      enum:
+        - SITE_OVER_SIZE_LIMIT
+        - SITE_NEAR_SIZE_LIMIT
+        - FILE_OVER_SIZE_LIMIT
+        - LARGE_FILE
+        - DIRECTORY_TOO_LARGE
+        - HEAVY_MEDIA
+        - COMMERCE_PAGE
+        - SENSITIVE_FORM
+      type: string
+    HostingFindingItem:
+      additionalProperties: false
+      description: One file or page a finding is about.
+      properties:
+        bytes:
+          description: The file size in bytes, for size findings.
+          format: int64
+          minimum: 0
+          type: integer
+        path:
+          description: The path in the site's repository.
+          maxLength: 1024
+          minLength: 1
+          type: string
+        title:
+          description: The page's title, when it has one.
+          maxLength: 300
+          minLength: 1
+          type: string
+      required:
+        - path
+      type: object
+    HostingFindingSeverity:
+      description: "`LIMIT`: GitHub will refuse the deploy or stop serving the site. `WARNING`: a risk that does not stop publishing."
+      enum:
+        - LIMIT
+        - WARNING
+      type: string
+    HostingFindingSignal:
+      description: 'What made a `COMMERCE_PAGE` or `SENSITIVE_FORM` finding fire. `CHECKOUT_LINK`: a link to a known checkout or payment host. `SHOP_WORDS`: words such as "add to cart" or "buy now". `SHOP_ADDRESS`: a page address or title such as shop, store, cart or checkout. `PASSWORD_FIELD`: a password input in raw HTML. `CARD_FIELD`: a card-number or security-code input in raw HTML.'
+      enum:
+        - CHECKOUT_LINK
+        - SHOP_WORDS
+        - SHOP_ADDRESS
+        - PASSWORD_FIELD
+        - CARD_FIELD
+      type: string
+    HostingOffer:
+      description: "`UPGRADE`: the Free plan can move to a paid plan, which includes Galascribe hosting. `REQUEST_GALASCRIBE_HOSTING`: a paid plan can ask Galascribe to host what GitHub does not allow."
+      enum:
+        - UPGRADE
+        - REQUEST_GALASCRIBE_HOSTING
+      type: string
     IncomingOwnerTransfer:
       additionalProperties: false
       description: A pending ownership transfer addressed to the caller. `consequenceDigest` is what `:accept` quotes back.
@@ -7813,11 +8299,67 @@ components:
         - startedAt
       type: object
     OrganizationKind:
-      description: "`SINGLE`: a personal (Pro) organization with one owner and no other members. `COLLABORATIVE`: an Enterprise organization with members, roles and custom roles (SCHEMA-3.3.0)."
+      description: "`SINGLE`: a personal organization with one owner and no other members. It becomes `COLLABORATIVE` with its first invitation, on any plan (SCHEMA-3.30.0). `COLLABORATIVE`: an organization with members, roles and custom roles (SCHEMA-3.3.0)."
       enum:
         - SINGLE
         - COLLABORATIVE
       type: string
+    OrganizationPlan:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: an organization's plan as the App needs it. `tier` is the API tier (`FREE`, `PRO`, `BUSINESS`); the plans are named Free, Basic and Pro in billing and in the App, so `PRO` is Basic and `BUSINESS` is Pro."
+      properties:
+        collaborators:
+          additionalProperties: false
+          description: How many people besides the owners the plan lets the organization have.
+          properties:
+            limit:
+              description: The most collaborators the plan allows, or null when the plan has no limit.
+              format: int64
+              minimum: 0
+              type:
+                - integer
+                - "null"
+            used:
+              description: Active members other than owners plus invitations still `PENDING`. An invitation counts from the moment it is sent.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - limit
+            - used
+          type: object
+        entitlements:
+          additionalProperties: false
+          description: What the plan includes. A client hides what is false and offers the upgrade.
+          properties:
+            galascribeAddress:
+              description: A free `name.galascribe.com` address for a site (Basic and Pro).
+              type: boolean
+            galascribeHosting:
+              description: Galascribe can host what GitHub Pages does not allow, on request (Basic and Pro).
+              type: boolean
+            includedDomain:
+              description: One domain registered for the organization at no charge (Pro).
+              type: boolean
+          required:
+            - galascribeAddress
+            - includedDomain
+            - galascribeHosting
+          type: object
+        galascribeAddressZone:
+          description: The zone Galascribe addresses are created in, for example `galascribe.com`. Absent when Galascribe addresses are not configured on this deployment; a client then hides the option.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        tier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+          description: The plan tier.
+      required:
+        - tier
+        - collaborators
+        - entitlements
+      type: object
     OrganizationState:
       enum:
         - PROVISIONING
@@ -8404,6 +8946,114 @@ components:
         - content:write
         - publish
       type: string
+    PlatformAssistanceRequest:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: an assistance request with the organization and site it came from, for the platform operator."
+      properties:
+        closedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When an operator closed the request. Absent while it is `OPEN`.
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        note:
+          description: The person's note.
+          maxLength: 1000
+          type: string
+        organizationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        organizationName:
+          maxLength: 200
+          minLength: 1
+          type: string
+        publicationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        publicationName:
+          maxLength: 200
+          minLength: 1
+          type: string
+        requestId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        requestedByLogin:
+          description: The GitHub login of the person who asked.
+          maxLength: 100
+          minLength: 1
+          type: string
+        state:
+          $ref: "#/components/schemas/AssistanceRequestState"
+      required:
+        - requestId
+        - kind
+        - state
+        - createdAt
+        - organizationId
+        - organizationName
+        - publicationId
+        - publicationName
+        - requestedByLogin
+      type: object
+    PlatformAssistanceRequestPage:
+      additionalProperties: false
+      allOf:
+        - else:
+            properties:
+              nextCursor:
+                type: "null"
+          if:
+            properties:
+              hasMore:
+                not:
+                  enum:
+                    - false
+                type: boolean
+                x-gala-const: true
+            required:
+              - hasMore
+          then:
+            properties:
+              nextCursor:
+                type: string
+            required:
+              - nextCursor
+      properties:
+        hasMore:
+          type: boolean
+        items:
+          items:
+            $ref: "#/components/schemas/PlatformAssistanceRequest"
+          maxItems: 100
+          type: array
+        nextCursor:
+          description: Opaque cursor for the next page. Present and non-null exactly when `hasMore` is true; absent or null when `hasMore` is false.
+          maxLength: 2048
+          minLength: 1
+          type:
+            - string
+            - "null"
+      required:
+        - items
+        - hasMore
+      type: object
     PlatformAuditEvent:
       additionalProperties: false
       description: "One audit event, redacted: identifiers and codes only, never request bodies or secrets."
@@ -8709,6 +9359,11 @@ components:
     PlatformPlan:
       additionalProperties: false
       properties:
+        collaboratorLimit:
+          description: "SCHEMA-3.30.0, the collaborators (active members other than owners plus pending invitations) one organization on this plan may have; a further invitation is `409 PLAN_REQUIRED`. 0 means no limit. Defaults: FREE 1, PRO and BUSINESS no limit."
+          format: int64
+          minimum: 0
+          type: integer
         contactForm:
           description: "SCHEMA-3.23.0, whether sites on this plan may turn on the contact form. A site on a plan without it sees the form locked, and enabling it is `409 PLAN_REQUIRED`. Defaults of the first release: FREE 50 and no contact form, PRO 500 and a contact form, BUSINESS 2000 and a contact form."
           type: boolean
@@ -8732,6 +9387,7 @@ components:
         - newsletterSubscriberLimit
         - contactForm
         - listen
+        - collaboratorLimit
       type: object
     PlatformPlanCapacityRelease:
       additionalProperties: false
@@ -9146,10 +9802,175 @@ components:
           type: object
       required: []
       type: object
+    PortableAuthorBcp47:
+      description: Structurally valid canonical BCP-47 language tag.
+      format: gala-bcp47
+      maxLength: 255
+      minLength: 1
+      pattern: ^[A-Za-z0-9-]+$
+      type: string
+      x-gala-utf8ByteLength:
+        maximum: 255
+        minimum: 1
+    PortableAuthorDocument:
+      additionalProperties: false
+      properties:
+        avatarRef:
+          $ref: "#/components/schemas/PortableAuthorRepoRelativePath"
+        biography:
+          $ref: "#/components/schemas/PortableAuthorPlainText"
+          x-gala-graphemeLength:
+            maximum: 2000
+            minimum: 0
+        displayName:
+          $ref: "#/components/schemas/PortableAuthorPlainText"
+          x-gala-graphemeLength:
+            maximum: 120
+            minimum: 1
+        extensions:
+          $ref: "#/components/schemas/PortableAuthorExtensionMap"
+        id:
+          $ref: "#/components/schemas/PortableAuthorStableId"
+        links:
+          items:
+            $ref: "#/components/schemas/PortableAuthorSocialLink"
+          maxItems: 32
+          minItems: 0
+          type: array
+        localized:
+          items:
+            $ref: "#/components/schemas/PortableAuthorLocalizedAuthor"
+          maxItems: 32
+          minItems: 0
+          type: array
+        pronouns:
+          $ref: "#/components/schemas/PortableAuthorPlainText"
+          x-gala-graphemeLength:
+            maximum: 80
+            minimum: 1
+        schemaId:
+          pattern: ^urn:gala:schema:author:2\.0\.0$
+          type: string
+          x-gala-const: urn:gala:schema:author:2.0.0
+        schemaVersion:
+          pattern: ^2\.0\.0$
+          type: string
+          x-gala-const: 2.0.0
+      required:
+        - schemaId
+        - schemaVersion
+        - id
+        - displayName
+        - biography
+        - links
+        - localized
+        - extensions
+      title: Gala author contract
+      type: object
+    PortableAuthorExtensionKey:
+      description: Reverse-DNS extension namespace that cannot shadow a core key.
+      format: gala-extension-key
+      type: string
+    PortableAuthorExtensionMap:
+      additionalProperties:
+        x-gala-maxCanonicalBytes: 16384
+      maxProperties: 32
+      propertyNames:
+        $ref: "#/components/schemas/PortableAuthorExtensionKey"
+      type: object
+      x-gala-maxCanonicalBytes: 131072
+    PortableAuthorLocalizedAuthor:
+      additionalProperties: false
+      properties:
+        biography:
+          $ref: "#/components/schemas/PortableAuthorPlainText"
+          x-gala-graphemeLength:
+            maximum: 2000
+            minimum: 0
+        displayName:
+          $ref: "#/components/schemas/PortableAuthorPlainText"
+          x-gala-graphemeLength:
+            maximum: 120
+            minimum: 1
+        language:
+          $ref: "#/components/schemas/PortableAuthorBcp47"
+      required:
+        - language
+        - displayName
+        - biography
+      type: object
+    PortableAuthorPlainLabel:
+      description: Normalized Unicode plain text without markup, controls, or bidi overrides.
+      format: gala-plain-label
+      type: string
+      x-gala-graphemeLength:
+        maximum: 80
+        minimum: 1
     PortableAuthorPlainText:
       description: NFC Unicode text without disallowed C0/C1 controls or bidi override/isolate controls.
       format: gala-plain-text
       type: string
+    PortableAuthorRepoRelativePath:
+      description: NFC UTF-8 repository-relative path using slash separators, with no leading slash, dot segment, NUL, backslash, or percent-decoded traversal.
+      format: gala-repository-relative-path
+      maxLength: 512
+      minLength: 1
+      pattern: ^(?!/)(?!.*\\)(?!.*\u0000).+$
+      type: string
+      x-gala-utf8ByteLength:
+        maximum: 512
+    PortableAuthorSocialLink:
+      additionalProperties: false
+      allOf:
+        - else:
+            properties:
+              uri:
+                $ref: "#/components/schemas/PortableAuthorUrlHttps"
+          if:
+            properties:
+              type:
+                pattern: ^email$
+                type: string
+                x-gala-const: email
+            required:
+              - type
+          then:
+            properties:
+              uri:
+                format: uri
+                pattern: "^mailto:"
+                type: string
+      properties:
+        label:
+          $ref: "#/components/schemas/PortableAuthorPlainLabel"
+        type:
+          enum:
+            - website
+            - email
+            - github
+            - linkedin
+            - mastodon
+            - bluesky
+            - x
+            - youtube
+            - other
+        uri:
+          maxLength: 2048
+          minLength: 1
+          type: string
+      required:
+        - type
+        - uri
+      type: object
+    PortableAuthorStableId:
+      description: Lowercase canonical UUIDv7. Once published, it is immutable; its time ordering conveys neither chronology nor authority.
+      pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+      type: string
+    PortableAuthorUrlHttps:
+      description: Absolute HTTPS URL without embedded credentials.
+      format: uri
+      pattern: ^https://(?![^/?#]*@)
+      type: string
     PortableContentFrontmatterBcp47:
       description: Structurally valid canonical BCP-47 language tag.
       format: gala-bcp47
@@ -15009,6 +15830,159 @@ components:
         - kind
         - token
       type: object
+    PortableNavigationCanonicalRoute:
+      description: Absolute normalized route with no query, fragment, dot segment, double slash, or non-normalized percent encoding.
+      format: gala-canonical-route
+      minLength: 1
+      pattern: ^/(?!/)(?!.*//)(?!.*[?#]).*$
+      type: string
+    PortableNavigationDocument:
+      $comment: The navigation graph validator rejects duplicate normalized internal routes within each collection.
+      additionalProperties: false
+      properties:
+        extensions:
+          $ref: "#/components/schemas/PortableNavigationExtensionMap"
+        footerItems:
+          items:
+            $ref: "#/components/schemas/PortableNavigationNavigationItem"
+          maxItems: 50
+          minItems: 0
+          type: array
+        items:
+          items:
+            $ref: "#/components/schemas/PortableNavigationNavigationItem"
+          maxItems: 100
+          minItems: 0
+          type: array
+        schemaId:
+          pattern: ^urn:gala:schema:navigation:2\.0\.0$
+          type: string
+          x-gala-const: urn:gala:schema:navigation:2.0.0
+        schemaVersion:
+          pattern: ^2\.0\.0$
+          type: string
+          x-gala-const: 2.0.0
+      required:
+        - schemaId
+        - schemaVersion
+        - items
+        - footerItems
+        - extensions
+      title: Gala navigation contract
+      type: object
+    PortableNavigationExtensionKey:
+      description: Reverse-DNS extension namespace that cannot shadow a core key.
+      format: gala-extension-key
+      type: string
+    PortableNavigationExtensionMap:
+      additionalProperties:
+        x-gala-maxCanonicalBytes: 16384
+      maxProperties: 32
+      propertyNames:
+        $ref: "#/components/schemas/PortableNavigationExtensionKey"
+      type: object
+      x-gala-maxCanonicalBytes: 131072
+    PortableNavigationNavigationItem:
+      additionalProperties: false
+      allOf:
+        - else:
+            not:
+              required:
+                - route
+            required:
+              - url
+          if:
+            properties:
+              type:
+                pattern: ^internal$
+                type: string
+                x-gala-const: internal
+            required:
+              - type
+          then:
+            not:
+              required:
+                - url
+            required:
+              - route
+      properties:
+        children:
+          items:
+            $ref: "#/components/schemas/PortableNavigationNavigationLeaf"
+          maxItems: 20
+          minItems: 0
+          type: array
+        label:
+          $ref: "#/components/schemas/PortableNavigationPlainLabel"
+        route:
+          $ref: "#/components/schemas/PortableNavigationCanonicalRoute"
+        type:
+          enum:
+            - internal
+            - external
+        url:
+          $ref: "#/components/schemas/PortableNavigationUrlHttps"
+      required:
+        - type
+        - label
+        - children
+      type: object
+    PortableNavigationNavigationLeaf:
+      additionalProperties: false
+      allOf:
+        - else:
+            not:
+              required:
+                - route
+            required:
+              - url
+          if:
+            properties:
+              type:
+                pattern: ^internal$
+                type: string
+                x-gala-const: internal
+            required:
+              - type
+          then:
+            not:
+              required:
+                - url
+            required:
+              - route
+      properties:
+        children:
+          maxItems: 0
+          minItems: 0
+          type: array
+          x-gala-const: []
+        label:
+          $ref: "#/components/schemas/PortableNavigationPlainLabel"
+        route:
+          $ref: "#/components/schemas/PortableNavigationCanonicalRoute"
+        type:
+          enum:
+            - internal
+            - external
+        url:
+          $ref: "#/components/schemas/PortableNavigationUrlHttps"
+      required:
+        - type
+        - label
+        - children
+      type: object
+    PortableNavigationPlainLabel:
+      description: Normalized Unicode plain text without markup, controls, or bidi overrides.
+      format: gala-plain-label
+      type: string
+      x-gala-graphemeLength:
+        maximum: 80
+        minimum: 1
+    PortableNavigationUrlHttps:
+      description: Absolute HTTPS URL without embedded credentials.
+      format: uri
+      pattern: ^https://(?![^/?#]*@)
+      type: string
     PortableProblemCanonicalRoute:
       description: Absolute normalized route with no query, fragment, dot segment, double slash, or non-normalized percent encoding.
       format: gala-canonical-route
@@ -15216,6 +16190,33 @@ components:
       x-gala-utf8ByteLength:
         maximum: 255
         minimum: 1
+    PortablePublicationCanonicalRoute:
+      description: Absolute normalized route with no query, fragment, dot segment, double slash, or non-normalized percent encoding.
+      format: gala-canonical-route
+      minLength: 1
+      pattern: ^/(?!/)(?!.*//)(?!.*[?#]).*$
+      type: string
+    PortablePublicationContactForm:
+      additionalProperties: false
+      description: "SCHEMA-3.22.0: the site's contact form. `enabled` turns the form on, and the template renders the `/contact/` page only when it is true. `fields.website` and `fields.phone` add the optional Website and Phone inputs; name, email and message are always present. The intro text is not a member: it is the optional document `gala/theme-pages/contact.md`, and the template shows a default intro when it is absent. An absent `contactForm` means no form. The API, not the schema, limits the form to the Pro and Business plans."
+      properties:
+        enabled:
+          type: boolean
+        fields:
+          additionalProperties: false
+          properties:
+            phone:
+              type: boolean
+            website:
+              type: boolean
+          required:
+            - website
+            - phone
+          type: object
+      required:
+        - enabled
+        - fields
+      type: object
     PortablePublicationCrawlers:
       additionalProperties: false
       properties:
@@ -15226,6 +16227,134 @@ components:
       required:
         - ai
       type: object
+    PortablePublicationDocument:
+      additionalProperties: false
+      properties:
+        aiRights:
+          $ref: "#/components/schemas/PortablePublicationAiRights"
+        authors:
+          items:
+            $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+          maxItems: 32
+          minItems: 1
+          type: array
+        canonicalBase:
+          $ref: "#/components/schemas/PortablePublicationUrlHttps"
+        contactForm:
+          $ref: "#/components/schemas/PortablePublicationContactForm"
+        contactRef:
+          $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+        crawlers:
+          $ref: "#/components/schemas/PortablePublicationCrawlers"
+        defaultImageRef:
+          $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+        defaultLanguage:
+          $ref: "#/components/schemas/PortablePublicationBcp47"
+        description:
+          $ref: "#/components/schemas/PortablePublicationPlainText"
+          x-gala-graphemeLength:
+            maximum: 500
+            minimum: 1
+        extensions:
+          $ref: "#/components/schemas/PortablePublicationExtensionMap"
+        footerCard:
+          $ref: "#/components/schemas/PortablePublicationFooterCard"
+        id:
+          $ref: "#/components/schemas/PortablePublicationStableId"
+        listen:
+          $ref: "#/components/schemas/PortablePublicationListen"
+        listing:
+          $ref: "#/components/schemas/PortablePublicationListing"
+        newsletter:
+          $ref: "#/components/schemas/PortablePublicationNewsletter"
+        performance:
+          $ref: "#/components/schemas/PortablePublicationPerformance"
+        policies:
+          $ref: "#/components/schemas/PortablePublicationPublicationPolicies"
+        profile:
+          $ref: "#/components/schemas/PortablePublicationPublicationProfile"
+        schemaId:
+          pattern: ^urn:gala:schema:publication:2\.0\.0$
+          type: string
+          x-gala-const: urn:gala:schema:publication:2.0.0
+        schemaVersion:
+          pattern: ^2\.0\.0$
+          type: string
+          x-gala-const: 2.0.0
+        sharing:
+          $ref: "#/components/schemas/PortablePublicationSharing"
+        slug:
+          $ref: "#/components/schemas/PortablePublicationSlug"
+        socialLinks:
+          items:
+            $ref: "#/components/schemas/PortablePublicationSocialLink"
+          maxItems: 32
+          minItems: 0
+          type: array
+        title:
+          $ref: "#/components/schemas/PortablePublicationPlainText"
+          x-gala-graphemeLength:
+            maximum: 200
+            minimum: 1
+      required:
+        - schemaId
+        - schemaVersion
+        - id
+        - slug
+        - title
+        - description
+        - canonicalBase
+        - defaultLanguage
+        - authors
+        - socialLinks
+        - extensions
+      title: Gala publication contract
+      type: object
+    PortablePublicationExtensionKey:
+      description: Reverse-DNS extension namespace that cannot shadow a core key.
+      format: gala-extension-key
+      type: string
+    PortablePublicationExtensionMap:
+      additionalProperties:
+        x-gala-maxCanonicalBytes: 16384
+      maxProperties: 32
+      propertyNames:
+        $ref: "#/components/schemas/PortablePublicationExtensionKey"
+      type: object
+      x-gala-maxCanonicalBytes: 131072
+    PortablePublicationFooterCard:
+      additionalProperties: false
+      properties:
+        authorIds:
+          items:
+            $ref: "#/components/schemas/PortablePublicationStableId"
+          maxItems: 32
+          minItems: 1
+          type: array
+        body:
+          $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+        enabled:
+          type: boolean
+        heading:
+          $ref: "#/components/schemas/PortablePublicationPlainText"
+          x-gala-graphemeLength:
+            maximum: 120
+            minimum: 1
+      required:
+        - enabled
+        - heading
+        - body
+        - authorIds
+      type: object
+    PortablePublicationListen:
+      additionalProperties: false
+      description: "SCHEMA-3.26.0: the site's Listen setting. `enabled: true` offers the audio version of the posts that have one: the template adds a Listen button to the top bar, a small invitation on each post with audio and a playlist on the home page, and ships its script only while at least one published article carries a `listen` member. An absent `listen` means off. The API, not the schema, limits turning it on to the Pro and Business plans."
+      properties:
+        enabled:
+          type: boolean
+      required:
+        - enabled
+      type: object
     PortablePublicationListing:
       additionalProperties: false
       description: "SCHEMA-3.25.0: listing settings. `pageSize` is the number of posts on each listing page (1 to 50); an absent member means 10."
@@ -15236,6 +16365,59 @@ components:
           type: integer
       required: []
       type: object
+    PortablePublicationNewsletter:
+      description: "SCHEMA-3.22.0: the newsletter panel. Link mode (`mode` absent or `link`) sends readers to the author's own newsletter at `url`; Galascribe mode (`mode: \"galascribe\"`) collects and mails subscribers itself. An absent `newsletter` member means the panel is off."
+      oneOf:
+        - additionalProperties: false
+          description: "Link mode: the panel links to an external newsletter. `mode` is optional and `link` when present, so a 3.21 publication still validates."
+          properties:
+            mode:
+              pattern: ^link$
+              type: string
+              x-gala-const: link
+            text:
+              $ref: "#/components/schemas/PortablePublicationPlainText"
+              x-gala-graphemeLength:
+                maximum: 300
+                minimum: 1
+            title:
+              $ref: "#/components/schemas/PortablePublicationPlainLabel"
+            url:
+              $ref: "#/components/schemas/PortablePublicationUrlHttps"
+          required:
+            - url
+            - title
+            - text
+          type: object
+        - additionalProperties: false
+          description: "Galascribe mode: the panel is an email field and a Subscribe button. `title` and `text` are the panel heading and sentence; there is no `url`. The API refuses to turn this mode on until the site owner has a postal address in their Account."
+          properties:
+            emailContent:
+              description: "`card` mails the post title, description, image and a Read the post button; the template renders no email fragment. `full` mails the whole post: for each published post the template renders an email-safe HTML fragment at `/_gala/email/<content id>.html` (`<content id>` is the post's front-matter `id`; absolute URLs and inline-safe markup only; `noindex`; absent from the sitemap, the feeds, the search index and the llms files), which the API fetches after the generation is certified live."
+              enum:
+                - card
+                - full
+            mode:
+              pattern: ^galascribe$
+              type: string
+              x-gala-const: galascribe
+            replyToOwner:
+              description: When true, subscribers' replies go to the site owner's contact email; when false the emails carry no Reply-To.
+              type: boolean
+            text:
+              $ref: "#/components/schemas/PortablePublicationPlainText"
+              x-gala-graphemeLength:
+                maximum: 300
+                minimum: 1
+            title:
+              $ref: "#/components/schemas/PortablePublicationPlainLabel"
+          required:
+            - mode
+            - title
+            - text
+            - emailContent
+            - replyToOwner
+          type: object
     PortablePublicationPerformance:
       additionalProperties: false
       description: "SCHEMA-3.25.0: size budgets in bytes, each at least 1024 and optional. `htmlBytes` bounds a page's HTML, `cssBytes` and `jsBytes` bound the sum of the same-origin stylesheets and scripts a page links. A page over budget is reported; a budget never fails a build."
@@ -15267,6 +16449,43 @@ components:
       description: NFC Unicode text without disallowed C0/C1 controls or bidi override/isolate controls.
       format: gala-plain-text
       type: string
+    PortablePublicationPolicyPage:
+      additionalProperties: false
+      properties:
+        body:
+          $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+          pattern: ^.+\.md$
+        title:
+          $ref: "#/components/schemas/PortablePublicationPlainText"
+          x-gala-graphemeLength:
+            maximum: 80
+            minimum: 1
+      required:
+        - title
+        - body
+      type: object
+    PortablePublicationPublicationPolicies:
+      additionalProperties: false
+      properties:
+        privacy:
+          $ref: "#/components/schemas/PortablePublicationPolicyPage"
+        terms:
+          $ref: "#/components/schemas/PortablePublicationPolicyPage"
+      required:
+        - terms
+        - privacy
+      type: object
+    PortablePublicationPublicationProfile:
+      additionalProperties: false
+      properties:
+        body:
+          $ref: "#/components/schemas/PortablePublicationRepoRelativePath"
+        route:
+          $ref: "#/components/schemas/PortablePublicationCanonicalRoute"
+      required:
+        - route
+        - body
+      type: object
     PortablePublicationRepoRelativePath:
       description: NFC UTF-8 repository-relative path using slash separators, with no leading slash, dot segment, NUL, backslash, or percent-decoded traversal.
       format: gala-repository-relative-path
@@ -15276,6 +16495,36 @@ components:
       type: string
       x-gala-utf8ByteLength:
         maximum: 512
+    PortablePublicationSharing:
+      additionalProperties: false
+      description: "SCHEMA-3.22.0: the share buttons shown on each article. `targets` is the display order: 0 to 11 unique members of the closed target set. An absent `sharing` member means `[\"copy-link\"]` (the Copy link button only); an empty `targets` array means no share buttons. `native` is shown only where the browser offers the system share sheet; every other target is a plain link to that service's documented share URL. Bookmark is not a share target and is unaffected."
+      properties:
+        targets:
+          items:
+            enum:
+              - copy-link
+              - native
+              - x
+              - bluesky
+              - linkedin
+              - facebook
+              - hacker-news
+              - whatsapp
+              - telegram
+              - reddit
+              - email
+          maxItems: 11
+          minItems: 0
+          type: array
+          uniqueItems: true
+      required:
+        - targets
+      type: object
+    PortablePublicationSlug:
+      maxLength: 80
+      minLength: 1
+      pattern: ^[a-z0-9]+(?:-[a-z0-9]+)*$
+      type: string
     PortablePublicationSocialLink:
       additionalProperties: false
       allOf:
@@ -15319,6 +16568,10 @@ components:
         - type
         - uri
       type: object
+    PortablePublicationStableId:
+      description: Lowercase canonical UUIDv7. Once published, it is immutable; its time ordering conveys neither chronology nor authority.
+      pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+      type: string
     PortablePublicationUrlHttps:
       description: Absolute HTTPS URL without embedded credentials.
       format: uri
@@ -16070,6 +17323,10 @@ components:
     PostOrganizationsByOrganizationIdPublicationTransfersByTransferIdDeclineResponse:
       allOf:
         - $ref: "#/components/schemas/PublicationTransfer"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsRequest:
+      $ref: "#/components/schemas/AssistanceRequestCreate"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse:
+      $ref: "#/components/schemas/AssistanceRequest"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishRequest:
       additionalProperties: false
       properties:
@@ -16304,6 +17561,23 @@ components:
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDeploymentsRollbackResponse:
       allOf:
         - $ref: "#/components/schemas/OperationResponse"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckRequest:
+      additionalProperties: false
+      properties:
+        name:
+          description: The domain name to check, for example `mayawrites.com`.
+          maxLength: 253
+          minLength: 1
+          type: string
+      required:
+        - name
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckResponse:
+      $ref: "#/components/schemas/DomainRegistrationCheck"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsRequest:
+      $ref: "#/components/schemas/DomainRegistrationCreate"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse:
+      $ref: "#/components/schemas/DomainRegistration"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsByDomainIdCheckResponse:
       allOf:
         - $ref: "#/components/schemas/DomainBinding"
@@ -16358,6 +17632,26 @@ components:
         - authorizationUrl
         - expiresAt
       type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressRequest:
+      additionalProperties: false
+      properties:
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+      required:
+        - label
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressResponse:
+      $ref: "#/components/schemas/GalascribeAddressCheck"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressRequest:
+      additionalProperties: false
+      properties:
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+      required:
+        - label
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressResponse:
+      $ref: "#/components/schemas/DomainBinding"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsRequest:
       additionalProperties: false
       properties:
@@ -17346,6 +18640,8 @@ components:
         - expiresAt
         - secret
       type: object
+    PostPlatformAssistanceRequestsByRequestIdCloseResponse:
+      $ref: "#/components/schemas/PlatformAssistanceRequest"
     PostPlatformCachesByCacheIdEvictRequest:
       additionalProperties: false
       properties:
@@ -19616,6 +20912,11 @@ components:
     PutPlatformPlansByPlanKeyRequest:
       additionalProperties: false
       properties:
+        collaboratorLimit:
+          description: SCHEMA-3.30.0, optional; absent keeps the plan's current value. 0 means no limit.
+          format: int64
+          minimum: 0
+          type: integer
         contactForm:
           description: SCHEMA-3.23.0, optional; absent keeps the plan's current value.
           type: boolean
@@ -20974,6 +22275,112 @@ components:
       required:
         - code
       type: object
+    SiteHostingCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: what the site's repository contains that GitHub Pages limits or does not allow. It is advice: nothing here blocks publishing. `findings` is empty and `offers` is empty when the site is fine."
+      properties:
+        checkedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When the check ran.
+        findings:
+          items:
+            $ref: "#/components/schemas/HostingFinding"
+          maxItems: 8
+          type: array
+        host:
+          description: "Where the site is hosted today. `GITHUB_PAGES`: GitHub Pages."
+          enum:
+            - GITHUB_PAGES
+          type: string
+        limits:
+          additionalProperties: false
+          description: The thresholds the check used, so a client can show them.
+          properties:
+            directoryEntries:
+              description: The most entries one folder may hold before `DIRECTORY_TOO_LARGE`.
+              format: int64
+              minimum: 0
+              type: integer
+            fileMaxBytes:
+              description: The file size at which `FILE_OVER_SIZE_LIMIT` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            fileWarningBytes:
+              description: The file size at which `LARGE_FILE` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaWarningBytes:
+              description: The media total at which `HEAVY_MEDIA` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            siteBytes:
+              description: The site size at which `SITE_OVER_SIZE_LIMIT` fires.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - siteBytes
+            - fileWarningBytes
+            - fileMaxBytes
+            - directoryEntries
+            - mediaWarningBytes
+          type: object
+        offers:
+          description: What the person can do about the findings. Empty when there is no finding.
+          items:
+            $ref: "#/components/schemas/HostingOffer"
+          maxItems: 2
+          type: array
+          uniqueItems: true
+        planTier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+          description: The organization's plan tier when the check ran.
+        revision:
+          description: The commit of the default branch that was checked.
+          pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
+          type: string
+        totals:
+          additionalProperties: false
+          properties:
+            files:
+              description: Files in the repository.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaBytes:
+              description: Bytes of images, audio, video and PDFs.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaFiles:
+              description: Number of images, audio, video and PDF files.
+              format: int64
+              minimum: 0
+              type: integer
+            siteBytes:
+              description: Bytes of all files.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - siteBytes
+            - mediaBytes
+            - mediaFiles
+            - files
+          type: object
+      required:
+        - checkedAt
+        - revision
+        - host
+        - planTier
+        - totals
+        - limits
+        - findings
+        - offers
+      type: object
     SiteLastPublished:
       additionalProperties: false
       properties:
@@ -24902,7 +26309,10 @@ paths:
         for the inviter's benefit and is never compared with the accepting
         principal's verified identity (LOCAL-34 G6). The token is single-use and
         non-enumerating; recipient binding is revisited when verified email
-        exists.
+        exists. The organization's plan limits its collaborators (SCHEMA-3.30.0):
+        when accepting would take it past the limit, because the plan changed
+        since the invitation was sent, the answer is `409 PLAN_REQUIRED` and the
+        invitation stays `PENDING`.
       operationId: postMembershipInvitationsByTokenAccept
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -25031,9 +26441,22 @@ paths:
                     status: 409
                     title: INVALID_SOURCE_STATE
                     type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan allows no more collaborators. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: INVALID_SOURCE_STATE
+          description: INVALID_SOURCE_STATE, PLAN_REQUIRED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -25041,6 +26464,7 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
         "422":
           content:
             application/problem+json:
@@ -25086,6 +26510,7 @@ paths:
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
         - REQUEST_FIELD_UNKNOWN
         - VALIDATION_FAILED
       x-gala-replay-identity: invitation-capability
@@ -26229,6 +27654,13 @@ paths:
         the invitation, never a verified identity and never an authorization
         input. Hand the link only to the person it is meant for, and revoke and
         re-invite if it goes astray (LOCAL-34 G6).
+
+        Every organization may invite, on any plan (SCHEMA-3.30.0). A personal
+        organization becomes collaborative with its first invitation. The plan
+        limits how many collaborators the organization may have: active members
+        other than owners plus invitations still `PENDING` (`GET
+        .../plan` shows the count). An invitation past the limit is `409
+        PLAN_REQUIRED`, and the detail names the limit.
       operationId: postOrganizationsByOrganizationIdMembershipInvitations
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -26444,9 +27876,22 @@ paths:
                     status: 409
                     title: INVALID_SOURCE_STATE
                     type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan allows no more collaborators. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -26455,6 +27900,7 @@ paths:
           x-gala-problem-codes:
             - COMMAND_REPLAY_CONFLICT
             - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
         "422":
           content:
             application/problem+json:
@@ -26501,6 +27947,7 @@ paths:
         - AUTHORIZATION_DENIED
         - COMMAND_REPLAY_CONFLICT
         - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
         - REAUTH_REQUIRED
         - REQUEST_FIELD_UNKNOWN
         - RESOURCE_NOT_FOUND
@@ -30434,6 +31881,111 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: ORGANIZATION_PATH
+  /v2/organizations/{organizationId}/plan:
+    get:
+      description: |
+        Needs `organization.view`, so any member of the organization may read it.
+        The organization's plan tier, how many collaborators it may have and how
+        many it has, and what the plan includes: a `name.galascribe.com`
+        address, one included domain and Galascribe hosting. `collaborators.limit`
+        is null when the plan has no limit; `collaborators.used` counts the active
+        members other than owners plus the invitations still `PENDING`.
+        `galascribeAddressZone` is the zone Galascribe addresses are created in and
+        is absent when Galascribe addresses are not configured, so a client hides
+        the option.
+      operationId: getOrganizationsByOrganizationIdPlan
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    collaborators:
+                      limit: null
+                      used: 2
+                    entitlements:
+                      galascribeAddress: true
+                      galascribeHosting: true
+                      includedDomain: false
+                    galascribeAddressZone: galascribe.com
+                    tier: PRO
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPlanResponse"
+          description: read an organization's plan succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: read an organization's plan
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: organization.view
+      x-gala-concurrency: authorization-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read an organization's plan
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_PATH
   /v2/organizations/{organizationId}/publication-imports:
     get:
       description: |
@@ -35102,45 +36654,122 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/changes:publish:
+  /v2/organizations/{organizationId}/publications/{publicationId}/assistance-requests:
+    get:
+      description: |
+        Needs `publication.view`. The requests this site has made to the Galascribe
+        team (`AssistanceRequest`), newest first, open and closed. At most 100.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequests
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    items:
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        findingCodes:
+                          - LARGE_FILE
+                        kind: GALASCRIBE_HOSTING
+                        requestId: 018f0000-0000-7000-8000-000000000001
+                        state: OPEN
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: list a site's requests for help succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: list a site's requests for help
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list a site's requests for help
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
     post:
       description: |
-        Publishes the named repository changes together. For each change, in order:
-
-        1. If the change is behind the main branch head it is brought up to date automatically when that is clean (the same file-level merge as `:bring-up-to-date`). When it is not clean nothing is written for any change and the response is `409 INVALID_SOURCE_STATE` with one error per conflicting path (`code: CONTENT_CONFLICT`, `pointer: /documents/<path>` or `/assets/<path>`) and the live head on `X-Gala-Current-Head`.
-        2. If the publication's `publishingPolicy.requireReview` is true and the change has no approval, `409 INVALID_SOURCE_STATE` with `errors[].code REVIEW_REQUIRED` pointed at `/changeIds/<index>`.
-        3. If `publishingPolicy.galascribeMerges` is true (the default) the server opens and merges the pull request itself through the GitHub App. Otherwise each change must already be merged on GitHub; one that is not is `409 INVALID_SOURCE_STATE` with `errors[].code SOURCE_NOT_MERGED` pointed at `/changeIds/<index>`.
-
-        Then ONE deploy of the resulting main head is started. Success is `202` with the accepted operation (kind `publish`; `publishId` names it, and the operation's `subject.generationId` names the generation once it exists). `scheduledFor` schedules the deploy instead of starting it now and additionally needs `publication.schedule`; it is cancelled with `:cancel` on the publish. `Idempotency-Key` replays the same acceptance. Whole-request validation happens before any change is merged: a refused request merges nothing.
-
-        SCHEMA-3.3.0 scheduling: with `scheduledFor` the request is validated
-        exactly as an immediate publish (changes publishable, review state,
-        repository set up, binding active, no publish in flight) and nothing is
-        merged now; the named changes are merged and deployed at `scheduledFor`,
-        after the same checks run again. `scheduledFor` must be at least 5
-        minutes and at most 366 days ahead, else `422 VALIDATION_FAILED` pointed
-        at `/scheduledFor`. One schedule per publication: `409 SCHEDULE_EXISTS`
-        while another is pending (its `publishId` is in the problem `detail` and
-        in the site read's `schedule`). `409 CANONICAL_BASE_MISMATCH` when the
-        merged head's `gala/publication.json` `canonicalBase` is not the address
-        the site is served at (the active custom domain, else the github.io
-        address); the problem `detail` names the expected value.
-
-        SCHEMA-3.17.0: that problem also carries the optional members
-        `expectedBase` (the address the site is served at, an https URL),
-        `profileBase` (the base the profile carries now, as written),
-        `domainState` (the custom domain's state that decided the expected
-        base, absent without a domain) and `remedy` (one sentence for the
-        author), so a client names both addresses and renders the `remedy`
-        without parsing `detail`. The server first includes the pending "Site
-        address" change in the publish, or proposes one inside the request, and
-        returns the problem only when it cannot. `409 INVALID_SOURCE_STATE`
-        with `errors[].code DOMAIN_NOT_READY` is returned while
-        a custom domain is part-way through its switch and no address can be
-        verified (after the Pages CNAME is set and before the certificate
-        serves); it resolves on its own, and the domain read's `nextStep` says
-        what is being waited on.
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublish
+        Needs `publication.settings.manage`. Paid plans only: `409 PLAN_REQUIRED`
+        on the Free plan. Asks the Galascribe team to do something by hand for the
+        site: `GALASCRIBE_HOSTING` (host what GitHub does not allow, with the
+        `findingCodes` of the hosting check), `DOMAIN_REGISTRATION` (register the
+        included domain `domainName` for the author) or `DOMAIN_MOVE` (move the
+        domain `domainName` to the author's own account). The request is `OPEN`
+        until an operator closes it. When a request of the same `kind` is already
+        `OPEN` for the site, that request is returned with `200` and nothing new
+        is created.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequests
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -35168,74 +36797,293 @@ paths:
               nominal:
                 summary: Nominal valid request
                 value:
-                  changeIds:
-                    - 018f0000-0000-7000-8000-000000000001
+                  findingCodes:
+                    - LARGE_FILE
+                  kind: GALASCRIBE_HOSTING
+                  note: The tour video is 60 MB.
             schema:
-              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishRequest"
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsRequest"
         required: true
       responses:
-        "202":
+        "200":
           content:
             application/json:
               examples:
                 nominal:
-                  summary: Nominal successful response
+                  summary: The request of this kind that is already open
                   value:
-                    commandId: 018f0000-0000-7000-8000-000000000001
-                    operationId: 018f0000-0000-7000-8000-000000000001
-                    phase: accepted
-                    publishId: 018f0000-0000-7000-8000-000000000003
-                    resourceVersion: 0
-                    statusUrl: /v2/organizations/018f0000-0000-7000-8000-000000000001/operations/018f0000-0000-7000-8000-000000000002
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    state: OPEN
               schema:
-                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishResponse"
-          description: publish a batch of changes with one deploy of the resulting main head succeeded
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: a request of the same kind is already open for the site
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
-        "400":
+        "201":
           content:
-            application/problem+json:
+            application/json:
               examples:
-                REQUEST_FIELD_UNKNOWN:
-                  summary: REQUEST_FIELD_UNKNOWN
-                  value:
-                    code: REQUEST_FIELD_UNKNOWN
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: REQUEST_FIELD_UNKNOWN
-                    type: urn:gala:problem:request-field-unknown
-                VALIDATION_FAILED:
-                  summary: VALIDATION_FAILED
+                nominal:
+                  summary: Nominal successful response
                   value:
-                    code: VALIDATION_FAILED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: VALIDATION_FAILED
-                    type: urn:gala:problem:validation-failed
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    state: OPEN
               schema:
-                $ref: "#/components/schemas/Problem"
-          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: ask Galascribe for help with a site succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - REQUEST_FIELD_UNKNOWN
-            - VALIDATION_FAILED
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include asking Galascribe for help. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - PLAN_REQUIRED
+      security:
+        - browserSession: []
+      summary: ask Galascribe for help with a site
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: ask Galascribe for help with a site
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: create
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/changes:publish:
+    post:
+      description: |
+        Publishes the named repository changes together. For each change, in order:
+
+        1. If the change is behind the main branch head it is brought up to date automatically when that is clean (the same file-level merge as `:bring-up-to-date`). When it is not clean nothing is written for any change and the response is `409 INVALID_SOURCE_STATE` with one error per conflicting path (`code: CONTENT_CONFLICT`, `pointer: /documents/<path>` or `/assets/<path>`) and the live head on `X-Gala-Current-Head`.
+        2. If the publication's `publishingPolicy.requireReview` is true and the change has no approval, `409 INVALID_SOURCE_STATE` with `errors[].code REVIEW_REQUIRED` pointed at `/changeIds/<index>`.
+        3. If `publishingPolicy.galascribeMerges` is true (the default) the server opens and merges the pull request itself through the GitHub App. Otherwise each change must already be merged on GitHub; one that is not is `409 INVALID_SOURCE_STATE` with `errors[].code SOURCE_NOT_MERGED` pointed at `/changeIds/<index>`.
+
+        Then ONE deploy of the resulting main head is started. Success is `202` with the accepted operation (kind `publish`; `publishId` names it, and the operation's `subject.generationId` names the generation once it exists). `scheduledFor` schedules the deploy instead of starting it now and additionally needs `publication.schedule`; it is cancelled with `:cancel` on the publish. `Idempotency-Key` replays the same acceptance. Whole-request validation happens before any change is merged: a refused request merges nothing.
+
+        SCHEMA-3.3.0 scheduling: with `scheduledFor` the request is validated
+        exactly as an immediate publish (changes publishable, review state,
+        repository set up, binding active, no publish in flight) and nothing is
+        merged now; the named changes are merged and deployed at `scheduledFor`,
+        after the same checks run again. `scheduledFor` must be at least 5
+        minutes and at most 366 days ahead, else `422 VALIDATION_FAILED` pointed
+        at `/scheduledFor`. One schedule per publication: `409 SCHEDULE_EXISTS`
+        while another is pending (its `publishId` is in the problem `detail` and
+        in the site read's `schedule`). `409 CANONICAL_BASE_MISMATCH` when the
+        merged head's `gala/publication.json` `canonicalBase` is not the address
+        the site is served at (the active custom domain, else the github.io
+        address); the problem `detail` names the expected value.
+
+        SCHEMA-3.17.0: that problem also carries the optional members
+        `expectedBase` (the address the site is served at, an https URL),
+        `profileBase` (the base the profile carries now, as written),
+        `domainState` (the custom domain's state that decided the expected
+        base, absent without a domain) and `remedy` (one sentence for the
+        author), so a client names both addresses and renders the `remedy`
+        without parsing `detail`. The server first includes the pending "Site
+        address" change in the publish, or proposes one inside the request, and
+        returns the problem only when it cannot. `409 INVALID_SOURCE_STATE`
+        with `errors[].code DOMAIN_NOT_READY` is returned while
+        a custom domain is part-way through its switch and no address can be
+        verified (after the Pages CNAME is set and before the certificate
+        serves); it resolves on its own, and the domain read's `nextStep` says
+        what is being waited on.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublish
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  changeIds:
+                    - 018f0000-0000-7000-8000-000000000001
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    commandId: 018f0000-0000-7000-8000-000000000001
+                    operationId: 018f0000-0000-7000-8000-000000000001
+                    phase: accepted
+                    publishId: 018f0000-0000-7000-8000-000000000003
+                    resourceVersion: 0
+                    statusUrl: /v2/organizations/018f0000-0000-7000-8000-000000000001/operations/018f0000-0000-7000-8000-000000000002
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishResponse"
+          description: publish a batch of changes with one deploy of the resulting main head succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                REQUEST_FIELD_UNKNOWN:
+                  summary: REQUEST_FIELD_UNKNOWN
+                  value:
+                    code: REQUEST_FIELD_UNKNOWN
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: REQUEST_FIELD_UNKNOWN
+                    type: urn:gala:problem:request-field-unknown
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: REQUEST_FIELD_UNKNOWN, VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - REQUEST_FIELD_UNKNOWN
+            - VALIDATION_FAILED
         "401":
           content:
             application/problem+json:
@@ -38203,9 +40051,26 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/deployments:
+  /v2/organizations/{organizationId}/publications/{publicationId}/content/preview-context:
     get:
-      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDeployments
+      description: |
+        Needs `publication.view`. The facts the published page reads from the
+        site's repository besides the post itself, so the App's draft preview
+        can render the site's real header menu, footer and author cards:
+        `navigation` (`gala/navigation.json`), `publication`
+        (`gala/publication.json`) and `authors` (every `gala/authors/*.json`).
+        This is the one read of those `gala/` files; `GET .../content/documents`
+        still refuses them. `revision` omitted reads the linked repository's
+        current main head; a supplied `revision` is checked exactly as the
+        documents read checks it, and any other value is `404
+        RESOURCE_NOT_FOUND`. The read is best-effort per member: a file that is
+        absent, unreadable, larger than 256 KiB or invalid against its schema
+        is `null` (`navigation`, `publication`) or left out (`authors`, at most
+        200, in file-name order), and never fails the read. The response
+        carries a strong `ETag` and honours `If-None-Match` with `304` and no
+        body; `Cache-Control` is `private, no-cache`, so a browser stores the
+        body and revalidates it on every use.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdContentPreviewContext
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -38224,8 +40089,21 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
-        - $ref: "#/components/parameters/Cursor"
-        - $ref: "#/components/parameters/Limit"
+        - example: sha1:0000000000000000000000000000000000000000
+          in: query
+          name: revision
+          required: false
+          schema:
+            pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
+            type: string
+        - description: A previously returned `ETag`; a match answers `304`.
+          example: '"a1b2c3d4"'
+          in: header
+          name: If-None-Match
+          required: false
+          schema:
+            maxLength: 256
+            type: string
       responses:
         "200":
           content:
@@ -38234,18 +40112,316 @@ paths:
                 nominal:
                   summary: Nominal successful response
                   value:
-                    hasMore: false
-                    items: []
+                    authors:
+                      - biography: Writes about the craft of publishing.
+                        displayName: Example Author
+                        extensions: {}
+                        id: 018f0000-0000-7000-8000-000000000001
+                        links:
+                          - type: website
+                            uri: https://example.com/
+                        localized: []
+                        schemaId: urn:gala:schema:author:2.0.0
+                        schemaVersion: 2.0.0
+                    navigation:
+                      extensions: {}
+                      footerItems: []
+                      items:
+                        - children: []
+                          label: About
+                          route: /about/
+                          type: internal
+                      schemaId: urn:gala:schema:navigation:2.0.0
+                      schemaVersion: 2.0.0
+                    publication:
+                      authors:
+                        - gala/authors/example-author.json
+                      canonicalBase: https://example.com/
+                      defaultLanguage: en
+                      description: A site about the craft of publishing.
+                      extensions: {}
+                      id: 018f0000-0000-7000-8000-000000000001
+                      schemaId: urn:gala:schema:publication:2.0.0
+                      schemaVersion: 2.0.0
+                      slug: example
+                      socialLinks: []
+                      title: Example
+                    revision: sha1:0000000000000000000000000000000000000000
               schema:
-                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDeploymentsResponse"
-          description: read generation and digest history without artifact bytes succeeded
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdContentPreviewContextResponse"
+          description: read the preview context succeeded
           headers:
             Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
+              $ref: "#/components/headers/CacheControlPrivateNoCache"
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "304":
+          description: the caller's `If-None-Match` still matches; no body
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlPrivateNoCache"
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
         "400":
-          $ref: "#/components/responses/ValidationFailed"
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          content:
+            application/problem+json:
+              examples:
+                AUTHORIZATION_DENIED:
+                  summary: AUTHORIZATION_DENIED
+                  value:
+                    code: AUTHORIZATION_DENIED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 403
+                    title: AUTHORIZATION_DENIED
+                    type: urn:gala:problem:authorization-denied
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHORIZATION_DENIED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHORIZATION_DENIED
+        "404":
+          content:
+            application/problem+json:
+              examples:
+                RESOURCE_NOT_FOUND:
+                  summary: RESOURCE_NOT_FOUND
+                  value:
+                    code: RESOURCE_NOT_FOUND
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 404
+                    title: RESOURCE_NOT_FOUND
+                    type: urn:gala:problem:resource-not-found
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RESOURCE_NOT_FOUND
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RESOURCE_NOT_FOUND
+        "429":
+          content:
+            application/problem+json:
+              examples:
+                RATE_LIMITED:
+                  summary: RATE_LIMITED
+                  value:
+                    code: RATE_LIMITED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 429
+                    title: RATE_LIMITED
+                    type: urn:gala:problem:rate-limited
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: RATE_LIMITED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Retry-After:
+              $ref: "#/components/headers/RetryAfter"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - RATE_LIMITED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+                DEPENDENCY_UNAVAILABLE:
+                  summary: DEPENDENCY_UNAVAILABLE
+                  value:
+                    code: DEPENDENCY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: DEPENDENCY_UNAVAILABLE
+                    type: urn:gala:problem:dependency-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE, DEPENDENCY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+            - DEPENDENCY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: read the preview context
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - Active repository binding and configured GitHub App identity capability
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: binding-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read the preview context
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - DEPENDENCY_UNAVAILABLE
+        - RATE_LIMITED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/deployments:
+    get:
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDeployments
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/Cursor"
+        - $ref: "#/components/parameters/Limit"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    hasMore: false
+                    items: []
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDeploymentsResponse"
+          description: read generation and digest history without artifact bytes succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
         "401":
           content:
             application/problem+json:
@@ -39768,6 +41944,591 @@ paths:
         - PublicationDestination:UNSET|SET
       x-gala-success-category: update
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations:
+    get:
+      description: |
+        Needs `publication.view`. The registrations made for this site, newest
+        first (`DomainRegistration`). At most 20.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrations
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    items:
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        domainName: mayawrites.com
+                        registrationId: 018f0000-0000-7000-8000-000000000001
+                        state: REGISTERING
+                        updatedAt: "2026-11-02T09:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse"
+          description: list the domain registrations of a site succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: list the domain registrations of a site
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: publication-and-destination-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list the domain registrations of a site
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+    post:
+      description: |
+        Needs `publication.settings.manage`. Registers `domainName` for the
+        organization as its one included domain and attaches it to this site.
+        Galascribe re-checks the name, registers it with `registrant` as the
+        domain's owner, then writes the DNS records and attaches the domain, so the
+        person adds no records. The answer is `202` with a `DomainRegistration`
+        that moves through its `state` while the work runs; read it again to follow
+        it. `registrant` is sent to the registrar and is never stored, logged or
+        returned. `409 PLAN_REQUIRED` when the plan has no included domain;
+        `409 INVALID_SOURCE_STATE` when the organization already used its included
+        domain; `422 VALIDATION_FAILED` for a name or registrant field that is not
+        valid; `503 CAPABILITY_UNAVAILABLE` when registration is not set up.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrations
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  domainName: mayawrites.com
+                  registrant:
+                    address:
+                      city: Portland
+                      countryCode: US
+                      postalCode: "97201"
+                      region: OR
+                      street: 12 Example Street
+                    email: maya@example.com
+                    name: Maya Example
+                    phone: "+1.5555555555"
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    domainName: mayawrites.com
+                    registrationId: 018f0000-0000-7000-8000-000000000001
+                    state: REGISTERING
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse"
+          description: register the included domain succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                INVALID_SOURCE_STATE:
+                  summary: INVALID_SOURCE_STATE
+                  value:
+                    code: INVALID_SOURCE_STATE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: INVALID_SOURCE_STATE
+                    type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include a domain. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
+        "422":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 422
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: register the included domain
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - DOMAIN_REGISTRATION_ENABLED
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: organization-version
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: register the included domain
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - COMMAND_REPLAY_CONFLICT
+        - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - Organization:INCLUDED_DOMAIN_UNUSED
+      x-gala-success-category: async
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations/{registrationId}:
+    get:
+      description: |
+        Needs `publication.view`. One registration made for this site. `state`
+        follows the work: `REQUESTED`, `REGISTERING`, `REGISTERED` (bought, records
+        not yet written) and `ATTACHED` (the site uses it; `domainId` names the
+        binding), or `ACTION_REQUIRED` and `FAILED` (`failure` says what happened and
+        the person may ask Galascribe for help).
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationId
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: registrationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    domainId: 018f0000-0000-7000-8000-000000000001
+                    domainName: mayawrites.com
+                    registrationId: 018f0000-0000-7000-8000-000000000001
+                    state: ATTACHED
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationIdResponse"
+          description: read a domain registration succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: read a domain registration
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: publication-and-destination-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read a domain registration
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations:check:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Asks whether `name` can be registered
+        for the organization as its included domain, without registering it. Always
+        `200`: `registrable` is true, or `reason` says why not. `UNAVAILABLE`:
+        already registered. `EXTENSION_NOT_SUPPORTED`: Galascribe cannot register
+        that ending. `PREMIUM`: a premium name, which the included domain does
+        not cover. `OVER_PRICE_CAP`: its first-year price is above what the
+        included domain covers. `INVALID_NAME`: not a usable domain name.
+        `PLAN_REQUIRED`: the plan has no included domain. `ALREADY_USED`: the
+        organization already used its included domain. `NOT_CONFIGURED`:
+        registration is not set up on this deployment. The response carries no
+        price: the domain is included in the plan.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheck
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  name: mayawrites.com
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    name: mayawrites.com
+                    registrable: true
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckResponse"
+          description: check a domain name for registration succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: check a domain name for registration
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: check a domain name for registration
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/domains:
     get:
       description: |
@@ -42412,6 +45173,389 @@ paths:
         - NONE
       x-gala-success-category: update
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domains:check-galascribe-address:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Asks whether `label` can become this
+        site's `label.galascribe.com` address, without reserving it. Always
+        `200`: `available` is true, or `reason` says why not. `INVALID`: not a
+        usable label (3 to 63 lowercase letters, digits and hyphens, not starting
+        or ending with a hyphen). `RESERVED`: a name Galascribe keeps for itself.
+        `TAKEN`: another site has it or something already exists at that name.
+        `PLAN_REQUIRED`: the organization's plan has no Galascribe address.
+        `NOT_CONFIGURED`: Galascribe addresses are not set up on this deployment.
+        `ALREADY_HAS_DOMAIN`: the site already has a domain that is not detached.
+        `hostname` is the full address when the label is well formed.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddress
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  label: maya
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    available: true
+                    hostname: maya.galascribe.com
+                    label: maya
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressResponse"
+          description: check a Galascribe address succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: check a Galascribe address
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: check a Galascribe address
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domains:claim-galascribe-address:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Makes `label.galascribe.com` this
+        site's custom domain. Galascribe owns the DNS records, so the returned
+        `DomainBinding` carries `galascribeManaged` and the person is never asked
+        to add records; the binding then follows the usual domain steps (Pages
+        domain, certificate, base move). `409 PLAN_REQUIRED` when the plan has no
+        Galascribe address; `409 INVALID_SOURCE_STATE` when the site already has a
+        domain that is not detached; `422 VALIDATION_FAILED` pointed at `/label`
+        when the label is `INVALID`, `RESERVED` or `TAKEN` (the reasons of the check
+        read, which tells a client which one); `503 CAPABILITY_UNAVAILABLE` when
+        Galascribe addresses are not configured.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddress
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  label: maya
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressRequest"
+        required: true
+      responses:
+        "201":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    canonicalBase:
+                      current: https://rathnastest.github.io/g11/
+                      published: false
+                      target: https://maya.galascribe.com/
+                    certificate:
+                      state: NONE
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    dns:
+                      observed:
+                        addresses: []
+                        pointsToGithub: false
+                        resolves: false
+                      records: []
+                    domainId: 018f0000-0000-7000-8000-000000000001
+                    galascribeManaged:
+                      kind: GALASCRIBE_ADDRESS
+                    hostname: maya.galascribe.com
+                    kind: SUBDOMAIN
+                    nextStep:
+                      code: WAIT_FOR_DNS
+                      detail: Galascribe is setting this up.
+                    routing:
+                      httpsEnforced: false
+                      probeOk: false
+                      servedByPages: false
+                    state: OWNERSHIP_PENDING
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+                    version: 0
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressResponse"
+          description: claim a Galascribe address succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                INVALID_SOURCE_STATE:
+                  summary: INVALID_SOURCE_STATE
+                  value:
+                    code: INVALID_SOURCE_STATE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: INVALID_SOURCE_STATE
+                    type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include a Galascribe address. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
+        "422":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: That address is reserved. Choose another. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 422
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: claim a Galascribe address
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - GALASCRIBE_ADDRESS_ZONE_CONFIGURED
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: binding-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: claim a Galascribe address
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - COMMAND_REPLAY_CONFLICT
+        - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - PublicationDomain:NONE -> OWNERSHIP_PENDING
+      x-gala-success-category: create
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/followers:
     get:
       description: Needs `publication.audience.read`. `total` is every follow of the site, `authors` the count per author, and `items` the followers newest first as display names, one keyset page at a time. There is no public follower count; this list is for the site's owners and admins.
@@ -55252,6 +58396,199 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/site/hosting-check:
+    get:
+      description: |
+        Needs `publication.view`. What the site's repository contains that GitHub
+        Pages limits or does not allow, as a `SiteHostingCheck`, computed for the
+        default branch's current commit (`revision`) from the repository's file
+        tree and a bounded scan of its pages. It is advice and never blocks
+        publishing: a `LIMIT` finding is something GitHub will refuse or stop
+        serving, a `WARNING` is a risk. `offers` is empty when there is no
+        finding, `UPGRADE` on the Free plan and `REQUEST_GALASCRIBE_HOSTING` on a
+        paid plan. The response carries a strong `ETag` and honours
+        `If-None-Match` with `304` and no body; `Cache-Control` is `private,
+        no-cache`, so a browser stores the body and revalidates it on every use.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheck
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - description: A previously returned `ETag`; a match answers `304`.
+          example: '"1"'
+          in: header
+          name: If-None-Match
+          required: false
+          schema:
+            maxLength: 256
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    checkedAt: "2026-11-02T09:00:00.000Z"
+                    findings:
+                      - bytes: 62914560
+                        code: LARGE_FILE
+                        items:
+                          - bytes: 62914560
+                            path: media/launch-tour.mp4
+                        limitBytes: 52428800
+                        pathCount: 1
+                        severity: WARNING
+                      - code: COMMERCE_PAGE
+                        items:
+                          - path: pages/shop.md
+                            title: Shop
+                        pathCount: 1
+                        severity: WARNING
+                        signals:
+                          - CHECKOUT_LINK
+                          - SHOP_WORDS
+                    host: GITHUB_PAGES
+                    limits:
+                      directoryEntries: 3000
+                      fileMaxBytes: 104857600
+                      fileWarningBytes: 52428800
+                      mediaWarningBytes: 524288000
+                      siteBytes: 1073741824
+                    offers:
+                      - UPGRADE
+                    planTier: FREE
+                    revision: sha1:0000000000000000000000000000000000000000
+                    totals:
+                      files: 142
+                      mediaBytes: 83886080
+                      mediaFiles: 12
+                      siteBytes: 125829120
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheckResponse"
+          description: read a site's hosting check succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlPrivateNoCache"
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "304":
+          description: the caller's `If-None-Match` still matches; no body
+          headers:
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                DEPENDENCY_UNAVAILABLE:
+                  summary: DEPENDENCY_UNAVAILABLE
+                  value:
+                    code: DEPENDENCY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: DEPENDENCY_UNAVAILABLE
+                    type: urn:gala:problem:dependency-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: DEPENDENCY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - DEPENDENCY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: read a site's hosting check
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read a site's hosting check
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - DEPENDENCY_UNAVAILABLE
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/site:publish-update:
     post:
       description: |
@@ -59415,6 +62752,168 @@ paths:
         - NONE
       x-gala-success-category: update
       x-gala-tenant-scope: NONE
+  /v2/platform/assistance-requests:
+    get:
+      description: |
+        Operators only, with recent authentication. Keyset-paged requests that
+        authors made for help with their sites, newest first. `state` limits the
+        list to `OPEN` or `CLOSED` requests. Each item names the organization and
+        site, the GitHub login that asked and the optional note.
+      operationId: getPlatformAssistanceRequests
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - description: Which requests to list. Absent lists both.
+          example: OPEN
+          in: query
+          name: state
+          required: false
+          schema:
+            enum:
+              - OPEN
+              - CLOSED
+            type: string
+        - $ref: "#/components/parameters/Cursor"
+        - $ref: "#/components/parameters/Limit"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    hasMore: false
+                    items:
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        findingCodes:
+                          - LARGE_FILE
+                        kind: GALASCRIBE_HOSTING
+                        note: The tour video is 60 MB.
+                        organizationId: 018f0000-0000-7000-8000-000000000001
+                        organizationName: Maya Studio
+                        publicationId: 018f0000-0000-7000-8000-000000000001
+                        publicationName: Maya Writes
+                        requestId: 018f0000-0000-7000-8000-000000000001
+                        requestedByLogin: maya
+                        state: OPEN
+              schema:
+                $ref: "#/components/schemas/GetPlatformAssistanceRequestsResponse"
+          description: list assistance requests succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+      security:
+        - browserSession: []
+      summary: list assistance requests
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.view
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list assistance requests
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: NONE
+  /v2/platform/assistance-requests/{requestId}:close:
+    post:
+      description: |
+        Operators only, with recent authentication. Marks the request `CLOSED`
+        once the operator has done the work, and returns it. Closing a request that
+        is already closed returns it unchanged.
+      operationId: postPlatformAssistanceRequestsByRequestIdClose
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: requestId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    closedAt: "2026-11-02T09:00:00.000Z"
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    note: The tour video is 60 MB.
+                    organizationId: 018f0000-0000-7000-8000-000000000001
+                    organizationName: Maya Studio
+                    publicationId: 018f0000-0000-7000-8000-000000000001
+                    publicationName: Maya Writes
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    requestedByLogin: maya
+                    state: CLOSED
+              schema:
+                $ref: "#/components/schemas/PostPlatformAssistanceRequestsByRequestIdCloseResponse"
+          description: close an assistance request succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: close an assistance request
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.contact
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: close an assistance request
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REAUTH_REQUIRED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: natural-idempotent-state
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
   /v2/platform/audit-events:
     get:
       description: |
@@ -60894,7 +64393,9 @@ paths:
         its sites may turn on Listen, the audio version of posts). Defaults of
         the first release: FREE 50 and no contact form, PRO 500 and a contact
         form, BUSINESS 2000 and a contact form. Listen defaults: FREE no, PRO
-        and BUSINESS yes.
+        and BUSINESS yes. `collaboratorLimit` (SCHEMA-3.30.0) is the most
+        collaborators an organization on the plan may have, 0 meaning no limit:
+        FREE 1, PRO and BUSINESS no limit.
       operationId: getPlatformPlans
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -60908,17 +64409,20 @@ paths:
                   value:
                     effectiveAt: "2026-10-10T00:00:04.000Z"
                     items:
-                      - contactForm: false
+                      - collaboratorLimit: 1
+                        contactForm: false
                         listen: false
                         newsletterSubscriberLimit: 50
                         planKey: FREE
                         publicationLimit: 1
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 500
                         planKey: PRO
                         publicationLimit: 10
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 2000
                         planKey: BUSINESS
@@ -60968,8 +64472,8 @@ paths:
         Operators only, with recent authentication. Atomically replaces the
         complete publication-capacity release, changing the named plan's limits
         while retaining the other two, at the release version in `If-Match`.
-        `newsletterSubscriberLimit`, `contactForm` and `listen` are optional:
-        absent keeps the plan's current value. The invariant FREE <= PRO <=
+        `newsletterSubscriberLimit`, `contactForm`, `listen` and
+        `collaboratorLimit` are optional: absent keeps the plan's current value. The invariant FREE <= PRO <=
         BUSINESS is enforced on `publicationLimit` only. `reason` is a
         non-sensitive operator reason code recorded in the audit event.
       operationId: putPlatformPlansByPlanKey
@@ -61006,17 +64510,20 @@ paths:
                   value:
                     effectiveAt: "2026-10-10T12:00:00.000Z"
                     items:
-                      - contactForm: false
+                      - collaboratorLimit: 1
+                        contactForm: false
                         listen: false
                         newsletterSubscriberLimit: 50
                         planKey: FREE
                         publicationLimit: 1
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 500
                         planKey: PRO
                         publicationLimit: 12
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 2000
                         planKey: BUSINESS