@rathnasgala2/schemas 3.29.0 → 3.31.0

package/openapi/openapi.yaml

@@ -629,6 +629,93 @@ components:
         - description
         - group
       type: object
+    AssistanceRequest:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: a request the site made to the Galascribe team."
+      properties:
+        closedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When an operator closed the request. Absent while it is `OPEN`.
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        requestId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          $ref: "#/components/schemas/AssistanceRequestState"
+      required:
+        - requestId
+        - kind
+        - state
+        - createdAt
+      type: object
+    AssistanceRequestCreate:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: a request for help with a site."
+      properties:
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        note:
+          description: Anything the person wants the Galascribe team to know.
+          maxLength: 1000
+          type: string
+      required:
+        - kind
+      type: object
+    AssistanceRequestKind:
+      description: "`GALASCRIBE_HOSTING`: host what GitHub Pages does not allow. `DOMAIN_REGISTRATION`: register the included domain by hand. `DOMAIN_MOVE`: move a registered domain to the author's own account."
+      enum:
+        - GALASCRIBE_HOSTING
+        - DOMAIN_REGISTRATION
+        - DOMAIN_MOVE
+      type: string
+    AssistanceRequestList:
+      additionalProperties: false
+      properties:
+        items:
+          items:
+            $ref: "#/components/schemas/AssistanceRequest"
+          maxItems: 100
+          minItems: 0
+          type: array
+      required:
+        - items
+      type: object
+    AssistanceRequestState:
+      description: "`OPEN`: waiting for the Galascribe team. `CLOSED`: an operator finished it."
+      enum:
+        - OPEN
+        - CLOSED
+      type: string
     AudienceAuthor:
       additionalProperties: false
       description: "SCHEMA-3.23.0: an author of a site as the site names it in `gala/publication.json`. `id` is the author's stable id; follows are keyed by (publication, author id)."
@@ -2289,6 +2376,24 @@ components:
           type: string
         expiresAt:
           $ref: "#/components/schemas/PortableProblemRfc3339"
+        galascribeManaged:
+          additionalProperties: false
+          description: |
+            SCHEMA-3.30.0. Present when Galascribe owns the DNS records of this
+            domain, so the person is never asked to add records and a client
+            shows the steps as "Galascribe is setting this up". Absent for a
+            domain the person brought. `GALASCRIBE_ADDRESS`: a free
+            `name.galascribe.com` address (Basic and Pro). `INCLUDED_DOMAIN`: the
+            domain registered for the organization with its plan (Pro).
+          properties:
+            kind:
+              enum:
+                - GALASCRIBE_ADDRESS
+                - INCLUDED_DOMAIN
+              type: string
+          required:
+            - kind
+          type: object
         hostname:
           description: Lower-case ASCII (IDNA) hostname.
           maxLength: 253
@@ -2485,6 +2590,182 @@ components:
         - code
         - detail
       type: object
+    DomainRegistrant:
+      additionalProperties: false
+      description: The person or business that will own the domain. Sent to the registrar and never stored, logged or returned by Galascribe (write-only).
+      properties:
+        address:
+          $ref: "#/components/schemas/DomainRegistrationAddress"
+        email:
+          format: email
+          maxLength: 254
+          minLength: 3
+          type: string
+        name:
+          maxLength: 200
+          minLength: 1
+          type: string
+        organization:
+          description: The business name, when the owner is a business.
+          maxLength: 200
+          minLength: 1
+          type: string
+        phone:
+          description: Country code and number in the form `+1.5555555555`.
+          pattern: ^\+[0-9]{1,3}\.[0-9]{4,14}$
+          type: string
+      required:
+        - name
+        - email
+        - phone
+        - address
+      type: object
+    DomainRegistration:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: the registration of an included domain. The registrant is never part of it."
+      properties:
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainId:
+          description: The domain binding once the site uses the domain (`ATTACHED`).
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        domainName:
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        failure:
+          additionalProperties: false
+          description: Present for `FAILED` and `ACTION_REQUIRED`.
+          properties:
+            code:
+              description: A short machine-readable reason.
+              maxLength: 100
+              minLength: 1
+              type: string
+            detail:
+              description: A plain sentence for the person.
+              maxLength: 500
+              minLength: 1
+              type: string
+          required:
+            - code
+            - detail
+          type: object
+        registrationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          $ref: "#/components/schemas/DomainRegistrationState"
+        updatedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+      required:
+        - registrationId
+        - domainName
+        - state
+        - createdAt
+        - updatedAt
+      type: object
+    DomainRegistrationAddress:
+      additionalProperties: false
+      properties:
+        city:
+          maxLength: 100
+          minLength: 1
+          type: string
+        countryCode:
+          description: ISO 3166-1 alpha-2, upper case.
+          pattern: ^[A-Z]{2}$
+          type: string
+        postalCode:
+          maxLength: 20
+          minLength: 1
+          type: string
+        region:
+          description: State or province (the region), when the country has them.
+          maxLength: 100
+          minLength: 1
+          type: string
+        street:
+          maxLength: 200
+          minLength: 1
+          type: string
+      required:
+        - street
+        - city
+        - postalCode
+        - countryCode
+      type: object
+    DomainRegistrationCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: whether a name can be registered as the included domain. It carries no price: the domain is included in the plan."
+      properties:
+        name:
+          description: The name that was checked, as Galascribe read it.
+          maxLength: 253
+          minLength: 1
+          type: string
+        reason:
+          $ref: "#/components/schemas/DomainRegistrationCheckReason"
+          description: Why the name cannot be registered. Absent when `registrable` is true.
+        registrable:
+          type: boolean
+      required:
+        - name
+        - registrable
+      type: object
+    DomainRegistrationCheckReason:
+      description: "`UNAVAILABLE`: already registered. `EXTENSION_NOT_SUPPORTED`: Galascribe cannot register that ending. `PREMIUM`: a premium name. `OVER_PRICE_CAP`: the first-year price is above what the included domain covers. `INVALID_NAME`: not a usable domain name. `PLAN_REQUIRED`: the plan has no included domain. `ALREADY_USED`: the organization already used its included domain. `NOT_CONFIGURED`: registration is not set up on this deployment."
+      enum:
+        - UNAVAILABLE
+        - EXTENSION_NOT_SUPPORTED
+        - PREMIUM
+        - OVER_PRICE_CAP
+        - INVALID_NAME
+        - PLAN_REQUIRED
+        - ALREADY_USED
+        - NOT_CONFIGURED
+      type: string
+    DomainRegistrationCreate:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: register the included domain."
+      properties:
+        domainName:
+          description: The domain to register, for example `mayawrites.com`.
+          maxLength: 253
+          minLength: 1
+          type: string
+        registrant:
+          $ref: "#/components/schemas/DomainRegistrant"
+      required:
+        - domainName
+        - registrant
+      type: object
+    DomainRegistrationList:
+      additionalProperties: false
+      properties:
+        items:
+          items:
+            $ref: "#/components/schemas/DomainRegistration"
+          maxItems: 20
+          minItems: 0
+          type: array
+      required:
+        - items
+      type: object
+    DomainRegistrationState:
+      description: "`REQUESTED`: accepted, not started. `REGISTERING`: the registrar is registering the name. `ACTION_REQUIRED`: the registrar needs something Galascribe cannot do alone; the person may ask for help. `REGISTERED`: the name is bought and the site does not use it yet. `ATTACHED`: the site uses it; `domainId` names the binding. `FAILED`: registration did not happen; `failure` says why."
+      enum:
+        - REQUESTED
+        - REGISTERING
+        - ACTION_REQUIRED
+        - REGISTERED
+        - ATTACHED
+        - FAILED
+      type: string
     DomainRouting:
       additionalProperties: false
       properties:
@@ -2618,6 +2899,42 @@ components:
         - displayName
         - followedAt
       type: object
+    GalascribeAddressCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: whether a label can become the site's Galascribe address."
+      properties:
+        available:
+          type: boolean
+        hostname:
+          description: The full address, when the label is well formed.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+        reason:
+          $ref: "#/components/schemas/GalascribeAddressReason"
+          description: Why the label cannot be used. Absent when `available` is true.
+      required:
+        - label
+        - available
+      type: object
+    GalascribeAddressLabel:
+      description: "The part before `.galascribe.com`: 3 to 63 lowercase letters, digits and hyphens, not starting or ending with a hyphen. A label that is not usable is answered by the check as `INVALID`."
+      maxLength: 63
+      minLength: 1
+      type: string
+    GalascribeAddressReason:
+      description: "`INVALID`: not a usable label. `RESERVED`: a name Galascribe keeps for itself. `TAKEN`: another site has it or something already exists at that name. `PLAN_REQUIRED`: the plan has no Galascribe address. `NOT_CONFIGURED`: not set up on this deployment. `ALREADY_HAS_DOMAIN`: the site already has a domain that is not detached."
+      enum:
+        - INVALID
+        - RESERVED
+        - TAKEN
+        - PLAN_REQUIRED
+        - NOT_CONFIGURED
+        - ALREADY_HAS_DOMAIN
+      type: string
     GetClaimsByTokenResponse:
       additionalProperties: false
       properties:
@@ -3098,6 +3415,8 @@ components:
         - items
         - hasMore
       type: object
+    GetOrganizationsByOrganizationIdPlanResponse:
+      $ref: "#/components/schemas/OrganizationPlan"
     GetOrganizationsByOrganizationIdPublicationImportsByImportIdResponse:
       allOf:
         - $ref: "#/components/schemas/PublicationImport"
@@ -3251,6 +3570,8 @@ components:
         - catalog
         - openChange
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse:
+      $ref: "#/components/schemas/AssistanceRequestList"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContactFormSettingsResponse:
       $ref: "#/components/schemas/ContactFormSettings"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdContactMessagesResponse:
@@ -3613,6 +3934,10 @@ components:
         - version
         - state
       type: object
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationIdResponse:
+      $ref: "#/components/schemas/DomainRegistration"
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse:
+      $ref: "#/components/schemas/DomainRegistrationList"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsByDomainIdDnsConnectionsByConnectionIdResponse:
       allOf:
         - $ref: "#/components/schemas/DnsConnection"
@@ -4206,6 +4531,8 @@ components:
       type: object
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdSharingSettingsResponse:
       $ref: "#/components/schemas/SharingSettings"
+    GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheckResponse:
+      $ref: "#/components/schemas/SiteHostingCheck"
     GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteResponse:
       additionalProperties: false
       allOf:
@@ -4551,6 +4878,8 @@ components:
       required:
         - items
       type: object
+    GetPlatformAssistanceRequestsResponse:
+      $ref: "#/components/schemas/PlatformAssistanceRequestPage"
     GetPlatformAuditEventsResponse:
       additionalProperties: false
       allOf:
@@ -5846,6 +6175,103 @@ components:
         - reasonCode
         - retryable
       type: object
+    HostingFinding:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: one thing the hosting check found. There is at most one finding per `code`."
+      properties:
+        bytes:
+          description: "The measured size in bytes for a size finding: the total for the site and media findings, the largest file for the file findings."
+          format: int64
+          minimum: 0
+          type: integer
+        code:
+          $ref: "#/components/schemas/HostingFindingCode"
+        items:
+          description: Up to 20 of the files or pages concerned, largest or first found first. `pathCount` is the full number.
+          items:
+            $ref: "#/components/schemas/HostingFindingItem"
+          maxItems: 20
+          type: array
+        limitBytes:
+          description: The threshold in bytes the finding is measured against, for a size finding.
+          format: int64
+          minimum: 0
+          type: integer
+        pathCount:
+          description: How many files or pages the finding concerns in all.
+          format: int64
+          minimum: 0
+          type: integer
+        severity:
+          $ref: "#/components/schemas/HostingFindingSeverity"
+        signals:
+          description: What made a `COMMERCE_PAGE` or `SENSITIVE_FORM` finding fire. Absent for other codes.
+          items:
+            $ref: "#/components/schemas/HostingFindingSignal"
+          maxItems: 5
+          type: array
+          uniqueItems: true
+      required:
+        - code
+        - severity
+        - items
+        - pathCount
+      type: object
+    HostingFindingCode:
+      description: "`SITE_OVER_SIZE_LIMIT`: the published files add up to 1 GiB or more, the most GitHub Pages serves. `SITE_NEAR_SIZE_LIMIT`: they add up to 800 MiB or more. `FILE_OVER_SIZE_LIMIT`: one file is 100 MiB or more, which GitHub refuses. `LARGE_FILE`: one file is 50 MiB or more, which GitHub warns about. `DIRECTORY_TOO_LARGE`: one folder holds more than 3,000 entries. `HEAVY_MEDIA`: images, audio, video and PDFs together are 500 MiB or more. `COMMERCE_PAGE`: a page links to a checkout and uses shop words, or is named like a shop, and GitHub does not allow sites that are mainly for selling. `SENSITIVE_FORM`: a page has a password or card-number field, and GitHub does not allow sending passwords or card numbers."
+      enum:
+        - SITE_OVER_SIZE_LIMIT
+        - SITE_NEAR_SIZE_LIMIT
+        - FILE_OVER_SIZE_LIMIT
+        - LARGE_FILE
+        - DIRECTORY_TOO_LARGE
+        - HEAVY_MEDIA
+        - COMMERCE_PAGE
+        - SENSITIVE_FORM
+      type: string
+    HostingFindingItem:
+      additionalProperties: false
+      description: One file or page a finding is about.
+      properties:
+        bytes:
+          description: The file size in bytes, for size findings.
+          format: int64
+          minimum: 0
+          type: integer
+        path:
+          description: The path in the site's repository.
+          maxLength: 1024
+          minLength: 1
+          type: string
+        title:
+          description: The page's title, when it has one.
+          maxLength: 300
+          minLength: 1
+          type: string
+      required:
+        - path
+      type: object
+    HostingFindingSeverity:
+      description: "`LIMIT`: GitHub will refuse the deploy or stop serving the site. `WARNING`: a risk that does not stop publishing."
+      enum:
+        - LIMIT
+        - WARNING
+      type: string
+    HostingFindingSignal:
+      description: 'What made a `COMMERCE_PAGE` or `SENSITIVE_FORM` finding fire. `CHECKOUT_LINK`: a link to a known checkout or payment host. `SHOP_WORDS`: words such as "add to cart" or "buy now". `SHOP_ADDRESS`: a page address or title such as shop, store, cart or checkout. `PASSWORD_FIELD`: a password input in raw HTML. `CARD_FIELD`: a card-number or security-code input in raw HTML.'
+      enum:
+        - CHECKOUT_LINK
+        - SHOP_WORDS
+        - SHOP_ADDRESS
+        - PASSWORD_FIELD
+        - CARD_FIELD
+      type: string
+    HostingOffer:
+      description: "`UPGRADE`: the Free plan can move to a paid plan, which includes Galascribe hosting. `REQUEST_GALASCRIBE_HOSTING`: a paid plan can ask Galascribe to host what GitHub does not allow."
+      enum:
+        - UPGRADE
+        - REQUEST_GALASCRIBE_HOSTING
+      type: string
     IncomingOwnerTransfer:
       additionalProperties: false
       description: A pending ownership transfer addressed to the caller. `consequenceDigest` is what `:accept` quotes back.
@@ -7873,11 +8299,67 @@ components:
         - startedAt
       type: object
     OrganizationKind:
-      description: "`SINGLE`: a personal (Pro) organization with one owner and no other members. `COLLABORATIVE`: an Enterprise organization with members, roles and custom roles (SCHEMA-3.3.0)."
+      description: "`SINGLE`: a personal organization with one owner and no other members. It becomes `COLLABORATIVE` with its first invitation, on any plan (SCHEMA-3.30.0). `COLLABORATIVE`: an organization with members, roles and custom roles (SCHEMA-3.3.0)."
       enum:
         - SINGLE
         - COLLABORATIVE
       type: string
+    OrganizationPlan:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: an organization's plan as the App needs it. `tier` is the API tier (`FREE`, `PRO`, `BUSINESS`); the plans are named Free, Basic and Pro in billing and in the App, so `PRO` is Basic and `BUSINESS` is Pro."
+      properties:
+        collaborators:
+          additionalProperties: false
+          description: How many people besides the owners the plan lets the organization have.
+          properties:
+            limit:
+              description: The most collaborators the plan allows, or null when the plan has no limit.
+              format: int64
+              minimum: 0
+              type:
+                - integer
+                - "null"
+            used:
+              description: Active members other than owners plus invitations still `PENDING`. An invitation counts from the moment it is sent.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - limit
+            - used
+          type: object
+        entitlements:
+          additionalProperties: false
+          description: What the plan includes. A client hides what is false and offers the upgrade.
+          properties:
+            galascribeAddress:
+              description: A free `name.galascribe.com` address for a site (Basic and Pro).
+              type: boolean
+            galascribeHosting:
+              description: Galascribe can host what GitHub Pages does not allow, on request (Basic and Pro).
+              type: boolean
+            includedDomain:
+              description: One domain registered for the organization at no charge (Pro).
+              type: boolean
+          required:
+            - galascribeAddress
+            - includedDomain
+            - galascribeHosting
+          type: object
+        galascribeAddressZone:
+          description: The zone Galascribe addresses are created in, for example `galascribe.com`. Absent when Galascribe addresses are not configured on this deployment; a client then hides the option.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        tier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+          description: The plan tier.
+      required:
+        - tier
+        - collaborators
+        - entitlements
+      type: object
     OrganizationState:
       enum:
         - PROVISIONING
@@ -8464,6 +8946,114 @@ components:
         - content:write
         - publish
       type: string
+    PlatformAssistanceRequest:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: an assistance request with the organization and site it came from, for the platform operator."
+      properties:
+        closedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When an operator closed the request. Absent while it is `OPEN`.
+        createdAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+        domainName:
+          description: The domain the request is about (`DOMAIN_REGISTRATION`, `DOMAIN_MOVE`). Absent for other kinds.
+          maxLength: 253
+          minLength: 1
+          pattern: ^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$
+          type: string
+        findingCodes:
+          description: The hosting-check findings the request is about (`GALASCRIBE_HOSTING`). Absent for other kinds.
+          items:
+            $ref: "#/components/schemas/HostingFindingCode"
+          maxItems: 8
+          type: array
+          uniqueItems: true
+        kind:
+          $ref: "#/components/schemas/AssistanceRequestKind"
+        note:
+          description: The person's note.
+          maxLength: 1000
+          type: string
+        organizationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        organizationName:
+          maxLength: 200
+          minLength: 1
+          type: string
+        publicationId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        publicationName:
+          maxLength: 200
+          minLength: 1
+          type: string
+        requestId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        requestedByLogin:
+          description: The GitHub login of the person who asked.
+          maxLength: 100
+          minLength: 1
+          type: string
+        state:
+          $ref: "#/components/schemas/AssistanceRequestState"
+      required:
+        - requestId
+        - kind
+        - state
+        - createdAt
+        - organizationId
+        - organizationName
+        - publicationId
+        - publicationName
+        - requestedByLogin
+      type: object
+    PlatformAssistanceRequestPage:
+      additionalProperties: false
+      allOf:
+        - else:
+            properties:
+              nextCursor:
+                type: "null"
+          if:
+            properties:
+              hasMore:
+                not:
+                  enum:
+                    - false
+                type: boolean
+                x-gala-const: true
+            required:
+              - hasMore
+          then:
+            properties:
+              nextCursor:
+                type: string
+            required:
+              - nextCursor
+      properties:
+        hasMore:
+          type: boolean
+        items:
+          items:
+            $ref: "#/components/schemas/PlatformAssistanceRequest"
+          maxItems: 100
+          type: array
+        nextCursor:
+          description: Opaque cursor for the next page. Present and non-null exactly when `hasMore` is true; absent or null when `hasMore` is false.
+          maxLength: 2048
+          minLength: 1
+          type:
+            - string
+            - "null"
+      required:
+        - items
+        - hasMore
+      type: object
     PlatformAuditEvent:
       additionalProperties: false
       description: "One audit event, redacted: identifiers and codes only, never request bodies or secrets."
@@ -8769,6 +9359,11 @@ components:
     PlatformPlan:
       additionalProperties: false
       properties:
+        collaboratorLimit:
+          description: "SCHEMA-3.30.0, the collaborators (active members other than owners plus pending invitations) one organization on this plan may have; a further invitation is `409 PLAN_REQUIRED`. 0 means no limit. Defaults: FREE 1, PRO and BUSINESS no limit."
+          format: int64
+          minimum: 0
+          type: integer
         contactForm:
           description: "SCHEMA-3.23.0, whether sites on this plan may turn on the contact form. A site on a plan without it sees the form locked, and enabling it is `409 PLAN_REQUIRED`. Defaults of the first release: FREE 50 and no contact form, PRO 500 and a contact form, BUSINESS 2000 and a contact form."
           type: boolean
@@ -8792,6 +9387,7 @@ components:
         - newsletterSubscriberLimit
         - contactForm
         - listen
+        - collaboratorLimit
       type: object
     PlatformPlanCapacityRelease:
       additionalProperties: false
@@ -9006,8 +9602,14 @@ components:
     PlatformUser:
       additionalProperties: false
       properties:
+        contactEmail:
+          description: SCHEMA-3.31.0, the contact email address the person agreed to share. Returned only when one is on file and the caller holds `platform.users.contact`; null otherwise.
+          maxLength: 320
+          type:
+            - string
+            - "null"
         contactEmailOnFile:
-          description: Whether a contact email the person agreed to is on file. The address itself is never returned.
+          description: Whether a contact email the person agreed to is on file. True whenever an agreed address is on file, whether or not the caller may see it.
           type: boolean
         createdAt:
           $ref: "#/components/schemas/PortableProblemRfc3339"
@@ -9052,6 +9654,7 @@ components:
         - publicationCount
         - planTiers
         - contactEmailOnFile
+        - contactEmail
       type: object
     PlatformWebhookEvent:
       additionalProperties: false
@@ -16727,6 +17330,10 @@ components:
     PostOrganizationsByOrganizationIdPublicationTransfersByTransferIdDeclineResponse:
       allOf:
         - $ref: "#/components/schemas/PublicationTransfer"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsRequest:
+      $ref: "#/components/schemas/AssistanceRequestCreate"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse:
+      $ref: "#/components/schemas/AssistanceRequest"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublishRequest:
       additionalProperties: false
       properties:
@@ -16961,6 +17568,23 @@ components:
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDeploymentsRollbackResponse:
       allOf:
         - $ref: "#/components/schemas/OperationResponse"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckRequest:
+      additionalProperties: false
+      properties:
+        name:
+          description: The domain name to check, for example `mayawrites.com`.
+          maxLength: 253
+          minLength: 1
+          type: string
+      required:
+        - name
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckResponse:
+      $ref: "#/components/schemas/DomainRegistrationCheck"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsRequest:
+      $ref: "#/components/schemas/DomainRegistrationCreate"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse:
+      $ref: "#/components/schemas/DomainRegistration"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsByDomainIdCheckResponse:
       allOf:
         - $ref: "#/components/schemas/DomainBinding"
@@ -17015,6 +17639,26 @@ components:
         - authorizationUrl
         - expiresAt
       type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressRequest:
+      additionalProperties: false
+      properties:
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+      required:
+        - label
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressResponse:
+      $ref: "#/components/schemas/GalascribeAddressCheck"
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressRequest:
+      additionalProperties: false
+      properties:
+        label:
+          $ref: "#/components/schemas/GalascribeAddressLabel"
+      required:
+        - label
+      type: object
+    PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressResponse:
+      $ref: "#/components/schemas/DomainBinding"
     PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsRequest:
       additionalProperties: false
       properties:
@@ -18003,6 +18647,8 @@ components:
         - expiresAt
         - secret
       type: object
+    PostPlatformAssistanceRequestsByRequestIdCloseResponse:
+      $ref: "#/components/schemas/PlatformAssistanceRequest"
     PostPlatformCachesByCacheIdEvictRequest:
       additionalProperties: false
       properties:
@@ -20273,6 +20919,11 @@ components:
     PutPlatformPlansByPlanKeyRequest:
       additionalProperties: false
       properties:
+        collaboratorLimit:
+          description: SCHEMA-3.30.0, optional; absent keeps the plan's current value. 0 means no limit.
+          format: int64
+          minimum: 0
+          type: integer
         contactForm:
           description: SCHEMA-3.23.0, optional; absent keeps the plan's current value.
           type: boolean
@@ -21631,6 +22282,112 @@ components:
       required:
         - code
       type: object
+    SiteHostingCheck:
+      additionalProperties: false
+      description: "SCHEMA-3.30.0: what the site's repository contains that GitHub Pages limits or does not allow. It is advice: nothing here blocks publishing. `findings` is empty and `offers` is empty when the site is fine."
+      properties:
+        checkedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+          description: When the check ran.
+        findings:
+          items:
+            $ref: "#/components/schemas/HostingFinding"
+          maxItems: 8
+          type: array
+        host:
+          description: "Where the site is hosted today. `GITHUB_PAGES`: GitHub Pages."
+          enum:
+            - GITHUB_PAGES
+          type: string
+        limits:
+          additionalProperties: false
+          description: The thresholds the check used, so a client can show them.
+          properties:
+            directoryEntries:
+              description: The most entries one folder may hold before `DIRECTORY_TOO_LARGE`.
+              format: int64
+              minimum: 0
+              type: integer
+            fileMaxBytes:
+              description: The file size at which `FILE_OVER_SIZE_LIMIT` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            fileWarningBytes:
+              description: The file size at which `LARGE_FILE` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaWarningBytes:
+              description: The media total at which `HEAVY_MEDIA` fires.
+              format: int64
+              minimum: 0
+              type: integer
+            siteBytes:
+              description: The site size at which `SITE_OVER_SIZE_LIMIT` fires.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - siteBytes
+            - fileWarningBytes
+            - fileMaxBytes
+            - directoryEntries
+            - mediaWarningBytes
+          type: object
+        offers:
+          description: What the person can do about the findings. Empty when there is no finding.
+          items:
+            $ref: "#/components/schemas/HostingOffer"
+          maxItems: 2
+          type: array
+          uniqueItems: true
+        planTier:
+          $ref: "#/components/schemas/PlatformPlanKey"
+          description: The organization's plan tier when the check ran.
+        revision:
+          description: The commit of the default branch that was checked.
+          pattern: ^(?:sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64})$
+          type: string
+        totals:
+          additionalProperties: false
+          properties:
+            files:
+              description: Files in the repository.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaBytes:
+              description: Bytes of images, audio, video and PDFs.
+              format: int64
+              minimum: 0
+              type: integer
+            mediaFiles:
+              description: Number of images, audio, video and PDF files.
+              format: int64
+              minimum: 0
+              type: integer
+            siteBytes:
+              description: Bytes of all files.
+              format: int64
+              minimum: 0
+              type: integer
+          required:
+            - siteBytes
+            - mediaBytes
+            - mediaFiles
+            - files
+          type: object
+      required:
+        - checkedAt
+        - revision
+        - host
+        - planTier
+        - totals
+        - limits
+        - findings
+        - offers
+      type: object
     SiteLastPublished:
       additionalProperties: false
       properties:
@@ -25559,7 +26316,10 @@ paths:
         for the inviter's benefit and is never compared with the accepting
         principal's verified identity (LOCAL-34 G6). The token is single-use and
         non-enumerating; recipient binding is revisited when verified email
-        exists.
+        exists. The organization's plan limits its collaborators (SCHEMA-3.30.0):
+        when accepting would take it past the limit, because the plan changed
+        since the invitation was sent, the answer is `409 PLAN_REQUIRED` and the
+        invitation stays `PENDING`.
       operationId: postMembershipInvitationsByTokenAccept
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -25688,9 +26448,22 @@ paths:
                     status: 409
                     title: INVALID_SOURCE_STATE
                     type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan allows no more collaborators. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: INVALID_SOURCE_STATE
+          description: INVALID_SOURCE_STATE, PLAN_REQUIRED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -25698,6 +26471,7 @@ paths:
               $ref: "#/components/headers/XCorrelationId"
           x-gala-problem-codes:
             - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
         "422":
           content:
             application/problem+json:
@@ -25743,6 +26517,7 @@ paths:
       x-gala-reachable-problems:
         - AUTHENTICATION_REQUIRED
         - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
         - REQUEST_FIELD_UNKNOWN
         - VALIDATION_FAILED
       x-gala-replay-identity: invitation-capability
@@ -26886,6 +27661,13 @@ paths:
         the invitation, never a verified identity and never an authorization
         input. Hand the link only to the person it is meant for, and revoke and
         re-invite if it goes astray (LOCAL-34 G6).
+
+        Every organization may invite, on any plan (SCHEMA-3.30.0). A personal
+        organization becomes collaborative with its first invitation. The plan
+        limits how many collaborators the organization may have: active members
+        other than owners plus invitations still `PENDING` (`GET
+        .../plan` shows the count). An invitation past the limit is `409
+        PLAN_REQUIRED`, and the detail names the limit.
       operationId: postOrganizationsByOrganizationIdMembershipInvitations
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -27101,9 +27883,22 @@ paths:
                     status: 409
                     title: INVALID_SOURCE_STATE
                     type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan allows no more collaborators. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
               schema:
                 $ref: "#/components/schemas/Problem"
-          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
@@ -27112,6 +27907,7 @@ paths:
           x-gala-problem-codes:
             - COMMAND_REPLAY_CONFLICT
             - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
         "422":
           content:
             application/problem+json:
@@ -27158,6 +27954,7 @@ paths:
         - AUTHORIZATION_DENIED
         - COMMAND_REPLAY_CONFLICT
         - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
         - REAUTH_REQUIRED
         - REQUEST_FIELD_UNKNOWN
         - RESOURCE_NOT_FOUND
@@ -31091,11 +31888,19 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: ORGANIZATION_PATH
-  /v2/organizations/{organizationId}/publication-imports:
+  /v2/organizations/{organizationId}/plan:
     get:
       description: |
-        The organization's repository imports, newest first.
-      operationId: getOrganizationsByOrganizationIdPublicationImports
+        Needs `organization.view`, so any member of the organization may read it.
+        The organization's plan tier, how many collaborators it may have and how
+        many it has, and what the plan includes: a `name.galascribe.com`
+        address, one included domain and Galascribe hosting. `collaborators.limit`
+        is null when the plan has no limit; `collaborators.used` counts the active
+        members other than owners plus the invitations still `PENDING`.
+        `galascribeAddressZone` is the zone Galascribe addresses are created in and
+        is absent when Galascribe addresses are not configured, so a client hides
+        the option.
+      operationId: getOrganizationsByOrganizationIdPlan
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -31106,8 +31911,6 @@ paths:
             format: uuid
             pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
             type: string
-        - $ref: "#/components/parameters/Cursor"
-        - $ref: "#/components/parameters/Limit"
       responses:
         "200":
           content:
@@ -31116,60 +31919,159 @@ paths:
                 nominal:
                   summary: Nominal successful response
                   value:
-                    hasMore: false
-                    items:
-                      - findings:
-                          - code: V1_SYNTAX_UNSUPPORTED
-                            detail: A gallery block is kept as text.
-                            path: content/posts/trip/index.en.md
-                            severity: WARNING
-                        importId: 018f0000-0000-7000-8000-000000000001
-                        layout: GALA_V1
-                        operationId: 018f0000-0000-7000-8000-000000000002
-                        repository:
-                          defaultBranch: main
-                          fullName: rathnastest/g11
-                          private: false
-                        state: READY
-                        suggested:
-                          name: Priya's notes
-                          slug: priyas-notes
-                        version: 2
+                    collaborators:
+                      limit: null
+                      used: 2
+                    entitlements:
+                      galascribeAddress: true
+                      galascribeHosting: true
+                      includedDomain: false
+                    galascribeAddressZone: galascribe.com
+                    tier: PRO
               schema:
-                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationImportsResponse"
-          description: list repository imports succeeded
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPlanResponse"
+          description: read an organization's plan succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
         "400":
-          content:
-            application/problem+json:
-              examples:
-                VALIDATION_FAILED:
-                  summary: VALIDATION_FAILED
-                  value:
-                    code: VALIDATION_FAILED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: VALIDATION_FAILED
-                    type: urn:gala:problem:validation-failed
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: VALIDATION_FAILED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - VALIDATION_FAILED
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: read an organization's plan
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: organization.view
+      x-gala-concurrency: authorization-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read an organization's plan
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_PATH
+  /v2/organizations/{organizationId}/publication-imports:
+    get:
+      description: |
+        The organization's repository imports, newest first.
+      operationId: getOrganizationsByOrganizationIdPublicationImports
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/Cursor"
+        - $ref: "#/components/parameters/Limit"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    hasMore: false
+                    items:
+                      - findings:
+                          - code: V1_SYNTAX_UNSUPPORTED
+                            detail: A gallery block is kept as text.
+                            path: content/posts/trip/index.en.md
+                            severity: WARNING
+                        importId: 018f0000-0000-7000-8000-000000000001
+                        layout: GALA_V1
+                        operationId: 018f0000-0000-7000-8000-000000000002
+                        repository:
+                          defaultBranch: main
+                          fullName: rathnastest/g11
+                          private: false
+                        state: READY
+                        suggested:
+                          name: Priya's notes
+                          slug: priyas-notes
+                        version: 2
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationImportsResponse"
+          description: list repository imports succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
         "401":
           content:
             application/problem+json:
@@ -35759,45 +36661,341 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/changes:publish:
+  /v2/organizations/{organizationId}/publications/{publicationId}/assistance-requests:
+    get:
+      description: |
+        Needs `publication.view`. The requests this site has made to the Galascribe
+        team (`AssistanceRequest`), newest first, open and closed. At most 100.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequests
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    items:
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        findingCodes:
+                          - LARGE_FILE
+                        kind: GALASCRIBE_HOSTING
+                        requestId: 018f0000-0000-7000-8000-000000000001
+                        state: OPEN
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: list a site's requests for help succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: list a site's requests for help
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list a site's requests for help
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
     post:
       description: |
-        Publishes the named repository changes together. For each change, in order:
-
-        1. If the change is behind the main branch head it is brought up to date automatically when that is clean (the same file-level merge as `:bring-up-to-date`). When it is not clean nothing is written for any change and the response is `409 INVALID_SOURCE_STATE` with one error per conflicting path (`code: CONTENT_CONFLICT`, `pointer: /documents/<path>` or `/assets/<path>`) and the live head on `X-Gala-Current-Head`.
-        2. If the publication's `publishingPolicy.requireReview` is true and the change has no approval, `409 INVALID_SOURCE_STATE` with `errors[].code REVIEW_REQUIRED` pointed at `/changeIds/<index>`.
-        3. If `publishingPolicy.galascribeMerges` is true (the default) the server opens and merges the pull request itself through the GitHub App. Otherwise each change must already be merged on GitHub; one that is not is `409 INVALID_SOURCE_STATE` with `errors[].code SOURCE_NOT_MERGED` pointed at `/changeIds/<index>`.
-
-        Then ONE deploy of the resulting main head is started. Success is `202` with the accepted operation (kind `publish`; `publishId` names it, and the operation's `subject.generationId` names the generation once it exists). `scheduledFor` schedules the deploy instead of starting it now and additionally needs `publication.schedule`; it is cancelled with `:cancel` on the publish. `Idempotency-Key` replays the same acceptance. Whole-request validation happens before any change is merged: a refused request merges nothing.
-
-        SCHEMA-3.3.0 scheduling: with `scheduledFor` the request is validated
-        exactly as an immediate publish (changes publishable, review state,
-        repository set up, binding active, no publish in flight) and nothing is
-        merged now; the named changes are merged and deployed at `scheduledFor`,
-        after the same checks run again. `scheduledFor` must be at least 5
-        minutes and at most 366 days ahead, else `422 VALIDATION_FAILED` pointed
-        at `/scheduledFor`. One schedule per publication: `409 SCHEDULE_EXISTS`
-        while another is pending (its `publishId` is in the problem `detail` and
-        in the site read's `schedule`). `409 CANONICAL_BASE_MISMATCH` when the
-        merged head's `gala/publication.json` `canonicalBase` is not the address
-        the site is served at (the active custom domain, else the github.io
-        address); the problem `detail` names the expected value.
-
-        SCHEMA-3.17.0: that problem also carries the optional members
-        `expectedBase` (the address the site is served at, an https URL),
-        `profileBase` (the base the profile carries now, as written),
-        `domainState` (the custom domain's state that decided the expected
-        base, absent without a domain) and `remedy` (one sentence for the
-        author), so a client names both addresses and renders the `remedy`
-        without parsing `detail`. The server first includes the pending "Site
-        address" change in the publish, or proposes one inside the request, and
-        returns the problem only when it cannot. `409 INVALID_SOURCE_STATE`
-        with `errors[].code DOMAIN_NOT_READY` is returned while
-        a custom domain is part-way through its switch and no address can be
-        verified (after the Pages CNAME is set and before the certificate
-        serves); it resolves on its own, and the domain read's `nextStep` says
-        what is being waited on.
-      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublish
+        Needs `publication.settings.manage`. Paid plans only: `409 PLAN_REQUIRED`
+        on the Free plan. Asks the Galascribe team to do something by hand for the
+        site: `GALASCRIBE_HOSTING` (host what GitHub does not allow, with the
+        `findingCodes` of the hosting check), `DOMAIN_REGISTRATION` (register the
+        included domain `domainName` for the author) or `DOMAIN_MOVE` (move the
+        domain `domainName` to the author's own account). The request is `OPEN`
+        until an operator closes it. When a request of the same `kind` is already
+        `OPEN` for the site, that request is returned with `200` and nothing new
+        is created.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequests
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  findingCodes:
+                    - LARGE_FILE
+                  kind: GALASCRIBE_HOSTING
+                  note: The tour video is 60 MB.
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: The request of this kind that is already open
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    state: OPEN
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: a request of the same kind is already open for the site
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "201":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    state: OPEN
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdAssistanceRequestsResponse"
+          description: ask Galascribe for help with a site succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include asking Galascribe for help. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - PLAN_REQUIRED
+      security:
+        - browserSession: []
+      summary: ask Galascribe for help with a site
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: ask Galascribe for help with a site
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: create
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/changes:publish:
+    post:
+      description: |
+        Publishes the named repository changes together. For each change, in order:
+
+        1. If the change is behind the main branch head it is brought up to date automatically when that is clean (the same file-level merge as `:bring-up-to-date`). When it is not clean nothing is written for any change and the response is `409 INVALID_SOURCE_STATE` with one error per conflicting path (`code: CONTENT_CONFLICT`, `pointer: /documents/<path>` or `/assets/<path>`) and the live head on `X-Gala-Current-Head`.
+        2. If the publication's `publishingPolicy.requireReview` is true and the change has no approval, `409 INVALID_SOURCE_STATE` with `errors[].code REVIEW_REQUIRED` pointed at `/changeIds/<index>`.
+        3. If `publishingPolicy.galascribeMerges` is true (the default) the server opens and merges the pull request itself through the GitHub App. Otherwise each change must already be merged on GitHub; one that is not is `409 INVALID_SOURCE_STATE` with `errors[].code SOURCE_NOT_MERGED` pointed at `/changeIds/<index>`.
+
+        Then ONE deploy of the resulting main head is started. Success is `202` with the accepted operation (kind `publish`; `publishId` names it, and the operation's `subject.generationId` names the generation once it exists). `scheduledFor` schedules the deploy instead of starting it now and additionally needs `publication.schedule`; it is cancelled with `:cancel` on the publish. `Idempotency-Key` replays the same acceptance. Whole-request validation happens before any change is merged: a refused request merges nothing.
+
+        SCHEMA-3.3.0 scheduling: with `scheduledFor` the request is validated
+        exactly as an immediate publish (changes publishable, review state,
+        repository set up, binding active, no publish in flight) and nothing is
+        merged now; the named changes are merged and deployed at `scheduledFor`,
+        after the same checks run again. `scheduledFor` must be at least 5
+        minutes and at most 366 days ahead, else `422 VALIDATION_FAILED` pointed
+        at `/scheduledFor`. One schedule per publication: `409 SCHEDULE_EXISTS`
+        while another is pending (its `publishId` is in the problem `detail` and
+        in the site read's `schedule`). `409 CANONICAL_BASE_MISMATCH` when the
+        merged head's `gala/publication.json` `canonicalBase` is not the address
+        the site is served at (the active custom domain, else the github.io
+        address); the problem `detail` names the expected value.
+
+        SCHEMA-3.17.0: that problem also carries the optional members
+        `expectedBase` (the address the site is served at, an https URL),
+        `profileBase` (the base the profile carries now, as written),
+        `domainState` (the custom domain's state that decided the expected
+        base, absent without a domain) and `remedy` (one sentence for the
+        author), so a client names both addresses and renders the `remedy`
+        without parsing `detail`. The server first includes the pending "Site
+        address" change in the publish, or proposes one inside the request, and
+        returns the problem only when it cannot. `409 INVALID_SOURCE_STATE`
+        with `errors[].code DOMAIN_NOT_READY` is returned while
+        a custom domain is part-way through its switch and no address can be
+        verified (after the Pages CNAME is set and before the certificate
+        serves); it resolves on its own, and the domain read's `nextStep` says
+        what is being waited on.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdChangesPublish
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -40753,12 +41951,12 @@ paths:
         - PublicationDestination:UNSET|SET
       x-gala-success-category: update
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
-  /v2/organizations/{organizationId}/publications/{publicationId}/domains:
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations:
     get:
       description: |
-        The publication's custom domain bindings, current first (at most one is
-        not `DETACHED` or `EXPIRED`).
-      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomains
+        Needs `publication.view`. The registrations made for this site, newest
+        first (`DomainRegistration`). At most 20.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrations
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
         - example: 018f0000-0000-7000-8000-000000000001
@@ -40786,71 +41984,656 @@ paths:
                   summary: Nominal successful response
                   value:
                     items:
-                      - canonicalBase:
-                          current: https://rathnastest.github.io/g11/
-                          published: false
-                          target: https://blog.maya.dev/
-                        certificate:
-                          state: NONE
-                        createdAt: "2026-10-09T12:00:00.000Z"
-                        dns:
-                          observed:
-                            addresses: []
-                            pointsToGithub: false
-                            resolves: false
-                          records:
-                            - name: blog
-                              type: CNAME
-                              value: rathnastest.github.io
-                        domainId: 018f0000-0000-7000-8000-000000000001
-                        expiresAt: "2026-10-16T12:00:00.000Z"
-                        hostname: blog.maya.dev
-                        kind: SUBDOMAIN
-                        nextStep:
-                          code: ADD_DNS_RECORDS
-                          detail: Add the CNAME record at your registrar.
-                        routing:
-                          httpsEnforced: false
-                          probeOk: false
-                          servedByPages: false
-                        state: OWNERSHIP_PENDING
-                        updatedAt: "2026-10-09T12:00:00.000Z"
-                        version: 0
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        domainName: mayawrites.com
+                        registrationId: 018f0000-0000-7000-8000-000000000001
+                        state: REGISTERING
+                        updatedAt: "2026-11-02T09:00:00.000Z"
               schema:
-                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsResponse"
-          description: list the custom domains of a publication succeeded
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse"
+          description: list the domain registrations of a site succeeded
           headers:
             Cache-Control:
               $ref: "#/components/headers/CacheControlNoStore"
             X-Correlation-Id:
               $ref: "#/components/headers/XCorrelationId"
         "400":
-          content:
-            application/problem+json:
-              examples:
-                VALIDATION_FAILED:
-                  summary: VALIDATION_FAILED
-                  value:
-                    code: VALIDATION_FAILED
-                    correlationId: 018f0000-0000-7000-8000-000000000001
-                    detail: See the operation contract.
-                    errors: []
-                    retryable: false
-                    schemaId: urn:gala:schema:problem:2.0.0
-                    schemaVersion: 2.0.0
-                    status: 400
-                    title: VALIDATION_FAILED
-                    type: urn:gala:problem:validation-failed
-              schema:
-                $ref: "#/components/schemas/Problem"
-          description: VALIDATION_FAILED
-          headers:
-            Cache-Control:
-              $ref: "#/components/headers/CacheControlNoStore"
-            X-Correlation-Id:
-              $ref: "#/components/headers/XCorrelationId"
-          x-gala-problem-codes:
-            - VALIDATION_FAILED
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: list the domain registrations of a site
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: publication-and-destination-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list the domain registrations of a site
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+    post:
+      description: |
+        Needs `publication.settings.manage`. Registers `domainName` for the
+        organization as its one included domain and attaches it to this site.
+        Galascribe re-checks the name, registers it with `registrant` as the
+        domain's owner, then writes the DNS records and attaches the domain, so the
+        person adds no records. The answer is `202` with a `DomainRegistration`
+        that moves through its `state` while the work runs; read it again to follow
+        it. `registrant` is sent to the registrar and is never stored, logged or
+        returned. `409 PLAN_REQUIRED` when the plan has no included domain;
+        `409 INVALID_SOURCE_STATE` when the organization already used its included
+        domain; `422 VALIDATION_FAILED` for a name or registrant field that is not
+        valid; `503 CAPABILITY_UNAVAILABLE` when registration is not set up.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrations
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  domainName: mayawrites.com
+                  registrant:
+                    address:
+                      city: Portland
+                      countryCode: US
+                      postalCode: "97201"
+                      region: OR
+                      street: 12 Example Street
+                    email: maya@example.com
+                    name: Maya Example
+                    phone: "+1.5555555555"
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    domainName: mayawrites.com
+                    registrationId: 018f0000-0000-7000-8000-000000000001
+                    state: REGISTERING
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsResponse"
+          description: register the included domain succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                INVALID_SOURCE_STATE:
+                  summary: INVALID_SOURCE_STATE
+                  value:
+                    code: INVALID_SOURCE_STATE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: INVALID_SOURCE_STATE
+                    type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include a domain. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
+        "422":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 422
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: register the included domain
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - DOMAIN_REGISTRATION_ENABLED
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: organization-version
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: register the included domain
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - COMMAND_REPLAY_CONFLICT
+        - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - Organization:INCLUDED_DOMAIN_UNUSED
+      x-gala-success-category: async
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations/{registrationId}:
+    get:
+      description: |
+        Needs `publication.view`. One registration made for this site. `state`
+        follows the work: `REQUESTED`, `REGISTERING`, `REGISTERED` (bought, records
+        not yet written) and `ATTACHED` (the site uses it; `domainId` names the
+        binding), or `ACTION_REQUIRED` and `FAILED` (`failure` says what happened and
+        the person may ask Galascribe for help).
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationId
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: registrationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    domainId: 018f0000-0000-7000-8000-000000000001
+                    domainName: mayawrites.com
+                    registrationId: 018f0000-0000-7000-8000-000000000001
+                    state: ATTACHED
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsByRegistrationIdResponse"
+          description: read a domain registration succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: read a domain registration
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: publication-and-destination-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read a domain registration
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domain-registrations:check:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Asks whether `name` can be registered
+        for the organization as its included domain, without registering it. Always
+        `200`: `registrable` is true, or `reason` says why not. `UNAVAILABLE`:
+        already registered. `EXTENSION_NOT_SUPPORTED`: Galascribe cannot register
+        that ending. `PREMIUM`: a premium name, which the included domain does
+        not cover. `OVER_PRICE_CAP`: its first-year price is above what the
+        included domain covers. `INVALID_NAME`: not a usable domain name.
+        `PLAN_REQUIRED`: the plan has no included domain. `ALREADY_USED`: the
+        organization already used its included domain. `NOT_CONFIGURED`:
+        registration is not set up on this deployment. The response carries no
+        price: the domain is included in the plan.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheck
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  name: mayawrites.com
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    name: mayawrites.com
+                    registrable: true
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainRegistrationsCheckResponse"
+          description: check a domain name for registration succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: check a domain name for registration
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: check a domain name for registration
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domains:
+    get:
+      description: |
+        The publication's custom domain bindings, current first (at most one is
+        not `DETACHED` or `EXPIRED`).
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdDomains
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    items:
+                      - canonicalBase:
+                          current: https://rathnastest.github.io/g11/
+                          published: false
+                          target: https://blog.maya.dev/
+                        certificate:
+                          state: NONE
+                        createdAt: "2026-10-09T12:00:00.000Z"
+                        dns:
+                          observed:
+                            addresses: []
+                            pointsToGithub: false
+                            resolves: false
+                          records:
+                            - name: blog
+                              type: CNAME
+                              value: rathnastest.github.io
+                        domainId: 018f0000-0000-7000-8000-000000000001
+                        expiresAt: "2026-10-16T12:00:00.000Z"
+                        hostname: blog.maya.dev
+                        kind: SUBDOMAIN
+                        nextStep:
+                          code: ADD_DNS_RECORDS
+                          detail: Add the CNAME record at your registrar.
+                        routing:
+                          httpsEnforced: false
+                          probeOk: false
+                          servedByPages: false
+                        state: OWNERSHIP_PENDING
+                        updatedAt: "2026-10-09T12:00:00.000Z"
+                        version: 0
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsResponse"
+          description: list the custom domains of a publication succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
         "401":
           content:
             application/problem+json:
@@ -43397,6 +45180,389 @@ paths:
         - NONE
       x-gala-success-category: update
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domains:check-galascribe-address:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Asks whether `label` can become this
+        site's `label.galascribe.com` address, without reserving it. Always
+        `200`: `available` is true, or `reason` says why not. `INVALID`: not a
+        usable label (3 to 63 lowercase letters, digits and hyphens, not starting
+        or ending with a hyphen). `RESERVED`: a name Galascribe keeps for itself.
+        `TAKEN`: another site has it or something already exists at that name.
+        `PLAN_REQUIRED`: the organization's plan has no Galascribe address.
+        `NOT_CONFIGURED`: Galascribe addresses are not set up on this deployment.
+        `ALREADY_HAS_DOMAIN`: the site already has a domain that is not detached.
+        `hostname` is the full address when the label is well formed.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddress
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  label: maya
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressRequest"
+        required: true
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    available: true
+                    hostname: maya.galascribe.com
+                    label: maya
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsCheckGalascribeAddressResponse"
+          description: check a Galascribe address succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: check a Galascribe address
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: check a Galascribe address
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/domains:claim-galascribe-address:
+    post:
+      description: |
+        Needs `publication.settings.manage`. Makes `label.galascribe.com` this
+        site's custom domain. Galascribe owns the DNS records, so the returned
+        `DomainBinding` carries `galascribeManaged` and the person is never asked
+        to add records; the binding then follows the usual domain steps (Pages
+        domain, certificate, base move). `409 PLAN_REQUIRED` when the plan has no
+        Galascribe address; `409 INVALID_SOURCE_STATE` when the site already has a
+        domain that is not detached; `422 VALIDATION_FAILED` pointed at `/label`
+        when the label is `INVALID`, `RESERVED` or `TAKEN` (the reasons of the check
+        read, which tells a client which one); `503 CAPABILITY_UNAVAILABLE` when
+        Galascribe addresses are not configured.
+      operationId: postOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddress
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  label: maya
+            schema:
+              $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressRequest"
+        required: true
+      responses:
+        "201":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    canonicalBase:
+                      current: https://rathnastest.github.io/g11/
+                      published: false
+                      target: https://maya.galascribe.com/
+                    certificate:
+                      state: NONE
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    dns:
+                      observed:
+                        addresses: []
+                        pointsToGithub: false
+                        resolves: false
+                      records: []
+                    domainId: 018f0000-0000-7000-8000-000000000001
+                    galascribeManaged:
+                      kind: GALASCRIBE_ADDRESS
+                    hostname: maya.galascribe.com
+                    kind: SUBDOMAIN
+                    nextStep:
+                      code: WAIT_FOR_DNS
+                      detail: Galascribe is setting this up.
+                    routing:
+                      httpsEnforced: false
+                      probeOk: false
+                      servedByPages: false
+                    state: OWNERSHIP_PENDING
+                    updatedAt: "2026-11-02T09:00:00.000Z"
+                    version: 0
+              schema:
+                $ref: "#/components/schemas/PostOrganizationsByOrganizationIdPublicationsByPublicationIdDomainsClaimGalascribeAddressResponse"
+          description: claim a Galascribe address succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            Location:
+              $ref: "#/components/headers/Location"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                INVALID_SOURCE_STATE:
+                  summary: INVALID_SOURCE_STATE
+                  value:
+                    code: INVALID_SOURCE_STATE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: INVALID_SOURCE_STATE
+                    type: urn:gala:problem:invalid-source-state
+                PLAN_REQUIRED:
+                  summary: PLAN_REQUIRED
+                  value:
+                    code: PLAN_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: The organization's plan does not include a Galascribe address. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: PLAN_REQUIRED
+                    type: urn:gala:problem:plan-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, INVALID_SOURCE_STATE, PLAN_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - INVALID_SOURCE_STATE
+            - PLAN_REQUIRED
+        "422":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: That address is reserved. Choose another. See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 422
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                CAPABILITY_UNAVAILABLE:
+                  summary: CAPABILITY_UNAVAILABLE
+                  value:
+                    code: CAPABILITY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: CAPABILITY_UNAVAILABLE
+                    type: urn:gala:problem:capability-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: CAPABILITY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - CAPABILITY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: claim a Galascribe address
+      tags:
+        - domains
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - GALASCRIBE_ADDRESS_ZONE_CONFIGURED
+      x-gala-capability-key: publication.settings.manage
+      x-gala-concurrency: binding-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: claim a Galascribe address
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - CAPABILITY_UNAVAILABLE
+        - COMMAND_REPLAY_CONFLICT
+        - INVALID_SOURCE_STATE
+        - PLAN_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - PublicationDomain:NONE -> OWNERSHIP_PENDING
+      x-gala-success-category: create
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/followers:
     get:
       description: Needs `publication.audience.read`. `total` is every follow of the site, `authors` the count per author, and `items` the followers newest first as display names, one keyset page at a time. There is no public follower count; this list is for the site's owners and admins.
@@ -56237,6 +58403,199 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
+  /v2/organizations/{organizationId}/publications/{publicationId}/site/hosting-check:
+    get:
+      description: |
+        Needs `publication.view`. What the site's repository contains that GitHub
+        Pages limits or does not allow, as a `SiteHostingCheck`, computed for the
+        default branch's current commit (`revision`) from the repository's file
+        tree and a bounded scan of its pages. It is advice and never blocks
+        publishing: a `LIMIT` finding is something GitHub will refuse or stop
+        serving, a `WARNING` is a risk. `offers` is empty when there is no
+        finding, `UPGRADE` on the Free plan and `REQUEST_GALASCRIBE_HOSTING` on a
+        paid plan. The response carries a strong `ETag` and honours
+        `If-None-Match` with `304` and no body; `Cache-Control` is `private,
+        no-cache`, so a browser stores the body and revalidates it on every use.
+      operationId: getOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheck
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: organizationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: publicationId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - description: A previously returned `ETag`; a match answers `304`.
+          example: '"1"'
+          in: header
+          name: If-None-Match
+          required: false
+          schema:
+            maxLength: 256
+            type: string
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    checkedAt: "2026-11-02T09:00:00.000Z"
+                    findings:
+                      - bytes: 62914560
+                        code: LARGE_FILE
+                        items:
+                          - bytes: 62914560
+                            path: media/launch-tour.mp4
+                        limitBytes: 52428800
+                        pathCount: 1
+                        severity: WARNING
+                      - code: COMMERCE_PAGE
+                        items:
+                          - path: pages/shop.md
+                            title: Shop
+                        pathCount: 1
+                        severity: WARNING
+                        signals:
+                          - CHECKOUT_LINK
+                          - SHOP_WORDS
+                    host: GITHUB_PAGES
+                    limits:
+                      directoryEntries: 3000
+                      fileMaxBytes: 104857600
+                      fileWarningBytes: 52428800
+                      mediaWarningBytes: 524288000
+                      siteBytes: 1073741824
+                    offers:
+                      - UPGRADE
+                    planTier: FREE
+                    revision: sha1:0000000000000000000000000000000000000000
+                    totals:
+                      files: 142
+                      mediaBytes: 83886080
+                      mediaFiles: 12
+                      siteBytes: 125829120
+              schema:
+                $ref: "#/components/schemas/GetOrganizationsByOrganizationIdPublicationsByPublicationIdSiteHostingCheckResponse"
+          description: read a site's hosting check succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlPrivateNoCache"
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "304":
+          description: the caller's `If-None-Match` still matches; no body
+          headers:
+            ETag:
+              description: Strong validator of this response body.
+              required: true
+              schema:
+                maxLength: 256
+                type: string
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "503":
+          content:
+            application/problem+json:
+              examples:
+                DEPENDENCY_UNAVAILABLE:
+                  summary: DEPENDENCY_UNAVAILABLE
+                  value:
+                    code: DEPENDENCY_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: true
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 503
+                    title: DEPENDENCY_UNAVAILABLE
+                    type: urn:gala:problem:dependency-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: DEPENDENCY_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - DEPENDENCY_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: read a site's hosting check
+      tags:
+        - organizations
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: publication.view
+      x-gala-concurrency: authorization-and-publication-epochs
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: read a site's hosting check
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - DEPENDENCY_UNAVAILABLE
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: ORGANIZATION_AND_PUBLICATION_PATH
   /v2/organizations/{organizationId}/publications/{publicationId}/site:publish-update:
     post:
       description: |
@@ -60400,6 +62759,168 @@ paths:
         - NONE
       x-gala-success-category: update
       x-gala-tenant-scope: NONE
+  /v2/platform/assistance-requests:
+    get:
+      description: |
+        Operators only, with recent authentication. Keyset-paged requests that
+        authors made for help with their sites, newest first. `state` limits the
+        list to `OPEN` or `CLOSED` requests. Each item names the organization and
+        site, the GitHub login that asked and the optional note.
+      operationId: getPlatformAssistanceRequests
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - description: Which requests to list. Absent lists both.
+          example: OPEN
+          in: query
+          name: state
+          required: false
+          schema:
+            enum:
+              - OPEN
+              - CLOSED
+            type: string
+        - $ref: "#/components/parameters/Cursor"
+        - $ref: "#/components/parameters/Limit"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    hasMore: false
+                    items:
+                      - createdAt: "2026-11-02T09:00:00.000Z"
+                        findingCodes:
+                          - LARGE_FILE
+                        kind: GALASCRIBE_HOSTING
+                        note: The tour video is 60 MB.
+                        organizationId: 018f0000-0000-7000-8000-000000000001
+                        organizationName: Maya Studio
+                        publicationId: 018f0000-0000-7000-8000-000000000001
+                        publicationName: Maya Writes
+                        requestId: 018f0000-0000-7000-8000-000000000001
+                        requestedByLogin: maya
+                        state: OPEN
+              schema:
+                $ref: "#/components/schemas/GetPlatformAssistanceRequestsResponse"
+          description: list assistance requests succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+      security:
+        - browserSession: []
+      summary: list assistance requests
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.view
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: list assistance requests
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: safe-query
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: query
+      x-gala-tenant-scope: NONE
+  /v2/platform/assistance-requests/{requestId}:close:
+    post:
+      description: |
+        Operators only, with recent authentication. Marks the request `CLOSED`
+        once the operator has done the work, and returns it. Closing a request that
+        is already closed returns it unchanged.
+      operationId: postPlatformAssistanceRequestsByRequestIdClose
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: requestId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    closedAt: "2026-11-02T09:00:00.000Z"
+                    createdAt: "2026-11-02T09:00:00.000Z"
+                    findingCodes:
+                      - LARGE_FILE
+                    kind: GALASCRIBE_HOSTING
+                    note: The tour video is 60 MB.
+                    organizationId: 018f0000-0000-7000-8000-000000000001
+                    organizationName: Maya Studio
+                    publicationId: 018f0000-0000-7000-8000-000000000001
+                    publicationName: Maya Writes
+                    requestId: 018f0000-0000-7000-8000-000000000001
+                    requestedByLogin: maya
+                    state: CLOSED
+              schema:
+                $ref: "#/components/schemas/PostPlatformAssistanceRequestsByRequestIdCloseResponse"
+          description: close an assistance request succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/ValidationFailed"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+      security:
+        - browserSession: []
+      summary: close an assistance request
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.contact
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: close an assistance request
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - REAUTH_REQUIRED
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: natural-idempotent-state
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
   /v2/platform/audit-events:
     get:
       description: |
@@ -61879,7 +64400,9 @@ paths:
         its sites may turn on Listen, the audio version of posts). Defaults of
         the first release: FREE 50 and no contact form, PRO 500 and a contact
         form, BUSINESS 2000 and a contact form. Listen defaults: FREE no, PRO
-        and BUSINESS yes.
+        and BUSINESS yes. `collaboratorLimit` (SCHEMA-3.30.0) is the most
+        collaborators an organization on the plan may have, 0 meaning no limit:
+        FREE 1, PRO and BUSINESS no limit.
       operationId: getPlatformPlans
       parameters:
         - $ref: "#/components/parameters/XCorrelationId"
@@ -61893,17 +64416,20 @@ paths:
                   value:
                     effectiveAt: "2026-10-10T00:00:04.000Z"
                     items:
-                      - contactForm: false
+                      - collaboratorLimit: 1
+                        contactForm: false
                         listen: false
                         newsletterSubscriberLimit: 50
                         planKey: FREE
                         publicationLimit: 1
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 500
                         planKey: PRO
                         publicationLimit: 10
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 2000
                         planKey: BUSINESS
@@ -61953,8 +64479,8 @@ paths:
         Operators only, with recent authentication. Atomically replaces the
         complete publication-capacity release, changing the named plan's limits
         while retaining the other two, at the release version in `If-Match`.
-        `newsletterSubscriberLimit`, `contactForm` and `listen` are optional:
-        absent keeps the plan's current value. The invariant FREE <= PRO <=
+        `newsletterSubscriberLimit`, `contactForm`, `listen` and
+        `collaboratorLimit` are optional: absent keeps the plan's current value. The invariant FREE <= PRO <=
         BUSINESS is enforced on `publicationLimit` only. `reason` is a
         non-sensitive operator reason code recorded in the audit event.
       operationId: putPlatformPlansByPlanKey
@@ -61991,17 +64517,20 @@ paths:
                   value:
                     effectiveAt: "2026-10-10T12:00:00.000Z"
                     items:
-                      - contactForm: false
+                      - collaboratorLimit: 1
+                        contactForm: false
                         listen: false
                         newsletterSubscriberLimit: 50
                         planKey: FREE
                         publicationLimit: 1
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 500
                         planKey: PRO
                         publicationLimit: 12
-                      - contactForm: true
+                      - collaboratorLimit: 0
+                        contactForm: true
                         listen: true
                         newsletterSubscriberLimit: 2000
                         planKey: BUSINESS
@@ -63424,7 +65953,7 @@ paths:
           required: false
           schema:
             $ref: "#/components/schemas/PlatformPersonState"
-        - description: Case-insensitive match against person id, display name, or login.
+        - description: Case-insensitive match against person id, display name, or login. A search containing "@" also matches a person whose contact email on file equals it exactly (case-insensitive).
           example: ada
           in: query
           name: search
@@ -63445,7 +65974,8 @@ paths:
                   value:
                     hasMore: false
                     items:
-                      - contactEmailOnFile: true
+                      - contactEmail: ada@example.com
+                        contactEmailOnFile: true
                         createdAt: "2026-09-01T12:00:00.000Z"
                         displayName: Ada Reader
                         lastSignInAt: "2026-10-10T11:30:00.000Z"