@rathnasgala2/schemas 3.9.0 → 3.11.0

package/openapi/openapi.yaml

@@ -1048,6 +1048,27 @@ components:
         - detail
         - reversible
       type: object
+    ContactEmail:
+      additionalProperties: false
+      description: The verified GitHub primary email the person agreed to receive account and security notices at. The full address never leaves the server; only a masked form is shown.
+      properties:
+        maskedAddress:
+          description: Masked form such as `a…d@example.com`, never the full address. Null or absent unless `state` is `ON_FILE`.
+          maxLength: 320
+          type:
+            - string
+            - "null"
+        state:
+          enum:
+            - NONE
+            - ON_FILE
+            - WITHDRAWN
+          type: string
+        updatedAt:
+          $ref: "#/components/schemas/PortableProblemRfc3339"
+      required:
+        - state
+      type: object
     ContentChangeAppearanceEntry:
       additionalProperties: false
       description: |
@@ -1056,7 +1077,10 @@ components:
         values to change only `attribution`. `attribution` (SCHEMA-3.3.0) is
         optional: when present the server writes it as
         `gala/appearance.json`'s `attribution`; when absent the file's
-        `attribution` is preserved unchanged.
+        `attribution` is preserved unchanged. `tokens` (SCHEMA-3.10.0) is
+        optional: the author's publication palette, written as
+        `gala/appearance.json`'s `tokens`; when absent the file's `tokens`
+        are preserved unchanged, and `{}` resets to the theme's own colours.
       properties:
         attribution:
           $ref: "#/components/schemas/PortableAppearanceAttribution"
@@ -1064,6 +1088,8 @@ components:
           $ref: "#/components/schemas/AppearanceColorMode"
         themeId:
           $ref: "#/components/schemas/AppearanceThemeId"
+        tokens:
+          $ref: "#/components/schemas/PortableAppearanceSemanticTokens"
       required:
         - themeId
         - colorModeDefault
@@ -4217,6 +4243,8 @@ components:
           uniqueItems: true
         closure:
           $ref: "#/components/schemas/SessionClosure"
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
         credentialEpoch:
           format: int64
           minimum: 0
@@ -6896,6 +6924,9 @@ components:
     PlatformUser:
       additionalProperties: false
       properties:
+        contactEmailOnFile:
+          description: Whether a contact email the person agreed to is on file. The address itself is never returned.
+          type: boolean
         createdAt:
           $ref: "#/components/schemas/PortableProblemRfc3339"
         displayName:
@@ -6938,6 +6969,7 @@ components:
         - lastSignInAt
         - publicationCount
         - planTiers
+        - contactEmailOnFile
       type: object
     PlatformWebhookEvent:
       additionalProperties: false
@@ -7038,6 +7070,51 @@ components:
       minLength: 3
       pattern: ^(?:@[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?/[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?|[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?)@(?:\S+|\S+ \S+)$
       type: string
+    PortableAppearanceSemanticTokens:
+      additionalProperties: false
+      description: "SCHEMA-3.10.0: the author's publication palette. Each role (accent, canvas, text) is optional; when present it carries both light and dark as opaque lowercase #rrggbb. An absent role uses the theme's default; `{}` selects the theme's default palette entirely."
+      properties:
+        accent:
+          additionalProperties: false
+          properties:
+            dark:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+            light:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+          required:
+            - light
+            - dark
+          type: object
+        canvas:
+          additionalProperties: false
+          properties:
+            dark:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+            light:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+          required:
+            - light
+            - dark
+          type: object
+        text:
+          additionalProperties: false
+          properties:
+            dark:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+            light:
+              pattern: ^#[0-9a-f]{6}$
+              type: string
+          required:
+            - light
+            - dark
+          type: object
+      required: []
+      type: object
     PortableAuthorPlainText:
       description: NFC Unicode text without disallowed C0/C1 controls or bidi override/isolate controls.
       format: gala-plain-text
@@ -14819,6 +14896,46 @@ components:
       required:
         - client
       type: object
+    PostPlatformUsersByPersonIdContactRequest:
+      additionalProperties: false
+      properties:
+        body:
+          maxLength: 5000
+          minLength: 1
+          type: string
+        category:
+          enum:
+            - ACCOUNT
+            - SECURITY
+            - SERVICE
+          type: string
+        reason:
+          $ref: "#/components/schemas/PlatformOperatorReasonCode"
+        subject:
+          maxLength: 200
+          minLength: 1
+          type: string
+      required:
+        - category
+        - subject
+        - body
+        - reason
+      type: object
+    PostPlatformUsersByPersonIdContactResponse:
+      additionalProperties: false
+      properties:
+        messageId:
+          format: uuid
+          pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+          type: string
+        state:
+          enum:
+            - QUEUED
+          type: string
+      required:
+        - messageId
+        - state
+      type: object
     PostPublicCommentsByCommentIdAppealsRequest:
       additionalProperties: false
       properties:
@@ -15069,6 +15186,22 @@ components:
         - state
         - fenceAt
       type: object
+    PostSelfContactEmailGrantResponse:
+      additionalProperties: false
+      properties:
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
+      required:
+        - contactEmail
+      type: object
+    PostSelfContactEmailWithdrawResponse:
+      additionalProperties: false
+      properties:
+        contactEmail:
+          $ref: "#/components/schemas/ContactEmail"
+      required:
+        - contactEmail
+      type: object
     PostSelfExportsByExportIdDownloadResponse:
       additionalProperties: false
       properties:
@@ -15677,7 +15810,9 @@ components:
         `themePackage` is not in the catalog. `themePackage` is the file's
         `theme` value, a package with its version range. `attribution`
         (SCHEMA-3.3.0, optional) is the file's footer attribution switch;
-        absent means the file has none, which renders as shown.
+        absent means the file has none, which renders as shown. `tokens`
+        (SCHEMA-3.10.0, optional) is the file's publication palette as read;
+        absent or `{}` means the theme's own colours.
       properties:
         attribution:
           $ref: "#/components/schemas/PortableAppearanceAttribution"
@@ -15689,6 +15824,8 @@ components:
             - type: "null"
         themePackage:
           $ref: "#/components/schemas/PortableAppearancePackageRange"
+        tokens:
+          $ref: "#/components/schemas/PortableAppearanceSemanticTokens"
       required:
         - themeId
         - themePackage
@@ -48547,7 +48684,8 @@ paths:
                   value:
                     hasMore: false
                     items:
-                      - createdAt: "2026-09-01T12:00:00.000Z"
+                      - contactEmailOnFile: true
+                        createdAt: "2026-09-01T12:00:00.000Z"
                         displayName: Ada Reader
                         lastSignInAt: "2026-10-10T11:30:00.000Z"
                         login: ada-reader
@@ -48596,6 +48734,140 @@ paths:
         - NONE
       x-gala-success-category: query
       x-gala-tenant-scope: NONE
+  /v2/platform/users/{personId}:contact:
+    post:
+      description: |
+        Operators only, with recent authentication. Queues one message to the
+        person's contact email, which they agreed to at sign-in. The address is
+        never returned; the message carries the fixed Galascribe wrapper and
+        the operator's text. `category` is `ACCOUNT`, `SECURITY` or `SERVICE`.
+        `reason` is a non-sensitive operator reason code recorded in the audit
+        event. `Idempotency-Key` is the queued-message identity. `202` means the
+        message is queued, not delivered. `404 RESOURCE_NOT_FOUND` for an
+        unknown person; `409 CONTACT_EMAIL_ABSENT` when no contact email is on
+        file or it was withdrawn.
+      operationId: postPlatformUsersByPersonIdContact
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - example: 018f0000-0000-7000-8000-000000000001
+          in: path
+          name: personId
+          required: true
+          schema:
+            format: uuid
+            pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$
+            type: string
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      requestBody:
+        content:
+          application/json:
+            examples:
+              nominal:
+                summary: Nominal valid request
+                value:
+                  body: Your site repository needs attention before we can publish.
+                  category: SERVICE
+                  reason: OPERATOR_REQUESTED
+                  subject: Action needed on your Galascribe site
+            schema:
+              $ref: "#/components/schemas/PostPlatformUsersByPersonIdContactRequest"
+        required: true
+      responses:
+        "202":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    messageId: 018f0000-0000-7000-8000-000000000003
+                    state: QUEUED
+              schema:
+                $ref: "#/components/schemas/PostPlatformUsersByPersonIdContactResponse"
+          description: contact platform user accepted
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          $ref: "#/components/responses/RequestInvalid"
+        "401":
+          $ref: "#/components/responses/PlatformAuthenticationRequired"
+        "403":
+          $ref: "#/components/responses/AuthorizationDenied"
+        "404":
+          $ref: "#/components/responses/ResourceNotFound"
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                CONTACT_EMAIL_ABSENT:
+                  summary: CONTACT_EMAIL_ABSENT
+                  value:
+                    code: CONTACT_EMAIL_ABSENT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: CONTACT_EMAIL_ABSENT
+                    type: urn:gala:problem:contact-email-absent
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, CONTACT_EMAIL_ABSENT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - CONTACT_EMAIL_ABSENT
+      security:
+        - browserSession: []
+      summary: contact platform user
+      tags:
+        - platform
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: platform.users.contact
+      x-gala-concurrency: none
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: contact platform user
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - AUTHORIZATION_DENIED
+        - COMMAND_REPLAY_CONFLICT
+        - CONTACT_EMAIL_ABSENT
+        - REAUTH_REQUIRED
+        - REQUEST_FIELD_UNKNOWN
+        - RESOURCE_NOT_FOUND
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: async
+      x-gala-tenant-scope: NONE
   /v2/platform/webhook-events:
     get:
       description: |
@@ -51721,6 +51993,329 @@ paths:
         - NONE
       x-gala-success-category: protocol
       x-gala-tenant-scope: NONE
+  /v2/self/contact-email:grant:
+    post:
+      description: |
+        Records the person's agreement to receive account and security notices
+        at their verified GitHub primary email. The server reads the address from
+        GitHub with the stored sign-in token, seals it, and answers with the
+        masked form only; the full address never leaves the server. Needs
+        recent authentication: a stale session gets `401 REAUTH_REQUIRED`.
+        `409 CONTACT_EMAIL_UNAVAILABLE` when GitHub reports no verified primary
+        email (`errors[].code` `NO_VERIFIED_PRIMARY_EMAIL`) or the sign-in did
+        not grant the email scope (`SCOPE_NOT_GRANTED`), both at pointer
+        `/contactEmail`; the person signs in again to grant the scope.
+      operationId: postSelfContactEmailGrant
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    contactEmail:
+                      maskedAddress: a…d@example.com
+                      state: ON_FILE
+                      updatedAt: "2026-10-13T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostSelfContactEmailGrantResponse"
+          description: grant contact email succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+                CONTACT_EMAIL_UNAVAILABLE:
+                  summary: CONTACT_EMAIL_UNAVAILABLE
+                  value:
+                    code: CONTACT_EMAIL_UNAVAILABLE
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors:
+                      - code: NO_VERIFIED_PRIMARY_EMAIL
+                        pointer: /contactEmail
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: CONTACT_EMAIL_UNAVAILABLE
+                    type: urn:gala:problem:contact-email-unavailable
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT, CONTACT_EMAIL_UNAVAILABLE
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+            - CONTACT_EMAIL_UNAVAILABLE
+      security:
+        - browserSession: []
+      summary: grant contact email
+      tags:
+        - self
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: null
+      x-gala-concurrency: principal-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: grant contact email
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - COMMAND_REPLAY_CONFLICT
+        - CONTACT_EMAIL_UNAVAILABLE
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
+  /v2/self/contact-email:withdraw:
+    post:
+      description: |
+        Withdraws the agreement to receive notices by email. The sealed address
+        is deleted, the state reads `WITHDRAWN`, and the person is not asked
+        again. Safe to repeat. Needs recent authentication: a stale session
+        gets `401 REAUTH_REQUIRED`.
+      operationId: postSelfContactEmailWithdraw
+      parameters:
+        - $ref: "#/components/parameters/XCorrelationId"
+        - $ref: "#/components/parameters/IdempotencyKey"
+        - $ref: "#/components/parameters/XCsrfToken"
+      responses:
+        "200":
+          content:
+            application/json:
+              examples:
+                nominal:
+                  summary: Nominal successful response
+                  value:
+                    contactEmail:
+                      state: WITHDRAWN
+                      updatedAt: "2026-10-13T12:00:00.000Z"
+              schema:
+                $ref: "#/components/schemas/PostSelfContactEmailWithdrawResponse"
+          description: withdraw contact email succeeded
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+        "400":
+          content:
+            application/problem+json:
+              examples:
+                VALIDATION_FAILED:
+                  summary: VALIDATION_FAILED
+                  value:
+                    code: VALIDATION_FAILED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 400
+                    title: VALIDATION_FAILED
+                    type: urn:gala:problem:validation-failed
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: VALIDATION_FAILED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - VALIDATION_FAILED
+        "401":
+          content:
+            application/problem+json:
+              examples:
+                AUTHENTICATION_REQUIRED:
+                  summary: AUTHENTICATION_REQUIRED
+                  value:
+                    code: AUTHENTICATION_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: AUTHENTICATION_REQUIRED
+                    type: urn:gala:problem:authentication-required
+                REAUTH_REQUIRED:
+                  summary: REAUTH_REQUIRED
+                  value:
+                    code: REAUTH_REQUIRED
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 401
+                    title: REAUTH_REQUIRED
+                    type: urn:gala:problem:reauth-required
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: AUTHENTICATION_REQUIRED, REAUTH_REQUIRED
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - AUTHENTICATION_REQUIRED
+            - REAUTH_REQUIRED
+        "409":
+          content:
+            application/problem+json:
+              examples:
+                COMMAND_REPLAY_CONFLICT:
+                  summary: COMMAND_REPLAY_CONFLICT
+                  value:
+                    code: COMMAND_REPLAY_CONFLICT
+                    correlationId: 018f0000-0000-7000-8000-000000000001
+                    detail: See the operation contract.
+                    errors: []
+                    retryable: false
+                    schemaId: urn:gala:schema:problem:2.0.0
+                    schemaVersion: 2.0.0
+                    status: 409
+                    title: COMMAND_REPLAY_CONFLICT
+                    type: urn:gala:problem:command-replay-conflict
+              schema:
+                $ref: "#/components/schemas/Problem"
+          description: COMMAND_REPLAY_CONFLICT
+          headers:
+            Cache-Control:
+              $ref: "#/components/headers/CacheControlNoStore"
+            X-Correlation-Id:
+              $ref: "#/components/headers/XCorrelationId"
+          x-gala-problem-codes:
+            - COMMAND_REPLAY_CONFLICT
+      security:
+        - browserSession: []
+      summary: withdraw contact email
+      tags:
+        - self
+      x-gala-activation-gate: MVP
+      x-gala-activation-guards:
+        - NONE
+      x-gala-capability-key: null
+      x-gala-concurrency: principal-epoch
+      x-gala-conditional-capabilities: []
+      x-gala-example-profile: NOMINAL_SUCCESS_AND_EACH_REACHABLE_PROBLEM
+      x-gala-nullability: required-and-nullable-are-explicit
+      x-gala-purpose: withdraw contact email
+      x-gala-reachable-problems:
+        - AUTHENTICATION_REQUIRED
+        - COMMAND_REPLAY_CONFLICT
+        - REAUTH_REQUIRED
+        - VALIDATION_FAILED
+      x-gala-replay-identity: idempotency-key
+      x-gala-state-guards:
+        - NONE
+      x-gala-success-category: protocol
+      x-gala-tenant-scope: NONE
   /v2/self/exports:
     get:
       description: |