@remit/api-openapi-spec 0.0.79 → 0.0.81

package/openapi.json

@@ -2601,7 +2601,7 @@
       },
       "delete": {
         "operationId": "CalendarEventDetailOperations_deleteCalendarEvent",
-        "description": "Delete an event. `All` removes the resource and every occurrence it\nproduced; `This` writes an EXDATE for the named occurrence and keeps the\nrest of the series; `Following` truncates the series to end just before\nit.\n\nSame refusals and the same `If-Match` precondition as the update.\nAn event in a `Subscribed` collection is refused with 400\n`read_only_calendar`, here and on the update.",
+        "description": "Delete an event. `All` removes the resource and every occurrence it\nproduced; `This` writes an EXDATE for the named occurrence and keeps the\nrest of the series; `Following` truncates the series to end just before\nit.\n\nSame refusals and the same `If-Match` precondition as the update.\nAn event in a `Subscribed` collection is refused with 400\n`read_only_calendar`, here and on the update.\n\nAnswers 200 with the cancellations it queued: one per guest when the\nreader organizes the event, none otherwise.",
         "parameters": [
           {
             "name": "calendarObjectId",
@@ -2648,8 +2648,15 @@
           }
         ],
         "responses": {
-          "204": {
-            "description": "Nothing to return. The resource, or the occurrence, is gone."
+          "200": {
+            "description": "What deleting an event sent: one cancellation per guest when the reader organizes it, nothing otherwise.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarEventDeleteResponse"
+                }
+              }
+            }
           },
           "400": {
             "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
@@ -3135,6 +3142,398 @@
         }
       }
     },
+    "/calendar-tasks": {
+      "get": {
+        "operationId": "CalendarTaskOperations_listCalendarTasks",
+        "description": "Tasks due in a window, across every task collection the caller holds, in due order. Refused with 400 on the same window rules as the event listing.",
+        "parameters": [
+          {
+            "name": "from",
+            "in": "query",
+            "required": true,
+            "description": "Start of the window, an ISO 8601 date-time with zone offset. Inclusive.",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "to",
+            "in": "query",
+            "required": true,
+            "description": "End of the window, an ISO 8601 date-time with zone offset. Exclusive.",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": false,
+            "description": "Restrict to these task collections, repeated once per calendar. Omitted means every one the caller holds.",
+            "schema": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/UUID"
+              }
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskListResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "post": {
+        "operationId": "CalendarTaskOperations_createCalendarTask",
+        "description": "Create a task. Refused with 400 `not_a_task_calendar` when `calendarId` names an event collection.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.CreateCalendarTaskInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/calendar-tasks/{calendarTaskId}": {
+      "get": {
+        "operationId": "CalendarTaskDetailOperations_getCalendarTask",
+        "parameters": [
+          {
+            "name": "calendarTaskId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": false,
+            "description": "Collection the task lives in. Omitted, it is looked for in every task collection the caller holds.",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "patch": {
+        "operationId": "CalendarTaskDetailOperations_updateCalendarTask",
+        "description": "Update a task. `If-Match` makes the write conditional on the etag the caller read; a mismatch is 412.",
+        "parameters": [
+          {
+            "name": "calendarTaskId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": true,
+            "description": "Collection the task lives in",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "If-Match",
+            "in": "header",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "412": {
+            "description": "The condition the request stated is no longer true. Answered when an\n`If-Match` names an etag the stored resource no longer carries: somebody else\nwrote it in between, so applying this request would silently discard their\nchange. The client re-reads the resource and decides what to do with the\nversion it now has. `code` is `precondition_failed`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.UpdateCalendarTaskInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "delete": {
+        "operationId": "CalendarTaskDetailOperations_deleteCalendarTask",
+        "description": "Delete a task. Same `If-Match` precondition as the update.",
+        "parameters": [
+          {
+            "name": "calendarTaskId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": true,
+            "description": "Collection the task lives in",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "If-Match",
+            "in": "header",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Nothing to return. The resource, or the occurrence, is gone."
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "412": {
+            "description": "The condition the request stated is no longer true. Answered when an\n`If-Match` names an etag the stored resource no longer carries: somebody else\nwrote it in between, so applying this request would silently discard their\nchange. The client re-reads the resource and decides what to do with the\nversion it now has. `code` is `precondition_failed`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
     "/calendars": {
       "get": {
         "operationId": "CalendarOperations_listCalendars",
@@ -5537,37 +5936,150 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentResponse"
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/outbox/{outboxMessageId}/send": {
+      "post": {
+        "operationId": "OutboxDetailOperations_sendOutboxMessage",
+        "description": "Queue a draft message for sending. A draft on an account whose syncedServices leave out Mail is refused with 400 `mail_sync_off`, and stays a draft.",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
           },
-          "400": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
-          },
-          "401": {
-            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/settings": {
+      "get": {
+        "operationId": "UserSettingsOperations_getUserSettings",
+        "description": "Read the caller's settings.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ApiError"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
           },
-          "413": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
@@ -5581,29 +6093,18 @@
             "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
           }
         }
-      }
-    },
-    "/outbox/{outboxMessageId}/send": {
-      "post": {
-        "operationId": "OutboxDetailOperations_sendOutboxMessage",
-        "description": "Queue a draft message for sending. A draft on an account whose syncedServices leave out Mail is refused with 400 `mail_sync_off`, and stays a draft.",
-        "parameters": [
-          {
-            "name": "outboxMessageId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "$ref": "#/components/schemas/UUID"
-            }
-          }
-        ],
+      },
+      "patch": {
+        "operationId": "UserSettingsOperations_updateUserSettings",
+        "description": "Change the caller's settings. Answers with every setting as it now stands.",
+        "parameters": [],
         "responses": {
           "200": {
             "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
@@ -5627,19 +6128,46 @@
                 }
               }
             }
-          },
-          "403": {
-            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.UpdateUserSettingsInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/settings/default-invitation-sender": {
+      "delete": {
+        "operationId": "UserSettingsOperations_clearDefaultInvitationSender",
+        "description": "Clear the chosen default invitation sender. Invitations then go out from the account an event is on. Answers with every setting as it now stands.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ApiError"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
           },
-          "404": {
-            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
@@ -7116,6 +7644,117 @@
         ],
         "description": "Whether an answered cancellation holds the calendar object this suggestion's answer wrote. A cancellation is terminal, so such an answer cannot be taken back."
       },
+      "RemitImap.CalendarAttendee": {
+        "type": "object",
+        "required": [
+          "email",
+          "displayName",
+          "role",
+          "status"
+        ],
+        "properties": {
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Mail address, lower-cased"
+          },
+          "displayName": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The CN parameter. `\"\"` when the line carries none."
+          },
+          "role": {
+            "$ref": "#/components/schemas/RemitImap.CalendarAttendeeRole"
+          },
+          "status": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarAttendeeStatus"
+              }
+            ],
+            "description": "The answer. The organizer reads as `Accepted`."
+          }
+        },
+        "description": "One person on an event's guest list, read from its ORGANIZER and ATTENDEE lines."
+      },
+      "RemitImap.CalendarAttendeeCounts": {
+        "type": "object",
+        "required": [
+          "accepted",
+          "declined",
+          "tentative",
+          "needsAction"
+        ],
+        "properties": {
+          "accepted": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "declined": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "tentative": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "needsAction": {
+            "type": "integer",
+            "format": "int32"
+          }
+        },
+        "description": "How many people on the guest list gave each answer, the organizer counted as a yes."
+      },
+      "RemitImap.CalendarAttendeeInput": {
+        "type": "object",
+        "required": [
+          "email",
+          "displayName"
+        ],
+        "properties": {
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The guest's mail address"
+          },
+          "displayName": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The guest's name. The address itself when the contact has none."
+          }
+        },
+        "description": "A guest as the event editor sends one."
+      },
+      "RemitImap.CalendarAttendeeRole": {
+        "type": "string",
+        "enum": [
+          "Organizer",
+          "Guest"
+        ],
+        "description": "What one person on an event's guest list is to it."
+      },
+      "RemitImap.CalendarAttendeeStatus": {
+        "type": "string",
+        "enum": [
+          "NeedsAction",
+          "Accepted",
+          "Tentative",
+          "Declined"
+        ],
+        "description": "A guest's answer to an event, read from the ATTENDEE line's PARTSTAT (RFC 5545 3.2.12)."
+      },
       "RemitImap.CalendarColor": {
         "type": "string",
         "enum": [
@@ -7131,9 +7770,25 @@
       "RemitImap.CalendarComponentSet": {
         "type": "string",
         "enum": [
-          "VeventOnly"
+          "VeventOnly",
+          "VtodoOnly"
+        ],
+        "description": "Which iCalendar components a collection accepts (RFC 4791 supported-calendar-component-set). The value is a property of the collection rather than of each object, so an event collection and a task collection are separate collections."
+      },
+      "RemitImap.CalendarEventDeleteResponse": {
+        "type": "object",
+        "required": [
+          "sends"
         ],
-        "description": "Which iCalendar components a collection accepts (RFC 4791 supported-calendar-component-set). Only VEVENT is stored today; VTODO and VJOURNAL collections would be separate members, so the value is a property of the collection rather than of each object."
+        "properties": {
+          "sends": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarSchedulingSend"
+            }
+          }
+        },
+        "description": "What deleting an event sent: one cancellation per guest when the reader organizes it, nothing otherwise."
       },
       "RemitImap.CalendarEventInstance": {
         "type": "object",
@@ -7150,7 +7805,8 @@
           "transparency",
           "zoneCertainty",
           "etag",
-          "hasRecurrence"
+          "hasRecurrence",
+          "participation"
         ],
         "properties": {
           "calendarId": {
@@ -7248,6 +7904,14 @@
           "hasRecurrence": {
             "type": "boolean",
             "description": "Whether the resource this occurrence came from expands to more than one instance. A client showing the recurrence-scope prompt gates on this."
+          },
+          "participation": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarParticipation"
+              }
+            ],
+            "description": "Where the reader stands on this occurrence. Only the reader's own answer: the guest list is on `getCalendarEvent`."
           }
         },
         "description": "One occurrence of an event, in the window the caller asked for (issue #15).\n\nInstances are expanded by the server. A client never reads an RRULE and never\nreconstructs a series: it renders what this returns, and addresses one\noccurrence by `calendarObjectId` plus `recurrenceId`."
@@ -7288,7 +7952,12 @@
           "hasRecurrence",
           "expandedThrough",
           "createdAt",
-          "updatedAt"
+          "updatedAt",
+          "participation",
+          "organizer",
+          "attendees",
+          "attendeeCounts",
+          "sends"
         ],
         "properties": {
           "calendarObjectId": {
@@ -7443,9 +8112,42 @@
             "type": "integer",
             "format": "int64",
             "readOnly": true
+          },
+          "participation": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarParticipation"
+              }
+            ],
+            "description": "Where the reader stands on the event's master"
+          },
+          "organizer": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Mail address of the ORGANIZER, lower-cased. `\"\"` when the event names none."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendee"
+            },
+            "description": "Everyone on the guest list, organizer first. Empty when the event has no guests."
+          },
+          "attendeeCounts": {
+            "$ref": "#/components/schemas/RemitImap.CalendarAttendeeCounts"
+          },
+          "sends": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarSchedulingSend"
+            },
+            "description": "The scheduling messages about this event still in the outbox. A write answers with the ones it queued; a read with every one not yet sent and filed."
           }
         },
-        "description": "A stored calendar resource — the bytes behind one event, plus the columns projected from them. `icalData` is canonical; every other field is derived from it on write."
+        "description": "A stored calendar resource — the bytes behind one event, plus the columns\nprojected from them. `icalData` is canonical; every other field is derived\nfrom it on write or on this read."
       },
       "RemitImap.CalendarEventStatus": {
         "type": "string",
@@ -7568,9 +8270,10 @@
         "type": "string",
         "enum": [
           "Accepted",
-          "Tentative"
+          "Tentative",
+          "Declined"
         ],
-        "description": "The answer an invitation is added to a calendar with. It is written as the user's `ATTENDEE;PARTSTAT` on the stored event (RFC 5545 3.2.12) and becomes the suggestion's state."
+        "description": "The answer a guest gives an invitation. It is written as the reader's `ATTENDEE;PARTSTAT` on the stored event (RFC 5545 3.2.12)."
       },
       "RemitImap.CalendarInviteMethod": {
         "type": "string",
@@ -7599,6 +8302,18 @@
         },
         "description": "Every calendar collection of the caller's account config, url segment first. Unpaginated: an account holds a handful of calendars, and a page boundary in a sidebar is a bug waiting to happen."
       },
+      "RemitImap.CalendarParticipation": {
+        "type": "string",
+        "enum": [
+          "Unscheduled",
+          "Organizer",
+          "NeedsAction",
+          "Accepted",
+          "Tentative",
+          "Declined"
+        ],
+        "description": "Where the reader stands on one occurrence, projected from its ORGANIZER and ATTENDEE lines against the addresses of the reader's own accounts."
+      },
       "RemitImap.CalendarResponse": {
         "type": "object",
         "required": [
@@ -7729,28 +8444,62 @@
             "default": 0,
             "readOnly": true
           },
-          "subscriptionError": {
+          "subscriptionError": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Why the last fetch failed, or which events in it could not be stored. `\"\"` when the last fetch landed whole.",
+            "default": "",
+            "readOnly": true
+          },
+          "createdAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          },
+          "updatedAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          }
+        },
+        "description": "A calendar collection as the API returns it."
+      },
+      "RemitImap.CalendarSchedulingSend": {
+        "type": "object",
+        "required": [
+          "email",
+          "outboxMessageId",
+          "method",
+          "status"
+        ],
+        "properties": {
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The one address the message is to"
+          },
+          "outboxMessageId": {
+            "$ref": "#/components/schemas/UUID"
+          },
+          "method": {
+            "$ref": "#/components/schemas/RemitImap.CalendarInviteMethod"
+          },
+          "status": {
             "allOf": [
               {
-                "$ref": "#/components/schemas/String512"
+                "$ref": "#/components/schemas/RemitImap.OutboxMessageStatus"
               }
             ],
-            "description": "Why the last fetch failed, or which events in it could not be stored. `\"\"` when the last fetch landed whole.",
-            "default": "",
-            "readOnly": true
-          },
-          "createdAt": {
-            "type": "integer",
-            "format": "int64",
-            "readOnly": true
-          },
-          "updatedAt": {
-            "type": "integer",
-            "format": "int64",
-            "readOnly": true
+            "description": "Where the message stood when this response was built"
           }
         },
-        "description": "A calendar collection as the API returns it."
+        "description": "One scheduling message an event write put in the outbox: an invitation, a cancellation or a reply. A client follows `outboxMessageId` to learn whether it went, and resends a failed one with `sendOutboxMessage`."
       },
       "RemitImap.CalendarSource": {
         "type": "string",
@@ -8002,6 +8751,151 @@
         ],
         "description": "What has become of a suggestion. `Pending` is the only state that asks a person for anything; every other value is a decision already taken, and nothing but an explicit act moves a suggestion out of `Pending`."
       },
+      "RemitImap.CalendarTaskListResponse": {
+        "type": "object",
+        "required": [
+          "items"
+        ],
+        "properties": {
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
+            }
+          }
+        },
+        "description": "Tasks due in the requested window, in due order. Unpaginated: the window is the bound."
+      },
+      "RemitImap.CalendarTaskResponse": {
+        "type": "object",
+        "required": [
+          "calendarTaskId",
+          "calendarId",
+          "resourceName",
+          "icalUid",
+          "icalData",
+          "etag",
+          "summary",
+          "description",
+          "due",
+          "dueAt",
+          "allDay",
+          "completed",
+          "createdAt",
+          "updatedAt"
+        ],
+        "properties": {
+          "calendarTaskId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Primary identifier, derived from calendarId + resourceName",
+            "readOnly": true
+          },
+          "calendarId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Collection this task belongs to, a `VtodoOnly` one",
+            "readOnly": true
+          },
+          "resourceName": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String256"
+              }
+            ],
+            "description": "Last path segment of the resource's URL, e.g. \"a1b2c3.ics\"",
+            "readOnly": true
+          },
+          "icalUid": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The VTODO's UID property",
+            "readOnly": true
+          },
+          "icalData": {
+            "type": "string",
+            "description": "The complete VCALENDAR text — CANONICAL",
+            "readOnly": true
+          },
+          "etag": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "Strong entity tag over the stored `icalData` bytes, for If-Match",
+            "readOnly": true
+          },
+          "summary": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Projection of the VTODO's SUMMARY. `\"\"` when it carries none.",
+            "readOnly": true
+          },
+          "description": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String2048"
+              }
+            ],
+            "description": "Projection of the VTODO's DESCRIPTION. `\"\"` when it carries none.",
+            "readOnly": true
+          },
+          "due": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "Projection of the VTODO's DUE as an ISO 8601 date-time with zone offset, read in the collection's timezone — a business date. An all-day task carries midnight of its civil date.",
+            "readOnly": true
+          },
+          "dueAt": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "The same moment as `due`, as an ISO 8601 UTC instant, so `byDue` orders across zones.",
+            "readOnly": true
+          },
+          "allDay": {
+            "type": "boolean",
+            "description": "Whether DUE is a DATE rather than a DATE-TIME: the task is due on a day, not at a time",
+            "default": false,
+            "readOnly": true
+          },
+          "completed": {
+            "type": "boolean",
+            "description": "Whether the VTODO is done: `STATUS:COMPLETED`",
+            "default": false,
+            "readOnly": true
+          },
+          "createdAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          },
+          "updatedAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          }
+        },
+        "description": "A stored task, as the API returns it."
+      },
       "RemitImap.CalendarTransparency": {
         "type": "string",
         "enum": [
@@ -8457,6 +9351,21 @@
               }
             ],
             "description": "RRULE value for a recurring event, e.g. \"FREQ=WEEKLY;BYDAY=MO\" (RFC 5545 3.8.5.3), without the property name. `\"\"` creates a single event. Refused with 400 when it is not a rule this server can read."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendeeInput"
+            },
+            "description": "The guests. Each gets an invitation from the organizer's account, queued in the same write. Absent or empty creates an event nobody is invited to."
+          },
+          "organizerAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account the event is organized and its invitations sent from. Refused with 400 `unknown_organizer` when it is not an account of the caller's account config, or `organizer_cannot_send` when that account has Mail turned off. Absent, an event with guests is sent from the default invitation sender in effect (`getUserSettings`)."
           }
         },
         "description": "Input for creating an event (issue #15). The server builds the VEVENT and\nwrites it through the single calendar write path, so an event created here,\none accepted from an invitation, and one PUT over CalDAV are the same bytes\nwritten the same way.\n\nTimes are ISO 8601 with zone offset — or a bare `YYYY-MM-DD` date when\n`allDay` is set. The offset pins the instant; `timeZone` names the zone the\nevent is anchored in, which is what a recurring event needs to survive a DST\ntransition. An offset alone cannot: a weekly 09:00 meeting written as\n`+02:00` becomes an 08:00 meeting in November."
@@ -8511,6 +9420,60 @@
         },
         "description": "Input for creating a calendar collection (issue #15).\n\n`urlSegment` is supplied rather than derived from the display name: it is the\ncollection's identity — `calendarId` is a hash of it — and the path a CalDAV\nclient will later bookmark. Slugging a name would make two calendars called\n\"Work\" one row, and a rename would either move a bookmarked path or leave a\nsegment that no longer matches anything a person recognises. The name is the\nmutable overlay; this is the address."
       },
+      "RemitImap.CreateCalendarTaskInput": {
+        "type": "object",
+        "required": [
+          "summary",
+          "due"
+        ],
+        "properties": {
+          "calendarId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Collection to write the task into. Absent writes it into the account config's task collection. Refused with 400 when it names a collection that is not `VtodoOnly`."
+          },
+          "summary": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "SUMMARY of the task"
+          },
+          "description": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String2048"
+              }
+            ],
+            "description": "DESCRIPTION of the task. Absent writes none."
+          },
+          "due": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "When the task is due: an ISO 8601 date-time with zone offset, or a `YYYY-MM-DD` date when `allDay` is set."
+          },
+          "allDay": {
+            "type": "boolean",
+            "description": "Whether the task is due on a day rather than at a time"
+          },
+          "timeZone": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "IANA time zone the due time is anchored in. Absent anchors it in UTC."
+          }
+        },
+        "description": "Input for creating a task. The server builds the VTODO."
+      },
       "RemitImap.CreateExportResponse": {
         "type": "object",
         "required": [
@@ -12367,6 +13330,29 @@
               }
             ],
             "description": "RRULE value, or `\"\"` to drop the rule. Only meaningful with `scope=All` or `scope=Following`: an override is one occurrence and carries no rule of its own."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendeeInput"
+            },
+            "description": "The whole guest list after the edit. A new guest gets an invitation and a removed one a cancellation. Refused with 400 `not_organizer` on an event the reader does not organize."
+          },
+          "organizerAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account that organizes the event, for an event that names no organizer yet. Refused with 400 `not_organizer` when the event already names a different one: the organizer never changes."
+          },
+          "answer": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarInviteAnswer"
+              }
+            ],
+            "description": "The reader's answer as a guest. Writes their PARTSTAT and queues a REPLY to the organizer. `scope` `This` answers one occurrence and `All` the series; `Following` is refused with 400. Refused with 400 `not_a_guest` when the reader organizes the event or is not on its guest list."
           }
         },
         "description": "Input for updating an event. Every field is optional and absence means\nuntouched — a patch that carries only `summary` renames the event and moves\nnothing.\n\nWhat the patch applies to is the `scope` parameter's business: `All` rewrites\nthe master, `This` writes a RECURRENCE-ID override for one occurrence, and\n`Following` splits the series at one occurrence and applies the patch to the\nremainder."
@@ -12408,6 +13394,31 @@
         },
         "description": "Input for updating a calendar collection. The name, colour and timezone are the mutable overlay, and `subscriptionEnabled` turns a subscribed collection's refresh off and on. `urlSegment` is not among them, because it is the collection's identity and the path a client has bookmarked."
       },
+      "RemitImap.UpdateCalendarTaskInput": {
+        "type": "object",
+        "properties": {
+          "summary": {
+            "$ref": "#/components/schemas/String512"
+          },
+          "description": {
+            "$ref": "#/components/schemas/String2048"
+          },
+          "due": {
+            "$ref": "#/components/schemas/String64"
+          },
+          "allDay": {
+            "type": "boolean"
+          },
+          "timeZone": {
+            "$ref": "#/components/schemas/String64"
+          },
+          "completed": {
+            "type": "boolean",
+            "description": "Marks the task done (`STATUS:COMPLETED`) or not done again (`STATUS:NEEDS-ACTION`)"
+          }
+        },
+        "description": "Input for updating a task. Every field is optional and absence means untouched."
+      },
       "RemitImap.UpdateFilterInput": {
         "type": "object",
         "properties": {
@@ -12608,6 +13619,41 @@
         },
         "description": "Input for updating a draft outbox message"
       },
+      "RemitImap.UpdateUserSettingsInput": {
+        "type": "object",
+        "properties": {
+          "defaultInvitationSenderAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account invitations go out from by default. Refused with 400 `unknown_sender` when it is not an account of the caller's account config that sends mail. Cleared with `clearDefaultInvitationSender`."
+          }
+        },
+        "description": "A change to the caller's settings. Every field is optional and absence means untouched."
+      },
+      "RemitImap.UserSettingsResponse": {
+        "type": "object",
+        "required": [
+          "defaultInvitationSenderChosen"
+        ],
+        "properties": {
+          "defaultInvitationSenderAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account calendar invitations, updates and cancellations go out from unless the event editor picks another: the one the reader chose while it still sends mail, otherwise the account an event is on — for a new event, the first account of the account config that sends mail, since a calendar belongs to the account config rather than to one account. Absent only when no account sends mail."
+          },
+          "defaultInvitationSenderChosen": {
+            "type": "boolean",
+            "description": "Whether `defaultInvitationSenderAccountId` is the reader's own choice rather than the account an event is on."
+          }
+        },
+        "description": "The caller's own settings: choices that belong to the person rather than to\none mail account. Each field is stored as an `AccountSetting` row of the\naccount config and read back here, so a setting added later is one more\nfield on this resource rather than one more operation."
+      },
       "RemitImap.VipFlag": {
         "type": "object",
         "required": [