@remit/api-openapi-spec 0.0.80 → 0.0.82

package/openapi.json

@@ -2601,7 +2601,7 @@
       },
       "delete": {
         "operationId": "CalendarEventDetailOperations_deleteCalendarEvent",
-        "description": "Delete an event. `All` removes the resource and every occurrence it\nproduced; `This` writes an EXDATE for the named occurrence and keeps the\nrest of the series; `Following` truncates the series to end just before\nit.\n\nSame refusals and the same `If-Match` precondition as the update.\nAn event in a `Subscribed` collection is refused with 400\n`read_only_calendar`, here and on the update.",
+        "description": "Delete an event. `All` removes the resource and every occurrence it\nproduced; `This` writes an EXDATE for the named occurrence and keeps the\nrest of the series; `Following` truncates the series to end just before\nit.\n\nSame refusals and the same `If-Match` precondition as the update.\nAn event in a `Subscribed` collection is refused with 400\n`read_only_calendar`, here and on the update.\n\nAnswers 200 with the cancellations it queued: one per guest when the\nreader organizes the event, none otherwise.",
         "parameters": [
           {
             "name": "calendarObjectId",
@@ -2648,8 +2648,15 @@
           }
         ],
         "responses": {
-          "204": {
-            "description": "Nothing to return. The resource, or the occurrence, is gone."
+          "200": {
+            "description": "What deleting an event sent: one cancellation per guest when the reader organizes it, nothing otherwise.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarEventDeleteResponse"
+                }
+              }
+            }
           },
           "400": {
             "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
@@ -3135,18 +3142,59 @@
         }
       }
     },
-    "/calendars": {
+    "/calendar-tasks": {
       "get": {
-        "operationId": "CalendarOperations_listCalendars",
-        "description": "List the caller's calendar collections. Provisions the account config's default collection when it has none, so a first read never comes back empty and no client has to know how a calendar gets made.",
-        "parameters": [],
+        "operationId": "CalendarTaskOperations_listCalendarTasks",
+        "description": "Tasks due in a window, across every task collection the caller holds, in due order. Refused with 400 on the same window rules as the event listing.",
+        "parameters": [
+          {
+            "name": "from",
+            "in": "query",
+            "required": true,
+            "description": "Start of the window, an ISO 8601 date-time with zone offset. Inclusive.",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "to",
+            "in": "query",
+            "required": true,
+            "description": "End of the window, an ISO 8601 date-time with zone offset. Exclusive.",
+            "schema": {
+              "type": "string"
+            }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": false,
+            "description": "Restrict to these task collections, repeated once per calendar. Omitted means every one the caller holds.",
+            "schema": {
+              "type": "array",
+              "items": {
+                "$ref": "#/components/schemas/UUID"
+              }
+            }
+          }
+        ],
         "responses": {
           "200": {
             "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarListResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskListResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
                 }
               }
             }
@@ -3160,6 +3208,16 @@
                 }
               }
             }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
           }
         },
         "x-amazon-apigateway-integration": {
@@ -3172,8 +3230,8 @@
         }
       },
       "post": {
-        "operationId": "CalendarOperations_createCalendar",
-        "description": "Create a calendar collection. Refused with 400 when `urlSegment` is empty or already taken in this account config — the segment is the collection's identity, so a second create under the same one would otherwise silently return the collection that already exists. With `subscriptionUrl` the feed is fetched first and a fetch that fails is refused with 400 `subscription_unreachable`, naming why and never the URL.",
+        "operationId": "CalendarTaskOperations_createCalendarTask",
+        "description": "Create a task. Refused with 400 `not_a_task_calendar` when `calendarId` names an event collection.",
         "parameters": [],
         "responses": {
           "200": {
@@ -3181,7 +3239,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
                 }
               }
             }
@@ -3205,6 +3263,16 @@
                 }
               }
             }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
           }
         },
         "requestBody": {
@@ -3212,7 +3280,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/RemitImap.CreateCalendarInput"
+                "$ref": "#/components/schemas/RemitImap.CreateCalendarTaskInput"
               }
             }
           }
@@ -3227,17 +3295,26 @@
         }
       }
     },
-    "/calendars/{calendarId}": {
+    "/calendar-tasks/{calendarTaskId}": {
       "get": {
-        "operationId": "CalendarDetailOperations_getCalendar",
+        "operationId": "CalendarTaskDetailOperations_getCalendarTask",
         "parameters": [
           {
-            "name": "calendarId",
+            "name": "calendarTaskId",
             "in": "path",
             "required": true,
             "schema": {
               "$ref": "#/components/schemas/UUID"
             }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": false,
+            "description": "Collection the task lives in. Omitted, it is looked for in every task collection the caller holds.",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
           }
         ],
         "responses": {
@@ -3246,7 +3323,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
                 }
               }
             }
@@ -3282,16 +3359,33 @@
         }
       },
       "patch": {
-        "operationId": "CalendarDetailOperations_updateCalendar",
-        "description": "Update a calendar collection. `subscriptionEnabled` is refused with 400 `not_subscribed` on a collection that is not `Subscribed`. Turning it off stops the refresh and removes nothing.",
+        "operationId": "CalendarTaskDetailOperations_updateCalendarTask",
+        "description": "Update a task. `If-Match` makes the write conditional on the etag the caller read; a mismatch is 412.",
         "parameters": [
           {
-            "name": "calendarId",
+            "name": "calendarTaskId",
             "in": "path",
             "required": true,
             "schema": {
               "$ref": "#/components/schemas/UUID"
             }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": true,
+            "description": "Collection the task lives in",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "If-Match",
+            "in": "header",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
@@ -3300,7 +3394,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
                 }
               }
             }
@@ -3334,6 +3428,16 @@
                 }
               }
             }
+          },
+          "412": {
+            "description": "The condition the request stated is no longer true. Answered when an\n`If-Match` names an etag the stored resource no longer carries: somebody else\nwrote it in between, so applying this request would silently discard their\nchange. The client re-reads the resource and decides what to do with the\nversion it now has. `code` is `precondition_failed`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
           }
         },
         "requestBody": {
@@ -3341,7 +3445,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/RemitImap.UpdateCalendarInput"
+                "$ref": "#/components/schemas/RemitImap.UpdateCalendarTaskInput"
               }
             }
           }
@@ -3356,34 +3460,51 @@
         }
       },
       "delete": {
-        "operationId": "CalendarDetailOperations_deleteCalendar",
-        "description": "Delete a calendar collection and every event in it. Refused with 400 for the account's default collection: it is the one place an accepted invitation or a first event can land, and an account with no calendar has nowhere to put an event.",
+        "operationId": "CalendarTaskDetailOperations_deleteCalendarTask",
+        "description": "Delete a task. Same `If-Match` precondition as the update.",
         "parameters": [
           {
-            "name": "calendarId",
+            "name": "calendarTaskId",
             "in": "path",
             "required": true,
             "schema": {
               "$ref": "#/components/schemas/UUID"
             }
+          },
+          {
+            "name": "calendarId",
+            "in": "query",
+            "required": true,
+            "description": "Collection the task lives in",
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "If-Match",
+            "in": "header",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {
           "204": {
             "description": "Nothing to return. The resource, or the occurrence, is gone."
           },
-          "400": {
-            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ValidationError"
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
           },
-          "401": {
-            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
             "content": {
               "application/json": {
                 "schema": {
@@ -3392,8 +3513,8 @@
               }
             }
           },
-          "404": {
-            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+          "412": {
+            "description": "The condition the request stated is no longer true. Answered when an\n`If-Match` names an etag the stored resource no longer carries: somebody else\nwrote it in between, so applying this request would silently discard their\nchange. The client re-reads the resource and decides what to do with the\nversion it now has. `code` is `precondition_failed`.",
             "content": {
               "application/json": {
                 "schema": {
@@ -3413,27 +3534,18 @@
         }
       }
     },
-    "/calendars/{calendarId}/feed": {
+    "/calendars": {
       "get": {
-        "operationId": "CalendarDetailOperations_getCalendarFeed",
-        "description": "Read whether this calendar has a feed address. Absent (404) until one is\nminted. The token is not here: it is stored as a hash, so the only\nmoment it exists in the clear is the answer to the write below.",
-        "parameters": [
-          {
-            "name": "calendarId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "$ref": "#/components/schemas/UUID"
-            }
-          }
-        ],
+        "operationId": "CalendarOperations_listCalendars",
+        "description": "List the caller's calendar collections. Provisions the account config's default collection when it has none, so a first read never comes back empty and no client has to know how a calendar gets made.",
+        "parameters": [],
         "responses": {
           "200": {
             "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarFeedStateResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarListResponse"
                 }
               }
             }
@@ -3447,9 +3559,44 @@
                 }
               }
             }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "post": {
+        "operationId": "CalendarOperations_createCalendar",
+        "description": "Create a calendar collection. Refused with 400 when `urlSegment` is empty or already taken in this account config — the segment is the collection's identity, so a second create under the same one would otherwise silently return the collection that already exists. With `subscriptionUrl` the feed is fetched first and a fetch that fails is refused with 400 `subscription_unreachable`, naming why and never the URL.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
+                }
+              }
+            }
           },
-          "404": {
-            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
@@ -3459,6 +3606,16 @@
             }
           }
         },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.CreateCalendarInput"
+              }
+            }
+          }
+        },
         "x-amazon-apigateway-integration": {
           "type": "aws_proxy",
           "httpMethod": "POST",
@@ -3467,10 +3624,11 @@
             "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
           }
         }
-      },
-      "put": {
-        "operationId": "CalendarDetailOperations_putCalendarFeed",
-        "description": "Mint the calendar's feed address, or replace the one it has, and answer\nwith the token in the clear. Idempotent in address rather than in value:\none calendar holds one token, so a second call rotates — the previous\nURL stops resolving, which is how a subscription handed to the wrong\nperson is taken back.\n\nThis is the only response that ever carries the plaintext. A client that\ndoes not keep it rotates again.",
+      }
+    },
+    "/calendars/{calendarId}": {
+      "get": {
+        "operationId": "CalendarDetailOperations_getCalendar",
         "parameters": [
           {
             "name": "calendarId",
@@ -3487,7 +3645,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.CalendarFeedResponse"
+                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
                 }
               }
             }
@@ -3522,9 +3680,9 @@
           }
         }
       },
-      "delete": {
-        "operationId": "CalendarDetailOperations_revokeCalendarFeed",
-        "description": "Revoke the calendar's feed address. Every subscribed client starts getting 404 on its next poll. Answered 404 when the calendar has no feed, so a revoke is never reported as having taken something away that was not there.",
+      "patch": {
+        "operationId": "CalendarDetailOperations_updateCalendar",
+        "description": "Update a calendar collection. `subscriptionEnabled` is refused with 400 `not_subscribed` on a collection that is not `Subscribed`. Turning it off stops the refresh and removes nothing.",
         "parameters": [
           {
             "name": "calendarId",
@@ -3536,29 +3694,270 @@
           }
         ],
         "responses": {
-          "204": {
-            "description": "Nothing to return. The resource, or the occurrence, is gone."
-          },
-          "401": {
-            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+          "200": {
+            "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ApiError"
+                  "$ref": "#/components/schemas/RemitImap.CalendarResponse"
                 }
               }
             }
           },
-          "404": {
-            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ApiError"
+                  "$ref": "#/components/schemas/ValidationError"
                 }
               }
             }
-          }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.UpdateCalendarInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "delete": {
+        "operationId": "CalendarDetailOperations_deleteCalendar",
+        "description": "Delete a calendar collection and every event in it. Refused with 400 for the account's default collection: it is the one place an accepted invitation or a first event can land, and an account with no calendar has nowhere to put an event.",
+        "parameters": [
+          {
+            "name": "calendarId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Nothing to return. The resource, or the occurrence, is gone."
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/calendars/{calendarId}/feed": {
+      "get": {
+        "operationId": "CalendarDetailOperations_getCalendarFeed",
+        "description": "Read whether this calendar has a feed address. Absent (404) until one is\nminted. The token is not here: it is stored as a hash, so the only\nmoment it exists in the clear is the answer to the write below.",
+        "parameters": [
+          {
+            "name": "calendarId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarFeedStateResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "put": {
+        "operationId": "CalendarDetailOperations_putCalendarFeed",
+        "description": "Mint the calendar's feed address, or replace the one it has, and answer\nwith the token in the clear. Idempotent in address rather than in value:\none calendar holds one token, so a second call rotates — the previous\nURL stops resolving, which is how a subscription handed to the wrong\nperson is taken back.\n\nThis is the only response that ever carries the plaintext. A client that\ndoes not keep it rotates again.",
+        "parameters": [
+          {
+            "name": "calendarId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.CalendarFeedResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "delete": {
+        "operationId": "CalendarDetailOperations_revokeCalendarFeed",
+        "description": "Revoke the calendar's feed address. Every subscribed client starts getting 404 on its next poll. Answered 404 when the calendar has no feed, so a revoke is never reported as having taken something away that was not there.",
+        "parameters": [
+          {
+            "name": "calendarId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Nothing to return. The resource, or the occurrence, is gone."
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
         },
         "x-amazon-apigateway-integration": {
           "type": "aws_proxy",
@@ -5302,15 +5701,508 @@
         }
       },
       "patch": {
-        "operationId": "OutboxDetailOperations_updateOutboxMessage",
-        "description": "Update a draft outbox message",
+        "operationId": "OutboxDetailOperations_updateOutboxMessage",
+        "description": "Update a draft outbox message",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.UpdateOutboxMessageInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      },
+      "delete": {
+        "operationId": "OutboxDetailOperations_deleteOutboxMessage",
+        "description": "Delete a draft or failed outbox message",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Nothing to return. The request succeeded and the response carries no body."
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/outbox/{outboxMessageId}/attachments": {
+      "post": {
+        "operationId": "OutboxDetailOperations_mintOutboxAttachment",
+        "description": "Reserve room on a draft for a file, and get somewhere to put it",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.MintOutboxAttachmentResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.MintOutboxAttachmentInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/outbox/{outboxMessageId}/attachments/{outboxAttachmentId}/complete": {
+      "post": {
+        "operationId": "OutboxAttachmentOperations_completeOutboxAttachment",
+        "description": "Confirm an uploaded file against the object storage now holds",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          },
+          {
+            "name": "outboxAttachmentId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "413": {
+            "description": "Refusal response for an attachment. Flat, like every other error body.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/outbox/{outboxMessageId}/send": {
+      "post": {
+        "operationId": "OutboxDetailOperations_sendOutboxMessage",
+        "description": "Queue a draft message for sending. A draft on an account whose syncedServices leave out Mail is refused with 400 `mail_sync_off`, and stays a draft.",
+        "parameters": [
+          {
+            "name": "outboxMessageId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/UUID"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "The request was refused as malformed or contradictory. `code` is\n`invalid_request` where nothing more specific is known, and the refusal's own\ntoken where there is one.\n\nThe calendar surface answers with the reason it read the request by:\n`invalid_window`, `invalid_scope`, `invalid_url_segment`, `url_segment_taken`,\n`unknown_time_zone` and `default_calendar_undeletable` on the collection and\nthe query, and, for a VCALENDAR it could not accept,\n`malformed_icalendar`, `not_a_calendar`, `unsupported_component`, `no_event`,\n`no_master_event`, `multiple_master_events`, `missing_uid`, `mismatched_uid`,\n`missing_dt_start`, `backwards_end`, `invalid_date_time`,\n`invalid_recurrence_rule`, `missing_recurrence_id`, `not_recurring`,\n`unknown_occurrence` and `unmovable_recurrence_rule`. The outbox answers `mail_sync_off` to a\nsend from an account whose `syncedServices` leave out `Mail`, with the\naccount in `details.accountId`.\n\n`errors` is present only when the request failed schema validation before any\nhandler ran, and names every field that was refused.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ValidationError"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/people": {
+      "get": {
+        "operationId": "PeopleOperations_listPeople",
+        "description": "List everyone who signs in to this instance, ordered by email. Self-host only, and absent (404) while self sign-up is open.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.PeopleListResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The People operation is refused for the caller. `code` is one of\n`sign_in_disabled` (the kill switch is on), `caller_disabled` (the caller's\naccount is disabled or gone), `foreign_origin` (an unsafe request from an\norigin this instance does not serve), `step_up_required` (the step-up token\nis missing, spent, expired, or bound to another caller, action or person) and\n`wrong_password` (the step-up password is wrong).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/people/step-up": {
+      "post": {
+        "operationId": "PeopleOperations_createStepUp",
+        "description": "Trade the caller's current password for a single-use token that allows one action on one person for five minutes. Five wrong passwords in 15 minutes refuse further step-ups with 429. Absent (404) while self sign-up is open, or when the person does not exist.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.StepUpResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "The People operation is refused for the caller. `code` is one of\n`sign_in_disabled` (the kill switch is on), `caller_disabled` (the caller's\naccount is disabled or gone), `foreign_origin` (an unsafe request from an\norigin this instance does not serve), `step_up_required` (the step-up token\nis missing, spent, expired, or bound to another caller, action or person) and\n`wrong_password` (the step-up password is wrong).",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          },
+          "429": {
+            "description": "Five wrong step-up passwords in 15 minutes. `code` is `step_up_locked`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.StepUpInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/people/{userId}": {
+      "patch": {
+        "operationId": "PeopleOperations_updatePerson",
+        "description": "Disable or enable the person. Needs a `Disable` or `Enable` step-up for this person. Refused with 409 `cannot_disable_self` when the caller disables themselves.",
         "parameters": [
           {
-            "name": "outboxMessageId",
+            "name": "userId",
             "in": "path",
             "required": true,
             "schema": {
-              "$ref": "#/components/schemas/UUID"
+              "type": "string"
             }
           }
         ],
@@ -5320,7 +6212,7 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                  "$ref": "#/components/schemas/RemitImap.Person"
                 }
               }
             }
@@ -5336,7 +6228,7 @@
             }
           },
           "403": {
-            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "description": "The People operation is refused for the caller. `code` is one of\n`sign_in_disabled` (the kill switch is on), `caller_disabled` (the caller's\naccount is disabled or gone), `foreign_origin` (an unsafe request from an\norigin this instance does not serve), `step_up_required` (the step-up token\nis missing, spent, expired, or bound to another caller, action or person) and\n`wrong_password` (the step-up password is wrong).",
             "content": {
               "application/json": {
                 "schema": {
@@ -5354,6 +6246,16 @@
                 }
               }
             }
+          },
+          "409": {
+            "description": "A person cannot disable themselves. `code` is `cannot_disable_self`.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiError"
+                }
+              }
+            }
           }
         },
         "requestBody": {
@@ -5361,7 +6263,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/RemitImap.UpdateOutboxMessageInput"
+                "$ref": "#/components/schemas/RemitImap.UpdatePersonInput"
               }
             }
           }
@@ -5374,23 +6276,32 @@
             "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
           }
         }
-      },
-      "delete": {
-        "operationId": "OutboxDetailOperations_deleteOutboxMessage",
-        "description": "Delete a draft or failed outbox message",
+      }
+    },
+    "/people/{userId}/password-reset": {
+      "post": {
+        "operationId": "PeopleOperations_createPasswordReset",
+        "description": "Issue a single-use password reset link for the person, valid 24 hours. Needs a `ResetPassword` step-up for this person. The person's old password stops working and their sessions are revoked.",
         "parameters": [
           {
-            "name": "outboxMessageId",
+            "name": "userId",
             "in": "path",
             "required": true,
             "schema": {
-              "$ref": "#/components/schemas/UUID"
+              "type": "string"
             }
           }
         ],
         "responses": {
-          "204": {
-            "description": "Nothing to return. The request succeeded and the response carries no body."
+          "200": {
+            "description": "The request has succeeded.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/RemitImap.PasswordResetResponse"
+                }
+              }
+            }
           },
           "401": {
             "description": "The request carried no usable credential. `code` is `unauthorized`.",
@@ -5403,7 +6314,7 @@
             }
           },
           "403": {
-            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+            "description": "The People operation is refused for the caller. `code` is one of\n`sign_in_disabled` (the kill switch is on), `caller_disabled` (the caller's\naccount is disabled or gone), `foreign_origin` (an unsafe request from an\norigin this instance does not serve), `step_up_required` (the step-up token\nis missing, spent, expired, or bound to another caller, action or person) and\n`wrong_password` (the step-up password is wrong).",
             "content": {
               "application/json": {
                 "schema": {
@@ -5423,6 +6334,16 @@
             }
           }
         },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.CreatePasswordResetInput"
+              }
+            }
+          }
+        },
         "x-amazon-apigateway-integration": {
           "type": "aws_proxy",
           "httpMethod": "POST",
@@ -5433,17 +6354,17 @@
         }
       }
     },
-    "/outbox/{outboxMessageId}/attachments": {
+    "/people/{userId}/sign-out": {
       "post": {
-        "operationId": "OutboxDetailOperations_mintOutboxAttachment",
-        "description": "Reserve room on a draft for a file, and get somewhere to put it",
+        "operationId": "PeopleOperations_signOutPerson",
+        "description": "Sign the person out of every browser session and MCP connection. Needs a `SignOut` step-up for this person. A JWT already minted works until it expires, at most 15 minutes.",
         "parameters": [
           {
-            "name": "outboxMessageId",
+            "name": "userId",
             "in": "path",
             "required": true,
             "schema": {
-              "$ref": "#/components/schemas/UUID"
+              "type": "string"
             }
           }
         ],
@@ -5453,23 +6374,23 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.MintOutboxAttachmentResponse"
+                  "$ref": "#/components/schemas/RemitImap.Person"
                 }
               }
             }
           },
-          "400": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
           },
-          "401": {
-            "description": "The request carried no usable credential. `code` is `unauthorized`.",
+          "403": {
+            "description": "The People operation is refused for the caller. `code` is one of\n`sign_in_disabled` (the kill switch is on), `caller_disabled` (the caller's\naccount is disabled or gone), `foreign_origin` (an unsafe request from an\norigin this instance does not serve), `step_up_required` (the step-up token\nis missing, spent, expired, or bound to another caller, action or person) and\n`wrong_password` (the step-up password is wrong).",
             "content": {
               "application/json": {
                 "schema": {
@@ -5478,12 +6399,12 @@
               }
             }
           },
-          "413": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
+          "404": {
+            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                  "$ref": "#/components/schemas/ApiError"
                 }
               }
             }
@@ -5494,7 +6415,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/RemitImap.MintOutboxAttachmentInput"
+                "$ref": "#/components/schemas/RemitImap.SignOutPersonInput"
               }
             }
           }
@@ -5509,45 +6430,18 @@
         }
       }
     },
-    "/outbox/{outboxMessageId}/attachments/{outboxAttachmentId}/complete": {
-      "post": {
-        "operationId": "OutboxAttachmentOperations_completeOutboxAttachment",
-        "description": "Confirm an uploaded file against the object storage now holds",
-        "parameters": [
-          {
-            "name": "outboxMessageId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "$ref": "#/components/schemas/UUID"
-            }
-          },
-          {
-            "name": "outboxAttachmentId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "$ref": "#/components/schemas/UUID"
-            }
-          }
-        ],
+    "/settings": {
+      "get": {
+        "operationId": "UserSettingsOperations_getUserSettings",
+        "description": "Read the caller's settings.",
+        "parameters": [],
         "responses": {
           "200": {
             "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
@@ -5561,16 +6455,6 @@
                 }
               }
             }
-          },
-          "413": {
-            "description": "Refusal response for an attachment. Flat, like every other error body.",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxAttachmentRejection"
-                }
-              }
-            }
           }
         },
         "x-amazon-apigateway-integration": {
@@ -5581,29 +6465,18 @@
             "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
           }
         }
-      }
-    },
-    "/outbox/{outboxMessageId}/send": {
-      "post": {
-        "operationId": "OutboxDetailOperations_sendOutboxMessage",
-        "description": "Queue a draft message for sending. A draft on an account whose syncedServices leave out Mail is refused with 400 `mail_sync_off`, and stays a draft.",
-        "parameters": [
-          {
-            "name": "outboxMessageId",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "$ref": "#/components/schemas/UUID"
-            }
-          }
-        ],
+      },
+      "patch": {
+        "operationId": "UserSettingsOperations_updateUserSettings",
+        "description": "Change the caller's settings. Answers with every setting as it now stands.",
+        "parameters": [],
         "responses": {
           "200": {
             "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/RemitImap.OutboxMessageResponse"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
@@ -5627,19 +6500,46 @@
                 }
               }
             }
-          },
-          "403": {
-            "description": "The caller is known and may not do this. `code` is `forbidden`.",
+          }
+        },
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/RemitImap.UpdateUserSettingsInput"
+              }
+            }
+          }
+        },
+        "x-amazon-apigateway-integration": {
+          "type": "aws_proxy",
+          "httpMethod": "POST",
+          "passthroughBehavior": "when_no_match",
+          "uri": {
+            "Fn::Sub": "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/arn:aws:lambda:${AWS::Region}:${AWS::AccountId}:function:{{HandlerFunctionName}}/invocations"
+          }
+        }
+      }
+    },
+    "/settings/default-invitation-sender": {
+      "delete": {
+        "operationId": "UserSettingsOperations_clearDefaultInvitationSender",
+        "description": "Clear the chosen default invitation sender. Invitations then go out from the account an event is on. Answers with every setting as it now stands.",
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "The request has succeeded.",
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ApiError"
+                  "$ref": "#/components/schemas/RemitImap.UserSettingsResponse"
                 }
               }
             }
           },
-          "404": {
-            "description": "Nothing answers to this address, or the caller may not learn that something does. `code` is `not_found`.",
+          "401": {
+            "description": "The request carried no usable credential. `code` is `unauthorized`.",
             "content": {
               "application/json": {
                 "schema": {
@@ -7077,44 +7977,155 @@
       "RemitImap.BulkUpdateFlagsInput": {
         "type": "object",
         "required": [
-          "messageIds"
+          "messageIds"
+        ],
+        "properties": {
+          "messageIds": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/UUID"
+            },
+            "minItems": 1,
+            "maxItems": 100,
+            "description": "List of message IDs to update"
+          },
+          "isRead": {
+            "type": "boolean",
+            "description": "Set messages as read (maps to \\Seen flag)"
+          },
+          "isStarred": {
+            "type": "boolean",
+            "description": "Set messages as starred (maps to \\Flagged flag)"
+          },
+          "starColor": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.StarColor"
+              }
+            ],
+            "description": "Star color for visual categorization"
+          }
+        },
+        "description": "Input for bulk flag update operations"
+      },
+      "RemitImap.CalendarAnswerOvertaken": {
+        "type": "string",
+        "enum": [
+          "None",
+          "Cancellation"
+        ],
+        "description": "Whether an answered cancellation holds the calendar object this suggestion's answer wrote. A cancellation is terminal, so such an answer cannot be taken back."
+      },
+      "RemitImap.CalendarAttendee": {
+        "type": "object",
+        "required": [
+          "email",
+          "displayName",
+          "role",
+          "status"
+        ],
+        "properties": {
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Mail address, lower-cased"
+          },
+          "displayName": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The CN parameter. `\"\"` when the line carries none."
+          },
+          "role": {
+            "$ref": "#/components/schemas/RemitImap.CalendarAttendeeRole"
+          },
+          "status": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarAttendeeStatus"
+              }
+            ],
+            "description": "The answer. The organizer reads as `Accepted`."
+          }
+        },
+        "description": "One person on an event's guest list, read from its ORGANIZER and ATTENDEE lines."
+      },
+      "RemitImap.CalendarAttendeeCounts": {
+        "type": "object",
+        "required": [
+          "accepted",
+          "declined",
+          "tentative",
+          "needsAction"
+        ],
+        "properties": {
+          "accepted": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "declined": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "tentative": {
+            "type": "integer",
+            "format": "int32"
+          },
+          "needsAction": {
+            "type": "integer",
+            "format": "int32"
+          }
+        },
+        "description": "How many people on the guest list gave each answer, the organizer counted as a yes."
+      },
+      "RemitImap.CalendarAttendeeInput": {
+        "type": "object",
+        "required": [
+          "email",
+          "displayName"
         ],
         "properties": {
-          "messageIds": {
-            "type": "array",
-            "items": {
-              "$ref": "#/components/schemas/UUID"
-            },
-            "minItems": 1,
-            "maxItems": 100,
-            "description": "List of message IDs to update"
-          },
-          "isRead": {
-            "type": "boolean",
-            "description": "Set messages as read (maps to \\Seen flag)"
-          },
-          "isStarred": {
-            "type": "boolean",
-            "description": "Set messages as starred (maps to \\Flagged flag)"
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The guest's mail address"
           },
-          "starColor": {
+          "displayName": {
             "allOf": [
               {
-                "$ref": "#/components/schemas/RemitImap.StarColor"
+                "$ref": "#/components/schemas/String512"
               }
             ],
-            "description": "Star color for visual categorization"
+            "description": "The guest's name. The address itself when the contact has none."
           }
         },
-        "description": "Input for bulk flag update operations"
+        "description": "A guest as the event editor sends one."
       },
-      "RemitImap.CalendarAnswerOvertaken": {
+      "RemitImap.CalendarAttendeeRole": {
         "type": "string",
         "enum": [
-          "None",
-          "Cancellation"
+          "Organizer",
+          "Guest"
         ],
-        "description": "Whether an answered cancellation holds the calendar object this suggestion's answer wrote. A cancellation is terminal, so such an answer cannot be taken back."
+        "description": "What one person on an event's guest list is to it."
+      },
+      "RemitImap.CalendarAttendeeStatus": {
+        "type": "string",
+        "enum": [
+          "NeedsAction",
+          "Accepted",
+          "Tentative",
+          "Declined"
+        ],
+        "description": "A guest's answer to an event, read from the ATTENDEE line's PARTSTAT (RFC 5545 3.2.12)."
       },
       "RemitImap.CalendarColor": {
         "type": "string",
@@ -7131,9 +8142,25 @@
       "RemitImap.CalendarComponentSet": {
         "type": "string",
         "enum": [
-          "VeventOnly"
+          "VeventOnly",
+          "VtodoOnly"
         ],
-        "description": "Which iCalendar components a collection accepts (RFC 4791 supported-calendar-component-set). Only VEVENT is stored today; VTODO and VJOURNAL collections would be separate members, so the value is a property of the collection rather than of each object."
+        "description": "Which iCalendar components a collection accepts (RFC 4791 supported-calendar-component-set). The value is a property of the collection rather than of each object, so an event collection and a task collection are separate collections."
+      },
+      "RemitImap.CalendarEventDeleteResponse": {
+        "type": "object",
+        "required": [
+          "sends"
+        ],
+        "properties": {
+          "sends": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarSchedulingSend"
+            }
+          }
+        },
+        "description": "What deleting an event sent: one cancellation per guest when the reader organizes it, nothing otherwise."
       },
       "RemitImap.CalendarEventInstance": {
         "type": "object",
@@ -7150,7 +8177,8 @@
           "transparency",
           "zoneCertainty",
           "etag",
-          "hasRecurrence"
+          "hasRecurrence",
+          "participation"
         ],
         "properties": {
           "calendarId": {
@@ -7248,6 +8276,14 @@
           "hasRecurrence": {
             "type": "boolean",
             "description": "Whether the resource this occurrence came from expands to more than one instance. A client showing the recurrence-scope prompt gates on this."
+          },
+          "participation": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarParticipation"
+              }
+            ],
+            "description": "Where the reader stands on this occurrence. Only the reader's own answer: the guest list is on `getCalendarEvent`."
           }
         },
         "description": "One occurrence of an event, in the window the caller asked for (issue #15).\n\nInstances are expanded by the server. A client never reads an RRULE and never\nreconstructs a series: it renders what this returns, and addresses one\noccurrence by `calendarObjectId` plus `recurrenceId`."
@@ -7288,7 +8324,12 @@
           "hasRecurrence",
           "expandedThrough",
           "createdAt",
-          "updatedAt"
+          "updatedAt",
+          "participation",
+          "organizer",
+          "attendees",
+          "attendeeCounts",
+          "sends"
         ],
         "properties": {
           "calendarObjectId": {
@@ -7443,9 +8484,42 @@
             "type": "integer",
             "format": "int64",
             "readOnly": true
+          },
+          "participation": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarParticipation"
+              }
+            ],
+            "description": "Where the reader stands on the event's master"
+          },
+          "organizer": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Mail address of the ORGANIZER, lower-cased. `\"\"` when the event names none."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendee"
+            },
+            "description": "Everyone on the guest list, organizer first. Empty when the event has no guests."
+          },
+          "attendeeCounts": {
+            "$ref": "#/components/schemas/RemitImap.CalendarAttendeeCounts"
+          },
+          "sends": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarSchedulingSend"
+            },
+            "description": "The scheduling messages about this event still in the outbox. A write answers with the ones it queued; a read with every one not yet sent and filed."
           }
         },
-        "description": "A stored calendar resource — the bytes behind one event, plus the columns projected from them. `icalData` is canonical; every other field is derived from it on write."
+        "description": "A stored calendar resource — the bytes behind one event, plus the columns\nprojected from them. `icalData` is canonical; every other field is derived\nfrom it on write or on this read."
       },
       "RemitImap.CalendarEventStatus": {
         "type": "string",
@@ -7568,9 +8642,10 @@
         "type": "string",
         "enum": [
           "Accepted",
-          "Tentative"
+          "Tentative",
+          "Declined"
         ],
-        "description": "The answer an invitation is added to a calendar with. It is written as the user's `ATTENDEE;PARTSTAT` on the stored event (RFC 5545 3.2.12) and becomes the suggestion's state."
+        "description": "The answer a guest gives an invitation. It is written as the reader's `ATTENDEE;PARTSTAT` on the stored event (RFC 5545 3.2.12)."
       },
       "RemitImap.CalendarInviteMethod": {
         "type": "string",
@@ -7599,6 +8674,18 @@
         },
         "description": "Every calendar collection of the caller's account config, url segment first. Unpaginated: an account holds a handful of calendars, and a page boundary in a sidebar is a bug waiting to happen."
       },
+      "RemitImap.CalendarParticipation": {
+        "type": "string",
+        "enum": [
+          "Unscheduled",
+          "Organizer",
+          "NeedsAction",
+          "Accepted",
+          "Tentative",
+          "Declined"
+        ],
+        "description": "Where the reader stands on one occurrence, projected from its ORGANIZER and ATTENDEE lines against the addresses of the reader's own accounts."
+      },
       "RemitImap.CalendarResponse": {
         "type": "object",
         "required": [
@@ -7752,6 +8839,40 @@
         },
         "description": "A calendar collection as the API returns it."
       },
+      "RemitImap.CalendarSchedulingSend": {
+        "type": "object",
+        "required": [
+          "email",
+          "outboxMessageId",
+          "method",
+          "status"
+        ],
+        "properties": {
+          "email": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The one address the message is to"
+          },
+          "outboxMessageId": {
+            "$ref": "#/components/schemas/UUID"
+          },
+          "method": {
+            "$ref": "#/components/schemas/RemitImap.CalendarInviteMethod"
+          },
+          "status": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.OutboxMessageStatus"
+              }
+            ],
+            "description": "Where the message stood when this response was built"
+          }
+        },
+        "description": "One scheduling message an event write put in the outbox: an invitation, a cancellation or a reply. A client follows `outboxMessageId` to learn whether it went, and resends a failed one with `sendOutboxMessage`."
+      },
       "RemitImap.CalendarSource": {
         "type": "string",
         "enum": [
@@ -7979,28 +9100,173 @@
             "description": "Whether an answered cancellation holds the event this answer wrote. `Cancellation` means `reopen` answers 400."
           }
         },
-        "description": "A suggestion as the API returns it. The raw `icalData` is not surfaced: a client renders the projected fields, and the bytes exist so that accepting can write them into a calendar unchanged."
-      },
-      "RemitImap.CalendarSuggestionSource": {
-        "type": "string",
-        "enum": [
-          "IcalendarPart",
-          "IcalendarAttachment",
-          "TextHeuristic"
-        ],
-        "description": "Where in a message a suggestion was read from. It is what a card says to explain itself, and it is what separates a suggestion carrying real iCalendar from one inferred out of prose."
-      },
-      "RemitImap.CalendarSuggestionState": {
-        "type": "string",
-        "enum": [
-          "Pending",
-          "Accepted",
-          "Declined",
-          "Tentative",
-          "Dismissed",
-          "Superseded"
-        ],
-        "description": "What has become of a suggestion. `Pending` is the only state that asks a person for anything; every other value is a decision already taken, and nothing but an explicit act moves a suggestion out of `Pending`."
+        "description": "A suggestion as the API returns it. The raw `icalData` is not surfaced: a client renders the projected fields, and the bytes exist so that accepting can write them into a calendar unchanged."
+      },
+      "RemitImap.CalendarSuggestionSource": {
+        "type": "string",
+        "enum": [
+          "IcalendarPart",
+          "IcalendarAttachment",
+          "TextHeuristic"
+        ],
+        "description": "Where in a message a suggestion was read from. It is what a card says to explain itself, and it is what separates a suggestion carrying real iCalendar from one inferred out of prose."
+      },
+      "RemitImap.CalendarSuggestionState": {
+        "type": "string",
+        "enum": [
+          "Pending",
+          "Accepted",
+          "Declined",
+          "Tentative",
+          "Dismissed",
+          "Superseded"
+        ],
+        "description": "What has become of a suggestion. `Pending` is the only state that asks a person for anything; every other value is a decision already taken, and nothing but an explicit act moves a suggestion out of `Pending`."
+      },
+      "RemitImap.CalendarTaskListResponse": {
+        "type": "object",
+        "required": [
+          "items"
+        ],
+        "properties": {
+          "items": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarTaskResponse"
+            }
+          }
+        },
+        "description": "Tasks due in the requested window, in due order. Unpaginated: the window is the bound."
+      },
+      "RemitImap.CalendarTaskResponse": {
+        "type": "object",
+        "required": [
+          "calendarTaskId",
+          "calendarId",
+          "resourceName",
+          "icalUid",
+          "icalData",
+          "etag",
+          "summary",
+          "description",
+          "due",
+          "dueAt",
+          "allDay",
+          "completed",
+          "createdAt",
+          "updatedAt"
+        ],
+        "properties": {
+          "calendarTaskId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Primary identifier, derived from calendarId + resourceName",
+            "readOnly": true
+          },
+          "calendarId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Collection this task belongs to, a `VtodoOnly` one",
+            "readOnly": true
+          },
+          "resourceName": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String256"
+              }
+            ],
+            "description": "Last path segment of the resource's URL, e.g. \"a1b2c3.ics\"",
+            "readOnly": true
+          },
+          "icalUid": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "The VTODO's UID property",
+            "readOnly": true
+          },
+          "icalData": {
+            "type": "string",
+            "description": "The complete VCALENDAR text — CANONICAL",
+            "readOnly": true
+          },
+          "etag": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "Strong entity tag over the stored `icalData` bytes, for If-Match",
+            "readOnly": true
+          },
+          "summary": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "Projection of the VTODO's SUMMARY. `\"\"` when it carries none.",
+            "readOnly": true
+          },
+          "description": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String2048"
+              }
+            ],
+            "description": "Projection of the VTODO's DESCRIPTION. `\"\"` when it carries none.",
+            "readOnly": true
+          },
+          "due": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "Projection of the VTODO's DUE as an ISO 8601 date-time with zone offset, read in the collection's timezone — a business date. An all-day task carries midnight of its civil date.",
+            "readOnly": true
+          },
+          "dueAt": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "The same moment as `due`, as an ISO 8601 UTC instant, so `byDue` orders across zones.",
+            "readOnly": true
+          },
+          "allDay": {
+            "type": "boolean",
+            "description": "Whether DUE is a DATE rather than a DATE-TIME: the task is due on a day, not at a time",
+            "default": false,
+            "readOnly": true
+          },
+          "completed": {
+            "type": "boolean",
+            "description": "Whether the VTODO is done: `STATUS:COMPLETED`",
+            "default": false,
+            "readOnly": true
+          },
+          "createdAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          },
+          "updatedAt": {
+            "type": "integer",
+            "format": "int64",
+            "readOnly": true
+          }
+        },
+        "description": "A stored task, as the API returns it."
       },
       "RemitImap.CalendarTransparency": {
         "type": "string",
@@ -8457,6 +9723,21 @@
               }
             ],
             "description": "RRULE value for a recurring event, e.g. \"FREQ=WEEKLY;BYDAY=MO\" (RFC 5545 3.8.5.3), without the property name. `\"\"` creates a single event. Refused with 400 when it is not a rule this server can read."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendeeInput"
+            },
+            "description": "The guests. Each gets an invitation from the organizer's account, queued in the same write. Absent or empty creates an event nobody is invited to."
+          },
+          "organizerAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account the event is organized and its invitations sent from. Refused with 400 `unknown_organizer` when it is not an account of the caller's account config, or `organizer_cannot_send` when that account has Mail turned off. Absent, an event with guests is sent from the default invitation sender in effect (`getUserSettings`)."
           }
         },
         "description": "Input for creating an event (issue #15). The server builds the VEVENT and\nwrites it through the single calendar write path, so an event created here,\none accepted from an invitation, and one PUT over CalDAV are the same bytes\nwritten the same way.\n\nTimes are ISO 8601 with zone offset — or a bare `YYYY-MM-DD` date when\n`allDay` is set. The offset pins the instant; `timeZone` names the zone the\nevent is anchored in, which is what a recurring event needs to survive a DST\ntransition. An offset alone cannot: a weekly 09:00 meeting written as\n`+02:00` becomes an 08:00 meeting in November."
@@ -8511,6 +9792,60 @@
         },
         "description": "Input for creating a calendar collection (issue #15).\n\n`urlSegment` is supplied rather than derived from the display name: it is the\ncollection's identity — `calendarId` is a hash of it — and the path a CalDAV\nclient will later bookmark. Slugging a name would make two calendars called\n\"Work\" one row, and a rename would either move a bookmarked path or leave a\nsegment that no longer matches anything a person recognises. The name is the\nmutable overlay; this is the address."
       },
+      "RemitImap.CreateCalendarTaskInput": {
+        "type": "object",
+        "required": [
+          "summary",
+          "due"
+        ],
+        "properties": {
+          "calendarId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "Collection to write the task into. Absent writes it into the account config's task collection. Refused with 400 when it names a collection that is not `VtodoOnly`."
+          },
+          "summary": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String512"
+              }
+            ],
+            "description": "SUMMARY of the task"
+          },
+          "description": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String2048"
+              }
+            ],
+            "description": "DESCRIPTION of the task. Absent writes none."
+          },
+          "due": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "When the task is due: an ISO 8601 date-time with zone offset, or a `YYYY-MM-DD` date when `allDay` is set."
+          },
+          "allDay": {
+            "type": "boolean",
+            "description": "Whether the task is due on a day rather than at a time"
+          },
+          "timeZone": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/String64"
+              }
+            ],
+            "description": "IANA time zone the due time is anchored in. Absent anchors it in UTC."
+          }
+        },
+        "description": "Input for creating a task. The server builds the VTODO."
+      },
       "RemitImap.CreateExportResponse": {
         "type": "object",
         "required": [
@@ -8862,6 +10197,18 @@
         },
         "description": "Input for creating an outbox message"
       },
+      "RemitImap.CreatePasswordResetInput": {
+        "type": "object",
+        "required": [
+          "stepUpToken"
+        ],
+        "properties": {
+          "stepUpToken": {
+            "type": "string"
+          }
+        },
+        "description": "Issue a password reset link for the person. Their old password stops working and their sessions are revoked."
+      },
       "RemitImap.DeleteAccountConfigResponse": {
         "type": "object",
         "required": [
@@ -10904,6 +12251,29 @@
         ],
         "description": "Status of an outbox message in the send queue"
       },
+      "RemitImap.PasswordResetResponse": {
+        "type": "object",
+        "required": [
+          "person",
+          "resetUrl",
+          "expiresAt"
+        ],
+        "properties": {
+          "person": {
+            "$ref": "#/components/schemas/RemitImap.Person"
+          },
+          "resetUrl": {
+            "type": "string",
+            "description": "The single-use reset link. It exists only in this response."
+          },
+          "expiresAt": {
+            "type": "integer",
+            "format": "int64",
+            "description": "When the link stops working, epoch milliseconds: issue time plus 24 hours."
+          }
+        },
+        "description": "The person, and the reset link to hand them. The link is shown once and works once."
+      },
       "RemitImap.PendingConfigImport": {
         "type": "object",
         "required": [
@@ -10929,6 +12299,79 @@
         },
         "description": "An import that is still waiting for IMAP discovery to produce the folders its\nfile named. The folder appointed to a role, a folder's own display name or\nmute, and a filter's move destination are all bound by path; a path this\naccount does not hold yet is kept, not guessed, and bound the moment discovery\nfinds it."
       },
+      "RemitImap.PeopleListResponse": {
+        "type": "object",
+        "required": [
+          "people"
+        ],
+        "properties": {
+          "people": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.Person"
+            }
+          }
+        },
+        "description": "Everyone who signs in to this instance, ordered by email."
+      },
+      "RemitImap.Person": {
+        "type": "object",
+        "required": [
+          "userId",
+          "email",
+          "createdAt",
+          "lastSignInAt",
+          "sessionCount",
+          "status",
+          "isCaller"
+        ],
+        "properties": {
+          "userId": {
+            "type": "string",
+            "description": "The person's user id."
+          },
+          "email": {
+            "type": "string",
+            "description": "The address the person signs in with."
+          },
+          "createdAt": {
+            "type": "integer",
+            "format": "int64",
+            "description": "When the account was created, epoch milliseconds."
+          },
+          "lastSignInAt": {
+            "type": "integer",
+            "format": "int64",
+            "description": "When the person last signed in, epoch milliseconds."
+          },
+          "sessionCount": {
+            "type": "integer",
+            "format": "int32",
+            "description": "Unexpired browser sessions the person holds."
+          },
+          "status": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.PersonStatus"
+              }
+            ],
+            "description": "Whether the person may sign in."
+          },
+          "isCaller": {
+            "type": "boolean",
+            "description": "Whether this row is the caller."
+          }
+        },
+        "description": "One person who signs in to this self-hosted instance."
+      },
+      "RemitImap.PersonStatus": {
+        "type": "string",
+        "enum": [
+          "Active",
+          "Disabled"
+        ],
+        "description": "Whether a person may sign in. A disabled person's sessions, MCP grants and calendar feeds are revoked, and every sign-in is refused."
+      },
       "RemitImap.PlacementAction": {
         "type": "string",
         "enum": [
@@ -11282,6 +12725,18 @@
         ],
         "description": "Trust level for the From address, derived at read time from AddressFlags + counters."
       },
+      "RemitImap.SignOutPersonInput": {
+        "type": "object",
+        "required": [
+          "stepUpToken"
+        ],
+        "properties": {
+          "stepUpToken": {
+            "type": "string"
+          }
+        },
+        "description": "Sign the person out of every browser session and MCP connection."
+      },
       "RemitImap.SortOrder": {
         "type": "string",
         "enum": [
@@ -11361,6 +12816,56 @@
         ],
         "description": "Gmail-style star colors for message/thread marking"
       },
+      "RemitImap.StepUpAction": {
+        "type": "string",
+        "enum": [
+          "SignOut",
+          "Disable",
+          "Enable",
+          "ResetPassword"
+        ],
+        "description": "The operation a step-up token is spent on. `updatePerson` maps `Disabled` to `Disable` and `Active` to `Enable`."
+      },
+      "RemitImap.StepUpInput": {
+        "type": "object",
+        "required": [
+          "password",
+          "action",
+          "userId"
+        ],
+        "properties": {
+          "password": {
+            "type": "string",
+            "description": "The caller's own current password."
+          },
+          "action": {
+            "$ref": "#/components/schemas/RemitImap.StepUpAction"
+          },
+          "userId": {
+            "type": "string",
+            "description": "The person the token will act on."
+          }
+        },
+        "description": "The caller's current password, and the one action on one person the token will allow."
+      },
+      "RemitImap.StepUpResponse": {
+        "type": "object",
+        "required": [
+          "stepUpToken",
+          "expiresAt"
+        ],
+        "properties": {
+          "stepUpToken": {
+            "type": "string"
+          },
+          "expiresAt": {
+            "type": "integer",
+            "format": "int64",
+            "description": "When the token stops working, epoch milliseconds."
+          }
+        },
+        "description": "A single-use token for one action on one person. Spend it at once; it is never stored by the client."
+      },
       "RemitImap.SyncPhase": {
         "type": "string",
         "enum": [
@@ -12367,6 +13872,29 @@
               }
             ],
             "description": "RRULE value, or `\"\"` to drop the rule. Only meaningful with `scope=All` or `scope=Following`: an override is one occurrence and carries no rule of its own."
+          },
+          "attendees": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RemitImap.CalendarAttendeeInput"
+            },
+            "description": "The whole guest list after the edit. A new guest gets an invitation and a removed one a cancellation. Refused with 400 `not_organizer` on an event the reader does not organize."
+          },
+          "organizerAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account that organizes the event, for an event that names no organizer yet. Refused with 400 `not_organizer` when the event already names a different one: the organizer never changes."
+          },
+          "answer": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RemitImap.CalendarInviteAnswer"
+              }
+            ],
+            "description": "The reader's answer as a guest. Writes their PARTSTAT and queues a REPLY to the organizer. `scope` `This` answers one occurrence and `All` the series; `Following` is refused with 400. Refused with 400 `not_a_guest` when the reader organizes the event or is not on its guest list."
           }
         },
         "description": "Input for updating an event. Every field is optional and absence means\nuntouched — a patch that carries only `summary` renames the event and moves\nnothing.\n\nWhat the patch applies to is the `scope` parameter's business: `All` rewrites\nthe master, `This` writes a RECURRENCE-ID override for one occurrence, and\n`Following` splits the series at one occurrence and applies the patch to the\nremainder."
@@ -12408,6 +13936,31 @@
         },
         "description": "Input for updating a calendar collection. The name, colour and timezone are the mutable overlay, and `subscriptionEnabled` turns a subscribed collection's refresh off and on. `urlSegment` is not among them, because it is the collection's identity and the path a client has bookmarked."
       },
+      "RemitImap.UpdateCalendarTaskInput": {
+        "type": "object",
+        "properties": {
+          "summary": {
+            "$ref": "#/components/schemas/String512"
+          },
+          "description": {
+            "$ref": "#/components/schemas/String2048"
+          },
+          "due": {
+            "$ref": "#/components/schemas/String64"
+          },
+          "allDay": {
+            "type": "boolean"
+          },
+          "timeZone": {
+            "$ref": "#/components/schemas/String64"
+          },
+          "completed": {
+            "type": "boolean",
+            "description": "Marks the task done (`STATUS:COMPLETED`) or not done again (`STATUS:NEEDS-ACTION`)"
+          }
+        },
+        "description": "Input for updating a task. Every field is optional and absence means untouched."
+      },
       "RemitImap.UpdateFilterInput": {
         "type": "object",
         "properties": {
@@ -12608,6 +14161,57 @@
         },
         "description": "Input for updating a draft outbox message"
       },
+      "RemitImap.UpdatePersonInput": {
+        "type": "object",
+        "required": [
+          "status",
+          "stepUpToken"
+        ],
+        "properties": {
+          "status": {
+            "$ref": "#/components/schemas/RemitImap.PersonStatus"
+          },
+          "stepUpToken": {
+            "type": "string"
+          }
+        },
+        "description": "Disable or enable the person. Disabling also revokes their sessions, MCP grants and calendar feeds."
+      },
+      "RemitImap.UpdateUserSettingsInput": {
+        "type": "object",
+        "properties": {
+          "defaultInvitationSenderAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account invitations go out from by default. Refused with 400 `unknown_sender` when it is not an account of the caller's account config that sends mail. Cleared with `clearDefaultInvitationSender`."
+          }
+        },
+        "description": "A change to the caller's settings. Every field is optional and absence means untouched."
+      },
+      "RemitImap.UserSettingsResponse": {
+        "type": "object",
+        "required": [
+          "defaultInvitationSenderChosen"
+        ],
+        "properties": {
+          "defaultInvitationSenderAccountId": {
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/UUID"
+              }
+            ],
+            "description": "The account calendar invitations, updates and cancellations go out from unless the event editor picks another: the one the reader chose while it still sends mail, otherwise the account an event is on — for a new event, the first account of the account config that sends mail, since a calendar belongs to the account config rather than to one account. Absent only when no account sends mail."
+          },
+          "defaultInvitationSenderChosen": {
+            "type": "boolean",
+            "description": "Whether `defaultInvitationSenderAccountId` is the reader's own choice rather than the account an event is on."
+          }
+        },
+        "description": "The caller's own settings: choices that belong to the person rather than to\none mail account. Each field is stored as an `AccountSetting` row of the\naccount config and read back here, so a setting added later is one more\nfield on this resource rather than one more operation."
+      },
       "RemitImap.VipFlag": {
         "type": "object",
         "required": [