get:
  tags:
    - Session
  summary: Return the authenticated caller profile
  description: Upserts the caller into users on first request and returns the stored profile used by the SPA session smoke path.
  operationId: get-api-me
  security:
    - cookieAuth: []
  responses:
    "200":
      description: Authenticated user profile.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/MeResponse
          example:
            id: 11111111-1111-4111-8111-111111111111
            email: admin@seahavenind.com
            name: Dev Admin
            role: admin
    "401":
      description: Missing or invalid session cookie.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/Error
          example:
            error:
              code: UNAUTHENTICATED
              message: Missing id token.
              correlationId: 11111111-1111-4111-8111-111111111111
    "409":
      description: Email is already linked to a different Cognito subject.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/Error
          example:
            error:
              code: CONFLICT
              message: Email admin@seahavenind.com is already linked to a different identity.
              correlationId: 11111111-1111-4111-8111-111111111111
    "404":
      description: Not found.
      content:
        application/json:
          schema:
            $ref: ../components/schemas.yaml#/Error
          example:
            error:
              code: NOT_FOUND
              message: Not found.
              correlationId: 11111111-1111-4111-8111-111111111111