@asstio-dev/storefront 0.27.0 → 0.31.0

package/src/schema.d.ts

@@ -4,6 +4,60 @@
  */
 
 export interface paths {
+    "/v1/auth/sign-in": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** Start a sign-in: e-mails an 8-digit code and a link when the address may sign in. The 202 is the same either way; keep binding in the __Host-sf_signin cookie. */
+        post: operations["StartSignIn"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/sign-in/verify": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Verify a sign-in with its code or link and mint a shopper session. Without the start's binding the answer is 409 SIGN_IN_CONFIRM_REQUIRED until confirm is true.
+         * @description Exactly one of code (8 digits; spaces allowed) and link. link is the sfl_{challengeId}.{secret} token from the sign-in link's fragment; a whole sign-in URL is accepted too, and only the part after its last '#' is used. challengeId is required with code and optional with link (the link carries it; a challengeId that names another challenge is SIGN_IN_INVALID), so a link opened on another device verifies on its own. binding is the start answer's binding from the __Host-sf_signin cookie; without it a correct code or link answers 409 SIGN_IN_CONFIRM_REQUIRED (maskedEmail and siteName in the problem) until the shopper confirms and the request is repeated with confirm: true. A replayed code mints nothing; a lost answer is recovered by a new sign-in.
+         */
+        post: operations["VerifySignIn"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/auth/sign-out": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** End the session, or every session of the account with everywhere: true. Works on a paused site. */
+        post: operations["SignOut"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/brands": {
         parameters: {
             query?: never;
@@ -266,6 +320,57 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/me": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** The signed-in account: e-mail, names, and the principals it can act as on this site. */
+        get: operations["GetMe"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/me/cart": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** The current principal's saved cart, read-only; 404 NOT_FOUND when it has none. Use its token as X-Cart-Token on the cart routes, with the session. */
+        get: operations["GetMyCart"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/me/company": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** The current company principal's company, role and permissions. A consumer principal answers 403 PRINCIPAL_NOT_AVAILABLE. */
+        get: operations["GetMyCompany"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/orders/{orderId}": {
         parameters: {
             query?: never;
@@ -384,6 +489,40 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/session": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** The session the request carries: account, current principal, switch targets and expiry. Works on a paused site. */
+        get: operations["GetSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/session/principal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /** Act as another principal ("consumer" or a membership id). Rotates the session: store the new token; the old one serves GETs for 30 s only. */
+        put: operations["SwitchPrincipal"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/site": {
         parameters: {
             query?: never;
@@ -408,7 +547,7 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Ids, slugs, URLs and lastmod for sitemap.xml and selective revalidation. type=product|collection|brand, ?since= is inclusive. */
+        /** Ids, slugs, URLs and lastmod for sitemap.xml and selective revalidation. type=product|collection|brand, ?since= is inclusive; ?cursor=start walks the whole sitemap along nextCursor. */
         get: operations["GetSitemap"];
         put?: never;
         post?: never;
@@ -422,6 +561,23 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        AccountDto: {
+            companies: components["schemas"]["PrincipalDto"][];
+            consumer: boolean;
+            email: string;
+            firstName: null | string;
+            id: string;
+            lastName: null | string;
+            phone: null | string;
+        };
+        AccountPathsDto: {
+            account: string;
+            signIn: string;
+        };
+        AccountRefDto: {
+            email: string;
+            id: string;
+        };
         AddCartLineRequest: {
             /** Format: int32 */
             quantity: number | string;
@@ -548,6 +704,9 @@ export interface components {
             };
             url: null | string;
         };
+        CartTokenDto: {
+            token: string;
+        };
         CategoryNodeDto: {
             children: components["schemas"]["CategoryNodeDto"][];
             id: string;
@@ -705,6 +864,9 @@ export interface components {
             slug: string;
             url: string;
         };
+        CompanyNameDto: {
+            name: string;
+        };
         DeliveryRangeDto: {
             /** Format: int32 */
             max: number;
@@ -875,6 +1037,11 @@ export interface components {
             /** Format: int32 */
             w: number | string;
         };
+        MyCompanyDto: {
+            name: string;
+            permissions: string[];
+            role: string;
+        };
         OptionDto: {
             name: string;
             values: string[];
@@ -970,6 +1137,13 @@ export interface components {
             vatIncluded: boolean;
             vatRate: string;
         };
+        PrincipalDto: {
+            company: null | components["schemas"]["CompanyNameDto"];
+            id: string;
+            kind: string;
+            permissions: string[];
+            role: null | string;
+        };
         ProductCardDto: {
             attributes: components["schemas"]["AttributeDto"][];
             brand: null | components["schemas"]["BrandDto"];
@@ -1112,6 +1286,22 @@ export interface components {
             description: null | string;
             title: string;
         };
+        SessionDto: {
+            account: components["schemas"]["AccountRefDto"];
+            authMethod: string;
+            /** Format: date-time */
+            expiresAt: string;
+            /** Format: date-time */
+            idleExpiresAt: string;
+            principal: components["schemas"]["PrincipalDto"];
+            principals: components["schemas"]["PrincipalDto"][];
+            stale: boolean;
+        };
+        SessionTokenDto: {
+            /** Format: date-time */
+            expiresAt: string;
+            token: string;
+        };
         SetCartMarketRequest: {
             market: string;
         };
@@ -1136,7 +1326,32 @@ export interface components {
             icon: null | string;
             name: string;
         };
+        SignInStartedDto: {
+            binding: string;
+            challengeId: string;
+            /** Format: int32 */
+            codeLength: number | string;
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        SignOutRequest: {
+            everywhere?: boolean | null;
+        };
+        SignedInDto: {
+            browserCart: null | components["schemas"]["CartTokenDto"];
+            cart: null | components["schemas"]["CartTokenDto"];
+            principal: components["schemas"]["PrincipalDto"];
+            principals: components["schemas"]["PrincipalDto"][];
+            returnPath: null | string;
+            session: components["schemas"]["SessionTokenDto"];
+        };
+        SiteAccountsDto: {
+            company: boolean;
+            consumer: boolean;
+            paths: components["schemas"]["AccountPathsDto"];
+        };
         SiteDto: {
+            accounts: null | components["schemas"]["SiteAccountsDto"];
             code: string;
             configVersion: string;
             defaultMarket: string;
@@ -1161,6 +1376,7 @@ export interface components {
         };
         SitemapResponse: {
             items: components["schemas"]["SitemapEntryDto"][];
+            nextCursor: null | string;
             /** Format: int32 */
             page: number | string;
             /** Format: int32 */
@@ -1181,6 +1397,10 @@ export interface components {
             option: null | string;
             returnOrigin: null | string;
         };
+        StartSignInRequest: {
+            email: null | string;
+            returnPath?: null | string;
+        };
         /**
          * Problem
          * @description RFC 9457 problem document. Branch on `code`: it is stable, unlike `title` and `detail`.
@@ -1225,6 +1445,9 @@ export interface components {
             color: null | string;
             image: null | components["schemas"]["MediaDescriptorDto"];
         };
+        SwitchPrincipalRequest: {
+            principal: null | string;
+        };
         TrackingDto: {
             carrier: string;
             number: string;
@@ -1285,6 +1508,15 @@ export interface components {
             amount: string;
             rate: string;
         };
+        VerifySignInRequest: {
+            binding?: null | string;
+            /** @description The start answer's challengeId. Required with code; optional with link, which carries it — when both are given they must name the same challenge. */
+            challengeId?: null | string;
+            code?: null | string;
+            confirm?: boolean | null;
+            /** @description The sfl_{challengeId}.{secret} token from the sign-in link's fragment. A whole sign-in URL is accepted too: only the part after its last '#' is used. */
+            link?: null | string;
+        };
         WarningDto: {
             code: string;
             lineId?: null | string;
@@ -1300,37 +1532,38 @@ export interface components {
 }
 export type $defs = Record<string, never>;
 export interface operations {
-    ListBrands: {
+    StartSignIn: {
         parameters: {
-            query?: {
-                /** @description 1-based page. page × pageSize must not exceed 10000 (default pageSize 100, max 1000). */
-                page?: number;
-                /** @description Items per page, 1–1000. Out of range is a 400 with code INVALID_PAGE. */
-                pageSize?: number;
-            };
+            query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["StartSignInRequest"];
+            };
+        };
         responses: {
-            /** @description OK */
-            200: {
+            /** @description Accepted */
+            202: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["BrandPageDto"];
+                    "application/json": components["schemas"]["SignInStartedDto"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. INVALID_EMAIL (email missing, longer than 320 characters, or not an address), or MARKET_UNKNOWN. An unsafe returnPath is dropped, not refused. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -1339,7 +1572,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session header is sent and does not validate. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -1348,7 +1581,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -1357,7 +1590,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts; or SITE_INACTIVE (sign-in closes with the catalogue). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -1375,7 +1608,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -1386,23 +1619,29 @@ export interface operations {
             };
         };
     };
-    GetBrand: {
+    VerifySignIn: {
         parameters: {
             query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
+                /** @description Optional. The browser's cart, for the cart resolution at sign-in (accounts B3). */
+                "X-Cart-Token"?: string;
             };
-            path: {
-                slugOrId: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["VerifySignInRequest"];
+            };
+        };
         responses: {
             /** @description OK */
             200: {
@@ -1410,10 +1649,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["BrandDetailDto"];
+                    "application/json": components["schemas"]["SignedInDto"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. SIGN_IN_INVALID: one code for a wrong, expired, exhausted (5 attempts), consumed or ineligible challenge and for a malformed body — start a new sign-in. Or MARKET_UNKNOWN. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -1422,7 +1661,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session header is sent and does not validate. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -1431,7 +1670,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -1440,7 +1679,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. BRAND_NOT_FOUND, or SITE_INACTIVE when the site itself is not live. */
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts; or SITE_INACTIVE (sign-in closes with the catalogue). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -1449,6 +1688,15 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
+            /** @description problem+json. SIGN_IN_CONFIRM_REQUIRED: the code or link is right but this browser has no binding. The problem carries maskedEmail and siteName for the "Sign in on this device?" question; repeat the request with confirm: true. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -1458,7 +1706,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -1469,34 +1717,36 @@ export interface operations {
             };
         };
     };
-    GetCart: {
+    SignOut: {
         parameters: {
             query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
-                "X-Cart-Token": string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["SignOutRequest"];
+            };
+        };
         responses: {
-            /** @description OK */
-            200: {
+            /** @description No Content */
+            204: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["CartDto"];
-                };
+                content?: never;
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -1505,7 +1755,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session) or SESSION_INVALID (unknown, expired or revoked; a session is never silently dropped). Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -1514,7 +1764,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -1523,7 +1773,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts. Works on a paused site (no SITE_INACTIVE). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -1532,15 +1782,6 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
-            410: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -1550,7 +1791,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -1561,9 +1802,14 @@ export interface operations {
             };
         };
     };
-    CreateCart: {
+    ListBrands: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description 1-based page. page × pageSize must not exceed 10000 (default pageSize 100, max 1000). */
+                page?: number;
+                /** @description Items per page, 1–1000. Out of range is a 400 with code INVALID_PAGE. */
+                pageSize?: number;
+            };
             header: {
                 /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
                 "X-Site-Key": string;
@@ -1583,7 +1829,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CartDto"];
+                    "application/json": components["schemas"]["BrandPageDto"];
                 };
             };
             /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
@@ -1642,7 +1888,7 @@ export interface operations {
             };
         };
     };
-    AddCartLine: {
+    GetBrand: {
         parameters: {
             query?: never;
             header: {
@@ -1652,21 +1898,13 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
-                "X-Cart-Token": string;
-                /** @description An opaque client-chosen key. Replaying the exact same add with the same key is a no-op (the line's quantity is not added twice); a different key, or none, tops the existing line up like any other add. */
-                "Idempotency-Key"?: string;
-                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
-                "If-Match"?: string;
             };
-            path?: never;
+            path: {
+                slugOrId: string;
+            };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["AddCartLineRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description OK */
             200: {
@@ -1674,10 +1912,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CartDto"];
+                    "application/json": components["schemas"]["BrandDetailDto"];
                 };
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), INVALID_QUANTITY, or CART_FULL. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -1704,7 +1942,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. BRAND_NOT_FOUND, or SITE_INACTIVE when the site itself is not live. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -1713,24 +1951,6 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_CONFLICT (stale If-Match), STOCK_INSUFFICIENT, or PRODUCT_GONE. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
-            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
-            410: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -1751,7 +1971,7 @@ export interface operations {
             };
         };
     };
-    RemoveCartLine: {
+    GetCart: {
         parameters: {
             query?: never;
             header: {
@@ -1763,12 +1983,10 @@ export interface operations {
                 "Accept-Language"?: string;
                 /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
                 "X-Cart-Token": string;
-                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
-                "If-Match"?: string;
-            };
-            path: {
-                id: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -1791,7 +2009,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -1800,7 +2018,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -1809,7 +2027,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -1818,15 +2036,6 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_CONFLICT (stale If-Match). */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
             /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
             410: {
                 headers: {
@@ -1856,7 +2065,7 @@ export interface operations {
             };
         };
     };
-    UpdateCartLine: {
+    CreateCart: {
         parameters: {
             query?: never;
             header: {
@@ -1866,21 +2075,13 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
-                "X-Cart-Token": string;
-                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
-                "If-Match"?: string;
-            };
-            path: {
-                id: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
+            path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["UpdateCartLineRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
             /** @description OK */
             200: {
@@ -1891,7 +2092,7 @@ export interface operations {
                     "application/json": components["schemas"]["CartDto"];
                 };
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), or INVALID_QUANTITY. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -1900,7 +2101,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -1909,7 +2110,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). PERMISSION_DENIED (extension permission: cart.edit): the principal may not change its saved cart. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -1927,24 +2128,6 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_CONFLICT (stale If-Match), STOCK_INSUFFICIENT, or PRODUCT_GONE. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
-            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
-            410: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -1965,7 +2148,7 @@ export interface operations {
             };
         };
     };
-    SetCartMarket: {
+    AddCartLine: {
         parameters: {
             query?: never;
             header: {
@@ -1977,15 +2160,19 @@ export interface operations {
                 "Accept-Language"?: string;
                 /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
                 "X-Cart-Token": string;
+                /** @description An opaque client-chosen key. Replaying the exact same add with the same key is a no-op (the line's quantity is not added twice); a different key, or none, tops the existing line up like any other add. */
+                "Idempotency-Key"?: string;
                 /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
                 "If-Match"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
             path?: never;
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["SetCartMarketRequest"];
+                "application/json": components["schemas"]["AddCartLineRequest"];
             };
         };
         responses: {
@@ -1998,7 +2185,7 @@ export interface operations {
                     "application/json": components["schemas"]["CartDto"];
                 };
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), or MARKET_UNKNOWN. */
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), INVALID_QUANTITY, or CART_FULL. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2007,7 +2194,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2016,7 +2203,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). PERMISSION_DENIED (extension permission: cart.edit): the principal may not change its saved cart. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2025,7 +2212,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2034,7 +2221,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_CONFLICT (stale If-Match). */
+            /** @description problem+json. CART_CONFLICT (stale If-Match), STOCK_INSUFFICIENT, or PRODUCT_GONE. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -2072,7 +2259,7 @@ export interface operations {
             };
         };
     };
-    GetShippingEstimate: {
+    RemoveCartLine: {
         parameters: {
             query?: never;
             header: {
@@ -2084,8 +2271,14 @@ export interface operations {
                 "Accept-Language"?: string;
                 /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
                 "X-Cart-Token": string;
+                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
+                "If-Match"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
+            };
+            path: {
+                id: string;
             };
-            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -2096,7 +2289,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ShippingEstimateDto"];
+                    "application/json": components["schemas"]["CartDto"];
                 };
             };
             /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
@@ -2108,7 +2301,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2117,7 +2310,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). PERMISSION_DENIED (extension permission: cart.edit): the principal may not change its saved cart. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2126,7 +2319,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2135,6 +2328,15 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
+            /** @description problem+json. CART_CONFLICT (stale If-Match). */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
             /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
             410: {
                 headers: {
@@ -2164,7 +2366,7 @@ export interface operations {
             };
         };
     };
-    GetCategories: {
+    UpdateCartLine: {
         parameters: {
             query?: never;
             header: {
@@ -2174,11 +2376,23 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
+                "X-Cart-Token": string;
+                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
+                "If-Match"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
+            };
+            path: {
+                id: string;
             };
-            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateCartLineRequest"];
+            };
+        };
         responses: {
             /** @description OK */
             200: {
@@ -2186,10 +2400,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CategoryNodeDto"][];
+                    "application/json": components["schemas"]["CartDto"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), or INVALID_QUANTITY. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2198,7 +2412,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2207,7 +2421,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). PERMISSION_DENIED (extension permission: cart.edit): the principal may not change its saved cart. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2216,7 +2430,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2225,6 +2439,24 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
+            /** @description problem+json. CART_CONFLICT (stale If-Match), STOCK_INSUFFICIENT, or PRODUCT_GONE. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -2245,7 +2477,7 @@ export interface operations {
             };
         };
     };
-    StartCheckout: {
+    SetCartMarket: {
         parameters: {
             query?: never;
             header: {
@@ -2255,15 +2487,19 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description The cart's bearer token. The checkout works on this cart. */
+                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
                 "X-Cart-Token": string;
+                /** @description The cart's current version, as returned in the ETag header. When present and stale, the mutation is rejected with 409 CART_CONFLICT instead of being applied last-write-wins. */
+                "If-Match"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: {
+        requestBody: {
             content: {
-                "application/json": null | components["schemas"]["StartCheckoutRequest"];
+                "application/json": components["schemas"]["SetCartMarketRequest"];
             };
         };
         responses: {
@@ -2273,10 +2509,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CheckoutDto"];
+                    "application/json": components["schemas"]["CartDto"];
                 };
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), OPTION_NOT_AVAILABLE, or ORIGIN_NOT_ALLOWED. */
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), or MARKET_UNKNOWN. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2285,7 +2521,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2294,7 +2530,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CHECKOUT_PREVIEW_KEY: a preview key cannot check out; or SECRET_KEY_FROM_BROWSER. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). PERMISSION_DENIED (extension permission: cart.edit): the principal may not change its saved cart. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2303,7 +2539,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2312,7 +2548,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_EMPTY; CHECKOUT_CART_CHANGED (the corrected cart is in `cart`); CHECKOUT_IN_PROGRESS (Retry-After); CHECKOUT_MARKET_MISMATCH. */
+            /** @description problem+json. CART_CONFLICT (stale If-Match). */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -2321,7 +2557,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CART_EXPIRED. */
+            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
             410: {
                 headers: {
                     [name: string]: unknown;
@@ -2339,16 +2575,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CHECKOUT_PROVIDER_REJECTED. */
-            502: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/problem+json": components["schemas"]["StorefrontProblem"];
-                };
-            };
-            /** @description problem+json. CHECKOUT_UNAVAILABLE, SHIPPING_UNAVAILABLE (the market's shipping configuration cannot be served) or CHECKOUT_PROVIDER_UNAVAILABLE (Retry-After); SITE_REGISTRY_WARMING. */
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -2359,7 +2586,7 @@ export interface operations {
             };
         };
     };
-    GetCheckout: {
+    GetShippingEstimate: {
         parameters: {
             query?: never;
             header: {
@@ -2369,12 +2596,12 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description The cart's bearer token. The checkout works on this cart. */
+                /** @description The bearer token returned by POST /v1/cart. Identifies which cart this request reads or mutates. */
                 "X-Cart-Token": string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
-            path: {
-                attemptId: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -2385,7 +2612,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CheckoutStatusDto"];
+                    "application/json": components["schemas"]["ShippingEstimateDto"];
                 };
             };
             /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
@@ -2397,7 +2624,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2406,7 +2633,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2415,7 +2642,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CHECKOUT_NOT_FOUND: no such attempt for this site and cart; or SITE_INACTIVE. */
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2424,6 +2651,15 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
+            /** @description problem+json. CART_EXPIRED: this cart token belongs to an expired cart. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
             /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
             429: {
                 headers: {
@@ -2444,7 +2680,7 @@ export interface operations {
             };
         };
     };
-    CompleteCheckout: {
+    GetCategories: {
         parameters: {
             query?: never;
             header: {
@@ -2454,12 +2690,8 @@ export interface operations {
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
-                /** @description Optional. When it names the attempt's cart, the answer carries the order's access token (complete) or opens the order (orders). */
-                "X-Cart-Token"?: string;
-            };
-            path: {
-                attemptId: string;
             };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -2470,7 +2702,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CheckoutStatusDto"];
+                    "application/json": components["schemas"]["CategoryNodeDto"][];
                 };
             };
             /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
@@ -2500,7 +2732,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CHECKOUT_NOT_FOUND. */
+            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2529,7 +2761,7 @@ export interface operations {
             };
         };
     };
-    GetCheckoutShipping: {
+    StartCheckout: {
         parameters: {
             query?: never;
             header: {
@@ -2541,24 +2773,578 @@ export interface operations {
                 "Accept-Language"?: string;
                 /** @description The cart's bearer token. The checkout works on this cart. */
                 "X-Cart-Token": string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
-            path: {
-                attemptId: string;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": null | components["schemas"]["StartCheckoutRequest"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CheckoutDto"];
+                };
+            };
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing), OPTION_NOT_AVAILABLE, or ORIGIN_NOT_ALLOWED. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_PREVIEW_KEY: a preview key cannot check out; or SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. NOT_FOUND: no such cart. The same answer for a saved cart of another principal or account (with or without a session) and for a cart whose owner was erased. Or SITE_INACTIVE. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CART_EMPTY; CHECKOUT_CART_CHANGED (the corrected cart is in `cart`); CHECKOUT_IN_PROGRESS (Retry-After); CHECKOUT_MARKET_MISMATCH; COMPANY_CHECKOUT_UNAVAILABLE (a company principal: company checkout is not available yet). */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CART_EXPIRED. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_PROVIDER_REJECTED. */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_UNAVAILABLE, SHIPPING_UNAVAILABLE (the market's shipping configuration cannot be served) or CHECKOUT_PROVIDER_UNAVAILABLE (Retry-After); SITE_REGISTRY_WARMING. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    GetCheckout: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+                /** @description The cart's bearer token. The checkout works on this cart. */
+                "X-Cart-Token": string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
+            };
+            path: {
+                attemptId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CheckoutStatusDto"];
+                };
+            };
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_NOT_FOUND: no such attempt for this site and cart; the same answer when the attempt is not open to this caller — a company attempt without a session of its own membership, or a cart whose owner was erased, whatever token is sent. Or SITE_INACTIVE. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    CompleteCheckout: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+                /** @description Optional. When it names the attempt's cart, the answer carries the order's access token (complete) or opens the order (orders). */
+                "X-Cart-Token"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
+            };
+            path: {
+                attemptId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CheckoutStatusDto"];
+                };
+            };
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_NOT_FOUND: no such attempt; the same answer when the attempt is not open to this caller — a company attempt without a session of its own membership, or a cart whose owner was erased, whatever token is sent. A refused request completes nothing. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    GetCheckoutShipping: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+                /** @description The cart's bearer token. The checkout works on this cart. */
+                "X-Cart-Token": string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
+            };
+            path: {
+                attemptId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CheckoutShippingViewDto"];
+                };
+            };
+            /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. CHECKOUT_NOT_FOUND: no such attempt for this site and cart; the same answer when the attempt is not open to this caller — a company attempt without a session of its own membership, or a cart whose owner was erased, whatever token is sent. Or SITE_INACTIVE. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    GetCollections: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CollectionDto"][];
+                };
+            };
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    GetCollection: {
+        parameters: {
+            query?: {
+                /** @description Free-text search. Omit to browse rather than search; a q of separators only (such as !!!) browses too. A search answers with search (how it was answered), and may set queryCorrection and redirect. */
+                q?: string;
+                /** @description 1-based page. page × pageSize must not exceed 10000 (default pageSize 24, max 100). */
+                page?: number;
+                /** @description Items per page, 1–100. Out of range is a 400 with code INVALID_PAGE. */
+                pageSize?: number;
+                /** @description Sort key. An unknown one is not refused: it falls back to relevance with a SORT_UNKNOWN warning, because it usually comes from a stale bookmark. */
+                sort?: "name_asc" | "newest" | "price_asc" | "price_desc" | "relevance";
+                /** @description Facet selection, sent as filter[key]=value. Several values for one facet are comma-separated; price is "min-max" and a boolean facet is "true". An unknown key is dropped with a FILTER_IGNORED warning. */
+                filter?: {
+                    [key: string]: string;
+                };
+                /** @description Where a search came from, for measurement only: typed, suggestion, recent or other. It never changes the answer. Anything else is ignored with an ORIGIN_UNKNOWN warning. */
+                origin?: "other" | "recent" | "suggestion" | "typed";
+            };
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+            };
+            path: {
+                slugOrId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CollectionListingResponse"];
+                };
+            };
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. COLLECTION_NOT_FOUND, or SITE_INACTIVE when the site itself is not live. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    RequestErasure: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": null | components["schemas"]["ErasureRequest"];
             };
-            cookie?: never;
         };
-        requestBody?: never;
         responses: {
-            /** @description OK */
-            200: {
+            /** @description Accepted */
+            202: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content: {
-                    "application/json": components["schemas"]["CheckoutShippingViewDto"];
-                };
+                content?: never;
             };
-            /** @description problem+json. NOT_FOUND (X-Cart-Token missing). */
+            /** @description problem+json. INVALID_EMAIL. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2576,7 +3362,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_REQUIRED, or SECRET_KEY_FROM_BROWSER. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2585,7 +3371,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. CHECKOUT_NOT_FOUND: no such attempt for this site and cart; or SITE_INACTIVE. */
+            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2603,7 +3389,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -2614,7 +3400,7 @@ export interface operations {
             };
         };
     };
-    GetCollections: {
+    TrackSearchEvents: {
         parameters: {
             query?: never;
             header: {
@@ -2628,18 +3414,22 @@ export interface operations {
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SearchEventsRequest"];
+            };
+        };
         responses: {
-            /** @description OK */
-            200: {
+            /** @description Accepted */
+            202: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CollectionDto"][];
+                    "application/json": components["schemas"]["SearchEventsResponse"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. EVENTS_INVALID (not JSON, not { "events": [ … ] }, no event or more than 50, or a body over 64 KB; nothing is stored), or MARKET_UNKNOWN. One bad event is not a 400: it is listed in the 202's rejected. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2695,35 +3485,20 @@ export interface operations {
             };
         };
     };
-    GetCollection: {
+    GetMe: {
         parameters: {
-            query?: {
-                /** @description Free-text search. Omit to browse rather than search; a q of separators only (such as !!!) browses too. A search answers with search (how it was answered), and may set queryCorrection and redirect. */
-                q?: string;
-                /** @description 1-based page. page × pageSize must not exceed 10000 (default pageSize 24, max 100). */
-                page?: number;
-                /** @description Items per page, 1–100. Out of range is a 400 with code INVALID_PAGE. */
-                pageSize?: number;
-                /** @description Sort key. An unknown one is not refused: it falls back to relevance with a SORT_UNKNOWN warning, because it usually comes from a stale bookmark. */
-                sort?: "name_asc" | "newest" | "price_asc" | "price_desc" | "relevance";
-                /** @description Facet selection, sent as filter[key]=value. Several values for one facet are comma-separated; price is "min-max" and a boolean facet is "true". An unknown key is dropped with a FILTER_IGNORED warning. */
-                filter?: {
-                    [key: string]: string;
-                };
-                /** @description Where a search came from, for measurement only: typed, suggestion, recent or other. It never changes the answer. Anything else is ignored with an ORIGIN_UNKNOWN warning. */
-                origin?: "other" | "recent" | "suggestion" | "typed";
-            };
+            query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
             };
-            path: {
-                slugOrId: string;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -2734,10 +3509,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["CollectionListingResponse"];
+                    "application/json": components["schemas"]["AccountDto"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2746,7 +3521,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session) or SESSION_INVALID (unknown, expired or revoked; a session is never silently dropped). Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2755,7 +3530,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2764,7 +3539,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. COLLECTION_NOT_FOUND, or SITE_INACTIVE when the site itself is not live. */
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts; or SITE_INACTIVE (sign-in closes with the catalogue). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2782,7 +3557,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -2793,34 +3568,34 @@ export interface operations {
             };
         };
     };
-    RequestErasure: {
+    GetMyCart: {
         parameters: {
             query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody?: {
-            content: {
-                "application/json": null | components["schemas"]["ErasureRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Accepted */
-            202: {
+            /** @description OK */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": components["schemas"]["CartDto"];
+                };
             };
-            /** @description problem+json. INVALID_EMAIL. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2829,7 +3604,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session) or SESSION_INVALID (unknown, expired or revoked; a session is never silently dropped). Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2838,7 +3613,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_REQUIRED, or SECRET_KEY_FROM_BROWSER. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2847,7 +3622,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. NOT_FOUND: the principal has no active saved cart. Or ACCOUNTS_DISABLED (the site has no shopper accounts) or SITE_INACTIVE. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2865,7 +3640,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEYS_SYNCING (Retry-After) or SITE_REGISTRY_WARMING. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -2876,36 +3651,34 @@ export interface operations {
             };
         };
     };
-    TrackSearchEvents: {
+    GetMyCompany: {
         parameters: {
             query?: never;
             header: {
-                /** @description Publishable, preview or secret site key. Required on every request; secret keys are server-side only. */
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
                 "X-Site-Key": string;
                 /** @description Market code (e.g. "se"). Omit for the site's default market. */
                 "X-Market"?: string;
                 /** @description BCP-47 language tag. Omit to use the market's language. */
                 "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
             };
             path?: never;
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["SearchEventsRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Accepted */
-            202: {
+            /** @description OK */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["SearchEventsResponse"];
+                    "application/json": components["schemas"]["MyCompanyDto"];
                 };
             };
-            /** @description problem+json. EVENTS_INVALID (not JSON, not { "events": [ … ] }, no event or more than 50, or a body over 64 KB; nothing is stored), or MARKET_UNKNOWN. One bad event is not a 400: it is listed in the 202's rejected. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -2914,7 +3687,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session) or SESSION_INVALID (unknown, expired or revoked; a session is never silently dropped). Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -2923,7 +3696,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). PRINCIPAL_NOT_AVAILABLE: the current principal is the consumer, which has no company. */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -2932,7 +3705,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_INACTIVE, or NOT_FOUND for an unrouted path. */
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts; or SITE_INACTIVE (sign-in closes with the catalogue). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -2950,7 +3723,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_REGISTRY_WARMING or INDEX_UNAVAILABLE — retry, the request was not wrong. */
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
             503: {
                 headers: {
                     [name: string]: unknown;
@@ -2975,6 +3748,8 @@ export interface operations {
                 "X-Cart-Token"?: string;
                 /** @description The order's access token, from the completion answer. A header only — never a query parameter. */
                 "X-Order-Token"?: string;
+                /** @description Optional. The shopper session (sfs_…) of a signed-in shopper, server-to-server with the site's server key only: it opens the principal's saved carts and orders, and is never needed for a guest cart or order. On a site without accounts it is not read. Not in the CORS allow-list. */
+                "X-Shopper-Session"?: string;
             };
             path: {
                 orderId: string;
@@ -3001,7 +3776,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID. */
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_INVALID when an X-Shopper-Session is sent on a site with accounts and does not validate (unknown, expired or revoked) — never a silent signed-out answer. Render signed-out and clear the session cookie. */
             401: {
                 headers: {
                     [name: string]: unknown;
@@ -3010,7 +3785,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret key was sent from a browser. */
+            /** @description problem+json. SECRET_KEY_FROM_BROWSER: a secret or server key was sent from a browser. With X-Shopper-Session: SERVER_KEY_REQUIRED (any key but the site's server key) or SESSION_FROM_BROWSER (the header with an Origin header). */
             403: {
                 headers: {
                     [name: string]: unknown;
@@ -3019,7 +3794,7 @@ export interface operations {
                     "application/problem+json": components["schemas"]["StorefrontProblem"];
                 };
             };
-            /** @description problem+json. ORDER_NOT_FOUND: no such order, or the credential does not open it — the same answer for both. */
+            /** @description problem+json. ORDER_NOT_FOUND: no such order, or the credential does not open it — the same answer for both. A company order opens only to a session of its own membership with orders.read.own; its order and cart tokens never open it, and no token opens an order whose cart owner was erased (the secret key's read excepted). */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -3581,6 +4356,176 @@ export interface operations {
             };
         };
     };
+    GetSession: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SessionDto"];
+                };
+            };
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session) or SESSION_INVALID (unknown, expired or revoked; a session is never silently dropped). Render signed-out and clear the session cookie. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts. Works on a paused site (no SITE_INACTIVE). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
+    SwitchPrincipal: {
+        parameters: {
+            query?: never;
+            header: {
+                /** @description The site's server key (sfk_srv_…). Account routes answer 403 SERVER_KEY_REQUIRED to any other key; server-side only. */
+                "X-Site-Key": string;
+                /** @description Market code (e.g. "se"). Omit for the site's default market. */
+                "X-Market"?: string;
+                /** @description BCP-47 language tag. Omit to use the market's language. */
+                "Accept-Language"?: string;
+                /** @description The shopper's IP address as the frontend server saw it. Trusted only with a verified server key; the sign-in rate limits are per shopper IP. */
+                "X-Shopper-Ip"?: string;
+            };
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["SwitchPrincipalRequest"];
+            };
+        };
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SignedInDto"];
+                };
+            };
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site). */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEY_MISSING or SITE_KEY_INVALID; SESSION_REQUIRED (no X-Shopper-Session), SESSION_INVALID (unknown, expired, revoked, or a replaced token outside a GET), or SESSION_REAUTH_REQUIRED (the target principal needs a new sign-in). */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SERVER_KEY_REQUIRED (any key but the site's server key), SESSION_FROM_BROWSER (X-Shopper-Session with an Origin header) or SECRET_KEY_FROM_BROWSER (the server key with an Origin header). PRINCIPAL_NOT_AVAILABLE: the principal is not one of the session's. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. ACCOUNTS_DISABLED: the site has no shopper accounts; or SITE_INACTIVE (sign-in closes with the catalogue). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. RATE_LIMITED; retryAfterSeconds and the Retry-After header say how long to wait. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+            /** @description problem+json. SITE_KEYS_SYNCING (the server key before the site's first key sync; Retry-After) or SITE_REGISTRY_WARMING. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["StorefrontProblem"];
+                };
+            };
+        };
+    };
     GetSite: {
         parameters: {
             query?: never;
@@ -3666,10 +4611,12 @@ export interface operations {
         parameters: {
             query?: {
                 /** @description Which URLs to list. Defaults to product. */
-                type?: "collection" | "product";
+                type?: "brand" | "collection" | "product";
                 /** @description Inclusive ISO-8601 timestamp; only entries changed at or after it. An offset-free value is read as UTC. */
                 since?: string;
-                /** @description 1-based page. page × pageSize must not exceed 10000 (default pageSize 500, max 1000). */
+                /** @description Cursor mode: start with "start", then pass each response's nextCursor until it is null. No result window applies. Not combined with page > 1. A value this endpoint did not issue for the same type is a 400 with code INVALID_CURSOR. */
+                cursor?: string;
+                /** @description Page mode only (no cursor). 1-based page. page × pageSize must not exceed 10000 (default pageSize 500, max 1000). Use cursor=start to walk past that. */
                 page?: number;
                 /** @description Items per page, 1–1000. Out of range is a 400 with code INVALID_PAGE. */
                 pageSize?: number;
@@ -3696,7 +4643,7 @@ export interface operations {
                     "application/json": components["schemas"]["SitemapResponse"];
                 };
             };
-            /** @description problem+json. MARKET_UNKNOWN (no such market on this site) or INVALID_PAGE. */
+            /** @description problem+json. MARKET_UNKNOWN (no such market on this site), INVALID_PAGE, or INVALID_TYPE (an unknown type), INVALID_SINCE (since not an ISO-8601 timestamp) or INVALID_CURSOR (a cursor that is not start or a nextCursor issued for this type). */
             400: {
                 headers: {
                     [name: string]: unknown;