@revenexx/node 0.0.2 → 0.1.1

package/dist/services/customers.d.ts

@@ -1,32 +1,203 @@
 import { Client } from '../client.js';
 import { Models } from '../models.js';
-import { AddressType } from '../enums/address-type.js';
-import { ContactRole } from '../enums/contact-role.js';
-import { ContactStatus } from '../enums/contact-status.js';
-import { OrganizationStatus } from '../enums/organization-status.js';
 import '../query.js';
+import '../enums/address-type-row-tone.js';
+import '../enums/address-type-row-create-request-tone.js';
+import '../enums/address-type-row-update-request-tone.js';
+import '../enums/approval-rule-approver-type.js';
+import '../enums/approval-rule-condition.js';
+import '../enums/approval-rule-effect.js';
+import '../enums/approval-rule-create-request-approver-type.js';
+import '../enums/approval-rule-create-request-condition.js';
+import '../enums/approval-rule-create-request-effect.js';
+import '../enums/approval-rule-update-request-approver-type.js';
+import '../enums/approval-rule-update-request-condition.js';
+import '../enums/approval-rule-update-request-effect.js';
+import '../enums/assets-source.js';
+import '../enums/attribute-value-bucket.js';
+import '../enums/auth-mail-source.js';
+import '../enums/recovery-mail-source.js';
+import '../enums/registration-status.js';
+import '../enums/budget-change-reason.js';
+import '../enums/budget-movement-result-status.js';
+import '../enums/cart-status.js';
+import '../enums/cart-merge-strategy.js';
+import '../enums/cart-price-snapshot-mode.js';
+import '../enums/cart-io-format.js';
 import '../enums/cart-export-format.js';
 import '../enums/cart-item-type.js';
+import '../enums/cart-vocabulary-tone.js';
+import '../enums/cart-vocabulary-name.js';
+import '../enums/cart-vocabulary-source.js';
+import '../enums/cart-vocabulary-ref-name.js';
+import '../enums/categories-rule-match.js';
+import '../enums/category-rule-operator.js';
+import '../enums/category-rule-match.js';
 import '../enums/channel-status.js';
-import '../enums/channel-type.js';
+import '../enums/channel-unassigned-visibility.js';
+import '../enums/channel-unresolved-reason.js';
+import '../enums/channel-context-source.js';
+import '../enums/channel-inactive-behavior.js';
+import '../enums/channel-policy-source.js';
+import '../enums/channel-policy-tenant-default.js';
+import '../enums/channel-unassigned-policy.js';
+import '../enums/channel-type-tone.js';
+import '../enums/channel-visibility-reason.js';
+import '../enums/channel-vocabulary-tone.js';
+import '../enums/channel-vocabulary-name.js';
+import '../enums/channel-vocabulary-source.js';
+import '../enums/channel-vocabulary-ref-name.js';
+import '../enums/contact-registration-status.js';
+import '../enums/contact-status.js';
+import '../enums/contact-activity-kind.js';
+import '../enums/contact-create-request-registration-status.js';
+import '../enums/contact-event-kind-tone.js';
+import '../enums/contact-event-kind-create-request-tone.js';
+import '../enums/contact-event-kind-update-request-tone.js';
+import '../enums/contact-update-request-registration-status.js';
+import '../enums/cost-center-budget-type.js';
+import '../enums/cost-center-restriction-type.js';
+import '../enums/cost-center-restriction-create-request-type.js';
+import '../enums/cost-center-restriction-update-request-type.js';
+import '../enums/payment-fee-type.js';
+import '../enums/payment-method-kind.js';
+import '../enums/form-status.js';
+import '../enums/form-submission-status.js';
+import '../enums/form-notify-source.js';
+import '../enums/form-submission-prune-request-status.js';
+import '../enums/forms-vocabulary-tone.js';
+import '../enums/forms-vocabulary-name.js';
+import '../enums/forms-vocabulary-summary-name.js';
+import '../enums/inventory-vocabulary-default-tone.js';
+import '../enums/inventory-vocabulary-source.js';
 import '../enums/cart-io-apply-mode.js';
 import '../enums/cart-io-direction.js';
 import '../enums/cart-io-entity.js';
-import '../enums/cart-io-format.js';
+import '../enums/io-profile-resource-apply-mode.js';
+import '../enums/io-profile-resource-direction.js';
+import '../enums/lifecycle-stage-tone.js';
+import '../enums/lifecycle-stage-create-request-tone.js';
+import '../enums/lifecycle-stage-update-request-tone.js';
 import '../enums/location-type.js';
 import '../enums/market-status.js';
+import '../enums/market-default-locale-source.js';
+import '../enums/market-locale-fallback.js';
+import '../enums/market-locale-granularity.js';
+import '../enums/market-pricing-source.js';
+import '../enums/market-tax-basis.js';
+import '../enums/market-readiness-check-id.js';
+import '../enums/market-readiness-severity.js';
+import '../enums/markets-vocabulary-tone.js';
+import '../enums/markets-vocabulary-name.js';
+import '../enums/markets-vocabulary-source.js';
+import '../enums/markets-vocabulary-summary-name.js';
+import '../enums/order-fulfillment-status.js';
+import '../enums/order-payment-status.js';
+import '../enums/order-status.js';
+import '../enums/order-cancellation-scope.js';
 import '../enums/order-comment-visibility.js';
 import '../enums/order-item-type.js';
-import '../enums/order-list-kind.js';
-import '../enums/order-payment-status.js';
+import '../enums/order-list-kind-tone.js';
+import '../enums/order-list-kind-row-tone.js';
+import '../enums/order-list-cart-mode.js';
+import '../enums/order-list-vocabulary-default-tone.js';
+import '../enums/order-list-vocabulary-name.js';
+import '../enums/order-list-vocabulary-source.js';
+import '../enums/order-list-vocabulary-tone.js';
+import '../enums/order-return-status.js';
+import '../enums/order-return-settlement.js';
+import '../enums/order-return-refusal.js';
+import '../enums/order-vocabulary-tone.js';
+import '../enums/order-vocabulary-name.js';
+import '../enums/order-vocabulary-source.js';
+import '../enums/order-vocabulary-summary-name.js';
+import '../enums/order-resolution-stage.js';
+import '../enums/organization-status.js';
 import '../enums/page-status.js';
-import '../enums/payment-fee-type.js';
-import '../enums/payment-method-kind.js';
+import '../enums/pages-vocabulary-app.js';
+import '../enums/pages-vocabulary-tone.js';
+import '../enums/pages-vocabulary-name.js';
+import '../enums/pages-vocabulary-source.js';
+import '../enums/pages-vocabulary-index-app.js';
+import '../enums/payment-dunning-stage.js';
+import '../enums/payment-failure-code.js';
+import '../enums/payment-status.js';
+import '../enums/payment-term-tone.js';
+import '../enums/payment-term-create-request-tone.js';
+import '../enums/payment-term-update-request-tone.js';
+import '../enums/payment-vocabulary-tone.js';
+import '../enums/pending-approval-approver-type.js';
+import '../enums/pending-approval-status.js';
+import '../enums/price-ending-rule.js';
+import '../enums/price-entries-adjust-response-rounding.js';
+import '../enums/price-entries-adjust-response-rounding-mode.js';
+import '../enums/price-entries-bulk-mode.js';
+import '../enums/price-rounding-mode.js';
 import '../enums/price-entry-type.js';
 import '../enums/price-list-status.js';
+import '../enums/price-list-tax-basis.js';
+import '../enums/price-currency-source.js';
+import '../enums/price-list-tiebreak.js';
+import '../enums/price-tax-inclusive-default.js';
+import '../enums/price-tax-unresolved-reason.js';
+import '../enums/price-tax-market-source.js';
+import '../enums/price-vocabulary-tone.js';
+import '../enums/price-vocabulary-name.js';
+import '../enums/price-vocabulary-source.js';
+import '../enums/price-vocabulary-ref-name.js';
+import '../enums/product-categories-source.js';
+import '../enums/product-grid-column-source.js';
+import '../enums/product-label-source.js';
+import '../enums/product-label-attribute-source.js';
+import '../enums/products-kind.js';
+import '../enums/purchase-request-status.js';
+import '../enums/purchase-request-event-name.js';
+import '../enums/purchase-request-item-type.js';
+import '../enums/purchase-request-item-create-request-type.js';
+import '../enums/purchase-request-item-update-request-type.js';
+import '../enums/reorder-point-source.js';
+import '../enums/reservation-status.js';
+import '../enums/price-on-request-reason.js';
+import '../enums/price-tax-basis.js';
+import '../enums/price-tax-basis-source.js';
+import '../enums/role-catalog-response-source.js';
+import '../enums/segment-rule-match.js';
+import '../enums/segment-member-source.js';
+import '../enums/segment-rule-operator.js';
+import '../enums/segment-rule-preview-request-rule-match.js';
+import '../enums/segment-rule-preview-request-target.js';
+import '../enums/segment-rule-preview-response-rule-match.js';
+import '../enums/segment-rule-preview-response-target.js';
+import '../enums/segment-rules-target.js';
+import '../enums/shipping-carrier-status.js';
 import '../enums/shipping-method-matrix-basis.js';
 import '../enums/shipping-method-pricing-type.js';
+import '../enums/shipping-carrier-source.js';
+import '../enums/shipping-rate-pricing-type.js';
+import '../enums/shipping-tax-source.js';
+import '../enums/shipping-free-above-basis.js';
+import '../enums/shipping-rates-basis-matrix-basis-default.js';
+import '../enums/shipping-service-level-create-request-tone.js';
+import '../enums/shipping-service-level-row-tone.js';
+import '../enums/shipping-service-level-update-request-tone.js';
+import '../enums/shipping-tax-unresolved-reason.js';
+import '../enums/shipping-tax-market-source.js';
+import '../enums/shipping-tax-context-via.js';
+import '../enums/shipping-tracking-carrier-status.js';
+import '../enums/shipping-vocabulary-default-tone.js';
+import '../enums/shipping-vocabulary-source.js';
+import '../enums/shipping-vocabulary-tone.js';
+import '../enums/shipping-weight-unit-create-request-tone.js';
+import '../enums/shipping-weight-unit-row-tone.js';
+import '../enums/shipping-weight-unit-update-request-tone.js';
+import '../enums/stock-movement-type.js';
 import '../enums/store-asset-request-visibility.js';
+import '../enums/submit-item-type.js';
+import '../enums/submit-result-outcome.js';
+import '../enums/validation-failed-response-status.js';
+import '../enums/vocabulary-default-tone.js';
+import '../enums/vocabulary-source.js';
+import '../enums/vocabulary-tone.js';
 import '../enums/attribute-boolean-status.js';
 import '../enums/attribute-datetime-status.js';
 import '../enums/attribute-email-status.js';
@@ -68,228 +239,105 @@ import '../enums/execution-trigger.js';
 import '../enums/health-antivirus-status.js';
 import '../enums/health-status-status.js';
 import '../enums/index-status.js';
-import '../enums/message-status.js';
+import '../enums/message-2-status.js';
 
 declare class Customers {
     client: Client;
     constructor(client: Client);
     /**
+     * An email and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.
      *
-     * @param {string} params.contactId - Filter to one owning contact.
-     * @param {string} params.organizationId - Filter to one organization.
-     * @param {number} params.limit - Page size (default 50, max 200).
-     * @param {number} params.offset - Row offset for pagination (default 0).
-     * @param {string} params.order - Sort as 'column.asc' | 'column.desc', e.g. 'created_at.desc'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
-     */
-    customersAddressesList(params?: {
-        contactId?: string;
-        organizationId?: string;
-        limit?: number;
-        offset?: number;
-        order?: string;
-    }): Promise<{}>;
-    /**
-     *
-     * @param {string} contactId - Filter to one owning contact.
-     * @param {string} organizationId - Filter to one organization.
-     * @param {number} limit - Page size (default 50, max 200).
-     * @param {number} offset - Row offset for pagination (default 0).
-     * @param {string} order - Sort as 'column.asc' | 'column.desc', e.g. 'created_at.desc'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    customersAddressesList(contactId?: string, organizationId?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
-    /**
-     *
-     * @param {string} params.city -
-     * @param {string} params.country - ISO 3166-1 alpha-2 code.
-     * @param {string} params.street -
-     * @param {string} params.zip -
-     * @param {string} params.company -
-     * @param {string} params.contactId - Owning contact (personal address).
-     * @param {boolean} params.isDefault - The default address of its owner and type.
-     * @param {string} params.name - Recipient name.
-     * @param {string} params.organizationId - Owning organization (company address).
-     * @param {string} params.phone -
-     * @param {string} params.region -
-     * @param {string} params.street2 -
-     * @param {AddressType} params.type - Default 'shipping'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
+     * @param {string} params.email - The buyer's login address — the same one the contact carries.
+     * @param {string} params.password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthLoginResponse>}
      */
-    customersAddressesCreate(params: {
-        city: string;
-        country: string;
-        street: string;
-        zip: string;
-        company?: string;
-        contactId?: string;
-        isDefault?: boolean;
-        name?: string;
-        organizationId?: string;
-        phone?: string;
-        region?: string;
-        street2?: string;
-        type?: AddressType;
-    }): Promise<Models.Address>;
+    customersAuthLogin(params: {
+        email: string;
+        password: string;
+    }): Promise<Models.AuthLoginResponse>;
     /**
+     * An email and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.
      *
-     * @param {string} city -
-     * @param {string} country - ISO 3166-1 alpha-2 code.
-     * @param {string} street -
-     * @param {string} zip -
-     * @param {string} company -
-     * @param {string} contactId - Owning contact (personal address).
-     * @param {boolean} isDefault - The default address of its owner and type.
-     * @param {string} name - Recipient name.
-     * @param {string} organizationId - Owning organization (company address).
-     * @param {string} phone -
-     * @param {string} region -
-     * @param {string} street2 -
-     * @param {AddressType} type - Default 'shipping'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
+     * @param {string} email - The buyer's login address — the same one the contact carries.
+     * @param {string} password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthLoginResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAddressesCreate(city: string, country: string, street: string, zip: string, company?: string, contactId?: string, isDefault?: boolean, name?: string, organizationId?: string, phone?: string, region?: string, street2?: string, type?: AddressType): Promise<Models.Address>;
+    customersAuthLogin(email: string, password: string): Promise<Models.AuthLoginResponse>;
     /**
+     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: "blocked"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.
      *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
+     * @param {string} params.sessionId - The session to revoke — `session.$id` from the login.
+     * @param {string} params.userId - The platform user — `session.userId` from the login.
+     * @throws {RevenexxException}
      * @returns {Promise<{}>}
      */
-    customersAddressesDelete(params: {
-        id: string;
+    customersAuthLogout(params: {
+        sessionId: string;
+        userId: string;
     }): Promise<{}>;
     /**
+     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: "blocked"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.
      *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
+     * @param {string} sessionId - The session to revoke — `session.$id` from the login.
+     * @param {string} userId - The platform user — `session.userId` from the login.
+     * @throws {RevenexxException}
      * @returns {Promise<{}>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAddressesDelete(id: string): Promise<{}>;
-    /**
-     *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
-     */
-    customersAddressesGet(params: {
-        id: string;
-    }): Promise<Models.Address>;
-    /**
-     *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    customersAddressesGet(id: string): Promise<Models.Address>;
-    /**
-     *
-     * @param {string} params.id -
-     * @param {string} params.city -
-     * @param {string} params.company -
-     * @param {string} params.contactId - Owning contact (personal address).
-     * @param {string} params.country - ISO 3166-1 alpha-2 code.
-     * @param {boolean} params.isDefault - The default address of its owner and type.
-     * @param {string} params.name - Recipient name.
-     * @param {string} params.organizationId - Owning organization (company address).
-     * @param {string} params.phone -
-     * @param {string} params.region -
-     * @param {string} params.street -
-     * @param {string} params.street2 -
-     * @param {AddressType} params.type - Default 'shipping'.
-     * @param {string} params.zip -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
-     */
-    customersAddressesUpdate(params: {
-        id: string;
-        city?: string;
-        company?: string;
-        contactId?: string;
-        country?: string;
-        isDefault?: boolean;
-        name?: string;
-        organizationId?: string;
-        phone?: string;
-        region?: string;
-        street?: string;
-        street2?: string;
-        type?: AddressType;
-        zip?: string;
-    }): Promise<Models.Address>;
-    /**
-     *
-     * @param {string} id -
-     * @param {string} city -
-     * @param {string} company -
-     * @param {string} contactId - Owning contact (personal address).
-     * @param {string} country - ISO 3166-1 alpha-2 code.
-     * @param {boolean} isDefault - The default address of its owner and type.
-     * @param {string} name - Recipient name.
-     * @param {string} organizationId - Owning organization (company address).
-     * @param {string} phone -
-     * @param {string} region -
-     * @param {string} street -
-     * @param {string} street2 -
-     * @param {AddressType} type - Default 'shipping'.
-     * @param {string} zip -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Address>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    customersAddressesUpdate(id: string, city?: string, company?: string, contactId?: string, country?: string, isDefault?: boolean, name?: string, organizationId?: string, phone?: string, region?: string, street?: string, street2?: string, type?: AddressType, zip?: string): Promise<Models.Address>;
+    customersAuthLogout(sessionId: string, userId: string): Promise<{}>;
     /**
+     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Creates the account when the address is new, which makes this a registration path as much as a sign-in one — and why an address nobody holds is not distinguished in the answer. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.
      *
-     * @param {string} params.email -
-     * @param {string} params.password -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.AuthLoginResponse>}
+     * @param {string} params.email - Who to send the link to. An address that has never been seen creates an account rather than failing.
+     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}
      */
-    customersAuthLogin(params: {
+    customersAuthMagicLink(params: {
         email: string;
-        password: string;
-    }): Promise<Models.AuthLoginResponse>;
+        url: string;
+    }): Promise<Models.DefaultAuthMagicLinkResponse>;
     /**
+     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Creates the account when the address is new, which makes this a registration path as much as a sign-in one — and why an address nobody holds is not distinguished in the answer. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.
      *
-     * @param {string} email -
-     * @param {string} password -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.AuthLoginResponse>}
+     * @param {string} email - Who to send the link to. An address that has never been seen creates an account rather than failing.
+     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAuthLogin(email: string, password: string): Promise<Models.AuthLoginResponse>;
+    customersAuthMagicLink(email: string, url: string): Promise<Models.DefaultAuthMagicLinkResponse>;
     /**
+     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.
      *
-     * @param {string} params.sessionId -
-     * @param {string} params.userId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} params.userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}
      */
-    customersAuthLogout(params: {
-        sessionId: string;
+    customersAuthMagicLinkConfirm(params: {
+        secret: string;
         userId: string;
-    }): Promise<{}>;
+    }): Promise<Models.AuthMagicLinkConfirmResponse>;
     /**
+     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.
      *
-     * @param {string} sessionId -
-     * @param {string} userId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAuthLogout(sessionId: string, userId: string): Promise<{}>;
+    customersAuthMagicLinkConfirm(secret: string, userId: string): Promise<Models.AuthMagicLinkConfirmResponse>;
     /**
+     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.
      *
-     * @param {string} params.userId -
-     * @param {string} params.sessionId - Optional session to verify — answers 401 when the session is expired or revoked.
-     * @throws {RevenexxAPIRevenexxException}
+     * @param {string} params.userId - The platform user to resolve — `session.userId` from the login.
+     * @param {string} params.sessionId - Optional session to verify. Pass it to ask "is this session still alive?" (a revoked one is then a 401); omit it to only ask who a user is.
+     * @throws {RevenexxException}
      * @returns {Promise<Models.AuthMeResponse>}
      */
     customersAuthMe(params: {
@@ -297,341 +345,262 @@ declare class Customers {
         sessionId?: string;
     }): Promise<Models.AuthMeResponse>;
     /**
+     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.
      *
-     * @param {string} userId -
-     * @param {string} sessionId - Optional session to verify — answers 401 when the session is expired or revoked.
-     * @throws {RevenexxAPIRevenexxException}
+     * @param {string} userId - The platform user to resolve — `session.userId` from the login.
+     * @param {string} sessionId - Optional session to verify. Pass it to ask "is this session still alive?" (a revoked one is then a 401); omit it to only ask who a user is.
+     * @throws {RevenexxException}
      * @returns {Promise<Models.AuthMeResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
     customersAuthMe(userId: string, sessionId?: string): Promise<Models.AuthMeResponse>;
     /**
+     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.
      *
-     * @param {string} params.email -
-     * @param {string} params.url - Redirect URL carrying userId + secret.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.userId - The platform user being challenged.
+     * @param {string} params.factor - Which factor to challenge. Defaults to `email`, the only one this route mails.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}
      */
-    customersAuthRecovery(params: {
-        email: string;
-        url: string;
-    }): Promise<{}>;
+    customersAuthMfaChallenge(params: {
+        userId: string;
+        factor?: string;
+    }): Promise<Models.DefaultAuthMfaChallengeResponse>;
     /**
+     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.
      *
-     * @param {string} email -
-     * @param {string} url - Redirect URL carrying userId + secret.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} userId - The platform user being challenged.
+     * @param {string} factor - Which factor to challenge. Defaults to `email`, the only one this route mails.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAuthRecovery(email: string, url: string): Promise<{}>;
+    customersAuthMfaChallenge(userId: string, factor?: string): Promise<Models.DefaultAuthMfaChallengeResponse>;
     /**
+     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.
      *
-     * @param {string} params.password -
-     * @param {string} params.secret -
-     * @param {string} params.userId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.challengeId - The `$id` the send answered with.
+     * @param {string} params.code - What the buyer typed.
+     * @param {string} params.sessionSecret - The same session the challenge was created with.
+     * @param {string} params.userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}
      */
-    customersAuthRecoveryConfirm(params: {
-        password: string;
-        secret: string;
-        userId: string;
-    }): Promise<{}>;
+    customersAuthMfaChallengeConfirm(params: {
+        challengeId: string;
+        code: string;
+        sessionSecret: string;
+        userId?: string;
+    }): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;
     /**
+     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.
      *
-     * @param {string} password -
-     * @param {string} secret -
-     * @param {string} userId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} challengeId - The `$id` the send answered with.
+     * @param {string} code - What the buyer typed.
+     * @param {string} sessionSecret - The same session the challenge was created with.
+     * @param {string} userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAuthRecoveryConfirm(password: string, secret: string, userId: string): Promise<{}>;
+    customersAuthMfaChallengeConfirm(challengeId: string, code: string, sessionSecret: string, userId?: string): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;
     /**
+     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`.
      *
-     * @param {string} params.email -
-     * @param {string} params.password -
-     * @param {string} params.firstName -
-     * @param {string} params.lastName -
-     * @param {string} params.locale - BCP 47, e.g. de-DE
-     * @param {string} params.organizationId - Join an existing organization.
-     * @param {string} params.organizationName - Found a new organization; the contact becomes its admin.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.AuthRegisterResponse>}
+     * @param {string} params.email - Who to send the code to. As with the sign-in link, an unknown address creates an account rather than failing.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthOtpResponse>}
      */
-    customersAuthRegister(params: {
+    customersAuthOtp(params: {
         email: string;
-        password: string;
-        firstName?: string;
-        lastName?: string;
-        locale?: string;
-        organizationId?: string;
-        organizationName?: string;
-    }): Promise<Models.AuthRegisterResponse>;
+    }): Promise<Models.DefaultAuthOtpResponse>;
     /**
+     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`.
      *
-     * @param {string} email -
-     * @param {string} password -
-     * @param {string} firstName -
-     * @param {string} lastName -
-     * @param {string} locale - BCP 47, e.g. de-DE
-     * @param {string} organizationId - Join an existing organization.
-     * @param {string} organizationName - Found a new organization; the contact becomes its admin.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.AuthRegisterResponse>}
+     * @param {string} email - Who to send the code to. As with the sign-in link, an unknown address creates an account rather than failing.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthOtpResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersAuthRegister(email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string): Promise<Models.AuthRegisterResponse>;
+    customersAuthOtp(email: string): Promise<Models.DefaultAuthOtpResponse>;
     /**
+     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.
      *
-     * @param {string} params.organizationId - Filter to one organization.
-     * @param {string} params.role - Filter by role (buyer | approver | admin | requester).
-     * @param {string} params.status - Filter by status (invited | active | blocked).
-     * @param {string} params.email - Filter by exact email.
-     * @param {number} params.limit - Page size (default 50, max 200).
-     * @param {number} params.offset - Row offset for pagination (default 0).
-     * @param {string} params.order - Sort as 'column.asc' | 'column.desc', e.g. 'created_at.desc'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} params.userId - The `userId` the mailed code carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthOtpConfirmResponse>}
      */
-    customersContactsList(params?: {
-        organizationId?: string;
-        role?: string;
-        status?: string;
-        email?: string;
-        limit?: number;
-        offset?: number;
-        order?: string;
-    }): Promise<{}>;
+    customersAuthOtpConfirm(params: {
+        secret: string;
+        userId: string;
+    }): Promise<Models.AuthOtpConfirmResponse>;
     /**
+     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.
      *
-     * @param {string} organizationId - Filter to one organization.
-     * @param {string} role - Filter by role (buyer | approver | admin | requester).
-     * @param {string} status - Filter by status (invited | active | blocked).
-     * @param {string} email - Filter by exact email.
-     * @param {number} limit - Page size (default 50, max 200).
-     * @param {number} offset - Row offset for pagination (default 0).
-     * @param {string} order - Sort as 'column.asc' | 'column.desc', e.g. 'created_at.desc'.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} userId - The `userId` the mailed code carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthOtpConfirmResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsList(organizationId?: string, role?: string, status?: string, email?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
+    customersAuthOtpConfirm(secret: string, userId: string): Promise<Models.AuthOtpConfirmResponse>;
     /**
+     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. Nothing about the contact changes; the password only moves in step two.
      *
-     * @param {string} params.email -
-     * @param {string} params.firstName -
-     * @param {boolean} params.isPrimary - The primary contact of its organization.
-     * @param {string} params.lastName -
-     * @param {string} params.locale - BCP 47, e.g. de-DE
-     * @param {string} params.organizationId - Owning organization — membership is mirrored to the platform team.
-     * @param {string} params.phone -
-     * @param {ContactRole} params.role - Default 'buyer' — also the team role on the platform mirror.
-     * @param {ContactStatus} params.status - Default 'invited' on create.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
+     * @param {string} params.email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.
+     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}
      */
-    customersContactsCreate(params: {
+    customersAuthRecovery(params: {
         email: string;
-        firstName?: string;
-        isPrimary?: boolean;
-        lastName?: string;
-        locale?: string;
-        organizationId?: string;
-        phone?: string;
-        role?: ContactRole;
-        status?: ContactStatus;
-    }): Promise<Models.Contact>;
+        url: string;
+    }): Promise<Models.DefaultAuthRecoveryResponse>;
     /**
+     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. Nothing about the contact changes; the password only moves in step two.
      *
-     * @param {string} email -
-     * @param {string} firstName -
-     * @param {boolean} isPrimary - The primary contact of its organization.
-     * @param {string} lastName -
-     * @param {string} locale - BCP 47, e.g. de-DE
-     * @param {string} organizationId - Owning organization — membership is mirrored to the platform team.
-     * @param {string} phone -
-     * @param {ContactRole} role - Default 'buyer' — also the team role on the platform mirror.
-     * @param {ContactStatus} status - Default 'invited' on create.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
+     * @param {string} email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.
+     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsCreate(email: string, firstName?: string, isPrimary?: boolean, lastName?: string, locale?: string, organizationId?: string, phone?: string, role?: ContactRole, status?: ContactStatus): Promise<Models.Contact>;
+    customersAuthRecovery(email: string, url: string): Promise<Models.DefaultAuthRecoveryResponse>;
     /**
+     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.
      *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.
+     * @param {string} params.secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.
+     * @param {string} params.userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}
      */
-    customersContactsDelete(params: {
-        id: string;
-    }): Promise<{}>;
-    /**
-     *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    customersContactsDelete(id: string): Promise<{}>;
-    /**
-     *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
-     */
-    customersContactsGet(params: {
-        id: string;
-    }): Promise<Models.Contact>;
+    customersAuthRecoveryConfirm(params: {
+        password: string;
+        secret: string;
+        userId: string;
+    }): Promise<Models.DefaultAuthRecoveryConfirmResponse>;
     /**
+     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.
      *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
+     * @param {string} password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.
+     * @param {string} secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.
+     * @param {string} userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersContactsGet(id: string): Promise<Models.Contact>;
-    /**
-     *
-     * @param {string} params.id -
-     * @param {string} params.email -
-     * @param {string} params.firstName -
-     * @param {boolean} params.isPrimary - The primary contact of its organization.
-     * @param {string} params.lastName -
-     * @param {string} params.locale - BCP 47, e.g. de-DE
-     * @param {string} params.organizationId - Owning organization — membership is mirrored to the platform team.
-     * @param {string} params.phone -
-     * @param {ContactRole} params.role - Default 'buyer' — also the team role on the platform mirror.
-     * @param {ContactStatus} params.status - Default 'invited' on create.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
+    customersAuthRecoveryConfirm(password: string, secret: string, userId: string): Promise<Models.DefaultAuthRecoveryConfirmResponse>;
+    /**
+     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.
+     *
+     * @param {string} params.email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.
+     * @param {string} params.password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.
+     * @param {string} params.firstName - Given name. Optional: an ERP import often has only a mailbox.
+     * @param {string} params.lastName - Family name. Optional for the same reason.
+     * @param {string} params.locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.
+     * @param {string} params.organizationId - JOIN an existing company — the invite shape. Neither b2b_registration_enabled nor b2c_registration_enabled applies to it.
+     * @param {string} params.organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.
+     * @param {string} params.url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.
+     * @param {string} params.vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.
+     * @param {string} params.verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthRegisterResponse>}
      */
-    customersContactsUpdate(params: {
-        id: string;
-        email?: string;
+    customersAuthRegister(params: {
+        email: string;
+        password: string;
         firstName?: string;
-        isPrimary?: boolean;
         lastName?: string;
         locale?: string;
         organizationId?: string;
-        phone?: string;
-        role?: ContactRole;
-        status?: ContactStatus;
-    }): Promise<Models.Contact>;
-    /**
-     *
-     * @param {string} id -
-     * @param {string} email -
-     * @param {string} firstName -
-     * @param {boolean} isPrimary - The primary contact of its organization.
-     * @param {string} lastName -
-     * @param {string} locale - BCP 47, e.g. de-DE
-     * @param {string} organizationId - Owning organization — membership is mirrored to the platform team.
-     * @param {string} phone -
-     * @param {ContactRole} role - Default 'buyer' — also the team role on the platform mirror.
-     * @param {ContactStatus} status - Default 'invited' on create.
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Contact>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    customersContactsUpdate(id: string, email?: string, firstName?: string, isPrimary?: boolean, lastName?: string, locale?: string, organizationId?: string, phone?: string, role?: ContactRole, status?: ContactStatus): Promise<Models.Contact>;
-    /**
-     *
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
-     */
-    customersOrganizationsList(): Promise<{}>;
-    /**
-     *
-     * @param {string} params.name - Company name — mirrored to the platform team.
-     * @param {object} params.settings - Free-form organization settings.
-     * @param {OrganizationStatus} params.status - Default 'active'.
-     * @param {string} params.vatId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
-     */
-    customersOrganizationsCreate(params: {
-        name: string;
-        settings?: object;
-        status?: OrganizationStatus;
+        organizationName?: string;
+        url?: string;
         vatId?: string;
-    }): Promise<Models.Organization>;
+        verificationUrl?: string;
+    }): Promise<Models.AuthRegisterResponse>;
     /**
-     *
-     * @param {string} name - Company name — mirrored to the platform team.
-     * @param {object} settings - Free-form organization settings.
-     * @param {OrganizationStatus} status - Default 'active'.
-     * @param {string} vatId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
+     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.
+     *
+     * @param {string} email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.
+     * @param {string} password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.
+     * @param {string} firstName - Given name. Optional: an ERP import often has only a mailbox.
+     * @param {string} lastName - Family name. Optional for the same reason.
+     * @param {string} locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.
+     * @param {string} organizationId - JOIN an existing company — the invite shape. Neither b2b_registration_enabled nor b2c_registration_enabled applies to it.
+     * @param {string} organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.
+     * @param {string} url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.
+     * @param {string} vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.
+     * @param {string} verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.AuthRegisterResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersOrganizationsCreate(name: string, settings?: object, status?: OrganizationStatus, vatId?: string): Promise<Models.Organization>;
+    customersAuthRegister(email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string): Promise<Models.AuthRegisterResponse>;
     /**
+     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.
      *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.
+     * @param {string} params.userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthVerificationResponse>}
      */
-    customersOrganizationsDelete(params: {
-        id: string;
-    }): Promise<{}>;
+    customersAuthVerification(params: {
+        url: string;
+        userId: string;
+    }): Promise<Models.DefaultAuthVerificationResponse>;
     /**
+     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.
      *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<{}>}
+     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.
+     * @param {string} userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthVerificationResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersOrganizationsDelete(id: string): Promise<{}>;
+    customersAuthVerification(url: string, userId: string): Promise<Models.DefaultAuthVerificationResponse>;
     /**
+     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.
      *
-     * @param {string} params.id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
+     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} params.userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}
      */
-    customersOrganizationsGet(params: {
-        id: string;
-    }): Promise<Models.Organization>;
+    customersAuthVerificationConfirm(params: {
+        secret: string;
+        userId: string;
+    }): Promise<Models.DefaultAuthVerificationConfirmResponse>;
     /**
+     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.
      *
-     * @param {string} id -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
+     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.
+     * @param {string} userId - The `userId` the mailed link carried.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersOrganizationsGet(id: string): Promise<Models.Organization>;
+    customersAuthVerificationConfirm(secret: string, userId: string): Promise<Models.DefaultAuthVerificationConfirmResponse>;
     /**
+     * The capability the API gateway calls to turn a caller's X-Revenexx-Principal assertion into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed storefront request — one contact read plus the tenant's role map. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.
      *
-     * @param {string} params.id -
-     * @param {string} params.name - Company name — mirrored to the platform team.
-     * @param {object} params.settings - Free-form organization settings.
-     * @param {OrganizationStatus} params.status - Default 'active'.
-     * @param {string} params.vatId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
+     * @param {string} params.contactId - The contact the caller is acting for.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.ContactPermissions>}
      */
-    customersOrganizationsUpdate(params: {
-        id: string;
-        name?: string;
-        settings?: object;
-        status?: OrganizationStatus;
-        vatId?: string;
-    }): Promise<Models.Organization>;
+    customersPrincipalResolve(params: {
+        contactId: string;
+    }): Promise<Models.ContactPermissions>;
     /**
+     * The capability the API gateway calls to turn a caller's X-Revenexx-Principal assertion into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed storefront request — one contact read plus the tenant's role map. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.
      *
-     * @param {string} id -
-     * @param {string} name - Company name — mirrored to the platform team.
-     * @param {object} settings - Free-form organization settings.
-     * @param {OrganizationStatus} status - Default 'active'.
-     * @param {string} vatId -
-     * @throws {RevenexxAPIRevenexxException}
-     * @returns {Promise<Models.Organization>}
+     * @param {string} contactId - The contact the caller is acting for.
+     * @throws {RevenexxException}
+     * @returns {Promise<Models.ContactPermissions>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    customersOrganizationsUpdate(id: string, name?: string, settings?: object, status?: OrganizationStatus, vatId?: string): Promise<Models.Organization>;
+    customersPrincipalResolve(contactId: string): Promise<Models.ContactPermissions>;
 }
 
 export { Customers };