@revenexx/node 0.1.1 → 0.2.0

package/dist/services/orderlists.d.mts

@@ -4,6 +4,9 @@ import { OrderListKindTone } from '../enums/order-list-kind-tone.mjs';
 import { OrderlistsVocabulariesGetName } from '../enums/orderlists-vocabularies-get-name.mjs';
 import { OrderListCartMode } from '../enums/order-list-cart-mode.mjs';
 import '../query.mjs';
+import '../enums/accept-line-decision.mjs';
+import '../enums/accept-result-origin.mjs';
+import '../enums/accept-result-status.mjs';
 import '../enums/address-type-row-tone.mjs';
 import '../enums/address-type-row-create-request-tone.mjs';
 import '../enums/address-type-row-update-request-tone.mjs';
@@ -17,12 +20,23 @@ import '../enums/approval-rule-update-request-approver-type.mjs';
 import '../enums/approval-rule-update-request-condition.mjs';
 import '../enums/approval-rule-update-request-effect.mjs';
 import '../enums/assets-source.mjs';
+import '../enums/assignment-role-tone.mjs';
+import '../enums/assignment-role-create-request-tone.mjs';
+import '../enums/assignment-role-update-request-tone.mjs';
+import '../enums/attach-request-direction.mjs';
+import '../enums/attach-request-visibility.mjs';
 import '../enums/attribute-value-bucket.mjs';
 import '../enums/auth-mail-source.mjs';
+import '../enums/auth-mfa-challenge-request-factor.mjs';
 import '../enums/recovery-mail-source.mjs';
 import '../enums/registration-status.mjs';
+import '../enums/availability-state-tone.mjs';
+import '../enums/banner-draft-layout.mjs';
+import '../enums/banner-draft-update-request-layout.mjs';
 import '../enums/budget-change-reason.mjs';
 import '../enums/budget-movement-result-status.mjs';
+import '../enums/budget-release-scope.mjs';
+import '../enums/budget-release-status.mjs';
 import '../enums/cart-status.mjs';
 import '../enums/cart-merge-strategy.mjs';
 import '../enums/cart-price-snapshot-mode.mjs';
@@ -50,18 +64,44 @@ import '../enums/channel-vocabulary-tone.mjs';
 import '../enums/channel-vocabulary-name.mjs';
 import '../enums/channel-vocabulary-source.mjs';
 import '../enums/channel-vocabulary-ref-name.mjs';
+import '../enums/consent-record-action.mjs';
+import '../enums/consent-record-surface.mjs';
+import '../enums/consent-record-create-request-action.mjs';
+import '../enums/consent-record-create-request-surface.mjs';
+import '../enums/consent-vocabulary-source.mjs';
+import '../enums/contact-order-approval-mode.mjs';
 import '../enums/contact-registration-status.mjs';
 import '../enums/contact-status.mjs';
 import '../enums/contact-activity-kind.mjs';
+import '../enums/order-approval-mode.mjs';
 import '../enums/contact-create-request-registration-status.mjs';
 import '../enums/contact-event-kind-tone.mjs';
 import '../enums/contact-event-kind-create-request-tone.mjs';
 import '../enums/contact-event-kind-update-request-tone.mjs';
-import '../enums/contact-update-request-registration-status.mjs';
+import '../enums/contact-point-kind-tone.mjs';
+import '../enums/contact-point-kind-create-request-tone.mjs';
+import '../enums/contact-point-kind-update-request-tone.mjs';
+import '../enums/cookie-kind.mjs';
+import '../enums/cookie-create-request-kind.mjs';
+import '../enums/cookie-update-request-kind.mjs';
 import '../enums/cost-center-budget-type.mjs';
+import '../enums/cost-center-create-request-budget-type.mjs';
 import '../enums/cost-center-restriction-type.mjs';
 import '../enums/cost-center-restriction-create-request-type.mjs';
 import '../enums/cost-center-restriction-update-request-type.mjs';
+import '../enums/cost-center-update-request-budget-type.mjs';
+import '../enums/cost-centers-vocabulary-tone.mjs';
+import '../enums/cost-centers-vocabulary-name.mjs';
+import '../enums/cost-centers-vocabulary-source.mjs';
+import '../enums/cost-centers-vocabulary-summary-name.mjs';
+import '../enums/direct-order-status.mjs';
+import '../enums/document-source.mjs';
+import '../enums/document-visibility.mjs';
+import '../enums/document-kind-tone.mjs';
+import '../enums/document-vocabulary-default-tone.mjs';
+import '../enums/document-vocabulary-name.mjs';
+import '../enums/document-vocabulary-source.mjs';
+import '../enums/document-vocabulary-tone.mjs';
 import '../enums/payment-fee-type.mjs';
 import '../enums/payment-method-kind.mjs';
 import '../enums/form-status.mjs';
@@ -71,6 +111,7 @@ import '../enums/form-submission-prune-request-status.mjs';
 import '../enums/forms-vocabulary-tone.mjs';
 import '../enums/forms-vocabulary-name.mjs';
 import '../enums/forms-vocabulary-summary-name.mjs';
+import '../enums/inventory-receive-warning-code.mjs';
 import '../enums/inventory-vocabulary-default-tone.mjs';
 import '../enums/inventory-vocabulary-source.mjs';
 import '../enums/cart-io-apply-mode.mjs';
@@ -78,6 +119,7 @@ import '../enums/cart-io-direction.mjs';
 import '../enums/cart-io-entity.mjs';
 import '../enums/io-profile-resource-apply-mode.mjs';
 import '../enums/io-profile-resource-direction.mjs';
+import '../enums/inventory-unorderable-reason.mjs';
 import '../enums/lifecycle-stage-tone.mjs';
 import '../enums/lifecycle-stage-create-request-tone.mjs';
 import '../enums/lifecycle-stage-update-request-tone.mjs';
@@ -94,26 +136,38 @@ import '../enums/markets-vocabulary-tone.mjs';
 import '../enums/markets-vocabulary-name.mjs';
 import '../enums/markets-vocabulary-source.mjs';
 import '../enums/markets-vocabulary-summary-name.mjs';
+import '../enums/note-request-visibility.mjs';
 import '../enums/order-fulfillment-status.mjs';
 import '../enums/order-payment-status.mjs';
 import '../enums/order-status.mjs';
 import '../enums/order-cancellation-scope.mjs';
 import '../enums/order-comment-visibility.mjs';
+import '../enums/order-discount-target.mjs';
+import '../enums/order-discount-effect-kind.mjs';
+import '../enums/order-discount-placement.mjs';
+import '../enums/order-discount-source.mjs';
+import '../enums/order-discount-value-type.mjs';
 import '../enums/order-item-type.mjs';
 import '../enums/order-list-kind-row-tone.mjs';
+import '../enums/order-list-skip-reason.mjs';
 import '../enums/order-list-vocabulary-default-tone.mjs';
 import '../enums/order-list-vocabulary-name.mjs';
 import '../enums/order-list-vocabulary-source.mjs';
 import '../enums/order-list-vocabulary-tone.mjs';
+import '../enums/order-return-refund-mode.mjs';
 import '../enums/order-return-status.mjs';
 import '../enums/order-return-settlement.mjs';
-import '../enums/order-return-refusal.mjs';
 import '../enums/order-vocabulary-tone.mjs';
+import '../enums/order-return-refusal.mjs';
 import '../enums/order-vocabulary-name.mjs';
 import '../enums/order-vocabulary-source.mjs';
 import '../enums/order-vocabulary-summary-name.mjs';
 import '../enums/order-resolution-stage.mjs';
+import '../enums/organization-credit-limit-mode.mjs';
+import '../enums/organization-shipping-advice.mjs';
 import '../enums/organization-status.mjs';
+import '../enums/credit-limit-mode.mjs';
+import '../enums/shipping-advice.mjs';
 import '../enums/page-status.mjs';
 import '../enums/pages-vocabulary-app.mjs';
 import '../enums/pages-vocabulary-tone.mjs';
@@ -135,6 +189,7 @@ import '../enums/price-entries-adjust-response-rounding-mode.mjs';
 import '../enums/price-entries-bulk-mode.mjs';
 import '../enums/price-rounding-mode.mjs';
 import '../enums/price-entry-type.mjs';
+import '../enums/price-line-price-reason.mjs';
 import '../enums/price-list-status.mjs';
 import '../enums/price-list-tax-basis.mjs';
 import '../enums/price-currency-source.mjs';
@@ -146,22 +201,86 @@ import '../enums/price-vocabulary-tone.mjs';
 import '../enums/price-vocabulary-name.mjs';
 import '../enums/price-vocabulary-source.mjs';
 import '../enums/price-vocabulary-ref-name.mjs';
+import '../enums/procurement-vocabulary-default-tone.mjs';
+import '../enums/procurement-vocabulary-name.mjs';
+import '../enums/procurement-vocabulary-source.mjs';
+import '../enums/procurement-vocabulary-summary-name.mjs';
+import '../enums/procurement-vocabulary-value-tone.mjs';
 import '../enums/product-categories-source.mjs';
 import '../enums/product-grid-column-source.mjs';
 import '../enums/product-label-source.mjs';
 import '../enums/product-label-attribute-source.mjs';
 import '../enums/products-kind.mjs';
+import '../enums/promotion-condition-match.mjs';
+import '../enums/promotion-reach.mjs';
+import '../enums/promotion-recurrence-kind.mjs';
+import '../enums/promotion-return-behaviour.mjs';
+import '../enums/promotion-status.mjs';
+import '../enums/promotion-bundle-allocation.mjs';
+import '../enums/promotion-bundle-patch-allocation.mjs';
+import '../enums/promotion-bundle-write-allocation.mjs';
+import '../enums/promotion-condition-kind.mjs';
+import '../enums/promotion-condition-match-mode.mjs';
+import '../enums/promotion-condition-patch-kind.mjs';
+import '../enums/promotion-condition-patch-match-mode.mjs';
+import '../enums/promotion-condition-write-kind.mjs';
+import '../enums/promotion-condition-write-match-mode.mjs';
+import '../enums/promotion-effect-kind.mjs';
+import '../enums/promotion-effect-target-scope.mjs';
+import '../enums/promotion-effect-unit-choice.mjs';
+import '../enums/promotion-effect-value-type.mjs';
+import '../enums/promotion-effect-patch-kind.mjs';
+import '../enums/promotion-effect-patch-target-scope.mjs';
+import '../enums/promotion-effect-patch-unit-choice.mjs';
+import '../enums/promotion-effect-patch-value-type.mjs';
+import '../enums/promotion-effect-write-kind.mjs';
+import '../enums/promotion-effect-write-target-scope.mjs';
+import '../enums/promotion-effect-write-unit-choice.mjs';
+import '../enums/promotion-effect-write-value-type.mjs';
+import '../enums/promotion-patch-condition-match.mjs';
+import '../enums/promotion-patch-reach.mjs';
+import '../enums/promotion-patch-recurrence-kind.mjs';
+import '../enums/promotion-patch-return-behaviour.mjs';
+import '../enums/promotion-patch-status.mjs';
+import '../enums/promotion-release-request-reason.mjs';
+import '../enums/promotion-write-condition-match.mjs';
+import '../enums/promotion-write-reach.mjs';
+import '../enums/promotion-write-recurrence-kind.mjs';
+import '../enums/promotion-write-return-behaviour.mjs';
+import '../enums/promotion-write-status.mjs';
+import '../enums/punchout-entry-probe-result-entry-probe-status.mjs';
+import '../enums/punchout-entry-test-result-protocol.mjs';
+import '../enums/punchout-field-mapping-import-request-protocol.mjs';
+import '../enums/punchout-return-preview-protocol.mjs';
 import '../enums/purchase-request-status.mjs';
 import '../enums/purchase-request-event-name.mjs';
 import '../enums/purchase-request-item-type.mjs';
 import '../enums/purchase-request-item-create-request-type.mjs';
 import '../enums/purchase-request-item-update-request-type.mjs';
+import '../enums/purpose-legal-basis.mjs';
+import '../enums/purpose-create-request-legal-basis.mjs';
+import '../enums/purpose-update-request-legal-basis.mjs';
+import '../enums/quote-origin.mjs';
+import '../enums/quote-status.mjs';
+import '../enums/quote-attachment-direction.mjs';
+import '../enums/quote-attachment-visibility.mjs';
+import '../enums/quote-detail-origin.mjs';
+import '../enums/quote-detail-status.mjs';
+import '../enums/quote-event-visibility.mjs';
+import '../enums/quote-item-decision.mjs';
+import '../enums/quote-item-price-reason.mjs';
+import '../enums/quote-line-input-price-reason.mjs';
+import '../enums/redemption-state.mjs';
 import '../enums/reorder-point-source.mjs';
 import '../enums/reservation-status.mjs';
 import '../enums/price-on-request-reason.mjs';
 import '../enums/price-tax-basis.mjs';
 import '../enums/price-tax-basis-source.mjs';
 import '../enums/role-catalog-response-source.mjs';
+import '../enums/sales-rep-vocabulary-default-tone.mjs';
+import '../enums/sales-rep-vocabulary-source.mjs';
+import '../enums/seed-request-mode.mjs';
+import '../enums/seed-result-mode.mjs';
 import '../enums/segment-rule-match.mjs';
 import '../enums/segment-member-source.mjs';
 import '../enums/segment-rule-operator.mjs';
@@ -191,14 +310,35 @@ import '../enums/shipping-vocabulary-tone.mjs';
 import '../enums/shipping-weight-unit-create-request-tone.mjs';
 import '../enums/shipping-weight-unit-row-tone.mjs';
 import '../enums/shipping-weight-unit-update-request-tone.mjs';
+import '../enums/stacking-group-mode.mjs';
+import '../enums/stacking-group-patch-mode.mjs';
+import '../enums/stacking-group-write-mode.mjs';
 import '../enums/stock-movement-type.mjs';
 import '../enums/store-asset-request-visibility.mjs';
 import '../enums/submit-item-type.mjs';
 import '../enums/submit-result-outcome.mjs';
+import '../enums/tag-manager-container-check-reason.mjs';
+import '../enums/tag-manager-marketing-tag-kind.mjs';
+import '../enums/tag-manager-marketing-tag-load.mjs';
+import '../enums/tag-manager-marketing-tag-input-kind.mjs';
+import '../enums/tag-manager-marketing-tag-input-load.mjs';
+import '../enums/tag-manager-trigger-kind.mjs';
+import '../enums/tag-manager-trigger-input-kind.mjs';
+import '../enums/tag-manager-variable-kind.mjs';
+import '../enums/tag-manager-variable-input-kind.mjs';
 import '../enums/validation-failed-response-status.mjs';
+import '../enums/vendor-legal-basis-override.mjs';
+import '../enums/vendor-create-request-legal-basis-override.mjs';
+import '../enums/vendor-update-request-legal-basis-override.mjs';
 import '../enums/vocabulary-default-tone.mjs';
 import '../enums/vocabulary-source.mjs';
 import '../enums/vocabulary-tone.mjs';
+import '../enums/voucher-status.mjs';
+import '../enums/voucher-batch-status.mjs';
+import '../enums/voucher-batch-patch-status.mjs';
+import '../enums/voucher-batch-write-status.mjs';
+import '../enums/voucher-patch-status.mjs';
+import '../enums/voucher-write-status.mjs';
 import '../enums/attribute-boolean-status.mjs';
 import '../enums/attribute-datetime-status.mjs';
 import '../enums/attribute-email-status.mjs';
@@ -251,6 +391,7 @@ declare class Orderlists {
      * @param {string} params.ownerId - Exact-match filter on `owner_id`. Every list one contact owns. Ignored when the gateway resolved an acting contact — the scope is then that contact and a query parameter cannot widen it.
      * @param {string} params.organizationId - Exact-match filter on `organization_id`. The SHARED lists of one organization. Combined with `owner_id` this is a union, not an intersection: own lists ∪ that organization's shared ones.
      * @param {string} params.kind - Filter by list kind — a `code` from GET /orderlists/kinds. A code this tenant does not keep is a 400 naming the ones it does, so this is the one filter here that can fail.
+     * @param {string} params.externalId - Exact-match filter on `external_id`. The list one foreign system owns, by the id that system knows it by — how a migration finds the list it wrote last run instead of leaving the buyer a second copy. Unique per tenant, so this answers at most one list. It NARROWS the caller's scope like every other filter here: a buyer still sees only their own lists and their organisation's shared ones.
      * @param {number} params.limit - Page size (default 50, max 200). A larger value is clamped rather than refused.
      * @param {number} params.offset - Row offset for pagination (default 0). Page with `page.total` and `page.hasMore`.
      * @param {string} params.order - Sort by one column: 'column' | 'column.asc' | 'column.desc'. A bare column sorts ascending. Anything else is refused with 400.
@@ -261,6 +402,7 @@ declare class Orderlists {
         ownerId?: string;
         organizationId?: string;
         kind?: string;
+        externalId?: string;
         limit?: number;
         offset?: number;
         order?: string;
@@ -271,6 +413,7 @@ declare class Orderlists {
      * @param {string} ownerId - Exact-match filter on `owner_id`. Every list one contact owns. Ignored when the gateway resolved an acting contact — the scope is then that contact and a query parameter cannot widen it.
      * @param {string} organizationId - Exact-match filter on `organization_id`. The SHARED lists of one organization. Combined with `owner_id` this is a union, not an intersection: own lists ∪ that organization's shared ones.
      * @param {string} kind - Filter by list kind — a `code` from GET /orderlists/kinds. A code this tenant does not keep is a 400 naming the ones it does, so this is the one filter here that can fail.
+     * @param {string} externalId - Exact-match filter on `external_id`. The list one foreign system owns, by the id that system knows it by — how a migration finds the list it wrote last run instead of leaving the buyer a second copy. Unique per tenant, so this answers at most one list. It NARROWS the caller's scope like every other filter here: a buyer still sees only their own lists and their organisation's shared ones.
      * @param {number} limit - Page size (default 50, max 200). A larger value is clamped rather than refused.
      * @param {number} offset - Row offset for pagination (default 0). Page with `page.total` and `page.hasMore`.
      * @param {string} order - Sort by one column: 'column' | 'column.asc' | 'column.desc'. A bare column sorts ascending. Anything else is refused with 400.
@@ -278,18 +421,22 @@ declare class Orderlists {
      * @returns {Promise<{}>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsList(ownerId?: string, organizationId?: string, kind?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
+    orderlistsList(ownerId?: string, organizationId?: string, kind?: string, externalId?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
     /**
-     * Three fields are required, and they are exactly the columns the database will not fill in: `name`, `owner_id` and `owner_name`. Everything else has an answer already — `kind` resolves to the caller's value, else the market's `default_kind` setting, else the kind the tenant flagged; `shared` is false; `organization_id` is null, which makes `shared` meaningless because there is then nobody to share with. Nothing about a list is unique: one owner may keep two lists with the same name, and the same article may appear in as many lists as the buyer wants. The list may be created empty or pre-filled in the same call: an optional `items` array is written as the list's positions with the row, so a twenty-line list is one request rather than a create followed by twenty adds, and the array order is the position order. Those initial `items` are normalized and article-checked BEFORE the list row is written, and both caps are checked first as well — the tenant's `max_items_per_list` against the array, and its `max_lists_per_owner` against what this contact already keeps — so a rejected position never leaves an empty list behind and a contact at their limit is refused before anything is inserted. The owner is set once — no route moves a list to another contact.
+     * Three fields are required, and they are exactly the columns the database will not fill in: `name`, `owner_id` and `owner_name`. Everything else has an answer already — `kind` resolves to the caller's value (which must be a kind the tenant keeps: an unknown one is a 400, never a silent fall-back), else the market's `default_kind` setting, else the kind the tenant flagged; `shared` is false; `organization_id` is null, which makes `shared` meaningless because there is then nobody to share with. Nothing about a list is unique: one owner may keep two lists with the same name, and the same article may appear in as many lists as the buyer wants. The list may be created empty or pre-filled in the same call: an optional `items` array is written as the list's positions with the row, so a twenty-line list is one request rather than a create followed by twenty adds, and the array order is the position order. Those initial `items` are normalized and article-checked BEFORE the list row is written, and both caps are checked first as well — the tenant's `max_items_per_list` against the array, and its `max_lists_per_owner` against what this contact already keeps — so a rejected position never leaves an empty list behind and a contact at their limit is refused before anything is inserted. The owner is set once — no route moves a list to another contact. With an acting contact (a storefront buyer) the list is theirs: `owner_id` must name that contact and `organization_id`, when sent, their organization — anything else is a 400, so a storefront cannot file a list under a colleague or share it into a foreign organization — and the organization is always the acting contact's. A back-office caller asserts no person and names both itself.
      *
      * @param {string} params.name - What the buyer calls this list. Free text, at least one character, and not unique: two contacts may both keep a "Weekly office supplies". It is also the name a NEW cart gets when POST /orderlists/{id}/cart creates one.
      * @param {string} params.ownerId - The contact who owns the list. Ownership IS the authorization here: a caller the gateway resolved to a contact sees their own lists plus their organization's shared ones, and may write only their own — unless `shared_lists_editable` opens a shared list to the whole owning organization. Set once at create; no route moves a list to another owner.
      * @param {string} params.ownerName - The owner's display name as it stood when the list was created — a snapshot, so renaming the contact does not rewrite it. Carried so a shared list can say whose it is without a call to the contacts app.
+     * @param {string} params.externalId - The id this list has in the system that OWNS it — the saved list as the shop this tenant migrated from numbered it. Unique per tenant where it is set, so a re-run of the migration updates the list it wrote last time instead of leaving the buyer two of them. Null for a list created here, which is every list a buyer has ever made in this shop.
+     * @param {object} params.externalRefs - Every OTHER system that knows this list, keyed by system name — a second shop it was carried through, a procurement platform that mirrors it. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the list up by `external_id` and read this off the answer.
      * @param {Models.OrderListItemInput[]} params.items - Optional initial positions. Every one is validated — and article-checked where `reject_unknown_articles` is on — BEFORE the list row is written, so a rejected position never leaves an empty list behind.
      * @param {string} params.kind - List kind — the `code` of one of the tenant's own kinds (GET /orderlists/kinds); defaults to the flagged one, or the market's 'default_kind' setting.
      * @param {object} params.metadata - Free-form data the tenant keeps on the list — an ERP requisition number, a department, whatever an integration needs to recognise the list again. Never read by this app, and never merged: a write replaces the whole document.
-     * @param {string} params.organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also what the order conversion hands the orders app as the buying organization.
+     * @param {string} params.organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also the buying organization the cart conversion asks the prices app to price for when no acting contact is asserted.
      * @param {boolean} params.shared - Whether the OWNING ORGANIZATION may see this list. False — the default — keeps it private to `owner_id`, and a foreign private list answers 404 rather than 403, so an outsider learns nothing from the difference. True lets every contact of `organization_id` READ it, and write it only where the tenant turned on the `shared_lists_editable` setting. A list with no `organization_id` shares with nobody however this is set.
+     * @param {object} params.sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} params.sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListWithItems>}
      */
@@ -297,28 +444,36 @@ declare class Orderlists {
         name: string;
         ownerId: string;
         ownerName: string;
+        externalId?: string;
+        externalRefs?: object;
         items?: Models.OrderListItemInput[];
         kind?: string;
         metadata?: object;
         organizationId?: string;
         shared?: boolean;
+        sourceData?: object;
+        sourceSyncedAt?: string;
     }): Promise<Models.OrderListWithItems>;
     /**
-     * Three fields are required, and they are exactly the columns the database will not fill in: `name`, `owner_id` and `owner_name`. Everything else has an answer already — `kind` resolves to the caller's value, else the market's `default_kind` setting, else the kind the tenant flagged; `shared` is false; `organization_id` is null, which makes `shared` meaningless because there is then nobody to share with. Nothing about a list is unique: one owner may keep two lists with the same name, and the same article may appear in as many lists as the buyer wants. The list may be created empty or pre-filled in the same call: an optional `items` array is written as the list's positions with the row, so a twenty-line list is one request rather than a create followed by twenty adds, and the array order is the position order. Those initial `items` are normalized and article-checked BEFORE the list row is written, and both caps are checked first as well — the tenant's `max_items_per_list` against the array, and its `max_lists_per_owner` against what this contact already keeps — so a rejected position never leaves an empty list behind and a contact at their limit is refused before anything is inserted. The owner is set once — no route moves a list to another contact.
+     * Three fields are required, and they are exactly the columns the database will not fill in: `name`, `owner_id` and `owner_name`. Everything else has an answer already — `kind` resolves to the caller's value (which must be a kind the tenant keeps: an unknown one is a 400, never a silent fall-back), else the market's `default_kind` setting, else the kind the tenant flagged; `shared` is false; `organization_id` is null, which makes `shared` meaningless because there is then nobody to share with. Nothing about a list is unique: one owner may keep two lists with the same name, and the same article may appear in as many lists as the buyer wants. The list may be created empty or pre-filled in the same call: an optional `items` array is written as the list's positions with the row, so a twenty-line list is one request rather than a create followed by twenty adds, and the array order is the position order. Those initial `items` are normalized and article-checked BEFORE the list row is written, and both caps are checked first as well — the tenant's `max_items_per_list` against the array, and its `max_lists_per_owner` against what this contact already keeps — so a rejected position never leaves an empty list behind and a contact at their limit is refused before anything is inserted. The owner is set once — no route moves a list to another contact. With an acting contact (a storefront buyer) the list is theirs: `owner_id` must name that contact and `organization_id`, when sent, their organization — anything else is a 400, so a storefront cannot file a list under a colleague or share it into a foreign organization — and the organization is always the acting contact's. A back-office caller asserts no person and names both itself.
      *
      * @param {string} name - What the buyer calls this list. Free text, at least one character, and not unique: two contacts may both keep a "Weekly office supplies". It is also the name a NEW cart gets when POST /orderlists/{id}/cart creates one.
      * @param {string} ownerId - The contact who owns the list. Ownership IS the authorization here: a caller the gateway resolved to a contact sees their own lists plus their organization's shared ones, and may write only their own — unless `shared_lists_editable` opens a shared list to the whole owning organization. Set once at create; no route moves a list to another owner.
      * @param {string} ownerName - The owner's display name as it stood when the list was created — a snapshot, so renaming the contact does not rewrite it. Carried so a shared list can say whose it is without a call to the contacts app.
+     * @param {string} externalId - The id this list has in the system that OWNS it — the saved list as the shop this tenant migrated from numbered it. Unique per tenant where it is set, so a re-run of the migration updates the list it wrote last time instead of leaving the buyer two of them. Null for a list created here, which is every list a buyer has ever made in this shop.
+     * @param {object} externalRefs - Every OTHER system that knows this list, keyed by system name — a second shop it was carried through, a procurement platform that mirrors it. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the list up by `external_id` and read this off the answer.
      * @param {Models.OrderListItemInput[]} items - Optional initial positions. Every one is validated — and article-checked where `reject_unknown_articles` is on — BEFORE the list row is written, so a rejected position never leaves an empty list behind.
      * @param {string} kind - List kind — the `code` of one of the tenant's own kinds (GET /orderlists/kinds); defaults to the flagged one, or the market's 'default_kind' setting.
      * @param {object} metadata - Free-form data the tenant keeps on the list — an ERP requisition number, a department, whatever an integration needs to recognise the list again. Never read by this app, and never merged: a write replaces the whole document.
-     * @param {string} organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also what the order conversion hands the orders app as the buying organization.
+     * @param {string} organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also the buying organization the cart conversion asks the prices app to price for when no acting contact is asserted.
      * @param {boolean} shared - Whether the OWNING ORGANIZATION may see this list. False — the default — keeps it private to `owner_id`, and a foreign private list answers 404 rather than 403, so an outsider learns nothing from the difference. True lets every contact of `organization_id` READ it, and write it only where the tenant turned on the `shared_lists_editable` setting. A list with no `organization_id` shares with nobody however this is set.
+     * @param {object} sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListWithItems>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsCreate(name: string, ownerId: string, ownerName: string, items?: Models.OrderListItemInput[], kind?: string, metadata?: object, organizationId?: string, shared?: boolean): Promise<Models.OrderListWithItems>;
+    orderlistsCreate(name: string, ownerId: string, ownerName: string, externalId?: string, externalRefs?: object, items?: Models.OrderListItemInput[], kind?: string, metadata?: object, organizationId?: string, shared?: boolean, sourceData?: object, sourceSyncedAt?: string): Promise<Models.OrderListWithItems>;
     /**
      * Seeds the two kinds a fresh tenant starts with — `shopping` and `label` — and gives `shopping` the default flag. Idempotent by code: `created` names the kinds this call wrote, `existing` the ones that were already there and were left exactly as the tenant keeps them, renamed, retoned and reordered included. On a settled tenant `created` is empty. It is rarely the call you need — the `app.installed` event runs the same seed, and the first read of GET /orderlists/kinds on an empty table seeds before it answers. It never removes a kind and never restores one a merchant deleted.
      *
@@ -389,7 +544,7 @@ declare class Orderlists {
      */
     orderlistsKindsCreate(code: string, title: string, description?: string, descriptions?: object, isDefault?: boolean, labels?: object, position?: number, tone?: OrderListKindTone): Promise<Models.OrderListKindRow>;
     /**
-     * There is no foreign key behind `lists.kind` — it is a plain text column holding a code, and nothing in the database points at `list_kinds` — so this route's own 409 is the whole of the referential integrity. It reads whether any list still carries the code and refuses if one does, and refuses again when this is the last kind left, because a list must have one. Nothing cascades and no list is rewritten. Two gaps the guard leaves: it is a read followed by a delete with no lock between them, so a list written with the code in that window survives it; and the market-scoped `default_kind` SETTING is neither consulted nor cleared, so deleting the kind it names leaves the setting pointing at nothing while creates fall through to whichever kind holds the default flag. A list that does end up naming a code nothing defines is not broken, only stranded: it is still returned by GET /orderlists and GET /orderlists/{id} carrying the bare code, the vocabulary no longer offers that value so a UI renders the code itself, `?kind=` refuses it with a 400 naming the codes that remain, and the way back is PUT /orderlists/{id} with a kind the tenant keeps. Deleting the flag-holder hands the flag to the first remaining kind. The answer is the `code`, not the `{deleted, id}` the other deletes here return.
+     * There is no foreign key behind `lists.kind` — it is a plain text column holding a code, and nothing in the database points at `list_kinds` — so this route's own 409 is the whole of the referential integrity. It reads whether any list still carries the code and refuses if one does, and refuses again when this is the last kind left, because a list must have one. Nothing cascades and no list is rewritten. Two gaps the guard leaves: it is a read followed by a delete with no lock between them, so a list written with the code in that window survives it; and the market-scoped `default_kind` SETTING is neither consulted nor cleared, so deleting the kind it names leaves the setting pointing at nothing while creates fall through to whichever kind holds the default flag. A list that does end up naming a code nothing defines is not broken, only stranded: it is still returned by GET /orderlists and GET /orderlists/{id} carrying the bare code, the vocabulary no longer offers that value so a UI renders the code itself, `?kind=` refuses it with a 400 naming the codes that remain, and the way back is PUT /orderlists/{id} with a kind the tenant keeps. Deleting the flag-holder hands the flag to the first remaining kind. The answer is `{deleted, id}`, like every other delete here.
      *
      * @param {string} params.id - The list kind, by id.
      * @throws {RevenexxException}
@@ -399,7 +554,7 @@ declare class Orderlists {
         id: string;
     }): Promise<{}>;
     /**
-     * There is no foreign key behind `lists.kind` — it is a plain text column holding a code, and nothing in the database points at `list_kinds` — so this route's own 409 is the whole of the referential integrity. It reads whether any list still carries the code and refuses if one does, and refuses again when this is the last kind left, because a list must have one. Nothing cascades and no list is rewritten. Two gaps the guard leaves: it is a read followed by a delete with no lock between them, so a list written with the code in that window survives it; and the market-scoped `default_kind` SETTING is neither consulted nor cleared, so deleting the kind it names leaves the setting pointing at nothing while creates fall through to whichever kind holds the default flag. A list that does end up naming a code nothing defines is not broken, only stranded: it is still returned by GET /orderlists and GET /orderlists/{id} carrying the bare code, the vocabulary no longer offers that value so a UI renders the code itself, `?kind=` refuses it with a 400 naming the codes that remain, and the way back is PUT /orderlists/{id} with a kind the tenant keeps. Deleting the flag-holder hands the flag to the first remaining kind. The answer is the `code`, not the `{deleted, id}` the other deletes here return.
+     * There is no foreign key behind `lists.kind` — it is a plain text column holding a code, and nothing in the database points at `list_kinds` — so this route's own 409 is the whole of the referential integrity. It reads whether any list still carries the code and refuses if one does, and refuses again when this is the last kind left, because a list must have one. Nothing cascades and no list is rewritten. Two gaps the guard leaves: it is a read followed by a delete with no lock between them, so a list written with the code in that window survives it; and the market-scoped `default_kind` SETTING is neither consulted nor cleared, so deleting the kind it names leaves the setting pointing at nothing while creates fall through to whichever kind holds the default flag. A list that does end up naming a code nothing defines is not broken, only stranded: it is still returned by GET /orderlists and GET /orderlists/{id} carrying the bare code, the vocabulary no longer offers that value so a UI renders the code itself, `?kind=` refuses it with a 400 naming the codes that remain, and the way back is PUT /orderlists/{id} with a kind the tenant keeps. Deleting the flag-holder hands the flag to the first remaining kind. The answer is `{deleted, id}`, like every other delete here.
      *
      * @param {string} id - The list kind, by id.
      * @throws {RevenexxException}
@@ -427,15 +582,15 @@ declare class Orderlists {
      */
     orderlistsKindsGet(id: string): Promise<Models.OrderListKindRow>;
     /**
-     * Everything a kind has except its code: the title a person reads, the sentence underneath it, the localized forms of both, the badge tone, and where it sits in a select. The code is not among them and cannot be reached from here at all: sending a different one is a 400 rather than a silent no-op, because `lists.kind` stores the code and a rename would orphan every list that carries it with no foreign key to stop it. So a rename is never how a list comes to name a code nothing defines — only a delete can do that. Renaming the TITLE touches no list, for the same reason. A blank title is ignored rather than stored; an explicit null clears the description; `labels` and `descriptions` replace the whole map rather than merging into it. `is_default: true` makes the same move POST /orderlists/kinds/{id}/make-default makes on its own. A system kind is editable like any other.
+     * Everything a kind has except its code: the title a person reads, the sentence underneath it, the localized forms of both, the badge tone, and where it sits in a select. The code is not among them and cannot be reached from here at all: sending a different one is a 400 rather than a silent no-op, because `lists.kind` stores the code and a rename would orphan every list that carries it with no foreign key to stop it. So a rename is never how a list comes to name a code nothing defines — only a delete can do that. Renaming the TITLE touches no list, for the same reason. A blank title, an unknown tone and a body that changes nothing are 400s; an explicit null clears the description; `labels` and `descriptions` replace the whole map rather than merging into it. `is_default: true` makes the same move POST /orderlists/kinds/{id}/make-default makes on its own. A system kind is editable like any other.
      *
      * @param {string} params.id - The list kind, by id.
      * @param {string} params.description - What this kind is for, in one sentence. Explicit null clears it.
      * @param {object} params.descriptions - Localized descriptions, keyed by language tag. Replaces the whole map rather than merging into it.
-     * @param {boolean} params.isDefault - True promotes this kind and demotes the previous default — the same move POST /orderlists/kinds/{id}/make-default makes on its own.
+     * @param {boolean} params.isDefault - True promotes this kind and demotes the previous default — the same move POST /orderlists/kinds/{id}/make-default makes on its own. False is accepted only on a kind that is not the default: the flag moves by promoting another kind.
      * @param {object} params.labels - Localized titles, keyed by language tag. Replaces the whole map rather than merging into it.
      * @param {number} params.position - Where the kind sits in a select, ascending.
-     * @param {string} params.title - What a person reads. A blank title is ignored rather than stored — a kind with no words is unreadable in every UI.
+     * @param {string} params.title - What a person reads. A blank title is a 400 — a kind with no words is unreadable in every UI.
      * @param {OrderListKindTone} params.tone - Semantic badge colour. The client owns what each tone looks like.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListKindRow>}
@@ -451,15 +606,15 @@ declare class Orderlists {
         tone?: OrderListKindTone;
     }): Promise<Models.OrderListKindRow>;
     /**
-     * Everything a kind has except its code: the title a person reads, the sentence underneath it, the localized forms of both, the badge tone, and where it sits in a select. The code is not among them and cannot be reached from here at all: sending a different one is a 400 rather than a silent no-op, because `lists.kind` stores the code and a rename would orphan every list that carries it with no foreign key to stop it. So a rename is never how a list comes to name a code nothing defines — only a delete can do that. Renaming the TITLE touches no list, for the same reason. A blank title is ignored rather than stored; an explicit null clears the description; `labels` and `descriptions` replace the whole map rather than merging into it. `is_default: true` makes the same move POST /orderlists/kinds/{id}/make-default makes on its own. A system kind is editable like any other.
+     * Everything a kind has except its code: the title a person reads, the sentence underneath it, the localized forms of both, the badge tone, and where it sits in a select. The code is not among them and cannot be reached from here at all: sending a different one is a 400 rather than a silent no-op, because `lists.kind` stores the code and a rename would orphan every list that carries it with no foreign key to stop it. So a rename is never how a list comes to name a code nothing defines — only a delete can do that. Renaming the TITLE touches no list, for the same reason. A blank title, an unknown tone and a body that changes nothing are 400s; an explicit null clears the description; `labels` and `descriptions` replace the whole map rather than merging into it. `is_default: true` makes the same move POST /orderlists/kinds/{id}/make-default makes on its own. A system kind is editable like any other.
      *
      * @param {string} id - The list kind, by id.
      * @param {string} description - What this kind is for, in one sentence. Explicit null clears it.
      * @param {object} descriptions - Localized descriptions, keyed by language tag. Replaces the whole map rather than merging into it.
-     * @param {boolean} isDefault - True promotes this kind and demotes the previous default — the same move POST /orderlists/kinds/{id}/make-default makes on its own.
+     * @param {boolean} isDefault - True promotes this kind and demotes the previous default — the same move POST /orderlists/kinds/{id}/make-default makes on its own. False is accepted only on a kind that is not the default: the flag moves by promoting another kind.
      * @param {object} labels - Localized titles, keyed by language tag. Replaces the whole map rather than merging into it.
      * @param {number} position - Where the kind sits in a select, ascending.
-     * @param {string} title - What a person reads. A blank title is ignored rather than stored — a kind with no words is unreadable in every UI.
+     * @param {string} title - What a person reads. A blank title is a 400 — a kind with no words is unreadable in every UI.
      * @param {OrderListKindTone} tone - Semantic badge colour. The client owns what each tone looks like.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListKindRow>}
@@ -515,7 +670,7 @@ declare class Orderlists {
      */
     orderlistsVocabulariesGet(name: OrderlistsVocabulariesGetName): Promise<Models.OrderListVocabulary>;
     /**
-     * Takes every position with it, in the database: `items.list_id` is the app's only foreign key and it is ON DELETE CASCADE, and the handler removes the positions explicitly first besides. Nothing survives the list, there is no soft delete and no undo — and the answer carries no count, so read the list (or its `item_count`) BEFORE the call if you need to know how much went. What it does NOT take is what the list has already produced: a cart line or an order position built by the conversions carries `order_list_id`, `order_list_name` and `order_list_item_id` in its snapshot, and those are jsonb values inside another app rather than foreign keys — ADR-0055 forbids a cross-app FK, so nothing cascades there and nothing is nulled. The cart and the order are unharmed, because every position was copied as a snapshot rather than referenced; the provenance link is what dangles, permanently.
+     * Takes every position with it, in the database: `items.list_id` is the app's only foreign key and it is ON DELETE CASCADE, and the handler removes the positions explicitly first besides. Nothing survives the list, there is no soft delete and no undo — and the answer carries no count, so read the list (or its `item_count`) BEFORE the call if you need to know how much went. What it does NOT take is what the list has already produced: a cart line built by the cart conversion (or an order position built by the order route removed in 0.23.0) carries `order_list_id`, `order_list_name` and `order_list_item_id` in its snapshot, and those are jsonb values inside another app rather than foreign keys — ADR-0055 forbids a cross-app FK, so nothing cascades there and nothing is nulled. The cart and the order are unharmed, because every position was copied as a snapshot rather than referenced; the provenance link is what dangles, permanently.
      *
      * @param {string} params.id - The order list, by id.
      * @throws {RevenexxException}
@@ -525,7 +680,7 @@ declare class Orderlists {
         id: string;
     }): Promise<{}>;
     /**
-     * Takes every position with it, in the database: `items.list_id` is the app's only foreign key and it is ON DELETE CASCADE, and the handler removes the positions explicitly first besides. Nothing survives the list, there is no soft delete and no undo — and the answer carries no count, so read the list (or its `item_count`) BEFORE the call if you need to know how much went. What it does NOT take is what the list has already produced: a cart line or an order position built by the conversions carries `order_list_id`, `order_list_name` and `order_list_item_id` in its snapshot, and those are jsonb values inside another app rather than foreign keys — ADR-0055 forbids a cross-app FK, so nothing cascades there and nothing is nulled. The cart and the order are unharmed, because every position was copied as a snapshot rather than referenced; the provenance link is what dangles, permanently.
+     * Takes every position with it, in the database: `items.list_id` is the app's only foreign key and it is ON DELETE CASCADE, and the handler removes the positions explicitly first besides. Nothing survives the list, there is no soft delete and no undo — and the answer carries no count, so read the list (or its `item_count`) BEFORE the call if you need to know how much went. What it does NOT take is what the list has already produced: a cart line built by the cart conversion (or an order position built by the order route removed in 0.23.0) carries `order_list_id`, `order_list_name` and `order_list_item_id` in its snapshot, and those are jsonb values inside another app rather than foreign keys — ADR-0055 forbids a cross-app FK, so nothing cascades there and nothing is nulled. The cart and the order are unharmed, because every position was copied as a snapshot rather than referenced; the provenance link is what dangles, permanently.
      *
      * @param {string} id - The order list, by id.
      * @throws {RevenexxException}
@@ -553,42 +708,61 @@ declare class Orderlists {
      */
     orderlistsGet(id: string): Promise<Models.OrderListWithItems>;
     /**
-     * Rename, share or reclassify — the whole of what a list says about itself, plus `metadata`. Positions go through the items routes and the owner cannot be changed by anything. `shared` is what the column `public` was renamed to in June 2026; `public` is still on the wire because the provisioner is additive, is false on every row written since, and says nothing about who may see the list. One trap: a `kind` this tenant does not keep is IGNORED rather than refused, so the list quietly keeps the kind it had and a client that cares must read the answer back. An empty body is a 400 rather than a no-op.
+     * Rename, share or reclassify — the whole of what a list says about itself, plus `metadata`. Positions go through the items routes. `owner_id` and `organization_id` are fixed at create: sending the value the list has is accepted as no change, any other value is a 400. `shared` is what the column `public` was renamed to in June 2026; `public` is still on the wire because the provisioner is additive, is false on every row written since, and says nothing about who may see the list. A `kind` this tenant does not keep is a 400, as on the create and the collection filter. An empty body, a field of the wrong type, and a body that names no field this route changes are all 400s rather than a no-op that only moves `updated_at`.
      *
      * @param {string} params.id - The order list, by id.
+     * @param {string} params.externalId - The id this list has in the system that OWNS it — the saved list as the shop this tenant migrated from numbered it. Unique per tenant where it is set, so a re-run of the migration updates the list it wrote last time instead of leaving the buyer two of them. Null for a list created here, which is every list a buyer has ever made in this shop.
+     * @param {object} params.externalRefs - Every OTHER system that knows this list, keyed by system name — a second shop it was carried through, a procurement platform that mirrors it. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the list up by `external_id` and read this off the answer.
      * @param {string} params.kind - List kind — the `code` of one of the tenant's own kinds (GET /orderlists/kinds); defaults to the flagged one, or the market's 'default_kind' setting.
      * @param {object} params.metadata - Free-form data the tenant keeps on the list — an ERP requisition number, a department, whatever an integration needs to recognise the list again. Never read by this app, and never merged: a write replaces the whole document.
      * @param {string} params.name - What the buyer calls this list. Free text, at least one character, and not unique: two contacts may both keep a "Weekly office supplies". It is also the name a NEW cart gets when POST /orderlists/{id}/cart creates one.
+     * @param {string} params.organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also the buying organization the cart conversion asks the prices app to price for when no acting contact is asserted.
+     * @param {string} params.ownerId - The contact who owns the list. Ownership IS the authorization here: a caller the gateway resolved to a contact sees their own lists plus their organization's shared ones, and may write only their own — unless `shared_lists_editable` opens a shared list to the whole owning organization. Set once at create; no route moves a list to another owner.
      * @param {boolean} params.shared - Whether the OWNING ORGANIZATION may see this list. False — the default — keeps it private to `owner_id`, and a foreign private list answers 404 rather than 403, so an outsider learns nothing from the difference. True lets every contact of `organization_id` READ it, and write it only where the tenant turned on the `shared_lists_editable` setting. A list with no `organization_id` shares with nobody however this is set.
+     * @param {object} params.sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} params.sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListWithItems>}
      */
     orderlistsUpdate(params: {
         id: string;
+        externalId?: string;
+        externalRefs?: object;
         kind?: string;
         metadata?: object;
         name?: string;
+        organizationId?: string;
+        ownerId?: string;
         shared?: boolean;
+        sourceData?: object;
+        sourceSyncedAt?: string;
     }): Promise<Models.OrderListWithItems>;
     /**
-     * Rename, share or reclassify — the whole of what a list says about itself, plus `metadata`. Positions go through the items routes and the owner cannot be changed by anything. `shared` is what the column `public` was renamed to in June 2026; `public` is still on the wire because the provisioner is additive, is false on every row written since, and says nothing about who may see the list. One trap: a `kind` this tenant does not keep is IGNORED rather than refused, so the list quietly keeps the kind it had and a client that cares must read the answer back. An empty body is a 400 rather than a no-op.
+     * Rename, share or reclassify — the whole of what a list says about itself, plus `metadata`. Positions go through the items routes. `owner_id` and `organization_id` are fixed at create: sending the value the list has is accepted as no change, any other value is a 400. `shared` is what the column `public` was renamed to in June 2026; `public` is still on the wire because the provisioner is additive, is false on every row written since, and says nothing about who may see the list. A `kind` this tenant does not keep is a 400, as on the create and the collection filter. An empty body, a field of the wrong type, and a body that names no field this route changes are all 400s rather than a no-op that only moves `updated_at`.
      *
      * @param {string} id - The order list, by id.
+     * @param {string} externalId - The id this list has in the system that OWNS it — the saved list as the shop this tenant migrated from numbered it. Unique per tenant where it is set, so a re-run of the migration updates the list it wrote last time instead of leaving the buyer two of them. Null for a list created here, which is every list a buyer has ever made in this shop.
+     * @param {object} externalRefs - Every OTHER system that knows this list, keyed by system name — a second shop it was carried through, a procurement platform that mirrors it. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the list up by `external_id` and read this off the answer.
      * @param {string} kind - List kind — the `code` of one of the tenant's own kinds (GET /orderlists/kinds); defaults to the flagged one, or the market's 'default_kind' setting.
      * @param {object} metadata - Free-form data the tenant keeps on the list — an ERP requisition number, a department, whatever an integration needs to recognise the list again. Never read by this app, and never merged: a write replaces the whole document.
      * @param {string} name - What the buyer calls this list. Free text, at least one character, and not unique: two contacts may both keep a "Weekly office supplies". It is also the name a NEW cart gets when POST /orderlists/{id}/cart creates one.
+     * @param {string} organizationId - The organization the sharing is scoped to. Null means the list can only ever be the owner's own: `shared` is meaningless without it, because there is no set of people to share with. It is also the buying organization the cart conversion asks the prices app to price for when no acting contact is asserted.
+     * @param {string} ownerId - The contact who owns the list. Ownership IS the authorization here: a caller the gateway resolved to a contact sees their own lists plus their organization's shared ones, and may write only their own — unless `shared_lists_editable` opens a shared list to the whole owning organization. Set once at create; no route moves a list to another owner.
      * @param {boolean} shared - Whether the OWNING ORGANIZATION may see this list. False — the default — keeps it private to `owner_id`, and a foreign private list answers 404 rather than 403, so an outsider learns nothing from the difference. True lets every contact of `organization_id` READ it, and write it only where the tenant turned on the `shared_lists_editable` setting. A list with no `organization_id` shares with nobody however this is set.
+     * @param {object} sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListWithItems>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsUpdate(id: string, kind?: string, metadata?: object, name?: string, shared?: boolean): Promise<Models.OrderListWithItems>;
+    orderlistsUpdate(id: string, externalId?: string, externalRefs?: object, kind?: string, metadata?: object, name?: string, organizationId?: string, ownerId?: string, shared?: boolean, sourceData?: object, sourceSyncedAt?: string): Promise<Models.OrderListWithItems>;
     /**
-     * The reason a buyer keeps a list at all: every position of the list goes into a cart in one call. The cart is either one the caller names or one this call makes. Sending 'cart_id' adds to that existing cart; omitting it creates a cart for the LIST'S OWNER — not for whoever called — names it after the list, and makes it that owner's current cart, because a cart the buyer cannot see is not 'added to cart'. Which of the two happened is not left to be inferred: `cart_created` says so and `cart_id` names the cart either way. 'append' (the default, tenant-configurable through `cart_merge_mode`) lets the carts app merge each line by product and price so quantities accumulate, and is sent one line at a time precisely because that merge happens on add; 'replace' makes the list the cart's whole contents in one call. What the cart has no column for — cost centre, custom SKU, position texts — rides in each line's snapshot together with the list it came from. The list itself is never touched: it is read, not emptied, so the same list converts again next month. Cross-app: carts.create, carts.items.create, carts.items.replace.
+     * The reason a buyer keeps a list at all: every position of the list goes into a cart in one call. The cart is either one the caller names or one this call makes. Sending 'cart_id' adds to that existing cart — whose cart it is, is the carts app's rule, not checked here; omitting it creates a cart named after the list for the BUYER. With an acting contact (a storefront buyer) that is the acting contact — a colleague converting a shared list gets the cart, not the list's owner — and it becomes their current cart, because a cart the buyer cannot see is not 'added to cart'; without one (a back-office caller) the cart is the list owner's and is not made current, so staff never displace the cart the customer is working in. Which of the two happened is not left to be inferred: `cart_created` says so and `cart_id` names the cart either way. 'append' (the default, tenant-configurable through `cart_merge_mode`) lets the carts app merge each line by product and price so quantities accumulate, and is sent one line at a time precisely because that merge happens on add; 'replace' makes the list the cart's whole contents in one call. Every line is priced NOW: the positions go to the prices app first (one prices.resolve call per 200 positions, for the acting contact or else the list's owner and organization, in `currency` when given), and each line carries the unit price and tax rate it quotes — always the current ones. When the prices app cannot tax the call (`tax.resolved: false`: several markets and none named, an unknown market, no markets or tax classes set up) the conversion is refused before any cart write, never sent at the saved rate or without one (which the carts app reads as 0 %). Name the market with `market` where the caller has no market header; it is sent to the prices app and to every carts call, so the cart sits in the market its lines were priced for. The price a position was saved with is informational and rides in the snapshot as `saved_price`, never as the line's price: a line the prices app cannot price (on request) is left out and named in `skipped` with reason `no_current_price` — or, when `on_missing_article` is 'fail', the call is refused. A prices app that fails is a 502, never a silent fall-back to the saved price. What the cart has no column for — cost centre, custom SKU, position texts — rides in each line's snapshot together with the list it came from. The list itself is never touched: it is read, not emptied, so the same list converts again next month. There is no direct list → order route: the cart goes through the normal checkout, where approval and the cost-centre budget apply. Cross-app: prices.resolve, carts.create, carts.items.create, carts.items.replace.
      *
      * @param {string} params.id - The order list, by id.
-     * @param {string} params.cartId - Add to this existing cart. Omit to create one for the list owner and make it their current cart.
-     * @param {string} params.currency - ISO 4217 code for the cart and its lines. Omit to let the carts app decide.
+     * @param {string} params.cartId - Add to this existing cart. Omit to create one for the acting contact (from the back office: for the list owner). Whose cart this id names is not checked here — that is the carts app's rule to enforce.
+     * @param {string} params.currency - ISO 4217 code for the cart and its lines, and the currency the prices app is asked to price in — only price lists in it count. Omit to let the carts and prices apps apply the market default.
+     * @param {string} params.market - The market CODE (markets.code) this conversion is for, sent as `X-Revenexx-Market` to the prices app (which prices and taxes in it) and to every carts call (a new cart is assigned to that market and opens in its currency). It wins over the caller's own market header; omit it to forward that header as is. A back office with several markets names one here, because without a market such a tenant's prices cannot be taxed and the call is refused. Matched case-insensitively and forwarded lower-cased.
      * @param {OrderListCartMode} params.mode - 'append' adds the positions (the carts app merges a line by product and price, so quantities accumulate); 'replace' makes the list the cart's entire contents. Defaults to the tenant's 'cart_merge_mode' setting.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListToCartResult>}
@@ -597,47 +771,24 @@ declare class Orderlists {
         id: string;
         cartId?: string;
         currency?: string;
+        market?: string;
         mode?: OrderListCartMode;
     }): Promise<Models.OrderListToCartResult>;
     /**
-     * The reason a buyer keeps a list at all: every position of the list goes into a cart in one call. The cart is either one the caller names or one this call makes. Sending 'cart_id' adds to that existing cart; omitting it creates a cart for the LIST'S OWNER — not for whoever called — names it after the list, and makes it that owner's current cart, because a cart the buyer cannot see is not 'added to cart'. Which of the two happened is not left to be inferred: `cart_created` says so and `cart_id` names the cart either way. 'append' (the default, tenant-configurable through `cart_merge_mode`) lets the carts app merge each line by product and price so quantities accumulate, and is sent one line at a time precisely because that merge happens on add; 'replace' makes the list the cart's whole contents in one call. What the cart has no column for — cost centre, custom SKU, position texts — rides in each line's snapshot together with the list it came from. The list itself is never touched: it is read, not emptied, so the same list converts again next month. Cross-app: carts.create, carts.items.create, carts.items.replace.
+     * The reason a buyer keeps a list at all: every position of the list goes into a cart in one call. The cart is either one the caller names or one this call makes. Sending 'cart_id' adds to that existing cart — whose cart it is, is the carts app's rule, not checked here; omitting it creates a cart named after the list for the BUYER. With an acting contact (a storefront buyer) that is the acting contact — a colleague converting a shared list gets the cart, not the list's owner — and it becomes their current cart, because a cart the buyer cannot see is not 'added to cart'; without one (a back-office caller) the cart is the list owner's and is not made current, so staff never displace the cart the customer is working in. Which of the two happened is not left to be inferred: `cart_created` says so and `cart_id` names the cart either way. 'append' (the default, tenant-configurable through `cart_merge_mode`) lets the carts app merge each line by product and price so quantities accumulate, and is sent one line at a time precisely because that merge happens on add; 'replace' makes the list the cart's whole contents in one call. Every line is priced NOW: the positions go to the prices app first (one prices.resolve call per 200 positions, for the acting contact or else the list's owner and organization, in `currency` when given), and each line carries the unit price and tax rate it quotes — always the current ones. When the prices app cannot tax the call (`tax.resolved: false`: several markets and none named, an unknown market, no markets or tax classes set up) the conversion is refused before any cart write, never sent at the saved rate or without one (which the carts app reads as 0 %). Name the market with `market` where the caller has no market header; it is sent to the prices app and to every carts call, so the cart sits in the market its lines were priced for. The price a position was saved with is informational and rides in the snapshot as `saved_price`, never as the line's price: a line the prices app cannot price (on request) is left out and named in `skipped` with reason `no_current_price` — or, when `on_missing_article` is 'fail', the call is refused. A prices app that fails is a 502, never a silent fall-back to the saved price. What the cart has no column for — cost centre, custom SKU, position texts — rides in each line's snapshot together with the list it came from. The list itself is never touched: it is read, not emptied, so the same list converts again next month. There is no direct list → order route: the cart goes through the normal checkout, where approval and the cost-centre budget apply. Cross-app: prices.resolve, carts.create, carts.items.create, carts.items.replace.
      *
      * @param {string} id - The order list, by id.
-     * @param {string} cartId - Add to this existing cart. Omit to create one for the list owner and make it their current cart.
-     * @param {string} currency - ISO 4217 code for the cart and its lines. Omit to let the carts app decide.
+     * @param {string} cartId - Add to this existing cart. Omit to create one for the acting contact (from the back office: for the list owner). Whose cart this id names is not checked here — that is the carts app's rule to enforce.
+     * @param {string} currency - ISO 4217 code for the cart and its lines, and the currency the prices app is asked to price in — only price lists in it count. Omit to let the carts and prices apps apply the market default.
+     * @param {string} market - The market CODE (markets.code) this conversion is for, sent as `X-Revenexx-Market` to the prices app (which prices and taxes in it) and to every carts call (a new cart is assigned to that market and opens in its currency). It wins over the caller's own market header; omit it to forward that header as is. A back office with several markets names one here, because without a market such a tenant's prices cannot be taxed and the call is refused. Matched case-insensitively and forwarded lower-cased.
      * @param {OrderListCartMode} mode - 'append' adds the positions (the carts app merges a line by product and price, so quantities accumulate); 'replace' makes the list the cart's entire contents. Defaults to the tenant's 'cart_merge_mode' setting.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListToCartResult>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsToCart(id: string, cartId?: string, currency?: string, mode?: OrderListCartMode): Promise<Models.OrderListToCartResult>;
-    /**
-     * The other half of the reason a list exists — and it is the ORDERS app that does it, over the gateway rather than over a shared table, so everything an order means is that app's answer and not this one's. Places the list's positions as an order: buyer and organization come from the list, the cost centre and the position texts land on the order's own columns, and the list is left exactly as it stands so it can be ordered again next month. The acting contact is re-asserted on the call, so the orders app applies ITS rules to the BUYER rather than to this app — a contact holding only orders.request, or an order above the tenant's approval threshold, comes back with status 'pending' and no placed_at instead of being refused. That pending order is the platform's nearest thing to a draft; the orders app owns the state and this one cannot override it, which is why `status` is reported rather than chosen and why the created order is handed back verbatim under `order` beside the three fields lifted out of it. Cross-app: orders.place.
-     *
-     * @param {string} params.id - The order list, by id.
-     * @param {string} params.currency - ISO 4217 code. Omit to let the orders app apply the market default.
-     * @param {string} params.customerOrderNumber - The BUYER's own order or purchase-order number, forwarded to the orders app verbatim. Free text and never generated here: it exists so the paperwork can carry the number the buyer's accounts payable will look for.
-     * @throws {RevenexxException}
-     * @returns {Promise<Models.OrderListToOrderResult>}
-     */
-    orderlistsToOrder(params: {
-        id: string;
-        currency?: string;
-        customerOrderNumber?: string;
-    }): Promise<Models.OrderListToOrderResult>;
-    /**
-     * The other half of the reason a list exists — and it is the ORDERS app that does it, over the gateway rather than over a shared table, so everything an order means is that app's answer and not this one's. Places the list's positions as an order: buyer and organization come from the list, the cost centre and the position texts land on the order's own columns, and the list is left exactly as it stands so it can be ordered again next month. The acting contact is re-asserted on the call, so the orders app applies ITS rules to the BUYER rather than to this app — a contact holding only orders.request, or an order above the tenant's approval threshold, comes back with status 'pending' and no placed_at instead of being refused. That pending order is the platform's nearest thing to a draft; the orders app owns the state and this one cannot override it, which is why `status` is reported rather than chosen and why the created order is handed back verbatim under `order` beside the three fields lifted out of it. Cross-app: orders.place.
-     *
-     * @param {string} id - The order list, by id.
-     * @param {string} currency - ISO 4217 code. Omit to let the orders app apply the market default.
-     * @param {string} customerOrderNumber - The BUYER's own order or purchase-order number, forwarded to the orders app verbatim. Free text and never generated here: it exists so the paperwork can carry the number the buyer's accounts payable will look for.
-     * @throws {RevenexxException}
-     * @returns {Promise<Models.OrderListToOrderResult>}
-     * @deprecated Use the object parameter style method for a better developer experience.
-     */
-    orderlistsToOrder(id: string, currency?: string, customerOrderNumber?: string): Promise<Models.OrderListToOrderResult>;
+    orderlistsToCart(id: string, cartId?: string, currency?: string, market?: string, mode?: OrderListCartMode): Promise<Models.OrderListToCartResult>;
     /**
-     * Every column of a position is an exact-match filter — eighteen of them, which is the whole row — and they combine as AND. `list_id` is not among them: it comes from the path and overwrites anything the query says. The default sort is `position.asc`, and `position` is neither dense nor unique: removing a position leaves its number behind while the next add takes the list's current COUNT, so a delete from the middle followed by an add produces two rows sharing a number and the tie falls to whatever the database returns first. Sort by `created_at` where the order has to be unambiguous.
+     * Every column of a position is an exact-match filter — eighteen of them, which is the whole row — and they combine as AND. `list_id` is not among them: it comes from the path and overwrites anything the query says. The list must be one the caller may READ — a colleague's private list answers 404 here exactly as it does on GET /orderlists/{id}, so an acting contact cannot reach its positions through this collection. The default sort is `position.asc`, and `position` is neither dense nor unique: removing a position leaves its number behind while the next add takes the list's current COUNT, so a delete from the middle followed by an add produces two rows sharing a number and the tie falls to whatever the database returns first. Sort by `created_at` where the order has to be unambiguous.
      *
      * @param {string} params.listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} params.id - Exact-match filter on `id`. The position's own id — the same row GET /orderlists/{list_id}/items/{id} answers, reached through the collection.
@@ -656,6 +807,10 @@ declare class Orderlists {
      * @param {string} params.subcategorySlug - Exact-match filter on `subcategory_slug`. One catalogue subcategory, as a slug.
      * @param {number} params.position - Exact-match filter on `position`. The exact sort position within the list.
      * @param {string} params.metadata - Exact-match filter on `metadata`. The WHOLE metadata document, serialized as JSON — equality, not a key lookup and not a containment query.
+     * @param {string} params.externalId - Exact-match filter on `external_id`. The position one foreign system owns, by the id that system knows it by — how a migration finds the line it wrote last run instead of appending a second one. Unique per tenant, so this answers at most one position.
+     * @param {string} params.externalRefs - Exact-match filter on `external_refs`. The WHOLE map of other systems, serialized as JSON — equality on the document, not a lookup of one system's key. Look the position up by `external_id` and read this off the answer instead.
+     * @param {string} params.sourceSyncedAt - Exact-match filter on `source_synced_at`. The exact instant a position was last confirmed against its source. An equality on a microsecond, which nobody holds — the question a delta run asks is a range, and this collection has none. Sort with `order=source_synced_at.desc` instead.
+     * @param {string} params.sourceData - Exact-match filter on `source_data`. The WHOLE document the source delivered, serialized as JSON — equality, and therefore a reconciliation tool rather than something anybody types.
      * @param {string} params.createdAt - Exact-match filter on `created_at`. The exact creation timestamp. There is no range filter here; sort with `order=created_at.desc` instead.
      * @param {string} params.updatedAt - Exact-match filter on `updated_at`. The exact timestamp of the last change.
      * @param {number} params.limit - Page size (default 50, max 200). A larger value is clamped rather than refused.
@@ -682,6 +837,10 @@ declare class Orderlists {
         subcategorySlug?: string;
         position?: number;
         metadata?: string;
+        externalId?: string;
+        externalRefs?: string;
+        sourceSyncedAt?: string;
+        sourceData?: string;
         createdAt?: string;
         updatedAt?: string;
         limit?: number;
@@ -689,7 +848,7 @@ declare class Orderlists {
         order?: string;
     }): Promise<{}>;
     /**
-     * Every column of a position is an exact-match filter — eighteen of them, which is the whole row — and they combine as AND. `list_id` is not among them: it comes from the path and overwrites anything the query says. The default sort is `position.asc`, and `position` is neither dense nor unique: removing a position leaves its number behind while the next add takes the list's current COUNT, so a delete from the middle followed by an add produces two rows sharing a number and the tie falls to whatever the database returns first. Sort by `created_at` where the order has to be unambiguous.
+     * Every column of a position is an exact-match filter — eighteen of them, which is the whole row — and they combine as AND. `list_id` is not among them: it comes from the path and overwrites anything the query says. The list must be one the caller may READ — a colleague's private list answers 404 here exactly as it does on GET /orderlists/{id}, so an acting contact cannot reach its positions through this collection. The default sort is `position.asc`, and `position` is neither dense nor unique: removing a position leaves its number behind while the next add takes the list's current COUNT, so a delete from the middle followed by an add produces two rows sharing a number and the tie falls to whatever the database returns first. Sort by `created_at` where the order has to be unambiguous.
      *
      * @param {string} listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} id - Exact-match filter on `id`. The position's own id — the same row GET /orderlists/{list_id}/items/{id} answers, reached through the collection.
@@ -708,6 +867,10 @@ declare class Orderlists {
      * @param {string} subcategorySlug - Exact-match filter on `subcategory_slug`. One catalogue subcategory, as a slug.
      * @param {number} position - Exact-match filter on `position`. The exact sort position within the list.
      * @param {string} metadata - Exact-match filter on `metadata`. The WHOLE metadata document, serialized as JSON — equality, not a key lookup and not a containment query.
+     * @param {string} externalId - Exact-match filter on `external_id`. The position one foreign system owns, by the id that system knows it by — how a migration finds the line it wrote last run instead of appending a second one. Unique per tenant, so this answers at most one position.
+     * @param {string} externalRefs - Exact-match filter on `external_refs`. The WHOLE map of other systems, serialized as JSON — equality on the document, not a lookup of one system's key. Look the position up by `external_id` and read this off the answer instead.
+     * @param {string} sourceSyncedAt - Exact-match filter on `source_synced_at`. The exact instant a position was last confirmed against its source. An equality on a microsecond, which nobody holds — the question a delta run asks is a range, and this collection has none. Sort with `order=source_synced_at.desc` instead.
+     * @param {string} sourceData - Exact-match filter on `source_data`. The WHOLE document the source delivered, serialized as JSON — equality, and therefore a reconciliation tool rather than something anybody types.
      * @param {string} createdAt - Exact-match filter on `created_at`. The exact creation timestamp. There is no range filter here; sort with `order=created_at.desc` instead.
      * @param {string} updatedAt - Exact-match filter on `updated_at`. The exact timestamp of the last change.
      * @param {number} limit - Page size (default 50, max 200). A larger value is clamped rather than refused.
@@ -717,25 +880,29 @@ declare class Orderlists {
      * @returns {Promise<{}>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsItemsList(listId: string, id?: string, productId?: string, sku?: string, name?: string, image?: string, quantity?: number, unit?: string, price?: number, taxRate?: number, costCenterId?: string, positionTexts?: string, customSku?: string, categorySlug?: string, subcategorySlug?: string, position?: number, metadata?: string, createdAt?: string, updatedAt?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
+    orderlistsItemsList(listId: string, id?: string, productId?: string, sku?: string, name?: string, image?: string, quantity?: number, unit?: string, price?: number, taxRate?: number, costCenterId?: string, positionTexts?: string, customSku?: string, categorySlug?: string, subcategorySlug?: string, position?: number, metadata?: string, externalId?: string, externalRefs?: string, sourceSyncedAt?: string, sourceData?: string, createdAt?: string, updatedAt?: string, limit?: number, offset?: number, order?: string): Promise<{}>;
     /**
      * A position is a whole saved line, not a pointer at a product. `name` is required and one of `product_id` / `sku` must be set — the two things the database itself insists on — and everything else is a snapshot of what the buyer saw. Nothing here deduplicates: adding the same article twice makes two positions, because it is the CART that merges lines by product and price, not the list. The new row takes the list's current position COUNT unless the payload names a `position` of its own, so it collides with an existing number whenever an earlier position was deleted from the middle. The list's `updated_at` is touched, which is what the default sort of GET /orderlists reads.
      *
      * @param {string} params.listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} params.name - The article name AS IT WAS when the position was saved. A snapshot on purpose: the list is the buyer's own record, so a renamed or withdrawn article still reads the way they wrote it down.
      * @param {string} params.categorySlug - The catalogue category the article sat in when the position was saved, as a slug. Kept so a long list can be grouped the way the shop groups it without a call to the catalogue.
-     * @param {string} params.costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. It survives into the ORDER position, which has a `cost_center` column; a CART line has none, so the cart conversion carries it in the line snapshot instead.
+     * @param {string} params.costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. A cart line has no column for it, so the cart conversion carries it in the line snapshot.
      * @param {string} params.customSku - The buyer's OWN article number for this article — what their purchasing system calls it, which is rarely what the shop calls it. Free text, and the field a B2B buyer searches their own lists by.
-     * @param {string} params.image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line and the order position in their snapshot, because neither has a column for it.
-     * @param {object} params.metadata - Free-form data the tenant keeps on the position. Never read by this app; it travels into the cart line / order position snapshot untouched. A write replaces the whole document rather than merging into it.
-     * @param {number} params.position - Sort order within the list, ascending — the order the positions collection returns by default and the order the conversions hand the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
-     * @param {string[]} params.positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; the order conversion joins them with newlines into the order position's single `position_text`, and the cart conversion carries the array in the line snapshot.
-     * @param {number} params.price - Unit price snapshot — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. It is a record, not a live price: the cart and the order reprice on their own terms, so this never becomes what somebody is charged.
-     * @param {string} params.productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the conversions check against.
+     * @param {string} params.externalId - The id this position has in the system that OWNS it — the line as the shop this tenant migrated from numbered it, usually the old list id and the line number. Unique per tenant where it is set. It is what makes a re-run of the migration update the line rather than append a second one, which on a list of two hundred positions is the difference between a correction and a mess.
+     * @param {object} params.externalRefs - Every OTHER system that knows this position, keyed by system name. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the position up by `external_id` and read this off the answer.
+     * @param {string} params.image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line's snapshot, because a cart line has no column for it.
+     * @param {object} params.metadata - Free-form data the tenant keeps on the position. Never read by this app; it is never copied into a cart line. A write replaces the whole document rather than merging into it.
+     * @param {number} params.position - Sort order within the list, ascending — the order the positions collection returns by default and the order the cart conversion hands the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
+     * @param {string[]} params.positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; a single string is accepted on a write and stored as a one-line array, anything else is a 400. The cart conversion carries the array in the line snapshot.
+     * @param {number} params.price - The price when saved — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. Informational only and never binding: the cart conversion prices every line through the prices app at the current price, and carries this one in the line snapshot as `saved_price`. A line the prices app cannot price is left out rather than sent at this price.
+     * @param {string} params.productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the cart conversion check against.
      * @param {number} params.quantity - How much of the article the list holds. Greater than zero — the database refuses the rest — and fractional to three decimals, because a B2B position may be 2.5 metres or 0.75 kilos.
      * @param {string} params.sku - The article number as the catalogue knows it — the alternative identity to `product_id`, and the one an ERP integration usually joins on.
+     * @param {object} params.sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} params.sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @param {string} params.subcategorySlug - The catalogue subcategory, as a slug. Same purpose as `category_slug`, one level down.
-     * @param {number} params.taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way, and the conversion forwards the number unchanged.
+     * @param {number} params.taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way. Informational like `price`: the cart line always takes the rate the prices app quotes, and carries this one in its snapshot as `saved_tax_rate`; where the prices app cannot tax the call, the conversion is refused rather than falling back to it.
      * @param {string} params.unit - The unit `quantity` counts in, in the tenant's own words. Deliberately open text and deliberately NOT a vocabulary: a B2B catalogue units in pieces, metres, kilos, rolls and pallets, and any closed list published here would be a guess.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListItem>}
@@ -746,6 +913,8 @@ declare class Orderlists {
         categorySlug?: string;
         costCenterId?: string;
         customSku?: string;
+        externalId?: string;
+        externalRefs?: object;
         image?: string;
         metadata?: object;
         position?: number;
@@ -754,6 +923,8 @@ declare class Orderlists {
         productId?: string;
         quantity?: number;
         sku?: string;
+        sourceData?: object;
+        sourceSyncedAt?: string;
         subcategorySlug?: string;
         taxRate?: number;
         unit?: string;
@@ -764,24 +935,28 @@ declare class Orderlists {
      * @param {string} listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} name - The article name AS IT WAS when the position was saved. A snapshot on purpose: the list is the buyer's own record, so a renamed or withdrawn article still reads the way they wrote it down.
      * @param {string} categorySlug - The catalogue category the article sat in when the position was saved, as a slug. Kept so a long list can be grouped the way the shop groups it without a call to the catalogue.
-     * @param {string} costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. It survives into the ORDER position, which has a `cost_center` column; a CART line has none, so the cart conversion carries it in the line snapshot instead.
+     * @param {string} costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. A cart line has no column for it, so the cart conversion carries it in the line snapshot.
      * @param {string} customSku - The buyer's OWN article number for this article — what their purchasing system calls it, which is rarely what the shop calls it. Free text, and the field a B2B buyer searches their own lists by.
-     * @param {string} image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line and the order position in their snapshot, because neither has a column for it.
-     * @param {object} metadata - Free-form data the tenant keeps on the position. Never read by this app; it travels into the cart line / order position snapshot untouched. A write replaces the whole document rather than merging into it.
-     * @param {number} position - Sort order within the list, ascending — the order the positions collection returns by default and the order the conversions hand the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
-     * @param {string[]} positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; the order conversion joins them with newlines into the order position's single `position_text`, and the cart conversion carries the array in the line snapshot.
-     * @param {number} price - Unit price snapshot — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. It is a record, not a live price: the cart and the order reprice on their own terms, so this never becomes what somebody is charged.
-     * @param {string} productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the conversions check against.
+     * @param {string} externalId - The id this position has in the system that OWNS it — the line as the shop this tenant migrated from numbered it, usually the old list id and the line number. Unique per tenant where it is set. It is what makes a re-run of the migration update the line rather than append a second one, which on a list of two hundred positions is the difference between a correction and a mess.
+     * @param {object} externalRefs - Every OTHER system that knows this position, keyed by system name. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the position up by `external_id` and read this off the answer.
+     * @param {string} image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line's snapshot, because a cart line has no column for it.
+     * @param {object} metadata - Free-form data the tenant keeps on the position. Never read by this app; it is never copied into a cart line. A write replaces the whole document rather than merging into it.
+     * @param {number} position - Sort order within the list, ascending — the order the positions collection returns by default and the order the cart conversion hands the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
+     * @param {string[]} positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; a single string is accepted on a write and stored as a one-line array, anything else is a 400. The cart conversion carries the array in the line snapshot.
+     * @param {number} price - The price when saved — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. Informational only and never binding: the cart conversion prices every line through the prices app at the current price, and carries this one in the line snapshot as `saved_price`. A line the prices app cannot price is left out rather than sent at this price.
+     * @param {string} productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the cart conversion check against.
      * @param {number} quantity - How much of the article the list holds. Greater than zero — the database refuses the rest — and fractional to three decimals, because a B2B position may be 2.5 metres or 0.75 kilos.
      * @param {string} sku - The article number as the catalogue knows it — the alternative identity to `product_id`, and the one an ERP integration usually joins on.
+     * @param {object} sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @param {string} subcategorySlug - The catalogue subcategory, as a slug. Same purpose as `category_slug`, one level down.
-     * @param {number} taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way, and the conversion forwards the number unchanged.
+     * @param {number} taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way. Informational like `price`: the cart line always takes the rate the prices app quotes, and carries this one in its snapshot as `saved_tax_rate`; where the prices app cannot tax the call, the conversion is refused rather than falling back to it.
      * @param {string} unit - The unit `quantity` counts in, in the tenant's own words. Deliberately open text and deliberately NOT a vocabulary: a B2B catalogue units in pieces, metres, kilos, rolls and pallets, and any closed list published here would be a guess.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListItem>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsItemsCreate(listId: string, name: string, categorySlug?: string, costCenterId?: string, customSku?: string, image?: string, metadata?: object, position?: number, positionTexts?: string[], price?: number, productId?: string, quantity?: number, sku?: string, subcategorySlug?: string, taxRate?: number, unit?: string): Promise<Models.OrderListItem>;
+    orderlistsItemsCreate(listId: string, name: string, categorySlug?: string, costCenterId?: string, customSku?: string, externalId?: string, externalRefs?: object, image?: string, metadata?: object, position?: number, positionTexts?: string[], price?: number, productId?: string, quantity?: number, sku?: string, sourceData?: object, sourceSyncedAt?: string, subcategorySlug?: string, taxRate?: number, unit?: string): Promise<Models.OrderListItem>;
     /**
      * Set semantics: what you send becomes the list's positions and everything else is deleted. Ids are NOT preserved — every row is dropped and rewritten, so a client holding position ids must re-read them — and an empty array empties the list. Both guards run before the first delete, so an oversized or unknown-article replace answers 400 with the list still holding exactly what it held. It is not a renumbering call: an entry that names no `position` takes its array index, one that names its own keeps it, so the array order is the default rather than an override. Writing is narrower than reading: the owner may always replace, and anyone else only when the list is shared with their own organization AND the tenant turned `shared_lists_editable` on — otherwise a caller who can READ the list through the sharing rule is answered 403 here. The delete-then-insert is not wrapped in a transaction of its own, so a client should treat a failed replace as a list of unknown contents and re-read it rather than retry blind. The answer is the whole new set in the same paged envelope every other collection uses, with `limit`, `offset` and `total` describing exactly what was written; the list's `updated_at` is touched, which moves it to the front of the default GET /orderlists page.
      *
@@ -854,19 +1029,23 @@ declare class Orderlists {
      * @param {string} params.listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} params.id - The position, by id. A position that belongs to another list answers 404.
      * @param {string} params.categorySlug - The catalogue category the article sat in when the position was saved, as a slug. Kept so a long list can be grouped the way the shop groups it without a call to the catalogue.
-     * @param {string} params.costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. It survives into the ORDER position, which has a `cost_center` column; a CART line has none, so the cart conversion carries it in the line snapshot instead.
+     * @param {string} params.costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. A cart line has no column for it, so the cart conversion carries it in the line snapshot.
      * @param {string} params.customSku - The buyer's OWN article number for this article — what their purchasing system calls it, which is rarely what the shop calls it. Free text, and the field a B2B buyer searches their own lists by.
-     * @param {string} params.image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line and the order position in their snapshot, because neither has a column for it.
-     * @param {object} params.metadata - Free-form data the tenant keeps on the position. Never read by this app; it travels into the cart line / order position snapshot untouched. A write replaces the whole document rather than merging into it.
+     * @param {string} params.externalId - The id this position has in the system that OWNS it — the line as the shop this tenant migrated from numbered it, usually the old list id and the line number. Unique per tenant where it is set. It is what makes a re-run of the migration update the line rather than append a second one, which on a list of two hundred positions is the difference between a correction and a mess.
+     * @param {object} params.externalRefs - Every OTHER system that knows this position, keyed by system name. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the position up by `external_id` and read this off the answer.
+     * @param {string} params.image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line's snapshot, because a cart line has no column for it.
+     * @param {object} params.metadata - Free-form data the tenant keeps on the position. Never read by this app; it is never copied into a cart line. A write replaces the whole document rather than merging into it.
      * @param {string} params.name - The article name AS IT WAS when the position was saved. A snapshot on purpose: the list is the buyer's own record, so a renamed or withdrawn article still reads the way they wrote it down.
-     * @param {number} params.position - Sort order within the list, ascending — the order the positions collection returns by default and the order the conversions hand the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
-     * @param {string[]} params.positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; the order conversion joins them with newlines into the order position's single `position_text`, and the cart conversion carries the array in the line snapshot.
-     * @param {number} params.price - Unit price snapshot — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. It is a record, not a live price: the cart and the order reprice on their own terms, so this never becomes what somebody is charged.
-     * @param {string} params.productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the conversions check against.
+     * @param {number} params.position - Sort order within the list, ascending — the order the positions collection returns by default and the order the cart conversion hands the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
+     * @param {string[]} params.positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; a single string is accepted on a write and stored as a one-line array, anything else is a 400. The cart conversion carries the array in the line snapshot.
+     * @param {number} params.price - The price when saved — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. Informational only and never binding: the cart conversion prices every line through the prices app at the current price, and carries this one in the line snapshot as `saved_price`. A line the prices app cannot price is left out rather than sent at this price.
+     * @param {string} params.productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the cart conversion check against.
      * @param {number} params.quantity - How much of the article the list holds. Greater than zero — the database refuses the rest — and fractional to three decimals, because a B2B position may be 2.5 metres or 0.75 kilos.
      * @param {string} params.sku - The article number as the catalogue knows it — the alternative identity to `product_id`, and the one an ERP integration usually joins on.
+     * @param {object} params.sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} params.sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @param {string} params.subcategorySlug - The catalogue subcategory, as a slug. Same purpose as `category_slug`, one level down.
-     * @param {number} params.taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way, and the conversion forwards the number unchanged.
+     * @param {number} params.taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way. Informational like `price`: the cart line always takes the rate the prices app quotes, and carries this one in its snapshot as `saved_tax_rate`; where the prices app cannot tax the call, the conversion is refused rather than falling back to it.
      * @param {string} params.unit - The unit `quantity` counts in, in the tenant's own words. Deliberately open text and deliberately NOT a vocabulary: a B2B catalogue units in pieces, metres, kilos, rolls and pallets, and any closed list published here would be a guess.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListItem>}
@@ -877,6 +1056,8 @@ declare class Orderlists {
         categorySlug?: string;
         costCenterId?: string;
         customSku?: string;
+        externalId?: string;
+        externalRefs?: object;
         image?: string;
         metadata?: object;
         name?: string;
@@ -886,6 +1067,8 @@ declare class Orderlists {
         productId?: string;
         quantity?: number;
         sku?: string;
+        sourceData?: object;
+        sourceSyncedAt?: string;
         subcategorySlug?: string;
         taxRate?: number;
         unit?: string;
@@ -896,25 +1079,29 @@ declare class Orderlists {
      * @param {string} listId - The list the position belongs to. An id no list in this tenant has — or one the caller may not read — answers 404.
      * @param {string} id - The position, by id. A position that belongs to another list answers 404.
      * @param {string} categorySlug - The catalogue category the article sat in when the position was saved, as a slug. Kept so a long list can be grouped the way the shop groups it without a call to the catalogue.
-     * @param {string} costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. It survives into the ORDER position, which has a `cost_center` column; a CART line has none, so the cart conversion carries it in the line snapshot instead.
+     * @param {string} costCenterId - The cost centre this position books to, as the tenant's ERP names it. Free text and not our enum. A cart line has no column for it, so the cart conversion carries it in the line snapshot.
      * @param {string} customSku - The buyer's OWN article number for this article — what their purchasing system calls it, which is rarely what the shop calls it. Free text, and the field a B2B buyer searches their own lists by.
-     * @param {string} image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line and the order position in their snapshot, because neither has a column for it.
-     * @param {object} metadata - Free-form data the tenant keeps on the position. Never read by this app; it travels into the cart line / order position snapshot untouched. A write replaces the whole document rather than merging into it.
+     * @param {string} externalId - The id this position has in the system that OWNS it — the line as the shop this tenant migrated from numbered it, usually the old list id and the line number. Unique per tenant where it is set. It is what makes a re-run of the migration update the line rather than append a second one, which on a list of two hundred positions is the difference between a correction and a mess.
+     * @param {object} externalRefs - Every OTHER system that knows this position, keyed by system name. Answered on read and carrying no query parameter of its own — a jsonb field is compared as a WHOLE document, so a filter over part of one is refused. Look the position up by `external_id` and read this off the answer.
+     * @param {string} image - The article image at the time the position was saved, as a URL or a path — a snapshot like `name`, and nothing here refreshes it. It rides into the cart line's snapshot, because a cart line has no column for it.
+     * @param {object} metadata - Free-form data the tenant keeps on the position. Never read by this app; it is never copied into a cart line. A write replaces the whole document rather than merging into it.
      * @param {string} name - The article name AS IT WAS when the position was saved. A snapshot on purpose: the list is the buyer's own record, so a renamed or withdrawn article still reads the way they wrote it down.
-     * @param {number} position - Sort order within the list, ascending — the order the positions collection returns by default and the order the conversions hand the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
-     * @param {string[]} positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; the order conversion joins them with newlines into the order position's single `position_text`, and the cart conversion carries the array in the line snapshot.
-     * @param {number} price - Unit price snapshot — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. It is a record, not a live price: the cart and the order reprice on their own terms, so this never becomes what somebody is charged.
-     * @param {string} productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the conversions check against.
+     * @param {number} position - Sort order within the list, ascending — the order the positions collection returns by default and the order the cart conversion hands the lines over in. Neither dense nor unique: an add with no `position` of its own takes the list's current position COUNT, so removing a position from the middle and adding another leaves two rows sharing a number. A bulk replace assigns the array index the same way, so it renumbers only the positions it is not given explicitly.
+     * @param {string[]} positionTexts - Per-position notes the buyer wrote — an engraving, a delivery instruction, a reference for the picker. An ARRAY OF STRINGS, one entry per line; a single string is accepted on a write and stored as a one-line array, anything else is a 400. The cart conversion carries the array in the line snapshot.
+     * @param {number} price - The price when saved — what the buyer saw when they saved the position, in whatever way the catalogue quoted it. Informational only and never binding: the cart conversion prices every line through the prices app at the current price, and carries this one in the line snapshot as `saved_price`. A line the prices app cannot price is left out rather than sent at this price.
+     * @param {string} productId - The catalogue product this position stands for. One of `product_id` / `sku` must be set (the database enforces it); this is the identity the products app answers to, and the one `reject_unknown_articles` and the cart conversion check against.
      * @param {number} quantity - How much of the article the list holds. Greater than zero — the database refuses the rest — and fractional to three decimals, because a B2B position may be 2.5 metres or 0.75 kilos.
      * @param {string} sku - The article number as the catalogue knows it — the alternative identity to `product_id`, and the one an ERP integration usually joins on.
+     * @param {object} sourceData - What the source said about this row, kept as it said it: `{"system": …, "etag": …, "raw": {…}}`. The `etag` is what a write-back has to send back in `If-Match`, and there is nowhere else to keep it between two runs. `raw` holds the source fields this app does not model, so an edit here does not silently throw them away.
+     * @param {string} sourceSyncedAt - When this row was last confirmed against its source. A delta run asks the source for what changed since it, and an operator reads it to see that a feed has gone quiet. An edit made HERE does not touch it — it records when the source was last seen, not when the row changed.
      * @param {string} subcategorySlug - The catalogue subcategory, as a slug. Same purpose as `category_slug`, one level down.
-     * @param {number} taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way, and the conversion forwards the number unchanged.
+     * @param {number} taxRate - The VAT rate that applied when the position was saved, as a PERCENT (19 = 19 %). Four decimals so a rate like 8.25 % survives; carts and orders document the same field the same way. Informational like `price`: the cart line always takes the rate the prices app quotes, and carries this one in its snapshot as `saved_tax_rate`; where the prices app cannot tax the call, the conversion is refused rather than falling back to it.
      * @param {string} unit - The unit `quantity` counts in, in the tenant's own words. Deliberately open text and deliberately NOT a vocabulary: a B2B catalogue units in pieces, metres, kilos, rolls and pallets, and any closed list published here would be a guess.
      * @throws {RevenexxException}
      * @returns {Promise<Models.OrderListItem>}
      * @deprecated Use the object parameter style method for a better developer experience.
      */
-    orderlistsItemsUpdate(listId: string, id: string, categorySlug?: string, costCenterId?: string, customSku?: string, image?: string, metadata?: object, name?: string, position?: number, positionTexts?: string[], price?: number, productId?: string, quantity?: number, sku?: string, subcategorySlug?: string, taxRate?: number, unit?: string): Promise<Models.OrderListItem>;
+    orderlistsItemsUpdate(listId: string, id: string, categorySlug?: string, costCenterId?: string, customSku?: string, externalId?: string, externalRefs?: object, image?: string, metadata?: object, name?: string, position?: number, positionTexts?: string[], price?: number, productId?: string, quantity?: number, sku?: string, sourceData?: object, sourceSyncedAt?: string, subcategorySlug?: string, taxRate?: number, unit?: string): Promise<Models.OrderListItem>;
 }
 
 export { Orderlists };