@revenexx/node 0.1.1 → 0.2.0

package/dist/services/customers.mjs

@@ -5,21 +5,59 @@ var Customers = class {
   constructor(client) {
     this.client = client;
   }
-  customersAuthLogin(paramsOrFirst, ...rest) {
+  customersAuthHandoff(paramsOrFirst, ...rest) {
     let params;
     if (paramsOrFirst && typeof paramsOrFirst === "object" && !Array.isArray(paramsOrFirst)) {
       params = paramsOrFirst || {};
     } else {
       params = {
-        email: paramsOrFirst,
-        password: rest[0]
+        handoffKey: paramsOrFirst,
+        contactId: rest[0],
+        email: rest[1]
       };
     }
+    const handoffKey = params.handoffKey;
+    const contactId = params.contactId;
     const email = params.email;
-    const password = params.password;
-    if (typeof email === "undefined") {
-      throw new RevenexxException('Missing required parameter: "email"');
+    if (typeof handoffKey === "undefined") {
+      throw new RevenexxException('Missing required parameter: "handoffKey"');
+    }
+    const apiPath = "/v1/customers/auth/handoff";
+    const apiPayload = {};
+    if (typeof contactId !== "undefined") {
+      apiPayload["contact_id"] = contactId;
+    }
+    if (typeof email !== "undefined") {
+      apiPayload["email"] = email;
+    }
+    if (typeof handoffKey !== "undefined") {
+      apiPayload["handoff_key"] = handoffKey;
+    }
+    const uri = new URL(this.client.config.endpoint + apiPath);
+    const apiHeaders = {
+      "content-type": "application/json"
+    };
+    return this.client.call(
+      "post",
+      uri,
+      apiHeaders,
+      apiPayload
+    );
+  }
+  customersAuthLogin(paramsOrFirst, ...rest) {
+    let params;
+    if (paramsOrFirst && typeof paramsOrFirst === "object" && !Array.isArray(paramsOrFirst)) {
+      params = paramsOrFirst || {};
+    } else {
+      params = {
+        password: paramsOrFirst,
+        email: rest[0],
+        identifier: rest[1]
+      };
     }
+    const password = params.password;
+    const email = params.email;
+    const identifier = params.identifier;
     if (typeof password === "undefined") {
       throw new RevenexxException('Missing required parameter: "password"');
     }
@@ -28,6 +66,9 @@ var Customers = class {
     if (typeof email !== "undefined") {
       apiPayload["email"] = email;
     }
+    if (typeof identifier !== "undefined") {
+      apiPayload["identifier"] = identifier;
+    }
     if (typeof password !== "undefined") {
       apiPayload["password"] = password;
     }
@@ -159,12 +200,15 @@ var Customers = class {
       params = paramsOrFirst || {};
     } else {
       params = {
-        userId: paramsOrFirst,
-        sessionId: rest[0]
+        sessionId: paramsOrFirst,
+        userId: rest[0]
       };
     }
-    const userId = params.userId;
     const sessionId = params.sessionId;
+    const userId = params.userId;
+    if (typeof sessionId === "undefined") {
+      throw new RevenexxException('Missing required parameter: "sessionId"');
+    }
     if (typeof userId === "undefined") {
       throw new RevenexxException('Missing required parameter: "userId"');
     }
@@ -570,24 +614,26 @@ var Customers = class {
       apiPayload
     );
   }
-  customersPrincipalResolve(paramsOrFirst) {
+  customersPrincipalResolve(paramsOrFirst, ...rest) {
     let params;
-    if (paramsOrFirst && typeof paramsOrFirst === "object" && !Array.isArray(paramsOrFirst)) {
+    if (!paramsOrFirst || paramsOrFirst && typeof paramsOrFirst === "object" && !Array.isArray(paramsOrFirst)) {
       params = paramsOrFirst || {};
     } else {
       params = {
-        contactId: paramsOrFirst
+        contactId: paramsOrFirst,
+        userId: rest[0]
       };
     }
     const contactId = params.contactId;
-    if (typeof contactId === "undefined") {
-      throw new RevenexxException('Missing required parameter: "contactId"');
-    }
+    const userId = params.userId;
     const apiPath = "/v1/customers/principal/resolve";
     const apiPayload = {};
     if (typeof contactId !== "undefined") {
       apiPayload["contact_id"] = contactId;
     }
+    if (typeof userId !== "undefined") {
+      apiPayload["user_id"] = userId;
+    }
     const uri = new URL(this.client.config.endpoint + apiPath);
     const apiHeaders = {
       "content-type": "application/json"

package/dist/services/customers.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/services/customers.ts"],"names":[],"mappings":";AAAA,SAAS,yBAA+D;AAIjE,IAAM,YAAN,MAAgB;AAAA,EAGnB,YAAY,QAAgB;AACxB,SAAK,SAAS;AAAA,EAClB;AAAA,EAqBA,mBACI,kBACG,MAC8B;AACjC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,UAAU,KAAK,CAAC;AAAA,MACpB;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,WAAW,OAAO;AAExB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,oBACI,kBACG,MACQ;AACX,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,WAAW;AAAA,QACX,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,YAAY,OAAO;AACzB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,cAAc,aAAa;AAClC,YAAM,IAAI,kBAAkB,yCAAyC;AAAA,IACzE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,uBACI,kBACG,MACyC;AAC5C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,KAAK,KAAK,CAAC;AAAA,MACf;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,MAAM,OAAO;AAEnB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,8BACI,kBACG,MACyC;AAC5C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,gBACI,kBACG,MAC2B;AAC9B,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,WAAW,KAAK,CAAC;AAAA,MACrB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,YAAY,OAAO;AAEzB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,0BACI,kBACG,MAC4C;AAC/C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAyBA,iCACI,kBACG,MACmD;AACtD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,aAAa;AAAA,QACb,MAAM,KAAK,CAAC;AAAA,QACZ,eAAe,KAAK,CAAC;AAAA,QACrB,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,cAAc,OAAO;AAC3B,UAAM,OAAO,OAAO;AACpB,UAAM,gBAAgB,OAAO;AAC7B,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,gBAAgB,aAAa;AACpC,YAAM,IAAI,kBAAkB,2CAA2C;AAAA,IAC3E;AACA,QAAI,OAAO,SAAS,aAAa;AAC7B,YAAM,IAAI,kBAAkB,oCAAoC;AAAA,IACpE;AACA,QAAI,OAAO,kBAAkB,aAAa;AACtC,YAAM,IAAI,kBAAkB,6CAA6C;AAAA,IAC7E;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,gBAAgB,aAAa;AACpC,iBAAW,cAAc,IAAI;AAAA,IACjC;AACA,QAAI,OAAO,SAAS,aAAa;AAC7B,iBAAW,MAAM,IAAI;AAAA,IACzB;AACA,QAAI,OAAO,kBAAkB,aAAa;AACtC,iBAAW,gBAAgB,IAAI;AAAA,IACnC;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAmBA,iBACI,eACsC;AACtC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,MACX;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AAErB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,wBACI,kBACG,MACmC;AACtC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,sBACI,kBACG,MACwC;AAC3C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,KAAK,KAAK,CAAC;AAAA,MACf;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,MAAM,OAAO;AAEnB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAuBA,6BACI,kBACG,MAC+C;AAClD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,CAAC;AAAA,QACd,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,WAAW,OAAO;AACxB,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqCA,sBACI,kBACG,MACiC;AACpC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,UAAU,KAAK,CAAC;AAAA,QAChB,WAAW,KAAK,CAAC;AAAA,QACjB,UAAU,KAAK,CAAC;AAAA,QAChB,QAAQ,KAAK,CAAC;AAAA,QACd,gBAAgB,KAAK,CAAC;AAAA,QACtB,kBAAkB,KAAK,CAAC;AAAA,QACxB,KAAK,KAAK,CAAC;AAAA,QACX,OAAO,KAAK,CAAC;AAAA,QACb,iBAAiB,KAAK,CAAC;AAAA,MAC3B;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,WAAW,OAAO;AACxB,UAAM,YAAY,OAAO;AACzB,UAAM,WAAW,OAAO;AACxB,UAAM,SAAS,OAAO;AACtB,UAAM,iBAAiB,OAAO;AAC9B,UAAM,mBAAmB,OAAO;AAChC,UAAM,MAAM,OAAO;AACnB,UAAM,QAAQ,OAAO;AACrB,UAAM,kBAAkB,OAAO;AAE/B,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,WAAW,IAAI;AAAA,IAC9B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,mBAAmB,aAAa;AACvC,iBAAW,iBAAiB,IAAI;AAAA,IACpC;AACA,QAAI,OAAO,qBAAqB,aAAa;AACzC,iBAAW,mBAAmB,IAAI;AAAA,IACtC;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,oBAAoB,aAAa;AACxC,iBAAW,kBAAkB,IAAI;AAAA,IACrC;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,0BACI,kBACG,MAC4C;AAC/C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,MAAM,OAAO;AACnB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,iCACI,kBACG,MACmD;AACtD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAmBA,0BACI,eACkC;AAClC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,WAAW;AAAA,MACf;AAAA,IACJ;AAEA,UAAM,YAAY,OAAO;AAEzB,QAAI,OAAO,cAAc,aAAa;AAClC,YAAM,IAAI,kBAAkB,yCAAyC;AAAA,IACzE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ","sourcesContent":["import { RevenexxException, Client, type Payload, UploadProgress } from '../client';\nimport type { Models } from '../models';\n\n\nexport class Customers {\n    client: Client;\n\n    constructor(client: Client) {\n        this.client = client;\n    }\n\n    /**\n     * An email and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.\n     *\n     * @param {string} params.email - The buyer's login address — the same one the contact carries.\n     * @param {string} params.password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthLoginResponse>}\n     */\n    customersAuthLogin(params: { email: string, password: string }): Promise<Models.AuthLoginResponse>;\n    /**\n     * An email and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.\n     *\n     * @param {string} email - The buyer's login address — the same one the contact carries.\n     * @param {string} password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthLoginResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthLogin(email: string, password: string): Promise<Models.AuthLoginResponse>;\n    customersAuthLogin(\n        paramsOrFirst: { email: string, password: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthLoginResponse> {\n        let params: { email: string, password: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, password: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                password: rest[0] as string            \n            };\n        }\n        \n        const email = params.email;\n        const password = params.password;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n\n        const apiPath = '/v1/customers/auth/login';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: \"blocked\"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.\n     *\n     * @param {string} params.sessionId - The session to revoke — `session.$id` from the login.\n     * @param {string} params.userId - The platform user — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<{}>}\n     */\n    customersAuthLogout(params: { sessionId: string, userId: string }): Promise<{}>;\n    /**\n     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: \"blocked\"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.\n     *\n     * @param {string} sessionId - The session to revoke — `session.$id` from the login.\n     * @param {string} userId - The platform user — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<{}>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthLogout(sessionId: string, userId: string): Promise<{}>;\n    customersAuthLogout(\n        paramsOrFirst: { sessionId: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<{}> {\n        let params: { sessionId: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { sessionId: string, userId: string };\n        } else {\n            params = {\n                sessionId: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const sessionId = params.sessionId;\n        const userId = params.userId;\n\n        if (typeof sessionId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"sessionId\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/logout';\n        const apiPayload: Payload = {};\n        if (typeof sessionId !== 'undefined') {\n            apiPayload['session_id'] = sessionId;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Creates the account when the address is new, which makes this a registration path as much as a sign-in one — and why an address nobody holds is not distinguished in the answer. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.\n     *\n     * @param {string} params.email - Who to send the link to. An address that has never been seen creates an account rather than failing.\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}\n     */\n    customersAuthMagicLink(params: { email: string, url: string }): Promise<Models.DefaultAuthMagicLinkResponse>;\n    /**\n     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Creates the account when the address is new, which makes this a registration path as much as a sign-in one — and why an address nobody holds is not distinguished in the answer. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.\n     *\n     * @param {string} email - Who to send the link to. An address that has never been seen creates an account rather than failing.\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMagicLink(email: string, url: string): Promise<Models.DefaultAuthMagicLinkResponse>;\n    customersAuthMagicLink(\n        paramsOrFirst: { email: string, url: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthMagicLinkResponse> {\n        let params: { email: string, url: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, url: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                url: rest[0] as string            \n            };\n        }\n        \n        const email = params.email;\n        const url = params.url;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n\n        const apiPath = '/v1/customers/auth/magic-link';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.\n     *\n     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}\n     */\n    customersAuthMagicLinkConfirm(params: { secret: string, userId: string }): Promise<Models.AuthMagicLinkConfirmResponse>;\n    /**\n     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.\n     *\n     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMagicLinkConfirm(secret: string, userId: string): Promise<Models.AuthMagicLinkConfirmResponse>;\n    customersAuthMagicLinkConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthMagicLinkConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/magic-link';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.\n     *\n     * @param {string} params.userId - The platform user to resolve — `session.userId` from the login.\n     * @param {string} params.sessionId - Optional session to verify. Pass it to ask \"is this session still alive?\" (a revoked one is then a 401); omit it to only ask who a user is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMeResponse>}\n     */\n    customersAuthMe(params: { userId: string, sessionId?: string }): Promise<Models.AuthMeResponse>;\n    /**\n     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.\n     *\n     * @param {string} userId - The platform user to resolve — `session.userId` from the login.\n     * @param {string} sessionId - Optional session to verify. Pass it to ask \"is this session still alive?\" (a revoked one is then a 401); omit it to only ask who a user is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMeResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMe(userId: string, sessionId?: string): Promise<Models.AuthMeResponse>;\n    customersAuthMe(\n        paramsOrFirst: { userId: string, sessionId?: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthMeResponse> {\n        let params: { userId: string, sessionId?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { userId: string, sessionId?: string };\n        } else {\n            params = {\n                userId: paramsOrFirst as string,\n                sessionId: rest[0] as string            \n            };\n        }\n        \n        const userId = params.userId;\n        const sessionId = params.sessionId;\n\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/me';\n        const apiPayload: Payload = {};\n        if (typeof sessionId !== 'undefined') {\n            apiPayload['session_id'] = sessionId;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.\n     *\n     * @param {string} params.userId - The platform user being challenged.\n     * @param {string} params.factor - Which factor to challenge. Defaults to `email`, the only one this route mails.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}\n     */\n    customersAuthMfaChallenge(params: { userId: string, factor?: string }): Promise<Models.DefaultAuthMfaChallengeResponse>;\n    /**\n     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.\n     *\n     * @param {string} userId - The platform user being challenged.\n     * @param {string} factor - Which factor to challenge. Defaults to `email`, the only one this route mails.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMfaChallenge(userId: string, factor?: string): Promise<Models.DefaultAuthMfaChallengeResponse>;\n    customersAuthMfaChallenge(\n        paramsOrFirst: { userId: string, factor?: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthMfaChallengeResponse> {\n        let params: { userId: string, factor?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { userId: string, factor?: string };\n        } else {\n            params = {\n                userId: paramsOrFirst as string,\n                factor: rest[0] as string            \n            };\n        }\n        \n        const userId = params.userId;\n        const factor = params.factor;\n\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/mfa/challenge';\n        const apiPayload: Payload = {};\n        if (typeof factor !== 'undefined') {\n            apiPayload['factor'] = factor;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.\n     *\n     * @param {string} params.challengeId - The `$id` the send answered with.\n     * @param {string} params.code - What the buyer typed.\n     * @param {string} params.sessionSecret - The same session the challenge was created with.\n     * @param {string} params.userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}\n     */\n    customersAuthMfaChallengeConfirm(params: { challengeId: string, code: string, sessionSecret: string, userId?: string }): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;\n    /**\n     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.\n     *\n     * @param {string} challengeId - The `$id` the send answered with.\n     * @param {string} code - What the buyer typed.\n     * @param {string} sessionSecret - The same session the challenge was created with.\n     * @param {string} userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMfaChallengeConfirm(challengeId: string, code: string, sessionSecret: string, userId?: string): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;\n    customersAuthMfaChallengeConfirm(\n        paramsOrFirst: { challengeId: string, code: string, sessionSecret: string, userId?: string } | string,\n        ...rest: [(string)?, (string)?, (string)?]    \n    ): Promise<Models.DefaultAuthMfaChallengeConfirmResponse> {\n        let params: { challengeId: string, code: string, sessionSecret: string, userId?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { challengeId: string, code: string, sessionSecret: string, userId?: string };\n        } else {\n            params = {\n                challengeId: paramsOrFirst as string,\n                code: rest[0] as string,\n                sessionSecret: rest[1] as string,\n                userId: rest[2] as string            \n            };\n        }\n        \n        const challengeId = params.challengeId;\n        const code = params.code;\n        const sessionSecret = params.sessionSecret;\n        const userId = params.userId;\n\n        if (typeof challengeId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"challengeId\"');\n        }\n        if (typeof code === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"code\"');\n        }\n        if (typeof sessionSecret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"sessionSecret\"');\n        }\n\n        const apiPath = '/v1/customers/auth/mfa/challenge';\n        const apiPayload: Payload = {};\n        if (typeof challengeId !== 'undefined') {\n            apiPayload['challenge_id'] = challengeId;\n        }\n        if (typeof code !== 'undefined') {\n            apiPayload['code'] = code;\n        }\n        if (typeof sessionSecret !== 'undefined') {\n            apiPayload['session_secret'] = sessionSecret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`.\n     *\n     * @param {string} params.email - Who to send the code to. As with the sign-in link, an unknown address creates an account rather than failing.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthOtpResponse>}\n     */\n    customersAuthOtp(params: { email: string }): Promise<Models.DefaultAuthOtpResponse>;\n    /**\n     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`.\n     *\n     * @param {string} email - Who to send the code to. As with the sign-in link, an unknown address creates an account rather than failing.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthOtpResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthOtp(email: string): Promise<Models.DefaultAuthOtpResponse>;\n    customersAuthOtp(\n        paramsOrFirst: { email: string } | string    \n    ): Promise<Models.DefaultAuthOtpResponse> {\n        let params: { email: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string            \n            };\n        }\n        \n        const email = params.email;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n\n        const apiPath = '/v1/customers/auth/otp';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.\n     *\n     * @param {string} params.secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed code carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthOtpConfirmResponse>}\n     */\n    customersAuthOtpConfirm(params: { secret: string, userId: string }): Promise<Models.AuthOtpConfirmResponse>;\n    /**\n     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.\n     *\n     * @param {string} secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed code carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthOtpConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthOtpConfirm(secret: string, userId: string): Promise<Models.AuthOtpConfirmResponse>;\n    customersAuthOtpConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthOtpConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/otp';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. Nothing about the contact changes; the password only moves in step two.\n     *\n     * @param {string} params.email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}\n     */\n    customersAuthRecovery(params: { email: string, url: string }): Promise<Models.DefaultAuthRecoveryResponse>;\n    /**\n     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. Nothing about the contact changes; the password only moves in step two.\n     *\n     * @param {string} email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRecovery(email: string, url: string): Promise<Models.DefaultAuthRecoveryResponse>;\n    customersAuthRecovery(\n        paramsOrFirst: { email: string, url: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthRecoveryResponse> {\n        let params: { email: string, url: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, url: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                url: rest[0] as string            \n            };\n        }\n        \n        const email = params.email;\n        const url = params.url;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n\n        const apiPath = '/v1/customers/auth/recovery';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.\n     *\n     * @param {string} params.password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.\n     * @param {string} params.secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}\n     */\n    customersAuthRecoveryConfirm(params: { password: string, secret: string, userId: string }): Promise<Models.DefaultAuthRecoveryConfirmResponse>;\n    /**\n     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.\n     *\n     * @param {string} password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.\n     * @param {string} secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRecoveryConfirm(password: string, secret: string, userId: string): Promise<Models.DefaultAuthRecoveryConfirmResponse>;\n    customersAuthRecoveryConfirm(\n        paramsOrFirst: { password: string, secret: string, userId: string } | string,\n        ...rest: [(string)?, (string)?]    \n    ): Promise<Models.DefaultAuthRecoveryConfirmResponse> {\n        let params: { password: string, secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { password: string, secret: string, userId: string };\n        } else {\n            params = {\n                password: paramsOrFirst as string,\n                secret: rest[0] as string,\n                userId: rest[1] as string            \n            };\n        }\n        \n        const password = params.password;\n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/recovery';\n        const apiPayload: Payload = {};\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.\n     *\n     * @param {string} params.email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.\n     * @param {string} params.password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.\n     * @param {string} params.firstName - Given name. Optional: an ERP import often has only a mailbox.\n     * @param {string} params.lastName - Family name. Optional for the same reason.\n     * @param {string} params.locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.\n     * @param {string} params.organizationId - JOIN an existing company — the invite shape. Neither b2b_registration_enabled nor b2c_registration_enabled applies to it.\n     * @param {string} params.organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.\n     * @param {string} params.url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.\n     * @param {string} params.vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.\n     * @param {string} params.verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthRegisterResponse>}\n     */\n    customersAuthRegister(params: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string }): Promise<Models.AuthRegisterResponse>;\n    /**\n     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.\n     *\n     * @param {string} email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.\n     * @param {string} password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.\n     * @param {string} firstName - Given name. Optional: an ERP import often has only a mailbox.\n     * @param {string} lastName - Family name. Optional for the same reason.\n     * @param {string} locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.\n     * @param {string} organizationId - JOIN an existing company — the invite shape. Neither b2b_registration_enabled nor b2c_registration_enabled applies to it.\n     * @param {string} organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.\n     * @param {string} url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.\n     * @param {string} vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.\n     * @param {string} verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthRegisterResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRegister(email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string): Promise<Models.AuthRegisterResponse>;\n    customersAuthRegister(\n        paramsOrFirst: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string } | string,\n        ...rest: [(string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?]    \n    ): Promise<Models.AuthRegisterResponse> {\n        let params: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                password: rest[0] as string,\n                firstName: rest[1] as string,\n                lastName: rest[2] as string,\n                locale: rest[3] as string,\n                organizationId: rest[4] as string,\n                organizationName: rest[5] as string,\n                url: rest[6] as string,\n                vatId: rest[7] as string,\n                verificationUrl: rest[8] as string            \n            };\n        }\n        \n        const email = params.email;\n        const password = params.password;\n        const firstName = params.firstName;\n        const lastName = params.lastName;\n        const locale = params.locale;\n        const organizationId = params.organizationId;\n        const organizationName = params.organizationName;\n        const url = params.url;\n        const vatId = params.vatId;\n        const verificationUrl = params.verificationUrl;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n\n        const apiPath = '/v1/customers/auth/register';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof firstName !== 'undefined') {\n            apiPayload['first_name'] = firstName;\n        }\n        if (typeof lastName !== 'undefined') {\n            apiPayload['last_name'] = lastName;\n        }\n        if (typeof locale !== 'undefined') {\n            apiPayload['locale'] = locale;\n        }\n        if (typeof organizationId !== 'undefined') {\n            apiPayload['organization_id'] = organizationId;\n        }\n        if (typeof organizationName !== 'undefined') {\n            apiPayload['organization_name'] = organizationName;\n        }\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        if (typeof vatId !== 'undefined') {\n            apiPayload['vat_id'] = vatId;\n        }\n        if (typeof verificationUrl !== 'undefined') {\n            apiPayload['verification_url'] = verificationUrl;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.\n     *\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @param {string} params.userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationResponse>}\n     */\n    customersAuthVerification(params: { url: string, userId: string }): Promise<Models.DefaultAuthVerificationResponse>;\n    /**\n     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.\n     *\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @param {string} userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthVerification(url: string, userId: string): Promise<Models.DefaultAuthVerificationResponse>;\n    customersAuthVerification(\n        paramsOrFirst: { url: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthVerificationResponse> {\n        let params: { url: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { url: string, userId: string };\n        } else {\n            params = {\n                url: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const url = params.url;\n        const userId = params.userId;\n\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/verification';\n        const apiPayload: Payload = {};\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.\n     *\n     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}\n     */\n    customersAuthVerificationConfirm(params: { secret: string, userId: string }): Promise<Models.DefaultAuthVerificationConfirmResponse>;\n    /**\n     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.\n     *\n     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthVerificationConfirm(secret: string, userId: string): Promise<Models.DefaultAuthVerificationConfirmResponse>;\n    customersAuthVerificationConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthVerificationConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/verification';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The capability the API gateway calls to turn a caller's X-Revenexx-Principal assertion into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed storefront request — one contact read plus the tenant's role map. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.\n     *\n     * @param {string} params.contactId - The contact the caller is acting for.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.ContactPermissions>}\n     */\n    customersPrincipalResolve(params: { contactId: string }): Promise<Models.ContactPermissions>;\n    /**\n     * The capability the API gateway calls to turn a caller's X-Revenexx-Principal assertion into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed storefront request — one contact read plus the tenant's role map. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.\n     *\n     * @param {string} contactId - The contact the caller is acting for.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.ContactPermissions>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersPrincipalResolve(contactId: string): Promise<Models.ContactPermissions>;\n    customersPrincipalResolve(\n        paramsOrFirst: { contactId: string } | string    \n    ): Promise<Models.ContactPermissions> {\n        let params: { contactId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { contactId: string };\n        } else {\n            params = {\n                contactId: paramsOrFirst as string            \n            };\n        }\n        \n        const contactId = params.contactId;\n\n        if (typeof contactId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"contactId\"');\n        }\n\n        const apiPath = '/v1/customers/principal/resolve';\n        const apiPayload: Payload = {};\n        if (typeof contactId !== 'undefined') {\n            apiPayload['contact_id'] = contactId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n}\n"]}
+{"version":3,"sources":["../../src/services/customers.ts"],"names":[],"mappings":";AAAA,SAAS,yBAA+D;AAKjE,IAAM,YAAN,MAAgB;AAAA,EAGnB,YAAY,QAAgB;AACxB,SAAK,SAAS;AAAA,EAClB;AAAA,EAuBA,qBACI,kBACG,MACgC;AACnC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,YAAY;AAAA,QACZ,WAAW,KAAK,CAAC;AAAA,QACjB,OAAO,KAAK,CAAC;AAAA,MACjB;AAAA,IACJ;AAEA,UAAM,aAAa,OAAO;AAC1B,UAAM,YAAY,OAAO;AACzB,UAAM,QAAQ,OAAO;AAErB,QAAI,OAAO,eAAe,aAAa;AACnC,YAAM,IAAI,kBAAkB,0CAA0C;AAAA,IAC1E;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,eAAe,aAAa;AACnC,iBAAW,aAAa,IAAI;AAAA,IAChC;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAuBA,mBACI,kBACG,MAC8B;AACjC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,UAAU;AAAA,QACV,OAAO,KAAK,CAAC;AAAA,QACb,YAAY,KAAK,CAAC;AAAA,MACtB;AAAA,IACJ;AAEA,UAAM,WAAW,OAAO;AACxB,UAAM,QAAQ,OAAO;AACrB,UAAM,aAAa,OAAO;AAE1B,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,eAAe,aAAa;AACnC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,oBACI,kBACG,MACQ;AACX,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,WAAW;AAAA,QACX,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,YAAY,OAAO;AACzB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,cAAc,aAAa;AAClC,YAAM,IAAI,kBAAkB,yCAAyC;AAAA,IACzE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,uBACI,kBACG,MACyC;AAC5C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,KAAK,KAAK,CAAC;AAAA,MACf;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,MAAM,OAAO;AAEnB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,8BACI,kBACG,MACyC;AAC5C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,gBACI,kBACG,MAC2B;AAC9B,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,WAAW;AAAA,QACX,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,YAAY,OAAO;AACzB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,cAAc,aAAa;AAClC,YAAM,IAAI,kBAAkB,yCAAyC;AAAA,IACzE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,0BACI,kBACG,MAC4C;AAC/C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAyBA,iCACI,kBACG,MACmD;AACtD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,aAAa;AAAA,QACb,MAAM,KAAK,CAAC;AAAA,QACZ,eAAe,KAAK,CAAC;AAAA,QACrB,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,cAAc,OAAO;AAC3B,UAAM,OAAO,OAAO;AACpB,UAAM,gBAAgB,OAAO;AAC7B,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,gBAAgB,aAAa;AACpC,YAAM,IAAI,kBAAkB,2CAA2C;AAAA,IAC3E;AACA,QAAI,OAAO,SAAS,aAAa;AAC7B,YAAM,IAAI,kBAAkB,oCAAoC;AAAA,IACpE;AACA,QAAI,OAAO,kBAAkB,aAAa;AACtC,YAAM,IAAI,kBAAkB,6CAA6C;AAAA,IAC7E;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,gBAAgB,aAAa;AACpC,iBAAW,cAAc,IAAI;AAAA,IACjC;AACA,QAAI,OAAO,SAAS,aAAa;AAC7B,iBAAW,MAAM,IAAI;AAAA,IACzB;AACA,QAAI,OAAO,kBAAkB,aAAa;AACtC,iBAAW,gBAAgB,IAAI;AAAA,IACnC;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAmBA,iBACI,eACsC;AACtC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,MACX;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AAErB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,wBACI,kBACG,MACmC;AACtC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,sBACI,kBACG,MACwC;AAC3C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,KAAK,KAAK,CAAC;AAAA,MACf;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,MAAM,OAAO;AAEnB,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAuBA,6BACI,kBACG,MAC+C;AAClD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,CAAC;AAAA,QACd,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,WAAW,OAAO;AACxB,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqCA,sBACI,kBACG,MACiC;AACpC,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,OAAO;AAAA,QACP,UAAU,KAAK,CAAC;AAAA,QAChB,WAAW,KAAK,CAAC;AAAA,QACjB,UAAU,KAAK,CAAC;AAAA,QAChB,QAAQ,KAAK,CAAC;AAAA,QACd,gBAAgB,KAAK,CAAC;AAAA,QACtB,kBAAkB,KAAK,CAAC;AAAA,QACxB,KAAK,KAAK,CAAC;AAAA,QACX,OAAO,KAAK,CAAC;AAAA,QACb,iBAAiB,KAAK,CAAC;AAAA,MAC3B;AAAA,IACJ;AAEA,UAAM,QAAQ,OAAO;AACrB,UAAM,WAAW,OAAO;AACxB,UAAM,YAAY,OAAO;AACzB,UAAM,WAAW,OAAO;AACxB,UAAM,SAAS,OAAO;AACtB,UAAM,iBAAiB,OAAO;AAC9B,UAAM,mBAAmB,OAAO;AAChC,UAAM,MAAM,OAAO;AACnB,UAAM,QAAQ,OAAO;AACrB,UAAM,kBAAkB,OAAO;AAE/B,QAAI,OAAO,UAAU,aAAa;AAC9B,YAAM,IAAI,kBAAkB,qCAAqC;AAAA,IACrE;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,YAAM,IAAI,kBAAkB,wCAAwC;AAAA,IACxE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,OAAO,IAAI;AAAA,IAC1B;AACA,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,WAAW,IAAI;AAAA,IAC9B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,mBAAmB,aAAa;AACvC,iBAAW,iBAAiB,IAAI;AAAA,IACpC;AACA,QAAI,OAAO,qBAAqB,aAAa;AACzC,iBAAW,mBAAmB,IAAI;AAAA,IACtC;AACA,QAAI,OAAO,aAAa,aAAa;AACjC,iBAAW,UAAU,IAAI;AAAA,IAC7B;AACA,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,QAAI,OAAO,UAAU,aAAa;AAC9B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,oBAAoB,aAAa;AACxC,iBAAW,kBAAkB,IAAI;AAAA,IACrC;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,0BACI,kBACG,MAC4C;AAC/C,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,KAAK;AAAA,QACL,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,MAAM,OAAO;AACnB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,QAAQ,aAAa;AAC5B,YAAM,IAAI,kBAAkB,mCAAmC;AAAA,IACnE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,QAAQ,aAAa;AAC5B,iBAAW,KAAK,IAAI;AAAA,IACxB;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,iCACI,kBACG,MACmD;AACtD,QAAI;AAEJ,QAAK,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACvF,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,SAAS,OAAO;AACtB,UAAM,SAAS,OAAO;AAEtB,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,YAAM,IAAI,kBAAkB,sCAAsC;AAAA,IACtE;AAEA,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,QAAQ,IAAI;AAAA,IAC3B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,EAqBA,0BACI,kBACG,MAC+B;AAClC,QAAI;AAEJ,QAAI,CAAC,iBAAkB,iBAAiB,OAAO,kBAAkB,YAAY,CAAC,MAAM,QAAQ,aAAa,GAAI;AACzG,eAAU,iBAAiB,CAAC;AAAA,IAChC,OAAO;AACH,eAAS;AAAA,QACL,WAAW;AAAA,QACX,QAAQ,KAAK,CAAC;AAAA,MAClB;AAAA,IACJ;AAEA,UAAM,YAAY,OAAO;AACzB,UAAM,SAAS,OAAO;AAGtB,UAAM,UAAU;AAChB,UAAM,aAAsB,CAAC;AAC7B,QAAI,OAAO,cAAc,aAAa;AAClC,iBAAW,YAAY,IAAI;AAAA,IAC/B;AACA,QAAI,OAAO,WAAW,aAAa;AAC/B,iBAAW,SAAS,IAAI;AAAA,IAC5B;AACA,UAAM,MAAM,IAAI,IAAI,KAAK,OAAO,OAAO,WAAW,OAAO;AAEzD,UAAM,aAA2C;AAAA,MAC7C,gBAAgB;AAAA,IACpB;AAEA,WAAO,KAAK,OAAO;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AACJ","sourcesContent":["import { RevenexxException, Client, type Payload, UploadProgress } from '../client';\nimport type { Models } from '../models';\n\nimport { Factor } from '../enums/factor';\n\nexport class Customers {\n    client: Client;\n\n    constructor(client: Client) {\n        this.client = client;\n    }\n\n    /**\n     * The same token `POST /customers/auth/magic-link` mints, answered WITH its secret instead of mailed — for a buyer another system has already authenticated and who therefore has no mailbox to check and no link to click. Punchout is the caller it exists for: an ERP hands its user over, this app decides whether that buyer may sign in, and the secret is redeemed through `PUT /customers/auth/magic-link` exactly as a mailed one is. Which is also why the method checked is the magic-link one: a store with `login_magic_link` off cannot redeem what this mints. Nothing is delivered, no account is founded (an address nobody holds is a 404 here, not a registration) and no `contact_event` is written — signing in is mechanics, and this app keeps it off the event bus. Not callable from a browser or a storefront: `handoff_key` is an operations secret configured on the calling app, and a deployment that has none has this capability switched off.\n     *\n     * @param {string} params.handoffKey - The operations secret that makes the caller a trusted in-cluster app. Configured on both functions; never a value a browser or a storefront holds. In the body rather than a header because the gateway forwards a fixed header set, the same reason session material travels this way.\n     * @param {string} params.contactId - The buyer to sign in, as this app knows them. Exactly one of this and `email` is sent — this one when the caller already resolved the external name to a contact.\n     * @param {string} params.email - The buyer to sign in, by address, when the caller holds no contact id. Exactly one of this and `contact_id` is sent. An address nobody holds is a 404 — this route never registers.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthHandoffResponse>}\n     */\n    customersAuthHandoff(params: { handoffKey: string, contactId?: string, email?: string }): Promise<Models.AuthHandoffResponse>;\n    /**\n     * The same token `POST /customers/auth/magic-link` mints, answered WITH its secret instead of mailed — for a buyer another system has already authenticated and who therefore has no mailbox to check and no link to click. Punchout is the caller it exists for: an ERP hands its user over, this app decides whether that buyer may sign in, and the secret is redeemed through `PUT /customers/auth/magic-link` exactly as a mailed one is. Which is also why the method checked is the magic-link one: a store with `login_magic_link` off cannot redeem what this mints. Nothing is delivered, no account is founded (an address nobody holds is a 404 here, not a registration) and no `contact_event` is written — signing in is mechanics, and this app keeps it off the event bus. Not callable from a browser or a storefront: `handoff_key` is an operations secret configured on the calling app, and a deployment that has none has this capability switched off.\n     *\n     * @param {string} handoffKey - The operations secret that makes the caller a trusted in-cluster app. Configured on both functions; never a value a browser or a storefront holds. In the body rather than a header because the gateway forwards a fixed header set, the same reason session material travels this way.\n     * @param {string} contactId - The buyer to sign in, as this app knows them. Exactly one of this and `email` is sent — this one when the caller already resolved the external name to a contact.\n     * @param {string} email - The buyer to sign in, by address, when the caller holds no contact id. Exactly one of this and `contact_id` is sent. An address nobody holds is a 404 — this route never registers.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthHandoffResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthHandoff(handoffKey: string, contactId?: string, email?: string): Promise<Models.AuthHandoffResponse>;\n    customersAuthHandoff(\n        paramsOrFirst: { handoffKey: string, contactId?: string, email?: string } | string,\n        ...rest: [(string)?, (string)?]    \n    ): Promise<Models.AuthHandoffResponse> {\n        let params: { handoffKey: string, contactId?: string, email?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { handoffKey: string, contactId?: string, email?: string };\n        } else {\n            params = {\n                handoffKey: paramsOrFirst as string,\n                contactId: rest[0] as string,\n                email: rest[1] as string            \n            };\n        }\n        \n        const handoffKey = params.handoffKey;\n        const contactId = params.contactId;\n        const email = params.email;\n\n        if (typeof handoffKey === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"handoffKey\"');\n        }\n\n        const apiPath = '/v1/customers/auth/handoff';\n        const apiPayload: Payload = {};\n        if (typeof contactId !== 'undefined') {\n            apiPayload['contact_id'] = contactId;\n        }\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof handoffKey !== 'undefined') {\n            apiPayload['handoff_key'] = handoffKey;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * An identifier — email address, username or customer number, as the shop allows — and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.\n     *\n     * @param {string} params.password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.\n     * @param {string} params.email - Deprecated alias of `identifier`, kept so every storefront written against the earlier contract keeps working. Read exactly like `identifier` — an address, a username or a customer number — and ignored when `identifier` is sent too.\n     * @param {string} params.identifier - Who is signing in: the buyer's email address, their username, or their company's customer number. Which of the three a shop accepts is the merchant's choice (`login_identifier_email`, `login_identifier_username`, `login_identifier_customer_number`); a shape the shop does not accept is a 403 `identifier_not_offered`. The shape is read from the value — anything holding an `@` is an address, only digits is a customer number, anything else a username. A customer number names a COMPANY and signs in as its primary contact, which makes it a shared account.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthLoginResponse>}\n     */\n    customersAuthLogin(params: { password: string, email?: string, identifier?: string }): Promise<Models.AuthLoginResponse>;\n    /**\n     * An identifier — email address, username or customer number, as the shop allows — and a password go in; a session and the CONTACT behind it come back, so a storefront knows in one call both that the buyer is signed in and who they are. The session is minted server-side rather than handed back from the credential check, because the account route hides the session secret from non-privileged responses and a trusted BFF needs it. `permissions` carries the buyer's effective grants, so a BFF does not need a second call to decide what to render.\n     *\n     * @param {string} password - The password from registration or recovery. Wrong credentials are a 401; a correct one on an undecided application is a 403.\n     * @param {string} email - Deprecated alias of `identifier`, kept so every storefront written against the earlier contract keeps working. Read exactly like `identifier` — an address, a username or a customer number — and ignored when `identifier` is sent too.\n     * @param {string} identifier - Who is signing in: the buyer's email address, their username, or their company's customer number. Which of the three a shop accepts is the merchant's choice (`login_identifier_email`, `login_identifier_username`, `login_identifier_customer_number`); a shape the shop does not accept is a 403 `identifier_not_offered`. The shape is read from the value — anything holding an `@` is an address, only digits is a customer number, anything else a username. A customer number names a COMPANY and signs in as its primary contact, which makes it a shared account.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthLoginResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthLogin(password: string, email?: string, identifier?: string): Promise<Models.AuthLoginResponse>;\n    customersAuthLogin(\n        paramsOrFirst: { password: string, email?: string, identifier?: string } | string,\n        ...rest: [(string)?, (string)?]    \n    ): Promise<Models.AuthLoginResponse> {\n        let params: { password: string, email?: string, identifier?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { password: string, email?: string, identifier?: string };\n        } else {\n            params = {\n                password: paramsOrFirst as string,\n                email: rest[0] as string,\n                identifier: rest[1] as string            \n            };\n        }\n        \n        const password = params.password;\n        const email = params.email;\n        const identifier = params.identifier;\n\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n\n        const apiPath = '/v1/customers/auth/login';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof identifier !== 'undefined') {\n            apiPayload['identifier'] = identifier;\n        }\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: \"blocked\"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.\n     *\n     * @param {string} params.sessionId - The session to revoke — `session.$id` from the login.\n     * @param {string} params.userId - The platform user — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<{}>}\n     */\n    customersAuthLogout(params: { sessionId: string, userId: string }): Promise<{}>;\n    /**\n     * Ends ONE session — the buyer signs out on this device and stays signed in on the others, because the session id is what is revoked and not the account. The contact row is untouched: signing out is not blocking, and a caller wanting the second thing wants `status: \"blocked\"` on the contact instead. Both ids come from what `/customers/auth/login` answered, and a BFF should drop its own cookie whatever this answers — the session is unusable afterwards either way.\n     *\n     * @param {string} sessionId - The session to revoke — `session.$id` from the login.\n     * @param {string} userId - The platform user — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<{}>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthLogout(sessionId: string, userId: string): Promise<{}>;\n    customersAuthLogout(\n        paramsOrFirst: { sessionId: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<{}> {\n        let params: { sessionId: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { sessionId: string, userId: string };\n        } else {\n            params = {\n                sessionId: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const sessionId = params.sessionId;\n        const userId = params.userId;\n\n        if (typeof sessionId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"sessionId\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/logout';\n        const apiPayload: Payload = {};\n        if (typeof sessionId !== 'undefined') {\n            apiPayload['session_id'] = sessionId;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Only a buyer this shop holds, with a login, who may sign in is sent one. For anybody else — an address nobody holds, a contact with no login, a blocked buyer or company, an undecided application — nothing is created and nothing is sent, and the answer is the same 201 in the same shape, so it cannot be used to find out who is a customer. It never founds an account. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.\n     *\n     * @param {string} params.email - Who to send the link to. An address that cannot sign in is answered exactly like one that can, and nothing is sent to it.\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}\n     */\n    customersAuthMagicLink(params: { email: string, url: string }): Promise<Models.DefaultAuthMagicLinkResponse>;\n    /**\n     * Sign in without a password: a link goes to the address, and `PUT /customers/auth/magic-link` turns it into a session. Only a buyer this shop holds, with a login, who may sign in is sent one. For anybody else — an address nobody holds, a contact with no login, a blocked buyer or company, an undecided application — nothing is created and nothing is sent, and the answer is the same 201 in the same shape, so it cannot be used to find out who is a customer. It never founds an account. The mail is this shop's own template through the messaging service; the secret is not in this response, only in the link.\n     *\n     * @param {string} email - Who to send the link to. An address that cannot sign in is answered exactly like one that can, and nothing is sent to it.\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMagicLinkResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMagicLink(email: string, url: string): Promise<Models.DefaultAuthMagicLinkResponse>;\n    customersAuthMagicLink(\n        paramsOrFirst: { email: string, url: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthMagicLinkResponse> {\n        let params: { email: string, url: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, url: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                url: rest[0] as string            \n            };\n        }\n        \n        const email = params.email;\n        const url = params.url;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n\n        const apiPath = '/v1/customers/auth/magic-link';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.\n     *\n     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}\n     */\n    customersAuthMagicLinkConfirm(params: { secret: string, userId: string }): Promise<Models.AuthMagicLinkConfirmResponse>;\n    /**\n     * The buyer clicked the link and the storefront read `userId` and `secret` out of it. Answers exactly what a password login answers — session, contact and effective grants — because a shop must not have to branch on how somebody signed in.\n     *\n     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMagicLinkConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMagicLinkConfirm(secret: string, userId: string): Promise<Models.AuthMagicLinkConfirmResponse>;\n    customersAuthMagicLinkConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthMagicLinkConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/magic-link';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.\n     *\n     * @param {string} params.sessionId - The session the storefront holds for that user — `session.$id` from the login. A revoked or expired one is a 401.\n     * @param {string} params.userId - The platform user to resolve — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMeResponse>}\n     */\n    customersAuthMe(params: { sessionId: string, userId: string }): Promise<Models.AuthMeResponse>;\n    /**\n     * The platform user, the customer record mirrored against it and the effective grants, in one call. The expected caller is a trusted storefront BFF holding the session on the buyer's behalf, which is why the ids travel in the body rather than in a browser-facing header. The grants are derived here on every call rather than returned from anywhere they could be cached, so a role changed a second ago is already reflected.\n     *\n     * @param {string} sessionId - The session the storefront holds for that user — `session.$id` from the login. A revoked or expired one is a 401.\n     * @param {string} userId - The platform user to resolve — `session.userId` from the login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthMeResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMe(sessionId: string, userId: string): Promise<Models.AuthMeResponse>;\n    customersAuthMe(\n        paramsOrFirst: { sessionId: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthMeResponse> {\n        let params: { sessionId: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { sessionId: string, userId: string };\n        } else {\n            params = {\n                sessionId: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const sessionId = params.sessionId;\n        const userId = params.userId;\n\n        if (typeof sessionId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"sessionId\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/me';\n        const apiPayload: Payload = {};\n        if (typeof sessionId !== 'undefined') {\n            apiPayload['session_id'] = sessionId;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.\n     *\n     * @param {string} params.userId - The platform user being challenged.\n     * @param {Factor} params.factor - Which factor to challenge. `email` (the default) is the only one this route sends; any other value is a 400 `factor_not_supported`.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}\n     */\n    customersAuthMfaChallenge(params: { userId: string, factor?: Factor }): Promise<Models.DefaultAuthMfaChallengeResponse>;\n    /**\n     * Between the password and the finished session: the buyer has proved one thing and is asked for another. Created by user id, because the account route that creates challenges hides the code from whoever may call it — and answered with the half-finished session the sign-in is in the middle of, through `PUT /customers/auth/mfa/challenge`. Needs a platform build that returns the challenge code; without one there is no way to read what to send, and the call answers 502 rather than mailing an empty challenge.\n     *\n     * @param {string} userId - The platform user being challenged.\n     * @param {Factor} factor - Which factor to challenge. `email` (the default) is the only one this route sends; any other value is a 400 `factor_not_supported`.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMfaChallenge(userId: string, factor?: Factor): Promise<Models.DefaultAuthMfaChallengeResponse>;\n    customersAuthMfaChallenge(\n        paramsOrFirst: { userId: string, factor?: Factor } | string,\n        ...rest: [(Factor)?]    \n    ): Promise<Models.DefaultAuthMfaChallengeResponse> {\n        let params: { userId: string, factor?: Factor };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { userId: string, factor?: Factor };\n        } else {\n            params = {\n                userId: paramsOrFirst as string,\n                factor: rest[0] as Factor            \n            };\n        }\n        \n        const userId = params.userId;\n        const factor = params.factor;\n\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/mfa/challenge';\n        const apiPayload: Payload = {};\n        if (typeof factor !== 'undefined') {\n            apiPayload['factor'] = factor;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.\n     *\n     * @param {string} params.challengeId - The `$id` the send answered with.\n     * @param {string} params.code - What the buyer typed.\n     * @param {string} params.sessionSecret - The same session the challenge was created with.\n     * @param {string} params.userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}\n     */\n    customersAuthMfaChallengeConfirm(params: { challengeId: string, code: string, sessionSecret: string, userId?: string }): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;\n    /**\n     * The code the buyer typed, against the challenge it was sent for. The session becomes fully authenticated when this answers.\n     *\n     * @param {string} challengeId - The `$id` the send answered with.\n     * @param {string} code - What the buyer typed.\n     * @param {string} sessionSecret - The same session the challenge was created with.\n     * @param {string} userId - The platform user, for the caller's own bookkeeping. The challenge already knows whose it is.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthMfaChallengeConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthMfaChallengeConfirm(challengeId: string, code: string, sessionSecret: string, userId?: string): Promise<Models.DefaultAuthMfaChallengeConfirmResponse>;\n    customersAuthMfaChallengeConfirm(\n        paramsOrFirst: { challengeId: string, code: string, sessionSecret: string, userId?: string } | string,\n        ...rest: [(string)?, (string)?, (string)?]    \n    ): Promise<Models.DefaultAuthMfaChallengeConfirmResponse> {\n        let params: { challengeId: string, code: string, sessionSecret: string, userId?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { challengeId: string, code: string, sessionSecret: string, userId?: string };\n        } else {\n            params = {\n                challengeId: paramsOrFirst as string,\n                code: rest[0] as string,\n                sessionSecret: rest[1] as string,\n                userId: rest[2] as string            \n            };\n        }\n        \n        const challengeId = params.challengeId;\n        const code = params.code;\n        const sessionSecret = params.sessionSecret;\n        const userId = params.userId;\n\n        if (typeof challengeId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"challengeId\"');\n        }\n        if (typeof code === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"code\"');\n        }\n        if (typeof sessionSecret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"sessionSecret\"');\n        }\n\n        const apiPath = '/v1/customers/auth/mfa/challenge';\n        const apiPayload: Payload = {};\n        if (typeof challengeId !== 'undefined') {\n            apiPayload['challenge_id'] = challengeId;\n        }\n        if (typeof code !== 'undefined') {\n            apiPayload['code'] = code;\n        }\n        if (typeof sessionSecret !== 'undefined') {\n            apiPayload['session_secret'] = sessionSecret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`. Sent under the same rule as the link: only to a buyer who may sign in, and for anybody else nothing is created or sent while the answer looks exactly the same.\n     *\n     * @param {string} params.email - Who to send the code to. As with the sign-in link, an address that cannot sign in is answered exactly like one that can, and nothing is sent to it.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthOtpResponse>}\n     */\n    customersAuthOtp(params: { email: string }): Promise<Models.DefaultAuthOtpResponse>;\n    /**\n     * The same token as the sign-in link, delivered as a short code instead — for a buyer on a phone, where leaving for a mail client and coming back loses the checkout they were in the middle of. Redeemed with `PUT /customers/auth/otp`. Sent under the same rule as the link: only to a buyer who may sign in, and for anybody else nothing is created or sent while the answer looks exactly the same.\n     *\n     * @param {string} email - Who to send the code to. As with the sign-in link, an address that cannot sign in is answered exactly like one that can, and nothing is sent to it.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthOtpResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthOtp(email: string): Promise<Models.DefaultAuthOtpResponse>;\n    customersAuthOtp(\n        paramsOrFirst: { email: string } | string    \n    ): Promise<Models.DefaultAuthOtpResponse> {\n        let params: { email: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string            \n            };\n        }\n        \n        const email = params.email;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n\n        const apiPath = '/v1/customers/auth/otp';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.\n     *\n     * @param {string} params.secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed code carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthOtpConfirmResponse>}\n     */\n    customersAuthOtpConfirm(params: { secret: string, userId: string }): Promise<Models.AuthOtpConfirmResponse>;\n    /**\n     * The code the buyer typed, plus the `userId` the send answered with. Answers exactly what a password login answers — session, contact and effective grants — so a storefront never has to branch on how somebody signed in. The code is spent on first use and expires, so a second attempt with the same one is a 401 rather than a second session.\n     *\n     * @param {string} secret - The one-time secret the mailed code carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed code carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthOtpConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthOtpConfirm(secret: string, userId: string): Promise<Models.AuthOtpConfirmResponse>;\n    customersAuthOtpConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.AuthOtpConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/otp';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. One thing about the contact CAN change: a buyer this shop holds who carries no platform login — an address written straight into the record by an import — is given one here, because the alternative is telling the one person who cannot help themselves that no account exists, with no other way in. Nothing else about the contact moves, and the password only moves in step two.\n     *\n     * @param {string} params.email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}\n     */\n    customersAuthRecovery(params: { email: string, url: string }): Promise<Models.DefaultAuthRecoveryResponse>;\n    /**\n     * Step one of two: a link goes to the address given, and `PUT /customers/auth/recovery` is what the buyer's browser comes back to. The identity service mints the token; the MAIL is this shop's own — the tenant's template, layout, language and sending domain, through the messaging service. The secret is NOT in this answer: it exists only inside the mailed link, which is the whole point of the two-step shape, and echoing it here would make the mail decorative. One thing about the contact CAN change: a buyer this shop holds who carries no platform login — an address written straight into the record by an import — is given one here, because the alternative is telling the one person who cannot help themselves that no account exists, with no other way in. Nothing else about the contact moves, and the password only moves in step two.\n     *\n     * @param {string} email - Who to send the recovery mail to. An address nobody holds is not distinguished here — do not build an account-existence check on the answer.\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters — the first two are what the confirm call takes. Same shape the identity service's own mail used, so a storefront that already handles that link needs no change.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRecovery(email: string, url: string): Promise<Models.DefaultAuthRecoveryResponse>;\n    customersAuthRecovery(\n        paramsOrFirst: { email: string, url: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthRecoveryResponse> {\n        let params: { email: string, url: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, url: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                url: rest[0] as string            \n            };\n        }\n        \n        const email = params.email;\n        const url = params.url;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n\n        const apiPath = '/v1/customers/auth/recovery';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.\n     *\n     * @param {string} params.password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.\n     * @param {string} params.secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}\n     */\n    customersAuthRecoveryConfirm(params: { password: string, secret: string, userId: string }): Promise<Models.DefaultAuthRecoveryConfirmResponse>;\n    /**\n     * Step two: the `userId` and `secret` the mailed link carried, plus the password the buyer just typed. The secret is spent on first use and expires, so a link cannot be replayed and a second attempt with the same one is a 401 rather than a second password change. The new password is in effect the moment this answers; what happens to sessions opened with the old one is the identity service's policy, not this app's.\n     *\n     * @param {string} password - The new password. It replaces the old one immediately; existing sessions are the identity service's business, not this app's.\n     * @param {string} secret - The one-time secret from the mailed link. Only that value works — it is spent on first use and expires, and anything else is a 401, so no example here would be anything but a call that fails.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthRecoveryConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRecoveryConfirm(password: string, secret: string, userId: string): Promise<Models.DefaultAuthRecoveryConfirmResponse>;\n    customersAuthRecoveryConfirm(\n        paramsOrFirst: { password: string, secret: string, userId: string } | string,\n        ...rest: [(string)?, (string)?]    \n    ): Promise<Models.DefaultAuthRecoveryConfirmResponse> {\n        let params: { password: string, secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { password: string, secret: string, userId: string };\n        } else {\n            params = {\n                password: paramsOrFirst as string,\n                secret: rest[0] as string,\n                userId: rest[1] as string            \n            };\n        }\n        \n        const password = params.password;\n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/recovery';\n        const apiPayload: Payload = {};\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.\n     *\n     * @param {string} params.email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.\n     * @param {string} params.password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.\n     * @param {string} params.firstName - Given name. Optional: an ERP import often has only a mailbox.\n     * @param {string} params.lastName - Family name. Optional for the same reason.\n     * @param {string} params.locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.\n     * @param {string} params.organizationId - REFUSED when set: joining an existing company is an invitation, not a registration, so a value here answers 403 `join_requires_invitation` (400 `organization_ambiguous` beside `organization_name`). Send null or leave it out.\n     * @param {string} params.organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.\n     * @param {string} params.url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.\n     * @param {string} params.vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.\n     * @param {string} params.verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthRegisterResponse>}\n     */\n    customersAuthRegister(params: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string }): Promise<Models.AuthRegisterResponse>;\n    /**\n     * One call writes the whole buyer: the contact this app is the system of record for, and the platform user behind its login. When the body names a company it also FOUNDS one — an organization, mirrored into platform auth as a team, with this contact as its admin. The tenant setting registration_mode decides what a registration IS. 'open' (the default, unchanged behaviour) creates a finished account: registration_status='approved', status='active', login works. 'approval_required' creates an APPLICATION: registration_status='pending', status='invited', the platform user exists with the applicant's own password but is DISABLED, and a newly founded organization is parked as 'blocked' — check `approval_required` in the response and show a 'we will get back to you' screen instead of logging the buyer in. The registration gates below are all evaluated BEFORE anything is written, and a failure after that point rolls the organization and the contact back together.\n     *\n     * @param {string} email - The buyer's address. It becomes the login AND the unique key of the contact, so a second registration with it is a 409 — including while the first one is still waiting for approval.\n     * @param {string} password - The password the buyer chooses. It is hashed by the identity service at this moment and never travels again: an approval later enables the account, it does not issue a new credential.\n     * @param {string} firstName - Given name. Optional: an ERP import often has only a mailbox.\n     * @param {string} lastName - Family name. Optional for the same reason.\n     * @param {string} locale - The language this person is written to in — BCP 47, and one of the store's configured locales. Null falls back to the store default. One of the store's own locales, or the call is a 400.\n     * @param {string} organizationId - REFUSED when set: joining an existing company is an invitation, not a registration, so a value here answers 403 `join_requires_invitation` (400 `organization_ambiguous` beside `organization_name`). Send null or leave it out.\n     * @param {string} organizationName - FOUND a new company, with this contact as its admin. This is what makes the registration a B2B one; leaving it out registers a standalone buyer.\n     * @param {string} url - Where the welcome mail's button points — the buyer's first stop in this shop. Absent, the mail still goes out and simply carries no button. Ignored when the registration is an APPLICATION: there is no account to send anybody to yet.\n     * @param {string} vatId - VAT identification number (USt-IdNr. in Germany) — the closest thing a B2B buyer has to a legal identity. Validated against the EU VIES service when the tenant's `organization_vat_id_required` setting is on, and stored verbatim otherwise, including for buyers outside the EU. Required when the tenant's `organization_vat_id_required` is on, and checked BEFORE the company is created so a bad one leaves no half-founded organization behind.\n     * @param {string} verificationUrl - Where the address-confirmation link points, when the tenant's `email_verification` asks for one on registration. `userId`, `secret` and `expire` are appended, and `PUT /customers/auth/verification` takes the first two. Without it the registration still succeeds and `verification_sent` is false — this app cannot invent a storefront URL, and a link pointing nowhere is worse than none.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.AuthRegisterResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthRegister(email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string): Promise<Models.AuthRegisterResponse>;\n    customersAuthRegister(\n        paramsOrFirst: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string } | string,\n        ...rest: [(string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?, (string)?]    \n    ): Promise<Models.AuthRegisterResponse> {\n        let params: { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { email: string, password: string, firstName?: string, lastName?: string, locale?: string, organizationId?: string, organizationName?: string, url?: string, vatId?: string, verificationUrl?: string };\n        } else {\n            params = {\n                email: paramsOrFirst as string,\n                password: rest[0] as string,\n                firstName: rest[1] as string,\n                lastName: rest[2] as string,\n                locale: rest[3] as string,\n                organizationId: rest[4] as string,\n                organizationName: rest[5] as string,\n                url: rest[6] as string,\n                vatId: rest[7] as string,\n                verificationUrl: rest[8] as string            \n            };\n        }\n        \n        const email = params.email;\n        const password = params.password;\n        const firstName = params.firstName;\n        const lastName = params.lastName;\n        const locale = params.locale;\n        const organizationId = params.organizationId;\n        const organizationName = params.organizationName;\n        const url = params.url;\n        const vatId = params.vatId;\n        const verificationUrl = params.verificationUrl;\n\n        if (typeof email === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"email\"');\n        }\n        if (typeof password === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"password\"');\n        }\n\n        const apiPath = '/v1/customers/auth/register';\n        const apiPayload: Payload = {};\n        if (typeof email !== 'undefined') {\n            apiPayload['email'] = email;\n        }\n        if (typeof firstName !== 'undefined') {\n            apiPayload['first_name'] = firstName;\n        }\n        if (typeof lastName !== 'undefined') {\n            apiPayload['last_name'] = lastName;\n        }\n        if (typeof locale !== 'undefined') {\n            apiPayload['locale'] = locale;\n        }\n        if (typeof organizationId !== 'undefined') {\n            apiPayload['organization_id'] = organizationId;\n        }\n        if (typeof organizationName !== 'undefined') {\n            apiPayload['organization_name'] = organizationName;\n        }\n        if (typeof password !== 'undefined') {\n            apiPayload['password'] = password;\n        }\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        if (typeof vatId !== 'undefined') {\n            apiPayload['vat_id'] = vatId;\n        }\n        if (typeof verificationUrl !== 'undefined') {\n            apiPayload['verification_url'] = verificationUrl;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.\n     *\n     * @param {string} params.url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @param {string} params.userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationResponse>}\n     */\n    customersAuthVerification(params: { url: string, userId: string }): Promise<Models.DefaultAuthVerificationResponse>;\n    /**\n     * Confirm that the address belongs to the buyer. Needs no session: the verification is created through the identity service's users surface, because its account counterpart reads the authenticated user and a caller authenticating AS the user cannot see the secret it just created. The buyer still confirms with their own session, through `PUT /customers/auth/verification` — only the creation moved. Send it right after a registration, or from an account page.\n     *\n     * @param {string} url - Where the mailed link points. `userId`, `secret` and `expire` are appended as query parameters; the first two are what the confirm call takes.\n     * @param {string} userId - The platform user whose address is being confirmed — `user_id` from the registration, or `session.userId` from a login.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthVerification(url: string, userId: string): Promise<Models.DefaultAuthVerificationResponse>;\n    customersAuthVerification(\n        paramsOrFirst: { url: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthVerificationResponse> {\n        let params: { url: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { url: string, userId: string };\n        } else {\n            params = {\n                url: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const url = params.url;\n        const userId = params.userId;\n\n        if (typeof url === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"url\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/verification';\n        const apiPayload: Payload = {};\n        if (typeof url !== 'undefined') {\n            apiPayload['url'] = url;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.\n     *\n     * @param {string} params.secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} params.userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}\n     */\n    customersAuthVerificationConfirm(params: { secret: string, userId: string }): Promise<Models.DefaultAuthVerificationConfirmResponse>;\n    /**\n     * The `userId` and `secret` the mailed link carried. The address counts as confirmed the moment this answers; the secret is spent, so the link cannot be replayed.\n     *\n     * @param {string} secret - The one-time secret the mailed link carried. Spent on first use and expiring, so a second attempt with the same one is a 401 rather than a second session.\n     * @param {string} userId - The `userId` the mailed link carried.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.DefaultAuthVerificationConfirmResponse>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersAuthVerificationConfirm(secret: string, userId: string): Promise<Models.DefaultAuthVerificationConfirmResponse>;\n    customersAuthVerificationConfirm(\n        paramsOrFirst: { secret: string, userId: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.DefaultAuthVerificationConfirmResponse> {\n        let params: { secret: string, userId: string };\n        \n        if ((paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { secret: string, userId: string };\n        } else {\n            params = {\n                secret: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const secret = params.secret;\n        const userId = params.userId;\n\n        if (typeof secret === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"secret\"');\n        }\n        if (typeof userId === 'undefined') {\n            throw new RevenexxException('Missing required parameter: \"userId\"');\n        }\n\n        const apiPath = '/v1/customers/auth/verification';\n        const apiPayload: Payload = {};\n        if (typeof secret !== 'undefined') {\n            apiPayload['secret'] = secret;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'put',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n\n    /**\n     * The capability the API gateway calls to turn whoever is acting into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed request — one contact read plus the tenant's role map. Send EXACTLY ONE of two references. `contact_id` is the storefront plane: a BFF holding the tenant API key asserted a contact, and the gateway is resolving the assertion. `user_id` is the authenticated plane (RAD-12): the gateway verified a person's own Zitadel token and is resolving its subject against `contacts.external_user_id`, so the answer stands on a proven identity rather than a claimed one. The answer is the same shape either way — which plane a request came from is the gateway's business, not this app's. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.\n     *\n     * @param {string} params.contactId - The contact the caller asserted it is acting for.\n     * @param {string} params.userId - The platform login the gateway authenticated, matched against `contacts.external_user_id` — the identity mirror this app maintains when it registers or invites a contact. Not a uuid: it is whatever the identity service issues as a subject.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.ContactPermissions>}\n     */\n    customersPrincipalResolve(params?: { contactId?: string, userId?: string }): Promise<Models.ContactPermissions>;\n    /**\n     * The capability the API gateway calls to turn whoever is acting into the permission set it forwards to every other app as X-Revenexx-Permissions. This app is the platform's role provider (manifest#provides_roles), and this is the hot path of every attributed request — one contact read plus the tenant's role map. Send EXACTLY ONE of two references. `contact_id` is the storefront plane: a BFF holding the tenant API key asserted a contact, and the gateway is resolving the assertion. `user_id` is the authenticated plane (RAD-12): the gateway verified a person's own Zitadel token and is resolving its subject against `contacts.external_user_id`, so the answer stands on a proven identity rather than a claimed one. The answer is the same shape either way — which plane a request came from is the gateway's business, not this app's. A blocked or pending contact always resolves with active=false; what its `permissions` then say is the tenant's blocked_contact_behavior setting — 'keep' (the default, the role's grants), 'catalog_only' or 'deny_all'.\n     *\n     * @param {string} contactId - The contact the caller asserted it is acting for.\n     * @param {string} userId - The platform login the gateway authenticated, matched against `contacts.external_user_id` — the identity mirror this app maintains when it registers or invites a contact. Not a uuid: it is whatever the identity service issues as a subject.\n     * @throws {RevenexxException}\n     * @returns {Promise<Models.ContactPermissions>}\n     * @deprecated Use the object parameter style method for a better developer experience.\n     */\n    customersPrincipalResolve(contactId?: string, userId?: string): Promise<Models.ContactPermissions>;\n    customersPrincipalResolve(\n        paramsOrFirst?: { contactId?: string, userId?: string } | string,\n        ...rest: [(string)?]    \n    ): Promise<Models.ContactPermissions> {\n        let params: { contactId?: string, userId?: string };\n        \n        if (!paramsOrFirst || (paramsOrFirst && typeof paramsOrFirst === 'object' && !Array.isArray(paramsOrFirst))) {\n            params = (paramsOrFirst || {}) as { contactId?: string, userId?: string };\n        } else {\n            params = {\n                contactId: paramsOrFirst as string,\n                userId: rest[0] as string            \n            };\n        }\n        \n        const contactId = params.contactId;\n        const userId = params.userId;\n\n\n        const apiPath = '/v1/customers/principal/resolve';\n        const apiPayload: Payload = {};\n        if (typeof contactId !== 'undefined') {\n            apiPayload['contact_id'] = contactId;\n        }\n        if (typeof userId !== 'undefined') {\n            apiPayload['user_id'] = userId;\n        }\n        const uri = new URL(this.client.config.endpoint + apiPath);\n\n        const apiHeaders: { [header: string]: string } = {\n            'content-type': 'application/json',\n        }\n\n        return this.client.call(\n            'post',\n            uri,\n            apiHeaders,\n            apiPayload,\n        );\n    }\n}\n"]}