read.customer.my_cart

The signed-in shopper’s most recent LIVE cart in a store, or nothing. This is how a channel discovers that the shopper already has a cart open somewhere else (the cart id is otherwise a capability held by one browser). Customer face only; scoped to the session identity.

• Surface: GET /v1/read/customer/my_cart
• Auth: ★ Customer read (shopper) — a CUSTOMER SESSION is REQUIRED (no credential, or an operator/platform one, is refused). The tenant comes from the SESSION, never from a parameter, and the caller’s own cus_ is resolved from the token: there is no customer_id param on this face, so a shopper can only ever read their OWN profile, addresses, orders and cart. The x-forge-store header is OPTIONAL and is only ever able to REFUSE: the kernel compares it against the session’s tenant and answers wrong_tenant (403) when it belongs to another store owner — a LIVE session in the wrong shop, which a caller must not treat as a dead one.

Params (JSON Schema)

{
  "properties": {
    "store": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "store"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

invalid_params (400) · not_found (404) · unauthorized (401) · forbidden (403) · wrong_tenant (403)