read.customer.my_order

One of the signed-in shopper’s OWN orders by id — the full detail (lines + media, address, timeline, tracking, origin, delivery estimate). Customer face only; a non-owner gets not_found.

• Surface: GET /v1/read/customer/my_order
• Auth: ★ Customer read (shopper) — a CUSTOMER SESSION is REQUIRED (no credential, or an operator/platform one, is refused). The tenant comes from the SESSION, never from a parameter, and the caller’s own cus_ is resolved from the token: there is no customer_id param on this face, so a shopper can only ever read their OWN profile, addresses, orders and cart. The x-forge-store header is OPTIONAL and is only ever able to REFUSE: the kernel compares it against the session’s tenant and answers wrong_tenant (403) when it belongs to another store owner — a LIVE session in the wrong shop, which a caller must not treat as a dead one.

Params (JSON Schema)

{
  "properties": {
    "locale": {
      "minLength": 1,
      "type": "string"
    },
    "order_id": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "order_id"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

invalid_params (400) · not_found (404) · unauthorized (401) · forbidden (403) · wrong_tenant (403)