seatschart 0.1.0

data/lib/seatschart/api/seats_api.rb

@@ -0,0 +1,1103 @@
+=begin
+#SeatsChart API
+
+#Seat inventory and locking API for B2B2C integrations. Authenticate using `x-api-key` (partners) or `Authorization: Bearer` with an HS256 JWT.
+
+The version of the OpenAPI document: 1.0.0
+
+Generated by: https://openapi-generator.tech
+Generator version: 7.11.0
+
+=end
+
+require 'cgi'
+
+module SeatsChart
+  class SeatsApi
+    attr_accessor :api_client
+
+    def initialize(api_client = ApiClient.default)
+      @api_client = api_client
+    end
+    # List sales channels
+    # Returns channel ids with per-order seat limits (web, box_office, partner). Pass `channel` on best-available, reserve, and confirm.
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def get_api_channels(opts = {})
+      get_api_channels_with_http_info(opts)
+      nil
+    end
+
+    # List sales channels
+    # Returns channel ids with per-order seat limits (web, box_office, partner). Pass `channel` on best-available, reserve, and confirm.
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def get_api_channels_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.get_api_channels ...'
+      end
+      # resource path
+      local_var_path = '/api/channels'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.get_api_channels",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#get_api_channels\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Validate a hold-token session
+    # Returns seatIds and expiry for a live hold token. Does not mutate Redis locks or the hold:token JSON. 410 when expired, 404 when the token is not in this tenant.
+    # @param token [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def get_api_hold_tokens_by_token(token, opts = {})
+      get_api_hold_tokens_by_token_with_http_info(token, opts)
+      nil
+    end
+
+    # Validate a hold-token session
+    # Returns seatIds and expiry for a live hold token. Does not mutate Redis locks or the hold:token JSON. 410 when expired, 404 when the token is not in this tenant.
+    # @param token [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def get_api_hold_tokens_by_token_with_http_info(token, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.get_api_hold_tokens_by_token ...'
+      end
+      # verify the required parameter 'token' is set
+      if @api_client.config.client_side_validation && token.nil?
+        fail ArgumentError, "Missing the required parameter 'token' when calling SeatsApi.get_api_hold_tokens_by_token"
+      end
+      if @api_client.config.client_side_validation && token.to_s.length > 36
+        fail ArgumentError, 'invalid value for "token" when calling SeatsApi.get_api_hold_tokens_by_token, the character length must be smaller than or equal to 36.'
+      end
+
+      if @api_client.config.client_side_validation && token.to_s.length < 36
+        fail ArgumentError, 'invalid value for "token" when calling SeatsApi.get_api_hold_tokens_by_token, the character length must be great than or equal to 36.'
+      end
+
+      # resource path
+      local_var_path = '/api/hold-tokens/{token}'.sub('{' + 'token' + '}', CGI.escape(token.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.get_api_hold_tokens_by_token",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#get_api_hold_tokens_by_token\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Event-group availability intersection by label
+    # A label is selectable only when it is free on every non-past member (cap 50). Does not join seasons. See docs/SEATSIO_PARITY.md.
+    # @param event_ids [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def get_api_seats_group(event_ids, opts = {})
+      get_api_seats_group_with_http_info(event_ids, opts)
+      nil
+    end
+
+    # Event-group availability intersection by label
+    # A label is selectable only when it is free on every non-past member (cap 50). Does not join seasons. See docs/SEATSIO_PARITY.md.
+    # @param event_ids [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def get_api_seats_group_with_http_info(event_ids, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.get_api_seats_group ...'
+      end
+      # verify the required parameter 'event_ids' is set
+      if @api_client.config.client_side_validation && event_ids.nil?
+        fail ArgumentError, "Missing the required parameter 'event_ids' when calling SeatsApi.get_api_seats_group"
+      end
+      if @api_client.config.client_side_validation && event_ids.to_s.length < 36
+        fail ArgumentError, 'invalid value for "event_ids" when calling SeatsApi.get_api_seats_group, the character length must be great than or equal to 36.'
+      end
+
+      # resource path
+      local_var_path = '/api/seats/group'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+      query_params[:'eventIds'] = event_ids
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.get_api_seats_group",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#get_api_seats_group\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Confirm GA purchase (Postgres sold_count)
+    # Server-to-server only (`x-api-key`): commits GA capacity after payment. SeatsChart-catalog events require a durable quote and matching externalPaymentId/paidAmountCents/paidCurrency; partner-priced events accept the declared paidAmountCents without a quote and synced catalogs validate it (409 `price_mismatch`). The final ticketTypeId is re-checked against the event sales rules (409 `quota_exceeded`, `buyer_limit_exceeded`, `lot_sold_out`) and the quantity against the organizer's booking limits (409 `booking_limit_exceeded`; holds placed before the current limits were published stay confirmable). Previously accepted legacy receipts remain retryable. Consumer JWTs are rejected. Durably records Idempotency-Key and conditionally increments sold_count before reconciling Redis holds. **Idempotency-Key** required. Optional `ticketBuyerId` is stored on the GA receipt (inherited from the hold token when omitted). Quote failures return 409 with `error: quote_required` (no quoteId) or `error: quote_mismatch` (quote or payment attestation does not match).
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_confirm_request [PostApiGaConfirmRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def post_api_ga_confirm(idempotency_key, post_api_ga_confirm_request, opts = {})
+      post_api_ga_confirm_with_http_info(idempotency_key, post_api_ga_confirm_request, opts)
+      nil
+    end
+
+    # Confirm GA purchase (Postgres sold_count)
+    # Server-to-server only (&#x60;x-api-key&#x60;): commits GA capacity after payment. SeatsChart-catalog events require a durable quote and matching externalPaymentId/paidAmountCents/paidCurrency; partner-priced events accept the declared paidAmountCents without a quote and synced catalogs validate it (409 &#x60;price_mismatch&#x60;). The final ticketTypeId is re-checked against the event sales rules (409 &#x60;quota_exceeded&#x60;, &#x60;buyer_limit_exceeded&#x60;, &#x60;lot_sold_out&#x60;) and the quantity against the organizer&#39;s booking limits (409 &#x60;booking_limit_exceeded&#x60;; holds placed before the current limits were published stay confirmable). Previously accepted legacy receipts remain retryable. Consumer JWTs are rejected. Durably records Idempotency-Key and conditionally increments sold_count before reconciling Redis holds. **Idempotency-Key** required. Optional &#x60;ticketBuyerId&#x60; is stored on the GA receipt (inherited from the hold token when omitted). Quote failures return 409 with &#x60;error: quote_required&#x60; (no quoteId) or &#x60;error: quote_mismatch&#x60; (quote or payment attestation does not match).
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_confirm_request [PostApiGaConfirmRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_ga_confirm_with_http_info(idempotency_key, post_api_ga_confirm_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_ga_confirm ...'
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_ga_confirm"
+      end
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length > 255
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_confirm, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length < 1
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_confirm, the character length must be great than or equal to 1.'
+      end
+
+      # verify the required parameter 'post_api_ga_confirm_request' is set
+      if @api_client.config.client_side_validation && post_api_ga_confirm_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_ga_confirm_request' when calling SeatsApi.post_api_ga_confirm"
+      end
+      # resource path
+      local_var_path = '/api/ga/confirm'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'idempotency-key'] = idempotency_key
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_ga_confirm_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_ga_confirm",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_ga_confirm\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Release a GA capacity hold
+    # Clears this user's Redis GA hold for an area. Optional `holdToken` is deleted when it matches tenant/event/user. **Idempotency-Key** required. Emits SSE `ga` and webhook `ga.released`.
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_release_request [PostApiGaReleaseRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def post_api_ga_release(idempotency_key, post_api_ga_release_request, opts = {})
+      post_api_ga_release_with_http_info(idempotency_key, post_api_ga_release_request, opts)
+      nil
+    end
+
+    # Release a GA capacity hold
+    # Clears this user&#39;s Redis GA hold for an area. Optional &#x60;holdToken&#x60; is deleted when it matches tenant/event/user. **Idempotency-Key** required. Emits SSE &#x60;ga&#x60; and webhook &#x60;ga.released&#x60;.
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_release_request [PostApiGaReleaseRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_ga_release_with_http_info(idempotency_key, post_api_ga_release_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_ga_release ...'
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_ga_release"
+      end
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length > 255
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_release, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length < 1
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_release, the character length must be great than or equal to 1.'
+      end
+
+      # verify the required parameter 'post_api_ga_release_request' is set
+      if @api_client.config.client_side_validation && post_api_ga_release_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_ga_release_request' when calling SeatsApi.post_api_ga_release"
+      end
+      # resource path
+      local_var_path = '/api/ga/release'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'idempotency-key'] = idempotency_key
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_ga_release_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_ga_release",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_ga_release\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Hold GA area capacity (Redis)
+    # Places a temporary hold on unnumbered GA capacity. **Idempotency-Key** is required; repeats within ~24h return the cached hold response. Optional `ticketBuyerId` is stored on the GA hold token and inherited by `POST /ga/confirm`. The organizer's booking limits cap `quantity` (designer *Max GA tickets per order*, else *Max seats per order*; strictest with the sales-channel default): 409 `booking_limit_exceeded` (`limit`, `current`, `requested`, `kind: \"ga\"`). GA tables sold as a whole (`shape.bookAs: \"whole\"`) take every place in one hold: any other `quantity` answers 409 `ga_table_whole` (`capacity`, `requested`).
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_reserve_request [PostApiGaReserveRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [nil]
+    def post_api_ga_reserve(idempotency_key, post_api_ga_reserve_request, opts = {})
+      post_api_ga_reserve_with_http_info(idempotency_key, post_api_ga_reserve_request, opts)
+      nil
+    end
+
+    # Hold GA area capacity (Redis)
+    # Places a temporary hold on unnumbered GA capacity. **Idempotency-Key** is required; repeats within ~24h return the cached hold response. Optional &#x60;ticketBuyerId&#x60; is stored on the GA hold token and inherited by &#x60;POST /ga/confirm&#x60;. The organizer&#39;s booking limits cap &#x60;quantity&#x60; (designer *Max GA tickets per order*, else *Max seats per order*; strictest with the sales-channel default): 409 &#x60;booking_limit_exceeded&#x60; (&#x60;limit&#x60;, &#x60;current&#x60;, &#x60;requested&#x60;, &#x60;kind: \&quot;ga\&quot;&#x60;). GA tables sold as a whole (&#x60;shape.bookAs: \&quot;whole\&quot;&#x60;) take every place in one hold: any other &#x60;quantity&#x60; answers 409 &#x60;ga_table_whole&#x60; (&#x60;capacity&#x60;, &#x60;requested&#x60;).
+    # @param idempotency_key [String] Required. Reuse with the same request on retry; a different payload conflicts. Seat confirmation binds this key durably in PostgreSQL; hold mutations use bounded Redis receipts.
+    # @param post_api_ga_reserve_request [PostApiGaReserveRequest] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_ga_reserve_with_http_info(idempotency_key, post_api_ga_reserve_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_ga_reserve ...'
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_ga_reserve"
+      end
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length > 255
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_reserve, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && idempotency_key.to_s.length < 1
+        fail ArgumentError, 'invalid value for "idempotency_key" when calling SeatsApi.post_api_ga_reserve, the character length must be great than or equal to 1.'
+      end
+
+      # verify the required parameter 'post_api_ga_reserve_request' is set
+      if @api_client.config.client_side_validation && post_api_ga_reserve_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_ga_reserve_request' when calling SeatsApi.post_api_ga_reserve"
+      end
+      # resource path
+      local_var_path = '/api/ga/reserve'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'idempotency-key'] = idempotency_key
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_ga_reserve_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_ga_reserve",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_ga_reserve\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Create an empty hold-token session
+    # Seats.io-style session start. Attach seats via reserve using this token later, or renew TTL with POST /hold-tokens/:token. Optional `ticketBuyerId` (opaque partner buyer id) is stored on the session and inherited by its confirmation. Optional `expiresInMinutes` (1–120, seats.io `holdTokens.create(expiresInMinutes)`) sets the session lifetime instead of the workspace hold period; buyer tokens get 403.
+    # @param post_api_hold_tokens_request [PostApiHoldTokensRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [nil]
+    def post_api_hold_tokens(post_api_hold_tokens_request, opts = {})
+      post_api_hold_tokens_with_http_info(post_api_hold_tokens_request, opts)
+      nil
+    end
+
+    # Create an empty hold-token session
+    # Seats.io-style session start. Attach seats via reserve using this token later, or renew TTL with POST /hold-tokens/:token. Optional &#x60;ticketBuyerId&#x60; (opaque partner buyer id) is stored on the session and inherited by its confirmation. Optional &#x60;expiresInMinutes&#x60; (1–120, seats.io &#x60;holdTokens.create(expiresInMinutes)&#x60;) sets the session lifetime instead of the workspace hold period; buyer tokens get 403.
+    # @param post_api_hold_tokens_request [PostApiHoldTokensRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_hold_tokens_with_http_info(post_api_hold_tokens_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_hold_tokens ...'
+      end
+      # verify the required parameter 'post_api_hold_tokens_request' is set
+      if @api_client.config.client_side_validation && post_api_hold_tokens_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_hold_tokens_request' when calling SeatsApi.post_api_hold_tokens"
+      end
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length > 255
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_hold_tokens, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length < 1
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_hold_tokens, the character length must be great than or equal to 1.'
+      end
+
+      # resource path
+      local_var_path = '/api/hold-tokens'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = opts[:'idempotency_key'] if !opts[:'idempotency_key'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_hold_tokens_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_hold_tokens",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_hold_tokens\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Change hold-token expiration (max 2h from creation)
+    # @param token [String] 
+    # @param post_api_hold_tokens_by_token_request [PostApiHoldTokensByTokenRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [nil]
+    def post_api_hold_tokens_by_token(token, post_api_hold_tokens_by_token_request, opts = {})
+      post_api_hold_tokens_by_token_with_http_info(token, post_api_hold_tokens_by_token_request, opts)
+      nil
+    end
+
+    # Change hold-token expiration (max 2h from creation)
+    # @param token [String] 
+    # @param post_api_hold_tokens_by_token_request [PostApiHoldTokensByTokenRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_hold_tokens_by_token_with_http_info(token, post_api_hold_tokens_by_token_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_hold_tokens_by_token ...'
+      end
+      # verify the required parameter 'token' is set
+      if @api_client.config.client_side_validation && token.nil?
+        fail ArgumentError, "Missing the required parameter 'token' when calling SeatsApi.post_api_hold_tokens_by_token"
+      end
+      if @api_client.config.client_side_validation && token.to_s.length > 36
+        fail ArgumentError, 'invalid value for "token" when calling SeatsApi.post_api_hold_tokens_by_token, the character length must be smaller than or equal to 36.'
+      end
+
+      if @api_client.config.client_side_validation && token.to_s.length < 36
+        fail ArgumentError, 'invalid value for "token" when calling SeatsApi.post_api_hold_tokens_by_token, the character length must be great than or equal to 36.'
+      end
+
+      # verify the required parameter 'post_api_hold_tokens_by_token_request' is set
+      if @api_client.config.client_side_validation && post_api_hold_tokens_by_token_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_hold_tokens_by_token_request' when calling SeatsApi.post_api_hold_tokens_by_token"
+      end
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length > 255
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_hold_tokens_by_token, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length < 1
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_hold_tokens_by_token, the character length must be great than or equal to 1.'
+      end
+
+      # resource path
+      local_var_path = '/api/hold-tokens/{token}'.sub('{' + 'token' + '}', CGI.escape(token.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = opts[:'idempotency_key'] if !opts[:'idempotency_key'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_hold_tokens_by_token_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_hold_tokens_by_token",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_hold_tokens_by_token\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Suggest or atomically hold best available seats
+    # Returns seat IDs for the requested quantity, preferring adjacent same-row groups near the map center. Filter the candidate pool by `category` (or ordered `categories`, max 10: windows of the first category are tried before the second, and so on), optional `sectionId` (layout section id or name) and optional `zone` (layout zone id or name; seats resolve explicit zone assignment, then their section zone, then the zone outline) before ranking. `tryToPreventOrphanSeats` (default **true**) skips adjacent windows that would leave a single empty seat at either end of the run, falling back to them only when nothing else fits. `ticketTypes` (`{ ticketTypeId: count }`) sets `quantity` to the sum, restricts the search to categories whose ticket catalog offers every requested type, and returns `ticketTypes` (seatId → ticketTypeId) ready to send as `seatTicketTypes` on confirm; events without ticket types reject it. `accessibleSeats` (N) only returns windows containing at least N seats flagged `accessibility.wheelchair` in the published seat structure (409 when no such window exists). `channel` is salesChannel order limits only. Pass **`x-channel-key`** for inventory partitions — do not send the secret in the body. **`hold: false` (default):** suggest only — does not lock. **`hold: true`:** ranks up to 32 candidate windows across the category preferences, locks the first fit in one Lua call each (all-or-nothing per window), then O(cart) PG gates (available/forSale/channel); on gate failure releases only the locks it added. Requires **Idempotency-Key**, and `userId` unless `holdToken` is given. `holdToken` appends the seats to that existing hold session (same expiry bound; 409 `hold_token_conflict` when the session is expired, foreign, confirming or full). `extraData` is stored on the held seats (requires hold). Returns `hold_token` for confirm. The organizer's booking limits (designer *Max seats per order*) cap `quantity` and, with `holdToken`, the seats already on the token: best-available never picks more than allowed (409 `booking_limit_exceeded` with `limit`, `current`, `requested`). `sections` (max 20 section ids or names, XOR with `sectionId`) ranks across the union of those sections. **API keys / dashboard sessions only:** `channelKeys` (channel secret keys or ids) restricts the pool to public seats plus those channels, `ignoreChannels: true` allows every channel (both replace `x-channel-key`; buyers get 403). `orderId` (with `hold`) is stored on the held seats as `extraData.orderId` and echoed in the response; pass it as `externalOrderId` on confirm. **`status: \"booked\"`** (API keys with the `bookings` scope, or dashboard sessions allowed to change object statuses; buyers get 403) books the best window directly instead of holding it: the same administrative booking as POST /events/{eventId}/actions/book (one SQL transaction under the seat row locks; a seat held by a buyer is never taken; when a ranked window was taken meanwhile the next one is tried). Requires **Idempotency-Key**: the booking order id is derived from it, so a retry returns the same booking. `ticketTypes` are recorded per seat, `extraData` and `orderId` (as `extraData.orderId`) are stored on the booked seats. Response: `status: \"booked\"`, `booked: true`, `bookingOrderId` (cancel with POST /orders/{orderId}/cancel) and `objects` (status, extraData, orderId, ticketType per seat). `status: \"reservedByToken\"` is the same as `hold: true`. **`keepExtraData: true`** (hold or booked) keeps the seats' stored extraData and merges `extraData` / `orderId` on top instead of replacing it.
+    # @param post_api_seats_best_available_request [PostApiSeatsBestAvailableRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [nil]
+    def post_api_seats_best_available(post_api_seats_best_available_request, opts = {})
+      post_api_seats_best_available_with_http_info(post_api_seats_best_available_request, opts)
+      nil
+    end
+
+    # Suggest or atomically hold best available seats
+    # Returns seat IDs for the requested quantity, preferring adjacent same-row groups near the map center. Filter the candidate pool by &#x60;category&#x60; (or ordered &#x60;categories&#x60;, max 10: windows of the first category are tried before the second, and so on), optional &#x60;sectionId&#x60; (layout section id or name) and optional &#x60;zone&#x60; (layout zone id or name; seats resolve explicit zone assignment, then their section zone, then the zone outline) before ranking. &#x60;tryToPreventOrphanSeats&#x60; (default **true**) skips adjacent windows that would leave a single empty seat at either end of the run, falling back to them only when nothing else fits. &#x60;ticketTypes&#x60; (&#x60;{ ticketTypeId: count }&#x60;) sets &#x60;quantity&#x60; to the sum, restricts the search to categories whose ticket catalog offers every requested type, and returns &#x60;ticketTypes&#x60; (seatId → ticketTypeId) ready to send as &#x60;seatTicketTypes&#x60; on confirm; events without ticket types reject it. &#x60;accessibleSeats&#x60; (N) only returns windows containing at least N seats flagged &#x60;accessibility.wheelchair&#x60; in the published seat structure (409 when no such window exists). &#x60;channel&#x60; is salesChannel order limits only. Pass **&#x60;x-channel-key&#x60;** for inventory partitions — do not send the secret in the body. **&#x60;hold: false&#x60; (default):** suggest only — does not lock. **&#x60;hold: true&#x60;:** ranks up to 32 candidate windows across the category preferences, locks the first fit in one Lua call each (all-or-nothing per window), then O(cart) PG gates (available/forSale/channel); on gate failure releases only the locks it added. Requires **Idempotency-Key**, and &#x60;userId&#x60; unless &#x60;holdToken&#x60; is given. &#x60;holdToken&#x60; appends the seats to that existing hold session (same expiry bound; 409 &#x60;hold_token_conflict&#x60; when the session is expired, foreign, confirming or full). &#x60;extraData&#x60; is stored on the held seats (requires hold). Returns &#x60;hold_token&#x60; for confirm. The organizer&#39;s booking limits (designer *Max seats per order*) cap &#x60;quantity&#x60; and, with &#x60;holdToken&#x60;, the seats already on the token: best-available never picks more than allowed (409 &#x60;booking_limit_exceeded&#x60; with &#x60;limit&#x60;, &#x60;current&#x60;, &#x60;requested&#x60;). &#x60;sections&#x60; (max 20 section ids or names, XOR with &#x60;sectionId&#x60;) ranks across the union of those sections. **API keys / dashboard sessions only:** &#x60;channelKeys&#x60; (channel secret keys or ids) restricts the pool to public seats plus those channels, &#x60;ignoreChannels: true&#x60; allows every channel (both replace &#x60;x-channel-key&#x60;; buyers get 403). &#x60;orderId&#x60; (with &#x60;hold&#x60;) is stored on the held seats as &#x60;extraData.orderId&#x60; and echoed in the response; pass it as &#x60;externalOrderId&#x60; on confirm. **&#x60;status: \&quot;booked\&quot;&#x60;** (API keys with the &#x60;bookings&#x60; scope, or dashboard sessions allowed to change object statuses; buyers get 403) books the best window directly instead of holding it: the same administrative booking as POST /events/{eventId}/actions/book (one SQL transaction under the seat row locks; a seat held by a buyer is never taken; when a ranked window was taken meanwhile the next one is tried). Requires **Idempotency-Key**: the booking order id is derived from it, so a retry returns the same booking. &#x60;ticketTypes&#x60; are recorded per seat, &#x60;extraData&#x60; and &#x60;orderId&#x60; (as &#x60;extraData.orderId&#x60;) are stored on the booked seats. Response: &#x60;status: \&quot;booked\&quot;&#x60;, &#x60;booked: true&#x60;, &#x60;bookingOrderId&#x60; (cancel with POST /orders/{orderId}/cancel) and &#x60;objects&#x60; (status, extraData, orderId, ticketType per seat). &#x60;status: \&quot;reservedByToken\&quot;&#x60; is the same as &#x60;hold: true&#x60;. **&#x60;keepExtraData: true&#x60;** (hold or booked) keeps the seats&#39; stored extraData and merges &#x60;extraData&#x60; / &#x60;orderId&#x60; on top instead of replacing it.
+    # @param post_api_seats_best_available_request [PostApiSeatsBestAvailableRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_best_available_with_http_info(post_api_seats_best_available_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_best_available ...'
+      end
+      # verify the required parameter 'post_api_seats_best_available_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_best_available_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_best_available_request' when calling SeatsApi.post_api_seats_best_available"
+      end
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length > 255
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_best_available, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length < 1
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_best_available, the character length must be great than or equal to 1.'
+      end
+
+      # resource path
+      local_var_path = '/api/seats/best-available'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = opts[:'idempotency_key'] if !opts[:'idempotency_key'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_best_available_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_best_available",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_best_available\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Accept a durable confirmation intent before asynchronous seat materialization
+    # Server-to-server only (`x-api-key`). **Pricing source** (workspace integration mode or event sales rules): `partner` events confirm the declared `seatTicketTypes` and `seatPrices` (or `paidAmountCents`) without a quote; `synced_catalog` events validate them against the pushed price table (409 `price_mismatch`, `price_table_missing`, `ticket_type_required`); `seatschart_catalog` events require a durable catalog quote created before external payment. Final ticket types are re-checked against the event quotas and buyer limit (409 `quota_exceeded`, `buyer_limit_exceeded`, `lot_sold_out`). Configure event currency before quoting. The organizer's booking limits are re-checked (defence in depth; holds enforce them atomically): 409 `booking_limit_exceeded` (`limit`, `requested`), except for holds placed before the current limits were published. After verifying payment with your provider, send quoteId, externalPaymentId, paidAmountCents, paidCurrency and the **`holdToken`** capability returned via `POST /api/seats/reserve`. These payment fields are the authenticated partner's attestation, not gateway verification by SeatsChart. Retries of already accepted legacy decisions remain supported without a quote. Consumer JWTs are rejected — confirmation must not run from the browser. Validates Redis holds, then commits the order and requested items in PostgreSQL before 202. Stream delivery is a best-effort trigger; pending SQL items are reconciled by the worker. Provide externalOrderId for stable partner identity. Legacy callers use a durable tenant-scoped Idempotency-Key identity. Season/group holds require scope=hold and the full source seatIds set; all frozen destinations form one atomic order. GET /api/orders/:orderId reports the atomic cart outcome. HTTP keys are durably bound to the authenticated credential and request; changed payload returns 409. Optional `ticketBuyerId` (opaque partner buyer id) is stored on the order, its reservations and object statuses; when omitted it is inherited from the hold token. Quote failures return 409 with `error: quote_required` (no quoteId) or `error: quote_mismatch` (quote or payment attestation does not match).
+    # @param x_api_key [String] Partner B2B API key (required for payment commit).
+    # @param idempotency_key [String] Required key (max 255 chars after trim); durable fallback identity when externalOrderId is omitted.
+    # @param post_api_seats_confirm_request [PostApiSeatsConfirmRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_tenant_id Ignored for bootstrap env keys (bound to DEFAULT_TENANT_ID). Dashboard &#x60;sk_live_…&#x60; keys are tenant-scoped by hash.
+    # @return [nil]
+    def post_api_seats_confirm(x_api_key, idempotency_key, post_api_seats_confirm_request, opts = {})
+      post_api_seats_confirm_with_http_info(x_api_key, idempotency_key, post_api_seats_confirm_request, opts)
+      nil
+    end
+
+    # Accept a durable confirmation intent before asynchronous seat materialization
+    # Server-to-server only (&#x60;x-api-key&#x60;). **Pricing source** (workspace integration mode or event sales rules): &#x60;partner&#x60; events confirm the declared &#x60;seatTicketTypes&#x60; and &#x60;seatPrices&#x60; (or &#x60;paidAmountCents&#x60;) without a quote; &#x60;synced_catalog&#x60; events validate them against the pushed price table (409 &#x60;price_mismatch&#x60;, &#x60;price_table_missing&#x60;, &#x60;ticket_type_required&#x60;); &#x60;seatschart_catalog&#x60; events require a durable catalog quote created before external payment. Final ticket types are re-checked against the event quotas and buyer limit (409 &#x60;quota_exceeded&#x60;, &#x60;buyer_limit_exceeded&#x60;, &#x60;lot_sold_out&#x60;). Configure event currency before quoting. The organizer&#39;s booking limits are re-checked (defence in depth; holds enforce them atomically): 409 &#x60;booking_limit_exceeded&#x60; (&#x60;limit&#x60;, &#x60;requested&#x60;), except for holds placed before the current limits were published. After verifying payment with your provider, send quoteId, externalPaymentId, paidAmountCents, paidCurrency and the **&#x60;holdToken&#x60;** capability returned via &#x60;POST /api/seats/reserve&#x60;. These payment fields are the authenticated partner&#39;s attestation, not gateway verification by SeatsChart. Retries of already accepted legacy decisions remain supported without a quote. Consumer JWTs are rejected — confirmation must not run from the browser. Validates Redis holds, then commits the order and requested items in PostgreSQL before 202. Stream delivery is a best-effort trigger; pending SQL items are reconciled by the worker. Provide externalOrderId for stable partner identity. Legacy callers use a durable tenant-scoped Idempotency-Key identity. Season/group holds require scope&#x3D;hold and the full source seatIds set; all frozen destinations form one atomic order. GET /api/orders/:orderId reports the atomic cart outcome. HTTP keys are durably bound to the authenticated credential and request; changed payload returns 409. Optional &#x60;ticketBuyerId&#x60; (opaque partner buyer id) is stored on the order, its reservations and object statuses; when omitted it is inherited from the hold token. Quote failures return 409 with &#x60;error: quote_required&#x60; (no quoteId) or &#x60;error: quote_mismatch&#x60; (quote or payment attestation does not match).
+    # @param x_api_key [String] Partner B2B API key (required for payment commit).
+    # @param idempotency_key [String] Required key (max 255 chars after trim); durable fallback identity when externalOrderId is omitted.
+    # @param post_api_seats_confirm_request [PostApiSeatsConfirmRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_tenant_id Ignored for bootstrap env keys (bound to DEFAULT_TENANT_ID). Dashboard &#x60;sk_live_…&#x60; keys are tenant-scoped by hash.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_confirm_with_http_info(x_api_key, idempotency_key, post_api_seats_confirm_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_confirm ...'
+      end
+      # verify the required parameter 'x_api_key' is set
+      if @api_client.config.client_side_validation && x_api_key.nil?
+        fail ArgumentError, "Missing the required parameter 'x_api_key' when calling SeatsApi.post_api_seats_confirm"
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_seats_confirm"
+      end
+      # verify the required parameter 'post_api_seats_confirm_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_confirm_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_confirm_request' when calling SeatsApi.post_api_seats_confirm"
+      end
+      # resource path
+      local_var_path = '/api/seats/confirm'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'x-api-key'] = x_api_key
+      header_params[:'Idempotency-Key'] = idempotency_key
+      header_params[:'x-tenant-id'] = opts[:'x_tenant_id'] if !opts[:'x_tenant_id'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_confirm_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_confirm",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_confirm\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Release all seats held by a hold token
+    # Explicit abandon checkout — clears seat locks and GA holds, emits SSE `seat`/`ga` available. Idempotent when token already expired.
+    # @param post_api_seats_holds_renew_request [PostApiSeatsHoldsRenewRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [nil]
+    def post_api_seats_holds_release(post_api_seats_holds_renew_request, opts = {})
+      post_api_seats_holds_release_with_http_info(post_api_seats_holds_renew_request, opts)
+      nil
+    end
+
+    # Release all seats held by a hold token
+    # Explicit abandon checkout — clears seat locks and GA holds, emits SSE &#x60;seat&#x60;/&#x60;ga&#x60; available. Idempotent when token already expired.
+    # @param post_api_seats_holds_renew_request [PostApiSeatsHoldsRenewRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_holds_release_with_http_info(post_api_seats_holds_renew_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_holds_release ...'
+      end
+      # verify the required parameter 'post_api_seats_holds_renew_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_holds_renew_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_holds_renew_request' when calling SeatsApi.post_api_seats_holds_release"
+      end
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length > 255
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_holds_release, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length < 1
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_holds_release, the character length must be great than or equal to 1.'
+      end
+
+      # resource path
+      local_var_path = '/api/seats/holds/release'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = opts[:'idempotency_key'] if !opts[:'idempotency_key'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_holds_renew_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_holds_release",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_holds_release\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Renew Redis TTL for all seats in a hold session
+    # Seat sessions require a capability. Renews only existing owned locks, capped at two hours from creation; never recreates expired locks. GA-only tokens retain their separate legacy lifecycle.
+    # @param post_api_seats_holds_renew_request [PostApiSeatsHoldsRenewRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [nil]
+    def post_api_seats_holds_renew(post_api_seats_holds_renew_request, opts = {})
+      post_api_seats_holds_renew_with_http_info(post_api_seats_holds_renew_request, opts)
+      nil
+    end
+
+    # Renew Redis TTL for all seats in a hold session
+    # Seat sessions require a capability. Renews only existing owned locks, capped at two hours from creation; never recreates expired locks. GA-only tokens retain their separate legacy lifecycle.
+    # @param post_api_seats_holds_renew_request [PostApiSeatsHoldsRenewRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :idempotency_key Required on transactional routes. Reuse the same key for every retry of one logical operation; the API replays the stored outcome.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_holds_renew_with_http_info(post_api_seats_holds_renew_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_holds_renew ...'
+      end
+      # verify the required parameter 'post_api_seats_holds_renew_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_holds_renew_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_holds_renew_request' when calling SeatsApi.post_api_seats_holds_renew"
+      end
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length > 255
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_holds_renew, the character length must be smaller than or equal to 255.'
+      end
+
+      if @api_client.config.client_side_validation && !opts[:'idempotency_key'].nil? && opts[:'idempotency_key'].to_s.length < 1
+        fail ArgumentError, 'invalid value for "opts[:"idempotency_key"]" when calling SeatsApi.post_api_seats_holds_renew, the character length must be great than or equal to 1.'
+      end
+
+      # resource path
+      local_var_path = '/api/seats/holds/renew'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = opts[:'idempotency_key'] if !opts[:'idempotency_key'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_holds_renew_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_holds_renew",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_holds_renew\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Clear Redis TTL holds before expiry (checkout abandoned / declined)
+    # Deletes KeyDB TTL seat locks when they are authorized by the **`holdToken`** capability, rejects seats already sold in Postgres, publishes **`SSE` `available`** only for locks actually removed. **`Idempotency-Key`** header is **required**; repeats within ~24h return the cached response (no duplicate side effects). Also: **`x-api-key`** or **`Authorization: Bearer`**.
+    # @param idempotency_key [String] Required deduplication key (max 255 chars after trim); 24h cache replay in Redis per tenant + route.
+    # @param post_api_seats_release_request [PostApiSeatsReleaseRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_api_key Partner B2B API key (alternative to Bearer).
+    # @option opts [String] :authorization Bearer + HS256 JWT for B2C clients.
+    # @option opts [String] :x_tenant_id Tenant id for partner integrations.
+    # @return [nil]
+    def post_api_seats_release(idempotency_key, post_api_seats_release_request, opts = {})
+      post_api_seats_release_with_http_info(idempotency_key, post_api_seats_release_request, opts)
+      nil
+    end
+
+    # Clear Redis TTL holds before expiry (checkout abandoned / declined)
+    # Deletes KeyDB TTL seat locks when they are authorized by the **&#x60;holdToken&#x60;** capability, rejects seats already sold in Postgres, publishes **&#x60;SSE&#x60; &#x60;available&#x60;** only for locks actually removed. **&#x60;Idempotency-Key&#x60;** header is **required**; repeats within ~24h return the cached response (no duplicate side effects). Also: **&#x60;x-api-key&#x60;** or **&#x60;Authorization: Bearer&#x60;**.
+    # @param idempotency_key [String] Required deduplication key (max 255 chars after trim); 24h cache replay in Redis per tenant + route.
+    # @param post_api_seats_release_request [PostApiSeatsReleaseRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_api_key Partner B2B API key (alternative to Bearer).
+    # @option opts [String] :authorization Bearer + HS256 JWT for B2C clients.
+    # @option opts [String] :x_tenant_id Tenant id for partner integrations.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_release_with_http_info(idempotency_key, post_api_seats_release_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_release ...'
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_seats_release"
+      end
+      # verify the required parameter 'post_api_seats_release_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_release_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_release_request' when calling SeatsApi.post_api_seats_release"
+      end
+      # resource path
+      local_var_path = '/api/seats/release'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = idempotency_key
+      header_params[:'x-api-key'] = opts[:'x_api_key'] if !opts[:'x_api_key'].nil?
+      header_params[:'Authorization'] = opts[:'authorization'] if !opts[:'authorization'].nil?
+      header_params[:'x-tenant-id'] = opts[:'x_tenant_id'] if !opts[:'x_tenant_id'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_release_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_release",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_release\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
+    # Place a temporary Redis hold (Lua TTL) before payment
+    # JSON body: `eventId`, `seatIds` (1–64 UUIDs, unique), `userId`, optional `holdToken` capability to append seats to an existing session. `userId` is customer metadata, never ownership proof. Renew/append share a two-hour maximum session lifetime. Optional `ticketBuyerId` (opaque partner buyer id) is stored on a new hold token and inherited by its confirmation. `eventId` also accepts the event key. Headers: **x-api-key** (B2B) *or* **Authorization: Bearer** (HS256 JWT); optional **x-tenant-id**; **`Idempotency-Key` is required** (1–255 chars after trim; use a fresh UUID v4 per checkout attempt). Repeats with the same key within ~24h return the cached HTTP status and JSON without re-running the Lua lock. Applies Redis TTL locks (**default 600 s**, overridden by **`SEAT_HOLD_TTL_SEC`**, or by the workspace **hold period** setting — `PATCH /workspace/settings`) with SSE `seat` → **`locked`**; Postgres remains **`available`** until **`POST /api/seats/confirm`** persists **`sold`** via the reservation worker. A hold token holds at most the workspace `maxSeatsPerHoldToken` seats (409 `seat_limit`). **Booking limits:** the organizer's *Max seats per order* (designer → Booking limits, stored as `layoutMeta.bookingRules` of the published chart/event layout) caps the seats one hold token holds, appends included, checked in the same atomic call as the locks (parallel appends cannot exceed it); the strictest of the sales-channel default, this limit, the per-buyer limit and `maxSeatsPerHoldToken` wins. Refused with 409 `booking_limit_exceeded` (`limit`, `current` seats already on the token, `requested`, `kind: \"seats\"`). Holds placed before a lower limit was published keep their seats and stay confirmable; they only cannot grow. With ticket buyer validation on, buyer tokens must carry a bound ticket buyer id (403 `ticket_buyer_required` / `ticket_buyer_mismatch`).
+    # @param idempotency_key [String] Required deduplication key (max 255 chars after trim; UUID v4 recommended). 24h idempotent cache replay in Redis per tenant.
+    # @param post_api_seats_reserve_request [PostApiSeatsReserveRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_api_key Partner B2B API key (alternative to Bearer).
+    # @option opts [String] :authorization Bearer + HS256 JWT for B2C clients.
+    # @option opts [String] :x_tenant_id Tenant id for partner integrations.
+    # @return [nil]
+    def post_api_seats_reserve(idempotency_key, post_api_seats_reserve_request, opts = {})
+      post_api_seats_reserve_with_http_info(idempotency_key, post_api_seats_reserve_request, opts)
+      nil
+    end
+
+    # Place a temporary Redis hold (Lua TTL) before payment
+    # JSON body: &#x60;eventId&#x60;, &#x60;seatIds&#x60; (1–64 UUIDs, unique), &#x60;userId&#x60;, optional &#x60;holdToken&#x60; capability to append seats to an existing session. &#x60;userId&#x60; is customer metadata, never ownership proof. Renew/append share a two-hour maximum session lifetime. Optional &#x60;ticketBuyerId&#x60; (opaque partner buyer id) is stored on a new hold token and inherited by its confirmation. &#x60;eventId&#x60; also accepts the event key. Headers: **x-api-key** (B2B) *or* **Authorization: Bearer** (HS256 JWT); optional **x-tenant-id**; **&#x60;Idempotency-Key&#x60; is required** (1–255 chars after trim; use a fresh UUID v4 per checkout attempt). Repeats with the same key within ~24h return the cached HTTP status and JSON without re-running the Lua lock. Applies Redis TTL locks (**default 600 s**, overridden by **&#x60;SEAT_HOLD_TTL_SEC&#x60;**, or by the workspace **hold period** setting — &#x60;PATCH /workspace/settings&#x60;) with SSE &#x60;seat&#x60; → **&#x60;locked&#x60;**; Postgres remains **&#x60;available&#x60;** until **&#x60;POST /api/seats/confirm&#x60;** persists **&#x60;sold&#x60;** via the reservation worker. A hold token holds at most the workspace &#x60;maxSeatsPerHoldToken&#x60; seats (409 &#x60;seat_limit&#x60;). **Booking limits:** the organizer&#39;s *Max seats per order* (designer → Booking limits, stored as &#x60;layoutMeta.bookingRules&#x60; of the published chart/event layout) caps the seats one hold token holds, appends included, checked in the same atomic call as the locks (parallel appends cannot exceed it); the strictest of the sales-channel default, this limit, the per-buyer limit and &#x60;maxSeatsPerHoldToken&#x60; wins. Refused with 409 &#x60;booking_limit_exceeded&#x60; (&#x60;limit&#x60;, &#x60;current&#x60; seats already on the token, &#x60;requested&#x60;, &#x60;kind: \&quot;seats\&quot;&#x60;). Holds placed before a lower limit was published keep their seats and stay confirmable; they only cannot grow. With ticket buyer validation on, buyer tokens must carry a bound ticket buyer id (403 &#x60;ticket_buyer_required&#x60; / &#x60;ticket_buyer_mismatch&#x60;).
+    # @param idempotency_key [String] Required deduplication key (max 255 chars after trim; UUID v4 recommended). 24h idempotent cache replay in Redis per tenant.
+    # @param post_api_seats_reserve_request [PostApiSeatsReserveRequest] 
+    # @param [Hash] opts the optional parameters
+    # @option opts [String] :x_api_key Partner B2B API key (alternative to Bearer).
+    # @option opts [String] :authorization Bearer + HS256 JWT for B2C clients.
+    # @option opts [String] :x_tenant_id Tenant id for partner integrations.
+    # @return [Array<(nil, Integer, Hash)>] nil, response status code and response headers
+    def post_api_seats_reserve_with_http_info(idempotency_key, post_api_seats_reserve_request, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: SeatsApi.post_api_seats_reserve ...'
+      end
+      # verify the required parameter 'idempotency_key' is set
+      if @api_client.config.client_side_validation && idempotency_key.nil?
+        fail ArgumentError, "Missing the required parameter 'idempotency_key' when calling SeatsApi.post_api_seats_reserve"
+      end
+      # verify the required parameter 'post_api_seats_reserve_request' is set
+      if @api_client.config.client_side_validation && post_api_seats_reserve_request.nil?
+        fail ArgumentError, "Missing the required parameter 'post_api_seats_reserve_request' when calling SeatsApi.post_api_seats_reserve"
+      end
+      # resource path
+      local_var_path = '/api/seats/reserve'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Content-Type'
+      content_type = @api_client.select_header_content_type(['application/json', 'multipart/form-data', 'text/plain'])
+      if !content_type.nil?
+          header_params['Content-Type'] = content_type
+      end
+      header_params[:'Idempotency-Key'] = idempotency_key
+      header_params[:'x-api-key'] = opts[:'x_api_key'] if !opts[:'x_api_key'].nil?
+      header_params[:'Authorization'] = opts[:'authorization'] if !opts[:'authorization'].nil?
+      header_params[:'x-tenant-id'] = opts[:'x_tenant_id'] if !opts[:'x_tenant_id'].nil?
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body] || @api_client.object_to_http_body(post_api_seats_reserve_request)
+
+      # return_type
+      return_type = opts[:debug_return_type]
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApiKeyAuth', 'BearerAuth']
+
+      new_options = opts.merge(
+        :operation => :"SeatsApi.post_api_seats_reserve",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:POST, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: SeatsApi#post_api_seats_reserve\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+  end
+end