@drttix/drt-sdk 1.5.0 → 2.0.0

package/README.md

@@ -50,6 +50,42 @@ await DRT.shopper.product.addProduct(productBody, {
 shopper. `shopperGuid`/`accountId` are the only values that become
 per-request. Portal and scanner are unaffected and remain singleton-scoped.
 
+### The API key
+
+**`DRT.init({ apiKey })` is mandatory (2.0.0).** Every service call — shopper,
+portal and scanner alike — throws `DRT SDK not initialized` until it has run;
+there is no keyless mode. Portal-only and scanner-only consumers pass
+`shopperScope: 'per-request'` so no shopper credentials are needed at init.
+
+The shopper API refuses every request that does not carry a live key in the
+`apikey` header, and only honours a key from the domains it was issued for
+(`recital_ticketing.dbo.shopper_api_key`). Keys look like
+`drt_shopper_de1ab347f47c…`. The convention across DRT services is to read it
+from the `DRT_API_KEY` environment variable (in Azure DevOps: the `SDK`
+variable group) and pass it to `DRT.init`:
+
+```ts
+DRT.init({ apiKey: process.env.DRT_API_KEY, shopperScope: "per-request" });
+```
+
+**Browsers** need nothing more: the browser sets the `Origin` header itself,
+and that is what the API matches against the key's allowed domains.
+
+**Servers** (a Node backend, a script) send no `Origin`, so they must declare
+the domain they act as, which the SDK sends as `x-drt-domain`:
+
+```ts
+DRT.init({
+  apiKey: process.env.DRT_API_KEY,
+  domain: "tap-to-pay.drttix.com",
+  shopperScope: "per-request",
+});
+```
+
+A missing key, an unknown or deactivated key, or a domain the key does not
+allow all answer `401` with `errorCode` `INVALID_API_KEY` or
+`API_KEY_DOMAIN_NOT_ALLOWED`.
+
 ---
 
 ## 🛠️ Local Development (Developer Only)

package/dist/cjs/src/functions/sdkConfig.d.ts

@@ -1,6 +1,29 @@
 export type ShopperScope = 'singleton' | 'per-request';
+/**
+ * Header a non-browser caller uses to declare the domain it acts as. The
+ * shopper API matches it against the api key's allowed domains when no
+ * browser-set Origin/Referer is present.
+ */
+export declare const DOMAIN_HEADER = "x-drt-domain";
 export interface SDKConfig {
+    /**
+     * A shopper API key issued by DRT ('drt_shopper_...'), sent as the `apikey`
+     * header on every call. The shopper API refuses any request without a live
+     * key, and only honours a key from the domains it was issued for: a browser
+     * is identified by the Origin header it sets itself; a server by `domain`.
+     *
+     * Read it from the DRT_API_KEY environment variable — never commit it.
+     */
     apiKey: string;
+    /**
+     * The domain this caller acts as (e.g. 'tap-to-pay.drttix.com'), sent as
+     * `x-drt-domain`. REQUIRED for callers that are not browsers — a Node
+     * backend, a server-side script — because they send no Origin/Referer, so
+     * without it the shopper API sees an empty domain and refuses the key.
+     * Browsers leave it unset: the API trusts the Origin the browser sets and
+     * ignores this header whenever an Origin/Referer is present.
+     */
+    domain?: string;
     /**
      * Required when shopperScope is 'singleton' (the default). Optional when
      * shopperScope is 'per-request' — in that mode these act only as a fallback
@@ -45,8 +68,13 @@ export interface SDKConfig {
  *
  * @example
  * ```javascript
- * // Backend serving many shoppers/accounts from a single SDK instance
- * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ * // Backend serving many shoppers/accounts from a single SDK instance.
+ * // A backend is not a browser, so it must also say which domain it acts as.
+ * DRT.init({
+ *   apiKey: process.env.DRT_API_KEY,
+ *   domain: 'tap-to-pay.drttix.com',
+ *   shopperScope: 'per-request',
+ * });
  *
  * // Pass shopperGuid/accountId per call instead
  * await DRT.shopper.product.addProduct(body, {
@@ -60,6 +88,13 @@ export declare function init(config: SDKConfig): void;
  * Check if the SDK has been initialized with credentials.
  */
 export declare function isReady(): boolean;
+/**
+ * Called by the shared request layer before EVERY request, for every service
+ * (shopper, portal, scanner). The SDK is unusable until DRT.init() has been
+ * given an api key — there is no keyless mode. Throwing here, rather than
+ * letting the request go out and fail at the API, names the fix in the error.
+ */
+export declare function assertInitialized(baseUrl: string): void;
 /**
  * Get the current SDK configuration (if initialized).
  */

package/dist/cjs/src/functions/sdkConfig.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOMAIN_HEADER = void 0;
 exports.init = init;
 exports.isReady = isReady;
+exports.assertInitialized = assertInitialized;
 exports.getConfig = getConfig;
 exports.getShopperScope = getShopperScope;
 exports.reset = reset;
@@ -10,6 +12,12 @@ exports.resolveShopperHeaders = resolveShopperHeaders;
 const OpenAPI_1 = require("../generated/shopper/core/OpenAPI");
 const OpenAPI_2 = require("../generated/scanner/core/OpenAPI");
 const OpenAPI_3 = require("../generated/portal/core/OpenAPI");
+/**
+ * Header a non-browser caller uses to declare the domain it acts as. The
+ * shopper API matches it against the api key's allowed domains when no
+ * browser-set Origin/Referer is present.
+ */
+exports.DOMAIN_HEADER = 'x-drt-domain';
 let isInitialized = false;
 let currentConfig = null;
 let currentShopperScope = 'singleton';
@@ -37,8 +45,13 @@ let currentShopperScope = 'singleton';
  *
  * @example
  * ```javascript
- * // Backend serving many shoppers/accounts from a single SDK instance
- * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ * // Backend serving many shoppers/accounts from a single SDK instance.
+ * // A backend is not a browser, so it must also say which domain it acts as.
+ * DRT.init({
+ *   apiKey: process.env.DRT_API_KEY,
+ *   domain: 'tap-to-pay.drttix.com',
+ *   shopperScope: 'per-request',
+ * });
  *
  * // Pass shopperGuid/accountId per call instead
  * await DRT.shopper.product.addProduct(body, {
@@ -61,6 +74,9 @@ function init(config) {
     // Portal and scanner are always singleton-scoped: one fixed set of
     // credentials for every call, applied globally via OpenAPI.HEADERS.
     const sharedHeaders = { apikey: config.apiKey };
+    if (config.domain) {
+        sharedHeaders[exports.DOMAIN_HEADER] = config.domain;
+    }
     if (config.shopperGuid && config.accountId) {
         sharedHeaders.shopperguid = config.shopperGuid;
         sharedHeaders.accountid = config.accountId;
@@ -80,6 +96,20 @@ function init(config) {
 function isReady() {
     return isInitialized;
 }
+/**
+ * Called by the shared request layer before EVERY request, for every service
+ * (shopper, portal, scanner). The SDK is unusable until DRT.init() has been
+ * given an api key — there is no keyless mode. Throwing here, rather than
+ * letting the request go out and fail at the API, names the fix in the error.
+ */
+function assertInitialized(baseUrl) {
+    if (isInitialized) {
+        return;
+    }
+    throw new Error(`DRT SDK not initialized — call DRT.init({ apiKey, ... }) before using it (request to ${baseUrl}). ` +
+        'The key comes from the DRT_API_KEY environment variable; a backend also passes ' +
+        "`domain`, and one that serves many shoppers passes shopperScope: 'per-request'.");
+}
 /**
  * Get the current SDK configuration (if initialized).
  */
@@ -123,9 +153,13 @@ function resolveShopperHeaders(context) {
             ? 'No shopperGuid/accountId available for this call. DRT SDK was initialized with shopperScope: "per-request" without defaults — pass { shopperGuid, accountId } as the last argument to this call.'
             : 'DRT SDK not initialized with shopperGuid/accountId. Call DRT.init() first.');
     }
-    return {
+    const headers = {
         shopperguid: shopperGuid,
         accountid: accountId,
         apikey: currentConfig.apiKey,
     };
+    if (currentConfig.domain) {
+        headers[exports.DOMAIN_HEADER] = currentConfig.domain;
+    }
+    return headers;
 }

package/dist/cjs/src/generated/portal/core/OpenAPI.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenAPI = void 0;
 exports.OpenAPI = {
     BASE: '',
-    VERSION: '20260831.1',
+    VERSION: '20260902.5',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/dist/cjs/src/generated/portal/core/request.js

@@ -7,6 +7,9 @@ exports.request = exports.catchErrorCodes = exports.getResponseBody = exports.ge
 /* eslint-disable */
 const ApiError_1 = require("./ApiError");
 const CancelablePromise_1 = require("./CancelablePromise");
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+const sdkConfig_1 = require("../../../functions/sdkConfig");
 const isDefined = (value) => {
     return value !== undefined && value !== null;
 };
@@ -288,6 +291,7 @@ const storeCookie = (key, value) => {
 const request = (config, options) => {
     return new CancelablePromise_1.CancelablePromise(async (resolve, reject, onCancel) => {
         try {
+            (0, sdkConfig_1.assertInitialized)(config.BASE);
             const url = getUrl(config, options);
             const formData = (0, exports.getFormData)(options);
             const body = (0, exports.getRequestBody)(options);

package/dist/cjs/src/generated/portal/index.d.ts

@@ -8,6 +8,7 @@ export type { AccountDetailResponseDto } from './models/AccountDetailResponseDto
 export { AccountingTimezone } from './models/AccountingTimezone';
 export type { ActionResponseDto } from './models/ActionResponseDto';
 export type { AddSessionSeatRequestDto } from './models/AddSessionSeatRequestDto';
+export type { AddSessionSeatResponseDto } from './models/AddSessionSeatResponseDto';
 export type { AddVideoAssetFormatRequestDto } from './models/AddVideoAssetFormatRequestDto';
 export type { AdminUserLevelResponseDto } from './models/AdminUserLevelResponseDto';
 export type { AdminUserResponseDto } from './models/AdminUserResponseDto';
@@ -327,6 +328,7 @@ export type { SendMailRequestDto } from './models/SendMailRequestDto';
 export type { SendReservationCodeMailRequestDto } from './models/SendReservationCodeMailRequestDto';
 export type { SendTextRequestDto } from './models/SendTextRequestDto';
 export type { SentMailResponseDto } from './models/SentMailResponseDto';
+export type { SessionSeatRefDto } from './models/SessionSeatRefDto';
 export type { SetTiersRequestDto } from './models/SetTiersRequestDto';
 export type { SettingsAndWavesResponseDto } from './models/SettingsAndWavesResponseDto';
 export type { SettingsDetailsResponseDto } from './models/SettingsDetailsResponseDto';
@@ -371,6 +373,7 @@ export type { SingleFundDetailResponseDto } from './models/SingleFundDetailRespo
 export type { SingleOrderDetailResponseDto } from './models/SingleOrderDetailResponseDto';
 export type { SinglePatronCodeResponseDto } from './models/SinglePatronCodeResponseDto';
 export type { SinglePerformerRequestDto } from './models/SinglePerformerRequestDto';
+export { SkippedSessionSeatDto } from './models/SkippedSessionSeatDto';
 export type { SoldTicketsResponseDto } from './models/SoldTicketsResponseDto';
 export type { StartImageUploadRequestDto } from './models/StartImageUploadRequestDto';
 export type { StartImageUploadResponseDto } from './models/StartImageUploadResponseDto';

package/dist/cjs/src/generated/portal/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SuperUserAdvancedStudioSettingsService = exports.SuperUserAbandonedCartsService = exports.ShowsService = exports.SettingsService = exports.ReportsService = exports.OrderLookupService = exports.HelpService = exports.FeaturesProductsService = exports.FeaturesPriorityService = exports.FeaturesLandingPageService = exports.FeaturesGoldenTicketsService = exports.FeaturesGiftCardsService = exports.FeaturesDonationsService = exports.FeaturesDiscountsService = exports.FeaturesCheckoutQuestionsService = exports.FeaturesBlockedSeatsService = exports.DashboardService = exports.ClientToolsWaitlistService = exports.ClientToolsUnapprovedOrdersService = exports.ClientToolsTicketScanningService = exports.ClientToolsTicketingLinkService = exports.ClientToolsThemesLibraryService = exports.ClientToolsThemeBuilderService = exports.ClientToolsStripeOnboardingService = exports.ClientToolsSeatAssignmentToolService = exports.ClientToolsRequestChangesService = exports.ClientToolsPatronDatabaseService = exports.ClientToolsParentLetterService = exports.ClientToolsInterviewUpdateService = exports.ClientToolsGeneratedEmailsService = exports.BookmarkService = exports.AuthService = exports.AppService = exports.AgreementsService = exports.AccountingService = exports.AccountService = exports.ToggleType = exports.ThemeImageFormat = exports.StudioFeesLedgerType = exports.StripeUsageOption = exports.ShowDeployOption = exports.SalesTaxRegistrationOption = exports.CreateShowRequestDto = exports.CheckoutAnswerType = exports.AgreementStatusResponseDto = exports.AccountingTimezone = exports.OpenAPI = exports.CancelError = exports.CancelablePromise = exports.ApiError = void 0;
-exports.SuperUserVideoAssetsService = exports.SuperUserTimedTriggersService = exports.SuperUserSupportTicketsService = exports.SuperUserStudioManagementIntegrationService = exports.SuperUserShoppersService = exports.SuperUserReleasedTicketsService = exports.SuperUserManageImageFilesService = exports.SuperUserLaunchReadinessService = exports.SuperUserImportBlockedSeatsService = exports.SuperUserExtraService = exports.SuperUserEditCssService = exports.SuperUserDocumentLibraryService = exports.SuperUserBuyerBlacklistService = exports.SuperUserAlertsAndNotificationsService = void 0;
+exports.SuperUserAbandonedCartsService = exports.ShowsService = exports.SettingsService = exports.ReportsService = exports.OrderLookupService = exports.HelpService = exports.FeaturesProductsService = exports.FeaturesPriorityService = exports.FeaturesLandingPageService = exports.FeaturesGoldenTicketsService = exports.FeaturesGiftCardsService = exports.FeaturesDonationsService = exports.FeaturesDiscountsService = exports.FeaturesCheckoutQuestionsService = exports.FeaturesBlockedSeatsService = exports.DashboardService = exports.ClientToolsWaitlistService = exports.ClientToolsUnapprovedOrdersService = exports.ClientToolsTicketScanningService = exports.ClientToolsTicketingLinkService = exports.ClientToolsThemesLibraryService = exports.ClientToolsThemeBuilderService = exports.ClientToolsStripeOnboardingService = exports.ClientToolsSeatAssignmentToolService = exports.ClientToolsRequestChangesService = exports.ClientToolsPatronDatabaseService = exports.ClientToolsParentLetterService = exports.ClientToolsInterviewUpdateService = exports.ClientToolsGeneratedEmailsService = exports.BookmarkService = exports.AuthService = exports.AppService = exports.AgreementsService = exports.AccountingService = exports.AccountService = exports.ToggleType = exports.ThemeImageFormat = exports.StudioFeesLedgerType = exports.StripeUsageOption = exports.SkippedSessionSeatDto = exports.ShowDeployOption = exports.SalesTaxRegistrationOption = exports.CreateShowRequestDto = exports.CheckoutAnswerType = exports.AgreementStatusResponseDto = exports.AccountingTimezone = exports.OpenAPI = exports.CancelError = exports.CancelablePromise = exports.ApiError = void 0;
+exports.SuperUserVideoAssetsService = exports.SuperUserTimedTriggersService = exports.SuperUserSupportTicketsService = exports.SuperUserStudioManagementIntegrationService = exports.SuperUserShoppersService = exports.SuperUserReleasedTicketsService = exports.SuperUserManageImageFilesService = exports.SuperUserLaunchReadinessService = exports.SuperUserImportBlockedSeatsService = exports.SuperUserExtraService = exports.SuperUserEditCssService = exports.SuperUserDocumentLibraryService = exports.SuperUserBuyerBlacklistService = exports.SuperUserAlertsAndNotificationsService = exports.SuperUserAdvancedStudioSettingsService = void 0;
 /* generated using openapi-typescript-codegen -- do not edit */
 /* istanbul ignore file */
 /* tslint:disable */
@@ -25,6 +25,8 @@ var SalesTaxRegistrationOption_1 = require("./models/SalesTaxRegistrationOption"
 Object.defineProperty(exports, "SalesTaxRegistrationOption", { enumerable: true, get: function () { return SalesTaxRegistrationOption_1.SalesTaxRegistrationOption; } });
 var ShowDeployOption_1 = require("./models/ShowDeployOption");
 Object.defineProperty(exports, "ShowDeployOption", { enumerable: true, get: function () { return ShowDeployOption_1.ShowDeployOption; } });
+var SkippedSessionSeatDto_1 = require("./models/SkippedSessionSeatDto");
+Object.defineProperty(exports, "SkippedSessionSeatDto", { enumerable: true, get: function () { return SkippedSessionSeatDto_1.SkippedSessionSeatDto; } });
 var StripeUsageOption_1 = require("./models/StripeUsageOption");
 Object.defineProperty(exports, "StripeUsageOption", { enumerable: true, get: function () { return StripeUsageOption_1.StripeUsageOption; } });
 var StudioFeesLedgerType_1 = require("./models/StudioFeesLedgerType");

package/dist/cjs/src/generated/portal/models/AddSessionSeatResponseDto.d.ts

@@ -0,0 +1,7 @@
+import type { SessionSeatRefDto } from './SessionSeatRefDto';
+import type { SkippedSessionSeatDto } from './SkippedSessionSeatDto';
+export type AddSessionSeatResponseDto = {
+    success: boolean;
+    added: Array<SessionSeatRefDto>;
+    skipped: Array<SkippedSessionSeatDto>;
+};

package/dist/cjs/src/generated/portal/models/AddSessionSeatResponseDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/src/generated/portal/models/OrderRecalculateRequestDto.d.ts

@@ -9,6 +9,10 @@ export type OrderRecalculateRequestDto = {
      * Set to 1 to include the shopper's held cart seats in the recalculation. Required for exchanges so the seats being exchanged into are priced into the new total.
      */
     addCart?: number;
+    /**
+     * Set to 1 to include the shopper's held blocked seats in the recalculation. `addCart` does not cover them: a blocked seat is held through session_blocked_seat_assoc and leaves seat_status.shopper NULL, so the cart-side recalc never sees it and prices it at zero.
+     */
+    addBlocked?: number;
     ticket: Array<ShowSeatPair>;
     tiers: Array<ShowSeatTierPair>;
 };

package/dist/cjs/src/generated/portal/models/SessionSeatRefDto.d.ts

@@ -0,0 +1,4 @@
+export type SessionSeatRefDto = {
+    showId: number;
+    seatId: number;
+};

package/dist/cjs/src/generated/portal/models/SessionSeatRefDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/src/generated/portal/models/ShowBlockedSeatResponseDto.d.ts

@@ -17,5 +17,16 @@ export type ShowBlockedSeatResponseDto = {
     dateBlocked: string | null;
     emailed: number | null;
     locked: number | null;
+    /**
+     * 1 when no other live admin session holds this blocked seat (it may already be held by the caller).
+     */
     available: number;
+    /**
+     * 1 when the caller's own session already holds this seat for the exchange in progress.
+     */
+    heldBySelf: number;
+    /**
+     * 1 when another live admin session holds this seat — adding it will be skipped.
+     */
+    heldByOther: number;
 };

package/dist/cjs/src/generated/portal/models/SkippedSessionSeatDto.d.ts

@@ -0,0 +1,17 @@
+export type SkippedSessionSeatDto = {
+    showId: number;
+    seatId: number;
+    /**
+     * HELD_BY_OTHER_SESSION: another live admin session already holds the seat. NOT_AVAILABLE: the seat is no longer a blocked seat for this studio.
+     */
+    reason: SkippedSessionSeatDto.reason;
+};
+export declare namespace SkippedSessionSeatDto {
+    /**
+     * HELD_BY_OTHER_SESSION: another live admin session already holds the seat. NOT_AVAILABLE: the seat is no longer a blocked seat for this studio.
+     */
+    enum reason {
+        HELD_BY_OTHER_SESSION = "HELD_BY_OTHER_SESSION",
+        NOT_AVAILABLE = "NOT_AVAILABLE"
+    }
+}

package/dist/cjs/src/generated/portal/models/SkippedSessionSeatDto.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkippedSessionSeatDto = void 0;
+var SkippedSessionSeatDto;
+(function (SkippedSessionSeatDto) {
+    /**
+     * HELD_BY_OTHER_SESSION: another live admin session already holds the seat. NOT_AVAILABLE: the seat is no longer a blocked seat for this studio.
+     */
+    let reason;
+    (function (reason) {
+        reason["HELD_BY_OTHER_SESSION"] = "HELD_BY_OTHER_SESSION";
+        reason["NOT_AVAILABLE"] = "NOT_AVAILABLE";
+    })(reason = SkippedSessionSeatDto.reason || (SkippedSessionSeatDto.reason = {}));
+})(SkippedSessionSeatDto || (exports.SkippedSessionSeatDto = SkippedSessionSeatDto = {}));

package/dist/cjs/src/generated/portal/services/OrderLookupService.d.ts

@@ -1,4 +1,5 @@
 import type { AddSessionSeatRequestDto } from '../models/AddSessionSeatRequestDto';
+import type { AddSessionSeatResponseDto } from '../models/AddSessionSeatResponseDto';
 import type { CancelExchangeTicketRequestDto } from '../models/CancelExchangeTicketRequestDto';
 import type { ExecuteReleaseSeatRequestDto } from '../models/ExecuteReleaseSeatRequestDto';
 import type { ExecuteSeatExchangeRequestDto } from '../models/ExecuteSeatExchangeRequestDto';
@@ -253,8 +254,8 @@ export declare class OrderLookupService {
      * To add seats to the session for the order
      * @param xStudioId The ID of the studio
      * @param requestBody Add seats to session details
-     * @returns SuccessResponse Seats added to session successfully
+     * @returns AddSessionSeatResponseDto Blocked seats processed. `added` landed in the exchange session; `skipped` did not (with the reason), since a seat held by another live admin session cannot be added.
      * @throws ApiError
      */
-    static addSeatsToSession(xStudioId: string, requestBody: AddSessionSeatRequestDto): CancelablePromise<SuccessResponse>;
+    static addSeatsToSession(xStudioId: string, requestBody: AddSessionSeatRequestDto): CancelablePromise<AddSessionSeatResponseDto>;
 }

package/dist/cjs/src/generated/portal/services/OrderLookupService.js

@@ -489,7 +489,7 @@ class OrderLookupService {
      * To add seats to the session for the order
      * @param xStudioId The ID of the studio
      * @param requestBody Add seats to session details
-     * @returns SuccessResponse Seats added to session successfully
+     * @returns AddSessionSeatResponseDto Blocked seats processed. `added` landed in the exchange session; `skipped` did not (with the reason), since a seat held by another live admin session cannot be added.
      * @throws ApiError
      */
     static addSeatsToSession(xStudioId, requestBody) {

package/dist/cjs/src/generated/portal/types.d.ts

@@ -3,6 +3,7 @@ export type { AcceptAgreementRequestDto } from './models/AcceptAgreementRequestD
 export type { AccountDetailResponseDto } from './models/AccountDetailResponseDto';
 export type { ActionResponseDto } from './models/ActionResponseDto';
 export type { AddSessionSeatRequestDto } from './models/AddSessionSeatRequestDto';
+export type { AddSessionSeatResponseDto } from './models/AddSessionSeatResponseDto';
 export type { AddVideoAssetFormatRequestDto } from './models/AddVideoAssetFormatRequestDto';
 export type { AdminUserLevelResponseDto } from './models/AdminUserLevelResponseDto';
 export type { AdminUserResponseDto } from './models/AdminUserResponseDto';
@@ -318,6 +319,7 @@ export type { SendMailRequestDto } from './models/SendMailRequestDto';
 export type { SendReservationCodeMailRequestDto } from './models/SendReservationCodeMailRequestDto';
 export type { SendTextRequestDto } from './models/SendTextRequestDto';
 export type { SentMailResponseDto } from './models/SentMailResponseDto';
+export type { SessionSeatRefDto } from './models/SessionSeatRefDto';
 export type { SetTiersRequestDto } from './models/SetTiersRequestDto';
 export type { SettingsAndWavesResponseDto } from './models/SettingsAndWavesResponseDto';
 export type { SettingsDetailsResponseDto } from './models/SettingsDetailsResponseDto';

package/dist/cjs/src/generated/scanner/core/request.js

@@ -7,6 +7,9 @@ exports.request = exports.catchErrorCodes = exports.getResponseBody = exports.ge
 /* eslint-disable */
 const ApiError_1 = require("./ApiError");
 const CancelablePromise_1 = require("./CancelablePromise");
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+const sdkConfig_1 = require("../../../functions/sdkConfig");
 const isDefined = (value) => {
     return value !== undefined && value !== null;
 };
@@ -288,6 +291,7 @@ const storeCookie = (key, value) => {
 const request = (config, options) => {
     return new CancelablePromise_1.CancelablePromise(async (resolve, reject, onCancel) => {
         try {
+            (0, sdkConfig_1.assertInitialized)(config.BASE);
             const url = getUrl(config, options);
             const formData = (0, exports.getFormData)(options);
             const body = (0, exports.getRequestBody)(options);

package/dist/cjs/src/generated/shopper/core/OpenAPI.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OpenAPI = void 0;
 exports.OpenAPI = {
     BASE: 'https://api.drttix.com/shopper',
-    VERSION: '20260831.4',
+    VERSION: '20260903.1',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/dist/cjs/src/generated/shopper/core/request.js

@@ -7,6 +7,9 @@ exports.request = exports.catchErrorCodes = exports.getResponseBody = exports.ge
 /* eslint-disable */
 const ApiError_1 = require("./ApiError");
 const CancelablePromise_1 = require("./CancelablePromise");
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+const sdkConfig_1 = require("../../../functions/sdkConfig");
 const isDefined = (value) => {
     return value !== undefined && value !== null;
 };
@@ -288,6 +291,7 @@ const storeCookie = (key, value) => {
 const request = (config, options) => {
     return new CancelablePromise_1.CancelablePromise(async (resolve, reject, onCancel) => {
         try {
+            (0, sdkConfig_1.assertInitialized)(config.BASE);
             const url = getUrl(config, options);
             const formData = (0, exports.getFormData)(options);
             const body = (0, exports.getRequestBody)(options);

package/dist/cjs/src/generated/shopper/index.d.ts

@@ -10,6 +10,7 @@ export type { AnswerInput } from './models/AnswerInput';
 export type { AssignNamesReturn } from './models/AssignNamesReturn';
 export type { BAHold } from './models/BAHold';
 export type { BlockOfTickets } from './models/BlockOfTickets';
+export type { CapabilityManifestDto } from './models/CapabilityManifestDto';
 export type { Cart } from './models/Cart';
 export type { CartAmounts } from './models/CartAmounts';
 export type { CartClearResult } from './models/CartClearResult';
@@ -17,7 +18,6 @@ export type { CartCounts } from './models/CartCounts';
 export type { CartCountsLite } from './models/CartCountsLite';
 export type { CartHashResponse } from './models/CartHashResponse';
 export type { CartItemCounts } from './models/CartItemCounts';
-export type { CartStateEnvelope } from './models/CartStateEnvelope';
 export type { CartSummary } from './models/CartSummary';
 export type { CartTierOption } from './models/CartTierOption';
 export type { CartTierSeat } from './models/CartTierSeat';
@@ -39,7 +39,7 @@ export type { CheckoutSuccessResponse } from './models/CheckoutSuccessResponse';
 export type { CodeDto } from './models/CodeDto';
 export type { CompleteBody } from './models/CompleteBody';
 export type { ConnectedAccountResponse } from './models/ConnectedAccountResponse';
-export type { CorrelatedCode } from './models/CorrelatedCode';
+export { CorrelatedCode } from './models/CorrelatedCode';
 export type { CreateCustomerResponse } from './models/CreateCustomerResponse';
 export type { CreatePaymentIntentBody } from './models/CreatePaymentIntentBody';
 export type { CreatePaymentIntentResponse } from './models/CreatePaymentIntentResponse';
@@ -55,6 +55,7 @@ export type { DonationText } from './models/DonationText';
 export type { EmailUpdate } from './models/EmailUpdate';
 export type { EngineSeat } from './models/EngineSeat';
 export type { EventDetails } from './models/EventDetails';
+export type { EventFormat } from './models/EventFormat';
 export type { EventGroup } from './models/EventGroup';
 export type { EventLegend } from './models/EventLegend';
 export type { EventLegendItem } from './models/EventLegendItem';

package/dist/cjs/src/generated/shopper/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StripeService = exports.SessionService = exports.SeatService = exports.ProductService = exports.PaymentService = exports.OrderService = exports.HealthService = exports.GiftCardService = exports.EventService = exports.DonationService = exports.CodeService = exports.CheckoutService = exports.CartService = exports.AccountService = exports.OpenAPI = exports.CancelError = exports.CancelablePromise = exports.ApiError = void 0;
+exports.StripeService = exports.SessionService = exports.SeatService = exports.ProductService = exports.PaymentService = exports.OrderService = exports.HealthService = exports.GiftCardService = exports.EventService = exports.DonationService = exports.CodeService = exports.CheckoutService = exports.CartService = exports.AccountService = exports.CorrelatedCode = exports.OpenAPI = exports.CancelError = exports.CancelablePromise = exports.ApiError = void 0;
 /* generated using openapi-typescript-codegen -- do not edit */
 /* istanbul ignore file */
 /* tslint:disable */
@@ -12,6 +12,8 @@ Object.defineProperty(exports, "CancelablePromise", { enumerable: true, get: fun
 Object.defineProperty(exports, "CancelError", { enumerable: true, get: function () { return CancelablePromise_1.CancelError; } });
 var OpenAPI_1 = require("./core/OpenAPI");
 Object.defineProperty(exports, "OpenAPI", { enumerable: true, get: function () { return OpenAPI_1.OpenAPI; } });
+var CorrelatedCode_1 = require("./models/CorrelatedCode");
+Object.defineProperty(exports, "CorrelatedCode", { enumerable: true, get: function () { return CorrelatedCode_1.CorrelatedCode; } });
 var AccountService_1 = require("./services/AccountService");
 Object.defineProperty(exports, "AccountService", { enumerable: true, get: function () { return AccountService_1.AccountService; } });
 var CartService_1 = require("./services/CartService");

package/dist/cjs/src/generated/shopper/models/CapabilityManifestDto.d.ts

@@ -0,0 +1,18 @@
+export type CapabilityManifestDto = {
+    /**
+     * True when session.logged_in = 1 AND a session_admin row exists for this (shopper, studio) — i.e. a box-office operator is driving the session.
+     */
+    operator: boolean;
+    /**
+     * True when the requesting IP appears in whitelist_ip.
+     */
+    whitelistedIp: boolean;
+    /**
+     * The IP the server saw. Null unless whitelistedIp is true.
+     */
+    ip: string | null;
+    /**
+     * What the UI may paint. A RENDERING HINT, not a permission: every entry corresponds to a server-side check that is enforced independently, and a client that fakes this list gains nothing.
+     */
+    capabilities: Array<'debug-bar' | 'cash-payment' | 'order-testing' | 'pos-defaults'>;
+};

package/dist/cjs/src/generated/shopper/models/CapabilityManifestDto.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/src/generated/shopper/models/CompleteBody.d.ts

@@ -1,4 +1,4 @@
 export type CompleteBody = {
     cartHash: string;
-    ipAddress: string;
+    ipAddress?: string;
 };

package/dist/cjs/src/generated/shopper/models/CorrelatedCode.d.ts

@@ -11,4 +11,27 @@ export type CorrelatedCode = {
      * Human-readable summary of the code (shows, seats, effect).
      */
     details: string | null;
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    status: CorrelatedCode.status;
+    /**
+     * Calendar date (yyyy-MM-dd) the code becomes usable, or null if it already is. Drives the "AVAILABLE {date}" label. Naive by design: the column carries a wall clock in the studio's own time, and an instant renders a day early west of Greenwich.
+     */
+    availableFrom: string | null;
+    /**
+     * Calendar date (yyyy-MM-dd) the code expires, or null if it never does. Drives the "EXPIRED {date}" label. Naive, as availableFrom.
+     */
+    expiresAt: string | null;
 };
+export declare namespace CorrelatedCode {
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    enum status {
+        AVAILABLE = "available",
+        USED = "used",
+        EXPIRED = "expired",
+        NOT_YET = "notYet"
+    }
+}

package/dist/cjs/src/generated/shopper/models/CorrelatedCode.js

@@ -1,2 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.CorrelatedCode = void 0;
+var CorrelatedCode;
+(function (CorrelatedCode) {
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    let status;
+    (function (status) {
+        status["AVAILABLE"] = "available";
+        status["USED"] = "used";
+        status["EXPIRED"] = "expired";
+        status["NOT_YET"] = "notYet";
+    })(status = CorrelatedCode.status || (CorrelatedCode.status = {}));
+})(CorrelatedCode || (exports.CorrelatedCode = CorrelatedCode = {}));

package/dist/cjs/src/generated/shopper/models/EmailUpdate.d.ts

@@ -3,5 +3,5 @@ export type EmailUpdate = {
     tickets: Array<Ticket>;
     email: string;
     name: string;
-    message: string;
+    message?: string;
 };

package/dist/cjs/src/generated/shopper/models/EventFormat.d.ts

@@ -0,0 +1,18 @@
+export type EventFormat = {
+    /**
+     * The show id of this format.
+     */
+    showId: number;
+    /**
+     * show.type_id — the format kind.
+     */
+    typeId: number;
+    /**
+     * This format's seating-chart id (PROJ-902 — lets a sibling format's pill link directly without resolving the chart on click).
+     */
+    chartId: number;
+    /**
+     * Roster (performer) count for this format (PROJ-912).
+     */
+    rosterCount: number;
+};

package/dist/cjs/src/generated/shopper/models/EventFormat.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });