@drttix/drt-sdk 1.5.0 → 2.0.0

package/dist/esm/src/generated/shopper/core/request.js

@@ -4,6 +4,9 @@
 /* eslint-disable */
 import { ApiError } from "./ApiError.js";
 import { CancelablePromise } from "./CancelablePromise.js";
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+import { assertInitialized } from "../../../functions/sdkConfig.js";
 export const isDefined = (value) => {
     return value !== undefined && value !== null;
 };
@@ -270,6 +273,7 @@ const storeCookie = (key, value) => {
 export const request = (config, options) => {
     return new CancelablePromise(async (resolve, reject, onCancel) => {
         try {
+            assertInitialized(config.BASE);
             const url = getUrl(config, options);
             const formData = getFormData(options);
             const body = getRequestBody(options);

package/dist/esm/src/generated/shopper/index.d.ts

@@ -10,6 +10,7 @@ export type { AnswerInput } from './models/AnswerInput';
 export type { AssignNamesReturn } from './models/AssignNamesReturn';
 export type { BAHold } from './models/BAHold';
 export type { BlockOfTickets } from './models/BlockOfTickets';
+export type { CapabilityManifestDto } from './models/CapabilityManifestDto';
 export type { Cart } from './models/Cart';
 export type { CartAmounts } from './models/CartAmounts';
 export type { CartClearResult } from './models/CartClearResult';
@@ -17,7 +18,6 @@ export type { CartCounts } from './models/CartCounts';
 export type { CartCountsLite } from './models/CartCountsLite';
 export type { CartHashResponse } from './models/CartHashResponse';
 export type { CartItemCounts } from './models/CartItemCounts';
-export type { CartStateEnvelope } from './models/CartStateEnvelope';
 export type { CartSummary } from './models/CartSummary';
 export type { CartTierOption } from './models/CartTierOption';
 export type { CartTierSeat } from './models/CartTierSeat';
@@ -39,7 +39,7 @@ export type { CheckoutSuccessResponse } from './models/CheckoutSuccessResponse';
 export type { CodeDto } from './models/CodeDto';
 export type { CompleteBody } from './models/CompleteBody';
 export type { ConnectedAccountResponse } from './models/ConnectedAccountResponse';
-export type { CorrelatedCode } from './models/CorrelatedCode';
+export { CorrelatedCode } from './models/CorrelatedCode';
 export type { CreateCustomerResponse } from './models/CreateCustomerResponse';
 export type { CreatePaymentIntentBody } from './models/CreatePaymentIntentBody';
 export type { CreatePaymentIntentResponse } from './models/CreatePaymentIntentResponse';
@@ -55,6 +55,7 @@ export type { DonationText } from './models/DonationText';
 export type { EmailUpdate } from './models/EmailUpdate';
 export type { EngineSeat } from './models/EngineSeat';
 export type { EventDetails } from './models/EventDetails';
+export type { EventFormat } from './models/EventFormat';
 export type { EventGroup } from './models/EventGroup';
 export type { EventLegend } from './models/EventLegend';
 export type { EventLegendItem } from './models/EventLegendItem';

package/dist/esm/src/generated/shopper/index.js

@@ -5,6 +5,7 @@
 export { ApiError } from './core/ApiError.js';
 export { CancelablePromise, CancelError } from './core/CancelablePromise.js';
 export { OpenAPI } from './core/OpenAPI.js';
+export { CorrelatedCode } from './models/CorrelatedCode.js';
 export { AccountService } from './services/AccountService.js';
 export { CartService } from './services/CartService.js';
 export { CheckoutService } from './services/CheckoutService.js';

package/dist/esm/src/generated/shopper/models/CapabilityManifestDto.d.ts

@@ -0,0 +1,18 @@
+export type CapabilityManifestDto = {
+    /**
+     * True when session.logged_in = 1 AND a session_admin row exists for this (shopper, studio) — i.e. a box-office operator is driving the session.
+     */
+    operator: boolean;
+    /**
+     * True when the requesting IP appears in whitelist_ip.
+     */
+    whitelistedIp: boolean;
+    /**
+     * The IP the server saw. Null unless whitelistedIp is true.
+     */
+    ip: string | null;
+    /**
+     * What the UI may paint. A RENDERING HINT, not a permission: every entry corresponds to a server-side check that is enforced independently, and a client that fakes this list gains nothing.
+     */
+    capabilities: Array<'debug-bar' | 'cash-payment' | 'order-testing' | 'pos-defaults'>;
+};

package/dist/esm/src/generated/shopper/models/CapabilityManifestDto.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/src/generated/shopper/models/CompleteBody.d.ts

@@ -1,4 +1,4 @@
 export type CompleteBody = {
     cartHash: string;
-    ipAddress: string;
+    ipAddress?: string;
 };

package/dist/esm/src/generated/shopper/models/CorrelatedCode.d.ts

@@ -11,4 +11,27 @@ export type CorrelatedCode = {
      * Human-readable summary of the code (shows, seats, effect).
      */
     details: string | null;
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    status: CorrelatedCode.status;
+    /**
+     * Calendar date (yyyy-MM-dd) the code becomes usable, or null if it already is. Drives the "AVAILABLE {date}" label. Naive by design: the column carries a wall clock in the studio's own time, and an instant renders a day early west of Greenwich.
+     */
+    availableFrom: string | null;
+    /**
+     * Calendar date (yyyy-MM-dd) the code expires, or null if it never does. Drives the "EXPIRED {date}" label. Naive, as availableFrom.
+     */
+    expiresAt: string | null;
 };
+export declare namespace CorrelatedCode {
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    enum status {
+        AVAILABLE = "available",
+        USED = "used",
+        EXPIRED = "expired",
+        NOT_YET = "notYet"
+    }
+}

package/dist/esm/src/generated/shopper/models/CorrelatedCode.js

@@ -1 +1,13 @@
-export {};
+export var CorrelatedCode;
+(function (CorrelatedCode) {
+    /**
+     * Whether the code can be applied now. The listing includes codes that cannot be, so the UI can say WHY (the legacy modal printed "Already Used" / "EXPIRED {date}" / "AVAILABLE {date}" beside a disabled button) rather than offering an Apply that will fail.
+     */
+    let status;
+    (function (status) {
+        status["AVAILABLE"] = "available";
+        status["USED"] = "used";
+        status["EXPIRED"] = "expired";
+        status["NOT_YET"] = "notYet";
+    })(status = CorrelatedCode.status || (CorrelatedCode.status = {}));
+})(CorrelatedCode || (CorrelatedCode = {}));

package/dist/esm/src/generated/shopper/models/EmailUpdate.d.ts

@@ -3,5 +3,5 @@ export type EmailUpdate = {
     tickets: Array<Ticket>;
     email: string;
     name: string;
-    message: string;
+    message?: string;
 };

package/dist/esm/src/generated/shopper/models/EventFormat.d.ts

@@ -0,0 +1,18 @@
+export type EventFormat = {
+    /**
+     * The show id of this format.
+     */
+    showId: number;
+    /**
+     * show.type_id — the format kind.
+     */
+    typeId: number;
+    /**
+     * This format's seating-chart id (PROJ-902 — lets a sibling format's pill link directly without resolving the chart on click).
+     */
+    chartId: number;
+    /**
+     * Roster (performer) count for this format (PROJ-912).
+     */
+    rosterCount: number;
+};

package/dist/esm/src/generated/shopper/models/EventFormat.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/src/generated/shopper/models/EventListItem.d.ts

@@ -1,3 +1,4 @@
+import type { EventFormat } from './EventFormat';
 export type EventListItem = {
     id: number;
     chartId: number;
@@ -44,21 +45,9 @@ export type EventListItem = {
     salesTax: number;
     theatreName: string;
     /**
-     * Show type ids of every format collapsed into this row (parallel to showIdList).
+     * Every format collapsed into this row (same production offered in-person/livestream/VOD/…).
      */
-    typeIdList: Array<number>;
-    /**
-     * Show ids of every format collapsed into this row.
-     */
-    showIdList: Array<number>;
-    /**
-     * Chart ids parallel to showIdList (PROJ-902 — lets a sibling format's pill link directly without resolving the chart id on click).
-     */
-    chartIdList: Array<number>;
-    /**
-     * Roster (performer) counts parallel to showIdList (PROJ-912).
-     */
-    rosterCountList: Array<number>;
+    formats: Array<EventFormat>;
     /**
      * Show artwork URL (cloud URL, or the legacy local path when not clouded — dbo.ShowsAvailable derivation). Null when the show has no artwork (PROJ-901).
      */

package/dist/esm/src/generated/shopper/models/GAResponse.d.ts

@@ -1,5 +1,13 @@
-import type { CartStateEnvelope } from './CartStateEnvelope';
+import type { EngineSeat } from './EngineSeat';
 export type GAResponse = {
+    /**
+     * False when the engine refused the request and held nothing. Absent on the release path, which cannot partially fail.
+     */
+    success?: boolean;
+    /**
+     * The engine's own explanation when success is false (e.g. 'No occupancy available in chart.').
+     */
+    message?: string;
     /**
      * The number of seats involved in the operation.
      */
@@ -13,7 +21,11 @@ export type GAResponse = {
      */
     seatsHeld?: number;
     /**
-     * Post-hold/release cart state (SEAT-1C) — no follow-up cart calls needed. Absent only if the state build failed.
+     * The seats the engine actually held/released in this call — the client applies exactly this delta to its own list (2026-08-31: seat clicks carry no cart state; totals belong to the summary pages).
+     */
+    seats?: Array<EngineSeat>;
+    /**
+     * Server processing time for this request, in ms.
      */
-    cartState?: CartStateEnvelope;
+    serverTime?: number;
 };

package/dist/esm/src/generated/shopper/models/GaTier.d.ts

@@ -1,6 +1,9 @@
 export type GaTier = {
     tierId: number;
-    name: string;
+    /**
+     * The name of this price level. Null for the single implicit level a general-admission show has when it defines no tiers of its own (tierId 0) — naming that one belongs to the client, and legacy labels it "ALL TICKETS".
+     */
+    name: string | null;
     /**
      * Advance (pre-door) price.
      */

package/dist/esm/src/generated/shopper/models/SaveDetailsBody.d.ts

@@ -13,7 +13,6 @@ export type SaveDetailsBody = {
     billingCountry?: string;
     ccType?: string;
     ccNum?: string;
-    ccCvn?: string;
     ccExpMonth?: string;
     ccExpYear?: string;
     studentCredit?: string;

package/dist/esm/src/generated/shopper/models/SeatHoldObject.d.ts

@@ -1,10 +1,9 @@
-import type { CartStateEnvelope } from './CartStateEnvelope';
 import type { EngineSeat } from './EngineSeat';
 export type SeatHoldObject = {
     seats: Array<EngineSeat>;
     success: boolean;
     /**
-     * Post-release cart state (SEAT-1C) — everything the client would otherwise refetch. Absent only if the state build failed; fall back to the cart routes then.
+     * Server processing time for this request, in ms.
      */
-    cartState?: CartStateEnvelope;
+    serverTime?: number;
 };

package/dist/esm/src/generated/shopper/models/SeatHoldReturn.d.ts

@@ -1,11 +1,10 @@
-import type { CartStateEnvelope } from './CartStateEnvelope';
 import type { EngineSeat } from './EngineSeat';
 export type SeatHoldReturn = {
     seats: Array<EngineSeat>;
     success: boolean;
     message: string;
     /**
-     * Post-hold cart state (SEAT-1C): the GET /cart/totals, GET /cart and GET /cart/counts payloads produced after the recompute — a seat click needs NO follow-up calls. Present on failures too (the unchanged cart, for optimistic-UI rollback). Absent only if the state build itself failed.
+     * Server processing time for this request, in ms.
      */
-    cartState?: CartStateEnvelope;
+    serverTime?: number;
 };

package/dist/esm/src/generated/shopper/models/SiteTheme.d.ts

@@ -3,6 +3,10 @@ export type SiteTheme = {
      * Resolved studio logo URL (legacy application.cfm rule): the newest image row named logo.png with a cloud_src wins; null means fall back to the legacy on-disk path /client-content/images/{studioId}/logo.png on the legacy host.
      */
     logoSrc: string | null;
+    /**
+     * The studio's compiled stylesheet (studio_design.css) — the same text legacy rpc/theme.cfm streamed as text/css, and the authoritative theme. The Admin Portal Theme Builder regenerates the `:root{}` block on every save and re-appends the superuser Custom CSS tool's hand-written block (everything from `* Start protected content *` onward), so it carries rules the structured fields below cannot express. The site injects it verbatim and only falls back to composing from those fields when this is null — a studio whose design predates the column.
+     */
+    css: string | null;
     id: number;
     studio_id: number;
     facebook_image_id: number | null;

package/dist/esm/src/generated/shopper/services/CartService.d.ts

@@ -54,8 +54,8 @@ export declare class CartService {
         accountId?: string;
     }): CancelablePromise<CartHashResponse>;
     /**
-     * Get Cash Payment Detail
-     * Returns cash payment details for the current shopper session, including order total, payments total, and house card credentials.
+     * Get Cash Payment Detail (operator only)
+     * Returns cash payment details for the current shopper session, including order total, payments total, and house card credentials. Requires a logged-in operator session — returns 403 for a plain shopper.
      * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
      * @returns CashPaymentDetail Cash payment detail retrieved successfully.
      * @throws ApiError

package/dist/esm/src/generated/shopper/services/CartService.js

@@ -79,8 +79,8 @@ export class CartService {
         });
     }
     /**
-     * Get Cash Payment Detail
-     * Returns cash payment details for the current shopper session, including order total, payments total, and house card credentials.
+     * Get Cash Payment Detail (operator only)
+     * Returns cash payment details for the current shopper session, including order total, payments total, and house card credentials. Requires a logged-in operator session — returns 403 for a plain shopper.
      * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
      * @returns CashPaymentDetail Cash payment detail retrieved successfully.
      * @throws ApiError

package/dist/esm/src/generated/shopper/services/OrderService.d.ts

@@ -93,8 +93,8 @@ export declare class OrderService {
         accountId?: string;
     }): CancelablePromise<LinkWithSuccess>;
     /**
-     * Get testing guid
-     * Fetches a testing guid for development purposes.
+     * Get testing guid (operator only)
+     * Fetches a random order guid for development purposes. Requires a logged-in operator session — returns 403 for a plain shopper.
      * @param guid Unique identifier for an order.
      * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
      * @returns GuidReturn Returns a testing guid.

package/dist/esm/src/generated/shopper/services/OrderService.js

@@ -118,8 +118,8 @@ export class OrderService {
         });
     }
     /**
-     * Get testing guid
-     * Fetches a testing guid for development purposes.
+     * Get testing guid (operator only)
+     * Fetches a random order guid for development purposes. Requires a logged-in operator session — returns 403 for a plain shopper.
      * @param guid Unique identifier for an order.
      * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
      * @returns GuidReturn Returns a testing guid.

package/dist/esm/src/generated/shopper/services/SessionService.d.ts

@@ -1,3 +1,4 @@
+import type { CapabilityManifestDto } from '../models/CapabilityManifestDto';
 import type { CreateSessionDto } from '../models/CreateSessionDto';
 import type { ExtendTimerDto } from '../models/ExtendTimerDto';
 import type { ExtendTimerResponseDto } from '../models/ExtendTimerResponseDto';
@@ -60,4 +61,26 @@ export declare class SessionService {
         shopperGuid?: string;
         accountId?: string;
     }, requestBody?: ExtendTimerDto): CancelablePromise<ExtendTimerResponseDto>;
+    /**
+     * Shorten the cart timer
+     * Shortens the cart-hold timer to 5 seconds from now via the Session-Service (legacy cart-shorten), clearing show_group_id and moving the held seats’ release times with it. Staff debug tool for walking the cart-timeout flow on demand.
+     * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
+     * @returns ExtendTimerResponseDto Returns the shortened timer state.
+     * @throws ApiError
+     */
+    static shortenTimer(context?: {
+        shopperGuid?: string;
+        accountId?: string;
+    }): CancelablePromise<ExtendTimerResponseDto>;
+    /**
+     * What this caller may see
+     * Returns the operator flag, the debug IP-allowlist flag, and the resulting capability list for the calling session. A rendering hint for the UI — never a permission.
+     * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
+     * @returns CapabilityManifestDto Capability manifest for the calling session.
+     * @throws ApiError
+     */
+    static getCapabilities(context?: {
+        shopperGuid?: string;
+        accountId?: string;
+    }): CancelablePromise<CapabilityManifestDto>;
 }

package/dist/esm/src/generated/shopper/services/SessionService.js

@@ -104,4 +104,42 @@ export class SessionService {
             },
         });
     }
+    /**
+     * Shorten the cart timer
+     * Shortens the cart-hold timer to 5 seconds from now via the Session-Service (legacy cart-shorten), clearing show_group_id and moving the held seats’ release times with it. Staff debug tool for walking the cart-timeout flow on demand.
+     * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
+     * @returns ExtendTimerResponseDto Returns the shortened timer state.
+     * @throws ApiError
+     */
+    static shortenTimer(context) {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/session/shorten',
+            headers: resolveShopperHeaders(context),
+            errors: {
+                400: `Bad Request error with error details.`,
+                404: `Not found error with error details.`,
+                500: `Internal Server Error, please contact developers.`,
+            },
+        });
+    }
+    /**
+     * What this caller may see
+     * Returns the operator flag, the debug IP-allowlist flag, and the resulting capability list for the calling session. A rendering hint for the UI — never a permission.
+     * @param context Optional per-call { shopperGuid, accountId } override. Falls back to the values passed to DRT.init().
+     * @returns CapabilityManifestDto Capability manifest for the calling session.
+     * @throws ApiError
+     */
+    static getCapabilities(context) {
+        return __request(OpenAPI, {
+            method: 'GET',
+            url: '/session/capabilities',
+            headers: resolveShopperHeaders(context),
+            errors: {
+                400: `Bad Request error with error details.`,
+                404: `Not found error with error details.`,
+                500: `Internal Server Error, please contact developers.`,
+            },
+        });
+    }
 }

package/dist/esm/src/generated/shopper/types.d.ts

@@ -6,6 +6,7 @@ export type { AnswerInput } from './models/AnswerInput';
 export type { AssignNamesReturn } from './models/AssignNamesReturn';
 export type { BAHold } from './models/BAHold';
 export type { BlockOfTickets } from './models/BlockOfTickets';
+export type { CapabilityManifestDto } from './models/CapabilityManifestDto';
 export type { Cart } from './models/Cart';
 export type { CartAmounts } from './models/CartAmounts';
 export type { CartClearResult } from './models/CartClearResult';
@@ -13,7 +14,6 @@ export type { CartCounts } from './models/CartCounts';
 export type { CartCountsLite } from './models/CartCountsLite';
 export type { CartHashResponse } from './models/CartHashResponse';
 export type { CartItemCounts } from './models/CartItemCounts';
-export type { CartStateEnvelope } from './models/CartStateEnvelope';
 export type { CartSummary } from './models/CartSummary';
 export type { CartTierOption } from './models/CartTierOption';
 export type { CartTierSeat } from './models/CartTierSeat';
@@ -35,7 +35,6 @@ export type { CheckoutSuccessResponse } from './models/CheckoutSuccessResponse';
 export type { CodeDto } from './models/CodeDto';
 export type { CompleteBody } from './models/CompleteBody';
 export type { ConnectedAccountResponse } from './models/ConnectedAccountResponse';
-export type { CorrelatedCode } from './models/CorrelatedCode';
 export type { CreateCustomerResponse } from './models/CreateCustomerResponse';
 export type { CreatePaymentIntentBody } from './models/CreatePaymentIntentBody';
 export type { CreatePaymentIntentResponse } from './models/CreatePaymentIntentResponse';
@@ -51,6 +50,7 @@ export type { DonationText } from './models/DonationText';
 export type { EmailUpdate } from './models/EmailUpdate';
 export type { EngineSeat } from './models/EngineSeat';
 export type { EventDetails } from './models/EventDetails';
+export type { EventFormat } from './models/EventFormat';
 export type { EventGroup } from './models/EventGroup';
 export type { EventLegend } from './models/EventLegend';
 export type { EventLegendItem } from './models/EventLegendItem';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@drttix/drt-sdk",
   "description": "DRT SDK",
-  "version": "1.5.0",
+  "version": "2.0.0",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "types": "dist/esm/index.d.ts",

package/src/custom/custom-request.txt

@@ -8,6 +8,9 @@ import type { ApiResult } from "./ApiResult";
 import { CancelablePromise } from "./CancelablePromise";
 import type { OnCancel } from "./CancelablePromise";
 import type { OpenAPIConfig } from "./OpenAPI";
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+import { assertInitialized } from "../../../functions/sdkConfig";
 
 export const isDefined = <T>(
 	value: T | null | undefined
@@ -359,6 +362,7 @@ export const request = <T>(
 ): CancelablePromise<T> => {
 	return new CancelablePromise(async (resolve, reject, onCancel) => {
 		try {
+			assertInitialized(config.BASE);
 			const url = getUrl(config, options);
 			const formData = getFormData(options);
 			const body = getRequestBody(options);

package/src/functions/sdkConfig.ts

@@ -5,8 +5,32 @@ import { OpenAPI as PortalAPI } from '../generated/portal/core/OpenAPI';
 
 export type ShopperScope = 'singleton' | 'per-request';
 
+/**
+ * Header a non-browser caller uses to declare the domain it acts as. The
+ * shopper API matches it against the api key's allowed domains when no
+ * browser-set Origin/Referer is present.
+ */
+export const DOMAIN_HEADER = 'x-drt-domain';
+
 export interface SDKConfig {
+    /**
+     * A shopper API key issued by DRT ('drt_shopper_...'), sent as the `apikey`
+     * header on every call. The shopper API refuses any request without a live
+     * key, and only honours a key from the domains it was issued for: a browser
+     * is identified by the Origin header it sets itself; a server by `domain`.
+     *
+     * Read it from the DRT_API_KEY environment variable — never commit it.
+     */
     apiKey: string;
+    /**
+     * The domain this caller acts as (e.g. 'tap-to-pay.drttix.com'), sent as
+     * `x-drt-domain`. REQUIRED for callers that are not browsers — a Node
+     * backend, a server-side script — because they send no Origin/Referer, so
+     * without it the shopper API sees an empty domain and refuses the key.
+     * Browsers leave it unset: the API trusts the Origin the browser sets and
+     * ignores this header whenever an Origin/Referer is present.
+     */
+    domain?: string;
     /**
      * Required when shopperScope is 'singleton' (the default). Optional when
      * shopperScope is 'per-request' — in that mode these act only as a fallback
@@ -56,8 +80,13 @@ let currentShopperScope: ShopperScope = 'singleton';
  *
  * @example
  * ```javascript
- * // Backend serving many shoppers/accounts from a single SDK instance
- * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ * // Backend serving many shoppers/accounts from a single SDK instance.
+ * // A backend is not a browser, so it must also say which domain it acts as.
+ * DRT.init({
+ *   apiKey: process.env.DRT_API_KEY,
+ *   domain: 'tap-to-pay.drttix.com',
+ *   shopperScope: 'per-request',
+ * });
  *
  * // Pass shopperGuid/accountId per call instead
  * await DRT.shopper.product.addProduct(body, {
@@ -85,6 +114,9 @@ export function init(config: SDKConfig): void {
     // Portal and scanner are always singleton-scoped: one fixed set of
     // credentials for every call, applied globally via OpenAPI.HEADERS.
     const sharedHeaders: Record<string, string> = { apikey: config.apiKey };
+    if (config.domain) {
+        sharedHeaders[DOMAIN_HEADER] = config.domain;
+    }
     if (config.shopperGuid && config.accountId) {
         sharedHeaders.shopperguid = config.shopperGuid;
         sharedHeaders.accountid = config.accountId;
@@ -108,6 +140,23 @@ export function isReady(): boolean {
     return isInitialized;
 }
 
+/**
+ * Called by the shared request layer before EVERY request, for every service
+ * (shopper, portal, scanner). The SDK is unusable until DRT.init() has been
+ * given an api key — there is no keyless mode. Throwing here, rather than
+ * letting the request go out and fail at the API, names the fix in the error.
+ */
+export function assertInitialized(baseUrl: string): void {
+    if (isInitialized) {
+        return;
+    }
+    throw new Error(
+        `DRT SDK not initialized — call DRT.init({ apiKey, ... }) before using it (request to ${baseUrl}). ` +
+            'The key comes from the DRT_API_KEY environment variable; a backend also passes ' +
+            "`domain`, and one that serves many shoppers passes shopperScope: 'per-request'.",
+    );
+}
+
 /**
  * Get the current SDK configuration (if initialized).
  */
@@ -161,9 +210,13 @@ export function resolveShopperHeaders(context?: {
         );
     }
 
-    return {
+    const headers: Record<string, string> = {
         shopperguid: shopperGuid,
         accountid: accountId,
         apikey: currentConfig.apiKey,
     };
+    if (currentConfig.domain) {
+        headers[DOMAIN_HEADER] = currentConfig.domain;
+    }
+    return headers;
 }

package/src/generated/portal/core/OpenAPI.ts

@@ -21,7 +21,7 @@ export type OpenAPIConfig = {
 
 export const OpenAPI: OpenAPIConfig = {
     BASE: '',
-    VERSION: '20260831.1',
+    VERSION: '20260902.5',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/src/generated/portal/core/request.ts

@@ -8,6 +8,9 @@ import type { ApiResult } from "./ApiResult";
 import { CancelablePromise } from "./CancelablePromise";
 import type { OnCancel } from "./CancelablePromise";
 import type { OpenAPIConfig } from "./OpenAPI";
+// Every service's request.ts is this same template (build-all.ts copies it),
+// so this one check is what makes DRT.init() mandatory SDK-wide.
+import { assertInitialized } from "../../../functions/sdkConfig";
 
 export const isDefined = <T>(
 	value: T | null | undefined
@@ -359,6 +362,7 @@ export const request = <T>(
 ): CancelablePromise<T> => {
 	return new CancelablePromise(async (resolve, reject, onCancel) => {
 		try {
+			assertInitialized(config.BASE);
 			const url = getUrl(config, options);
 			const formData = getFormData(options);
 			const body = getRequestBody(options);

package/src/generated/portal/index.ts

@@ -13,6 +13,7 @@ export type { AccountDetailResponseDto } from './models/AccountDetailResponseDto
 export { AccountingTimezone } from './models/AccountingTimezone';
 export type { ActionResponseDto } from './models/ActionResponseDto';
 export type { AddSessionSeatRequestDto } from './models/AddSessionSeatRequestDto';
+export type { AddSessionSeatResponseDto } from './models/AddSessionSeatResponseDto';
 export type { AddVideoAssetFormatRequestDto } from './models/AddVideoAssetFormatRequestDto';
 export type { AdminUserLevelResponseDto } from './models/AdminUserLevelResponseDto';
 export type { AdminUserResponseDto } from './models/AdminUserResponseDto';
@@ -332,6 +333,7 @@ export type { SendMailRequestDto } from './models/SendMailRequestDto';
 export type { SendReservationCodeMailRequestDto } from './models/SendReservationCodeMailRequestDto';
 export type { SendTextRequestDto } from './models/SendTextRequestDto';
 export type { SentMailResponseDto } from './models/SentMailResponseDto';
+export type { SessionSeatRefDto } from './models/SessionSeatRefDto';
 export type { SetTiersRequestDto } from './models/SetTiersRequestDto';
 export type { SettingsAndWavesResponseDto } from './models/SettingsAndWavesResponseDto';
 export type { SettingsDetailsResponseDto } from './models/SettingsDetailsResponseDto';
@@ -376,6 +378,7 @@ export type { SingleFundDetailResponseDto } from './models/SingleFundDetailRespo
 export type { SingleOrderDetailResponseDto } from './models/SingleOrderDetailResponseDto';
 export type { SinglePatronCodeResponseDto } from './models/SinglePatronCodeResponseDto';
 export type { SinglePerformerRequestDto } from './models/SinglePerformerRequestDto';
+export { SkippedSessionSeatDto } from './models/SkippedSessionSeatDto';
 export type { SoldTicketsResponseDto } from './models/SoldTicketsResponseDto';
 export type { StartImageUploadRequestDto } from './models/StartImageUploadRequestDto';
 export type { StartImageUploadResponseDto } from './models/StartImageUploadResponseDto';

package/src/generated/portal/models/AddSessionSeatResponseDto.ts

@@ -0,0 +1,12 @@
+/* generated using openapi-typescript-codegen -- do not edit */
+/* istanbul ignore file */
+/* tslint:disable */
+/* eslint-disable */
+import type { SessionSeatRefDto } from './SessionSeatRefDto';
+import type { SkippedSessionSeatDto } from './SkippedSessionSeatDto';
+export type AddSessionSeatResponseDto = {
+    success: boolean;
+    added: Array<SessionSeatRefDto>;
+    skipped: Array<SkippedSessionSeatDto>;
+};
+