@getmicdrop/venue-calendar 4.3.120 → 4.3.121

package/dist/api/cart-addons.d.ts

@@ -1,3 +1,4 @@
+import { ApiRequestOptions } from './client.js';
 /**
  * ADD-ONS ON A CART THAT IS ALREADY BEING PAID FOR (MIC-4326).
  *
@@ -58,4 +59,4 @@ export interface CartAddOnsResult {
  *
  * An EMPTY map removes every add-on; there is no separate delete call.
  */
-export declare function updateCartAddOns(cartId: string, quantities: Record<string | number, number>): Promise<CartAddOnsResult>;
+export declare function updateCartAddOns(cartId: string, quantities: Record<string | number, number>, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CartAddOnsResult>;

package/dist/api/checkout-availability.d.ts

@@ -1,27 +1,4 @@
-/**
- * Can this page complete a purchase?
- *
- * WHY THIS EXISTS (embed audit 2026-08-22, blocker B1)
- *
- * The buy path is gated on the `cors_allowed_domains` allowlist: a venue that
- * embeds the calendar on its own website must have that domain registered, or
- * every cart/promo/gift-card/payment call is refused. Before this module the
- * failure was invisible until a buyer had already chosen a ticket — the
- * calendar rendered perfectly, and the dead end was a disabled CTA three
- * screens in. This asks the question up front so the calendar can say so.
- *
- * The probe is deliberately conservative in three ways:
- *
- *  1. It only runs CROSS-ORIGIN. On get-micdrop.com's own pages — the large
- *     majority of traffic — the allowlist is not in play and no request is made.
- *  2. It runs ONCE per browser session per origin, memoized in-module (so N
- *     widgets on one page share one request) and in sessionStorage (so it
- *     survives navigation around the venue's site).
- *  3. Only an explicit `ORIGIN_NOT_REGISTERED` counts as unavailable. A 429, a
- *     5xx, a timeout, an offline browser — anything that merely failed to
- *     answer — resolves to `unknown`, which renders nothing. An alert that
- *     appears during an unrelated outage would be worse than no alert.
- */
+import { ApiRequestOptions } from './client';
 /** The backend code that means "this domain is not registered for checkout". */
 export declare const ORIGIN_NOT_REGISTERED = "ORIGIN_NOT_REGISTERED";
 export type CheckoutAvailabilityReason = 
@@ -66,7 +43,7 @@ export declare function noteCheckoutOriginRejected(): void;
  * Safe to call from every widget instance on the page: the first call owns the
  * request and the rest await it.
  */
-export declare function probeCheckoutAvailability(): Promise<CheckoutAvailability>;
+export declare function probeCheckoutAvailability(req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CheckoutAvailability>;
 /**
  * Test seam: forget the memo, the cache and the subscribers.
  * @internal test-only reset of the module cache.

package/dist/api/client.d.ts

@@ -15,13 +15,9 @@ export interface ApiRequestOptions extends RequestInit {
      * here so each instance authorizes with its own. The option name is FROZEN
      * as `widgetKey` — VenueCalendar.js passes it under that name.
      *
-     * TODO(seam: calendar-container-shell / embed-origin-config-surface): this is
-     * the transport half only. VenueCalendar.js hands the key to
-     * CalendarContainer as a prop; until the components that issue the reads pass
-     * it back down as `apiGet(url, { widgetKey })`, the module global is still
-     * what authorizes them and two differently-keyed embeds on one page still
-     * collapse into one key. The TODO in VenueCalendar.js that points HERE is
-     * discharged; the one pointing outward is not.
+     * Components read their mount's key with getInstanceWidgetKey()
+     * (widget-key-context.ts) at init and pass it down as `{ widgetKey }`; on
+     * the hosted routes there is no mount key and the module global applies.
      */
     widgetKey?: string;
     /**
@@ -171,6 +167,7 @@ export interface TaxPreviewResponse {
 export declare function taxPreview(req: TaxPreviewRequest, options?: {
     signal?: AbortSignal;
     suppressOnError?: boolean;
+    widgetKey?: string;
 }): Promise<ApiResult<TaxPreviewResponse>>;
 /**
  * Simple fetch wrapper that returns parsed JSON or null on error.

package/dist/api/events.d.ts

@@ -1,3 +1,4 @@
+import { ApiRequestOptions } from './client.js';
 import { Result } from './result.js';
 import { Event, AvailableTicket, EventPerformersResponse, SeriesOccurrencesResponse, PublicCollectionData, ResolvedEntity } from './types.js';
 /**
@@ -13,7 +14,7 @@ import { Event, AvailableTicket, EventPerformersResponse, SeriesOccurrencesRespo
  * @param password - Optional password for gated events
  * @returns `ok(event)`, `errNotFound(...)` for a real 404, or `err(...)` transient
  */
-export declare function fetchEventDetailsResult(eventId: string | number, customFetch?: typeof fetch, password?: string): Promise<Result<Event>>;
+export declare function fetchEventDetailsResult(eventId: string | number, customFetch?: typeof fetch, password?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<Event>>;
 /**
  * Fetch event details
  *
@@ -27,7 +28,7 @@ export declare function fetchEventDetailsResult(eventId: string | number, custom
  * @param customFetch - Optional custom fetch function (for SSR)
  * @returns Event details or null on error
  */
-export declare function fetchEventDetails(eventId: string | number, customFetch?: typeof fetch, password?: string): Promise<Event | null>;
+export declare function fetchEventDetails(eventId: string | number, customFetch?: typeof fetch, password?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Event | null>;
 /**
  * Fetch available tickets for an event
  *
@@ -36,8 +37,8 @@ export declare function fetchEventDetails(eventId: string | number, customFetch?
  * @param eventId - The event ID
  * @returns Array of available tickets
  */
-export declare function fetchEventTicketsResult(eventId: string | number, promoCode?: string): Promise<Result<AvailableTicket[]>>;
-export declare function fetchEventTickets(eventId: string | number, promoCode?: string): Promise<AvailableTicket[]>;
+export declare function fetchEventTicketsResult(eventId: string | number, promoCode?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<AvailableTicket[]>>;
+export declare function fetchEventTickets(eventId: string | number, promoCode?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<AvailableTicket[]>;
 /**
  * Fetch performers for an event
  *
@@ -46,24 +47,24 @@ export declare function fetchEventTickets(eventId: string | number, promoCode?:
  * @param eventId - The event ID
  * @returns Performers list and visibility flag
  */
-export declare function fetchEventPerformersResult(eventId: string | number): Promise<Result<EventPerformersResponse>>;
-export declare function fetchEventPerformers(eventId: string | number): Promise<EventPerformersResponse>;
+export declare function fetchEventPerformersResult(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<EventPerformersResponse>>;
+export declare function fetchEventPerformers(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<EventPerformersResponse>;
 /**
  * Fetch all venues for an organization
  *
  * @param orgId - The organization ID
  * @returns Array of venues
  */
-export declare function fetchAllVenuesResult(orgId: string | number): Promise<Result<any[]>>;
-export declare function fetchAllVenues(orgId: string | number): Promise<any[]>;
+export declare function fetchAllVenuesResult(orgId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<any[]>>;
+export declare function fetchAllVenues(orgId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<any[]>;
 /**
  * Fetch events for a venue
  *
  * @param venueId - The venue ID
  * @returns Array of events
  */
-export declare function fetchVenueEventsResult(venueId: string | number): Promise<Result<Event[]>>;
-export declare function fetchVenueEvents(venueId: string | number): Promise<Event[]>;
+export declare function fetchVenueEventsResult(venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<Event[]>>;
+export declare function fetchVenueEvents(venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Event[]>;
 /**
  * Options for a month read.
  *
@@ -83,8 +84,8 @@ export declare function fetchVenueEvents(venueId: string | number): Promise<Even
 export interface MonthReadOptions {
     fresh?: boolean;
 }
-export declare function getMonthEventsResult(venueId: string | number, year: number, month: number, options?: MonthReadOptions): Promise<Result<Event[]>>;
-export declare function getMonthEvents(venueId: string | number, year: number, month: number): Promise<Event[]>;
+export declare function getMonthEventsResult(venueId: string | number, year: number, month: number, options?: MonthReadOptions, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<Event[]>>;
+export declare function getMonthEvents(venueId: string | number, year: number, month: number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Event[]>;
 /**
  * Get events for an organization for a specific month
  *
@@ -93,8 +94,8 @@ export declare function getMonthEvents(venueId: string | number, year: number, m
  * @param month - The month (1-12)
  * @returns Array of events for the month
  */
-export declare function getOrgMonthEventsResult(orgId: string | number, year: number, month: number, options?: MonthReadOptions): Promise<Result<Event[]>>;
-export declare function getOrgMonthEvents(orgId: string | number, year: number, month: number): Promise<Event[]>;
+export declare function getOrgMonthEventsResult(orgId: string | number, year: number, month: number, options?: MonthReadOptions, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<Event[]>>;
+export declare function getOrgMonthEvents(orgId: string | number, year: number, month: number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Event[]>;
 /**
  * Get series occurrences for date selector
  *
@@ -103,8 +104,8 @@ export declare function getOrgMonthEvents(orgId: string | number, year: number,
  * @param eventSeriesId - The series ID
  * @returns Series occurrences
  */
-export declare function getSeriesOccurrencesResult(eventSeriesId: number): Promise<Result<SeriesOccurrencesResponse>>;
-export declare function getSeriesOccurrences(eventSeriesId: number): Promise<SeriesOccurrencesResponse | null>;
+export declare function getSeriesOccurrencesResult(eventSeriesId: number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<SeriesOccurrencesResponse>>;
+export declare function getSeriesOccurrences(eventSeriesId: number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<SeriesOccurrencesResponse | null>;
 /**
  * Fetch series occurrences with CTA state
  *
@@ -114,8 +115,8 @@ export declare function getSeriesOccurrences(eventSeriesId: number): Promise<Ser
  * @param venueId - The venue ID
  * @returns Series occurrences with CTA state
  */
-export declare function fetchSeriesOccurrencesResult(eventSeriesId: number, venueId: string | number): Promise<Result<SeriesOccurrencesResponse>>;
-export declare function fetchSeriesOccurrences(eventSeriesId: number, venueId: string | number): Promise<SeriesOccurrencesResponse | null>;
+export declare function fetchSeriesOccurrencesResult(eventSeriesId: number, venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<SeriesOccurrencesResponse>>;
+export declare function fetchSeriesOccurrences(eventSeriesId: number, venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<SeriesOccurrencesResponse | null>;
 /**
  * Resolve an entity-agnostic public id to its concrete type + data.
  *
@@ -131,7 +132,7 @@ export declare function fetchSeriesOccurrences(eventSeriesId: number, venueId: s
  * @param slug - Optional slug hint (lets the backend canonicalize)
  * @returns `{ type, id, title, data }` or null on failure
  */
-export declare function resolvePublicEntity(id: string | number, slug?: string): Promise<ResolvedEntity | null>;
+export declare function resolvePublicEntity(id: string | number, slug?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<ResolvedEntity | null>;
 /**
  * Fetch public collection data
  *
@@ -142,7 +143,7 @@ export declare function resolvePublicEntity(id: string | number, slug?: string):
  * @param password - Optional password for protected collections
  * @returns Collection data or null on error
  */
-export declare function fetchPublicCollection(collectionId: string | number, password?: string): Promise<PublicCollectionData | null>;
+export declare function fetchPublicCollection(collectionId: string | number, password?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<PublicCollectionData | null>;
 /**
  * Check collection password
  *
@@ -152,7 +153,7 @@ export declare function fetchPublicCollection(collectionId: string | number, pas
  * @param password - The password to check
  * @returns Whether the password is valid
  */
-export declare function checkCollectionPassword(collectionId: string | number, password: string): Promise<boolean>;
+export declare function checkCollectionPassword(collectionId: string | number, password: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<boolean>;
 /**
  * Check event password
  *
@@ -162,7 +163,7 @@ export declare function checkCollectionPassword(collectionId: string | number, p
  * @param password - The password to check
  * @returns Whether the password is valid
  */
-export declare function checkEventPassword(eventId: string | number, password: string): Promise<{
+export declare function checkEventPassword(eventId: string | number, password: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<{
     valid: boolean;
 }>;
 /**

package/dist/api/gift-cards.d.ts

@@ -1,4 +1,5 @@
 import { IANATimezone, VenueId } from '@getmicdrop/svelte-components';
+import { ApiRequestOptions } from './client.js';
 import { Result } from './result.js';
 /**
  * Request payload for creating a gift card purchase
@@ -54,7 +55,7 @@ export interface VenueInfo {
  * @param req - Gift card purchase request details
  * @returns Gift card UUID and Stripe client secret, or null on failure
  */
-export declare function createGiftCardPurchase(req: GiftCardPurchaseRequest): Promise<GiftCardPurchaseResponse | null>;
+export declare function createGiftCardPurchase(req: GiftCardPurchaseRequest, options?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<GiftCardPurchaseResponse | null>;
 /**
  * Result shape consumed by the Checkout component / GiftCardInput.
  * Monetary fields here are in DOLLARS (formatCurrency-ready).
@@ -73,7 +74,7 @@ export interface ApplyGiftCardResult {
 /**
  * Apply a gift card to a cart.
  */
-export declare function applyGiftCard(cartId: string, code: string): Promise<ApplyGiftCardResult>;
+export declare function applyGiftCard(cartId: string, code: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<ApplyGiftCardResult>;
 export interface RemoveGiftCardResult {
     success: boolean;
     error?: string;
@@ -92,7 +93,7 @@ export interface RemoveGiftCardResult {
 export declare function removeGiftCard(cartId: string, target?: {
     giftCardId?: number;
     code?: string;
-}): Promise<RemoveGiftCardResult>;
+}, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<RemoveGiftCardResult>;
 export interface CompleteGiftCardPaymentInput {
     firstName: string;
     lastName: string;
@@ -110,7 +111,7 @@ export interface CompleteGiftCardPaymentResult {
 /**
  * Complete a gift-card-only payment (no Stripe required when balance >= total).
  */
-export declare function completeGiftCardPayment(cartId: string, customerDetails: CompleteGiftCardPaymentInput, uiLocale?: string): Promise<CompleteGiftCardPaymentResult>;
+export declare function completeGiftCardPayment(cartId: string, customerDetails: CompleteGiftCardPaymentInput, uiLocale?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CompleteGiftCardPaymentResult>;
 /**
  * Fetch venue information by slug, discriminating a real 404 from a transient
  * failure.
@@ -124,7 +125,7 @@ export declare function completeGiftCardPayment(cartId: string, customerDetails:
  * @param customFetch - Optional custom fetch function (for SSR)
  * @returns `ok(venue)`, `errNotFound(...)` for a real 404, or `err(...)` transient
  */
-export declare function getVenueBySlugResult(slug: string, customFetch?: typeof fetch): Promise<Result<VenueInfo>>;
+export declare function getVenueBySlugResult(slug: string, customFetch?: typeof fetch, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Result<VenueInfo>>;
 /**
  * Fetch venue information by slug
  *
@@ -135,4 +136,4 @@ export declare function getVenueBySlugResult(slug: string, customFetch?: typeof
  * @returns Venue info or null on failure
  * @internal no shipped caller left; gift-cards.test.ts is what exercises it.
  */
-export declare function getVenueBySlug(slug: string, customFetch?: typeof fetch): Promise<VenueInfo | null>;
+export declare function getVenueBySlug(slug: string, customFetch?: typeof fetch, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<VenueInfo | null>;

package/dist/api/orders.d.ts

@@ -1,3 +1,4 @@
+import { ApiRequestOptions } from './client.js';
 import { PaymentIntentResponse, CompleteReservationResponse, CancelReservationResponse, CreateOrderResponse, ValidatePaymentRequest, ValidatePaymentResponse, ExtendSessionResponse, SessionStatus, Order } from './types.js';
 /**
  * Create a payment intent for the cart
@@ -25,7 +26,7 @@ export interface FreeOrderBuyer {
     questionAnswer?: string;
     mailingList?: boolean;
 }
-export declare function createPaymentIntent(cartId: string, quantities: Record<string | number, number>, donationAmounts?: Record<string | number, number>, buyer?: FreeOrderBuyer, uiLocale?: string): Promise<PaymentIntentResponse | null>;
+export declare function createPaymentIntent(cartId: string, quantities: Record<string | number, number>, donationAmounts?: Record<string | number, number>, buyer?: FreeOrderBuyer, uiLocale?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<PaymentIntentResponse | null>;
 /** What the server said about a submission's checkout answers. */
 export interface CheckoutAnswersResult {
     /**
@@ -73,7 +74,7 @@ export interface CheckoutAnswersResult {
  * not block a checkout that would otherwise have gone through, the same way the
  * server's own guard lets an unreadable venue pass.
  */
-export declare function submitCheckoutAnswers(cartId: string, quantities: Record<string | number, number>, donationAmounts: Record<string | number, number> | undefined, buyer: FreeOrderBuyer, uiLocale?: string): Promise<CheckoutAnswersResult>;
+export declare function submitCheckoutAnswers(cartId: string, quantities: Record<string | number, number>, donationAmounts: Record<string | number, number> | undefined, buyer: FreeOrderBuyer, uiLocale?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CheckoutAnswersResult>;
 /**
  * Fetch an existing cart by UUID (cross-device pre-fill — §1.3).
  *
@@ -115,7 +116,7 @@ export interface CartView {
     reservations: CartReservationView[];
     giftCards: CartGiftCardView[];
 }
-export declare function getCartByUUID(cartUUID: string, expectedEventID?: string | number): Promise<CartView | null>;
+export declare function getCartByUUID(cartUUID: string, expectedEventID?: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CartView | null>;
 /**
  * Update cart quantities after the cart already exists.
  *
@@ -139,7 +140,7 @@ export declare function updateCartQuantities(cartId: string, quantities: Record<
  * @param orderUuid - The order UUID
  * @returns Success status and message
  */
-export declare function completeReservation(orderUuid: string): Promise<CompleteReservationResponse>;
+export declare function completeReservation(orderUuid: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CompleteReservationResponse>;
 /**
  * Cancel reservation and release tickets back to inventory
  *
@@ -148,7 +149,7 @@ export declare function completeReservation(orderUuid: string): Promise<Complete
  * @param orderUuid - The order UUID
  * @returns Success status and message
  */
-export declare function cancelReservation(orderUuid: string): Promise<CancelReservationResponse>;
+export declare function cancelReservation(orderUuid: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CancelReservationResponse>;
 /**
  * Request a refund for a completed order (buyer self-service).
  *
@@ -163,7 +164,7 @@ export declare function cancelReservation(orderUuid: string): Promise<CancelRese
  * @param message - Optional note to the venue (why they want a refund)
  * @returns Success status, with an error message on failure
  */
-export declare function requestOrderRefund(orderUUID: string, message?: string): Promise<{
+export declare function requestOrderRefund(orderUUID: string, message?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<{
     success: boolean;
     error?: string;
 }>;
@@ -177,7 +178,7 @@ export declare function requestOrderRefund(orderUUID: string, message?: string):
  * @param promoCode - Optional promo code to apply
  * @returns The order UUID, or null on error
  */
-export declare function createOrder(eventId: string | number, promoCode?: string): Promise<CreateOrderResponse | null>;
+export declare function createOrder(eventId: string | number, promoCode?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<CreateOrderResponse | null>;
 /**
  * Get order details (public, no auth required)
  *
@@ -186,7 +187,7 @@ export declare function createOrder(eventId: string | number, promoCode?: string
  * @param orderId - The order UUID or ID
  * @returns The order details, or null on error
  */
-export declare function getOrder(orderId: string): Promise<Order | null>;
+export declare function getOrder(orderId: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Order | null>;
 /**
  * Validate payment intent and complete the order
  *
@@ -197,7 +198,7 @@ export declare function getOrder(orderId: string): Promise<Order | null>;
  * @param payload - Payment validation payload
  * @returns Validation result
  */
-export declare function validatePaymentIntent(cartId: string, payload: ValidatePaymentRequest, uiLocale?: string): Promise<ValidatePaymentResponse | null>;
+export declare function validatePaymentIntent(cartId: string, payload: ValidatePaymentRequest, uiLocale?: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<ValidatePaymentResponse | null>;
 /**
  * Extend the checkout session by 15 minutes
  *
@@ -206,7 +207,7 @@ export declare function validatePaymentIntent(cartId: string, payload: ValidateP
  * @param orderUuid - The order UUID
  * @returns Extension result with new expiry time
  */
-export declare function extendCheckoutSession(orderUuid: string): Promise<ExtendSessionResponse>;
+export declare function extendCheckoutSession(orderUuid: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<ExtendSessionResponse>;
 /**
  * Get current session status including expiry time
  *
@@ -215,7 +216,7 @@ export declare function extendCheckoutSession(orderUuid: string): Promise<Extend
  * @param orderUuid - The order UUID
  * @returns Session status including expiry time
  */
-export declare function getSessionStatus(orderUuid: string): Promise<SessionStatus>;
+export declare function getSessionStatus(orderUuid: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<SessionStatus>;
 /**
  * Initiate a new order (alias for createOrder)
  *
@@ -229,7 +230,7 @@ export declare function initiateOrder(cartData?: {
     eventID: string | number;
     promoCode?: string;
     quantities?: Record<string | number, number>;
-}): Promise<string | null>;
+}, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<string | null>;
 /**
  * Track UTM source for analytics
  *

package/dist/api/promo.d.ts

@@ -1,3 +1,4 @@
+import { ApiRequestOptions } from './client.js';
 import { PromoValidationResponse } from './types.js';
 /**
  * Validate a promo code for an event
@@ -10,7 +11,7 @@ import { PromoValidationResponse } from './types.js';
  * @param code - The promo code to validate
  * @returns Validation result with discount info
  */
-export declare function validatePromoCode(eventId: string | number, code: string): Promise<PromoValidationResponse>;
+export declare function validatePromoCode(eventId: string | number, code: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<PromoValidationResponse>;
 /**
  * Check if promo codes are available for an event
  *
@@ -19,7 +20,7 @@ export declare function validatePromoCode(eventId: string | number, code: string
  * @param eventId - The event ID
  * @returns Whether promo codes exist for this event
  */
-export declare function hasPromoCodes(eventId: string | number): Promise<boolean>;
+export declare function hasPromoCodes(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<boolean>;
 /**
  * Apply a promo code to a cart
  *
@@ -29,7 +30,7 @@ export declare function hasPromoCodes(eventId: string | number): Promise<boolean
  * @param code - The promo code to apply
  * @returns Success status
  */
-export declare function applyPromoCode(cartId: string, code: string, productQuantities?: Record<string | number, number>): Promise<{
+export declare function applyPromoCode(cartId: string, code: string, productQuantities?: Record<string | number, number>, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<{
     success: boolean;
     error?: string;
 }>;
@@ -39,7 +40,7 @@ export declare function applyPromoCode(cartId: string, code: string, productQuan
  * @param cartId - The cart UUID
  * @returns Success status
  */
-export declare function removePromoCode(cartId: string): Promise<{
+export declare function removePromoCode(cartId: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<{
     success: boolean;
     error?: string;
 }>;

package/dist/api/surge-queue.d.ts

@@ -1,33 +1,4 @@
-/**
- * Surge queue — the virtual waiting room's half of the wire.
- *
- * On a viral on-sale every buyer races for the same inventory decrement on
- * `POST /orders/create`. The backend puts a line in front of that door: a
- * bounded number of buyers hold a checkout pass at any moment and everyone else
- * waits with a position and an estimate. These four calls are how the widget
- * asks about the line, takes a place in it, watches it move, and gives the place
- * back.
- *
- * FAIL OPEN, EVERY TIME. The queue is a protection mechanism, not a money
- * control — the backend itself reports `armed:false` when it cannot reach Redis,
- * because refusing every sale on the platform is a worse outcome than a surge.
- * So every function here degrades to "there is no line": a read that fails must
- * never leave an overlay across a checkout that would have worked. The only
- * thing that actually gates a purchase is the server's `QUEUE_REQUIRED` refusal
- * on `/orders/create`, which `initiateOrder` in src/lib/utils/orderApi.ts
- * surfaces as its own error type — that refusal cannot be lost by a client-side
- * failure, which is what makes failing open here safe.
- *
- * @auth-token-url-escape: the status poll carries its token in the query string
- * because that is the only shape the endpoint answers —
- * `GET /events/:id/queue/status?token=…`. A request header would move it out of
- * nginx logs and browser history, and would also add a CORS preflight to every
- * poll of a line that can be tens of thousands deep, on the one endpoint whose
- * whole purpose is to survive that load. What the token actually grants is one
- * place in one line: it expires with the pass, `leaveQueue` revokes it, and it
- * authorises no order, no payment and no session. The marker is FILE-LEVEL —
- * the only scope the rule offers — so it covers anything added here later.
- */
+import { ApiRequestOptions } from './client.js';
 /**
  * The refusal code the gate answers on `POST /orders/create` (HTTP 429) when
  * the event is armed and the caller holds no admitted token.
@@ -104,7 +75,7 @@ export interface LeaveQueueResult {
  * today's behaviour: the buyer goes straight at the buy button, and the gate
  * decides.
  */
-export declare function getQueueState(eventId: string | number): Promise<QueueSnapshot>;
+export declare function getQueueState(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<QueueSnapshot>;
 /**
  * Take a place in line, or a checkout pass when there is spare capacity.
  *
@@ -113,14 +84,14 @@ export declare function getQueueState(eventId: string | number): Promise<QueueSn
  * the buyer their spot. It does NOT need to be called before every purchase —
  * the reactive entry into the line is the gate's `QUEUE_REQUIRED` refusal.
  */
-export declare function joinQueue(eventId: string | number): Promise<QueueEntryResult>;
+export declare function joinQueue(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<QueueEntryResult>;
 /**
  * The poll. Answers the same shape as the join that started it, and draining the
  * line is its server-side side effect — so stopping the poll stops the line
  * moving for everybody, and polling faster than `pollAfterMs` is what the server
  * widens that number to prevent.
  */
-export declare function getQueueStatus(eventId: string | number, token: string): Promise<QueueEntryResult>;
+export declare function getQueueStatus(eventId: string | number, token: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<QueueEntryResult>;
 /**
  * Give the place in line, or the checkout pass, back.
  *
@@ -130,4 +101,4 @@ export declare function getQueueStatus(eventId: string | number, token: string):
  * fifteen minutes for a tab that closed. And a beacon fired at unload has nobody
  * left to tell, so its failure is not routed to the global error handler.
  */
-export declare function leaveQueue(eventId: string | number, token: string): Promise<LeaveQueueResult>;
+export declare function leaveQueue(eventId: string | number, token: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<LeaveQueueResult>;

package/dist/api/venues.d.ts

@@ -1,3 +1,4 @@
+import { ApiRequestOptions } from './client.js';
 import { Venue } from './types.js';
 /**
  * Get venue details (public, no auth required)
@@ -8,7 +9,7 @@ import { Venue } from './types.js';
  * @param venueId - The venue ID
  * @returns Venue details or null on error
  */
-export declare function getVenue(venueId: string | number): Promise<Venue | null>;
+export declare function getVenue(venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Venue | null>;
 /**
  * Get venue service fee configuration
  *
@@ -17,7 +18,7 @@ export declare function getVenue(venueId: string | number): Promise<Venue | null
  * @param venueId - The venue ID
  * @returns Fee configuration or null on error
  */
-export declare function getVenueFees(venueId: string | number): Promise<{
+export declare function getVenueFees(venueId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<{
     serviceFeePercentage: number;
     serviceFeeCents: number;
     taxPercentage: number;
@@ -30,11 +31,11 @@ export declare function getVenueFees(venueId: string | number): Promise<{
  * @param slug - The venue slug
  * @returns Venue details or null on error
  */
-export declare function getVenueBySlug(slug: string): Promise<Venue | null>;
+export declare function getVenueBySlug(slug: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<Venue | null>;
 /**
  * Whether the venue has a published site — the test for drawing the calendar's
  * gift-card link, whose destination lives on that site. Reads the public
  * published-site read for the venue's own host. Any failure answers false: the
  * link is optional chrome, same as `getVenue`'s swallow.
  */
-export declare function hasPublishedSite(venueSlug: string | null | undefined): Promise<boolean>;
+export declare function hasPublishedSite(venueSlug: string | null | undefined, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<boolean>;

package/dist/api/waitlist.d.ts

@@ -1,8 +1,4 @@
-/**
- * Waitlist API
- *
- * Endpoints for the sold-out-event waitlist flow.
- */
+import { ApiRequestOptions } from './client.js';
 export interface JoinWaitlistResult {
     success: boolean;
     updated?: boolean;
@@ -20,7 +16,7 @@ export interface JoinWaitlistResult {
 /**
  * Join the waitlist for a sold-out event.
  */
-export declare function joinWaitlist(eventId: string | number, email: string, phone?: string | null, smsOptIn?: boolean): Promise<JoinWaitlistResult>;
+export declare function joinWaitlist(eventId: string | number, email: string, phone?: string | null, smsOptIn?: boolean, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<JoinWaitlistResult>;
 export interface ValidateWaitlistTokenResult {
     valid: boolean;
     eventId: number;
@@ -46,7 +42,7 @@ export interface ValidateWaitlistTokenResult {
  * notified buyer. Failures are surfaced (not thrown) so the page can show a
  * non-blocking notice while keeping the event in its gated waitlist state.
  */
-export declare function validateWaitlistToken(token: string, email: string): Promise<ValidateWaitlistTokenResult>;
+export declare function validateWaitlistToken(token: string, email: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<ValidateWaitlistTokenResult>;
 export interface RequeueWaitlistResult {
     success: boolean;
     /** One of: invalid_token | email_mismatch | token_used | entry_not_found |
@@ -59,7 +55,7 @@ export interface RequeueWaitlistResult {
  * token + email is the identity proof — the same binding the unlock link
  * carries — so the offer needs no login.
  */
-export declare function requeueWaitlistToFront(token: string, email: string): Promise<RequeueWaitlistResult>;
+export declare function requeueWaitlistToFront(token: string, email: string, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<RequeueWaitlistResult>;
 export interface WaitlistStatusResult {
     waitlistEnabled: boolean;
     soldOut: boolean;
@@ -74,6 +70,6 @@ export interface WaitlistStatusResult {
  * Fetch an event's waitlist gating status. Returns a non-gated default if the
  * request fails so the page degrades to normal behavior.
  */
-export declare function getWaitlistStatus(eventId: string | number): Promise<WaitlistStatusResult>;
+export declare function getWaitlistStatus(eventId: string | number, req?: Pick<ApiRequestOptions, 'widgetKey'>): Promise<WaitlistStatusResult>;
 /** Clock shape for the offer window: h:mm:ss from an hour up, m:ss below. */
 export declare function formatWaitlistWindow(totalSec: number): string;