@seatlayer/js 0.44.0 → 0.45.0

package/dist/index.d.cts

@@ -2268,8 +2268,66 @@ declare function retryAfterCopy(details: ArchiveBlockedDetails | null | undefine
 /** The access line under a channel row. Falls back to "—" before the hardening
  *  branch lands the `access` field, never to a guess. */
 declare function accessLine(access: ChannelAccessSummary | null | undefined): string;
-/** Plain-language label for the access-intent control. */
+/**
+ * The name of each sale route, WORD FOR WORD as the server says it.
+ *
+ * `eventChannels.ts` builds its refusal sentences from an `INTENT_LABEL` map
+ * with exactly these four strings. Diverging here would mean the picker calls a
+ * route one thing and the refusal it produces calls it another, so these are
+ * copied deliberately rather than paraphrased.
+ */
 declare function accessIntentLabel(intent: ChannelAccessIntent): string;
+/**
+ * What choosing this route actually DOES, now that the server enforces it.
+ *
+ * Written against the enforcement matrix, not against intent: each route opens
+ * exactly one way to reach a buyer and refuses the other three, so each sentence
+ * says both halves. The old copy for these values promised nothing and delivered
+ * nothing; it was deleted in 0.42.0 and is not coming back.
+ */
+declare function accessIntentDescription(intent: ChannelAccessIntent): string;
+/** `channel_access_intent_forbids` (409) — the route this channel declares is
+ *  not the one the action needed. */
+interface AccessIntentForbidsDetails {
+    channelId?: string;
+    accessIntent?: ChannelAccessIntent | string;
+    /** The route the refused action arrived on: `hosted_link` | `server` | `staff` | `public`. */
+    route?: string;
+}
+/**
+ * The refusal, said as a decision the organizer can act on.
+ *
+ * The server's own sentence stops at "…so it cannot be sold through a buyer
+ * link" — true, but it leaves the reader to work out what to do. This adds the
+ * second half: which route to switch to. The code itself is never shown.
+ */
+declare function intentForbidsCopy(details: AccessIntentForbidsDetails | null | undefined): string;
+/** `channel_intent_switch_blocked` (409) — buyers are inside the current route. */
+interface IntentSwitchBlockedDetails {
+    channelId?: string;
+    from?: ChannelAccessIntent | string;
+    to?: ChannelAccessIntent | string;
+    liveAccessLinks?: number;
+    activeSessions?: number;
+    acknowledgeWith?: {
+        acknowledgeLiveAccess?: boolean;
+    };
+}
+/**
+ * What is live right now, and what acknowledging would do to it.
+ *
+ * Both halves are checked against the server rather than guessed: an
+ * acknowledged switch REVOKES the channel's hosted links (redemption refuses
+ * from that moment, so a link left listed as active would be a door the
+ * management surface advertises and the buyer path denies), and deliberately
+ * LEAVES buyer sessions and their holds alone — nobody is thrown out of a
+ * checkout. Sessions cap at 12 hours (30 minutes by default) and no new ones can
+ * be minted, so the old route drains on its own.
+ */
+declare function intentSwitchBlockedCopy(details: IntentSwitchBlockedDetails | null | undefined): {
+    headline: string;
+    consequences: string[];
+};
 /** Lifecycle the server stores. `rotated` means a newer link replaced this one. */
 type AccessLinkState = 'active' | 'revoked' | 'rotated';
 /** What the organizer surface renders: `state`, unless an active link has run
@@ -2363,6 +2421,7 @@ declare function accessLinkErrorCopy(err: {
     code?: string;
     serverMessage?: string;
     status?: number;
+    details?: Record<string, unknown>;
 } | null | undefined): string;
 /**
  * The chart-update refusal `channel_assignment_would_drop` (409) deliberately
@@ -2772,12 +2831,33 @@ declare class ManageApi {
     channelPreview(key: string, channelIds: string[], opts?: {
         includePublic?: boolean;
     }): Promise<ChannelPreviewProjection>;
-    /** Declare how buyers are meant to reach this channel. Drives the rail's
-     *  access line and turns "No buyer access configured" from information into a
-     *  warning when the organizer says the channel is for buyer self-service. */
-    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent): Promise<{
+    /**
+     * Choose which sale route this channel opens.
+     *
+     * Since the server's 2026-08-06 change this is AUTHORIZATION, not a label:
+     * exactly one of the four routes may mint buyer access for the channel and the
+     * other three refuse with 409 `channel_access_intent_forbids`. The default is
+     * `none`, which refuses all four — so a route has to be declared before any
+     * buyer-facing action on the channel can succeed.
+     *
+     * Switching the route while buyers are already inside the current one is
+     * refused with 409 `channel_intent_switch_blocked`, whose `details` name what
+     * is live (`liveAccessLinks`, `activeSessions`). Retry with
+     * `acknowledgeLiveAccess: true`: hosted links on the channel are revoked,
+     * while sessions already minted keep their holds and drain on their own.
+     * `intentSwitch` is present on the response ONLY when the switch disturbed
+     * something, so the ordinary case stays the two-key body it has always been.
+     */
+    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent, opts?: {
+        acknowledgeLiveAccess?: boolean;
+        reason?: string;
+    }): Promise<{
         ok: true;
         channel: ChannelRecord;
+        intentSwitch?: {
+            closedLinks: number;
+            keptSessions: number;
+        };
     }>;
     /**
      * Mint a hosted access link. The 201 is the ONE and ONLY time `url` and
@@ -2790,8 +2870,11 @@ declare class ManageApi {
      * Platform bounds are enforced server-side and reported as 422 with the rule
      * spelled out in `ManageApiError.serverMessage`.
      *
-     * Side effect by design: this also declares the channel's access intent as
-     * `hosted_link`, so the rail stops saying "no buyer access configured".
+     * NOT a side effect any more. This used to SET the channel's access intent to
+     * `hosted_link`; since 2026-08-06 it REQUIRES it, and a channel declaring any
+     * other route refuses with 409 `channel_access_intent_forbids`. Callers must
+     * declare the route first — `ChannelsMode` does exactly that before it
+     * creates, so a first buyer link on a fresh channel is still one gesture.
      */
     createAccessLink(key: string, channelId: string, input?: {
         label?: string | null;
@@ -3439,9 +3522,19 @@ interface ChannelsClient {
     channelPreview(key: string, channelIds: string[], opts?: {
         includePublic?: boolean;
     }): Promise<ChannelPreviewProjection>;
-    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent): Promise<{
+    /** Choose the channel's sale route. Authorization since 2026-08-06, so this is
+     *  a precondition of every buyer-facing action, not a label. `opts` carries the
+     *  acknowledgement that unblocks a switch with live buyer access. */
+    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent, opts?: {
+        acknowledgeLiveAccess?: boolean;
+        reason?: string;
+    }): Promise<{
         ok: true;
         channel: ChannelRecord;
+        intentSwitch?: {
+            closedLinks: number;
+            keptSessions: number;
+        };
     }>;
     /** 201 with the ONE-TIME reveal. Every omitted field takes the server default
      *  (expiry = event start, 100 redemptions, 4 seats per buyer). */
@@ -3749,21 +3842,24 @@ declare class ChannelsMode {
     private selectionRailHtml;
     private detailRailHtml;
     /**
-     * "Distribute" — how the seats in this channel actually reach a buyer.
+     * "Distribute" — the ONE way this channel's seats reach a buyer.
      *
-     * This replaced a four-value "access intent" picker (none / internal /
-     * hosted_link / server). Two of those values did nothing anywhere: no buyer or
-     * inventory path reads `access_intent`, so `none` and `internal` were labels an
-     * organizer could set and then wait forever for something to happen. A third,
-     * `hosted_link`, is not the organizer's to choose at all — the server sets it
-     * when a buyer link is created and clears it when the last live one is revoked.
+     * All four routes are here, and this is a real chooser again. It was cut down
+     * to two actions in 0.42.0 for a good reason: `access_intent` was stored,
+     * audited, and read by nothing, so "Keep as protected reserve" and "Sell
+     * through your own staff" were labels an organizer could set and then wait
+     * forever for something to happen. The server closed that hole on 2026-08-06 —
+     * each declaration now opens exactly one route and REFUSES the other three —
+     * so all four are honest choices and belong on the surface.
      *
-     * So this is two ACTIONS, not a setting: create a buyer link, or point the
-     * channel at a website integration. Both of them do something the moment they
-     * are pressed. A legacy row still carrying `none` or `internal` renders the
-     * neutral "not distributed yet" state with both actions offered — the stored
-     * value is left alone (it is organizer-declared metadata and the API that
-     * writes it is unchanged), it simply no longer has a control of its own.
+     * None of the old copy came back with them. These sentences are written
+     * against the enforcement matrix (`accessIntentDescription`), which is why
+     * each one says what the route refuses as well as what it allows.
+     *
+     * The current route is stated, not merely styled: a chooser whose selection
+     * you have to infer from a border is not a chooser. Its card carries a
+     * "Current route" marker and drops its own select button, because pressing it
+     * would do nothing.
      */
     private distributeHtml;
     /**
@@ -3814,6 +3910,23 @@ declare class ChannelsMode {
     private renderScopeDialog;
     private openDialog;
     private renderDialog;
+    /**
+     * `channel_intent_switch_blocked` — buyers are inside the route being left.
+     *
+     * The same review-then-acknowledge shape as the archive and chart-drop guards,
+     * because it is the same kind of decision: the server refuses once, names
+     * exactly what is at stake, and only a deliberate second press goes through.
+     * What acknowledging does is spelled out per consequence — links close now,
+     * checkouts already running survive and drain — rather than hidden behind a
+     * word like "force".
+     */
+    private renderIntentSwitchDialog;
+    /**
+     * The acknowledged retry. The declare and the create stay one gesture across
+     * the sheet: if this switch was the first half of a declare-then-create, the
+     * held form finishes on the far side of the acknowledgement.
+     */
+    private acknowledgeIntentSwitch;
     /**
      * Mount a modal: `aria-modal` dialog, programmatic name, focus moved inside,
      * Tab trapped, Escape closes WITHOUT mutating, focus restored on close (§13).
@@ -3854,14 +3967,28 @@ declare class ChannelsMode {
     private renderMenuDialog;
     private renderRenameDialog;
     /**
-     * "Get embed code" — mark the channel as reached through the organizer's own
-     * backend. The write itself is `setChannelAccessIntent(…, 'server')`, the same
-     * API the old picker called; the difference is that it is now a deliberate
-     * action with a consequence the organizer is told about, rather than one of
-     * four dropdown values with no observable effect.
+     * "Use a website or app" — declare the channel's route as `server`.
+     *
+     * This is no longer a flag the Embed page happens to read: since 2026-08-06 it
+     * is what AUTHORIZES `POST /v1/events/:key/buyer-access-sessions` to mint for
+     * this channel at all. Without it, an integration that is otherwise perfectly
+     * wired up gets a 409 on every buyer.
      */
     private chooseWebsiteIntegration;
+    /**
+     * Declare this channel's sale route.
+     *
+     * Reports through the toast lane the rest of the rail's direct actions use.
+     * The two enforcement refusals get real answers rather than a generic failure:
+     * `channel_intent_switch_blocked` opens the review sheet (there is a decision
+     * to make, and a sheet is where decisions live), and
+     * `channel_access_intent_forbids` — which the organizer can hit by racing
+     * their own second tab — says which route is in the way.
+     */
     private setAccessIntent;
+    /** What just happened, including anything the switch took down with it — the
+     *  server reports `intentSwitch` only when it actually disturbed something. */
+    private intentSavedCopy;
     /** `channelId` is explicit because this is reachable from the ⋯ menu on a row
      *  that is NOT the open channel, as well as from the detail panel itself. */
     private togglePause;
@@ -3894,7 +4021,41 @@ declare class ChannelsMode {
      * everything else.
      */
     private renderLinkCreateDialog;
+    /**
+     * DECLARE, then create.
+     *
+     * `createAccessLink` used to set the channel's route to `hosted_link` as a
+     * side effect, which is exactly why the picker could never refuse anything.
+     * The server took that side effect away and now REQUIRES the declaration —
+     * and channels default to `none`, so a create that did not declare first
+     * would 409 on the organizer's very first "Create buyer link".
+     *
+     * So the route is declared here, immediately before the create. It stays ONE
+     * gesture: nothing is declared while the organizer is still filling the form
+     * in (cancelling changes nothing), and if the declaration is the part that is
+     * refused, the review sheet holds this form and finishes the job on the far
+     * side of the acknowledgement.
+     */
     private createLink;
+    /**
+     * The create half, on its own.
+     *
+     * Separate from `createLink` because the acknowledge path has ALREADY declared
+     * the route — with the very acknowledgement the plain declaration was refused
+     * for. Sending it back through `ensureHostedLinkRoute` would re-derive the
+     * route from a channel list that has not necessarily caught up, and could
+     * refuse the organizer a second time for a decision they just made.
+     */
+    private mintLink;
+    /**
+     * Make sure the channel declares the buyer-link route before a link is minted.
+     *
+     * Returns false when the create must NOT proceed — either it was refused, or
+     * the decision has been handed to the switch-review sheet, which resumes it.
+     * A channel already on `hosted_link` costs no request at all, so creating a
+     * second link is the same single call it has always been.
+     */
+    private ensureHostedLinkRoute;
     /**
      * The ONE-TIME reveal.
      *
@@ -3928,4 +4089,4 @@ declare class ChannelsMode {
     handleBack(): boolean;
 }
 
-export { ACCESS_LINK_DEFAULTS, type AccessLinkRecord, type AccessLinkReveal, type AccessLinkState, type AccessLinkStatus, type AccessLinkStatusRecord, ApiError, type ArchiveBlockedDetails, type AssignmentBuckets, type AssignmentDropDetails, type AssignmentResult, type AttachPickerFrameOptions, type BestAvailableResult, type BucketRow, BuyerAccessContext, type BuyerAccessExpiredEvent, type BuyerAccessRefreshReason, type BuyerAccessToken, type BuyerAccessTokenProvider, BuyerAccessUnavailableError, type BuyerAccessUnavailableEvent, type BuyerAccessUnavailableReason, BuyerRealtimeClient, type BuyerRealtimeOptions, type ChannelAccessIntent, type ChannelAccessSummary, type ChannelAllocationPage, type ChannelAuditEntry, type ChannelAuditPage, type ChannelCounts, type ChannelListResult, type ChannelPreviewProjection, type ChannelRecord, type ChannelSeatStatus, type ChannelState, type ChannelsCapabilities, type ChannelsClient, ChannelsMode, type ChannelsModeHost, type ChannelsRowView, type ChannelsSeatView, type CheckoutHandoff, type CheckoutLineItem, type CheckoutSessionResult, type ControlRoomActivityEntry, type ControlRoomSectionMetric, type ControlRoomSnapshot, EmbeddedDesigner, type EmbeddedDesignerEventType, type EmbeddedDesignerMessage, type EmbeddedDesignerOptions, type GAAreaAvailability, type HoldConflict, type HoldLineItem, type HoldResult, type LogEntry, type LogPage, ManageApi, ManageApiError, type OrderStatusResult, PUBLIC_CHANNEL_ID, PUBLIC_CHANNEL_NAME, type PaymentOptionsReason, type PaymentOptionsResult, type PaymentProviderName, type Projection, type PubApiOptions, type RealtimeSink, type ReportByStatus, type ReportCategoryMeta, type ReportCategoryRow, type ReportResult, type ResumedHoldResult, SeatManager, type SeatManagerActionResult, type SeatManagerActivity, type SeatManagerCapability, type SeatManagerConnection, type SeatManagerMode, type SeatManagerOptions, type SeatManagerTallies, SeatPicker, type SeatPickerOptions, type SeatPickerTheme, SeatingChart, type SeatingChartOptions, type SelectedObjectUnavailableEvent, type SelectedSeat, type SelectionSourceRow, type StatusChange, type SubscribeTicket$1 as SubscribeTicket, accessIntentLabel, accessLine, accessLinkBadge, accessLinkErrorCopy, accessLinkIsLive, accessLinkPolicyLines, attachPickerFrame, bucketRows, bucketRowsHtml, createBuyerAccessContext, createControllerSink, dropReviewRows, isPublicChannelId, markerLetter, markerOf, mutationCount, needsMoveConfirmation, planAssignment, retryAfterCopy, selectionSources, stateBadge, suggestMarker };
+export { ACCESS_LINK_DEFAULTS, type AccessIntentForbidsDetails, type AccessLinkRecord, type AccessLinkReveal, type AccessLinkState, type AccessLinkStatus, type AccessLinkStatusRecord, ApiError, type ArchiveBlockedDetails, type AssignmentBuckets, type AssignmentDropDetails, type AssignmentResult, type AttachPickerFrameOptions, type BestAvailableResult, type BucketRow, BuyerAccessContext, type BuyerAccessExpiredEvent, type BuyerAccessRefreshReason, type BuyerAccessToken, type BuyerAccessTokenProvider, BuyerAccessUnavailableError, type BuyerAccessUnavailableEvent, type BuyerAccessUnavailableReason, BuyerRealtimeClient, type BuyerRealtimeOptions, type ChannelAccessIntent, type ChannelAccessSummary, type ChannelAllocationPage, type ChannelAuditEntry, type ChannelAuditPage, type ChannelCounts, type ChannelListResult, type ChannelPreviewProjection, type ChannelRecord, type ChannelSeatStatus, type ChannelState, type ChannelsCapabilities, type ChannelsClient, ChannelsMode, type ChannelsModeHost, type ChannelsRowView, type ChannelsSeatView, type CheckoutHandoff, type CheckoutLineItem, type CheckoutSessionResult, type ControlRoomActivityEntry, type ControlRoomSectionMetric, type ControlRoomSnapshot, EmbeddedDesigner, type EmbeddedDesignerEventType, type EmbeddedDesignerMessage, type EmbeddedDesignerOptions, type GAAreaAvailability, type HoldConflict, type HoldLineItem, type HoldResult, type IntentSwitchBlockedDetails, type LogEntry, type LogPage, ManageApi, ManageApiError, type OrderStatusResult, PUBLIC_CHANNEL_ID, PUBLIC_CHANNEL_NAME, type PaymentOptionsReason, type PaymentOptionsResult, type PaymentProviderName, type Projection, type PubApiOptions, type RealtimeSink, type ReportByStatus, type ReportCategoryMeta, type ReportCategoryRow, type ReportResult, type ResumedHoldResult, SeatManager, type SeatManagerActionResult, type SeatManagerActivity, type SeatManagerCapability, type SeatManagerConnection, type SeatManagerMode, type SeatManagerOptions, type SeatManagerTallies, SeatPicker, type SeatPickerOptions, type SeatPickerTheme, SeatingChart, type SeatingChartOptions, type SelectedObjectUnavailableEvent, type SelectedSeat, type SelectionSourceRow, type StatusChange, type SubscribeTicket$1 as SubscribeTicket, accessIntentDescription, accessIntentLabel, accessLine, accessLinkBadge, accessLinkErrorCopy, accessLinkIsLive, accessLinkPolicyLines, attachPickerFrame, bucketRows, bucketRowsHtml, createBuyerAccessContext, createControllerSink, dropReviewRows, intentForbidsCopy, intentSwitchBlockedCopy, isPublicChannelId, markerLetter, markerOf, mutationCount, needsMoveConfirmation, planAssignment, retryAfterCopy, selectionSources, stateBadge, suggestMarker };

package/dist/index.d.ts

@@ -2268,8 +2268,66 @@ declare function retryAfterCopy(details: ArchiveBlockedDetails | null | undefine
 /** The access line under a channel row. Falls back to "—" before the hardening
  *  branch lands the `access` field, never to a guess. */
 declare function accessLine(access: ChannelAccessSummary | null | undefined): string;
-/** Plain-language label for the access-intent control. */
+/**
+ * The name of each sale route, WORD FOR WORD as the server says it.
+ *
+ * `eventChannels.ts` builds its refusal sentences from an `INTENT_LABEL` map
+ * with exactly these four strings. Diverging here would mean the picker calls a
+ * route one thing and the refusal it produces calls it another, so these are
+ * copied deliberately rather than paraphrased.
+ */
 declare function accessIntentLabel(intent: ChannelAccessIntent): string;
+/**
+ * What choosing this route actually DOES, now that the server enforces it.
+ *
+ * Written against the enforcement matrix, not against intent: each route opens
+ * exactly one way to reach a buyer and refuses the other three, so each sentence
+ * says both halves. The old copy for these values promised nothing and delivered
+ * nothing; it was deleted in 0.42.0 and is not coming back.
+ */
+declare function accessIntentDescription(intent: ChannelAccessIntent): string;
+/** `channel_access_intent_forbids` (409) — the route this channel declares is
+ *  not the one the action needed. */
+interface AccessIntentForbidsDetails {
+    channelId?: string;
+    accessIntent?: ChannelAccessIntent | string;
+    /** The route the refused action arrived on: `hosted_link` | `server` | `staff` | `public`. */
+    route?: string;
+}
+/**
+ * The refusal, said as a decision the organizer can act on.
+ *
+ * The server's own sentence stops at "…so it cannot be sold through a buyer
+ * link" — true, but it leaves the reader to work out what to do. This adds the
+ * second half: which route to switch to. The code itself is never shown.
+ */
+declare function intentForbidsCopy(details: AccessIntentForbidsDetails | null | undefined): string;
+/** `channel_intent_switch_blocked` (409) — buyers are inside the current route. */
+interface IntentSwitchBlockedDetails {
+    channelId?: string;
+    from?: ChannelAccessIntent | string;
+    to?: ChannelAccessIntent | string;
+    liveAccessLinks?: number;
+    activeSessions?: number;
+    acknowledgeWith?: {
+        acknowledgeLiveAccess?: boolean;
+    };
+}
+/**
+ * What is live right now, and what acknowledging would do to it.
+ *
+ * Both halves are checked against the server rather than guessed: an
+ * acknowledged switch REVOKES the channel's hosted links (redemption refuses
+ * from that moment, so a link left listed as active would be a door the
+ * management surface advertises and the buyer path denies), and deliberately
+ * LEAVES buyer sessions and their holds alone — nobody is thrown out of a
+ * checkout. Sessions cap at 12 hours (30 minutes by default) and no new ones can
+ * be minted, so the old route drains on its own.
+ */
+declare function intentSwitchBlockedCopy(details: IntentSwitchBlockedDetails | null | undefined): {
+    headline: string;
+    consequences: string[];
+};
 /** Lifecycle the server stores. `rotated` means a newer link replaced this one. */
 type AccessLinkState = 'active' | 'revoked' | 'rotated';
 /** What the organizer surface renders: `state`, unless an active link has run
@@ -2363,6 +2421,7 @@ declare function accessLinkErrorCopy(err: {
     code?: string;
     serverMessage?: string;
     status?: number;
+    details?: Record<string, unknown>;
 } | null | undefined): string;
 /**
  * The chart-update refusal `channel_assignment_would_drop` (409) deliberately
@@ -2772,12 +2831,33 @@ declare class ManageApi {
     channelPreview(key: string, channelIds: string[], opts?: {
         includePublic?: boolean;
     }): Promise<ChannelPreviewProjection>;
-    /** Declare how buyers are meant to reach this channel. Drives the rail's
-     *  access line and turns "No buyer access configured" from information into a
-     *  warning when the organizer says the channel is for buyer self-service. */
-    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent): Promise<{
+    /**
+     * Choose which sale route this channel opens.
+     *
+     * Since the server's 2026-08-06 change this is AUTHORIZATION, not a label:
+     * exactly one of the four routes may mint buyer access for the channel and the
+     * other three refuse with 409 `channel_access_intent_forbids`. The default is
+     * `none`, which refuses all four — so a route has to be declared before any
+     * buyer-facing action on the channel can succeed.
+     *
+     * Switching the route while buyers are already inside the current one is
+     * refused with 409 `channel_intent_switch_blocked`, whose `details` name what
+     * is live (`liveAccessLinks`, `activeSessions`). Retry with
+     * `acknowledgeLiveAccess: true`: hosted links on the channel are revoked,
+     * while sessions already minted keep their holds and drain on their own.
+     * `intentSwitch` is present on the response ONLY when the switch disturbed
+     * something, so the ordinary case stays the two-key body it has always been.
+     */
+    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent, opts?: {
+        acknowledgeLiveAccess?: boolean;
+        reason?: string;
+    }): Promise<{
         ok: true;
         channel: ChannelRecord;
+        intentSwitch?: {
+            closedLinks: number;
+            keptSessions: number;
+        };
     }>;
     /**
      * Mint a hosted access link. The 201 is the ONE and ONLY time `url` and
@@ -2790,8 +2870,11 @@ declare class ManageApi {
      * Platform bounds are enforced server-side and reported as 422 with the rule
      * spelled out in `ManageApiError.serverMessage`.
      *
-     * Side effect by design: this also declares the channel's access intent as
-     * `hosted_link`, so the rail stops saying "no buyer access configured".
+     * NOT a side effect any more. This used to SET the channel's access intent to
+     * `hosted_link`; since 2026-08-06 it REQUIRES it, and a channel declaring any
+     * other route refuses with 409 `channel_access_intent_forbids`. Callers must
+     * declare the route first — `ChannelsMode` does exactly that before it
+     * creates, so a first buyer link on a fresh channel is still one gesture.
      */
     createAccessLink(key: string, channelId: string, input?: {
         label?: string | null;
@@ -3439,9 +3522,19 @@ interface ChannelsClient {
     channelPreview(key: string, channelIds: string[], opts?: {
         includePublic?: boolean;
     }): Promise<ChannelPreviewProjection>;
-    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent): Promise<{
+    /** Choose the channel's sale route. Authorization since 2026-08-06, so this is
+     *  a precondition of every buyer-facing action, not a label. `opts` carries the
+     *  acknowledgement that unblocks a switch with live buyer access. */
+    setChannelAccessIntent(key: string, channelId: string, accessIntent: ChannelAccessIntent, opts?: {
+        acknowledgeLiveAccess?: boolean;
+        reason?: string;
+    }): Promise<{
         ok: true;
         channel: ChannelRecord;
+        intentSwitch?: {
+            closedLinks: number;
+            keptSessions: number;
+        };
     }>;
     /** 201 with the ONE-TIME reveal. Every omitted field takes the server default
      *  (expiry = event start, 100 redemptions, 4 seats per buyer). */
@@ -3749,21 +3842,24 @@ declare class ChannelsMode {
     private selectionRailHtml;
     private detailRailHtml;
     /**
-     * "Distribute" — how the seats in this channel actually reach a buyer.
+     * "Distribute" — the ONE way this channel's seats reach a buyer.
      *
-     * This replaced a four-value "access intent" picker (none / internal /
-     * hosted_link / server). Two of those values did nothing anywhere: no buyer or
-     * inventory path reads `access_intent`, so `none` and `internal` were labels an
-     * organizer could set and then wait forever for something to happen. A third,
-     * `hosted_link`, is not the organizer's to choose at all — the server sets it
-     * when a buyer link is created and clears it when the last live one is revoked.
+     * All four routes are here, and this is a real chooser again. It was cut down
+     * to two actions in 0.42.0 for a good reason: `access_intent` was stored,
+     * audited, and read by nothing, so "Keep as protected reserve" and "Sell
+     * through your own staff" were labels an organizer could set and then wait
+     * forever for something to happen. The server closed that hole on 2026-08-06 —
+     * each declaration now opens exactly one route and REFUSES the other three —
+     * so all four are honest choices and belong on the surface.
      *
-     * So this is two ACTIONS, not a setting: create a buyer link, or point the
-     * channel at a website integration. Both of them do something the moment they
-     * are pressed. A legacy row still carrying `none` or `internal` renders the
-     * neutral "not distributed yet" state with both actions offered — the stored
-     * value is left alone (it is organizer-declared metadata and the API that
-     * writes it is unchanged), it simply no longer has a control of its own.
+     * None of the old copy came back with them. These sentences are written
+     * against the enforcement matrix (`accessIntentDescription`), which is why
+     * each one says what the route refuses as well as what it allows.
+     *
+     * The current route is stated, not merely styled: a chooser whose selection
+     * you have to infer from a border is not a chooser. Its card carries a
+     * "Current route" marker and drops its own select button, because pressing it
+     * would do nothing.
      */
     private distributeHtml;
     /**
@@ -3814,6 +3910,23 @@ declare class ChannelsMode {
     private renderScopeDialog;
     private openDialog;
     private renderDialog;
+    /**
+     * `channel_intent_switch_blocked` — buyers are inside the route being left.
+     *
+     * The same review-then-acknowledge shape as the archive and chart-drop guards,
+     * because it is the same kind of decision: the server refuses once, names
+     * exactly what is at stake, and only a deliberate second press goes through.
+     * What acknowledging does is spelled out per consequence — links close now,
+     * checkouts already running survive and drain — rather than hidden behind a
+     * word like "force".
+     */
+    private renderIntentSwitchDialog;
+    /**
+     * The acknowledged retry. The declare and the create stay one gesture across
+     * the sheet: if this switch was the first half of a declare-then-create, the
+     * held form finishes on the far side of the acknowledgement.
+     */
+    private acknowledgeIntentSwitch;
     /**
      * Mount a modal: `aria-modal` dialog, programmatic name, focus moved inside,
      * Tab trapped, Escape closes WITHOUT mutating, focus restored on close (§13).
@@ -3854,14 +3967,28 @@ declare class ChannelsMode {
     private renderMenuDialog;
     private renderRenameDialog;
     /**
-     * "Get embed code" — mark the channel as reached through the organizer's own
-     * backend. The write itself is `setChannelAccessIntent(…, 'server')`, the same
-     * API the old picker called; the difference is that it is now a deliberate
-     * action with a consequence the organizer is told about, rather than one of
-     * four dropdown values with no observable effect.
+     * "Use a website or app" — declare the channel's route as `server`.
+     *
+     * This is no longer a flag the Embed page happens to read: since 2026-08-06 it
+     * is what AUTHORIZES `POST /v1/events/:key/buyer-access-sessions` to mint for
+     * this channel at all. Without it, an integration that is otherwise perfectly
+     * wired up gets a 409 on every buyer.
      */
     private chooseWebsiteIntegration;
+    /**
+     * Declare this channel's sale route.
+     *
+     * Reports through the toast lane the rest of the rail's direct actions use.
+     * The two enforcement refusals get real answers rather than a generic failure:
+     * `channel_intent_switch_blocked` opens the review sheet (there is a decision
+     * to make, and a sheet is where decisions live), and
+     * `channel_access_intent_forbids` — which the organizer can hit by racing
+     * their own second tab — says which route is in the way.
+     */
     private setAccessIntent;
+    /** What just happened, including anything the switch took down with it — the
+     *  server reports `intentSwitch` only when it actually disturbed something. */
+    private intentSavedCopy;
     /** `channelId` is explicit because this is reachable from the ⋯ menu on a row
      *  that is NOT the open channel, as well as from the detail panel itself. */
     private togglePause;
@@ -3894,7 +4021,41 @@ declare class ChannelsMode {
      * everything else.
      */
     private renderLinkCreateDialog;
+    /**
+     * DECLARE, then create.
+     *
+     * `createAccessLink` used to set the channel's route to `hosted_link` as a
+     * side effect, which is exactly why the picker could never refuse anything.
+     * The server took that side effect away and now REQUIRES the declaration —
+     * and channels default to `none`, so a create that did not declare first
+     * would 409 on the organizer's very first "Create buyer link".
+     *
+     * So the route is declared here, immediately before the create. It stays ONE
+     * gesture: nothing is declared while the organizer is still filling the form
+     * in (cancelling changes nothing), and if the declaration is the part that is
+     * refused, the review sheet holds this form and finishes the job on the far
+     * side of the acknowledgement.
+     */
     private createLink;
+    /**
+     * The create half, on its own.
+     *
+     * Separate from `createLink` because the acknowledge path has ALREADY declared
+     * the route — with the very acknowledgement the plain declaration was refused
+     * for. Sending it back through `ensureHostedLinkRoute` would re-derive the
+     * route from a channel list that has not necessarily caught up, and could
+     * refuse the organizer a second time for a decision they just made.
+     */
+    private mintLink;
+    /**
+     * Make sure the channel declares the buyer-link route before a link is minted.
+     *
+     * Returns false when the create must NOT proceed — either it was refused, or
+     * the decision has been handed to the switch-review sheet, which resumes it.
+     * A channel already on `hosted_link` costs no request at all, so creating a
+     * second link is the same single call it has always been.
+     */
+    private ensureHostedLinkRoute;
     /**
      * The ONE-TIME reveal.
      *
@@ -3928,4 +4089,4 @@ declare class ChannelsMode {
     handleBack(): boolean;
 }
 
-export { ACCESS_LINK_DEFAULTS, type AccessLinkRecord, type AccessLinkReveal, type AccessLinkState, type AccessLinkStatus, type AccessLinkStatusRecord, ApiError, type ArchiveBlockedDetails, type AssignmentBuckets, type AssignmentDropDetails, type AssignmentResult, type AttachPickerFrameOptions, type BestAvailableResult, type BucketRow, BuyerAccessContext, type BuyerAccessExpiredEvent, type BuyerAccessRefreshReason, type BuyerAccessToken, type BuyerAccessTokenProvider, BuyerAccessUnavailableError, type BuyerAccessUnavailableEvent, type BuyerAccessUnavailableReason, BuyerRealtimeClient, type BuyerRealtimeOptions, type ChannelAccessIntent, type ChannelAccessSummary, type ChannelAllocationPage, type ChannelAuditEntry, type ChannelAuditPage, type ChannelCounts, type ChannelListResult, type ChannelPreviewProjection, type ChannelRecord, type ChannelSeatStatus, type ChannelState, type ChannelsCapabilities, type ChannelsClient, ChannelsMode, type ChannelsModeHost, type ChannelsRowView, type ChannelsSeatView, type CheckoutHandoff, type CheckoutLineItem, type CheckoutSessionResult, type ControlRoomActivityEntry, type ControlRoomSectionMetric, type ControlRoomSnapshot, EmbeddedDesigner, type EmbeddedDesignerEventType, type EmbeddedDesignerMessage, type EmbeddedDesignerOptions, type GAAreaAvailability, type HoldConflict, type HoldLineItem, type HoldResult, type LogEntry, type LogPage, ManageApi, ManageApiError, type OrderStatusResult, PUBLIC_CHANNEL_ID, PUBLIC_CHANNEL_NAME, type PaymentOptionsReason, type PaymentOptionsResult, type PaymentProviderName, type Projection, type PubApiOptions, type RealtimeSink, type ReportByStatus, type ReportCategoryMeta, type ReportCategoryRow, type ReportResult, type ResumedHoldResult, SeatManager, type SeatManagerActionResult, type SeatManagerActivity, type SeatManagerCapability, type SeatManagerConnection, type SeatManagerMode, type SeatManagerOptions, type SeatManagerTallies, SeatPicker, type SeatPickerOptions, type SeatPickerTheme, SeatingChart, type SeatingChartOptions, type SelectedObjectUnavailableEvent, type SelectedSeat, type SelectionSourceRow, type StatusChange, type SubscribeTicket$1 as SubscribeTicket, accessIntentLabel, accessLine, accessLinkBadge, accessLinkErrorCopy, accessLinkIsLive, accessLinkPolicyLines, attachPickerFrame, bucketRows, bucketRowsHtml, createBuyerAccessContext, createControllerSink, dropReviewRows, isPublicChannelId, markerLetter, markerOf, mutationCount, needsMoveConfirmation, planAssignment, retryAfterCopy, selectionSources, stateBadge, suggestMarker };
+export { ACCESS_LINK_DEFAULTS, type AccessIntentForbidsDetails, type AccessLinkRecord, type AccessLinkReveal, type AccessLinkState, type AccessLinkStatus, type AccessLinkStatusRecord, ApiError, type ArchiveBlockedDetails, type AssignmentBuckets, type AssignmentDropDetails, type AssignmentResult, type AttachPickerFrameOptions, type BestAvailableResult, type BucketRow, BuyerAccessContext, type BuyerAccessExpiredEvent, type BuyerAccessRefreshReason, type BuyerAccessToken, type BuyerAccessTokenProvider, BuyerAccessUnavailableError, type BuyerAccessUnavailableEvent, type BuyerAccessUnavailableReason, BuyerRealtimeClient, type BuyerRealtimeOptions, type ChannelAccessIntent, type ChannelAccessSummary, type ChannelAllocationPage, type ChannelAuditEntry, type ChannelAuditPage, type ChannelCounts, type ChannelListResult, type ChannelPreviewProjection, type ChannelRecord, type ChannelSeatStatus, type ChannelState, type ChannelsCapabilities, type ChannelsClient, ChannelsMode, type ChannelsModeHost, type ChannelsRowView, type ChannelsSeatView, type CheckoutHandoff, type CheckoutLineItem, type CheckoutSessionResult, type ControlRoomActivityEntry, type ControlRoomSectionMetric, type ControlRoomSnapshot, EmbeddedDesigner, type EmbeddedDesignerEventType, type EmbeddedDesignerMessage, type EmbeddedDesignerOptions, type GAAreaAvailability, type HoldConflict, type HoldLineItem, type HoldResult, type IntentSwitchBlockedDetails, type LogEntry, type LogPage, ManageApi, ManageApiError, type OrderStatusResult, PUBLIC_CHANNEL_ID, PUBLIC_CHANNEL_NAME, type PaymentOptionsReason, type PaymentOptionsResult, type PaymentProviderName, type Projection, type PubApiOptions, type RealtimeSink, type ReportByStatus, type ReportCategoryMeta, type ReportCategoryRow, type ReportResult, type ResumedHoldResult, SeatManager, type SeatManagerActionResult, type SeatManagerActivity, type SeatManagerCapability, type SeatManagerConnection, type SeatManagerMode, type SeatManagerOptions, type SeatManagerTallies, SeatPicker, type SeatPickerOptions, type SeatPickerTheme, SeatingChart, type SeatingChartOptions, type SelectedObjectUnavailableEvent, type SelectedSeat, type SelectionSourceRow, type StatusChange, type SubscribeTicket$1 as SubscribeTicket, accessIntentDescription, accessIntentLabel, accessLine, accessLinkBadge, accessLinkErrorCopy, accessLinkIsLive, accessLinkPolicyLines, attachPickerFrame, bucketRows, bucketRowsHtml, createBuyerAccessContext, createControllerSink, dropReviewRows, intentForbidsCopy, intentSwitchBlockedCopy, isPublicChannelId, markerLetter, markerOf, mutationCount, needsMoveConfirmation, planAssignment, retryAfterCopy, selectionSources, stateBadge, suggestMarker };