The API your website actually calls.

// 1. Hold the seats before sending the buyer to checkout
const held = await fetch("https://bestvenue.tech/api/v1/orders", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BESTVENUE_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    action: "reserve",
    slug: "marisol-trio",
    holdId: crypto.randomUUID(),   // reuse this on retry
    quantity: 2,
    customerEmail: buyerEmail,     // checked against the presale window
  }),
}).then((response) => response.json());

// 2. Take the money on your own Stripe account, however you already do.

// 3. Confirm, so the seats stop being a hold and start being a sale.
await fetch("https://bestvenue.tech/api/v1/orders", {
  method: "POST",
  headers: { Authorization: `Bearer ${key}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    action: "confirm",
    holdId: held.holdId,
    externalPaymentId: session.id,
  }),
});