@blamejs/blamejs-shop 0.3.44 → 0.3.45

package/CHANGELOG.md

@@ -8,6 +8,8 @@ upgrading across more than a few patches at a time.
 
 ## v0.3.x
 
+- v0.3.45 (2026-06-01) — **Tax, VAT, bulk price changes, and customer emails now compute money in exact integer arithmetic.** Several money calculations were performed with floating-point intermediates. On a large order subtotal the sales-tax math could lose a minor unit, and the customer-facing wishlist emails formatted prices by dividing by 100 — which is wrong for zero-decimal currencies like JPY (¥1,050 rendered as 10.5) and three-decimal currencies like BHD, and dropped trailing zeros ($10.00 shown as 10). All of these now run through the framework's exact BigInt money primitive: sales-tax and VAT/GST extraction, the per-rate owed figure on a tax filing, the admin bulk price-adjust, the wishlist price-drop and digest emails, and subscription monthly-revenue normalization. Prices in customer emails are now rendered with the correct currency exponent and symbol for every currency. **Changed:** *Bulk price-adjust rounds to even on exact half-unit ties* — The admin bulk price-adjust now rounds a price that lands exactly halfway between two minor units to the nearest even unit, matching the rounding used everywhere else in the money surface, instead of always rounding the half up. This only changes the result on an exact tie and by at most one minor unit (for example a price computed as 200.5 now becomes 200 rather than 201). If a pricing regime requires rounding halves up, that is a one-line option change. **Fixed:** *Exact sales-tax and VAT computation* — Sales tax, VAT-inclusive extraction, and VAT-exclusive addition are computed in exact integer arithmetic rather than with a floating-point intermediate, so the tax on a large order total is no longer off by a minor unit. The per-rate owed figure on a tax filing is likewise computed exactly, which matters when a filing window aggregates a very large taxable total. · *Currency-correct prices in wishlist emails* — Price-drop alert emails and the wishlist digest now format prices with each currency's own decimal places and symbol. Zero-decimal currencies (such as JPY) and three-decimal currencies (such as BHD) render correctly, and whole amounts keep their trailing zeros — for example $10.00 instead of 10. · *Exact subscription monthly-revenue normalization* — Normalizing a weekly or annual plan to a monthly figure for revenue reporting now uses exact rational arithmetic instead of a floating-point cadence factor, so the dashboard total is stable and does not drift by a cent between refreshes.
+
 - v0.3.44 (2026-05-31) — **Customers can rate a delivered order, and the admin console moderates and replies.** There was no way for a customer to give feedback on how an order was fulfilled, and no way for an operator to act on it. Customers can now rate one of their own delivered orders on shipping, packaging, and how likely they are to recommend you, with an optional comment. The admin console gets a Ratings screen with a moderation queue of every flagged comment plus the most recent ratings, where an operator can flag a comment or post one public reply that the customer then sees on their order page. A customer can only rate an order they own, and every comment and reply is HTML-escaped wherever it is shown, so feedback text can't inject markup into another shopper's or an operator's page. **Added:** *Order ratings* — A customer viewing one of their own orders can rate it on three axes — shipping, packaging, and likelihood to recommend (1 to 5) — and optionally leave a comment. Each order can be rated once. The rating, and any public reply from the store, appear on the customer's order page. A customer can only rate an order tied to their own account; the rating is always recorded against the signed-in customer, never a value taken from the request. · *Ratings moderation in the admin console* — A new Ratings screen lists recent ratings with their scores and comments, alongside a moderation queue that surfaces every flagged comment regardless of its score, so a flagged comment on an otherwise high rating is never hidden. An operator can flag a comment for moderation and post a single public reply to a rating, which is then shown to the customer. Comments and replies are HTML-escaped everywhere they are rendered.
 
 - v0.3.43 (2026-05-31) — **Export orders for a date range as CSV or NDJSON, with scheduled exports.** There was no way to pull a bulk export of orders over a date range. A new Exports screen in the admin console previews how many orders and how much revenue a date range covers, then downloads them as a CSV or NDJSON file. The export can also be scheduled and managed as a queued job. Customer email addresses are exported only as a hash, never in the clear, and any field that could be interpreted as a spreadsheet formula is neutralized so an exported file can't run code when opened. This release also updates the vendored blamejs runtime to v0.14.16. **Added:** *Order export* — An Exports screen in the admin console exports orders over a chosen date range. It first shows a preview — the order count, revenue, and average order value for the range — then downloads the orders as a CSV or NDJSON file with a standard set of columns. Exports can also be queued as scheduled jobs and cancelled before they run. Customer email is exported as a hash rather than in the clear, and any cell that begins with a character a spreadsheet would treat as a formula is escaped, so an exported file can't execute anything when opened in Excel or Sheets. **Changed:** *Vendored blamejs runtime updated to v0.14.16* — The bundled blamejs runtime is updated to v0.14.16, which validates connection ports at configuration time — a malformed port (a non-integer or out-of-range value) is now rejected with a clear error at startup instead of silently falling back to a default. No operator action is required.

package/lib/asset-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.3.44",
+  "version": "0.3.45",
   "assets": {
     "css/admin.css": {
       "integrity": "sha384-1SIn6oAf1DjECbRfKENZasdKHJiywGdXR58wn0hsFGcdVHzUmvfgMkEz5ANIAZJ3",

package/lib/product-bulk-ops.js

@@ -16,8 +16,8 @@
  *     bulkAdjustPrice    — apply a percent delta (e.g. -1500 bps for a
  *                          15% markdown) to every matched variant's
  *                          current price in the given currency. The new
- *                          amount is rounded half-away-from-zero in
- *                          minor units; the floor is 0 (no negative
+ *                          amount is rounded half-even in minor units
+ *                          via b.money; the floor is 0 (no negative
  *                          prices). Variants without a current price in
  *                          the target currency are skipped.
  *     bulkArchive        — set products.status='archived' on every
@@ -489,8 +489,9 @@ function create(opts) {
     // Apply a percent_bps delta to every matched variant's CURRENT
     // price in the given currency. Variants without a current price
     // in the target currency are skipped (they don't have a "before"
-    // amount to multiply against). The new amount is rounded with
-    // Math.round and floored at 0.
+    // amount to multiply against). The new amount = current ×
+    // (1 + percent_bps/10000), rounded half-even in minor units via
+    // b.money, and floored at 0.
     bulkAdjustPrice: async function (input) {
       if (!input || typeof input !== "object") throw new TypeError("productBulkOps.bulkAdjustPrice: input object required");
       var filter = input.filter;
@@ -501,11 +502,14 @@ function create(opts) {
       var variants = await _variantsForProducts(productIds);
       var affected = 0;
       var skipped = 0;
-      var multiplier = (10000 + input.percent_bps) / 10000;
       for (var i = 0; i < variants.length; i += 1) {
         var current = await catalog.prices.current(variants[i].id, input.currency);
         if (!current) { skipped += 1; continue; }
-        var next = Math.round(current.amount_minor * multiplier);
+        var next = Number(
+          b.money.fromMinorUnits(BigInt(current.amount_minor), input.currency)
+            .multiply([BigInt(10000 + input.percent_bps), 10000n], { rounding: "half-even" })
+            .toMinorUnits()
+        );
         if (next < 0) next = 0;
         await catalog.prices.set(variants[i].id, {
           currency:     input.currency,

package/lib/sales-tax-filings.js

@@ -559,10 +559,9 @@ function create(opts) {
     }
 
     // Owed: re-derive from per-rate taxable totals using rate_bps.
-    // Integer math: taxable * bps / 10000, banker's-rounded so
-    // half-cent ties don't drift the sum. (Same rounding rule as
-    // b.tax — banker's rounding is the conservative choice when the
-    // primitive may aggregate millions of orders.)
+    // owed = taxable × bps / 10000 per rate, half-even via b.money
+    // (BigInt — taxable_minor sums every order in the window and can
+    // exceed 2^53, so the multiply must not pass through a float).
     var owed = 0;
     var rateKeys = Object.keys(breakdown);
     for (var rk = 0; rk < rateKeys.length; rk += 1) {
@@ -571,14 +570,11 @@ function create(opts) {
       var bps     = parseInt(key, 10);
       if (!Number.isFinite(bps)) continue;
       var bucket  = breakdown[key];
-      var rawOwed = bucket.taxable_minor * bps / 10000;
-      // Banker's round
-      var floored = Math.floor(rawOwed);
-      var frac    = rawOwed - floored;
-      var rounded;
-      if (frac > 0.5)            rounded = floored + 1;
-      else if (frac < 0.5)       rounded = floored;
-      else                       rounded = (floored % 2 === 0) ? floored : floored + 1;
+      var rounded = Number(
+        b.money.fromMinorUnits(BigInt(bucket.taxable_minor), "USD")
+          .multiply([BigInt(bps), 10000n], { rounding: "half-even" })
+          .toMinorUnits()
+      );
       owed += rounded;
     }
     // When no rate rows resolved (taxRatesApi absent / no rates

package/lib/subscription-analytics.js

@@ -185,6 +185,18 @@ var CADENCE_TO_MONTHLY = {
   year:  1 / 12,
 };
 
+// Exact rational [numerator, denominator] forms of the cadence factors
+// above, used by _monthlyMinor so the monthly-normalized minor-unit
+// figure is computed in BigInt (half-even) with no float intermediate.
+// The float CADENCE_TO_MONTHLY view above is retained only for the
+// display-only dashboard export.
+var CADENCE_TO_MONTHLY_RATIO = {
+  day:   [30n, 1n],
+  week:  [30n, 7n],
+  month: [1n, 1n],
+  year:  [1n, 12n],
+};
+
 // Active = (status in active/trialing) AND not cancelled AND not paused.
 var ACTIVE_STATUSES = ["active", "trialing"];
 
@@ -325,27 +337,28 @@ function _canonicalJson(value) {
 
 // ---- cadence normalization ---------------------------------------------
 //
-// Plan amount × quantity normalized to a single monthly figure. Uses
-// banker's rounding (round-half-to-even) on the final minor-unit total
-// so two interval combinations that produce e.g. 4499.5 minor units
-// don't oscillate the dashboard total by one cent between refreshes.
-
-function _bankersRound(x) {
-  var floor = Math.floor(x);
-  var diff = x - floor;
-  if (diff < 0.5) return floor;
-  if (diff > 0.5) return floor + 1;
-  // diff === 0.5 — round to even
-  return floor % 2 === 0 ? floor : floor + 1;
-}
+// Plan amount × quantity normalized to a single monthly figure. The
+// cadence factor (e.g. week → 30/7, year → 1/12) is applied as an
+// exact rational in BigInt half-even via b.money, so the monthly
+// minor-unit total carries no float rounding and two interval
+// combinations producing e.g. 4499.5 minor units settle on a stable
+// even value rather than oscillating the dashboard by a cent.
 
 function _monthlyMinor(amountMinor, interval, intervalCount, quantity) {
-  var factor = CADENCE_TO_MONTHLY[interval];
-  if (factor == null) return 0;
+  var ratio = CADENCE_TO_MONTHLY_RATIO[interval];
+  if (ratio == null) return 0;
+  if (!Number.isInteger(amountMinor)) return 0;
   var qty = Number.isInteger(quantity) && quantity > 0 ? quantity : 1;
   var ic  = Number.isInteger(intervalCount) && intervalCount > 0 ? intervalCount : 1;
-  var raw = (amountMinor * qty * factor) / ic;
-  return _bankersRound(raw);
+  // monthly = amount × qty × (num/den) / ic
+  //         = amount × qty × num / (den × ic)
+  var num = BigInt(amountMinor) * BigInt(qty) * ratio[0];
+  var den = ratio[1] * BigInt(ic);
+  return Number(
+    b.money.fromMinorUnits(num >= 0n ? num : 0n, "USD")
+      .multiply([1n, den], { rounding: "half-even" })
+      .toMinorUnits()
+  );
 }
 
 // ---- active-at predicate (in SQL) --------------------------------------

package/lib/tax.js

@@ -37,6 +37,8 @@
  *   additive `lines[].tax_class` field.
  */
 
+var b = require("./vendor/blamejs");
+
 var COUNTRY_RE = /^[A-Z]{2}$/;
 var STATE_RE   = /^[A-Z0-9]{1,5}$/;
 var POSTAL_RE  = /^[A-Za-z0-9 -]{1,16}$/;
@@ -72,6 +74,19 @@ function _nonNegInt(n, label) {
   }
 }
 
+// Multiply a non-negative minor-unit integer by the rational num/den
+// using the framework's BigInt money primitive (half-even). The result
+// is an integer minor-unit count in the SAME unit as `minor` — the
+// divisor is currency-exponent-independent, so a fixed carrier currency
+// is correct (see lib/quantity-discounts.js for the same technique).
+function _mulRational(minor, num, den) {
+  return Number(
+    b.money.fromMinorUnits(BigInt(minor), "USD")
+      .multiply([BigInt(num), BigInt(den)], { rounding: "half-even" })
+      .toMinorUnits()
+  );
+}
+
 function _validateRule(rule, i) {
   if (!rule || typeof rule !== "object") throw new TypeError("tax: rule[" + i + "] must be an object");
   _country(rule.country, "rule[" + i + "].country");
@@ -121,17 +136,9 @@ function operatorTable(opts) {
         if (_matches(rules[i], ctx.shipTo)) { matched = rules[i]; break; }
       }
       var rateBps = matched ? matched.rate_bps : 0;
-      // tax = subtotal × bps / 10000, rounded to nearest minor unit.
-      // Round-half-to-even (banker's) avoids systematic upward bias
-      // across many small carts; Math.round in JS is round-half-up,
-      // so we implement banker's by hand.
-      var raw = ctx.subtotal_minor * rateBps / 10000;
-      var floor = Math.floor(raw);
-      var frac  = raw - floor;
-      var tax;
-      if (frac < 0.5)      tax = floor;
-      else if (frac > 0.5) tax = floor + 1;
-      else                 tax = (floor % 2 === 0) ? floor : floor + 1; // even
+      // tax = subtotal × bps / 10000, half-even via b.money (BigInt —
+      // no float intermediate, exact for large subtotals).
+      var tax = _mulRational(ctx.subtotal_minor, rateBps, 10000);
       return {
         tax_minor:    tax,
         rate_bps:     rateBps,
@@ -171,18 +178,6 @@ function create(opts) {
 // primitives compose against. The operator-table adapter still owns
 // jurisdiction-rule selection.
 
-// Banker's rounding (round-half-to-even) for non-negative `raw`.
-// JS Math.round is round-half-up, which biases tax totals upward
-// across many small carts; this matches the rounding mode the
-// existing operatorTable adapter uses.
-function _bankersRound(raw) {
-  var floor = Math.floor(raw);
-  var frac  = raw - floor;
-  if (frac < 0.5) return floor;
-  if (frac > 0.5) return floor + 1;
-  return (floor % 2 === 0) ? floor : floor + 1;
-}
-
 function _currency(c) {
   if (typeof c !== "string" || !/^[A-Z]{3}$/.test(c)) {
     throw new TypeError("tax: currency must be a 3-letter ISO 4217 code (uppercase), got " + JSON.stringify(c));
@@ -210,7 +205,7 @@ function calculateInclusive(args) {
   _currency(args.currency);
   var gross = args.amount_minor;
   var rate  = args.rate_bps;
-  var tax   = _bankersRound(gross * rate / (10000 + rate));
+  var tax   = _mulRational(gross, rate, 10000 + rate);
   return {
     net_minor:   gross - tax,
     tax_minor:   tax,
@@ -237,7 +232,7 @@ function calculateExclusive(args) {
   _currency(args.currency);
   var net  = args.amount_minor;
   var rate = args.rate_bps;
-  var tax  = _bankersRound(net * rate / 10000);
+  var tax  = _mulRational(net, rate, 10000);
   return {
     net_minor:   net,
     tax_minor:   tax,

package/lib/wishlist-alerts.js

@@ -89,6 +89,7 @@
  */
 
 var b = require("./vendor/blamejs");
+var pricing = require("./pricing");
 
 var C = b.constants;
 
@@ -770,10 +771,10 @@ function create(opts) {
         var dispatchOk = false;
         try {
           var oldPriceStr = v.payload.old_amount_minor != null
-            ? String(v.payload.old_amount_minor / 100) + " " + v.payload.currency
+            ? pricing.format(v.payload.old_amount_minor, v.payload.currency)
             : "—";
           var newPriceStr = v.payload.new_amount_minor != null
-            ? String(v.payload.new_amount_minor / 100) + " " + v.payload.currency
+            ? pricing.format(v.payload.new_amount_minor, v.payload.currency)
             : "—";
           var pctStr = v.payload.discount_bps != null
             ? String(Math.floor(v.payload.discount_bps / 100)) + "%"

package/lib/wishlist-digest.js

@@ -111,6 +111,7 @@
  */
 
 var b = require("./vendor/blamejs");
+var pricing = require("./pricing");
 
 var C = b.constants;
 
@@ -781,7 +782,9 @@ function create(opts) {
       }
       var priceStr = "—";
       if (price && typeof price.amount_minor === "number") {
-        priceStr = (price.amount_minor / 100).toFixed(2) + " " + (price.currency || currency);
+        try {
+          priceStr = pricing.format(price.amount_minor, price.currency || currency);
+        } catch (_efmt) { priceStr = "—"; }
       }
 
       // Stock change — best-effort. The catalog dep doesn't guarantee

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.3.44",
+  "version": "0.3.45",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {