@classytic/loyalty 0.4.0 → 0.6.0

package/CHANGELOG.md

@@ -3,6 +3,112 @@
 Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 adhering to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] — 2026-08-17
+
+### Added
+- `SessionNotInTransactionError` — thrown when a host passes `ctx.session` that has no active transaction; a bare session provides no atomicity and would leave the points mutation standing if the outbox save fails
+- `ResolvedTenant` type alias (deprecated shim for `ResolvedTenantConfig` from `@classytic/repo-core/tenant`)
+
+### Changed
+- `TenantConfig` widened to `RepoTenantConfig | boolean` (was `false | PrimitivesTenantConfig`); hosts rename `field` → `tenantField` and `type` → `fieldType`
+- `in-process-bus` consolidated onto primitives `InProcessEventBus`; event catalog, dispatch, and repository types aligned
+- Schemas and repositories updated: earning-rule, redemption, tier-definition, point-transaction, referral
+- `src/index.ts` exports reorganised for tree-shaking
+
+## 1.0.0 - 2026-07-29
+
+### Changed
+- **License:** relicensed from MIT to the **Classytic Source-Available License** (Community & Commercial). Evaluation/development use remains free; production use now requires a commercial license from Classytic LLC. See `LICENSE`.
+- Major bump marks the license change; versions published before 1.0.0 remain under their original MIT terms.
+
+## 0.7.1 - 2026-07-22 (unpublished)
+
+### Changed
+- Internal: `InProcess*Bus` is now a thin subclass of `@classytic/primitives/event-infra`'s shared `InProcessEventBus` (dedup / error-isolation / close semantics unchanged); `MemoryOutboxStore` re-exported from the shared runtime where applicable. No public API, event-name, or wire-envelope change. Requires `@classytic/primitives >=0.13.0`.
+
+## [0.7.0] — unpublished (2026-07-22)
+
+### Added — engine lifecycle: `destroy()`
+
+- **`LoyaltyEngine.destroy()`** — closes the self-created
+  `InProcessLoyaltyBus` (skipped when the host injected `eventTransport`).
+- `destroy()` follows the fleet ownsBus convention (manufacturing/purchase
+  pattern): only what the engine itself created is closed; a host-injected
+  transport is the host's to close. Idempotent — a second call is a no-op.
+  Mongoose models/connection are untouched (host-owned).
+- Lifecycle coverage in `tests/integration/engine-lifecycle.test.ts`.
+
+## [0.6.0] — 2026-07-20
+
+### Changed — money contract: integer MINOR units + explicit rates, no major-unit ambiguity (BREAKING)
+
+Every monetary number in loyalty was an ambiguous major-currency float
+(unenforced), and both earning rates carried an implicit "per 1 MAJOR unit"
+basis. Aligned with `@classytic/flow@0.6.0`'s TOTAL-vs-RATE standardization
+(see flow `wiki/conventions.md` §15). Loyalty stays ambient-single-currency —
+NO currency field on any doc or API; the host owns currency.
+
+- **All money AMOUNTS are now integers in the host's minor unit** (paisa for
+  BDT), enforced by `mongooseMinorUnits()` from the new
+  **`@classytic/validation` dependency (`>=0.2.0`)**:
+  - `EarningConditions.minOrderAmount`
+  - `LoyaltyConfig.redemption.minOrderAmount` (`DEFAULT_MIN_ORDER_AMOUNT`
+    stays `0` — zero is unit-invariant)
+  - `Redemption.discountAmount`, `Redemption.initialBalance`,
+    `Redemption.remainingBalance`
+  - `TierQualification.minLifetimeSpend` (declared-only field — tier checks
+    still use lifetime POINTS; re-documented + validated, no math change)
+  - API inputs: `evaluateOrder({ orderTotal, items[].amount })` and
+    `validate`/`reserve({ orderTotal })`. `validateOrderTotal` now requires a
+    non-negative **safe integer** ("orderTotal must be a non-negative safe
+    integer (minor units)") — floats and majors fail loud.
+- **`EarningReward.amountPerPoint`** is now MINOR UNITS PER POINT (integer
+  ≥ 1, bespoke rate validator). "1 point per ৳100" = `amountPerPoint: 10000`.
+- **`EarningReward.pointsPerAmount` requires a new sibling `rateBasis`**
+  (integer minor units ≥ 1): `points = pointsPerAmount × (orderTotal /
+  rateBasis)`, rounded ONCE per the rule's `roundingMode`. The old implicit
+  "points per 1 MAJOR unit" basis was the bug being killed. Pairing enforced
+  at the schema level (pre-validate) AND by a runtime `ValidationError` guard
+  in the calculators (legacy/hand-written docs fail loud).
+- **`conversionRate` (points per 1 MAJOR unit) is REPLACED by
+  `pointValueMinor`** (integer minor units ONE point redeems for, ≥ 1) on
+  `LoyaltyConfig.program`, `ResolvedConfig`, and the `Redemption` doc snapshot.
+  `conversionRate: 10` (10 pts per ৳1) ≡ `pointValueMinor: 10` (1 pt = 10
+  paisa). `DEFAULT_CONVERSION_RATE` → `DEFAULT_POINT_VALUE_MINOR` (still `10`
+  — same economic default). Boot validation: "pointValueMinor must be a
+  positive integer (minor units per point)".
+- **Redemption math is now EXACT integer arithmetic** (no more floor-division
+  remainder): `requestedDiscountMinor = pointsToRedeem × pointValueMinor`;
+  percent cap `maxDiscountMinor = floor(orderTotal × maxRedeemPercent / 100)`
+  unchanged in shape; when capped, `actualPoints = floor(cappedDiscount /
+  pointValueMinor)` and the discount is **recomputed as `actualPoints ×
+  pointValueMinor`** — the granted discount ALWAYS equals exactly the points
+  charged (no orphaned remainder paisa; documented invariant).
+- **Event contract**: `RedemptionPayload.discountAmount` is integer minor
+  units; the Zod catalog schema now asserts `.int().nonnegative()` (Zod event
+  schemas are not tsc-checked against the TS interfaces — flow's lesson).
+
+**Migration**: clean cutover, no dual-read shim. Re-express persisted majors
+as minors (× minor-unit factor), rename `conversionRate` → `pointValueMinor`
+(config + redemption docs), and add `rateBasis` to every rule that sets
+`pointsPerAmount` (old implicit basis "per ৳1" = `rateBasis: 100`).
+
+## [0.5.0] — unpublished (2026-07-15)
+
+### Changed — mongokit 3.22 adopted (peer floors: mongokit >=3.22.0, repo-core >=0.13.0, primitives >=0.11.0)
+
+- **Points ledger fence enforced** — `PointTransaction` rows are the
+  balance audit trail; `appendOnlyPlugin` now refuses every mutation
+  path (405 `APPEND_ONLY_VIOLATION`). Previously nothing enforced it —
+  a stray `update()` could rewrite an earn/burn row and silently
+  desync the audit trail from member balances. The expiry sweeper's
+  `expiredAt` stamp is the one engine-owned lifecycle write and passes
+  the audited `bypassAppendOnly` escape.
+- No FSM boilerplate existed (no assert+claim sites, no
+  read-modify-write history) — loyalty was already clean there; this
+  release is the fence + kit refresh (clean registry install, no
+  legacy flags).
+
 ## [0.4.0] — addendum (2026-07-05)
 
 ### Changed (behavioral)

package/LICENSE

@@ -1,21 +1,75 @@
-MIT License
-
-Copyright (c) 2026 Classytic
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+Classytic Source-Available License (Community & Commercial), Version 1.0
+
+Copyright (c) 2026 Classytic LLC. All rights reserved.
+
+This software is source-available, not open source. Please read this License
+before using it.
+
+1. DEFINITIONS
+   "Software" means the contents of this package and any accompanying source
+   code, object code, or documentation, in any form.
+   "Licensor" means Classytic LLC, a limited liability company organized in the
+   United States.
+   "You" means the individual or legal entity exercising rights under this
+   License.
+   "Evaluation Use" means use for evaluation, development, testing,
+   experimentation, or internal non-commercial purposes only.
+   "Production Use" means any use of the Software that is live, commercial,
+   revenue-generating, or customer-facing, or any use other than Evaluation Use.
+   "Commercial License" means a separate written agreement executed with
+   Licensor that grants Production Use rights.
+
+2. OWNERSHIP
+   The Software is licensed, not sold. Licensor retains all right, title, and
+   interest in and to the Software, including all intellectual property rights.
+   All rights not expressly granted in this License are reserved by Licensor.
+
+3. EVALUATION GRANT
+   Subject to Your compliance with this License, Licensor grants You a
+   worldwide, royalty-free, non-exclusive, non-transferable, revocable license
+   to download, install, run, and modify the Software solely for Evaluation Use.
+
+4. PRODUCTION USE REQUIRES A COMMERCIAL LICENSE
+   Production Use of the Software is NOT permitted under this License and
+   requires a Commercial License from Licensor. A Commercial License may be
+   granted at Licensor's discretion, with or without a fee, and may confer
+   perpetual, irrevocable, and transferable Production Use rights as set out in
+   that agreement. Contact licensing@classytic.com to obtain one.
+
+5. RESTRICTIONS
+   You may not:
+   (a) make any Production Use of the Software without a Commercial License;
+   (b) redistribute, resell, rent, sublicense, or otherwise make the Software
+       (in whole or in part, original or modified) available to third parties as
+       a stand-alone product, framework, library, or hosted/managed service that
+       competes with the Software or with Licensor;
+   (c) remove, obscure, or alter any copyright, license, or attribution notice.
+
+6. FEEDBACK AND CONTRIBUTIONS
+   Any feedback, suggestions, or contributions You provide relating to the
+   Software may be used by Licensor for any purpose without obligation to You.
+
+7. TERMINATION
+   This License and the Evaluation Grant terminate automatically if You breach
+   any term. Upon termination You must cease all use of the Software and destroy
+   all copies in Your possession. Rights under a Commercial License are governed
+   by that agreement's own terms and survive termination of this License to the
+   extent stated there.
+
+8. DISCLAIMER OF WARRANTY
+   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+   IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+   FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
+
+9. LIMITATION OF LIABILITY
+   TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL LICENSOR BE LIABLE
+   FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+   TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE
+   OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+10. GOVERNING LAW
+   This License is governed by the laws of the State of Delaware, United States,
+   without regard to its conflict-of-laws principles. (Adjust to Your LLC's state
+   of formation.)
+
+For commercial licensing, contact: licensing@classytic.com

package/README.md

@@ -22,8 +22,8 @@ import mongoose from 'mongoose';
 const engine = createLoyaltyEngine({
   mongoose: mongoose.connection,
   tenant: false, // single-tenant (or { field: 'orgId' } for multi-tenant)
-  program: { conversionRate: 10 },
-  redemption: { minPoints: 100, maxRedeemPercent: 50 },
+  program: { pointValueMinor: 10 }, // 1 point redeems for 10 minor units (e.g. 10 paisa)
+  redemption: { minPoints: 100, maxRedeemPercent: 50 }, // money amounts are integer MINOR units
   referral: { referrerRewardPoints: 200, refereeRewardPoints: 100 },
 });
 

package/dist/{config-Dtun1duw.d.mts → config-CtkGj3xZ.d.mts}

@@ -1,12 +1,12 @@
-import { t as NotificationAdapter } from "./notification.port-CJ9nXj0k.mjs";
+import { t as NotificationAdapter } from "./notification.port-wY4IKimz.mjs";
+import { ResolvedTenantConfig, TenantConfig } from "@classytic/repo-core/tenant";
 import { EventTransport } from "@classytic/primitives/events";
-import { Connection } from "mongoose";
 import { OutboxStore } from "@classytic/primitives/outbox";
-import { TenantConfig, TenantFieldType } from "@classytic/repo-core/tenant";
-
 //#region src/types/config.d.ts
 type LoyaltyModelName = 'Member' | 'PointTransaction' | 'EarningRule' | 'TierDefinition' | 'Redemption' | 'Referral';
-type TenantConfig$1 = false | TenantConfig;
+type TenantConfig$1 = TenantConfig | boolean;
+/** @deprecated Use `ResolvedTenantConfig` from `@classytic/repo-core/tenant`. */
+type ResolvedTenant = ResolvedTenantConfig;
 interface IndexDefinition {
   fields: Record<string, 1 | -1>;
   options?: Record<string, unknown> | undefined;
@@ -21,8 +21,7 @@ interface RepositoryPlugins {
   redemption?: PluginType[] | undefined;
   referral?: PluginType[] | undefined;
 }
-interface LoyaltyConfig {
-  mongoose: Connection;
+interface LoyaltyShape {
   tenant?: TenantConfig$1 | undefined;
   /**
    * IANA timezone name (e.g. `'Asia/Dhaka'`, `'America/New_York'`) used to
@@ -37,10 +36,22 @@ interface LoyaltyConfig {
   timezone?: string | undefined;
   program?: {
     id?: string | undefined;
-    conversionRate?: number | undefined;
+    /**
+     * RATE: integer minor units ONE point redeems for (≥ 1) in the host's
+     * ambient currency. `pointValueMinor: 10` = 1 point → 10 paisa
+     * (৳0.10, i.e. the old `conversionRate: 10` "10 points per ৳1").
+     * Replaces `conversionRate` (0.5.x), whose implicit per-1-MAJOR-unit
+     * basis was ambiguous.
+     */
+    pointValueMinor?: number | undefined;
   } | undefined;
   redemption?: {
     minPoints?: number | undefined;
+    /**
+     * Minimum order total eligible for redemption — **integer minor
+     * units** (paisa for BDT). Compared against `validate()`'s
+     * `orderTotal` (also minor units).
+     */
     minOrderAmount?: number | undefined;
     maxRedeemPercent?: number | undefined;
     reservationTtlMinutes?: number | undefined;
@@ -85,15 +96,18 @@ interface LoyaltyConfig {
   /**
    * When true, existing Mongoose models with loyalty's names are deleted
    * from the connection before re-registering. Hot-reload / test fixtures
-   * only. Default `false` — collision throws `LoyaltyModelCollisionError`.
+   * only. Default `false` — collision throws mongokit's `ModelCollisionError`.
    * Hosts that need two loyalty engines should use two Mongoose connections
    * (`mongoose.createConnection(...)`). See PACKAGE_RULES.md §21.
    */
   forceRecreate?: boolean | undefined;
+}
+interface LoyaltyRuntime {
   /**
-   * Arc-compatible event transport. When omitted, the engine uses
-   * `InProcessLoyaltyBus` — a ~60-line structural match of arc's
-   * `MemoryEventTransport`. See PACKAGE_RULES §13.
+   * Arc-compatible event transport. When omitted, the engine creates (and
+   * OWNS, so `close()` closes) an `InProcessLoyaltyBus` — a ~60-line structural
+   * match of arc's `MemoryEventTransport`. A host-supplied transport is the
+   * host's to close. See PACKAGE_RULES §13.
    */
   eventTransport?: EventTransport | undefined;
   /**
@@ -120,19 +134,24 @@ interface LoyaltyConfig {
    * "Runtime capabilities".
    */
   allowNonTransactional?: boolean | undefined;
-}
-interface ResolvedTenant {
-  enabled: boolean;
-  tenantField: string;
-  ref?: string;
-  fieldType: TenantFieldType;
-  contextKey: string;
+  /**
+   * Where the engine's boot warnings go — today, the `allowNonTransactional`
+   * downgrade notice. Defaults to `console`. A downgrade that carries
+   * partial-write risk on stored value must be VISIBLE, and a host that routes
+   * logs elsewhere would otherwise never see it.
+   */
+  logger?: {
+    warn?(message: string, ...args: unknown[]): void;
+    error?(message: string, ...args: unknown[]): void;
+  } | undefined;
 }
 interface ResolvedConfig {
   programId: string;
-  conversionRate: number;
+  /** Integer minor units one point redeems for (≥ 1). See `LoyaltyShape.program.pointValueMinor`. */
+  pointValueMinor: number;
   redemption: {
     minPoints: number;
+    /** Integer minor units. */
     minOrderAmount: number;
     maxRedeemPercent: number;
     reservationTtlMinutes: number;
@@ -153,7 +172,7 @@ interface ResolvedConfig {
   };
   /** Resolved IANA zone for wall-clock rule evaluation; `undefined` = UTC. */
   timezone?: string;
-  tenant: ResolvedTenant;
+  tenant: ResolvedTenantConfig;
 }
 //#endregion
-export { PluginType as a, ResolvedTenant as c, ModelName as i, TenantConfig$1 as l, LoyaltyConfig as n, RepositoryPlugins as o, LoyaltyModelName as r, ResolvedConfig as s, IndexDefinition as t };
+export { ModelName as a, ResolvedConfig as c, LoyaltyShape as i, ResolvedTenant as l, LoyaltyModelName as n, PluginType as o, LoyaltyRuntime as r, RepositoryPlugins as s, IndexDefinition as t, TenantConfig$1 as u };

package/dist/{constants-DkQYkOK1.mjs → constants-DOPBh6kt.mjs}

@@ -1,6 +1,4 @@
 //#region src/constants.ts
-const DEFAULT_TENANT_FIELD = "organizationId";
-const DEFAULT_TENANT_TYPE = "objectId";
 const DEFAULT_PROGRAM_ID = "default";
 const TRANSACTION_TYPES = Object.freeze([
 	"earn",
@@ -47,4 +45,4 @@ const EARNING_ACTIONS = Object.freeze([
 	"profile_complete"
 ]);
 //#endregion
-export { MEMBER_STATUSES as a, RULE_STATUSES as c, EARNING_ACTIONS as i, RULE_TYPES as l, DEFAULT_TENANT_FIELD as n, REDEMPTION_STATUSES as o, DEFAULT_TENANT_TYPE as r, REFERRAL_STATUSES as s, DEFAULT_PROGRAM_ID as t, TRANSACTION_TYPES as u };
+export { REFERRAL_STATUSES as a, TRANSACTION_TYPES as c, REDEMPTION_STATUSES as i, EARNING_ACTIONS as n, RULE_STATUSES as o, MEMBER_STATUSES as r, RULE_TYPES as s, DEFAULT_PROGRAM_ID as t };

package/dist/domain/enums/index.d.mts

@@ -1,2 +1,2 @@
-import { a as RuleStatus, c as EARNING_ACTIONS, d as REFERRAL_STATUSES, f as RULE_STATUSES, i as ReferralStatus, l as MEMBER_STATUSES, m as TRANSACTION_TYPES, n as MemberStatus, o as RuleType, p as RULE_TYPES, r as RedemptionStatus, s as TransactionType, t as EarningAction, u as REDEMPTION_STATUSES } from "../../index-DMK8a98J.mjs";
+import { a as RuleStatus, c as EARNING_ACTIONS, d as REFERRAL_STATUSES, f as RULE_STATUSES, i as ReferralStatus, l as MEMBER_STATUSES, m as TRANSACTION_TYPES, n as MemberStatus, o as RuleType, p as RULE_TYPES, r as RedemptionStatus, s as TransactionType, t as EarningAction, u as REDEMPTION_STATUSES } from "../../index-D_Oe3aDk.mjs";
 export { EARNING_ACTIONS, EarningAction, MEMBER_STATUSES, MemberStatus, REDEMPTION_STATUSES, REFERRAL_STATUSES, RULE_STATUSES, RULE_TYPES, RedemptionStatus, ReferralStatus, RuleStatus, RuleType, TRANSACTION_TYPES, TransactionType };

package/dist/domain/enums/index.mjs

@@ -1,2 +1,2 @@
-import { a as MEMBER_STATUSES, c as RULE_STATUSES, i as EARNING_ACTIONS, l as RULE_TYPES, o as REDEMPTION_STATUSES, s as REFERRAL_STATUSES, u as TRANSACTION_TYPES } from "../../constants-DkQYkOK1.mjs";
+import { a as REFERRAL_STATUSES, c as TRANSACTION_TYPES, i as REDEMPTION_STATUSES, n as EARNING_ACTIONS, o as RULE_STATUSES, r as MEMBER_STATUSES, s as RULE_TYPES } from "../../constants-DOPBh6kt.mjs";
 export { EARNING_ACTIONS, MEMBER_STATUSES, REDEMPTION_STATUSES, REFERRAL_STATUSES, RULE_STATUSES, RULE_TYPES, TRANSACTION_TYPES };

package/dist/events/index.d.mts

@@ -1,2 +1,2 @@
-import { A as PointsExpired, B as ReferralRewarded, C as MemberDeactivated, D as MultiTierReferralAwarded, E as MemberSuspended, F as RedemptionReserved, G as TierUpgraded, H as TierGraceStarted, I as RedemptionReversed, J as InProcessLoyaltyBusOptions, K as loyaltyEventDefinitions, L as ReferralApproved, M as PointsRedeemed, N as RedemptionConfirmed, O as PointsAdjusted, P as RedemptionReleased, R as ReferralRecorded, S as LoyaltyEventSchema, T as MemberReactivated, U as TierOverrideCleared, V as TierDowngraded, W as TierOverrideExpired, Y as createEvent, _ as TierChangedPayload, a as LoyaltyEventMap, b as LoyaltyEventDefinition, c as LoyaltyEvents, d as PointsAdjustedPayload, f as PointsEarnedPayload, g as ReferralPayload, h as RedemptionReversedPayload, i as CampaignAwardedPayload, j as PointsExpiringSoon, k as PointsEarned, l as MemberLifecyclePayload, m as RedemptionPayload, n as EventHandler, o as LoyaltyEventName, p as PointsExpiredPayload, q as InProcessLoyaltyBus, r as EventTransport, s as LoyaltyEventPayload, t as DomainEvent, u as MultiTierReferralAwardedPayload, v as TierOverrideLifecyclePayload, w as MemberEnrolled, x as LoyaltyEventPayloadOf, y as CampaignAwarded, z as ReferralRejected } from "../index-D_5Ojc2c.mjs";
-export { CampaignAwarded, CampaignAwardedPayload, DomainEvent, EventHandler, EventTransport, InProcessLoyaltyBus, InProcessLoyaltyBusOptions, LoyaltyEventDefinition, LoyaltyEventMap, LoyaltyEventName, LoyaltyEventPayload, LoyaltyEventPayloadOf, LoyaltyEventSchema, LoyaltyEvents, MemberDeactivated, MemberEnrolled, MemberLifecyclePayload, MemberReactivated, MemberSuspended, MultiTierReferralAwarded, MultiTierReferralAwardedPayload, PointsAdjusted, PointsAdjustedPayload, PointsEarned, PointsEarnedPayload, PointsExpired, PointsExpiredPayload, PointsExpiringSoon, PointsRedeemed, RedemptionConfirmed, RedemptionPayload, RedemptionReleased, RedemptionReserved, RedemptionReversed, RedemptionReversedPayload, ReferralApproved, ReferralPayload, ReferralRecorded, ReferralRejected, ReferralRewarded, TierChangedPayload, TierDowngraded, TierGraceStarted, TierOverrideCleared, TierOverrideExpired, TierOverrideLifecyclePayload, TierUpgraded, createEvent, loyaltyEventDefinitions };
+import { A as PointsExpired, B as ReferralRewarded, C as MemberDeactivated, D as MultiTierReferralAwarded, E as MemberSuspended, F as RedemptionReserved, G as TierUpgraded, H as TierGraceStarted, I as RedemptionReversed, J as InProcessLoyaltyBusOptions, K as loyaltyEventDefinitions, L as ReferralApproved, M as PointsRedeemed, N as RedemptionConfirmed, O as PointsAdjusted, P as RedemptionReleased, R as ReferralRecorded, S as LoyaltyEventSchema, T as MemberReactivated, U as TierOverrideCleared, V as TierDowngraded, W as TierOverrideExpired, Y as createEvent, _ as TierChangedPayload, a as LoyaltyEventMap, b as LoyaltyEventDefinition, c as LoyaltyEvents, d as PointsAdjustedPayload, f as PointsEarnedPayload, g as ReferralPayload, h as RedemptionReversedPayload, i as CampaignAwardedPayload, j as PointsExpiringSoon, k as PointsEarned, l as MemberLifecyclePayload, m as RedemptionPayload, n as EventHandler, o as LoyaltyEventName, p as PointsExpiredPayload, q as InProcessLoyaltyBus, r as EventTransport, s as LoyaltyEventPayload, t as DomainEvent, u as MultiTierReferralAwardedPayload, v as TierOverrideLifecyclePayload, w as MemberEnrolled, x as LoyaltyEventPayloadOf, y as CampaignAwarded, z as ReferralRejected } from "../index-YUFamhDk.mjs";
+export { CampaignAwarded, type CampaignAwardedPayload, type DomainEvent, type EventHandler, type EventTransport, InProcessLoyaltyBus, type InProcessLoyaltyBusOptions, type LoyaltyEventDefinition, type LoyaltyEventMap, type LoyaltyEventName, type LoyaltyEventPayload, type LoyaltyEventPayloadOf, type LoyaltyEventSchema, LoyaltyEvents, MemberDeactivated, MemberEnrolled, type MemberLifecyclePayload, MemberReactivated, MemberSuspended, MultiTierReferralAwarded, type MultiTierReferralAwardedPayload, PointsAdjusted, type PointsAdjustedPayload, PointsEarned, type PointsEarnedPayload, PointsExpired, type PointsExpiredPayload, PointsExpiringSoon, PointsRedeemed, RedemptionConfirmed, type RedemptionPayload, RedemptionReleased, RedemptionReserved, RedemptionReversed, type RedemptionReversedPayload, ReferralApproved, type ReferralPayload, ReferralRecorded, ReferralRejected, ReferralRewarded, type TierChangedPayload, TierDowngraded, TierGraceStarted, TierOverrideCleared, TierOverrideExpired, type TierOverrideLifecyclePayload, TierUpgraded, createEvent, loyaltyEventDefinitions };

package/dist/events/index.mjs

@@ -1,3 +1,3 @@
-import { C as TierOverrideExpired, E as InProcessLoyaltyBus, S as TierOverrideCleared, T as loyaltyEventDefinitions, _ as ReferralRecorded, a as MemberSuspended, b as TierDowngraded, c as PointsEarned, d as PointsRedeemed, f as RedemptionConfirmed, g as ReferralApproved, h as RedemptionReversed, i as MemberReactivated, l as PointsExpired, m as RedemptionReserved, n as MemberDeactivated, o as MultiTierReferralAwarded, p as RedemptionReleased, r as MemberEnrolled, s as PointsAdjusted, t as CampaignAwarded, u as PointsExpiringSoon, v as ReferralRejected, w as TierUpgraded, x as TierGraceStarted, y as ReferralRewarded } from "../events-DN5_p6T0.mjs";
-import { n as createEvent, t as LoyaltyEvents } from "../loyalty-events-C38JA3cU.mjs";
+import { C as TierOverrideExpired, E as InProcessLoyaltyBus, S as TierOverrideCleared, T as loyaltyEventDefinitions, _ as ReferralRecorded, a as MemberSuspended, b as TierDowngraded, c as PointsEarned, d as PointsRedeemed, f as RedemptionConfirmed, g as ReferralApproved, h as RedemptionReversed, i as MemberReactivated, l as PointsExpired, m as RedemptionReserved, n as MemberDeactivated, o as MultiTierReferralAwarded, p as RedemptionReleased, r as MemberEnrolled, s as PointsAdjusted, t as CampaignAwarded, u as PointsExpiringSoon, v as ReferralRejected, w as TierUpgraded, x as TierGraceStarted, y as ReferralRewarded } from "../events-BLjg3uLA.mjs";
+import { n as createEvent, t as LoyaltyEvents } from "../loyalty-events-DXirolM_.mjs";
 export { CampaignAwarded, InProcessLoyaltyBus, LoyaltyEvents, MemberDeactivated, MemberEnrolled, MemberReactivated, MemberSuspended, MultiTierReferralAwarded, PointsAdjusted, PointsEarned, PointsExpired, PointsExpiringSoon, PointsRedeemed, RedemptionConfirmed, RedemptionReleased, RedemptionReserved, RedemptionReversed, ReferralApproved, ReferralRecorded, ReferralRejected, ReferralRewarded, TierDowngraded, TierGraceStarted, TierOverrideCleared, TierOverrideExpired, TierUpgraded, createEvent, loyaltyEventDefinitions };

package/dist/{events-DN5_p6T0.mjs → events-BLjg3uLA.mjs}

@@ -1,35 +1,26 @@
-import { t as LoyaltyEvents } from "./loyalty-events-C38JA3cU.mjs";
-import { createEvent, matchEventPattern } from "@classytic/primitives/events";
+import { t as LoyaltyEvents } from "./loyalty-events-DXirolM_.mjs";
+import { InProcessEventBus } from "@classytic/primitives/event-infra";
+import { createEvent } from "@classytic/primitives/events";
 import { z } from "zod";
 //#region src/events/in-process-bus.ts
-var InProcessLoyaltyBus = class {
-	name = "in-process-loyalty";
-	handlers = /* @__PURE__ */ new Map();
-	logger;
-	constructor(options) {
-		this.logger = options?.logger ?? console;
-	}
-	async publish(event) {
-		const matched = /* @__PURE__ */ new Set();
-		for (const [pattern, set] of this.handlers.entries()) if (matchEventPattern(pattern, event.type)) for (const h of set) matched.add(h);
-		for (const handler of matched) try {
-			await handler(event);
-		} catch (err) {
-			this.logger.error(`[InProcessLoyaltyBus] Handler error for ${event.type}:`, err);
-		}
-	}
-	async subscribe(pattern, handler) {
-		if (!this.handlers.has(pattern)) this.handlers.set(pattern, /* @__PURE__ */ new Set());
-		this.handlers.get(pattern)?.add(handler);
-		return () => {
-			const set = this.handlers.get(pattern);
-			if (!set) return;
-			set.delete(handler);
-			if (set.size === 0) this.handlers.delete(pattern);
-		};
-	}
-	async close() {
-		this.handlers.clear();
+/**
+* In-process fan-out transport — the default when the host injects none.
+*
+* A thin subclass of `@classytic/primitives/event-infra`'s shared
+* `InProcessEventBus` (the single implementation every kernel now defaults
+* to). Prior semantics preserved exactly: glob matching via
+* `matchEventPattern` (exact / `*` / `prefix.*` / `prefix:*`), Set-dedup so a
+* handler matched by multiple patterns fires once, per-handler error
+* isolation (errors logged; default `console`), idempotent `close()`.
+* Structurally identical to arc's `MemoryEventTransport`.
+*/
+var InProcessLoyaltyBus = class extends InProcessEventBus {
+	constructor(options = {}) {
+		super({
+			name: "in-process-loyalty",
+			logLabel: "loyalty",
+			...options
+		});
 	}
 };
 //#endregion
@@ -99,7 +90,7 @@ const redemptionSchema = z.object({
 	externalId: z.string(),
 	redemptionId: z.string(),
 	points: z.number(),
-	discountAmount: z.number(),
+	discountAmount: z.number().int().nonnegative(),
 	ownerType: z.string(),
 	ownerId: z.string()
 });

package/dist/{index-Dngaj21_.d.mts → index-CR2k7jQ8.d.mts}

@@ -1,14 +1,14 @@
-import { i as ReferralStatus, r as RedemptionStatus } from "./index-DMK8a98J.mjs";
-import { S as EarningRule, _ as TierEvaluationBatch, d as EarningResult, f as ExpirationResult, g as TierEvaluation, h as RedemptionValidation, o as LoyaltyContext, v as PointTransaction, x as TierDefinition, y as Member } from "./index-YSsi4e_G.mjs";
-import { t as NotificationAdapter } from "./notification.port-CJ9nXj0k.mjs";
-import { c as ResolvedTenant, o as RepositoryPlugins, s as ResolvedConfig } from "./config-Dtun1duw.mjs";
-import { LoyaltyModels } from "./models/index.mjs";
+import { i as ReferralStatus, r as RedemptionStatus } from "./index-D_Oe3aDk.mjs";
+import { S as EarningRule, _ as TierEvaluationBatch, d as EarningResult, f as ExpirationResult, g as TierEvaluation, h as RedemptionValidation, o as LoyaltyContext, v as PointTransaction, x as TierDefinition, y as Member } from "./index-Cp_sXNpG.mjs";
+import { t as NotificationAdapter } from "./notification.port-wY4IKimz.mjs";
+import { c as ResolvedConfig, s as RepositoryPlugins } from "./config-CtkGj3xZ.mjs";
+import { n as LoyaltyModels } from "./index-D6GvuvmF.mjs";
 import { PluginType, Repository } from "@classytic/mongokit";
-import { EventTransport } from "@classytic/primitives/events";
+import { ResolvedTenantConfig } from "@classytic/repo-core/tenant";
 import { ClientSession, Model } from "mongoose";
+import { EventTransport } from "@classytic/primitives/events";
 import { OutboxStore } from "@classytic/primitives/outbox";
 import { ApprovalChain } from "@classytic/primitives/approval";
-
 //#region src/domain/ports/unit-of-work.port.d.ts
 interface UnitOfWork {
   withTransaction<T>(callback: (session: ClientSession) => Promise<T>): Promise<T>;
@@ -138,12 +138,20 @@ declare class EarningRuleRepository extends Repository<EarningRule> {
   constructor(model: Model<EarningRule>, plugins?: PluginType[]);
   private applyCreateDefaults;
   /**
-   * Auto-injects `programId` from `LoyaltyConfig.program.id` and the tenant id
+   * Auto-injects `programId` from `LoyaltyShape.program.id` and the tenant id
    * from repo options when omitted. This keeps custom-program engines aligned
    * with `MemberRepository.enroll(...)`, which uses the same config default.
    */
   create(data: Parameters<Repository<EarningRule>['create']>[0], options?: Parameters<Repository<EarningRule>['create']>[1]): Promise<EarningRule>;
   createMany(docs: Parameters<Repository<EarningRule>['createMany']>[0], options?: Parameters<Repository<EarningRule>['createMany']>[1]): Promise<EarningRule[]>;
+  /**
+   * Evaluates every active order/category/tier_bonus rule against an order.
+   *
+   * `orderTotal` and `items[].amount` are **integers in the host's minor
+   * currency unit** (paisa for BDT) — `50000` = ৳500. Rates on the rule
+   * (`amountPerPoint`, `pointsPerAmount` + `rateBasis`) are quoted in the
+   * same minor units.
+   */
   evaluateOrder(input: {
     memberId: string;
     orderId: string;
@@ -172,7 +180,19 @@ declare class EarningRuleRepository extends Repository<EarningRule> {
    * machine's `TZ` env (PACKAGE_RULES P12).
    */
   private weekday;
+  /**
+   * `orderTotal` is integer minor units. Two rate shapes:
+   * - `pointsPerAmount` + `rateBasis`: `points = pointsPerAmount × (orderTotal / rateBasis)`
+   * - `amountPerPoint` (minor units per point): `points = orderTotal / amountPerPoint`
+   * Rounding is applied ONCE at the end, per the rule's `roundingMode`.
+   */
   private calculateOrderPoints;
+  /**
+   * `pointsPerAmount` has NO implicit basis — a rule that carries it without
+   * an explicit integer minor-unit `rateBasis` is malformed (the schema
+   * enforces the pairing on write; this guards legacy/hand-written docs).
+   */
+  private requireRateBasis;
   private calculateCategoryPoints;
   private applyRounding;
 }
@@ -184,8 +204,18 @@ interface Redemption {
   programId: string;
   pointsReserved: number;
   pointsConfirmed: number;
+  /**
+   * Discount granted for the redeemed points — **integer minor units** (paisa
+   * for BDT). Invariant: always exactly `pointsReserved × pointValueMinor`
+   * (no orphaned remainder — see `RedemptionRepository.validate`).
+   */
   discountAmount: number;
-  conversionRate: number;
+  /**
+   * RATE snapshot at reserve time: integer minor units ONE point redeems for
+   * (≥ 1). `pointValueMinor: 10` = 1 point → 10 paisa (৳0.10).
+   * Replaces the old `conversionRate` (points per 1 MAJOR unit).
+   */
+  pointValueMinor: number;
   status: RedemptionStatus;
   ownerType: string;
   ownerId: string;
@@ -200,11 +230,13 @@ interface Redemption {
   transactionId?: string;
   /**
    * Optional voucher-like partial-use tracking populated by hosts when
-   * the redemption is backed by a gift voucher / reward card. When
-   * present, `reverseConfirmed({ proportional: true })` credits back
+   * the redemption is backed by a gift voucher / reward card. Both are
+   * **integer minor units**. When present,
+   * `reverseConfirmed({ proportional: true })` credits back
    * `(remainingBalance / initialBalance) × pointsConfirmed`.
    */
   initialBalance?: number;
+  /** Integer minor units. See `initialBalance`. */
   remainingBalance?: number;
   /**
    * Optional multi-step approval chain (P7 canonical — same shape as
@@ -240,14 +272,40 @@ declare class RedemptionRepository extends Repository<Redemption> {
   private get _dispatchDeps();
   /**
    * Atomic compare-and-set status transition.
-   * Returns null if the current status doesn't match `expectedStatus` (CAS mismatch).
+   *
+   * `null` means ONE thing and one thing only: the guarded update matched
+   * no document, i.e. the status was not `expectedStatus`. `throwOnNotFound:
+   * false` already produces that `null`, so there is nothing legitimate left
+   * for a `catch` to convert.
+   *
+   * There used to be a bare `} catch { return null; }` here. It laundered
+   * every real failure into a CAS miss, and callers map a CAS miss to
+   * `ValidationError("Redemption status must be 'reserved', got '<status>'")`
+   * — a NON-retryable 4xx built from the status read BEFORE the write. So a
+   * routine Mongo `WriteConflict` (a retryable transient, the normal outcome
+   * of two concurrent confirms) surfaced as a client error whose message
+   * could literally read "must be 'reserved', got 'reserved'": an operator
+   * chasing a contradiction while the actual fix was to retry.
+   *
+   * Anything that throws in here is a real error and must propagate.
    */
   atomicStatusTransition(id: string, expectedStatus: string, data: Record<string, unknown>, ctx?: Record<string, unknown>): Promise<Redemption | null>;
+  /**
+   * Validates a redemption request. `orderTotal` is an **integer in the
+   * host's minor currency unit** (paisa for BDT); the returned
+   * `discountAmount` is in the same minor units.
+   */
   validate(input: {
     memberId: string;
     pointsToRedeem: number;
     orderTotal: number;
   }, ctx: LoyaltyContext): Promise<RedemptionValidation>;
+  /**
+   * Reserves points against an order. `orderTotal` is an **integer in the
+   * host's minor currency unit** (paisa for BDT). The persisted
+   * `discountAmount` is minor units and the reserve-time `pointValueMinor`
+   * rate is snapshotted on the doc.
+   */
   reserve(input: {
     memberId: string;
     pointsToRedeem: number;
@@ -317,7 +375,16 @@ declare class ReferralRepository extends Repository<Referral> {
   createMany(docs: Parameters<Repository<Referral>['createMany']>[0], options?: Parameters<Repository<Referral>['createMany']>[1]): Promise<Referral[]>;
   /**
    * Atomic compare-and-set status transition.
-   * Returns null if the current status doesn't match `expectedStatus`.
+   *
+   * `null` means ONE thing: the guarded update matched no document, i.e.
+   * the status was not `expectedStatus`. `throwOnNotFound: false` already
+   * returns that `null`, so the bare `} catch { return null; }` that used
+   * to sit here could only ever hide REAL errors — most damagingly a
+   * retryable Mongo `WriteConflict`, which callers then re-threw as a
+   * non-retryable `ValidationError` describing a status that had not
+   * actually gone stale.
+   *
+   * Anything that throws in here is a real error and must propagate.
    */
   atomicStatusTransition(id: string, expectedStatus: string, data: Record<string, unknown>, ctx?: Record<string, unknown>): Promise<Referral | null>;
   generateCode(memberId: string, ctx: LoyaltyContext): Promise<string>;
@@ -381,7 +448,7 @@ interface LoyaltyRepositories {
 interface CreateRepositoriesInput {
   models: LoyaltyModels;
   plugins?: RepositoryPlugins | undefined;
-  tenant?: ResolvedTenant | undefined;
+  tenant?: ResolvedTenantConfig | undefined;
   config: ResolvedConfig;
   events: EventTransport;
   outbox?: OutboxStore | undefined;