feat(api): points mall with atomic redemption and admin fulfillment

Platform-owned points products and a redemption order lifecycle kept separate
from cash orders. Redeeming locks the published product, reserves stock, creates
the order, debits points through the archived customer-accounts ledger with the
order as reference, and snapshots the line in one transaction; a failure leaves
no order, no stock change, and no ledger entry. Fulfilment moves only from
pending_fulfillment, and customers see only their own redemptions.

Demo seeding credits the demo customer through the same guarded credit path
with reason seed, once, so no balance is ever written absolutely.

Surfaces (admin console, mall points page) and product seeding follow.

packages/shared/src/api.ts

@@ -14,6 +14,9 @@ import type {
   CouponTemplateInput,
   Currency,
   HomeContent,
+  IntegralOrder,
+  IntegralProduct,
+  IntegralProductInput,
   Invoice,
   InvoiceKind,
   LocalizedText,
@@ -22,6 +25,7 @@ import type {
   Paged,
   Product,
   ProductStatus,
+  RedeemPointsBody,
   Shipment,
   Shop,
   ShopProfile,
@@ -200,6 +204,10 @@ export interface ApiClient {
   listShopCouponTemplates(shopId: string): Promise<CouponTemplate[]>;
   listMyCoupons(): Promise<Coupon[]>;
   claimCoupon(templateId: string): Promise<Coupon>;
+  /** Public points catalog: published products only. */
+  listPointsProducts(): Promise<IntegralProduct[]>;
+  listMyRedemptions(): Promise<IntegralOrder[]>;
+  redeemPoints(body: RedeemPointsBody): Promise<IntegralOrder>;
   shop: {
     getMyShop(): Promise<Shop>;
     listMyProducts(q?: ShopProductQuery): Promise<Paged<Product>>;
@@ -292,6 +300,9 @@ export function createApi(opts: ApiClientOptions): ApiClient {
     listShopCouponTemplates: (shopId) => r("GET", `/shops/${shopId}/coupon-templates`),
     listMyCoupons: () => r("GET", "/me/coupons"),
     claimCoupon: (templateId) => r("POST", "/me/coupons", { template_id: templateId }),
+    listPointsProducts: () => r("GET", "/points/products"),
+    listMyRedemptions: () => r("GET", "/points/redemptions"),
+    redeemPoints: (body) => r("POST", "/points/redemptions", body),
     shop: {
       getMyShop: () => r("GET", "/shop/profile"),
       listMyProducts: (q = {}) => r("GET", "/shop/products", undefined, { ...q }),
@@ -337,6 +348,14 @@ export function createApi(opts: ApiClientOptions): ApiClient {
     /** Replaces the whole ordered brand list. */
     getBrands: () => r("GET", "/brands"),
     replaceBrands: (items) => r("PUT", "/admin/brands", items),
+    listPointsProducts: () => r("GET", "/admin/points/products"),
+    createPointsProduct: (body) => r("POST", "/admin/points/products", body),
+    updatePointsProduct: (id, body) => r("PUT", `/admin/points/products/${id}`, body),
+    setPointsProductPublished: (id, published) =>
+      r("POST", `/admin/points/products/${id}/${published ? "publish" : "unpublish"}`),
+    listPointsRedemptions: (page = 1) => r("GET", "/admin/points/orders", undefined, { page }),
+    fulfillRedemption: (id) => r("POST", `/admin/points/orders/${id}/fulfill`),
+    cancelRedemption: (id) => r("POST", `/admin/points/orders/${id}/cancel`),
     },
   };
 }