Api Points Transactions Update

Request body for the single admin Respan Points CREATE endpoint.

Mirrors the credit ledger's ONE create endpoint: the action (grant vs redeem) is a transaction_type FIELD the FE classifies, not a separate URL. transaction_type is normalized to the canonical points event class and the view dispatches to assign_points / spend_points.

Action contract: - grant: add points. conversion_rate OPTIONAL (falls back to the configured default rate). - redeem: remove points. conversion_rate REQUIRED — spend_points deliberately has no default rate, since a redeem must state the USD rate the points are valued out at (otherwise the USD book value stays inflated).

Idempotency: a retrying caller MUST supply BOTH a stable source_id AND a stable event_time — the ch_billing_event RMT dedup key is (org, event_time, event_class, billable_type, source_id), so a retry with a fresh timestamp would dodge dedup and double-write points. When event_time is omitted it defaults to now(), which is correct ONLY for distinct one-off admin writes (each with its own unique source_id).

Request body for the single admin Respan Points CREATE endpoint.

Mirrors the credit ledger's ONE create endpoint: the action (grant vs redeem) is a transaction_type FIELD the FE classifies, not a separate URL. transaction_type is normalized to the canonical points event class and the view dispatches to assign_points / spend_points.

Action contract: - grant: add points. conversion_rate OPTIONAL (falls back to the configured default rate). - redeem: remove points. conversion_rate REQUIRED — spend_points deliberately has no default rate, since a redeem must state the USD rate the points are valued out at (otherwise the USD book value stays inflated).

Idempotency: a retrying caller MUST supply BOTH a stable source_id AND a stable event_time — the ch_billing_event RMT dedup key is (org, event_time, event_class, billable_type, source_id), so a retry with a fresh timestamp would dodge dedup and double-write points. When event_time is omitted it defaults to now(), which is correct ONLY for distinct one-off admin writes (each with its own unique source_id).