@mercurjs/core 2.1.6 → 2.2.0-canary.11

package/.medusa/server/src/api/vendor/products/[id]/preview/route.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const types_1 = require("@mercurjs/types");
+/**
+ * Returns the active pending `ProductChange` for a product **scoped to the
+ * seller who requested it**. Any vendor can browse the master catalog and
+ * may request a change on a product they do not own; only the seller who
+ * created the change should see it on preview. If no pending change exists
+ * for `(product_id, created_by = current seller)`, the endpoint returns
+ * `product_change: null` instead of 404 so the UI can render the master
+ * product cleanly.
+ */
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const sellerId = req.seller_context.seller_id;
+    const productId = req.params.id;
+    const { data: changes } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: {
+            product_id: productId,
+            created_by: sellerId,
+            status: types_1.ProductChangeStatus.PENDING,
+        },
+    });
+    res.json({ product_change: changes[0] ?? null });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL3ByZXZpZXcvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBQ3JFLDJDQUF1RTtBQUV2RTs7Ozs7Ozs7R0FRRztBQUNJLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdEIsR0FBK0IsRUFDL0IsR0FBZ0UsRUFDaEUsRUFBRTtJQUNGLE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBQ2hFLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sU0FBUyxHQUFHLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFBO0lBRS9CLE1BQU0sRUFBRSxJQUFJLEVBQUUsT0FBTyxFQUFFLEdBQUcsTUFBTSxLQUFLLENBQUMsS0FBSyxDQUFDO1FBQzFDLE1BQU0sRUFBRSxnQkFBZ0I7UUFDeEIsTUFBTSxFQUFFLENBQUMsR0FBRyxFQUFFLFdBQVcsQ0FBQztRQUMxQixPQUFPLEVBQUU7WUFDUCxVQUFVLEVBQUUsU0FBUztZQUNyQixVQUFVLEVBQUUsUUFBUTtZQUNwQixNQUFNLEVBQUUsMkJBQW1CLENBQUMsT0FBTztTQUNwQztLQUNGLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxjQUFjLEVBQUUsT0FBTyxDQUFDLENBQUMsQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDLENBQUE7QUFDbEQsQ0FBQyxDQUFBO0FBbkJZLFFBQUEsR0FBRyxPQW1CZiJ9

package/.medusa/server/src/api/vendor/products/[id]/route.d.ts

@@ -1,6 +1,25 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { AdditionalData } from "@medusajs/framework/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorUpdateProductType } from "../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType>, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorDeleteResponse>) => Promise<void>;
+/**
+ * Stages a vendor product edit as a pending `ProductChange`. Each
+ * changed field becomes a `ProductChangeAction` (`STATUS_CHANGE` for
+ * status, `UPDATE { field, value }` otherwise). When the
+ * `PRODUCT_REQUEST` feature flag is disabled the staged change is
+ * confirmed inline and applied to the underlying product before the
+ * response returns. Returns 202 with `{ product_change }` so the
+ * vendor UI can show pending state regardless of flag.
+ */
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType & AdditionalData>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;
+/**
+ * Stages a vendor-initiated delete as a `PRODUCT_DELETE` action on a
+ * fresh `ProductChange`. Auto-confirm applies it inline when the
+ * `PRODUCT_REQUEST` feature flag is disabled.
+ */
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/route.js

@@ -1,15 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DELETE = exports.POST = exports.GET = void 0;
-const core_flows_1 = require("@medusajs/core-flows");
 const utils_1 = require("@medusajs/framework/utils");
-const helpers_1 = require("../helpers");
-const transform_product_attributes_1 = require("../utils/transform-product-attributes");
-const update_product_with_variant_images_1 = require("../../../../workflows/product-attribute/workflows/update-product-with-variant-images");
+const product_edit_delete_product_1 = require("../../../../workflows/product-edit/workflows/product-edit-delete-product");
+const product_edit_update_fields_1 = require("../../../../workflows/product-edit/workflows/product-edit-update-fields");
+const utils_2 = require("../../../utils");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
-    const sellerId = req.seller_context.seller_id;
-    await (0, helpers_1.validateSellerProduct)(req.scope, sellerId, req.params.id);
     const { data: [product], } = await query.graph({
         entity: "product",
         fields: req.queryConfig.fields,
@@ -18,45 +15,58 @@ const GET = async (req, res) => {
     if (!product) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${req.params.id} was not found`);
     }
-    const transformedProduct = (0, transform_product_attributes_1.transformProductWithInformationalAttributes)(product);
-    res.json({ product: transformedProduct });
+    await (0, utils_2.enrichProductAttributes)(req.scope, [product]);
+    res.json({ product });
 };
 exports.GET = GET;
+/**
+ * Stages a vendor product edit as a pending `ProductChange`. Each
+ * changed field becomes a `ProductChangeAction` (`STATUS_CHANGE` for
+ * status, `UPDATE { field, value }` otherwise). When the
+ * `PRODUCT_REQUEST` feature flag is disabled the staged change is
+ * confirmed inline and applied to the underlying product before the
+ * response returns. Returns 202 with `{ product_change }` so the
+ * vendor UI can show pending state regardless of flag.
+ */
 const POST = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { additional_data, ...update } = req.validatedBody;
-    await (0, helpers_1.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    const { result } = await (0, update_product_with_variant_images_1.updateProductWithVariantImagesWorkflow)(req.scope).run({
+    const { additional_data: _ad, ...update } = req.validatedBody;
+    const { result } = await (0, product_edit_update_fields_1.productEditUpdateFieldsWorkflow)(req.scope).run({
         input: {
-            selector: { id: req.params.id },
-            update,
-            additional_data: {
-                ...additional_data,
-                seller_id: sellerId,
-            },
+            product_id: req.params.id,
+            created_by: sellerId,
+            update: update,
         },
     });
-    const { data: [product], } = await query.graph({
-        entity: "product",
-        fields: req.queryConfig.fields,
-        filters: { id: result[0].id },
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
     });
-    const transformedProduct = (0, transform_product_attributes_1.transformProductWithInformationalAttributes)(product);
-    res.json({ product: transformedProduct });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
+/**
+ * Stages a vendor-initiated delete as a `PRODUCT_DELETE` action on a
+ * fresh `ProductChange`. Auto-confirm applies it inline when the
+ * `PRODUCT_REQUEST` feature flag is disabled.
+ */
 const DELETE = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    await (0, helpers_1.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    await (0, core_flows_1.deleteProductsWorkflow)(req.scope).run({
-        input: { ids: [req.params.id] },
+    const { result } = await (0, product_edit_delete_product_1.productEditDeleteProductWorkflow)(req.scope).run({
+        input: {
+            product_id: req.params.id,
+            created_by: sellerId,
+        },
     });
-    res.json({
-        id: req.params.id,
-        object: "product",
-        deleted: true,
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
     });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHFEQUE2RDtBQUs3RCxxREFHa0M7QUFHbEMsd0NBQWtEO0FBRWxELHdGQUFtRztBQUNuRyw2SUFBNkk7QUFFdEksTUFBTSxHQUFHLEdBQUcsS0FBSyxFQUN0QixHQUErQixFQUMvQixHQUFvRCxFQUNwRCxFQUFFO0lBQ0YsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxRQUFRLEdBQUksR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLENBQUE7SUFFL0MsTUFBTSxJQUFBLCtCQUFxQixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsUUFBUSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLENBQUE7SUFFL0QsTUFBTSxFQUNKLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxHQUNoQixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsU0FBUztRQUNqQixNQUFNLEVBQUUsR0FBRyxDQUFDLFdBQVcsQ0FBQyxNQUFNO1FBQzlCLE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRTtLQUMvQixDQUFDLENBQUE7SUFFRixJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDYixNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUMzQixtQkFBbUIsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLGdCQUFnQixDQUNqRCxDQUFBO0lBQ0gsQ0FBQztJQUVELE1BQU0sa0JBQWtCLEdBQUcsSUFBQSwwRUFBMkMsRUFDcEUsT0FBYyxDQUNmLENBQUE7SUFFRCxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsT0FBTyxFQUFFLGtCQUFrQixFQUFFLENBQUMsQ0FBQTtBQUMzQyxDQUFDLENBQUE7QUE3QlksUUFBQSxHQUFHLE9BNkJmO0FBRU0sTUFBTSxJQUFJLEdBQUcsS0FBSyxFQUN2QixHQUF3RCxFQUN4RCxHQUFvRCxFQUNwRCxFQUFFO0lBQ0YsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxRQUFRLEdBQUksR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLENBQUE7SUFDL0MsTUFBTSxFQUFFLGVBQWUsRUFBRSxHQUFHLE1BQU0sRUFBRSxHQUFHLEdBQUcsQ0FBQyxhQUFhLENBQUE7SUFFeEQsTUFBTSxJQUFBLCtCQUFxQixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsUUFBUSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLENBQUE7SUFFL0QsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSwyRUFBc0MsRUFDN0QsR0FBRyxDQUFDLEtBQUssQ0FDVixDQUFDLEdBQUcsQ0FBQztRQUNKLEtBQUssRUFBRTtZQUNMLFFBQVEsRUFBRSxFQUFFLEVBQUUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRTtZQUMvQixNQUFNO1lBQ04sZUFBZSxFQUFFO2dCQUNmLEdBQUcsZUFBZTtnQkFDbEIsU0FBUyxFQUFFLFFBQVE7YUFDcEI7U0FDRjtLQUNGLENBQUMsQ0FBQTtJQUVGLE1BQU0sRUFDSixJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUMsR0FDaEIsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDcEIsTUFBTSxFQUFFLFNBQVM7UUFDakIsTUFBTSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsTUFBTTtRQUM5QixPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsTUFBTSxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRTtLQUM5QixDQUFDLENBQUE7SUFFRixNQUFNLGtCQUFrQixHQUFHLElBQUEsMEVBQTJDLEVBQ3BFLE9BQWMsQ0FDZixDQUFBO0lBRUQsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLE9BQU8sRUFBRSxrQkFBa0IsRUFBRSxDQUFDLENBQUE7QUFDM0MsQ0FBQyxDQUFBO0FBcENZLFFBQUEsSUFBSSxRQW9DaEI7QUFFTSxNQUFNLE1BQU0sR0FBRyxLQUFLLEVBQ3pCLEdBQStCLEVBQy9CLEdBQW1ELEVBQ25ELEVBQUU7SUFDRixNQUFNLFFBQVEsR0FBSSxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsQ0FBQTtJQUUvQyxNQUFNLElBQUEsK0JBQXFCLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxRQUFRLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUMsQ0FBQTtJQUUvRCxNQUFNLElBQUEsbUNBQXNCLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDLEdBQUcsQ0FBQztRQUMxQyxLQUFLLEVBQUUsRUFBRSxHQUFHLEVBQUUsQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxFQUFFO0tBQ2hDLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxJQUFJLENBQUM7UUFDUCxFQUFFLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFO1FBQ2pCLE1BQU0sRUFBRSxTQUFTO1FBQ2pCLE9BQU8sRUFBRSxJQUFJO0tBQ2QsQ0FBQyxDQUFBO0FBQ0osQ0FBQyxDQUFBO0FBakJZLFFBQUEsTUFBTSxVQWlCbEIifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/variants/[variant_id]/route.d.ts

@@ -1,6 +1,18 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorUpdateProductVariantType } from "../../../validators";
-export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductVariantType>, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorDeleteResponse>) => Promise<void>;
+export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductVariantResponse>) => Promise<void>;
+/**
+ * Stages a `VARIANT_UPDATE` action. Auto-confirm runs
+ * `updateProductVariantsWorkflow` inline when the flag is off.
+ */
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductVariantType>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;
+/**
+ * Stages a `VARIANT_REMOVE` action. Auto-confirm runs
+ * `deleteProductVariantsWorkflow` inline when the flag is off.
+ */
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/variants/[variant_id]/route.js

@@ -1,57 +1,74 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DELETE = exports.POST = exports.GET = void 0;
-const core_flows_1 = require("@medusajs/core-flows");
-const http_1 = require("@medusajs/framework/http");
 const utils_1 = require("@medusajs/framework/utils");
-const helpers_1 = require("@medusajs/medusa/api/admin/products/helpers");
-const helpers_2 = require("../../../helpers");
+const product_edit_update_variants_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-update-variants");
 const GET = async (req, res) => {
-    const sellerId = req.seller_context.seller_id;
-    await (0, helpers_2.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    const variant = await (0, http_1.refetchEntity)({
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: [variant], } = await query.graph({
         entity: "variant",
-        idOrFilter: { id: req.params.variant_id, product_id: req.params.id },
-        scope: req.scope,
-        fields: (0, helpers_1.remapKeysForVariant)(req.queryConfig.fields ?? []),
+        fields: req.queryConfig.fields,
+        filters: { id: req.params.variant_id, product_id: req.params.id },
     });
-    res.status(200).json({ variant: (0, helpers_1.remapVariantResponse)(variant) });
+    if (!variant) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Variant with id ${req.params.variant_id} was not found`);
+    }
+    res.json({ variant });
 };
 exports.GET = GET;
+/**
+ * Stages a `VARIANT_UPDATE` action. Auto-confirm runs
+ * `updateProductVariantsWorkflow` inline when the flag is off.
+ */
 const POST = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { additional_data, ...update } = req.validatedBody;
-    await (0, helpers_2.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    await (0, core_flows_1.updateProductVariantsWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const variantId = req.params.variant_id;
+    const { attribute_values: _av, ...update } = req.validatedBody;
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
         input: {
-            selector: { id: req.params.variant_id },
-            update,
-            additional_data: {
-                ...additional_data,
-                seller_id: sellerId,
-            },
+            product_id: productId,
+            created_by: sellerId,
+            operations: [
+                {
+                    type: "update",
+                    variant_id: variantId,
+                    fields: { ...update, manage_inventory: false },
+                },
+            ],
         },
     });
-    const { data: [product], } = await query.graph({
-        entity: "product",
-        fields: req.queryConfig.fields,
-        filters: { id: req.params.id },
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
     });
-    res.json({ product });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
+/**
+ * Stages a `VARIANT_REMOVE` action. Auto-confirm runs
+ * `deleteProductVariantsWorkflow` inline when the flag is off.
+ */
 const DELETE = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    await (0, helpers_2.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    await (0, core_flows_1.deleteProductVariantsWorkflow)(req.scope).run({
-        input: { ids: [req.params.variant_id] },
+    const productId = req.params.id;
+    const variantId = req.params.variant_id;
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
+        input: {
+            product_id: productId,
+            created_by: sellerId,
+            operations: [{ type: "remove", variant_id: variantId }],
+        },
     });
-    res.json({
-        id: req.params.variant_id,
-        object: "product_variant",
-        deleted: true,
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
     });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/variants/route.d.ts

@@ -1,5 +1,14 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
-import { VendorCreateProductVariantType } from "../../validators";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
+import { VendorAddProductVariantType } from "../../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductVariantListResponse>) => Promise<void>;
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorCreateProductVariantType>, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
+/**
+ * Stages a `VARIANT_ADD` action on a fresh `ProductChange`. Auto-
+ * confirm applies it inline when the `PRODUCT_REQUEST` feature flag
+ * is disabled (the variant is created in the same request via
+ * `createProductVariantsWorkflow` invoked by
+ * `applyProductChangeActionsWorkflow`).
+ */
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorAddProductVariantType>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/variants/route.js

@@ -1,20 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = exports.GET = void 0;
-const core_flows_1 = require("@medusajs/core-flows");
 const utils_1 = require("@medusajs/framework/utils");
-const helpers_1 = require("../../helpers");
+const product_edit_update_variants_1 = require("../../../../../workflows/product-edit/workflows/product-edit-update-variants");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
-    const sellerId = req.seller_context.seller_id;
-    await (0, helpers_1.validateSellerProduct)(req.scope, sellerId, req.params.id);
+    const productId = req.params.id;
     const { data: variants, metadata } = await query.graph({
-        entity: "product_variant",
+        entity: "variant",
         fields: req.queryConfig.fields,
-        filters: {
-            product_id: req.params.id,
-            ...req.filterableFields,
-        },
+        filters: { ...req.filterableFields, product_id: productId },
         pagination: req.queryConfig.pagination,
     });
     res.json({
@@ -25,31 +20,39 @@ const GET = async (req, res) => {
     });
 };
 exports.GET = GET;
+/**
+ * Stages a `VARIANT_ADD` action on a fresh `ProductChange`. Auto-
+ * confirm applies it inline when the `PRODUCT_REQUEST` feature flag
+ * is disabled (the variant is created in the same request via
+ * `createProductVariantsWorkflow` invoked by
+ * `applyProductChangeActionsWorkflow`).
+ */
 const POST = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { additional_data, ...variantData } = req.validatedBody;
-    await (0, helpers_1.validateSellerProduct)(req.scope, sellerId, req.params.id);
-    await (0, core_flows_1.createProductVariantsWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const { attribute_values: _av, ...variant } = req.validatedBody;
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
         input: {
-            product_variants: [
+            product_id: productId,
+            created_by: sellerId,
+            operations: [
                 {
-                    ...variantData,
-                    product_id: req.params.id,
+                    type: "add",
+                    variant: {
+                        ...variant,
+                        manage_inventory: false,
+                    },
                 },
             ],
-            additional_data: {
-                ...additional_data,
-                seller_id: sellerId,
-            },
         },
     });
-    const { data: [product], } = await query.graph({
-        entity: "product",
-        fields: req.queryConfig.fields,
-        filters: { id: req.params.id },
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
     });
-    res.status(201).json({ product });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/helpers.d.ts

@@ -1,2 +1,8 @@
-import { MedusaContainer } from "@medusajs/framework";
-export declare const validateSellerProduct: (scope: MedusaContainer, sellerId: string, productId: string) => Promise<void>;
+import type { MedusaContainer } from "@medusajs/framework/types";
+/**
+ * Throws `NOT_FOUND` (rather than `NOT_ALLOWED`) when the seller does
+ * not own the product. The product is technically queryable for them
+ * if `status = published`, but mutations require ownership; the 404
+ * shape avoids leaking the difference.
+ */
+export declare const ensureSellerOwnsProduct: (scope: MedusaContainer, sellerId: string, productId: string) => Promise<void>;

package/.medusa/server/src/api/vendor/products/helpers.js

@@ -1,20 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateSellerProduct = void 0;
+exports.ensureSellerOwnsProduct = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const validateSellerProduct = async (scope, sellerId, productId) => {
+/**
+ * Throws `NOT_FOUND` (rather than `NOT_ALLOWED`) when the seller does
+ * not own the product. The product is technically queryable for them
+ * if `status = published`, but mutations require ownership; the 404
+ * shape avoids leaking the difference.
+ */
+const ensureSellerOwnsProduct = async (scope, sellerId, productId) => {
     const query = scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
-    const { data: [sellerProduct], } = await query.graph({
+    const { data } = await query.graph({
         entity: "product_seller",
+        fields: ["product_id"],
         filters: {
             seller_id: sellerId,
             product_id: productId,
         },
-        fields: ["seller_id", "product_id"],
     });
-    if (!sellerProduct) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id: ${productId} was not found`);
+    if (!data?.length) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${productId} was not found`);
     }
 };
-exports.validateSellerProduct = validateSellerProduct;
-//# sourceMappingURL=data:application/json;base64,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
+exports.ensureSellerOwnsProduct = ensureSellerOwnsProduct;
+//# sourceMappingURL=data:application/json;base64,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