@mercurjs/core 2.2.0-canary.1 → 2.2.0-canary.12

package/.medusa/server/src/api/vendor/products/[id]/attributes/route.js

@@ -2,46 +2,79 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const product_edit_add_attribute_1 = require("../../../../../workflows/product-edit/workflows/product-edit-add-attribute");
+const product_edit_update_attributes_1 = require("../../../../../workflows/product-edit/workflows/product-edit-update-attributes");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const productId = req.params.id;
-    const { data: product_attributes, metadata } = await query.graph({
-        entity: "product_attribute",
-        fields: req.queryConfig.fields,
-        filters: {
-            ...req.filterableFields,
-            product_id: productId,
-        },
-        pagination: req.queryConfig.pagination,
+    const { data: [product], } = await query.graph({
+        entity: "product",
+        fields: ["id", "attribute_values.attribute.id", "attribute_values.attribute.name"],
+        filters: { id: productId },
     });
+    if (!product) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${productId} was not found`);
+    }
+    const attributesById = new Map();
+    for (const v of product.attribute_values ?? []) {
+        if (!v.attribute)
+            continue;
+        if (!attributesById.has(v.attribute.id)) {
+            attributesById.set(v.attribute.id, v.attribute);
+        }
+    }
+    const product_attributes = Array.from(attributesById.values());
     res.json({
         product_attributes,
-        count: metadata?.count ?? 0,
-        offset: metadata?.skip ?? 0,
-        limit: metadata?.take ?? 0,
+        count: product_attributes.length,
+        offset: 0,
+        limit: product_attributes.length,
     });
 };
 exports.GET = GET;
 /**
- * Stages an `ATTRIBUTE_ADD` action via `product-edit-add-attribute`. Body
- * mirrors `addAttributesToProduct`'s per-item shape so apply-time is a
- * direct passthrough. Returns the created `ProductChange` — the attribute
- * is linked to the product only after an operator confirms the change.
+ * Stages an `ATTRIBUTE_ADD` action. Supports both branches the
+ * validator allows: attach-existing (`attribute_id` + `value_ids` /
+ * `values`) and inline-create (`name` + `type` + `values`). The
+ * staging workflow resolves names → ids and creates inline
+ * `ProductAttribute` rows up-front so the action carries pre-resolved
+ * `attribute_value_ids` (the apply-actions contract).
  */
 const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { attribute_id, attribute_value_ids, values } = req.validatedBody;
-    const { result: change } = await (0, product_edit_add_attribute_1.productEditAddAttributeWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const body = req.validatedBody;
+    const op = body.attribute_id !== undefined
+        ? ({
+            type: "add",
+            attribute_id: body.attribute_id,
+            value_ids: body.attribute_value_ids,
+            values: body.values,
+        })
+        : ({
+            type: "add",
+            name: body.name,
+            attribute_type: body.type,
+            values: body.values ?? [],
+            is_variant_axis: body.is_variant_axis,
+            is_filterable: body.is_filterable,
+            is_required: body.is_required,
+            description: body.description ?? null,
+            metadata: body.metadata ?? null,
+        });
+    const { result } = await (0, product_edit_update_attributes_1.productEditUpdateAttributesWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            attribute_id,
-            attribute_value_ids,
-            values,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [op],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL2F0dHJpYnV0ZXMvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBR3JFLDJIQUE0SDtBQUdySCxNQUFNLEdBQUcsR0FBRyxLQUFLLEVBQ3RCLEdBQStCLEVBQy9CLEdBQWlFLEVBQ2pFLEVBQUU7SUFDRixNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUNoRSxNQUFNLFNBQVMsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQTtJQUUvQixNQUFNLEVBQUUsSUFBSSxFQUFFLGtCQUFrQixFQUFFLFFBQVEsRUFBRSxHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUMvRCxNQUFNLEVBQUUsbUJBQW1CO1FBQzNCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFO1lBQ1AsR0FBRyxHQUFHLENBQUMsZ0JBQWdCO1lBQ3ZCLFVBQVUsRUFBRSxTQUFTO1NBQ3RCO1FBQ0QsVUFBVSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsVUFBVTtLQUN2QyxDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsSUFBSSxDQUFDO1FBQ1Asa0JBQWtCO1FBQ2xCLEtBQUssRUFBRSxRQUFRLEVBQUUsS0FBSyxJQUFJLENBQUM7UUFDM0IsTUFBTSxFQUFFLFFBQVEsRUFBRSxJQUFJLElBQUksQ0FBQztRQUMzQixLQUFLLEVBQUUsUUFBUSxFQUFFLElBQUksSUFBSSxDQUFDO0tBQzNCLENBQUMsQ0FBQTtBQUNKLENBQUMsQ0FBQTtBQXZCWSxRQUFBLEdBQUcsT0F1QmY7QUFFRDs7Ozs7R0FLRztBQUNJLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBOEQsRUFDOUQsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sRUFBRSxZQUFZLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSxFQUFFLEdBQUcsR0FBRyxDQUFDLGFBQWEsQ0FBQTtJQUV2RSxNQUFNLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSw0REFBK0IsRUFDOUQsR0FBRyxDQUFDLEtBQUssQ0FDVixDQUFDLEdBQUcsQ0FBQztRQUNKLEtBQUssRUFBRTtZQUNMLFVBQVUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7WUFDekIsWUFBWTtZQUNaLG1CQUFtQjtZQUNuQixNQUFNO1lBQ04sUUFBUSxFQUFFLFFBQVE7U0FDbkI7S0FDRixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLGNBQWMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFBO0FBQ2xELENBQUMsQ0FBQTtBQXBCWSxRQUFBLElBQUksUUFvQmhCIn0=
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/cancel/route.d.ts

@@ -1,13 +1,11 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
 import { ProductChangeDTO } from "@mercurjs/types";
-import { VendorCancelProductChangeType } from "../../validators";
 /**
- * Vendor-side cancel of the active pending `ProductChange` for a product.
- * Ownership is keyed off `product_change.created_by` — only the seller who
- * opened the change can cancel it, regardless of who owns the underlying
- * master product. Sellers without a pending change on this product get
- * 404 (nothing to cancel).
+ * Vendor-side cancel of the seller's own pending `ProductChange`.
+ * Resolves the active change via `(product_id, created_by, status: pending)`
+ * — vendors can only cancel changes they authored. Marks the change
+ * `CANCELED`; no underlying product mutation happens.
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorCancelProductChangeType>, res: MedusaResponse<{
+export declare const POST: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
     product_change: ProductChangeDTO;
 }>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/cancel/route.js

@@ -3,13 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const types_1 = require("@mercurjs/types");
-const cancel_product_edit_1 = require("../../../../../workflows/product-edit/workflows/cancel-product-edit");
+const cancel_product_change_1 = require("../../../../../workflows/product-edit/workflows/cancel-product-change");
 /**
- * Vendor-side cancel of the active pending `ProductChange` for a product.
- * Ownership is keyed off `product_change.created_by` — only the seller who
- * opened the change can cancel it, regardless of who owns the underlying
- * master product. Sellers without a pending change on this product get
- * 404 (nothing to cancel).
+ * Vendor-side cancel of the seller's own pending `ProductChange`.
+ * Resolves the active change via `(product_id, created_by, status: pending)`
+ * — vendors can only cancel changes they authored. Marks the change
+ * `CANCELED`; no underlying product mutation happens.
  */
 const POST = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
@@ -24,23 +23,21 @@ const POST = async (req, res) => {
             status: types_1.ProductChangeStatus.PENDING,
         },
     });
-    const pendingChange = changes[0];
-    if (!pendingChange) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `No pending product change to cancel for product '${productId}'`);
+    if (!changes.length) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `No pending product change to cancel for product ${productId}`);
     }
-    await (0, cancel_product_edit_1.cancelProductEditWorkflow)(req.scope).run({
+    await (0, cancel_product_change_1.cancelProductChangeWorkflow)(req.scope).run({
         input: {
-            product_change_id: pendingChange.id,
-            actor_id: sellerId,
-            internal_note: req.validatedBody?.internal_note,
+            id: changes[0].id,
+            canceled_by: sellerId,
         },
     });
     const { data: [product_change], } = await query.graph({
         entity: "product_change",
         fields: ["*", "actions.*"],
-        filters: { id: pendingChange.id },
+        filters: { id: changes[0].id },
     });
     res.json({ product_change });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/route.d.ts

@@ -1,16 +1,25 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { AdditionalData } from "@medusajs/framework/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorUpdateProductType } from "../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
 /**
- * Stages top-level Product field changes through `product-edit-update-fields`.
- * Returns the created `ProductChange` — the product itself is NOT mutated
- * until an operator confirms the change.
+ * Stages a vendor product edit as a pending `ProductChange`. Each
+ * changed field becomes a `ProductChangeAction` (`STATUS_CHANGE` for
+ * status, `UPDATE { field, value }` otherwise). When the
+ * `PRODUCT_REQUEST` feature flag is disabled the staged change is
+ * confirmed inline and applied to the underlying product before the
+ * response returns. Returns 202 with `{ product_change }` so the
+ * vendor UI can show pending state regardless of flag.
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType & AdditionalData>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;
 /**
- * Stages a `PRODUCT_DELETE` action via `product-edit-delete-product`.
- * Returns the created `ProductChange` — the product is soft-deleted only
- * after an operator confirms the change.
+ * Stages a vendor-initiated delete as a `PRODUCT_DELETE` action on a
+ * fresh `ProductChange`. Auto-confirm applies it inline when the
+ * `PRODUCT_REQUEST` feature flag is disabled.
  */
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/route.js

@@ -15,42 +15,58 @@ const GET = async (req, res) => {
     if (!product) {
         throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${req.params.id} was not found`);
     }
-    (0, utils_2.formatProductAttributes)(product);
+    await (0, utils_2.enrichProductAttributes)(req.scope, [product]);
     res.json({ product });
 };
 exports.GET = GET;
 /**
- * Stages top-level Product field changes through `product-edit-update-fields`.
- * Returns the created `ProductChange` — the product itself is NOT mutated
- * until an operator confirms the change.
+ * Stages a vendor product edit as a pending `ProductChange`. Each
+ * changed field becomes a `ProductChangeAction` (`STATUS_CHANGE` for
+ * status, `UPDATE { field, value }` otherwise). When the
+ * `PRODUCT_REQUEST` feature flag is disabled the staged change is
+ * confirmed inline and applied to the underlying product before the
+ * response returns. Returns 202 with `{ product_change }` so the
+ * vendor UI can show pending state regardless of flag.
  */
 const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { additional_data: _additional_data, ...updates } = req.validatedBody;
-    const { result: change } = await (0, product_edit_update_fields_1.productEditUpdateFieldsWorkflow)(req.scope).run({
+    const { additional_data: _ad, ...update } = req.validatedBody;
+    const { result } = await (0, product_edit_update_fields_1.productEditUpdateFieldsWorkflow)(req.scope).run({
         input: {
             product_id: req.params.id,
-            updates: updates,
-            actor_id: sellerId,
+            created_by: sellerId,
+            update: update,
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
 /**
- * Stages a `PRODUCT_DELETE` action via `product-edit-delete-product`.
- * Returns the created `ProductChange` — the product is soft-deleted only
- * after an operator confirms the change.
+ * Stages a vendor-initiated delete as a `PRODUCT_DELETE` action on a
+ * fresh `ProductChange`. Auto-confirm applies it inline when the
+ * `PRODUCT_REQUEST` feature flag is disabled.
  */
 const DELETE = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { result: change } = await (0, product_edit_delete_product_1.productEditDeleteProductWorkflow)(req.scope).run({
+    const { result } = await (0, product_edit_delete_product_1.productEditDeleteProductWorkflow)(req.scope).run({
         input: {
             product_id: req.params.id,
-            actor_id: sellerId,
+            created_by: sellerId,
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlBLHFEQUdrQztBQUdsQywwSEFBMkg7QUFDM0gsd0hBQXlIO0FBQ3pILDBDQUF3RDtBQUdqRCxNQUFNLEdBQUcsR0FBRyxLQUFLLEVBQ3RCLEdBQStCLEVBQy9CLEdBQW9ELEVBQ3BELEVBQUU7SUFDRixNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUVoRSxNQUFNLEVBQ0osSUFBSSxFQUFFLENBQUMsT0FBTyxDQUFDLEdBQ2hCLEdBQUcsTUFBTSxLQUFLLENBQUMsS0FBSyxDQUFDO1FBQ3BCLE1BQU0sRUFBRSxTQUFTO1FBQ2pCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFLEVBQUUsRUFBRSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxFQUFFO0tBQy9CLENBQUMsQ0FBQTtJQUVGLElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUNiLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQzNCLG1CQUFtQixHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsZ0JBQWdCLENBQ2pELENBQUE7SUFDSCxDQUFDO0lBRUQsSUFBQSwrQkFBdUIsRUFBQyxPQUFPLENBQUMsQ0FBQTtJQUVoQyxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsT0FBTyxFQUFFLENBQUMsQ0FBQTtBQUN2QixDQUFDLENBQUE7QUF4QlksUUFBQSxHQUFHLE9Bd0JmO0FBRUQ7Ozs7R0FJRztBQUNJLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBd0QsRUFDeEQsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sRUFBRSxlQUFlLEVBQUUsZ0JBQWdCLEVBQUUsR0FBRyxPQUFPLEVBQUUsR0FBRyxHQUFHLENBQUMsYUFBYSxDQUFBO0lBRTNFLE1BQU0sRUFBRSxNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxJQUFBLDREQUErQixFQUM5RCxHQUFHLENBQUMsS0FBSyxDQUNWLENBQUMsR0FBRyxDQUFDO1FBQ0osS0FBSyxFQUFFO1lBQ0wsVUFBVSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRTtZQUN6QixPQUFPLEVBQUUsT0FBa0M7WUFDM0MsUUFBUSxFQUFFLFFBQVE7U0FDbkI7S0FDRixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLGNBQWMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFBO0FBQ2xELENBQUMsQ0FBQTtBQWxCWSxRQUFBLElBQUksUUFrQmhCO0FBRUQ7Ozs7R0FJRztBQUNJLE1BQU0sTUFBTSxHQUFHLEtBQUssRUFDekIsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBRTlDLE1BQU0sRUFBRSxNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxJQUFBLDhEQUFnQyxFQUMvRCxHQUFHLENBQUMsS0FBSyxDQUNWLENBQUMsR0FBRyxDQUFDO1FBQ0osS0FBSyxFQUFFO1lBQ0wsVUFBVSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRTtZQUN6QixRQUFRLEVBQUUsUUFBUTtTQUNuQjtLQUNGLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsY0FBYyxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUE7QUFDbEQsQ0FBQyxDQUFBO0FBaEJZLFFBQUEsTUFBTSxVQWdCbEIifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/variants/[variant_id]/route.d.ts

@@ -1,16 +1,18 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorUpdateProductVariantType } from "../../../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductVariantResponse>) => Promise<void>;
 /**
- * Stages a `VARIANT_UPDATE` action via `product-edit-update-variant`.
- * Returns the created `ProductChange` — the variant is updated only after
- * an operator confirms the change.
+ * Stages a `VARIANT_UPDATE` action. Auto-confirm runs
+ * `updateProductVariantsWorkflow` inline when the flag is off.
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductVariantType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductVariantType>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;
 /**
- * Stages a `VARIANT_REMOVE` action via `product-edit-remove-variant`.
- * Returns the created `ProductChange` — the variant is deleted only after
- * an operator confirms the change.
+ * Stages a `VARIANT_REMOVE` action. Auto-confirm runs
+ * `deleteProductVariantsWorkflow` inline when the flag is off.
  */
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/variants/[variant_id]/route.js

@@ -2,8 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DELETE = exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const product_edit_remove_variant_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-remove-variant");
-const product_edit_update_variant_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-update-variant");
+const product_edit_update_variants_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-update-variants");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const { data: [variant], } = await query.graph({
@@ -12,44 +11,70 @@ const GET = async (req, res) => {
         filters: { id: req.params.variant_id, product_id: req.params.id },
     });
     if (!variant) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Variant with id ${req.params.variant_id} was not found on product ${req.params.id}`);
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Variant with id ${req.params.variant_id} was not found`);
     }
     res.json({ variant });
 };
 exports.GET = GET;
 /**
- * Stages a `VARIANT_UPDATE` action via `product-edit-update-variant`.
- * Returns the created `ProductChange` — the variant is updated only after
- * an operator confirms the change.
+ * Stages a `VARIANT_UPDATE` action. Auto-confirm runs
+ * `updateProductVariantsWorkflow` inline when the flag is off.
  */
 const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { result: change } = await (0, product_edit_update_variant_1.productEditUpdateVariantWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const variantId = req.params.variant_id;
+    const { attribute_values: _av, ...update } = req.validatedBody;
+    // `manage_inventory` is a marketplace invariant pinned to `false` at
+    // variant creation (see `create-products` / variant create route); it
+    // is not vendor-editable, so we deliberately do NOT inject it here.
+    // Forcing it in re-staged a phantom no-op change on every edit, which
+    // polluted the request block (MER-168). The workflow diffs the rest of
+    // the payload and stages only the fields that actually changed.
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            variant_id: req.params.variant_id,
-            fields: req.validatedBody,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [
+                {
+                    type: "update",
+                    variant_id: variantId,
+                    fields: update,
+                },
+            ],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
 /**
- * Stages a `VARIANT_REMOVE` action via `product-edit-remove-variant`.
- * Returns the created `ProductChange` — the variant is deleted only after
- * an operator confirms the change.
+ * Stages a `VARIANT_REMOVE` action. Auto-confirm runs
+ * `deleteProductVariantsWorkflow` inline when the flag is off.
  */
 const DELETE = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { result: change } = await (0, product_edit_remove_variant_1.productEditRemoveVariantWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const variantId = req.params.variant_id;
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            variant_id: req.params.variant_id,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [{ type: "remove", variant_id: variantId }],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/variants/route.d.ts

@@ -1,10 +1,14 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorAddProductVariantType } from "../../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductVariantListResponse>) => Promise<void>;
 /**
- * Stages a `VARIANT_ADD` action via `product-edit-add-variant`. Returns
- * the created `ProductChange` — the variant is created on the product
- * only after an operator confirms the change.
+ * Stages a `VARIANT_ADD` action on a fresh `ProductChange`. Auto-
+ * confirm applies it inline when the `PRODUCT_REQUEST` feature flag
+ * is disabled (the variant is created in the same request via
+ * `createProductVariantsWorkflow` invoked by
+ * `applyProductChangeActionsWorkflow`).
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorAddProductVariantType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorAddProductVariantType>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/variants/route.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const product_edit_add_variant_1 = require("../../../../../workflows/product-edit/workflows/product-edit-add-variant");
+const product_edit_update_variants_1 = require("../../../../../workflows/product-edit/workflows/product-edit-update-variants");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const productId = req.params.id;
@@ -21,20 +21,38 @@ const GET = async (req, res) => {
 };
 exports.GET = GET;
 /**
- * Stages a `VARIANT_ADD` action via `product-edit-add-variant`. Returns
- * the created `ProductChange` — the variant is created on the product
- * only after an operator confirms the change.
+ * Stages a `VARIANT_ADD` action on a fresh `ProductChange`. Auto-
+ * confirm applies it inline when the `PRODUCT_REQUEST` feature flag
+ * is disabled (the variant is created in the same request via
+ * `createProductVariantsWorkflow` invoked by
+ * `applyProductChangeActionsWorkflow`).
  */
 const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { result: change } = await (0, product_edit_add_variant_1.productEditAddVariantWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const { attribute_values: _av, ...variant } = req.validatedBody;
+    const { result } = await (0, product_edit_update_variants_1.productEditUpdateVariantsWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            variant: req.validatedBody,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [
+                {
+                    type: "add",
+                    variant: {
+                        ...variant,
+                        manage_inventory: false,
+                    },
+                },
+            ],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL3ZhcmlhbnRzL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlBLHFEQUFxRTtBQUdyRSx1SEFBd0g7QUFHakgsTUFBTSxHQUFHLEdBQUcsS0FBSyxFQUN0QixHQUErQixFQUMvQixHQUErRCxFQUMvRCxFQUFFO0lBQ0YsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxTQUFTLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUE7SUFFL0IsTUFBTSxFQUFFLElBQUksRUFBRSxRQUFRLEVBQUUsUUFBUSxFQUFFLEdBQUcsTUFBTSxLQUFLLENBQUMsS0FBSyxDQUFDO1FBQ3JELE1BQU0sRUFBRSxTQUFTO1FBQ2pCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsZ0JBQWdCLEVBQUUsVUFBVSxFQUFFLFNBQVMsRUFBRTtRQUMzRCxVQUFVLEVBQUUsR0FBRyxDQUFDLFdBQVcsQ0FBQyxVQUFVO0tBQ3ZDLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxJQUFJLENBQUM7UUFDUCxRQUFRO1FBQ1IsS0FBSyxFQUFFLFFBQVEsRUFBRSxLQUFLLElBQUksQ0FBQztRQUMzQixNQUFNLEVBQUUsUUFBUSxFQUFFLElBQUksSUFBSSxDQUFDO1FBQzNCLEtBQUssRUFBRSxRQUFRLEVBQUUsSUFBSSxJQUFJLENBQUM7S0FDM0IsQ0FBQyxDQUFBO0FBQ0osQ0FBQyxDQUFBO0FBcEJZLFFBQUEsR0FBRyxPQW9CZjtBQUVEOzs7O0dBSUc7QUFDSSxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3ZCLEdBQTRELEVBQzVELEdBQW1CLEVBQ25CLEVBQUU7SUFDRixNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsQ0FBQTtJQUU5QyxNQUFNLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSx3REFBNkIsRUFDNUQsR0FBRyxDQUFDLEtBQUssQ0FDVixDQUFDLEdBQUcsQ0FBQztRQUNKLEtBQUssRUFBRTtZQUNMLFVBQVUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7WUFDekIsT0FBTyxFQUFFLEdBQUcsQ0FBQyxhQUFtRDtZQUNoRSxRQUFRLEVBQUUsUUFBUTtTQUNuQjtLQUNGLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsY0FBYyxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUE7QUFDbEQsQ0FBQyxDQUFBO0FBakJZLFFBQUEsSUFBSSxRQWlCaEIifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/helpers.d.ts

@@ -0,0 +1,8 @@
+import type { MedusaContainer } from "@medusajs/framework/types";
+/**
+ * Throws `NOT_FOUND` (rather than `NOT_ALLOWED`) when the seller does
+ * not own the product. The product is technically queryable for them
+ * if `status = published`, but mutations require ownership; the 404
+ * shape avoids leaking the difference.
+ */
+export declare const ensureSellerOwnsProduct: (scope: MedusaContainer, sellerId: string, productId: string) => Promise<void>;

package/.medusa/server/src/api/vendor/products/helpers.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureSellerOwnsProduct = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+/**
+ * Throws `NOT_FOUND` (rather than `NOT_ALLOWED`) when the seller does
+ * not own the product. The product is technically queryable for them
+ * if `status = published`, but mutations require ownership; the 404
+ * shape avoids leaking the difference.
+ */
+const ensureSellerOwnsProduct = async (scope, sellerId, productId) => {
+    const query = scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data } = await query.graph({
+        entity: "product_seller",
+        fields: ["product_id"],
+        filters: {
+            seller_id: sellerId,
+            product_id: productId,
+        },
+    });
+    if (!data?.length) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${productId} was not found`);
+    }
+};
+exports.ensureSellerOwnsProduct = ensureSellerOwnsProduct;
+//# sourceMappingURL=data:application/json;base64,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