@mercurjs/core 2.2.0-canary.3 → 2.2.0-canary.7

package/.medusa/server/src/api/vendor/product-attributes/middlewares.js

@@ -2,14 +2,28 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorProductAttributesMiddlewares = void 0;
 const framework_1 = require("@medusajs/framework");
+const utils_1 = require("../../utils");
 const query_config_1 = require("./query-config");
 const validators_1 = require("./validators");
+// The link pivot's FK column is `product_category_id` (derived from the
+// productCategory linkable key), not `category_id`. Map the URL filter
+// to the column the link service actually exposes.
+const renameCategoryIdFilter = (req, _, next) => {
+    const categoryId = req.filterableFields?.category_id;
+    if (categoryId !== undefined) {
+        req.filterableFields.product_category_id = categoryId;
+        delete req.filterableFields.category_id;
+    }
+    return next();
+};
 exports.vendorProductAttributesMiddlewares = [
     {
         method: ["GET"],
         matcher: "/vendor/product-attributes",
         middlewares: [
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetProductAttributesParams, query_config_1.vendorProductAttributeQueryConfig.list),
+            renameCategoryIdFilter,
+            utils_1.filterAttributesByCategoryLinkOrGlobal,
         ],
     },
     {
@@ -20,4 +34,4 @@ exports.vendorProductAttributesMiddlewares = [
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0LWF0dHJpYnV0ZXMvbWlkZGxld2FyZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQ0EsbURBRTRCO0FBRTVCLGlEQUFrRTtBQUNsRSw2Q0FHcUI7QUFFUixRQUFBLGtDQUFrQyxHQUFzQjtJQUNuRTtRQUNFLE1BQU0sRUFBRSxDQUFDLEtBQUssQ0FBQztRQUNmLE9BQU8sRUFBRSw0QkFBNEI7UUFDckMsV0FBVyxFQUFFO1lBQ1gsSUFBQSxxQ0FBeUIsRUFDdkIsNkNBQWdDLEVBQ2hDLGdEQUFpQyxDQUFDLElBQUksQ0FDdkM7U0FDRjtLQUNGO0lBQ0Q7UUFDRSxNQUFNLEVBQUUsQ0FBQyxLQUFLLENBQUM7UUFDZixPQUFPLEVBQUUsZ0NBQWdDO1FBQ3pDLFdBQVcsRUFBRTtZQUNYLElBQUEscUNBQXlCLEVBQ3ZCLDRDQUErQixFQUMvQixnREFBaUMsQ0FBQyxRQUFRLENBQzNDO1NBQ0Y7S0FDRjtDQUNGLENBQUEifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/product-attributes/route.js

@@ -4,11 +4,14 @@ exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    // Same global-only filter as the admin endpoint — vendors should not
+    // see other products' inline-custom attributes.
     const { data: product_attributes, metadata } = await query.graph({
         entity: "product_attribute",
         fields: req.queryConfig.fields,
         filters: {
             ...req.filterableFields,
+            product_id: null,
         },
         pagination: req.queryConfig.pagination,
     });
@@ -20,4 +23,4 @@ const GET = async (req, res) => {
     });
 };
 exports.GET = GET;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/product-attributes/validators.d.ts

@@ -10,7 +10,7 @@ export declare const VendorGetProductAttributeParams: z.ZodObject<{
     fields?: string | undefined;
 }>;
 export type VendorGetProductAttributesParamsType = z.infer<typeof VendorGetProductAttributesParams>;
-export declare const VendorGetProductAttributesParams: z.ZodEffects<z.ZodObject<{} & {
+export declare const VendorGetProductAttributesParams: z.ZodObject<{} & {
     [x: string]: any;
     $and: z.ZodOptional<z.ZodLazy<z.ZodArray<z.ZodObject<{
         q: z.ZodOptional<z.ZodString>;
@@ -256,10 +256,6 @@ export declare const VendorGetProductAttributesParams: z.ZodEffects<z.ZodObject<
     [x: string]: any;
     $and?: unknown;
     $or?: unknown;
-}>, Record<string, unknown>, {
-    [x: string]: any;
-    $and?: unknown;
-    $or?: unknown;
 }>;
 export type VendorCreateProductAttributeType = z.infer<typeof CreateProductAttribute> & AdditionalData;
 declare const CreateProductAttribute: z.ZodObject<{

package/.medusa/server/src/api/vendor/product-attributes/validators.js

@@ -5,7 +5,6 @@ const zod_1 = require("zod");
 const types_1 = require("@mercurjs/types");
 const validators_1 = require("@medusajs/medusa/api/utils/validators");
 const common_1 = require("@medusajs/medusa/api/utils/common-validators/common");
-const utils_1 = require("@medusajs/framework/utils");
 const typeEnum = zod_1.z.nativeEnum(types_1.AttributeType);
 exports.VendorGetProductAttributeParams = (0, validators_1.createSelectParams)();
 const VendorProductAttributesParamsFields = zod_1.z.object({
@@ -27,19 +26,7 @@ exports.VendorGetProductAttributesParams = (0, validators_1.createFindParams)({
     limit: 50,
 })
     .merge(VendorProductAttributesParamsFields)
-    .merge((0, common_1.applyAndAndOrOperators)(VendorProductAttributesParamsFields))
-    .transform((data) => {
-    const res = { ...data };
-    if ((0, utils_1.isPresent)(data.category_id)) {
-        // Return attributes that belong to the given category OR have no category (global)
-        res.$or = [
-            { categories: { id: data.category_id } },
-            { categories: { id: null } },
-        ];
-        delete res.category_id;
-    }
-    return res;
-});
+    .merge((0, common_1.applyAndAndOrOperators)(VendorProductAttributesParamsFields));
 const CreateProductAttribute = zod_1.z.object({
     name: zod_1.z.string(),
     handle: zod_1.z.string().optional(),
@@ -82,4 +69,4 @@ const UpdateProductAttributeValue = zod_1.z.object({
     metadata: zod_1.z.record(zod_1.z.unknown()).nullish(),
 });
 exports.VendorUpdateProductAttributeValue = (0, validators_1.WithAdditionalData)(UpdateProductAttributeValue);
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/product-categories/query-config.js

@@ -16,7 +16,6 @@ exports.vendorProductCategoryFields = [
     "metadata",
     "*parent_category",
     "*category_children",
-    "*attributes",
 ];
 exports.vendorProductCategoryQueryConfig = {
     list: {
@@ -29,4 +28,4 @@ exports.vendorProductCategoryQueryConfig = {
         isList: false,
     },
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/product-categories/validators.d.ts

@@ -155,8 +155,8 @@ export declare const VendorGetProductCategoriesParams: z.ZodObject<{} & {
         deleted_at?: any;
         handle?: string | string[] | undefined;
         is_active?: boolean | undefined;
-        is_restricted?: boolean | undefined;
         is_internal?: boolean | undefined;
+        is_restricted?: boolean | undefined;
         parent_category_id?: string | string[] | undefined;
         include_ancestors_tree?: boolean | undefined;
         include_descendants_tree?: boolean | undefined;
@@ -168,8 +168,8 @@ export declare const VendorGetProductCategoriesParams: z.ZodObject<{} & {
         deleted_at?: any;
         handle?: string | string[] | undefined;
         is_active?: string | boolean | undefined;
-        is_restricted?: string | boolean | undefined;
         is_internal?: string | boolean | undefined;
+        is_restricted?: string | boolean | undefined;
         parent_category_id?: string | string[] | undefined;
         include_ancestors_tree?: string | boolean | undefined;
         include_descendants_tree?: string | boolean | undefined;
@@ -312,8 +312,8 @@ export declare const VendorGetProductCategoriesParams: z.ZodObject<{} & {
         deleted_at?: any;
         handle?: string | string[] | undefined;
         is_active?: boolean | undefined;
-        is_restricted?: boolean | undefined;
         is_internal?: boolean | undefined;
+        is_restricted?: boolean | undefined;
         parent_category_id?: string | string[] | undefined;
         include_ancestors_tree?: boolean | undefined;
         include_descendants_tree?: boolean | undefined;
@@ -325,8 +325,8 @@ export declare const VendorGetProductCategoriesParams: z.ZodObject<{} & {
         deleted_at?: any;
         handle?: string | string[] | undefined;
         is_active?: string | boolean | undefined;
-        is_restricted?: string | boolean | undefined;
         is_internal?: string | boolean | undefined;
+        is_restricted?: string | boolean | undefined;
         parent_category_id?: string | string[] | undefined;
         include_ancestors_tree?: string | boolean | undefined;
         include_descendants_tree?: string | boolean | undefined;

package/.medusa/server/src/api/vendor/products/[id]/attributes/[attribute_id]/route.d.ts

@@ -1,9 +1,10 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductAttributeResponse>) => Promise<void>;
 /**
- * Stages an `ATTRIBUTE_REMOVE` action via `product-edit-remove-attribute`.
- * Returns the created `ProductChange` — the attribute is unlinked from
- * the product only after an operator confirms the change.
+ * Stages an `ATTRIBUTE_REMOVE` action. Auto-confirm dismisses the
+ * remote links inline when the flag is off.
  */
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/attributes/[attribute_id]/route.js

@@ -2,36 +2,61 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DELETE = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const product_edit_remove_attribute_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-remove-attribute");
+const product_edit_update_attributes_1 = require("../../../../../../workflows/product-edit/workflows/product-edit-update-attributes");
+const format_product_attributes_1 = require("../../../../../utils/format-product-attributes");
+const helpers_1 = require("../../../helpers");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const productId = req.params.id;
     const attributeId = req.params.attribute_id;
-    const { data: [product_attribute], } = await query.graph({
-        entity: "product_attribute",
-        fields: req.queryConfig.fields,
-        filters: { id: attributeId, product_id: req.params.id },
+    const { data: [product], } = await query.graph({
+        entity: "product",
+        fields: [
+            "attribute_values.id",
+            "attribute_values.name",
+            "attribute_values.attribute.id",
+            "attribute_values.attribute.name",
+            "attribute_values.attribute.handle",
+            "attribute_values.attribute.type",
+            "attribute_values.attribute.is_variant_axis",
+        ],
+        filters: { id: productId },
     });
+    if (!product) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${productId} was not found`);
+    }
+    const [product_attribute] = (0, format_product_attributes_1.groupProductAttributeValues)(product.attribute_values, { attributeId });
     if (!product_attribute) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product attribute with id ${attributeId} was not found for product ${req.params.id}`);
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Attribute with id ${attributeId} was not found on product ${productId}`);
     }
-    res.json({ product_attribute });
+    res.json({
+        product_attribute: product_attribute,
+    });
 };
 exports.GET = GET;
 /**
- * Stages an `ATTRIBUTE_REMOVE` action via `product-edit-remove-attribute`.
- * Returns the created `ProductChange` — the attribute is unlinked from
- * the product only after an operator confirms the change.
+ * Stages an `ATTRIBUTE_REMOVE` action. Auto-confirm dismisses the
+ * remote links inline when the flag is off.
  */
 const DELETE = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { result: change } = await (0, product_edit_remove_attribute_1.productEditRemoveAttributeWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const attributeId = req.params.attribute_id;
+    await (0, helpers_1.ensureSellerOwnsProduct)(req.scope, sellerId, productId);
+    const { result } = await (0, product_edit_update_attributes_1.productEditUpdateAttributesWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            attribute_id: req.params.attribute_id,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [{ type: "remove", attribute_id: attributeId }],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL2F0dHJpYnV0ZXMvW2F0dHJpYnV0ZV9pZF0vcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBR2tDO0FBR2xDLG9JQUFxSTtBQUU5SCxNQUFNLEdBQUcsR0FBRyxLQUFLLEVBQ3RCLEdBQStCLEVBQy9CLEdBQTZELEVBQzdELEVBQUU7SUFDRixNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUNoRSxNQUFNLFdBQVcsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFDLFlBQVksQ0FBQTtJQUUzQyxNQUFNLEVBQ0osSUFBSSxFQUFFLENBQUMsaUJBQWlCLENBQUMsR0FDMUIsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDcEIsTUFBTSxFQUFFLG1CQUFtQjtRQUMzQixNQUFNLEVBQUUsR0FBRyxDQUFDLFdBQVcsQ0FBQyxNQUFNO1FBQzlCLE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxXQUFXLEVBQUUsVUFBVSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxFQUFFO0tBQ3hELENBQUMsQ0FBQTtJQUVGLElBQUksQ0FBQyxpQkFBaUIsRUFBRSxDQUFDO1FBQ3ZCLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQzNCLDZCQUE2QixXQUFXLDhCQUE4QixHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsRUFBRSxDQUN0RixDQUFBO0lBQ0gsQ0FBQztJQUVELEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxpQkFBaUIsRUFBRSxDQUFDLENBQUE7QUFDakMsQ0FBQyxDQUFBO0FBdkJZLFFBQUEsR0FBRyxPQXVCZjtBQUVEOzs7O0dBSUc7QUFDSSxNQUFNLE1BQU0sR0FBRyxLQUFLLEVBQ3pCLEdBQStCLEVBQy9CLEdBQW1CLEVBQ25CLEVBQUU7SUFDRixNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsQ0FBQTtJQUU5QyxNQUFNLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSxrRUFBa0MsRUFDakUsR0FBRyxDQUFDLEtBQUssQ0FDVixDQUFDLEdBQUcsQ0FBQztRQUNKLEtBQUssRUFBRTtZQUNMLFVBQVUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7WUFDekIsWUFBWSxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsWUFBWTtZQUNyQyxRQUFRLEVBQUUsUUFBUTtTQUNuQjtLQUNGLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsY0FBYyxFQUFFLE1BQU0sRUFBRSxDQUFDLENBQUE7QUFDbEQsQ0FBQyxDQUFBO0FBakJZLFFBQUEsTUFBTSxVQWlCbEIifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/attributes/route.d.ts

@@ -1,11 +1,15 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorAddProductAttributeType } from "../../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductAttributeListResponse>) => Promise<void>;
 /**
- * Stages an `ATTRIBUTE_ADD` action via `product-edit-add-attribute`. Body
- * mirrors `addAttributesToProduct`'s per-item shape so apply-time is a
- * direct passthrough. Returns the created `ProductChange` — the attribute
- * is linked to the product only after an operator confirms the change.
+ * Stages an `ATTRIBUTE_ADD` action. Supports both branches the
+ * validator allows: attach-existing (`attribute_id` + `value_ids` /
+ * `values`) and inline-create (`name` + `type` + `values`). The
+ * staging workflow resolves names → ids and creates inline
+ * `ProductAttribute` rows up-front so the action carries pre-resolved
+ * `attribute_value_ids` (the apply-actions contract).
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorAddProductAttributeType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorAddProductAttributeType>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/attributes/route.js

@@ -2,46 +2,81 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
-const product_edit_add_attribute_1 = require("../../../../../workflows/product-edit/workflows/product-edit-add-attribute");
+const product_edit_update_attributes_1 = require("../../../../../workflows/product-edit/workflows/product-edit-update-attributes");
+const helpers_1 = require("../../helpers");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const productId = req.params.id;
-    const { data: product_attributes, metadata } = await query.graph({
-        entity: "product_attribute",
-        fields: req.queryConfig.fields,
-        filters: {
-            ...req.filterableFields,
-            product_id: productId,
-        },
-        pagination: req.queryConfig.pagination,
+    const { data: [product], } = await query.graph({
+        entity: "product",
+        fields: ["id", "attribute_values.attribute.id", "attribute_values.attribute.name"],
+        filters: { id: productId },
     });
+    if (!product) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Product with id ${productId} was not found`);
+    }
+    const attributesById = new Map();
+    for (const v of product.attribute_values ?? []) {
+        if (!v.attribute)
+            continue;
+        if (!attributesById.has(v.attribute.id)) {
+            attributesById.set(v.attribute.id, v.attribute);
+        }
+    }
+    const product_attributes = Array.from(attributesById.values());
     res.json({
         product_attributes,
-        count: metadata?.count ?? 0,
-        offset: metadata?.skip ?? 0,
-        limit: metadata?.take ?? 0,
+        count: product_attributes.length,
+        offset: 0,
+        limit: product_attributes.length,
     });
 };
 exports.GET = GET;
 /**
- * Stages an `ATTRIBUTE_ADD` action via `product-edit-add-attribute`. Body
- * mirrors `addAttributesToProduct`'s per-item shape so apply-time is a
- * direct passthrough. Returns the created `ProductChange` — the attribute
- * is linked to the product only after an operator confirms the change.
+ * Stages an `ATTRIBUTE_ADD` action. Supports both branches the
+ * validator allows: attach-existing (`attribute_id` + `value_ids` /
+ * `values`) and inline-create (`name` + `type` + `values`). The
+ * staging workflow resolves names → ids and creates inline
+ * `ProductAttribute` rows up-front so the action carries pre-resolved
+ * `attribute_value_ids` (the apply-actions contract).
  */
 const POST = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
-    const { attribute_id, attribute_value_ids, values } = req.validatedBody;
-    const { result: change } = await (0, product_edit_add_attribute_1.productEditAddAttributeWorkflow)(req.scope).run({
+    const productId = req.params.id;
+    const body = req.validatedBody;
+    await (0, helpers_1.ensureSellerOwnsProduct)(req.scope, sellerId, productId);
+    const op = body.attribute_id !== undefined
+        ? ({
+            type: "add",
+            attribute_id: body.attribute_id,
+            value_ids: body.attribute_value_ids,
+            values: body.values,
+        })
+        : ({
+            type: "add",
+            name: body.name,
+            attribute_type: body.type,
+            values: body.values ?? [],
+            is_variant_axis: body.is_variant_axis,
+            is_filterable: body.is_filterable,
+            is_required: body.is_required,
+            description: body.description ?? null,
+            metadata: body.metadata ?? null,
+        });
+    const { result } = await (0, product_edit_update_attributes_1.productEditUpdateAttributesWorkflow)(req.scope).run({
         input: {
-            product_id: req.params.id,
-            attribute_id,
-            attribute_value_ids,
-            values,
-            actor_id: sellerId,
+            product_id: productId,
+            created_by: sellerId,
+            operations: [op],
         },
     });
-    res.status(202).json({ product_change: change });
+    const { data: [product_change], } = await query.graph({
+        entity: "product_change",
+        fields: ["*", "actions.*"],
+        filters: { id: result.id },
+    });
+    res.status(202).json({ product_change: product_change ?? result });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL2F0dHJpYnV0ZXMvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBR3JFLDJIQUE0SDtBQUdySCxNQUFNLEdBQUcsR0FBRyxLQUFLLEVBQ3RCLEdBQStCLEVBQy9CLEdBQWlFLEVBQ2pFLEVBQUU7SUFDRixNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUNoRSxNQUFNLFNBQVMsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQTtJQUUvQixNQUFNLEVBQUUsSUFBSSxFQUFFLGtCQUFrQixFQUFFLFFBQVEsRUFBRSxHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUMvRCxNQUFNLEVBQUUsbUJBQW1CO1FBQzNCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07UUFDOUIsT0FBTyxFQUFFO1lBQ1AsR0FBRyxHQUFHLENBQUMsZ0JBQWdCO1lBQ3ZCLFVBQVUsRUFBRSxTQUFTO1NBQ3RCO1FBQ0QsVUFBVSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsVUFBVTtLQUN2QyxDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsSUFBSSxDQUFDO1FBQ1Asa0JBQWtCO1FBQ2xCLEtBQUssRUFBRSxRQUFRLEVBQUUsS0FBSyxJQUFJLENBQUM7UUFDM0IsTUFBTSxFQUFFLFFBQVEsRUFBRSxJQUFJLElBQUksQ0FBQztRQUMzQixLQUFLLEVBQUUsUUFBUSxFQUFFLElBQUksSUFBSSxDQUFDO0tBQzNCLENBQUMsQ0FBQTtBQUNKLENBQUMsQ0FBQTtBQXZCWSxRQUFBLEdBQUcsT0F1QmY7QUFFRDs7Ozs7R0FLRztBQUNJLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBOEQsRUFDOUQsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sRUFBRSxZQUFZLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSxFQUFFLEdBQUcsR0FBRyxDQUFDLGFBQWEsQ0FBQTtJQUV2RSxNQUFNLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSw0REFBK0IsRUFDOUQsR0FBRyxDQUFDLEtBQUssQ0FDVixDQUFDLEdBQUcsQ0FBQztRQUNKLEtBQUssRUFBRTtZQUNMLFVBQVUsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7WUFDekIsWUFBWTtZQUNaLG1CQUFtQjtZQUNuQixNQUFNO1lBQ04sUUFBUSxFQUFFLFFBQVE7U0FDbkI7S0FDRixDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxFQUFFLGNBQWMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFBO0FBQ2xELENBQUMsQ0FBQTtBQXBCWSxRQUFBLElBQUksUUFvQmhCIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9wcm9kdWN0cy9baWRdL2F0dHJpYnV0ZXMvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBR2tDO0FBR2xDLG1JQUFvSTtBQUNwSSwyQ0FBdUQ7QUFHaEQsTUFBTSxHQUFHLEdBQUcsS0FBSyxFQUN0QixHQUErQixFQUMvQixHQUFpRSxFQUNqRSxFQUFFO0lBQ0YsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxTQUFTLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQyxFQUFFLENBQUE7SUFFL0IsTUFBTSxFQUNKLElBQUksRUFBRSxDQUFDLE9BQU8sQ0FBQyxHQUNoQixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsU0FBUztRQUNqQixNQUFNLEVBQUUsQ0FBQyxJQUFJLEVBQUUsK0JBQStCLEVBQUUsaUNBQWlDLENBQUM7UUFDbEYsT0FBTyxFQUFFLEVBQUUsRUFBRSxFQUFFLFNBQVMsRUFBRTtLQUMzQixDQUFDLENBQUE7SUFFRixJQUFJLENBQUMsT0FBTyxFQUFFLENBQUM7UUFDYixNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUMzQixtQkFBbUIsU0FBUyxnQkFBZ0IsQ0FDN0MsQ0FBQTtJQUNILENBQUM7SUFFRCxNQUFNLGNBQWMsR0FBRyxJQUFJLEdBQUcsRUFBZSxDQUFBO0lBQzdDLEtBQUssTUFBTSxDQUFDLElBQUssT0FBZSxDQUFDLGdCQUFnQixJQUFJLEVBQUUsRUFBRSxDQUFDO1FBQ3hELElBQUksQ0FBQyxDQUFDLENBQUMsU0FBUztZQUFFLFNBQVE7UUFDMUIsSUFBSSxDQUFDLGNBQWMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxFQUFFLENBQUMsRUFBRSxDQUFDO1lBQ3hDLGNBQWMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxDQUFBO1FBQ2pELENBQUM7SUFDSCxDQUFDO0lBQ0QsTUFBTSxrQkFBa0IsR0FBRyxLQUFLLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFBO0lBRTlELEdBQUcsQ0FBQyxJQUFJLENBQUM7UUFDUCxrQkFBa0I7UUFDbEIsS0FBSyxFQUFFLGtCQUFrQixDQUFDLE1BQU07UUFDaEMsTUFBTSxFQUFFLENBQUM7UUFDVCxLQUFLLEVBQUUsa0JBQWtCLENBQUMsTUFBTTtLQUMxQixDQUFDLENBQUE7QUFDWCxDQUFDLENBQUE7QUFyQ1ksUUFBQSxHQUFHLE9BcUNmO0FBRUQ7Ozs7Ozs7R0FPRztBQUNJLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBOEQsRUFDOUQsR0FBeUQsRUFDekQsRUFBRTtJQUNGLE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBQ2hFLE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxDQUFBO0lBQzlDLE1BQU0sU0FBUyxHQUFHLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFBO0lBQy9CLE1BQU0sSUFBSSxHQUFHLEdBQUcsQ0FBQyxhQUFhLENBQUE7SUFFOUIsTUFBTSxJQUFBLGlDQUF1QixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUUsUUFBUSxFQUFFLFNBQVMsQ0FBQyxDQUFBO0lBRTdELE1BQU0sRUFBRSxHQUNOLElBQUksQ0FBQyxZQUFZLEtBQUssU0FBUztRQUM3QixDQUFDLENBQUMsQ0FBQztZQUNDLElBQUksRUFBRSxLQUFjO1lBQ3BCLFlBQVksRUFBRSxJQUFJLENBQUMsWUFBWTtZQUMvQixTQUFTLEVBQUUsSUFBSSxDQUFDLG1CQUFtQjtZQUNuQyxNQUFNLEVBQUUsSUFBSSxDQUFDLE1BQU07U0FDcEIsQ0FBQztRQUNKLENBQUMsQ0FBQyxDQUFDO1lBQ0MsSUFBSSxFQUFFLEtBQWM7WUFDcEIsSUFBSSxFQUFFLElBQUksQ0FBQyxJQUFLO1lBQ2hCLGNBQWMsRUFBRSxJQUFJLENBQUMsSUFBcUI7WUFDMUMsTUFBTSxFQUFFLElBQUksQ0FBQyxNQUFNLElBQUksRUFBRTtZQUN6QixlQUFlLEVBQUUsSUFBSSxDQUFDLGVBQWU7WUFDckMsYUFBYSxFQUFFLElBQUksQ0FBQyxhQUFhO1lBQ2pDLFdBQVcsRUFBRSxJQUFJLENBQUMsV0FBVztZQUM3QixXQUFXLEVBQUUsSUFBSSxDQUFDLFdBQVcsSUFBSSxJQUFJO1lBQ3JDLFFBQVEsRUFBRSxJQUFJLENBQUMsUUFBUSxJQUFJLElBQUk7U0FDaEMsQ0FBQyxDQUFBO0lBRVIsTUFBTSxFQUFFLE1BQU0sRUFBRSxHQUFHLE1BQU0sSUFBQSxvRUFBbUMsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsR0FBRyxDQUFDO1FBQzFFLEtBQUssRUFBRTtZQUNMLFVBQVUsRUFBRSxTQUFTO1lBQ3JCLFVBQVUsRUFBRSxRQUFRO1lBQ3BCLFVBQVUsRUFBRSxDQUFDLEVBQUUsQ0FBQztTQUNqQjtLQUNGLENBQUMsQ0FBQTtJQUVGLE1BQU0sRUFDSixJQUFJLEVBQUUsQ0FBQyxjQUFjLENBQUMsR0FDdkIsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDcEIsTUFBTSxFQUFFLGdCQUFnQjtRQUN4QixNQUFNLEVBQUUsQ0FBQyxHQUFHLEVBQUUsV0FBVyxDQUFDO1FBQzFCLE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxNQUFNLENBQUMsRUFBRSxFQUFFO0tBQzNCLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLEVBQUUsY0FBYyxFQUFFLGNBQWMsSUFBSSxNQUFNLEVBQUUsQ0FBQyxDQUFBO0FBQ3BFLENBQUMsQ0FBQTtBQWhEWSxRQUFBLElBQUksUUFnRGhCIn0=

package/.medusa/server/src/api/vendor/products/[id]/cancel/route.d.ts

@@ -1,13 +1,11 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
 import { ProductChangeDTO } from "@mercurjs/types";
-import { VendorCancelProductChangeType } from "../../validators";
 /**
- * Vendor-side cancel of the active pending `ProductChange` for a product.
- * Ownership is keyed off `product_change.created_by` — only the seller who
- * opened the change can cancel it, regardless of who owns the underlying
- * master product. Sellers without a pending change on this product get
- * 404 (nothing to cancel).
+ * Vendor-side cancel of the seller's own pending `ProductChange`.
+ * Resolves the active change via `(product_id, created_by, status: pending)`
+ * — vendors can only cancel changes they authored. Marks the change
+ * `CANCELED`; no underlying product mutation happens.
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorCancelProductChangeType>, res: MedusaResponse<{
+export declare const POST: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
     product_change: ProductChangeDTO;
 }>) => Promise<void>;

package/.medusa/server/src/api/vendor/products/[id]/cancel/route.js

@@ -3,18 +3,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const types_1 = require("@mercurjs/types");
-const cancel_product_edit_1 = require("../../../../../workflows/product-edit/workflows/cancel-product-edit");
+const cancel_product_change_1 = require("../../../../../workflows/product-edit/workflows/cancel-product-change");
+const helpers_1 = require("../../helpers");
 /**
- * Vendor-side cancel of the active pending `ProductChange` for a product.
- * Ownership is keyed off `product_change.created_by` — only the seller who
- * opened the change can cancel it, regardless of who owns the underlying
- * master product. Sellers without a pending change on this product get
- * 404 (nothing to cancel).
+ * Vendor-side cancel of the seller's own pending `ProductChange`.
+ * Resolves the active change via `(product_id, created_by, status: pending)`
+ * — vendors can only cancel changes they authored. Marks the change
+ * `CANCELED`; no underlying product mutation happens.
  */
 const POST = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const sellerId = req.seller_context.seller_id;
     const productId = req.params.id;
+    await (0, helpers_1.ensureSellerOwnsProduct)(req.scope, sellerId, productId);
     const { data: changes } = await query.graph({
         entity: "product_change",
         fields: ["id"],
@@ -24,23 +25,21 @@ const POST = async (req, res) => {
             status: types_1.ProductChangeStatus.PENDING,
         },
     });
-    const pendingChange = changes[0];
-    if (!pendingChange) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `No pending product change to cancel for product '${productId}'`);
+    if (!changes.length) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `No pending product change to cancel for product ${productId}`);
     }
-    await (0, cancel_product_edit_1.cancelProductEditWorkflow)(req.scope).run({
+    await (0, cancel_product_change_1.cancelProductChangeWorkflow)(req.scope).run({
         input: {
-            product_change_id: pendingChange.id,
-            actor_id: sellerId,
-            internal_note: req.validatedBody?.internal_note,
+            id: changes[0].id,
+            canceled_by: sellerId,
         },
     });
     const { data: [product_change], } = await query.graph({
         entity: "product_change",
         fields: ["*", "actions.*"],
-        filters: { id: pendingChange.id },
+        filters: { id: changes[0].id },
     });
     res.json({ product_change });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/products/[id]/route.d.ts

@@ -1,16 +1,25 @@
 import { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
-import { HttpTypes } from "@mercurjs/types";
+import { AdditionalData } from "@medusajs/framework/types";
+import { HttpTypes, ProductChangeDTO } from "@mercurjs/types";
 import { VendorUpdateProductType } from "../validators";
 export declare const GET: (req: AuthenticatedMedusaRequest, res: MedusaResponse<HttpTypes.VendorProductResponse>) => Promise<void>;
 /**
- * Stages top-level Product field changes through `product-edit-update-fields`.
- * Returns the created `ProductChange` — the product itself is NOT mutated
- * until an operator confirms the change.
+ * Stages a vendor product edit as a pending `ProductChange`. Each
+ * changed field becomes a `ProductChangeAction` (`STATUS_CHANGE` for
+ * status, `UPDATE { field, value }` otherwise). When the
+ * `PRODUCT_REQUEST` feature flag is disabled the staged change is
+ * confirmed inline and applied to the underlying product before the
+ * response returns. Returns 202 with `{ product_change }` so the
+ * vendor UI can show pending state regardless of flag.
  */
-export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType>, res: MedusaResponse) => Promise<void>;
+export declare const POST: (req: AuthenticatedMedusaRequest<VendorUpdateProductType & AdditionalData>, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;
 /**
- * Stages a `PRODUCT_DELETE` action via `product-edit-delete-product`.
- * Returns the created `ProductChange` — the product is soft-deleted only
- * after an operator confirms the change.
+ * Stages a vendor-initiated delete as a `PRODUCT_DELETE` action on a
+ * fresh `ProductChange`. Auto-confirm applies it inline when the
+ * `PRODUCT_REQUEST` feature flag is disabled.
  */
-export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;
+export declare const DELETE: (req: AuthenticatedMedusaRequest, res: MedusaResponse<{
+    product_change: ProductChangeDTO;
+}>) => Promise<void>;