@mercurjs/core 2.3.7-canary.1 → 2.3.8-canary.0

package/.medusa/server/src/api/admin/order-groups/helpers.js

@@ -36,10 +36,16 @@ const applyOrderGroupSellerFilter = async (req, res, next) => {
     if (matchingOrderGroupIds.length === 0) {
         return respondEmpty(req, res);
     }
+    // The order-group repository only reads top-level filter keys, so the two
+    // id constraints have to be intersected here rather than combined via $and.
     const existingId = filterableFields.id;
     if (existingId !== undefined) {
-        filterableFields.$and = [{ id: existingId }, { id: matchingOrderGroupIds }];
-        delete filterableFields.id;
+        const requestedIds = new Set(Array.isArray(existingId) ? existingId : [existingId]);
+        const intersection = matchingOrderGroupIds.filter((id) => requestedIds.has(id));
+        if (intersection.length === 0) {
+            return respondEmpty(req, res);
+        }
+        filterableFields.id = intersection;
     }
     else {
         // QueryGraph for `order_group` treats a plain array as IN; `{$in: [...]}`
@@ -50,4 +56,4 @@ const applyOrderGroupSellerFilter = async (req, res, next) => {
     return next();
 };
 exports.applyOrderGroupSellerFilter = applyOrderGroupSellerFilter;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/order-groups/validators.d.ts

@@ -15,6 +15,7 @@ export declare const AdminGetOrderGroupsParams: z.ZodObject<{
     customer_id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     seller_id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     status: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
+    payment_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     sales_channel_id: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     created_at: z.ZodOptional<z.ZodUnion<readonly [any, z.ZodObject<{
         $eq: any;

package/.medusa/server/src/api/admin/order-groups/validators.js

@@ -13,8 +13,9 @@ exports.AdminGetOrderGroupsParams = (0, validators_1.createFindParams)({
     customer_id: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
     seller_id: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
     status: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
+    payment_status: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
     sales_channel_id: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
     created_at: (0, validators_1.createOperatorMap)().optional(),
     updated_at: (0, validators_1.createOperatorMap)().optional(),
 }));
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidmFsaWRhdG9ycy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvYWRtaW4vb3JkZXItZ3JvdXBzL3ZhbGlkYXRvcnMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsNkJBQXVCO0FBQ3ZCLHNFQUk4QztBQUdqQyxRQUFBLHdCQUF3QixHQUFHLElBQUEsK0JBQWtCLEdBQUUsQ0FBQTtBQUcvQyxRQUFBLHlCQUF5QixHQUFHLElBQUEsNkJBQWdCLEVBQUM7SUFDeEQsTUFBTSxFQUFFLENBQUM7SUFDVCxLQUFLLEVBQUUsRUFBRTtDQUNWLENBQUMsQ0FBQyxLQUFLLENBQ04sT0FBQyxDQUFDLE1BQU0sQ0FBQztJQUNQLENBQUMsRUFBRSxPQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsUUFBUSxFQUFFO0lBQ3hCLEVBQUUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxFQUFFLE9BQUMsQ0FBQyxLQUFLLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsRUFBRTtJQUN6RCxXQUFXLEVBQUUsT0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLEVBQUU7SUFDbEUsU0FBUyxFQUFFLE9BQUMsQ0FBQyxLQUFLLENBQUMsQ0FBQyxPQUFDLENBQUMsTUFBTSxFQUFFLEVBQUUsT0FBQyxDQUFDLEtBQUssQ0FBQyxPQUFDLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUMsUUFBUSxFQUFFO0lBQ2hFLE1BQU0sRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxFQUFFLE9BQUMsQ0FBQyxLQUFLLENBQUMsT0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsRUFBRTtJQUM3RCxjQUFjLEVBQUUsT0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLEVBQUU7SUFDckUsZ0JBQWdCLEVBQUUsT0FBQyxDQUFDLEtBQUssQ0FBQyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRSxPQUFDLENBQUMsS0FBSyxDQUFDLE9BQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLEVBQUU7SUFDdkUsVUFBVSxFQUFFLElBQUEsOEJBQWlCLEdBQUUsQ0FBQyxRQUFRLEVBQUU7SUFDMUMsVUFBVSxFQUFFLElBQUEsOEJBQWlCLEdBQUUsQ0FBQyxRQUFRLEVBQUU7Q0FDM0MsQ0FBQyxDQUNILENBQUEifQ==

package/.medusa/server/src/api/utils/index.d.ts

@@ -10,3 +10,4 @@ export * from "./product-attribute-fields";
 export * from "./filter-attributes-by-category-link";
 export * from "./offers";
 export * from "./split-order-payment-status";
+export * from "./restrict-vendor-fields";

package/.medusa/server/src/api/utils/index.js

@@ -26,4 +26,5 @@ __exportStar(require("./product-attribute-fields"), exports);
 __exportStar(require("./filter-attributes-by-category-link"), exports);
 __exportStar(require("./offers"), exports);
 __exportStar(require("./split-order-payment-status"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3V0aWxzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxvREFBaUM7QUFDakMsZ0VBQTZDO0FBQzdDLDZEQUEwQztBQUMxQyxtRUFBZ0Q7QUFDaEQsMkRBQXdDO0FBQ3hDLHdEQUFxQztBQUNyQywyREFBd0M7QUFDeEMsOERBQTJDO0FBQzNDLDZEQUEwQztBQUMxQyx1RUFBb0Q7QUFDcEQsMkNBQXdCO0FBQ3hCLCtEQUE0QyJ9
+__exportStar(require("./restrict-vendor-fields"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3V0aWxzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSxvREFBaUM7QUFDakMsZ0VBQTZDO0FBQzdDLDZEQUEwQztBQUMxQyxtRUFBZ0Q7QUFDaEQsMkRBQXdDO0FBQ3hDLHdEQUFxQztBQUNyQywyREFBd0M7QUFDeEMsOERBQTJDO0FBQzNDLDZEQUEwQztBQUMxQyx1RUFBb0Q7QUFDcEQsMkNBQXdCO0FBQ3hCLCtEQUE0QztBQUM1QywyREFBd0MifQ==

package/.medusa/server/src/api/utils/restrict-vendor-fields.d.ts

@@ -0,0 +1,12 @@
+import { MedusaNextFunction, MedusaRequest, MedusaResponse } from "@medusajs/framework";
+/**
+ * Relations a vendor request must never traverse. The marketplace links
+ * products, categories and customers to many sellers at once, so a `fields`
+ * query that walks through `sellers` (or a member's other `seller_members`)
+ * lands on a seller the request is not scoped to. The private seller
+ * relations are blocked everywhere except on the routes rooted at the
+ * authenticated seller itself.
+ */
+export declare const VENDOR_CROSS_SELLER_FIELD_SEGMENTS: string[];
+export declare const VENDOR_SELLER_PRIVATE_FIELD_SEGMENTS: string[];
+export declare const restrictVendorFields: (disallowed: string[]) => (req: MedusaRequest, _res: MedusaResponse, next: MedusaNextFunction) => void;

package/.medusa/server/src/api/utils/restrict-vendor-fields.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.restrictVendorFields = exports.VENDOR_SELLER_PRIVATE_FIELD_SEGMENTS = exports.VENDOR_CROSS_SELLER_FIELD_SEGMENTS = void 0;
+/**
+ * Relations a vendor request must never traverse. The marketplace links
+ * products, categories and customers to many sellers at once, so a `fields`
+ * query that walks through `sellers` (or a member's other `seller_members`)
+ * lands on a seller the request is not scoped to. The private seller
+ * relations are blocked everywhere except on the routes rooted at the
+ * authenticated seller itself.
+ */
+exports.VENDOR_CROSS_SELLER_FIELD_SEGMENTS = [
+    "sellers",
+    "seller_members",
+    "token",
+];
+exports.VENDOR_SELLER_PRIVATE_FIELD_SEGMENTS = [
+    ...exports.VENDOR_CROSS_SELLER_FIELD_SEGMENTS,
+    "payment_details",
+    "professional_details",
+    "member_invites",
+    "members",
+];
+const restrictVendorFields = (disallowed) => (req, _res, next) => {
+    req.disallowed = disallowed;
+    next();
+};
+exports.restrictVendorFields = restrictVendorFields;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/inventory-items/[id]/location-levels/[location_id]/route.js

@@ -3,22 +3,26 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DELETE = exports.POST = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const core_flows_1 = require("@medusajs/core-flows");
-const helpers_1 = require("../../../helpers");
+const helpers_1 = require("../../../../stock-locations/helpers");
+const helpers_2 = require("../../../helpers");
 const POST = async (req, res) => {
     const { id, location_id } = req.params;
-    await (0, helpers_1.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_2.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_1.validateSellerStockLocations)(req.scope, req.seller_context.seller_id, [
+        location_id,
+    ]);
     await (0, core_flows_1.updateInventoryLevelsWorkflow)(req.scope).run({
         input: {
             updates: [{ ...req.validatedBody, inventory_item_id: id, location_id }],
         },
     });
-    const inventoryItem = await (0, helpers_1.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
+    const inventoryItem = await (0, helpers_2.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
     res.json({ inventory_item: inventoryItem });
 };
 exports.POST = POST;
 const DELETE = async (req, res) => {
     const { id, location_id } = req.params;
-    await (0, helpers_1.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_2.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const { data: [level], } = await query.graph({
         entity: "inventory_level",
@@ -36,7 +40,7 @@ const DELETE = async (req, res) => {
             id: [level.id],
         },
     });
-    const inventoryItem = await (0, helpers_1.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
+    const inventoryItem = await (0, helpers_2.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
     res.json({
         id: level.id,
         object: "inventory-level",
@@ -45,4 +49,4 @@ const DELETE = async (req, res) => {
     });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9pbnZlbnRvcnktaXRlbXMvW2lkXS9sb2NhdGlvbi1sZXZlbHMvW2xvY2F0aW9uX2lkXS9yb3V0ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFJQSxxREFHa0M7QUFDbEMscURBRzZCO0FBRzdCLDhDQUFvRjtBQUc3RSxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3ZCLEdBQXVFLEVBQ3ZFLEdBQTBELEVBQzFELEVBQUU7SUFDRixNQUFNLEVBQUUsRUFBRSxFQUFFLFdBQVcsRUFBRSxHQUFHLEdBQUcsQ0FBQyxNQUFNLENBQUE7SUFFdEMsTUFBTSxJQUFBLHFDQUEyQixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUcsR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUFDLENBQUE7SUFFaEYsTUFBTSxJQUFBLDBDQUE2QixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDakQsS0FBSyxFQUFFO1lBQ0wsT0FBTyxFQUFFLENBQUMsRUFBRSxHQUFHLEdBQUcsQ0FBQyxhQUFhLEVBQUUsaUJBQWlCLEVBQUUsRUFBRSxFQUFFLFdBQVcsRUFBRSxDQUFDO1NBQ3hFO0tBQ0YsQ0FBQyxDQUFBO0lBRUYsTUFBTSxhQUFhLEdBQUcsTUFBTSxJQUFBLDhCQUFvQixFQUM5QyxFQUFFLEVBQ0YsR0FBRyxDQUFDLEtBQUssRUFDVCxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU0sQ0FDdkIsQ0FBQTtJQUVELEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxjQUFjLEVBQUUsYUFBYSxFQUFFLENBQUMsQ0FBQTtBQUM3QyxDQUFDLENBQUE7QUFyQlksUUFBQSxJQUFJLFFBcUJoQjtBQUVNLE1BQU0sTUFBTSxHQUFHLEtBQUssRUFDekIsR0FBK0IsRUFDL0IsR0FBaUUsRUFDakUsRUFBRTtJQUNGLE1BQU0sRUFBRSxFQUFFLEVBQUUsV0FBVyxFQUFFLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQTtJQUV0QyxNQUFNLElBQUEscUNBQTJCLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRyxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FBQTtJQUVoRixNQUFNLEtBQUssR0FBRyxHQUFHLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxpQ0FBeUIsQ0FBQyxLQUFLLENBQUMsQ0FBQTtJQUVoRSxNQUFNLEVBQ0osSUFBSSxFQUFFLENBQUMsS0FBSyxDQUFDLEdBQ2QsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDcEIsTUFBTSxFQUFFLGlCQUFpQjtRQUN6QixPQUFPLEVBQUUsRUFBRSxpQkFBaUIsRUFBRSxFQUFFLEVBQUUsV0FBVyxFQUFFO1FBQy9DLE1BQU0sRUFBRSxDQUFDLElBQUksRUFBRSxtQkFBbUIsQ0FBQztLQUNwQyxDQUFDLENBQUE7SUFFRixJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUMzQiw0QkFBNEIsRUFBRSxnQkFBZ0IsV0FBVyxZQUFZLENBQ3RFLENBQUE7SUFDSCxDQUFDO0lBRUQsSUFBSSxLQUFLLENBQUMsaUJBQWlCLEdBQUcsQ0FBQyxFQUFFLENBQUM7UUFDaEMsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLFdBQVcsRUFDN0IsaUNBQWlDLEVBQUUsZ0JBQWdCLFdBQVcsNkNBQTZDLENBQzVHLENBQUE7SUFDSCxDQUFDO0lBRUQsTUFBTSxJQUFBLDBDQUE2QixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDakQsS0FBSyxFQUFFO1lBQ0wsRUFBRSxFQUFFLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztTQUNmO0tBQ0YsQ0FBQyxDQUFBO0lBRUYsTUFBTSxhQUFhLEdBQUcsTUFBTSxJQUFBLDhCQUFvQixFQUM5QyxFQUFFLEVBQ0YsR0FBRyxDQUFDLEtBQUssRUFDVCxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU0sQ0FDdkIsQ0FBQTtJQUVELEdBQUcsQ0FBQyxJQUFJLENBQUM7UUFDUCxFQUFFLEVBQUUsS0FBSyxDQUFDLEVBQUU7UUFDWixNQUFNLEVBQUUsaUJBQWlCO1FBQ3pCLE9BQU8sRUFBRSxJQUFJO1FBQ2IsTUFBTSxFQUFFLGFBQWE7S0FDdEIsQ0FBQyxDQUFBO0FBQ0osQ0FBQyxDQUFBO0FBbERZLFFBQUEsTUFBTSxVQWtEbEIifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/inventory-items/[id]/location-levels/batch/route.js

@@ -2,10 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const core_flows_1 = require("@medusajs/core-flows");
-const helpers_1 = require("../../../helpers");
+const helpers_1 = require("../../../../stock-locations/helpers");
+const helpers_2 = require("../../../helpers");
 const POST = async (req, res) => {
     const { id } = req.params;
-    await (0, helpers_1.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    const sellerId = req.seller_context.seller_id;
+    await (0, helpers_2.validateSellerInventoryItem)(req.scope, sellerId, id);
+    await (0, helpers_1.validateSellerStockLocations)(req.scope, sellerId, [
+        ...(req.validatedBody.create ?? []),
+        ...(req.validatedBody.update ?? []),
+    ].map((level) => level.location_id));
+    await (0, helpers_2.validateSellerInventoryLevels)(req.scope, sellerId, req.validatedBody.delete ?? []);
     const { result } = await (0, core_flows_1.batchInventoryItemLevelsWorkflow)(req.scope).run({
         input: {
             delete: req.validatedBody.delete ?? [],
@@ -27,4 +34,4 @@ const POST = async (req, res) => {
     });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/inventory-items/[id]/location-levels/route.js

@@ -3,10 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const core_flows_1 = require("@medusajs/core-flows");
-const helpers_1 = require("../../helpers");
+const helpers_1 = require("../../../stock-locations/helpers");
+const helpers_2 = require("../../helpers");
 const GET = async (req, res) => {
     const { id } = req.params;
-    await (0, helpers_1.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_2.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const { data: inventory_levels, metadata } = await query.graph({
         entity: "inventory_level",
@@ -24,7 +25,10 @@ const GET = async (req, res) => {
 exports.GET = GET;
 const POST = async (req, res) => {
     const { id } = req.params;
-    await (0, helpers_1.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_2.validateSellerInventoryItem)(req.scope, req.seller_context.seller_id, id);
+    await (0, helpers_1.validateSellerStockLocations)(req.scope, req.seller_context.seller_id, [
+        req.validatedBody.location_id,
+    ]);
     await (0, core_flows_1.createInventoryLevelsWorkflow)(req.scope).run({
         input: {
             inventory_levels: [
@@ -35,8 +39,8 @@ const POST = async (req, res) => {
             ],
         },
     });
-    const inventoryItem = await (0, helpers_1.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
+    const inventoryItem = await (0, helpers_2.refetchInventoryItem)(id, req.scope, req.queryConfig.fields);
     res.json({ inventory_item: inventoryItem });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9pbnZlbnRvcnktaXRlbXMvW2lkXS9sb2NhdGlvbi1sZXZlbHMvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBQ3JFLHFEQUFvRTtBQUdwRSwyQ0FBaUY7QUFNMUUsTUFBTSxHQUFHLEdBQUcsS0FBSyxFQUN0QixHQUEyRSxFQUMzRSxHQUErRCxFQUMvRCxFQUFFO0lBQ0YsTUFBTSxFQUFFLEVBQUUsRUFBRSxHQUFHLEdBQUcsQ0FBQyxNQUFNLENBQUE7SUFFekIsTUFBTSxJQUFBLHFDQUEyQixFQUFDLEdBQUcsQ0FBQyxLQUFLLEVBQUcsR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLEVBQUUsRUFBRSxDQUFDLENBQUE7SUFFaEYsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFFaEUsTUFBTSxFQUFFLElBQUksRUFBRSxnQkFBZ0IsRUFBRSxRQUFRLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDN0QsTUFBTSxFQUFFLGlCQUFpQjtRQUN6QixNQUFNLEVBQUUsR0FBRyxDQUFDLFdBQVcsQ0FBQyxNQUFNO1FBQzlCLE9BQU8sRUFBRSxFQUFFLEdBQUcsR0FBRyxDQUFDLGdCQUFnQixFQUFFLGlCQUFpQixFQUFFLEVBQUUsRUFBRTtRQUMzRCxVQUFVLEVBQUUsR0FBRyxDQUFDLFdBQVcsQ0FBQyxVQUFVO0tBQ3ZDLENBQUMsQ0FBQTtJQUVGLEdBQUcsQ0FBQyxJQUFJLENBQUM7UUFDUCxnQkFBZ0I7UUFDaEIsS0FBSyxFQUFFLFFBQVEsRUFBRSxLQUFLLElBQUksQ0FBQztRQUMzQixNQUFNLEVBQUUsUUFBUSxFQUFFLElBQUksSUFBSSxDQUFDO1FBQzNCLEtBQUssRUFBRSxRQUFRLEVBQUUsSUFBSSxJQUFJLENBQUM7S0FDM0IsQ0FBQyxDQUFBO0FBQ0osQ0FBQyxDQUFBO0FBdkJZLFFBQUEsR0FBRyxPQXVCZjtBQUVNLE1BQU0sSUFBSSxHQUFHLEtBQUssRUFDdkIsR0FBdUUsRUFDdkUsR0FBMEQsRUFDMUQsRUFBRTtJQUNGLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBRXpCLE1BQU0sSUFBQSxxQ0FBMkIsRUFBQyxHQUFHLENBQUMsS0FBSyxFQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FBQyxDQUFBO0lBRWhGLE1BQU0sSUFBQSwwQ0FBNkIsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsR0FBRyxDQUFDO1FBQ2pELEtBQUssRUFBRTtZQUNMLGdCQUFnQixFQUFFO2dCQUNoQjtvQkFDRSxHQUFHLEdBQUcsQ0FBQyxhQUFhO29CQUNwQixpQkFBaUIsRUFBRSxFQUFFO2lCQUN0QjthQUNGO1NBQ0Y7S0FDRixDQUFDLENBQUE7SUFFRixNQUFNLGFBQWEsR0FBRyxNQUFNLElBQUEsOEJBQW9CLEVBQzlDLEVBQUUsRUFDRixHQUFHLENBQUMsS0FBSyxFQUNULEdBQUcsQ0FBQyxXQUFXLENBQUMsTUFBTSxDQUN2QixDQUFBO0lBRUQsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLGNBQWMsRUFBRSxhQUFhLEVBQUUsQ0FBQyxDQUFBO0FBQzdDLENBQUMsQ0FBQTtBQTFCWSxRQUFBLElBQUksUUEwQmhCIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9pbnZlbnRvcnktaXRlbXMvW2lkXS9sb2NhdGlvbi1sZXZlbHMvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBQ3JFLHFEQUFvRTtBQUdwRSw4REFBK0U7QUFDL0UsMkNBQWlGO0FBTTFFLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdEIsR0FBMkUsRUFDM0UsR0FBK0QsRUFDL0QsRUFBRTtJQUNGLE1BQU0sRUFBRSxFQUFFLEVBQUUsR0FBRyxHQUFHLENBQUMsTUFBTSxDQUFBO0lBRXpCLE1BQU0sSUFBQSxxQ0FBMkIsRUFBQyxHQUFHLENBQUMsS0FBSyxFQUFHLEdBQUcsQ0FBQyxjQUFlLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FBQyxDQUFBO0lBRWhGLE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBRWhFLE1BQU0sRUFBRSxJQUFJLEVBQUUsZ0JBQWdCLEVBQUUsUUFBUSxFQUFFLEdBQUcsTUFBTSxLQUFLLENBQUMsS0FBSyxDQUFDO1FBQzdELE1BQU0sRUFBRSxpQkFBaUI7UUFDekIsTUFBTSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsTUFBTTtRQUM5QixPQUFPLEVBQUUsRUFBRSxHQUFHLEdBQUcsQ0FBQyxnQkFBZ0IsRUFBRSxpQkFBaUIsRUFBRSxFQUFFLEVBQUU7UUFDM0QsVUFBVSxFQUFFLEdBQUcsQ0FBQyxXQUFXLENBQUMsVUFBVTtLQUN2QyxDQUFDLENBQUE7SUFFRixHQUFHLENBQUMsSUFBSSxDQUFDO1FBQ1AsZ0JBQWdCO1FBQ2hCLEtBQUssRUFBRSxRQUFRLEVBQUUsS0FBSyxJQUFJLENBQUM7UUFDM0IsTUFBTSxFQUFFLFFBQVEsRUFBRSxJQUFJLElBQUksQ0FBQztRQUMzQixLQUFLLEVBQUUsUUFBUSxFQUFFLElBQUksSUFBSSxDQUFDO0tBQzNCLENBQUMsQ0FBQTtBQUNKLENBQUMsQ0FBQTtBQXZCWSxRQUFBLEdBQUcsT0F1QmY7QUFFTSxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3ZCLEdBQXVFLEVBQ3ZFLEdBQTBELEVBQzFELEVBQUU7SUFDRixNQUFNLEVBQUUsRUFBRSxFQUFFLEdBQUcsR0FBRyxDQUFDLE1BQU0sQ0FBQTtJQUV6QixNQUFNLElBQUEscUNBQTJCLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsRUFBRSxFQUFFLENBQUMsQ0FBQTtJQUMvRSxNQUFNLElBQUEsc0NBQTRCLEVBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsRUFBRTtRQUMzRSxHQUFHLENBQUMsYUFBYSxDQUFDLFdBQVc7S0FDOUIsQ0FBQyxDQUFBO0lBRUYsTUFBTSxJQUFBLDBDQUE2QixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDakQsS0FBSyxFQUFFO1lBQ0wsZ0JBQWdCLEVBQUU7Z0JBQ2hCO29CQUNFLEdBQUcsR0FBRyxDQUFDLGFBQWE7b0JBQ3BCLGlCQUFpQixFQUFFLEVBQUU7aUJBQ3RCO2FBQ0Y7U0FDRjtLQUNGLENBQUMsQ0FBQTtJQUVGLE1BQU0sYUFBYSxHQUFHLE1BQU0sSUFBQSw4QkFBb0IsRUFDOUMsRUFBRSxFQUNGLEdBQUcsQ0FBQyxLQUFLLEVBQ1QsR0FBRyxDQUFDLFdBQVcsQ0FBQyxNQUFNLENBQ3ZCLENBQUE7SUFFRCxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsY0FBYyxFQUFFLGFBQWEsRUFBRSxDQUFDLENBQUE7QUFDN0MsQ0FBQyxDQUFBO0FBN0JZLFFBQUEsSUFBSSxRQTZCaEIifQ==

package/.medusa/server/src/api/vendor/inventory-items/helpers.d.ts

@@ -1,3 +1,5 @@
 import { MedusaContainer } from "@medusajs/framework";
 export declare const refetchInventoryItem: (inventoryItemId: string, scope: MedusaContainer, fields: string[]) => Promise<any>;
+export declare const validateSellerInventoryItems: (scope: MedusaContainer, sellerId: string, inventoryItemIds: string[]) => Promise<void>;
 export declare const validateSellerInventoryItem: (scope: MedusaContainer, sellerId: string, inventoryItemId: string) => Promise<void>;
+export declare const validateSellerInventoryLevels: (scope: MedusaContainer, sellerId: string, inventoryLevelIds: string[]) => Promise<void>;

package/.medusa/server/src/api/vendor/inventory-items/helpers.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateSellerInventoryItem = exports.refetchInventoryItem = void 0;
+exports.validateSellerInventoryLevels = exports.validateSellerInventoryItem = exports.validateSellerInventoryItems = exports.refetchInventoryItem = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const refetchInventoryItem = async (inventoryItemId, scope, fields) => {
     const query = scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
@@ -12,19 +12,46 @@ const refetchInventoryItem = async (inventoryItemId, scope, fields) => {
     return inventoryItem;
 };
 exports.refetchInventoryItem = refetchInventoryItem;
-const validateSellerInventoryItem = async (scope, sellerId, inventoryItemId) => {
+const validateSellerInventoryItems = async (scope, sellerId, inventoryItemIds) => {
+    const ids = Array.from(new Set(inventoryItemIds));
+    if (!ids.length) {
+        return;
+    }
     const query = scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
-    const { data: [sellerInventoryItem], } = await query.graph({
+    const { data: links } = await query.graph({
         entity: "inventory_item_seller",
         filters: {
             seller_id: sellerId,
-            inventory_item_id: inventoryItemId,
+            inventory_item_id: ids,
         },
-        fields: ["seller_id"],
+        fields: ["inventory_item_id"],
     });
-    if (!sellerInventoryItem) {
-        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Inventory item with id: ${inventoryItemId} was not found`);
+    const owned = new Set(links.map((link) => link.inventory_item_id));
+    const missing = ids.find((id) => !owned.has(id));
+    if (missing) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Inventory item with id: ${missing} was not found`);
     }
 };
+exports.validateSellerInventoryItems = validateSellerInventoryItems;
+const validateSellerInventoryItem = (scope, sellerId, inventoryItemId) => (0, exports.validateSellerInventoryItems)(scope, sellerId, [inventoryItemId]);
 exports.validateSellerInventoryItem = validateSellerInventoryItem;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaGVscGVycy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvdmVuZG9yL2ludmVudG9yeS1pdGVtcy9oZWxwZXJzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUNBLHFEQUdrQztBQUUzQixNQUFNLG9CQUFvQixHQUFHLEtBQUssRUFDdkMsZUFBdUIsRUFDdkIsS0FBc0IsRUFDdEIsTUFBZ0IsRUFDaEIsRUFBRTtJQUNGLE1BQU0sS0FBSyxHQUFHLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFFNUQsTUFBTSxFQUNKLElBQUksRUFBRSxDQUFDLGFBQWEsQ0FBQyxHQUN0QixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsZ0JBQWdCO1FBQ3hCLE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxlQUFlLEVBQUU7UUFDaEMsTUFBTTtLQUNQLENBQUMsQ0FBQTtJQUVGLE9BQU8sYUFBYSxDQUFBO0FBQ3RCLENBQUMsQ0FBQTtBQWhCWSxRQUFBLG9CQUFvQix3QkFnQmhDO0FBRU0sTUFBTSwyQkFBMkIsR0FBRyxLQUFLLEVBQzlDLEtBQXNCLEVBQ3RCLFFBQWdCLEVBQ2hCLGVBQXVCLEVBQ3ZCLEVBQUU7SUFDRixNQUFNLEtBQUssR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDLGlDQUF5QixDQUFDLEtBQUssQ0FBQyxDQUFBO0lBRTVELE1BQU0sRUFDSixJQUFJLEVBQUUsQ0FBQyxtQkFBbUIsQ0FBQyxHQUM1QixHQUFHLE1BQU0sS0FBSyxDQUFDLEtBQUssQ0FBQztRQUNwQixNQUFNLEVBQUUsdUJBQXVCO1FBQy9CLE9BQU8sRUFBRTtZQUNQLFNBQVMsRUFBRSxRQUFRO1lBQ25CLGlCQUFpQixFQUFFLGVBQWU7U0FDbkM7UUFDRCxNQUFNLEVBQUUsQ0FBQyxXQUFXLENBQUM7S0FDdEIsQ0FBQyxDQUFBO0lBRUYsSUFBSSxDQUFDLG1CQUFtQixFQUFFLENBQUM7UUFDekIsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLFNBQVMsRUFDM0IsMkJBQTJCLGVBQWUsZ0JBQWdCLENBQzNELENBQUE7SUFDSCxDQUFDO0FBQ0gsQ0FBQyxDQUFBO0FBeEJZLFFBQUEsMkJBQTJCLCtCQXdCdkMifQ==
+const validateSellerInventoryLevels = async (scope, sellerId, inventoryLevelIds) => {
+    const ids = Array.from(new Set(inventoryLevelIds));
+    if (!ids.length) {
+        return;
+    }
+    const query = scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: levels } = await query.graph({
+        entity: "inventory_level",
+        filters: { id: ids },
+        fields: ["id", "inventory_item_id"],
+    });
+    const found = new Set(levels.map((level) => level.id));
+    const missing = ids.find((id) => !found.has(id));
+    if (missing) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, `Inventory level with id: ${missing} was not found`);
+    }
+    await (0, exports.validateSellerInventoryItems)(scope, sellerId, levels.map((level) => level.inventory_item_id));
+};
+exports.validateSellerInventoryLevels = validateSellerInventoryLevels;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/inventory-items/location-levels/batch/route.js

@@ -2,8 +2,15 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const core_flows_1 = require("@medusajs/core-flows");
+const helpers_1 = require("../../../stock-locations/helpers");
+const helpers_2 = require("../../helpers");
 const POST = async (req, res) => {
     const body = req.validatedBody;
+    const sellerId = req.seller_context.seller_id;
+    const levels = [...(body.create ?? []), ...(body.update ?? [])];
+    await (0, helpers_2.validateSellerInventoryItems)(req.scope, sellerId, levels.map((level) => level.inventory_item_id));
+    await (0, helpers_1.validateSellerStockLocations)(req.scope, sellerId, levels.map((level) => level.location_id));
+    await (0, helpers_2.validateSellerInventoryLevels)(req.scope, sellerId, body.delete ?? []);
     const { result } = await (0, core_flows_1.batchInventoryItemLevelsWorkflow)(req.scope).run({
         input: {
             create: body.create ?? [],
@@ -19,4 +26,4 @@ const POST = async (req, res) => {
     });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/members/middlewares.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.vendorMembersMiddlewares = void 0;
 const framework_1 = require("@medusajs/framework");
+const utils_1 = require("../../utils");
 const validators_1 = require("../sellers/validators");
 const validators_2 = require("./validators");
 const retrieveVendorMemberMeQueryConfig = {
@@ -33,6 +34,7 @@ exports.vendorMembersMiddlewares = [
         method: ["GET"],
         matcher: "/vendor/members/me",
         middlewares: [
+            (0, utils_1.restrictVendorFields)(utils_1.VENDOR_CROSS_SELLER_FIELD_SEGMENTS),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetSellerParams, retrieveVendorMemberMeQueryConfig),
         ],
     },
@@ -41,8 +43,9 @@ exports.vendorMembersMiddlewares = [
         matcher: "/vendor/members/me",
         middlewares: [
             (0, framework_1.validateAndTransformBody)(validators_2.VendorUpdateMember),
+            (0, utils_1.restrictVendorFields)(utils_1.VENDOR_CROSS_SELLER_FIELD_SEGMENTS),
             (0, framework_1.validateAndTransformQuery)(validators_1.VendorGetSellerParams, retrieveVendorMemberMeQueryConfig),
         ],
     },
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/middlewares.js

@@ -91,6 +91,7 @@ exports.vendorMiddlewares = [
         matcher: "/vendor/*",
         middlewares: [
             utils_1.vendorCorsMiddleware,
+            (0, utils_1.restrictVendorFields)(utils_1.VENDOR_SELLER_PRIVATE_FIELD_SEGMENTS),
             (0, utils_1.unlessBaseUrl)(resolveSellerlessRoutes, (0, framework_1.authenticate)("member", ["session", "bearer"], {
                 allowUnregistered: false,
             })),
@@ -140,4 +141,4 @@ exports.vendorMiddlewares = [
     ...middlewares_39.vendorUploadsMiddlewares,
     ...middlewares_41.vendorProductTagsMiddlewares,
 ];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/offers/[id]/inventory-items/batch/route.js

@@ -2,17 +2,23 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const offer_1 = require("../../../../../../workflows/offer");
-const helpers_1 = require("../../../helpers");
+const helpers_1 = require("../../../../inventory-items/helpers");
+const helpers_2 = require("../../../helpers");
 const POST = async (req, res) => {
     const { id } = req.params;
-    await (0, helpers_1.validateSellerOffer)(req.scope, req.seller_context.seller_id, id);
+    const sellerId = req.seller_context.seller_id;
+    await (0, helpers_2.validateSellerOffer)(req.scope, sellerId, id);
+    await (0, helpers_1.validateSellerInventoryItems)(req.scope, sellerId, [
+        ...(req.validatedBody.create ?? []),
+        ...(req.validatedBody.update ?? []),
+    ].map((item) => item.inventory_item_id));
     const { result } = await (0, offer_1.batchOfferInventoryItemsWorkflow)(req.scope).run({
         input: {
             offer_id: id,
             ...req.validatedBody,
         },
     });
-    const offer = await (0, helpers_1.refetchOffer)(id, req.scope, req.queryConfig.fields);
+    const offer = await (0, helpers_2.refetchOffer)(id, req.scope, req.queryConfig.fields);
     res.json({
         created: result.created,
         updated: result.updated,
@@ -21,4 +27,4 @@ const POST = async (req, res) => {
     });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/offers/[id]/route.js

@@ -21,6 +21,7 @@ const POST = async (req, res) => {
     await (0, offer_1.updateOffersWorkflow)(req.scope).run({
         input: {
             offers: [{ id, ...update }],
+            updated_by: req.auth_context.actor_id,
             additional_data,
         },
     });
@@ -37,4 +38,4 @@ const DELETE = async (req, res) => {
     res.json({ id, object: "offer", deleted: true });
 };
 exports.DELETE = DELETE;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/offers/batch/route.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.POST = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const offer_1 = require("../../../../workflows/offer");
+const helpers_1 = require("../../stock-locations/helpers");
 const POST = async (req, res) => {
     const sellerId = req.seller_context.seller_id;
     const memberId = req.auth_context.actor_id;
@@ -20,6 +21,7 @@ const POST = async (req, res) => {
         leadtime_to_ship: o.leadtime_to_ship ?? null,
         metadata: o.metadata ?? null,
     }));
+    await (0, helpers_1.validateSellerStockLocations)(req.scope, sellerId, offers.flatMap((offer) => (offer.inventory_items ?? []).flatMap((item) => (item.stock_levels ?? []).map((level) => level.location_id))));
     const { result } = await (0, offer_1.createOffersWorkflow)(req.scope).run({
         input: { offers, additional_data },
     });
@@ -33,4 +35,4 @@ const POST = async (req, res) => {
     res.status(201).json({ offers: refreshed });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9vZmZlcnMvYmF0Y2gvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBR3JFLHVEQUFrRTtBQUczRCxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3ZCLEdBQTRELEVBQzVELEdBQW1CLEVBQ25CLEVBQUU7SUFDRixNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsY0FBZSxDQUFDLFNBQVMsQ0FBQTtJQUM5QyxNQUFNLFFBQVEsR0FBRyxHQUFHLENBQUMsWUFBWSxDQUFDLFFBQVEsQ0FBQTtJQUUxQyxNQUFNLEVBQUUsZUFBZSxFQUFFLEdBQUcsR0FBRyxDQUFDLGFBQWEsQ0FBQTtJQUU3QyxNQUFNLE1BQU0sR0FBcUIsR0FBRyxDQUFDLGFBQWEsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBQ3BFLFNBQVMsRUFBRSxRQUFRO1FBQ25CLFVBQVUsRUFBRSxRQUFRO1FBQ3BCLEdBQUcsRUFBRSxDQUFDLENBQUMsR0FBRztRQUNWLFVBQVUsRUFBRSxDQUFDLENBQUMsVUFBVTtRQUN4QixtQkFBbUIsRUFBRSxDQUFDLENBQUMsbUJBQW1CO1FBQzFDLE1BQU0sRUFBRSxDQUFDLENBQUMsTUFBTTtRQUNoQixlQUFlLEVBQUUsQ0FBQyxDQUFDLGVBQWU7UUFDbEMsR0FBRyxFQUFFLENBQUMsQ0FBQyxHQUFHLElBQUksSUFBSTtRQUNsQixHQUFHLEVBQUUsQ0FBQyxDQUFDLEdBQUcsSUFBSSxJQUFJO1FBQ2xCLGdCQUFnQixFQUFFLENBQUMsQ0FBQyxnQkFBZ0IsSUFBSSxJQUFJO1FBQzVDLFFBQVEsRUFBRSxDQUFDLENBQUMsUUFBUSxJQUFJLElBQUk7S0FDN0IsQ0FBQyxDQUFDLENBQUE7SUFFSCxNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxJQUFBLDRCQUFvQixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDM0QsS0FBSyxFQUFFLEVBQUUsTUFBTSxFQUFFLGVBQWUsRUFBRTtLQUNuQyxDQUFDLENBQUE7SUFFRixNQUFNLFFBQVEsR0FBRyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUE7SUFDeEMsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDNUMsTUFBTSxFQUFFLE9BQU87UUFDZixPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsUUFBUSxFQUFFO1FBQ3pCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07S0FDL0IsQ0FBQyxDQUFBO0lBRUYsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLENBQUMsRUFBRSxNQUFNLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQTtBQUM3QyxDQUFDLENBQUE7QUFwQ1ksUUFBQSxJQUFJLFFBb0NoQiJ9
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL3ZlbmRvci9vZmZlcnMvYmF0Y2gvcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEscURBQXFFO0FBR3JFLHVEQUFrRTtBQUNsRSwyREFBNEU7QUFHckUsTUFBTSxJQUFJLEdBQUcsS0FBSyxFQUN2QixHQUE0RCxFQUM1RCxHQUFtQixFQUNuQixFQUFFO0lBQ0YsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLGNBQWUsQ0FBQyxTQUFTLENBQUE7SUFDOUMsTUFBTSxRQUFRLEdBQUcsR0FBRyxDQUFDLFlBQVksQ0FBQyxRQUFRLENBQUE7SUFFMUMsTUFBTSxFQUFFLGVBQWUsRUFBRSxHQUFHLEdBQUcsQ0FBQyxhQUFhLENBQUE7SUFFN0MsTUFBTSxNQUFNLEdBQXFCLEdBQUcsQ0FBQyxhQUFhLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUNwRSxTQUFTLEVBQUUsUUFBUTtRQUNuQixVQUFVLEVBQUUsUUFBUTtRQUNwQixHQUFHLEVBQUUsQ0FBQyxDQUFDLEdBQUc7UUFDVixVQUFVLEVBQUUsQ0FBQyxDQUFDLFVBQVU7UUFDeEIsbUJBQW1CLEVBQUUsQ0FBQyxDQUFDLG1CQUFtQjtRQUMxQyxNQUFNLEVBQUUsQ0FBQyxDQUFDLE1BQU07UUFDaEIsZUFBZSxFQUFFLENBQUMsQ0FBQyxlQUFlO1FBQ2xDLEdBQUcsRUFBRSxDQUFDLENBQUMsR0FBRyxJQUFJLElBQUk7UUFDbEIsR0FBRyxFQUFFLENBQUMsQ0FBQyxHQUFHLElBQUksSUFBSTtRQUNsQixnQkFBZ0IsRUFBRSxDQUFDLENBQUMsZ0JBQWdCLElBQUksSUFBSTtRQUM1QyxRQUFRLEVBQUUsQ0FBQyxDQUFDLFFBQVEsSUFBSSxJQUFJO0tBQzdCLENBQUMsQ0FBQyxDQUFBO0lBRUgsTUFBTSxJQUFBLHNDQUE0QixFQUNoQyxHQUFHLENBQUMsS0FBSyxFQUNULFFBQVEsRUFDUixNQUFNLENBQUMsT0FBTyxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FDdkIsQ0FBQyxLQUFLLENBQUMsZUFBZSxJQUFJLEVBQUUsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQzdDLENBQUMsSUFBSSxDQUFDLFlBQVksSUFBSSxFQUFFLENBQUMsQ0FBQyxHQUFHLENBQUMsQ0FBQyxLQUFLLEVBQUUsRUFBRSxDQUFDLEtBQUssQ0FBQyxXQUFXLENBQUMsQ0FDNUQsQ0FDRixDQUNGLENBQUE7SUFFRCxNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxJQUFBLDRCQUFvQixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDM0QsS0FBSyxFQUFFLEVBQUUsTUFBTSxFQUFFLGVBQWUsRUFBRTtLQUNuQyxDQUFDLENBQUE7SUFFRixNQUFNLFFBQVEsR0FBRyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUE7SUFDeEMsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsaUNBQXlCLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDaEUsTUFBTSxFQUFFLElBQUksRUFBRSxTQUFTLEVBQUUsR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDNUMsTUFBTSxFQUFFLE9BQU87UUFDZixPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsUUFBUSxFQUFFO1FBQ3pCLE1BQU0sRUFBRSxHQUFHLENBQUMsV0FBVyxDQUFDLE1BQU07S0FDL0IsQ0FBQyxDQUFBO0lBRUYsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLENBQUMsRUFBRSxNQUFNLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FBQTtBQUM3QyxDQUFDLENBQUE7QUE5Q1ksUUFBQSxJQUFJLFFBOENoQiJ9

package/.medusa/server/src/api/vendor/offers/route.js

@@ -4,6 +4,7 @@ exports.POST = exports.GET = void 0;
 const utils_1 = require("@medusajs/framework/utils");
 const offer_1 = require("../../../workflows/offer");
 const helpers_1 = require("./helpers");
+const helpers_2 = require("../stock-locations/helpers");
 const GET = async (req, res) => {
     const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
     const { data: offers, metadata } = await query.graph({
@@ -24,6 +25,7 @@ const POST = async (req, res) => {
     const sellerId = req.seller_context.seller_id;
     const memberId = req.auth_context.actor_id;
     const { additional_data, ...offerData } = req.validatedBody;
+    await (0, helpers_2.validateSellerStockLocations)(req.scope, sellerId, offerData.inventory_items.flatMap((item) => (item.stock_levels ?? []).map((level) => level.location_id)));
     const { result } = await (0, offer_1.createOffersWorkflow)(req.scope).run({
         input: {
             offers: [
@@ -40,4 +42,4 @@ const POST = async (req, res) => {
     res.status(201).json({ offer });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/payments/[id]/capture/route.js

@@ -6,7 +6,9 @@ const helpers_1 = require("../../helpers");
 const POST = async (req, res) => {
     const sellerId = req.seller_context.seller_id;
     const { id } = req.params;
-    await (0, helpers_1.validateSellerPayment)(req.scope, sellerId, id);
+    await (0, helpers_1.validateSellerPayment)(req.scope, sellerId, id, {
+        requireAllOrders: true,
+    });
     await (0, core_flows_1.capturePaymentWorkflow)(req.scope).run({
         input: {
             payment_id: id,
@@ -18,4 +20,4 @@ const POST = async (req, res) => {
     res.status(200).json({ payment });
 };
 exports.POST = POST;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/vendor/payments/helpers.d.ts

@@ -1,3 +1,5 @@
 import { MedusaContainer } from "@medusajs/framework/types";
 export declare const refetchPayment: (scope: MedusaContainer, paymentId: string, fields: string[]) => Promise<any>;
-export declare const validateSellerPayment: (scope: MedusaContainer, sellerId: string, paymentId: string) => Promise<void>;
+export declare const validateSellerPayment: (scope: MedusaContainer, sellerId: string, paymentId: string, options?: {
+    requireAllOrders?: boolean;
+}) => Promise<void>;