@rovela-ai/sdk 0.4.1 → 0.4.2

package/dist/admin/api/products-stats.js

@@ -0,0 +1,43 @@
+/**
+ * @rovela/sdk/admin/api/products-stats
+ *
+ * Aggregate metrics for the admin product list page.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/stats/route.ts
+ * export { GET } from '@rovela-ai/sdk/admin/api/products-stats'
+ * ```
+ *
+ * Returns: { activeCount, outOfStockCount, bestSeller }
+ *
+ * Pattern mirrors `admin/api/stats.ts` — three helpers in parallel via
+ * `Promise.all`. Single round-trip for the three metric cards.
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { getActiveProductCount, getOutOfStockProductCount, getBestSellerProduct, } from '../../core/db/queries';
+// =============================================================================
+// Handler
+// =============================================================================
+export async function GET(_request) {
+    const guard = await requireAdmin({ permission: 'products.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const [activeCount, outOfStockCount, bestSeller] = await Promise.all([
+            getActiveProductCount(),
+            getOutOfStockProductCount(),
+            getBestSellerProduct(30),
+        ]);
+        return NextResponse.json({
+            data: { activeCount, outOfStockCount, bestSeller },
+        });
+    }
+    catch (error) {
+        console.error('[Admin Products Stats API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch product metrics', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+//# sourceMappingURL=products-stats.js.map

package/dist/admin/api/products-stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"products-stats.js","sourceRoot":"","sources":["../../../src/admin/api/products-stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAqB9B,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,QAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAA;IACjE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnE,qBAAqB,EAAE;YACvB,yBAAyB,EAAE;YAC3B,oBAAoB,CAAC,EAAE,CAAC;SACzB,CAAC,CAAA;QAEF,OAAO,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE;SACnD,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,YAAY,CAAC,IAAI,CACtB,EAAE,KAAK,EAAE,iCAAiC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACpE,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/admin/api/products.d.ts

@@ -0,0 +1,104 @@
+/**
+ * @rovela/sdk/admin/api/products
+ *
+ * API route handlers for admin product management.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/route.ts
+ * export { GET, POST } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/products/[id]/route.ts
+ * export { GET as getProduct, PUT, DELETE } from '@rovela/sdk/admin/api/products'
+ * ```
+ */
+import { NextRequest, NextResponse } from 'next/server';
+import type { AdminApiError, PaginatedResponse, CrudResult } from '../types';
+/**
+ * GET /api/admin/products
+ *
+ * List products with filtering, sorting, and pagination.
+ *
+ * Query Parameters:
+ * - search: string - Search by name
+ * - category: string - Filter by category ID
+ * - status: 'draft' | 'active' | 'archived'
+ * - sort: 'newest' | 'price-asc' | 'price-desc' | 'name'
+ * - page: number (default 1)
+ * - limit: number (default 20, max 100)
+ */
+export declare function GET(request: NextRequest): Promise<NextResponse<PaginatedResponse<unknown> | AdminApiError>>;
+/**
+ * POST /api/admin/products
+ *
+ * Create a new product.
+ */
+export declare function POST(request: NextRequest): Promise<NextResponse<CrudResult<unknown> | AdminApiError>>;
+/**
+ * GET /api/admin/products/[id]
+ *
+ * Get a single product by ID with variants.
+ */
+export declare function getProduct(_request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<{
+    data: unknown;
+} | AdminApiError>>;
+/**
+ * PUT /api/admin/products/[id]
+ *
+ * Update a product by ID.
+ * Also syncs variants if provided: creates new, updates existing, deletes removed.
+ */
+export declare function PUT(request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<CrudResult<unknown> | AdminApiError>>;
+/**
+ * DELETE /api/admin/products/[id]
+ *
+ * Delete a product by ID.
+ */
+export declare function DELETE(_request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<{
+    success: boolean;
+} | AdminApiError>>;
+/**
+ * POST /api/admin/products/[id]/variants
+ *
+ * Add a variant to a product.
+ */
+export declare function addVariant(request: NextRequest, { params }: {
+    params: Promise<{
+        id: string;
+    }>;
+}): Promise<NextResponse<CrudResult<unknown> | AdminApiError>>;
+/**
+ * PUT /api/admin/products/variants/[variantId]
+ *
+ * Update a variant.
+ */
+export declare function updateVariantHandler(request: NextRequest, { params }: {
+    params: Promise<{
+        variantId: string;
+    }>;
+}): Promise<NextResponse<CrudResult<unknown> | AdminApiError>>;
+/**
+ * DELETE /api/admin/products/variants/[variantId]
+ *
+ * Delete a variant.
+ */
+export declare function deleteVariantHandler(_request: NextRequest, { params }: {
+    params: Promise<{
+        variantId: string;
+    }>;
+}): Promise<NextResponse<{
+    success: boolean;
+} | AdminApiError>>;
+//# sourceMappingURL=products.d.ts.map

package/dist/admin/api/products.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.d.ts","sourceRoot":"","sources":["../../../src/admin/api/products.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAkCvD,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAM5E;;;;;;;;;;;;GAYG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CA4EnE;AAED;;;;GAIG;AACH,wBAAsB,IAAI,CACxB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAyF5D;AAMD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,WAAW,EACrB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CA+B1D;AAED;;;;;GAKG;AACH,wBAAsB,GAAG,CACvB,OAAO,EAAE,WAAW,EACpB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAmH5D;AAED;;;;GAIG;AACH,wBAAsB,MAAM,CAC1B,QAAQ,EAAE,WAAW,EACrB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CA0B7D;AAMD;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,WAAW,EACpB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9C,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAkD5D;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,WAAW,EACpB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GACrD,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAmC5D;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,WAAW,EACrB,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GACrD,OAAO,CAAC,YAAY,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,CAAC,CA4B7D"}

package/dist/admin/api/products.js

@@ -0,0 +1,491 @@
+/**
+ * @rovela/sdk/admin/api/products
+ *
+ * API route handlers for admin product management.
+ *
+ * Usage:
+ * ```typescript
+ * // app/api/admin/products/route.ts
+ * export { GET, POST } from '@rovela/sdk/admin/api/products'
+ *
+ * // app/api/admin/products/[id]/route.ts
+ * export { GET as getProduct, PUT, DELETE } from '@rovela/sdk/admin/api/products'
+ * ```
+ */
+import { NextResponse } from 'next/server';
+import { requireAdmin } from '../server/admin-session';
+import { findProducts, findProductById, findProductVariants, countProducts, createProduct, updateProduct, deleteProduct, createProductVariant, updateProductVariant, deleteProductVariant, getInventoryByProductIds, setOnboardingFlag, } from '../../core/db/queries';
+// =============================================================================
+// Setup-guide writeback (fire-and-forget)
+// =============================================================================
+/**
+ * Mark "Add or edit your first product" as complete in the setup guide.
+ *
+ * Fires after any successful product create or update from the admin API.
+ * Wrapped to never block the parent operation — onboarding flag failures
+ * are logged but don't surface as 5xx to the caller.
+ */
+function touchFirstProduct() {
+    setOnboardingFlag('firstProductTouched', true).catch((err) => {
+        console.error('[Admin Products API] onboarding writeback failed:', err);
+    });
+}
+import { generateSlug } from '../../core/utils';
+// =============================================================================
+// List Products
+// =============================================================================
+/**
+ * GET /api/admin/products
+ *
+ * List products with filtering, sorting, and pagination.
+ *
+ * Query Parameters:
+ * - search: string - Search by name
+ * - category: string - Filter by category ID
+ * - status: 'draft' | 'active' | 'archived'
+ * - sort: 'newest' | 'price-asc' | 'price-desc' | 'name'
+ * - page: number (default 1)
+ * - limit: number (default 20, max 100)
+ */
+export async function GET(request) {
+    // Listing products is available to every authenticated admin role.
+    const guard = await requireAdmin({ permission: 'products.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const searchParams = request.nextUrl.searchParams;
+        // Parse pagination
+        const page = Math.max(1, parseInt(searchParams.get('page') || '1', 10));
+        const limit = Math.min(100, Math.max(1, parseInt(searchParams.get('limit') || '20', 10)));
+        const offset = (page - 1) * limit;
+        // Parse filters
+        const search = searchParams.get('search') || undefined;
+        const categoryId = searchParams.get('category') || undefined;
+        const status = parseStatus(searchParams.get('status'));
+        const sort = parseSort(searchParams.get('sort'));
+        const outOfStock = searchParams.get('outOfStock') === 'true';
+        // Execute queries — list + count, filters in lockstep
+        const [products, total] = await Promise.all([
+            findProducts({ search, categoryId, status, sort, limit, offset, outOfStock }),
+            countProducts({ search, categoryId, status, outOfStock }),
+        ]);
+        // Compute effective inventory for variant products in a single follow-up
+        // query (one SELECT … GROUP BY for the page's variant products). For
+        // non-variant products the row's `inventory` column is already correct.
+        const variantProductIds = products
+            .filter((p) => p.hasVariants)
+            .map((p) => p.id);
+        const variantInventoryMap = variantProductIds.length > 0
+            ? await getInventoryByProductIds(variantProductIds)
+            : new Map();
+        const productsWithEffectiveInventory = products.map((p) => {
+            let effectiveInventory;
+            if (p.hasVariants) {
+                const variantSum = variantInventoryMap.get(p.id);
+                // Phantom-variant fallback: if `hasVariants=true` but no variants
+                // currently exist (last variant deleted, or a creation-flow race),
+                // the variant SUM query returns no row → map.get() is undefined.
+                // Fall back to the parent's own inventory column instead of
+                // misleading the merchant with "Out (red)" when they just saved
+                // an inventory value. Verified via Neon seed test:
+                //   - has_variants=true, parent_inv=10, no variant rows
+                //   - before fix: rendered "Out (red)"
+                //   - after fix:  renders 10
+                effectiveInventory = variantSum ?? p.inventory ?? 0;
+            }
+            else {
+                effectiveInventory = p.inventory ?? 0;
+            }
+            return { ...p, effectiveInventory };
+        });
+        return NextResponse.json({
+            data: productsWithEffectiveInventory,
+            total,
+            page,
+            pageSize: limit,
+            hasMore: offset + products.length < total,
+        });
+    }
+    catch (error) {
+        console.error('[Admin Products API] GET error:', error);
+        return NextResponse.json({ error: 'Failed to fetch products', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * POST /api/admin/products
+ *
+ * Create a new product.
+ */
+export async function POST(request) {
+    // Creating a product is a write op — managers and above.
+    const guard = await requireAdmin({ permission: 'products.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const body = await request.json();
+        // Validate required fields
+        if (!body.name || typeof body.name !== 'string') {
+            return NextResponse.json({ error: 'Product name is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        if (body.price === undefined || typeof body.price !== 'number') {
+            return NextResponse.json({ error: 'Product price is required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        // Generate slug if not provided
+        const slug = body.slug || generateSlug(body.name);
+        // Create product
+        const product = await createProduct({
+            name: body.name,
+            slug,
+            description: body.description || '',
+            price: body.price.toFixed(2),
+            comparePrice: body.comparePrice ? body.comparePrice.toFixed(2) : null,
+            images: body.images || [],
+            status: body.status || 'draft',
+            categoryId: body.categoryId || null,
+            hasVariants: body.hasVariants || false,
+            // Inventory (for non-variant products)
+            sku: body.sku || null,
+            inventory: body.inventory ?? 0,
+            trackInventory: body.trackInventory ?? true,
+            continueSellingWhenOutOfStock: body.continueSellingWhenOutOfStock ?? false,
+            // Organization
+            productType: body.productType || null,
+            vendor: body.vendor || null,
+            tags: body.tags || [],
+            // SEO
+            metaTitle: body.metaTitle || null,
+            metaDescription: body.metaDescription || null,
+            metaKeywords: body.metaKeywords || [],
+        });
+        // Create variants if provided
+        if (body.variants && Array.isArray(body.variants)) {
+            for (const variant of body.variants) {
+                await createProductVariant({
+                    productId: product.id,
+                    sku: variant.sku,
+                    name: variant.name,
+                    price: variant.price ? variant.price.toFixed(2) : null,
+                    inventory: variant.inventory || 0,
+                    image: variant.image || null,
+                    attributes: variant.attributes || {},
+                });
+            }
+        }
+        // Setup-guide: any product create counts as "first product touched"
+        touchFirstProduct();
+        return NextResponse.json({ success: true, data: product }, { status: 201 });
+    }
+    catch (error) {
+        console.error('[Admin Products API] POST error:', error);
+        // Handle unique constraint violation
+        if (error?.code === '23505') {
+            return NextResponse.json({ error: 'A product with this slug already exists', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        return NextResponse.json({ error: 'Failed to create product', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Single Product Operations
+// =============================================================================
+/**
+ * GET /api/admin/products/[id]
+ *
+ * Get a single product by ID with variants.
+ */
+export async function getProduct(_request, { params }) {
+    // Reading a product — every admin role.
+    const guard = await requireAdmin({ permission: 'products.read' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const product = await findProductById(id);
+        if (!product) {
+            return NextResponse.json({ error: 'Product not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Get variants
+        const variants = await findProductVariants(product.id);
+        return NextResponse.json({
+            data: { ...product, variants },
+        });
+    }
+    catch (error) {
+        console.error('[Admin Products API] getProduct error:', error);
+        return NextResponse.json({ error: 'Failed to fetch product', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * PUT /api/admin/products/[id]
+ *
+ * Update a product by ID.
+ * Also syncs variants if provided: creates new, updates existing, deletes removed.
+ */
+export async function PUT(request, { params }) {
+    // Update covers edit-in-place AND archive-via-status AND bulk variant sync.
+    // Managers are intentionally allowed to do all three.
+    const guard = await requireAdmin({ permission: 'products.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const body = await request.json();
+        // Check product exists
+        const existing = await findProductById(id);
+        if (!existing) {
+            return NextResponse.json({ error: 'Product not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Build update data
+        const updateData = {};
+        if (body.name !== undefined)
+            updateData.name = body.name;
+        if (body.slug !== undefined)
+            updateData.slug = body.slug;
+        if (body.description !== undefined)
+            updateData.description = body.description;
+        if (body.price !== undefined)
+            updateData.price = body.price.toFixed(2);
+        if (body.comparePrice !== undefined) {
+            updateData.comparePrice = body.comparePrice ? body.comparePrice.toFixed(2) : null;
+        }
+        if (body.images !== undefined)
+            updateData.images = body.images;
+        if (body.status !== undefined)
+            updateData.status = body.status;
+        if (body.categoryId !== undefined)
+            updateData.categoryId = body.categoryId || null;
+        if (body.hasVariants !== undefined)
+            updateData.hasVariants = body.hasVariants;
+        // Inventory (for non-variant products)
+        if (body.sku !== undefined)
+            updateData.sku = body.sku || null;
+        if (body.inventory !== undefined)
+            updateData.inventory = body.inventory;
+        if (body.trackInventory !== undefined)
+            updateData.trackInventory = body.trackInventory;
+        if (body.continueSellingWhenOutOfStock !== undefined)
+            updateData.continueSellingWhenOutOfStock = body.continueSellingWhenOutOfStock;
+        // Organization
+        if (body.productType !== undefined)
+            updateData.productType = body.productType || null;
+        if (body.vendor !== undefined)
+            updateData.vendor = body.vendor || null;
+        if (body.tags !== undefined)
+            updateData.tags = body.tags || [];
+        // SEO
+        if (body.metaTitle !== undefined)
+            updateData.metaTitle = body.metaTitle || null;
+        if (body.metaDescription !== undefined)
+            updateData.metaDescription = body.metaDescription || null;
+        if (body.metaKeywords !== undefined)
+            updateData.metaKeywords = body.metaKeywords || [];
+        await updateProduct(id, updateData);
+        // Sync variants if provided
+        if (body.variants && Array.isArray(body.variants)) {
+            const existingVariants = await findProductVariants(id);
+            const existingIds = new Set(existingVariants.map((v) => v.id));
+            const incomingIds = new Set();
+            for (const variant of body.variants) {
+                if (variant.id && existingIds.has(variant.id)) {
+                    // Update existing variant
+                    incomingIds.add(variant.id);
+                    await updateProductVariant(variant.id, {
+                        sku: variant.sku,
+                        name: variant.name,
+                        price: variant.price !== undefined && variant.price !== null
+                            ? variant.price.toFixed(2)
+                            : null,
+                        inventory: variant.inventory || 0,
+                        image: variant.image || null,
+                        attributes: variant.attributes || {},
+                    });
+                }
+                else {
+                    // Create new variant (no id or id not in existing)
+                    await createProductVariant({
+                        productId: id,
+                        sku: variant.sku,
+                        name: variant.name,
+                        price: variant.price !== undefined && variant.price !== null
+                            ? variant.price.toFixed(2)
+                            : null,
+                        inventory: variant.inventory || 0,
+                        image: variant.image || null,
+                        attributes: variant.attributes || {},
+                    });
+                }
+            }
+            // Delete variants that are no longer in the list
+            for (const existingVariant of existingVariants) {
+                if (!incomingIds.has(existingVariant.id)) {
+                    await deleteProductVariant(existingVariant.id);
+                }
+            }
+        }
+        // Fetch updated product with variants
+        const updatedProduct = await findProductById(id);
+        const variants = await findProductVariants(id);
+        // Setup-guide: any successful edit counts as "first product touched"
+        // (covers the case where the AI seeded one product and the merchant
+        // edited it instead of creating a new one).
+        touchFirstProduct();
+        return NextResponse.json({
+            success: true,
+            data: { ...updatedProduct, variants },
+        });
+    }
+    catch (error) {
+        console.error('[Admin Products API] PUT error:', error);
+        return NextResponse.json({ error: 'Failed to update product', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * DELETE /api/admin/products/[id]
+ *
+ * Delete a product by ID.
+ */
+export async function DELETE(_request, { params }) {
+    // Hard-deleting a product row — owner and administrator only.
+    const guard = await requireAdmin({ permission: 'products.delete' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const deleted = await deleteProduct(id);
+        if (!deleted) {
+            return NextResponse.json({ error: 'Product not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        return NextResponse.json({ success: true });
+    }
+    catch (error) {
+        console.error('[Admin Products API] DELETE error:', error);
+        return NextResponse.json({ error: 'Failed to delete product', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Variant Operations
+// =============================================================================
+/**
+ * POST /api/admin/products/[id]/variants
+ *
+ * Add a variant to a product.
+ */
+export async function addVariant(request, { params }) {
+    // Variants are sub-resources of a product — same write permission.
+    const guard = await requireAdmin({ permission: 'products.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { id } = await params;
+        const body = await request.json();
+        // Check product exists
+        const product = await findProductById(id);
+        if (!product) {
+            return NextResponse.json({ error: 'Product not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        // Validate required fields
+        if (!body.sku || !body.name) {
+            return NextResponse.json({ error: 'SKU and name are required', code: 'VALIDATION_ERROR' }, { status: 400 });
+        }
+        const variant = await createProductVariant({
+            productId: id,
+            sku: body.sku,
+            name: body.name,
+            price: body.price ? body.price.toFixed(2) : null,
+            inventory: body.inventory || 0,
+            attributes: body.attributes || {},
+        });
+        // Mark product as having variants if not already
+        if (!product.hasVariants) {
+            await updateProduct(id, { hasVariants: true });
+        }
+        return NextResponse.json({ success: true, data: variant }, { status: 201 });
+    }
+    catch (error) {
+        console.error('[Admin Products API] addVariant error:', error);
+        return NextResponse.json({ error: 'Failed to create variant', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * PUT /api/admin/products/variants/[variantId]
+ *
+ * Update a variant.
+ */
+export async function updateVariantHandler(request, { params }) {
+    // Variant updates are product writes.
+    const guard = await requireAdmin({ permission: 'products.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { variantId } = await params;
+        const body = await request.json();
+        const updateData = {};
+        if (body.sku !== undefined)
+            updateData.sku = body.sku;
+        if (body.name !== undefined)
+            updateData.name = body.name;
+        if (body.price !== undefined)
+            updateData.price = body.price ? body.price.toFixed(2) : null;
+        if (body.inventory !== undefined)
+            updateData.inventory = body.inventory;
+        if (body.attributes !== undefined)
+            updateData.attributes = body.attributes;
+        const variant = await updateProductVariant(variantId, updateData);
+        if (!variant) {
+            return NextResponse.json({ error: 'Variant not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        return NextResponse.json({ success: true, data: variant });
+    }
+    catch (error) {
+        console.error('[Admin Products API] updateVariant error:', error);
+        return NextResponse.json({ error: 'Failed to update variant', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+/**
+ * DELETE /api/admin/products/variants/[variantId]
+ *
+ * Delete a variant.
+ */
+export async function deleteVariantHandler(_request, { params }) {
+    // Variant deletion gates on `products.write` (not delete) so it matches the
+    // bulk variant sync in PUT `/api/admin/products/[id]`, which also removes
+    // variants as part of an edit. Product row hard-delete is still owner-only.
+    const guard = await requireAdmin({ permission: 'products.write' });
+    if (!guard.ok) {
+        return guard.response;
+    }
+    try {
+        const { variantId } = await params;
+        const deleted = await deleteProductVariant(variantId);
+        if (!deleted) {
+            return NextResponse.json({ error: 'Variant not found', code: 'NOT_FOUND' }, { status: 404 });
+        }
+        return NextResponse.json({ success: true });
+    }
+    catch (error) {
+        console.error('[Admin Products API] deleteVariant error:', error);
+        return NextResponse.json({ error: 'Failed to delete variant', code: 'INTERNAL_ERROR' }, { status: 500 });
+    }
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+function parseStatus(value) {
+    if (value === 'draft' || value === 'active' || value === 'archived') {
+        return value;
+    }
+    return undefined;
+}
+function parseSort(value) {
+    if (value === 'newest' || value === 'price-asc' || value === 'price-desc' || value === 'name') {
+        return value;
+    }
+    return 'newest';
+}
+//# sourceMappingURL=products.js.map