multiple images in the edit product

muiltiple images in carousel
upload picture now working well
2026-06-22 18:20:50 +02:00 · 2026-06-22 17:40:55 +02:00 · 2026-06-22 16:56:14 +02:00 · 2026-06-22 16:48:28 +02:00 · 2026-06-22 16:21:52 +02:00 · 2026-06-22 16:14:04 +02:00
55 changed files with 1570 additions and 684 deletions
--- a/assets/i18n/en/main.ftl
+++ b/assets/i18n/en/main.ftl
@@ -209,6 +209,14 @@ product = Product
 name = Name
 price = Price
 sale-price = Sale price
+variants-options = Variants / options
+add-option = Add option
+option-label = Option label
+optional = optional
+stock-untracked-hint = Leave blank = available without stock tracking
+available = Available
+choose-option = Choose an option
+from-price = from { $price }
 admin-discounts = Discounts
 admin-discounts-desc = Set discounted product prices. A discount shows up as a sale in the shop.
 business-discount-desc = A baseline discount for all business accounts (off the regular price). Profiles and negotiated prices apply on top (lowest price wins).
@@ -277,6 +285,10 @@ currency = Currency
 category = Category
 no-category = No category
 image = Image
+images = Images
+main-image = Main
+gallery-hint = The first image is the main one. Drag to reorder, click ✕ to remove.
+add-images = Add images
 slug = URL slug
 slug-auto = generated automatically
 position = Position
--- a/assets/i18n/sk/main.ftl
+++ b/assets/i18n/sk/main.ftl
@@ -209,6 +209,14 @@ product = Produkt
 name = Názov
 price = Cena
 sale-price = Zľavnená cena
+variants-options = Varianty / možnosti
+add-option = Pridať možnosť
+option-label = Označenie možnosti
+optional = voliteľné
+stock-untracked-hint = Nechajte prázdne = dostupné bez sledovania zásob
+available = Dostupné
+choose-option = Vyberte možnosť
+from-price = od { $price }
 admin-discounts = Zľavy
 admin-discounts-desc = Nastavte zľavnené ceny produktov. Zľava sa v obchode zobrazí ako akcia.
 business-discount-desc = Základná zľava pre všetky firemné účty (z bežnej ceny). Profily a dohodnuté ceny sa uplatnia navyše (platí najnižšia cena).
@@ -277,6 +285,10 @@ currency = Mena
 category = Kategória
 no-category = Bez kategórie
 image = Obrázok
+images = Obrázky
+main-image = Hlavný
+gallery-hint = Prvý obrázok je hlavný. Potiahnutím zmeníte poradie, krížikom obrázok odstránite.
+add-images = Pridať obrázky
 slug = URL adresa
 slug-auto = vygeneruje sa automaticky
 position = Poradie
--- a/assets/static/css/app.css
+++ b/assets/static/css/app.css
--- a/assets/views/account/order_detail.html
+++ b/assets/views/account/order_detail.html
@@ -29,7 +29,7 @@
    <ul class="space-y-2 pb-3 text-sm">
      {% for item in items %}
      <li class="flex justify-between gap-2">
-        <span class="text-on-surface/80 dark:text-on-surface-dark/80">{{ item.product_name }} × {{ item.quantity }}</span>
+        <span class="text-on-surface/80 dark:text-on-surface-dark/80">{{ item.product_name }}{% if item.variant_label %} · {{ item.variant_label }}{% endif %} × {{ item.quantity }}</span>
        <span class="tabular-nums">{{ item.line_total }} {{ order.currency }}</span>
      </li>
      {% endfor %}
--- a/assets/views/admin/catalog/product_form.html
+++ b/assets/views/admin/catalog/product_form.html
@@ -18,38 +18,95 @@
  {{ ui::csrf_field() }}

  {% if product %}
-    {% set v_name = product.name %}{% set v_price = product.price %}{% set v_currency = product.currency %}{% set v_stock = product.stock %}{% set v_sku = product.sku | default(value="") %}{% set v_desc = product.description | default(value="") %}{% set v_pub = product.published %}
+    {% set v_name = product.name %}{% set v_currency = product.currency %}{% set v_desc = product.description | default(value="") %}{% set v_pub = product.published %}
  {% else %}
-    {% set v_name = "" %}{% set v_price = "" %}{% set v_currency = "EUR" %}{% set v_stock = 0 %}{% set v_sku = "" %}{% set v_desc = "" %}{% set v_pub = false %}
+    {% set v_name = "" %}{% set v_currency = "EUR" %}{% set v_desc = "" %}{% set v_pub = false %}
  {% endif %}
+  {% set inp = "w-full rounded-radius border border-outline bg-surface-alt px-3 py-2 text-sm text-on-surface focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary dark:border-outline-dark dark:bg-surface-dark-alt/50 dark:text-on-surface-dark dark:focus-visible:outline-primary-dark" %}
+  {% set sublabel = "text-xs font-medium text-on-surface/70 dark:text-on-surface-dark/70" %}

  <div class="space-y-1.5">
    <label for="name" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="name", lang=lang | default(value='sk')) }}</label>
    {{ ui::input(name="name", id="name", required=true, value=v_name) }}
  </div>

-  <div class="grid gap-5 sm:grid-cols-2">
-    <div class="space-y-1.5">
-      <label for="price" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="price", lang=lang | default(value='sk')) }}</label>
-      {{ ui::input(name="price", id="price", required=true, value=v_price, placeholder="0.00", attrs='inputmode="decimal"') }}
-    </div>
-    <div class="space-y-1.5">
-      <label for="currency" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="currency", lang=lang | default(value='sk')) }}</label>
-      {{ ui::input(name="currency", id="currency", value=v_currency, attrs='maxlength="3"', extra="uppercase") }}
-    </div>
+  <div class="space-y-1.5 sm:max-w-[10rem]">
+    <label for="currency" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="currency", lang=lang | default(value='sk')) }}</label>
+    {{ ui::input(name="currency", id="currency", value=v_currency, attrs='maxlength="3"', extra="uppercase") }}
  </div>

-  <div class="grid gap-5 sm:grid-cols-2">
-    <div class="space-y-1.5">
-      <label for="stock" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="stock", lang=lang | default(value='sk')) }}</label>
-      {{ ui::input(name="stock", id="stock", type="number", value=v_stock, attrs='min="0"') }}
-    </div>
-    <div class="space-y-1.5">
-      <label for="sku" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="sku", lang=lang | default(value='sk')) }}</label>
-      {{ ui::input(name="sku", id="sku", value=v_sku) }}
+  {# --- Variants / options editor ------------------------------------------- #}
+  {# Each product is sold as one or more variants (a free-text label such as     #}
+  {# "10cm x 13cm" or "5ml" plus its own price). Price is required. Stock is      #}
+  {# optional — leave it blank ("∞") to mark the option simply available (not     #}
+  {# inventory-tracked). SKU and business price are optional too. Rows are        #}
+  {# managed client-side; names are indexed (variants[i][…]) and read back by     #}
+  {# the controller.                                                              #}
+  {% set opt = " (" ~ t(key="optional", lang=lang | default(value='sk')) ~ ")" %}
+  <script id="variants-data" type="application/json">{{ variants | json_encode() | safe }}</script>
+  <div class="space-y-3" x-data="variantEditor(JSON.parse(document.getElementById('variants-data').textContent))">
+    <div class="flex items-center justify-between">
+      <span class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="variants-options", lang=lang | default(value='sk')) }}</span>
+      <button type="button" @click="add()"
+        class="rounded-radius border border-outline px-3 py-1.5 text-sm font-medium text-on-surface hover:bg-surface-alt dark:border-outline-dark dark:text-on-surface-dark dark:hover:bg-surface-dark-alt/50">
+        + {{ t(key="add-option", lang=lang | default(value='sk')) }}
+      </button>
    </div>
+
+    <template x-for="(row, i) in rows" :key="i">
+      <div class="flex items-end gap-3 rounded-radius border border-outline bg-surface-alt/40 p-3 dark:border-outline-dark dark:bg-surface-dark-alt/30">
+        <input type="hidden" :name="`variants[${i}][id]`" :value="row.id">
+
+        {# items-end bottom-aligns every input regardless of how many lines each
+           label takes, so the row stays aligned even with the "(optional)" notes. #}
+        <div class="grid flex-1 grid-cols-2 gap-3 sm:grid-cols-12 sm:items-end">
+          <div class="space-y-1 col-span-2 sm:col-span-4">
+            <label class="{{ sublabel }} block truncate">{{ t(key="option-label", lang=lang | default(value='sk')) }}{{ opt }}</label>
+            <input :name="`variants[${i}][label]`" x-model="row.label" class="{{ inp }}" placeholder="napr. 10cm x 13cm">
+          </div>
+          <div class="space-y-1 sm:col-span-2">
+            <label class="{{ sublabel }} block truncate">{{ t(key="sku", lang=lang | default(value='sk')) }}{{ opt }}</label>
+            <input :name="`variants[${i}][sku]`" x-model="row.sku" class="{{ inp }}">
+          </div>
+          <div class="space-y-1 sm:col-span-2">
+            <label class="{{ sublabel }} block truncate">{{ t(key="stock", lang=lang | default(value='sk')) }}{{ opt }}</label>
+            <input type="number" min="0" :name="`variants[${i}][stock]`" x-model="row.stock" class="{{ inp }}" placeholder="∞" title="{{ t(key='stock-untracked-hint', lang=lang | default(value='sk')) }}">
+          </div>
+          <div class="space-y-1 sm:col-span-2">
+            <label class="{{ sublabel }} block truncate">{{ t(key="price", lang=lang | default(value='sk')) }}</label>
+            <input :name="`variants[${i}][price]`" x-model="row.price" inputmode="decimal" required class="{{ inp }}" placeholder="0.00">
+          </div>
+          <div class="space-y-1 sm:col-span-2">
+            <label class="{{ sublabel }} block truncate">{{ t(key="business-price", lang=lang | default(value='sk')) }}{{ opt }}</label>
+            <input :name="`variants[${i}][business_sale]`" x-model="row.business_sale" inputmode="decimal" class="{{ inp }}" placeholder="—">
+          </div>
+        </div>
+
+        <button type="button" @click="remove(i)"
+          class="mb-1 shrink-0 rounded-radius px-2 py-2 text-sm text-danger hover:bg-danger/10" title="{{ t(key='delete', lang=lang | default(value='sk')) }}">✕</button>
+      </div>
+    </template>
  </div>

+  <script>
+    function variantEditor(initial) {
+      const blank = () => ({ id: '', label: '', sku: '', stock: '', price: '', business_sale: '' });
+      return {
+        rows: (initial || []).map(r => ({
+          id: r.id || '',
+          label: r.label || '',
+          sku: r.sku || '',
+          stock: (r.stock === null || r.stock === undefined) ? '' : r.stock,
+          price: r.price || '',
+          business_sale: r.business_sale || '',
+        })),
+        init() { if (this.rows.length === 0) this.add(); },
+        add() { this.rows.push(blank()); },
+        remove(i) { this.rows.splice(i, 1); if (this.rows.length === 0) this.add(); },
+      };
+    }
+  </script>
+
  <div class="space-y-1.5">
    <label for="category_id" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="category", lang=lang | default(value='sk')) }}</label>
    <div class="relative">
@@ -69,12 +126,77 @@
    {{ ui::textarea(name="description", id="description", rows="5", value=v_desc) }}
  </div>

-  <div class="space-y-1.5">
-    <label for="image" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="image", lang=lang | default(value='sk')) }}</label>
-    {% if product and product.image %}
-    <img src="/images/{{ product.image }}" alt="" class="size-24 rounded-radius object-cover">
-    {% endif %}
-    {{ ui::file_input(name="image", id="image", accept="image/*") }}
+  {# --- Images gallery ------------------------------------------------------- #}
+  {# Existing images are reorderable (drag) and removable; the kept set is          #}
+  {# submitted in order as repeated `existing_images` ids. New uploads accumulate    #}
+  {# across separate "Add images" clicks into a DataTransfer that backs the hidden   #}
+  {# `image` input (a native file input would otherwise replace its selection on     #}
+  {# every pick); the controller stores and appends them after the kept images.      #}
+  <script id="images-data" type="application/json">{% if product %}{{ product.images | json_encode() | safe }}{% else %}[]{% endif %}</script>
+  <div class="space-y-2" x-data="{
+        images: JSON.parse(document.getElementById('images-data').textContent),
+        staged: [],
+        dt: new DataTransfer(),
+        dragIndex: null,
+        onDrop(i) {
+          if (this.dragIndex === null || this.dragIndex === i) { this.dragIndex = null; return; }
+          this.images.splice(i, 0, this.images.splice(this.dragIndex, 1)[0]);
+          this.dragIndex = null;
+        },
+        addFiles(e) {
+          for (const f of e.target.files) { this.dt.items.add(f); this.staged.push({ url: URL.createObjectURL(f) }); }
+          this.$refs.holder.files = this.dt.files;
+          e.target.value = '';
+        },
+        removeStaged(i) {
+          this.dt.items.remove(i);
+          URL.revokeObjectURL(this.staged[i].url);
+          this.staged.splice(i, 1);
+          this.$refs.holder.files = this.dt.files;
+        },
+      }">
+    <span class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="images", lang=lang | default(value='sk')) }}</span>
+    <p class="{{ sublabel }}">{{ t(key="gallery-hint", lang=lang | default(value='sk')) }}</p>
+
+    <div class="flex flex-wrap gap-3" x-show="images.length || staged.length">
+      <template x-for="(im, i) in images" :key="im.id">
+        <div draggable="true"
+          @dragstart="dragIndex = i"
+          @dragover.prevent
+          @drop.prevent="onDrop(i)"
+          :class="dragIndex === i ? 'opacity-50' : ''"
+          class="group relative size-24 cursor-move overflow-hidden rounded-radius border border-outline dark:border-outline-dark">
+          <input type="hidden" name="existing_images" :value="im.id">
+          <img :src="`/images/${im.image_id}`" alt="" class="size-full object-cover">
+          <span x-show="i === 0"
+            class="absolute left-1 top-1 rounded-radius bg-primary px-1.5 py-0.5 text-[10px] font-semibold text-on-primary dark:bg-primary-dark dark:text-on-primary-dark">{{ t(key="main-image", lang=lang | default(value='sk')) }}</span>
+          <button type="button" @click="images.splice(i, 1)"
+            class="absolute right-1 top-1 flex size-5 items-center justify-center rounded-full bg-surface/70 text-xs text-danger opacity-0 transition group-hover:opacity-100 dark:bg-surface-dark/70"
+            title="{{ t(key='delete', lang=lang | default(value='sk')) }}">✕</button>
+        </div>
+      </template>
+
+      {# Newly staged uploads (not yet saved): previews + remove. #}
+      <template x-for="(f, i) in staged" :key="f.url">
+        <div class="group relative size-24 overflow-hidden rounded-radius border border-dashed border-outline dark:border-outline-dark">
+          <img :src="f.url" alt="" class="size-full object-cover">
+          <span x-show="images.length === 0 && i === 0"
+            class="absolute left-1 top-1 rounded-radius bg-primary px-1.5 py-0.5 text-[10px] font-semibold text-on-primary dark:bg-primary-dark dark:text-on-primary-dark">{{ t(key="main-image", lang=lang | default(value='sk')) }}</span>
+          <button type="button" @click="removeStaged(i)"
+            class="absolute right-1 top-1 flex size-5 items-center justify-center rounded-full bg-surface/70 text-xs text-danger opacity-0 transition group-hover:opacity-100 dark:bg-surface-dark/70"
+            title="{{ t(key='delete', lang=lang | default(value='sk')) }}">✕</button>
+        </div>
+      </template>
+    </div>
+
+    {# Hidden input carries the accumulated files on submit; the visible picker   #}
+    {# only feeds addFiles() and is reset after each pick so selections stack.     #}
+    <input type="file" name="image" multiple class="hidden" x-ref="holder">
+    <input type="file" accept="image/*" multiple class="hidden" x-ref="picker" @change="addFiles($event)">
+    <button type="button" @click="$refs.picker.click()"
+      class="rounded-radius border border-outline px-3 py-1.5 text-sm font-medium text-on-surface hover:bg-surface-alt dark:border-outline-dark dark:text-on-surface-dark dark:hover:bg-surface-dark-alt/50">
+      + {{ t(key="add-images", lang=lang | default(value='sk')) }}
+    </button>
  </div>

  {{ ui::checkbox(name="published", id="published", label=t(key="published", lang=lang | default(value='sk')), checked=v_pub) }}
--- a/assets/views/admin/catalog/products.html
+++ b/assets/views/admin/catalog/products.html
@@ -83,7 +83,7 @@
      <tr>
        {{ ui::th(label=t(key="product", lang=lang | default(value='sk'))) }}
        {{ ui::th(label=t(key="price", lang=lang | default(value='sk'))) }}
-        {{ ui::th(label=t(key="sale-price", lang=lang | default(value='sk'))) }}
+        {{ ui::th(label=t(key="variants-options", lang=lang | default(value='sk'))) }}
        {{ ui::th(label=t(key="effective-price", lang=lang | default(value='sk'))) }}
        {{ ui::th(label=t(key="stock", lang=lang | default(value='sk'))) }}
        {{ ui::th(label=t(key="status", lang=lang | default(value='sk'))) }}
@@ -106,15 +106,8 @@
            </div>
          </div>
        </td>
-        <td class="px-4 py-3 tabular-nums">{{ product.regular_price }} {{ product.currency }}</td>
-        <td class="px-4 py-3 tabular-nums">
-          {% if product.on_sale %}
-          <span class="font-medium text-danger">{{ product.sale_price }} {{ product.currency }}</span>
-          <span class="ml-1 text-xs text-on-surface/60 dark:text-on-surface-dark/60">(−{{ product.percent_off }}%)</span>
-          {% else %}
-          <span class="text-on-surface/40 dark:text-on-surface-dark/40">—</span>
-          {% endif %}
-        </td>
+        <td class="px-4 py-3 tabular-nums">{% if product.has_options %}{{ t(key="from-price", price=product.regular_price, lang=lang | default(value='sk')) }}{% else %}{{ product.regular_price }}{% endif %} {{ product.currency }}</td>
+        <td class="px-4 py-3 tabular-nums">{{ product.variant_count }}</td>
        <td class="px-4 py-3 tabular-nums">
          <span id="eff-{{ product.id }}">{{ ui::eff_price(p=product) }}</span>
        </td>
@@ -129,14 +122,6 @@
        <td class="px-4 py-3">
          <div class="flex flex-wrap justify-end gap-2">
            {{ ui::button(variant="outline-secondary", label=t(key="edit", lang=lang | default(value='sk')), href="/admin/catalog/products/" ~ product.id ~ "/edit", size="px-3 py-1.5 text-xs") }}
-            {{ ui::button(variant="outline-secondary", label=t(key="set-discount", lang=lang | default(value='sk')), href="/admin/catalog/products/" ~ product.id ~ "/discount/edit?audience=" ~ audience, size="px-3 py-1.5 text-xs") }}
-            {% if product.on_sale %}
-            <form method="post" action="/admin/catalog/products/{{ product.id }}/discount/remove?audience={{ audience }}"
-              onsubmit="return confirm('{{ t(key="discount-remove-confirm", lang=lang | default(value='sk')) }}')">
-              {{ ui::csrf_field() }}
-              {{ ui::button(variant="outline-danger", label=t(key="remove-discount", lang=lang | default(value='sk')), type="submit", size="px-3 py-1.5 text-xs") }}
-            </form>
-            {% endif %}
            {{ ui::button(variant="outline-secondary", label=t(key="view", lang=lang | default(value='sk')), href="/shop/" ~ product.slug, size="px-3 py-1.5 text-xs") }}
            <form method="post" action="/admin/catalog/products/{{ product.id }}/delete"
              onsubmit="return confirm('{{ t(key="confirm-delete", lang=lang | default(value='sk')) }}')">
--- a/assets/views/admin/customers/price_form.html
+++ b/assets/views/admin/customers/price_form.html
@@ -8,7 +8,7 @@
 <div class="flex items-center justify-between gap-3">
  <div>
    <div class="flex items-center gap-2">
-      <h1 class="text-2xl font-bold text-on-surface-strong dark:text-on-surface-dark-strong">{{ product.name }}</h1>
+      <h1 class="text-2xl font-bold text-on-surface-strong dark:text-on-surface-dark-strong">{{ product.name }}{% if product.variant_label %} <span class="text-on-surface/60 dark:text-on-surface-dark/60">· {{ product.variant_label }}</span>{% endif %}</h1>
      {{ ui::badge(label=t(key="negotiated-price", lang=lang | default(value='sk')), variant="info") }}
    </div>
    <p class="text-sm text-on-surface/70 dark:text-on-surface-dark/70">{{ customer.name }}</p>
@@ -20,7 +20,7 @@
 <div class="mt-4 max-w-md">{{ ui::alert_danger(message=t(key=error, lang=lang | default(value='sk'))) }}</div>
 {% endif %}

-<form method="post" action="/admin/customers/{{ customer.id }}/prices/{{ product.id }}"
+<form method="post" action="/admin/customers/{{ customer.id }}/prices/{{ product.variant_id }}"
  x-data="{
    price: '{{ negotiated }}',
    regular: {{ product.regular_cents }},
@@ -71,7 +71,7 @@
  <div class="flex flex-wrap gap-3 pt-2">
    {{ ui::button(variant="secondary", label=t(key="save", lang=lang | default(value='sk')), type="submit") }}
    {% if has_negotiated %}
-    {{ ui::button(variant="outline-danger", label=t(key="remove", lang=lang | default(value='sk')), type="submit", attrs=`formaction="/admin/customers/` ~ customer.id ~ `/prices/` ~ product.id ~ `/remove" onclick="return confirm('` ~ t(key="negotiated-remove-confirm", lang=lang | default(value='sk')) ~ `')"`) }}
+    {{ ui::button(variant="outline-danger", label=t(key="remove", lang=lang | default(value='sk')), type="submit", attrs=`formaction="/admin/customers/` ~ customer.id ~ `/prices/` ~ product.variant_id ~ `/remove" onclick="return confirm('` ~ t(key="negotiated-remove-confirm", lang=lang | default(value='sk')) ~ `')"`) }}
    {% endif %}
  </div>
 </form>
@@ -83,7 +83,7 @@
    <h2 class="text-lg font-semibold text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="automated-price", lang=lang | default(value='sk')) }}</h2>
    {{ ui::badge(label=t(key="collision", lang=lang | default(value='sk')), variant="warning") }}
  </div>
-  <form method="post" action="/admin/customers/{{ customer.id }}/resolutions/{{ product.id }}" class="mt-3 flex items-center gap-2">
+  <form method="post" action="/admin/customers/{{ customer.id }}/resolutions/{{ product.variant_id }}" class="mt-3 flex items-center gap-2">
    {{ ui::csrf_field() }}
    <select name="profile_id" class="rounded-radius border border-outline bg-surface-alt px-2 py-1.5 text-sm dark:border-outline-dark dark:bg-surface-dark-alt/50 dark:text-on-surface-dark">
      {% for c in covering %}
--- a/assets/views/admin/customers/show.html
+++ b/assets/views/admin/customers/show.html
@@ -61,7 +61,10 @@
    <tbody class="{{ ui::tbody_cls() }}">
      {% for product in products %}
      <tr class="{{ ui::row_cls() }}">
-        <td class="px-4 py-3 font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ product.name }}</td>
+        <td class="px-4 py-3 font-medium text-on-surface-strong dark:text-on-surface-dark-strong">
+          {{ product.name }}
+          {% if product.variant_label %}<span class="block text-xs font-normal text-on-surface/60 dark:text-on-surface-dark/60">{{ product.variant_label }}</span>{% endif %}
+        </td>
        <td class="px-4 py-3 tabular-nums">
          {% if product.business_reduced %}
          <span class="font-medium text-danger">{{ product.business_price }} {{ product.currency }}</span>
@@ -76,9 +79,9 @@
        </td>
        <td class="px-4 py-3">
          <div class="flex flex-wrap justify-end gap-2">
-            {{ ui::button(variant="outline-secondary", label=t(key="set-negotiated-price", lang=lang | default(value='sk')), href="/admin/customers/" ~ customer.id ~ "/prices/" ~ product.product_id ~ "/edit", size="px-3 py-1.5 text-xs") }}
+            {{ ui::button(variant="outline-secondary", label=t(key="set-negotiated-price", lang=lang | default(value='sk')), href="/admin/customers/" ~ customer.id ~ "/prices/" ~ product.variant_id ~ "/edit", size="px-3 py-1.5 text-xs") }}
            {% if product.has_negotiated %}
-            <form method="post" action="/admin/customers/{{ customer.id }}/prices/{{ product.product_id }}/remove"
+            <form method="post" action="/admin/customers/{{ customer.id }}/prices/{{ product.variant_id }}/remove"
              onsubmit="return confirm('{{ t(key="negotiated-remove-confirm", lang=lang | default(value='sk')) }}')">
              {{ ui::csrf_field() }}
              {{ ui::button(variant="outline-danger", label=t(key="remove", lang=lang | default(value='sk')), type="submit", size="px-3 py-1.5 text-xs") }}
--- a/assets/views/admin/orders/show.html
+++ b/assets/views/admin/orders/show.html
@@ -36,7 +36,7 @@
        <tbody class="{{ ui::tbody_cls() }}">
          {% for item in items %}
          <tr>
-            <td class="px-4 py-3">{{ item.product_name }}</td>
+            <td class="px-4 py-3">{{ item.product_name }}{% if item.variant_label %} <span class="text-on-surface/60 dark:text-on-surface-dark/60">· {{ item.variant_label }}</span>{% endif %}</td>
            <td class="px-4 py-3 tabular-nums">{{ item.quantity }}</td>
            <td class="px-4 py-3 text-right tabular-nums">{{ item.line_total }} {{ order.currency }}</td>
          </tr>
--- a/assets/views/shop/_card.html
+++ b/assets/views/shop/_card.html
@@ -20,21 +20,24 @@
        {% if product.on_sale %}
        <span class="flex flex-col items-end whitespace-nowrap leading-tight">
          <span class="text-sm text-on-surface/50 line-through dark:text-on-surface-dark/50">{{ product.regular_price }} {{ product.currency }}</span>
-          <span class="text-xl font-semibold text-danger"><span class="sr-only">Price</span>{{ product.price }} {{ product.currency }}</span>
+          <span class="text-xl font-semibold text-danger"><span class="sr-only">Price</span>{% if product.has_options %}{{ t(key="from-price", price=product.price, lang=lang | default(value='sk')) }}{% else %}{{ product.price }}{% endif %} {{ product.currency }}</span>
        </span>
        {% else %}
-        <span class="whitespace-nowrap text-xl"><span class="sr-only">Price</span>{{ product.price }} {{ product.currency }}</span>
+        <span class="whitespace-nowrap text-xl"><span class="sr-only">Price</span>{% if product.has_options %}{{ t(key="from-price", price=product.price, lang=lang | default(value='sk')) }}{% else %}{{ product.price }}{% endif %} {{ product.currency }}</span>
        {% endif %}
      </div>
    </div>
  </a>
  <div class="flex flex-col gap-2 p-6 pt-0">
-    {% if product.stock > 0 %}
-    <p class="text-xs text-on-surface/60 dark:text-on-surface-dark/60">{{ t(key="in-stock", lang=lang | default(value='sk')) }}: {{ product.stock }}</p>
+    {% if product.has_options %}
+    {# Multiple variants: customer must pick on the product page. #}
+    {{ ui::button(label=t(key="choose-option", lang=lang | default(value='sk')), href="/shop/" ~ product.slug, extra="w-full") }}
+    {% elif product.in_stock %}
+    <p class="text-xs text-on-surface/60 dark:text-on-surface-dark/60">{% if product.tracked %}{{ t(key="in-stock", lang=lang | default(value='sk')) }}: {{ product.stock }}{% else %}{{ t(key="available", lang=lang | default(value='sk')) }}{% endif %}</p>
    <form method="post" action="/cart/add" hx-post="/cart/add" hx-swap="none"
      hx-on::after-request="if (event.detail.successful) toast('{{ t(key='cart-added', lang=lang | default(value='sk')) }}')">
  <input type="hidden" name="_csrf" value="{{ csrf_token() }}">
-      <input type="hidden" name="product_id" value="{{ product.id }}">
+      <input type="hidden" name="variant_id" value="{{ product.variant_id }}">
      <input type="hidden" name="quantity" value="1">
      {{ ui::button(label=t(key="add-to-cart", lang=lang | default(value='sk')), type="submit", extra="w-full", icon='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" fill="currentColor" aria-hidden="true" class="size-3.5"><path fill-rule="evenodd" d="M5 4a3 3 0 0 1 6 0v1h.643a1.5 1.5 0 0 1 1.492 1.35l.7 7A1.5 1.5 0 0 1 12.342 15H3.657a1.5 1.5 0 0 1-1.492-1.65l.7-7A1.5 1.5 0 0 1 4.357 5H5V4Zm4.5 0v1h-3V4a1.5 1.5 0 0 1 3 0Zm-3 3.75a.75.75 0 0 0-1.5 0v1a3 3 0 1 0 6 0v-1a.75.75 0 0 0-1.5 0v1a1.5 1.5 0 1 1-3 0v-1Z" clip-rule="evenodd" /></svg>') }}
    </form>
--- a/assets/views/shop/_cart_body.html
+++ b/assets/views/shop/_cart_body.html
@@ -19,6 +19,7 @@
      <tr>
        <td class="px-4 py-3">
          <a href="/shop/{{ item.slug }}" class="font-medium text-on-surface-strong hover:text-primary dark:text-on-surface-dark-strong dark:hover:text-primary-dark">{{ item.name }}</a>
+          {% if item.variant_label %}<span class="block text-xs text-on-surface/60 dark:text-on-surface-dark/60">{{ item.variant_label }}</span>{% endif %}
        </td>
        <td class="px-4 py-3 tabular-nums">
          {% if item.on_sale %}
@@ -35,8 +36,8 @@
          <form method="post" action="/cart/update"
            hx-post="/cart/update" hx-trigger="cartchange" hx-target="#cart-body" hx-swap="innerHTML">
  {{ ui::csrf_field() }}
-            <input type="hidden" name="product_id" value="{{ item.id }}">
-            <input type="number" name="quantity" min="0" max="{{ item.stock }}" value="{{ item.quantity }}"
+            <input type="hidden" name="variant_id" value="{{ item.id }}">
+            <input type="number" name="quantity" min="0" {% if item.stock %}max="{{ item.stock }}"{% endif %} value="{{ item.quantity }}"
              @change="
                if (parseInt($el.value || '0') <= 0 && !window.confirm('{{ t(key='cart-remove-confirm', lang=lang | default(value='sk')) }}')) {
                  $el.value = '{{ item.quantity }}';
@@ -52,7 +53,7 @@
          <form method="post" action="/cart/remove"
            hx-post="/cart/remove" hx-target="#cart-body" hx-swap="innerHTML">
  {{ ui::csrf_field() }}
-            <input type="hidden" name="product_id" value="{{ item.id }}">
+            <input type="hidden" name="variant_id" value="{{ item.id }}">
            {{ ui::button(variant="ghost-danger", label=t(key="cart-remove", lang=lang | default(value='sk')), type="submit", size="px-2 py-1 text-xs") }}
          </form>
        </td>
--- a/assets/views/shop/_cart_preview.html
+++ b/assets/views/shop/_cart_preview.html
@@ -8,6 +8,7 @@
  <div class="flex items-start gap-3 px-4 py-3">
    <div class="min-w-0 flex-1">
      <a href="/shop/{{ item.slug }}" class="block truncate text-sm font-medium text-on-surface-strong hover:text-primary dark:text-on-surface-dark-strong dark:hover:text-primary-dark">{{ item.name }}</a>
+      {% if item.variant_label %}<span class="block truncate text-xs text-on-surface/60 dark:text-on-surface-dark/60">{{ item.variant_label }}</span>{% endif %}
      <p class="mt-0.5 text-xs tabular-nums text-on-surface dark:text-on-surface-dark">{{ item.quantity }} × {{ item.price }} {{ item.currency }}</p>
    </div>
    <span class="shrink-0 text-sm font-semibold tabular-nums text-on-surface-strong dark:text-on-surface-dark-strong">{{ item.line_total }} {{ item.currency }}</span>
--- a/assets/views/shop/order_confirmed.html
+++ b/assets/views/shop/order_confirmed.html
@@ -29,7 +29,7 @@
    <ul class="space-y-2 py-3 text-sm">
      {% for item in items %}
      <li class="flex justify-between gap-2">
-        <span class="text-on-surface/80 dark:text-on-surface-dark/80">{{ item.product_name }} × {{ item.quantity }}</span>
+        <span class="text-on-surface/80 dark:text-on-surface-dark/80">{{ item.product_name }}{% if item.variant_label %} · {{ item.variant_label }}{% endif %} × {{ item.quantity }}</span>
        <span class="tabular-nums">{{ item.line_total }} {{ order.currency }}</span>
      </li>
      {% endfor %}
--- a/assets/views/shop/show.html
+++ b/assets/views/shop/show.html
@@ -49,39 +49,85 @@
  </div>

  <!-- details -->
-  <div class="space-y-6">
+  {% set fld = "w-full rounded-radius border border-outline bg-surface-alt px-3 py-2 text-sm text-on-surface focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-primary dark:border-outline-dark dark:bg-surface-dark-alt/50 dark:text-on-surface-dark dark:focus-visible:outline-primary-dark" %}
+  {% set btn = "inline-flex items-center justify-center gap-2 whitespace-nowrap rounded-radius px-5 py-2 text-sm text-center font-medium tracking-wide transition hover:opacity-75 focus-visible:outline-2 focus-visible:outline-offset-2 active:opacity-100 active:outline-offset-0 disabled:cursor-not-allowed disabled:opacity-75 border border-primary bg-primary text-on-primary focus-visible:outline-primary dark:border-primary-dark dark:bg-primary-dark dark:text-on-primary-dark dark:focus-visible:outline-primary-dark" %}
+  <script id="variant-data" type="application/json">{{ variants | json_encode() | safe }}</script>
+  <div class="space-y-6" x-data="productBuy(JSON.parse(document.getElementById('variant-data').textContent))">
    {% if category %}
    <a href="/category/{{ category.slug }}" class="text-sm font-medium text-primary dark:text-primary-dark">{{ category.name }}</a>
    {% endif %}
    <h1 class="text-3xl font-bold text-on-surface-strong dark:text-on-surface-dark-strong">{{ product.name }}</h1>
-    {% if product.on_sale %}
-    <div class="flex items-baseline gap-3">
-      <p class="text-2xl font-semibold text-danger">{{ product.price }} {{ product.currency }}</p>
-      <p class="text-lg text-on-surface/50 line-through dark:text-on-surface-dark/50">{{ product.regular_price }} {{ product.currency }}</p>
-    </div>
-    {% else %}
-    <p class="text-2xl font-semibold text-primary dark:text-primary-dark">{{ product.price }} {{ product.currency }}</p>
-    {% endif %}

-    {% if product.description %}
-    <div class="whitespace-pre-line leading-relaxed text-on-surface/80 dark:text-on-surface-dark/80">{{ product.description }}</div>
-    {% endif %}
+    <template x-if="current">
+      <div class="space-y-6">
+        <!-- option picker (only when there's a real choice); first option is
+             selected by default and switching it updates the price + buy form -->
+        <template x-if="variants.length > 1">
+          <div class="max-w-sm space-y-1.5">
+            <label for="variant-select" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="choose-option", lang=lang | default(value='sk')) }}</label>
+            <select id="variant-select" x-model.number="sel" class="{{ fld }}">
+              <template x-for="(v, i) in variants" :key="v.id">
+                <option :value="i" x-text="(v.label || '—') + ' · ' + v.price + ' {{ product.currency }}' + (v.in_stock ? '' : ' ({{ t(key='out-of-stock', lang=lang | default(value='sk')) }})')"></option>
+              </template>
+            </select>
+          </div>
+        </template>

-    {% if product.stock > 0 %}
-    <form method="post" action="/cart/add" hx-post="/cart/add" hx-swap="none" class="flex flex-wrap items-end gap-3"
-      hx-on::after-request="if (event.detail.successful) toast('{{ t(key='cart-added', lang=lang | default(value='sk')) }}')">
-  {{ ui::csrf_field() }}
-      <input type="hidden" name="product_id" value="{{ product.id }}">
-      <div class="space-y-1.5">
-        <label for="quantity" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="quantity", lang=lang | default(value='sk')) }}</label>
-        {{ ui::input(name="quantity", id="quantity", type="number", value="1", width="w-24", attrs='min="1" max="' ~ product.stock ~ '"') }}
+        <div class="flex items-baseline gap-3">
+          <p class="text-2xl font-semibold" :class="current.on_sale ? 'text-danger' : 'text-primary dark:text-primary-dark'">
+            <span x-text="current.price"></span> {{ product.currency }}
+          </p>
+          <template x-if="current.on_sale">
+            <p class="text-lg text-on-surface/50 line-through dark:text-on-surface-dark/50"><span x-text="current.regular_price"></span> {{ product.currency }}</p>
+          </template>
+        </div>
+
+        {% if product.description %}
+        <div class="whitespace-pre-line leading-relaxed text-on-surface/80 dark:text-on-surface-dark/80">{{ product.description }}</div>
+        {% endif %}
+
+        <template x-if="current.in_stock">
+          <div class="space-y-2">
+            <form method="post" action="/cart/add" hx-post="/cart/add" hx-swap="none" class="flex flex-wrap items-end gap-3"
+              hx-on::after-request="if (event.detail.successful) toast('{{ t(key='cart-added', lang=lang | default(value='sk')) }}')">
+              {{ ui::csrf_field() }}
+              <input type="hidden" name="variant_id" :value="current.id">
+              <div class="space-y-1.5">
+                <label for="quantity" class="text-sm font-medium text-on-surface-strong dark:text-on-surface-dark-strong">{{ t(key="quantity", lang=lang | default(value='sk')) }}</label>
+                <input type="number" id="quantity" name="quantity" value="1" min="1" :max="current.stock" class="{{ fld }} w-24">
+              </div>
+              <button type="submit" class="{{ btn }}">{{ t(key="add-to-cart", lang=lang | default(value='sk')) }}</button>
+            </form>
+            <p class="text-sm text-on-surface/60 dark:text-on-surface-dark/60">
+              <template x-if="current.tracked">
+                <span>{{ t(key="in-stock", lang=lang | default(value='sk')) }}: <span x-text="current.stock"></span></span>
+              </template>
+              <template x-if="!current.tracked">
+                <span>{{ t(key="available", lang=lang | default(value='sk')) }}</span>
+              </template>
+            </p>
+          </div>
+        </template>
+        <template x-if="!current.in_stock">
+          <p class="inline-flex rounded-radius bg-danger/10 px-3 py-2 text-sm font-medium text-danger">{{ t(key="out-of-stock", lang=lang | default(value='sk')) }}</p>
+        </template>
      </div>
-      {{ ui::button(label=t(key="add-to-cart", lang=lang | default(value='sk')), type="submit", size="px-5 py-2 text-sm") }}
-    </form>
-    <p class="text-sm text-on-surface/60 dark:text-on-surface-dark/60">{{ t(key="in-stock", lang=lang | default(value='sk')) }}: {{ product.stock }}</p>
-    {% else %}
-    <p class="inline-flex rounded-radius bg-danger/10 px-3 py-2 text-sm font-medium text-danger">{{ t(key="out-of-stock", lang=lang | default(value='sk')) }}</p>
-    {% endif %}
+    </template>
+
+    <template x-if="!current">
+      <p class="inline-flex rounded-radius bg-danger/10 px-3 py-2 text-sm font-medium text-danger">{{ t(key="out-of-stock", lang=lang | default(value='sk')) }}</p>
+    </template>
  </div>
+
+  <script>
+    function productBuy(variants) {
+      return {
+        variants: variants || [],
+        // Default to the first in-stock variant, else the first.
+        sel: Math.max(0, (variants || []).findIndex(v => v.in_stock)),
+        get current() { return this.variants[this.sel] || null; },
+      };
+    }
+  </script>
 </div>
 {% endblock content %}
--- a/migration/src/lib.rs
+++ b/migration/src/lib.rs
@@ -40,6 +40,8 @@ mod m20260621_000002_account_product_prices;
 mod m20260621_000003_discount_profiles;
 mod m20260621_000004_add_business_sale_price_to_products;
 mod m20260622_000001_audience_discount_profiles;
+mod m20260622_000002_product_variants;
+mod m20260622_000003_variant_stock_nullable;
 pub struct Migrator;

 #[async_trait::async_trait]
@@ -84,6 +86,8 @@ impl MigratorTrait for Migrator {
            Box::new(m20260621_000003_discount_profiles::Migration),
            Box::new(m20260621_000004_add_business_sale_price_to_products::Migration),
            Box::new(m20260622_000001_audience_discount_profiles::Migration),
+            Box::new(m20260622_000002_product_variants::Migration),
+            Box::new(m20260622_000003_variant_stock_nullable::Migration),
            // inject-above (do not remove this comment)
        ]
    }
--- a/migration/src/m20260622_000002_product_variants.rs
+++ b/migration/src/m20260622_000002_product_variants.rs
@@ -0,0 +1,204 @@
+//! Introduce product variants as the purchasable unit.
+//!
+//! A product becomes a presentation grouping (name, description, images,
+//! category, tags, percentage discount profiles). Each product owns one or more
+//! `product_variants`, and the variant is what carries the things that actually
+//! differ between options: a free-text `label` (e.g. "rolovaná 90cm x 10m",
+//! "5ml"), its own `sku`, `stock`, regular `price_cents`, and its own optional
+//! public/business quick-sale prices.
+//!
+//! This migration:
+//!   1. creates `product_variants`,
+//!   2. backfills one variant per existing product from the product's current
+//!      price/stock/sku/sale columns,
+//!   3. moves the per-account negotiated price and collision-resolution tables
+//!      from keying on `product_id` to `variant_id`,
+//!   4. snapshots the variant onto `order_items`,
+//!   5. drops the now-moved purchasable columns from `products`.
+
+use sea_orm_migration::prelude::*;
+
+#[derive(DeriveMigrationName)]
+pub struct Migration;
+
+#[async_trait::async_trait]
+impl MigrationTrait for Migration {
+    async fn up(&self, m: &SchemaManager) -> Result<(), DbErr> {
+        let db = m.get_connection();
+
+        // 1. The variants table.
+        db.execute_unprepared(
+            r#"
+            CREATE TABLE product_variants (
+                id          SERIAL PRIMARY KEY,
+                created_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+                updated_at  TIMESTAMPTZ NOT NULL DEFAULT now(),
+                product_id  INTEGER NOT NULL REFERENCES products(id) ON DELETE CASCADE,
+                label       VARCHAR NOT NULL DEFAULT '',
+                position    INTEGER NOT NULL DEFAULT 0,
+                sku         VARCHAR,
+                stock       INTEGER NOT NULL DEFAULT 0,
+                price_cents BIGINT NOT NULL,
+                sale_price_cents          BIGINT,
+                business_sale_price_cents BIGINT
+            );
+            CREATE INDEX idx_product_variants_product ON product_variants (product_id);
+            "#,
+        )
+        .await?;
+
+        // 2. One variant per existing product, carrying its current pricing.
+        db.execute_unprepared(
+            r#"
+            INSERT INTO product_variants
+                (product_id, label, position, sku, stock,
+                 price_cents, sale_price_cents, business_sale_price_cents)
+            SELECT id, '', 0, sku, stock,
+                   price_cents, sale_price_cents, business_sale_price_cents
+            FROM products;
+            "#,
+        )
+        .await?;
+
+        // 3a. Negotiated prices: product_id -> variant_id.
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE account_product_prices ADD COLUMN variant_id INTEGER;
+            UPDATE account_product_prices a
+                SET variant_id = pv.id
+                FROM product_variants pv
+                WHERE pv.product_id = a.product_id;
+            DROP INDEX IF EXISTS idx_account_product_prices_user_product_unique;
+            ALTER TABLE account_product_prices DROP COLUMN product_id;
+            ALTER TABLE account_product_prices ALTER COLUMN variant_id SET NOT NULL;
+            ALTER TABLE account_product_prices
+                ADD CONSTRAINT fk_account_product_prices_variant
+                FOREIGN KEY (variant_id) REFERENCES product_variants(id) ON DELETE CASCADE;
+            CREATE UNIQUE INDEX idx_account_product_prices_user_variant_unique
+                ON account_product_prices (user_id, variant_id);
+            "#,
+        )
+        .await?;
+
+        // 3b. Collision resolutions: product_id -> variant_id.
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE account_product_resolutions ADD COLUMN variant_id INTEGER;
+            UPDATE account_product_resolutions a
+                SET variant_id = pv.id
+                FROM product_variants pv
+                WHERE pv.product_id = a.product_id;
+            DROP INDEX IF EXISTS idx_account_product_resolutions_unique;
+            ALTER TABLE account_product_resolutions DROP COLUMN product_id;
+            ALTER TABLE account_product_resolutions ALTER COLUMN variant_id SET NOT NULL;
+            ALTER TABLE account_product_resolutions
+                ADD CONSTRAINT fk_account_product_resolutions_variant
+                FOREIGN KEY (variant_id) REFERENCES product_variants(id) ON DELETE CASCADE;
+            CREATE UNIQUE INDEX idx_account_product_resolutions_unique
+                ON account_product_resolutions (user_id, variant_id);
+            "#,
+        )
+        .await?;
+
+        // 4. Snapshot the variant on order lines (label is frozen at order time;
+        //    the FK is nullable + SET NULL so deleting a variant keeps history).
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE order_items ADD COLUMN variant_label VARCHAR NOT NULL DEFAULT '';
+            ALTER TABLE order_items ADD COLUMN variant_id INTEGER
+                REFERENCES product_variants(id) ON DELETE SET NULL;
+            "#,
+        )
+        .await?;
+
+        // 5. Drop the purchasable columns now owned by the variant.
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE products DROP COLUMN price_cents;
+            ALTER TABLE products DROP COLUMN sale_price_cents;
+            ALTER TABLE products DROP COLUMN business_sale_price_cents;
+            ALTER TABLE products DROP COLUMN sku;
+            ALTER TABLE products DROP COLUMN stock;
+            "#,
+        )
+        .await?;
+
+        Ok(())
+    }
+
+    async fn down(&self, m: &SchemaManager) -> Result<(), DbErr> {
+        let db = m.get_connection();
+
+        // Restore product columns from each product's first variant.
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE products ADD COLUMN price_cents BIGINT NOT NULL DEFAULT 0;
+            ALTER TABLE products ADD COLUMN sale_price_cents BIGINT;
+            ALTER TABLE products ADD COLUMN business_sale_price_cents BIGINT;
+            ALTER TABLE products ADD COLUMN sku VARCHAR;
+            ALTER TABLE products ADD COLUMN stock INTEGER NOT NULL DEFAULT 0;
+            UPDATE products p SET
+                price_cents = pv.price_cents,
+                sale_price_cents = pv.sale_price_cents,
+                business_sale_price_cents = pv.business_sale_price_cents,
+                sku = pv.sku,
+                stock = pv.stock
+            FROM (
+                SELECT DISTINCT ON (product_id) product_id, price_cents,
+                       sale_price_cents, business_sale_price_cents, sku, stock
+                FROM product_variants ORDER BY product_id, position, id
+            ) pv
+            WHERE pv.product_id = p.id;
+            "#,
+        )
+        .await?;
+
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE order_items DROP COLUMN variant_id;
+            ALTER TABLE order_items DROP COLUMN variant_label;
+            "#,
+        )
+        .await?;
+
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE account_product_resolutions ADD COLUMN product_id INTEGER;
+            UPDATE account_product_resolutions a
+                SET product_id = pv.product_id
+                FROM product_variants pv WHERE pv.id = a.variant_id;
+            DROP INDEX IF EXISTS idx_account_product_resolutions_unique;
+            ALTER TABLE account_product_resolutions DROP COLUMN variant_id;
+            ALTER TABLE account_product_resolutions ALTER COLUMN product_id SET NOT NULL;
+            ALTER TABLE account_product_resolutions
+                ADD CONSTRAINT fk_account_product_resolutions_product
+                FOREIGN KEY (product_id) REFERENCES products(id) ON DELETE CASCADE;
+            CREATE UNIQUE INDEX idx_account_product_resolutions_unique
+                ON account_product_resolutions (user_id, product_id);
+            "#,
+        )
+        .await?;
+
+        db.execute_unprepared(
+            r#"
+            ALTER TABLE account_product_prices ADD COLUMN product_id INTEGER;
+            UPDATE account_product_prices a
+                SET product_id = pv.product_id
+                FROM product_variants pv WHERE pv.id = a.variant_id;
+            DROP INDEX IF EXISTS idx_account_product_prices_user_variant_unique;
+            ALTER TABLE account_product_prices DROP COLUMN variant_id;
+            ALTER TABLE account_product_prices ALTER COLUMN product_id SET NOT NULL;
+            ALTER TABLE account_product_prices
+                ADD CONSTRAINT fk_account_product_prices_product
+                FOREIGN KEY (product_id) REFERENCES products(id) ON DELETE CASCADE;
+            CREATE UNIQUE INDEX idx_account_product_prices_user_product_unique
+                ON account_product_prices (user_id, product_id);
+            "#,
+        )
+        .await?;
+
+        db.execute_unprepared("DROP TABLE product_variants;").await?;
+
+        Ok(())
+    }
+}
--- a/migration/src/m20260622_000003_variant_stock_nullable.rs
+++ b/migration/src/m20260622_000003_variant_stock_nullable.rs
@@ -0,0 +1,36 @@
+//! Make `product_variants.stock` nullable: a NULL stock means the variant is
+//! "available" but not inventory-tracked — always purchasable, no quantity cap,
+//! and never decremented on order. A numeric stock is tracked/capped as before.
+
+use sea_orm_migration::prelude::*;
+
+#[derive(DeriveMigrationName)]
+pub struct Migration;
+
+#[async_trait::async_trait]
+impl MigrationTrait for Migration {
+    async fn up(&self, m: &SchemaManager) -> Result<(), DbErr> {
+        m.get_connection()
+            .execute_unprepared(
+                r#"
+                ALTER TABLE product_variants ALTER COLUMN stock DROP DEFAULT;
+                ALTER TABLE product_variants ALTER COLUMN stock DROP NOT NULL;
+                "#,
+            )
+            .await?;
+        Ok(())
+    }
+
+    async fn down(&self, m: &SchemaManager) -> Result<(), DbErr> {
+        m.get_connection()
+            .execute_unprepared(
+                r#"
+                UPDATE product_variants SET stock = 0 WHERE stock IS NULL;
+                ALTER TABLE product_variants ALTER COLUMN stock SET DEFAULT 0;
+                ALTER TABLE product_variants ALTER COLUMN stock SET NOT NULL;
+                "#,
+            )
+            .await?;
+        Ok(())
+    }
+}
--- a/src/controllers/admin_categories.rs
+++ b/src/controllers/admin_categories.rs
@@ -198,7 +198,7 @@ async fn create(
    guard::current_admin(auth, &ctx).await?;
    let form = read_multipart_form(multipart).await?;
    let fields = parse_category_fields(&ctx, &form, None).await?;
-    let image_id = match form.image {
+    let image_id = match form.single_image() {
        Some(data) => Some(store_image(&ctx, data).await?),
        None => None,
    };
@@ -252,7 +252,7 @@ async fn update(
    category.position = Set(fields.position);
    category.published = Set(fields.published);
    category.parent_id = Set(fields.parent_id);
-    if let Some(data) = form.image {
+    if let Some(data) = form.single_image() {
        category.image_id = Set(Some(store_image(&ctx, data).await?));
    }
    category.update(&ctx.db).await?;
--- a/src/controllers/admin_customers.rs
+++ b/src/controllers/admin_customers.rs
@@ -21,7 +21,7 @@ use crate::{
    controllers::i18n::current_lang,
    models::{
        account_discount_profiles, account_product_prices, account_product_resolutions,
-        categories, discount_profiles, products, _entities::users,
+        categories, discount_profiles, product_variants, products, _entities::users,
    },
    shared::{
        guard,
@@ -142,16 +142,9 @@ async fn show(
        .order_by_asc(products::Column::Name)
        .all(&ctx.db)
        .await?;
-    // Two prices per product:
-    // - the generic business price a freshly-registered company sees (business
-    //   baseline + business-audience profiles, no per-company deals), and
-    // - this company's effective price (its negotiated price + assigned profiles).
-    // The effective price is highlighted only when it differs from the generic one.
-    let business = pricing::audience_price_many(&ctx, &list, BUSINESS_AUDIENCE).await?;
-    let details = pricing::detail_many(&ctx, &list, Some(&company)).await?;

-    // Category sidebar tree (counts over the full, unfiltered list) plus the
-    // active `?category=` filter applied to the rows.
+    // Category sidebar tree (counts over the full, unfiltered product list) plus
+    // the active `?category=` filter applied to the rows.
    let category_ids: Vec<Option<i32>> = list.iter().map(|p| p.category_id).collect();
    let category_groups = view::admin_category_groups(&all_categories, &category_ids);
    let selected_category = params
@@ -161,15 +154,43 @@ async fn show(
        .to_string();
    let filter = view::category_filter_ids(&all_categories, &selected_category);

-    let rows: Vec<serde_json::Value> = list
+    // Pricing is per variant. Flatten the (filtered) products into their variants
+    // in product-name then variant-position order, carrying each variant's
+    // product for the row's display name.
+    let product_ids: Vec<i32> = list.iter().map(|p| p.id).collect();
+    let grouped = product_variants::Entity::grouped_for_products(&ctx.db, &product_ids).await?;
+    let mut variant_rows: Vec<(&products::Model, product_variants::Model)> = Vec::new();
+    for product in &list {
+        if !view::category_filter_keep(&filter, product.category_id) {
+            continue;
+        }
+        if let Some(variants) = grouped.get(&product.id) {
+            for variant in variants {
+                variant_rows.push((product, variant.clone()));
+            }
+        }
+    }
+
+    // Two prices per variant:
+    // - the generic business price a freshly-registered company sees (business
+    //   baseline + business-audience profiles, no per-company deals), and
+    // - this company's effective price (its negotiated price + assigned profiles).
+    // The effective price is highlighted only when it differs from the generic one.
+    let variants_only: Vec<product_variants::Model> =
+        variant_rows.iter().map(|(_, v)| v.clone()).collect();
+    let business = pricing::audience_price_variants(&ctx, &variants_only, BUSINESS_AUDIENCE).await?;
+    let details = pricing::detail_variants(&ctx, &variants_only, Some(&company)).await?;
+
+    let rows: Vec<serde_json::Value> = variant_rows
        .iter()
        .zip(business.iter())
        .zip(details.iter())
-        .filter(|((product, _), _)| view::category_filter_keep(&filter, product.category_id))
-        .map(|((product, b), d)| {
+        .map(|(((product, variant), b), d)| {
            json!({
                "product_id": product.id,
+                "variant_id": variant.id,
                "name": product.name,
+                "variant_label": variant.label,
                "currency": product.currency,
                "regular_price": format_price(d.regular_cents),
                "business_price": format_price(b.price_cents),
@@ -207,22 +228,27 @@ async fn price_edit(
    auth: auth::JWT,
    jar: CookieJar,
    ViewEngine(v): ViewEngine<TeraView>,
-    Path((id, product_id)): Path<(i32, i32)>,
+    Path((id, variant_id)): Path<(i32, i32)>,
    Query(params): Query<HashMap<String, String>>,
    State(ctx): State<AppContext>,
 ) -> Result<Response> {
    guard::current_admin(auth, &ctx).await?;
    let company = company_by_id(&ctx, id).await?;
-    let product = products::Entity::find_by_id(product_id)
+    let variant = product_variants::Entity::find_by_id(variant_id)
+        .one(&ctx.db)
+        .await?
+        .ok_or_else(|| Error::NotFound)?;
+    let product = products::Entity::find_by_id(variant.product_id)
        .one(&ctx.db)
        .await?
        .ok_or_else(|| Error::NotFound)?;

    let business =
-        pricing::audience_price_many(&ctx, std::slice::from_ref(&product), BUSINESS_AUDIENCE)
+        pricing::audience_price_variants(&ctx, std::slice::from_ref(&variant), BUSINESS_AUDIENCE)
            .await?;
    let business_cents = business[0].price_cents;
-    let detail = pricing::detail_many(&ctx, std::slice::from_ref(&product), Some(&company)).await?;
+    let detail =
+        pricing::detail_variants(&ctx, std::slice::from_ref(&variant), Some(&company)).await?;
    let d = &detail[0];

    // Names for the covering profiles, used by the collision resolution selector.
@@ -248,7 +274,9 @@ async fn price_edit(
            "customer": { "id": company.id, "name": company.name },
            "product": {
                "id": product.id,
+                "variant_id": variant.id,
                "name": product.name,
+                "variant_label": variant.label,
                "currency": product.currency,
                "regular_price": format_price(d.regular_cents),
                "regular_cents": d.regular_cents,
@@ -271,7 +299,7 @@ async fn price_edit(
 #[debug_handler]
 async fn set_price(
    auth: auth::JWT,
-    Path((id, product_id)): Path<(i32, i32)>,
+    Path((id, variant_id)): Path<(i32, i32)>,
    State(ctx): State<AppContext>,
    Form(form): Form<PriceForm>,
 ) -> Result<Response> {
@@ -280,7 +308,7 @@ async fn set_price(

    let entered = form.price.trim().to_string();
    if entered.is_empty() {
-        account_product_prices::Model::clear(&ctx.db, company.id, product_id).await?;
+        account_product_prices::Model::clear(&ctx.db, company.id, variant_id).await?;
        return format::redirect(&format!("/admin/customers/{id}"));
    }

@@ -288,23 +316,23 @@ async fn set_price(
        Ok(cents) if cents > 0 => cents,
        _ => {
            return format::redirect(&format!(
-                "/admin/customers/{id}/prices/{product_id}/edit?error=discount-must-be-positive"
+                "/admin/customers/{id}/prices/{variant_id}/edit?error=discount-must-be-positive"
            ))
        }
    };
-    account_product_prices::Model::upsert(&ctx.db, company.id, product_id, cents).await?;
+    account_product_prices::Model::upsert(&ctx.db, company.id, variant_id, cents).await?;
    format::redirect(&format!("/admin/customers/{id}"))
 }

 #[debug_handler]
 async fn remove_price(
    auth: auth::JWT,
-    Path((id, product_id)): Path<(i32, i32)>,
+    Path((id, variant_id)): Path<(i32, i32)>,
    State(ctx): State<AppContext>,
 ) -> Result<Response> {
    guard::current_admin(auth, &ctx).await?;
    let company = company_by_id(&ctx, id).await?;
-    account_product_prices::Model::clear(&ctx.db, company.id, product_id).await?;
+    account_product_prices::Model::clear(&ctx.db, company.id, variant_id).await?;
    format::redirect(&format!("/admin/customers/{id}"))
 }

@@ -347,7 +375,7 @@ async fn sync_profiles(
 #[debug_handler]
 async fn set_resolution(
    auth: auth::JWT,
-    Path((id, product_id)): Path<(i32, i32)>,
+    Path((id, variant_id)): Path<(i32, i32)>,
    State(ctx): State<AppContext>,
    Form(form): Form<ResolutionForm>,
 ) -> Result<Response> {
@@ -356,14 +384,14 @@ async fn set_resolution(

    let existing = account_product_resolutions::Entity::find()
        .filter(account_product_resolutions::Column::UserId.eq(company.id))
-        .filter(account_product_resolutions::Column::ProductId.eq(product_id))
+        .filter(account_product_resolutions::Column::VariantId.eq(variant_id))
        .one(&ctx.db)
        .await?;
    let mut active = match existing {
        Some(row) => row.into_active_model(),
        None => account_product_resolutions::ActiveModel {
            user_id: Set(company.id),
-            product_id: Set(product_id),
+            variant_id: Set(variant_id),
            ..Default::default()
        },
    };
@@ -378,16 +406,16 @@ pub fn routes() -> Routes {
        .add("/admin/customers/{id}", get(show))
        .add("/admin/customers/{id}/profiles", post(sync_profiles))
        .add(
-            "/admin/customers/{id}/prices/{product_id}/edit",
+            "/admin/customers/{id}/prices/{variant_id}/edit",
            get(price_edit),
        )
-        .add("/admin/customers/{id}/prices/{product_id}", post(set_price))
+        .add("/admin/customers/{id}/prices/{variant_id}", post(set_price))
        .add(
-            "/admin/customers/{id}/prices/{product_id}/remove",
+            "/admin/customers/{id}/prices/{variant_id}/remove",
            post(remove_price),
        )
        .add(
-            "/admin/customers/{id}/resolutions/{product_id}",
+            "/admin/customers/{id}/resolutions/{variant_id}",
            post(set_resolution),
        )
 }
--- a/src/controllers/admin_form.rs
+++ b/src/controllers/admin_form.rs
@@ -1,8 +1,10 @@
 //! Multipart form handling shared by the product and category admin forms.
 //!
-//! Both forms submit a mix of text fields and an optional `image` file part;
-//! this collects them into an easy-to-query [`MultipartForm`] and stores any
-//! uploaded image through the configured storage driver.
+//! Both forms submit a mix of text fields and `image` file part(s); this
+//! collects them into an easy-to-query [`MultipartForm`] and stores any
+//! uploaded image through the configured storage driver. The product form can
+//! upload several images at once and submits the ids of the existing images it
+//! keeps (in display order) as repeated `existing_images` fields.

 use std::collections::HashMap;

@@ -18,11 +20,15 @@ fn normalize_empty(value: Option<String>) -> Option<String> {
    })
 }

-/// Collected multipart form: text fields keyed by name, plus the raw bytes of
-/// an `image` file part if one was uploaded (an empty file input is ignored).
+/// Collected multipart form: text fields keyed by name, the raw bytes of every
+/// `image` file part uploaded (empty file inputs are ignored, submission order
+/// preserved), and the ids of the existing images the form kept, in the display
+/// order it submitted them (`existing_images`, repeated — drives reorder and
+/// delete on the edit form).
 pub(crate) struct MultipartForm {
    fields: HashMap<String, String>,
-    pub(crate) image: Option<Vec<u8>>,
+    pub(crate) images: Vec<Vec<u8>>,
+    pub(crate) kept_image_ids: Vec<i32>,
 }

 impl MultipartForm {
@@ -31,6 +37,12 @@ impl MultipartForm {
        normalize_empty(self.fields.get(key).cloned())
    }

+    /// The single uploaded image, for forms (like categories) that accept only
+    /// one. Consumes the first uploaded part; any extras are ignored.
+    pub(crate) fn single_image(self) -> Option<Vec<u8>> {
+        self.images.into_iter().next()
+    }
+
    /// Whether a checkbox-style field is checked.
    pub(crate) fn checked(&self, key: &str) -> bool {
        matches!(
@@ -38,11 +50,29 @@ impl MultipartForm {
            Some("on" | "true" | "1")
        )
    }
+
+    /// The distinct row indices `N` present among `variants[N][...]` fields,
+    /// sorted ascending. Used to read the repeated variant rows of the product
+    /// form (each row's fields are uniquely keyed, so the HashMap keeps them all).
+    pub(crate) fn variant_indices(&self) -> Vec<usize> {
+        let mut idx: Vec<usize> = self
+            .fields
+            .keys()
+            .filter_map(|k| {
+                let rest = k.strip_prefix("variants[")?;
+                rest.split(']').next()?.parse::<usize>().ok()
+            })
+            .collect();
+        idx.sort_unstable();
+        idx.dedup();
+        idx
+    }
 }

 pub(crate) async fn read_multipart_form(mut multipart: Multipart) -> Result<MultipartForm> {
    let mut fields = HashMap::new();
-    let mut image = None;
+    let mut images = Vec::new();
+    let mut kept_image_ids = Vec::new();

    while let Some(mut field) = multipart
        .next_field()
@@ -65,8 +95,17 @@ pub(crate) async fn read_multipart_form(mut multipart: Multipart) -> Result<Mult
                    )));
                }
            }
+            // An empty file part (no file chosen in a slot) is ignored.
            if !data.is_empty() {
-                image = Some(data);
+                images.push(data);
+            }
+        } else if name == "existing_images" {
+            let value = field
+                .text()
+                .await
+                .map_err(|err| Error::BadRequest(format!("invalid multipart field: {err}")))?;
+            if let Ok(id) = value.trim().parse::<i32>() {
+                kept_image_ids.push(id);
            }
        } else {
            let value = field
@@ -77,7 +116,11 @@ pub(crate) async fn read_multipart_form(mut multipart: Multipart) -> Result<Mult
        }
    }

-    Ok(MultipartForm { fields, image })
+    Ok(MultipartForm {
+        fields,
+        images,
+        kept_image_ids,
+    })
 }

 /// Store an uploaded image's bytes and return its generated filename.
--- a/src/controllers/admin_products.rs
+++ b/src/controllers/admin_products.rs
@@ -1,4 +1,11 @@
 //! Admin product CRUD.
+//!
+//! A product is a presentation grouping; its purchasable options live in
+//! `product_variants` (each with its own label, sku, stock, regular price and
+//! optional public/business quick-sale prices), edited inline on the product
+//! form. The products list and the per-audience percentage discount profiles
+//! operate at the product level, previewing prices on each product's
+//! representative (first) variant.

 use std::collections::{HashMap, HashSet};

@@ -9,7 +16,6 @@ use sea_orm::{
    ActiveModelTrait, ColumnTrait, EntityTrait, ModelTrait, PaginatorTrait, QueryFilter,
    QueryOrder, Set, TransactionTrait,
 };
-use serde::Deserialize;
 use serde_json::json;

 use crate::{
@@ -20,12 +26,13 @@ use crate::{
    },
    shared::{
        guard,
-        money::{format_bp, format_price, parse_percent, parse_price_to_cents},
+        money::{format_bp, format_price, parse_price_to_cents},
        pricing,
        slug::{slugify, unique_slug},
    },
    models::{
-        audience_discount_profiles, categories, discount_profiles, product_images, products,
+        audience_discount_profiles, categories, discount_profiles, product_images,
+        product_variants, products,
    },
    views::shop as view,
 };
@@ -45,10 +52,7 @@ struct ProductFields {
    name: String,
    slug: String,
    description: Option<String>,
-    price_cents: i64,
    currency: String,
-    sku: Option<String>,
-    stock: i32,
    category_id: Option<i32>,
    published: bool,
 }
@@ -61,19 +65,8 @@ async fn parse_product_fields(
    let name = form
        .text("name")
        .ok_or_else(|| Error::BadRequest("product name is required".to_string()))?;
-    let price_cents = parse_price_to_cents(
-        form.text("price")
-            .ok_or_else(|| Error::BadRequest("price is required".to_string()))?
-            .as_str(),
-    )?;
    let currency = form.text("currency").unwrap_or_else(|| "EUR".to_string());
    let description = form.text("description");
-    let sku = form.text("sku");
-    let stock = form
-        .text("stock")
-        .and_then(|s| s.parse::<i32>().ok())
-        .filter(|n| *n >= 0)
-        .unwrap_or(0);
    let category_id = form.text("category_id").and_then(|s| s.parse::<i32>().ok());
    let published = form.checked("published");

@@ -98,15 +91,155 @@ async fn parse_product_fields(
        name,
        slug,
        description,
-        price_cents,
        currency,
-        sku,
-        stock,
        category_id,
        published,
    })
 }

+/// One variant row parsed from the product form.
+struct VariantInput {
+    id: Option<i32>,
+    label: String,
+    sku: Option<String>,
+    /// `None` = available but not inventory-tracked.
+    stock: Option<i32>,
+    price_cents: i64,
+    business_sale_cents: Option<i64>,
+    position: i32,
+}
+
+/// The optional business-sale price field on a variant row: blank means "no
+/// business quick-sale", a value must parse and be below the regular price.
+fn parse_optional_sale(
+    form: &MultipartForm,
+    i: usize,
+    key: &str,
+    price_cents: i64,
+) -> Result<Option<i64>> {
+    let Some(raw) = form.text(&format!("variants[{i}][{key}]")) else {
+        return Ok(None);
+    };
+    let cents = parse_price_to_cents(&raw)?;
+    if cents <= 0 || cents >= price_cents {
+        return Err(Error::BadRequest(
+            "a sale price must be positive and below the regular price".to_string(),
+        ));
+    }
+    Ok(Some(cents))
+}
+
+/// Parse the repeated variant rows from the form, in submission order. Blank
+/// rows (no price and no label) are skipped; at least one valid row is required.
+fn parse_variants(form: &MultipartForm) -> Result<Vec<VariantInput>> {
+    let mut out = Vec::new();
+    for i in form.variant_indices() {
+        let label = form
+            .text(&format!("variants[{i}][label]"))
+            .unwrap_or_default();
+        let price_raw = form.text(&format!("variants[{i}][price]"));
+
+        let Some(price_raw) = price_raw else {
+            // A completely empty leftover row is ignored; a labelled row without
+            // a price is a mistake worth reporting.
+            if label.is_empty() {
+                continue;
+            }
+            return Err(Error::BadRequest(
+                "each option needs a price".to_string(),
+            ));
+        };
+        let price_cents = parse_price_to_cents(&price_raw)?;
+        if price_cents <= 0 {
+            return Err(Error::BadRequest(
+                "an option price must be positive".to_string(),
+            ));
+        }
+
+        let sku = form.text(&format!("variants[{i}][sku]"));
+        // Stock is optional: blank means "available, not tracked". A value must
+        // be a non-negative integer.
+        let stock = match form.text(&format!("variants[{i}][stock]")) {
+            None => None,
+            Some(raw) => Some(
+                raw.parse::<i32>()
+                    .ok()
+                    .filter(|n| *n >= 0)
+                    .ok_or_else(|| Error::BadRequest("stock must be 0 or more".to_string()))?,
+            ),
+        };
+        let business_sale_cents = parse_optional_sale(form, i, "business_sale", price_cents)?;
+        let id = form
+            .text(&format!("variants[{i}][id]"))
+            .and_then(|s| s.parse::<i32>().ok());
+
+        out.push(VariantInput {
+            id,
+            label,
+            sku,
+            stock,
+            price_cents,
+            business_sale_cents,
+            position: out.len() as i32,
+        });
+    }
+    if out.is_empty() {
+        return Err(Error::BadRequest(
+            "add at least one option with a price".to_string(),
+        ));
+    }
+    Ok(out)
+}
+
+/// Apply a parsed variant row onto a (new or existing) active model.
+fn apply_variant(active: &mut product_variants::ActiveModel, input: &VariantInput) {
+    active.label = Set(input.label.clone());
+    active.sku = Set(input.sku.clone());
+    active.stock = Set(input.stock);
+    active.price_cents = Set(input.price_cents);
+    // The per-variant public sale price was removed from the UI; keep it cleared.
+    active.sale_price_cents = Set(None);
+    active.business_sale_price_cents = Set(input.business_sale_cents);
+    active.position = Set(input.position);
+}
+
+/// Reconcile the product's variants with the submitted rows inside `txn`: update
+/// rows carrying an id, insert rows without one, and delete existing variants no
+/// longer present.
+async fn sync_variants<C: ConnectionTrait>(
+    txn: &C,
+    product_id: i32,
+    inputs: &[VariantInput],
+) -> Result<()> {
+    let existing = product_variants::Entity::for_product(txn, product_id).await?;
+    let keep: HashSet<i32> = inputs.iter().filter_map(|v| v.id).collect();
+    for variant in &existing {
+        if !keep.contains(&variant.id) {
+            variant.clone().delete(txn).await?;
+        }
+    }
+    let by_id: HashMap<i32, product_variants::Model> =
+        existing.into_iter().map(|v| (v.id, v)).collect();
+    for input in inputs {
+        match input.id.and_then(|id| by_id.get(&id)) {
+            Some(model) => {
+                let mut active = model.clone().into_active_model();
+                apply_variant(&mut active, input);
+                active.update(txn).await?;
+            }
+            None => {
+                let mut active = product_variants::ActiveModel {
+                    product_id: Set(product_id),
+                    ..Default::default()
+                };
+                apply_variant(&mut active, input);
+                active.insert(txn).await?;
+            }
+        }
+    }
+    Ok(())
+}
+
 async fn form_context(ctx: &AppContext, jar: &CookieJar) -> Result<serde_json::Value> {
    let categories = categories::Entity::find()
        .order_by_asc(categories::Column::Position)
@@ -116,6 +249,18 @@ async fn form_context(ctx: &AppContext, jar: &CookieJar) -> Result<serde_json::V
    Ok(json!({ "categories": categories, "lang": current_lang(jar) }))
 }

+/// Variant shape used to pre-fill a row of the product form's variant editor.
+fn variant_form_json(variant: &product_variants::Model) -> serde_json::Value {
+    json!({
+        "id": variant.id,
+        "label": variant.label,
+        "sku": variant.sku,
+        "stock": variant.stock,
+        "price": format_price(variant.price_cents),
+        "business_sale": variant.business_sale_price_cents.map(format_price),
+    })
+}
+
 #[debug_handler]
 async fn index(
    auth: auth::JWT,
@@ -140,9 +285,8 @@ async fn index(
        .order_by_desc(products::Column::CreatedAt)
        .all(&ctx.db)
        .await?;
-    // Effective price each product carries for the active audience, after the
-    // global per-product discount and any profiles assigned to that audience.
-    let effective = pricing::audience_price_many(&ctx, &list, audience).await?;
+    let ids: Vec<i32> = list.iter().map(|p| p.id).collect();
+    let grouped = product_variants::Entity::grouped_for_products(&ctx.db, &ids).await?;

    // Category sidebar tree (counts over the full, unfiltered list) plus the
    // active `?category=` filter applied to the rows.
@@ -155,16 +299,48 @@ async fn index(
        .to_string();
    let filter = view::category_filter_ids(&all_categories, &selected_category);

-    let mut rows = Vec::new();
-    for (product, priced) in list.iter().zip(effective.iter()) {
+    // The kept products with their representative (first) variant, priced in one
+    // batch for the active audience.
+    let mut kept: Vec<(&products::Model, &Vec<product_variants::Model>)> = Vec::new();
+    for product in &list {
        if !view::category_filter_keep(&filter, product.category_id) {
            continue;
        }
+        if let Some(variants) = grouped.get(&product.id) {
+            if !variants.is_empty() {
+                kept.push((product, variants));
+            }
+        }
+    }
+    let reps: Vec<product_variants::Model> =
+        kept.iter().map(|(_, vs)| vs[0].clone()).collect();
+    let effective = pricing::audience_price_variants(&ctx, &reps, audience).await?;
+
+    let mut rows = Vec::new();
+    for ((product, variants), priced) in kept.iter().zip(effective.iter()) {
        let image = product_images::first_for(&ctx, product.id).await?;
        let category_name = product
            .category_id
            .and_then(|id| category_name.get(&id).cloned());
-        rows.push(product_row(product, priced, image, category_name, audience));
+        // Stock column: total across tracked variants, or "∞" when any option is
+        // untracked (always available).
+        let stock_display = if variants.iter().any(|v| !v.tracked()) {
+            "∞".to_string()
+        } else {
+            variants
+                .iter()
+                .filter_map(|v| v.stock)
+                .sum::<i32>()
+                .to_string()
+        };
+        rows.push(product_row(
+            product,
+            priced,
+            variants.len(),
+            stock_display,
+            image,
+            category_name,
+        ));
    }

    format::view(
@@ -183,32 +359,32 @@ async fn index(
    )
 }

-/// List-row shape: the product card fields plus the active audience's per-product
-/// discount and its resolved effective price (after profiles).
+/// List-row shape: the product card fields plus its representative variant's
+/// resolved effective price (after the active audience's profiles) and the count
+/// of options.
 fn product_row(
    product: &products::Model,
    effective: &pricing::PricedProduct,
+    variant_count: usize,
+    stock_display: String,
    image: Option<String>,
    category_name: Option<String>,
-    audience: &str,
 ) -> serde_json::Value {
-    let sale = current_value(product, audience);
    json!({
        "id": product.id,
        "name": product.name,
        "slug": product.slug,
        "currency": product.currency,
-        "stock": product.stock,
+        "stock": stock_display,
+        "variant_count": variant_count,
+        "has_options": variant_count > 1,
        "published": product.published,
        "image": image,
        "category_name": category_name,
-        "regular_price": format_price(product.price_cents),
-        "on_sale": sale.is_some(),
-        "sale_price": sale.map(format_price),
-        "percent_off": sale.map(|s| percent_off(product.price_cents, s)),
+        "regular_price": format_price(effective.regular_cents),
        "effective_price": format_price(effective.price_cents),
        "effective_reduced": effective.is_reduced(),
-        "effective_percent_off": percent_off(product.price_cents, effective.price_cents),
+        "effective_percent_off": percent_off(effective.regular_cents, effective.price_cents),
    })
 }

@@ -252,6 +428,7 @@ async fn new(
    guard::current_admin(auth, &ctx).await?;
    let mut context = form_context(&ctx, &jar).await?;
    context["product"] = serde_json::Value::Null;
+    context["variants"] = json!([]);
    format::view(&v, "admin/catalog/product_form.html", context)
 }

@@ -264,38 +441,77 @@ async fn create(
    guard::current_admin(auth, &ctx).await?;
    let form = read_multipart_form(multipart).await?;
    let fields = parse_product_fields(&ctx, &form, None).await?;
+    let variants = parse_variants(&form)?;

+    let txn = ctx.db.begin().await?;
    let product = products::ActiveModel {
        name: Set(fields.name),
        slug: Set(fields.slug),
        description: Set(fields.description),
-        price_cents: Set(fields.price_cents),
        currency: Set(fields.currency),
-        sku: Set(fields.sku),
-        stock: Set(fields.stock),
        view_count: Set(0),
        published: Set(fields.published),
        published_at: Set(fields.published.then(|| chrono::Utc::now().into())),
        category_id: Set(fields.category_id),
        ..Default::default()
    }
-    .insert(&ctx.db)
+    .insert(&txn)
    .await?;
+    sync_variants(&txn, product.id, &variants).await?;
+    sync_images(&ctx, &txn, product.id, &form.kept_image_ids, &form.images).await?;
+    txn.commit().await?;

-    if let Some(data) = form.image {
-        let filename = store_image(&ctx, data).await?;
+    format::redirect("/admin/catalog/products")
+}
+
+/// Reconcile a product's images inside `txn` with the submitted form: keep the
+/// existing images named in `kept_ids`, re-numbering their positions to that
+/// order (first = main); delete any existing image no longer named; then store
+/// and append the freshly uploaded `new_images` after the kept ones.
+async fn sync_images<C: ConnectionTrait>(
+    ctx: &AppContext,
+    txn: &C,
+    product_id: i32,
+    kept_ids: &[i32],
+    new_images: &[Vec<u8>],
+) -> Result<()> {
+    let existing = product_images::for_product(txn, product_id).await?;
+    let by_id: HashMap<i32, product_images::Model> =
+        existing.iter().map(|m| (m.id, m.clone())).collect();
+    let keep: HashSet<i32> = kept_ids.iter().copied().collect();
+
+    for image in &existing {
+        if !keep.contains(&image.id) {
+            image.clone().delete(txn).await?;
+        }
+    }
+
+    // Re-number the kept images to their submitted order. Ids that no longer
+    // exist (a stale form) are simply skipped.
+    let mut position = 0i32;
+    for id in kept_ids {
+        if let Some(model) = by_id.get(id) {
+            let mut active = model.clone().into_active_model();
+            active.position = Set(position);
+            active.update(txn).await?;
+            position += 1;
+        }
+    }
+
+    for data in new_images {
+        let filename = store_image(ctx, data.clone()).await?;
        product_images::ActiveModel {
-            product_id: Set(product.id),
+            product_id: Set(product_id),
            image_id: Set(filename),
-            position: Set(0),
+            position: Set(position),
            alt: Set(None),
            ..Default::default()
        }
-        .insert(&ctx.db)
+        .insert(txn)
        .await?;
+        position += 1;
    }
-
-    format::redirect("/admin/catalog/products")
+    Ok(())
 }

 #[debug_handler]
@@ -308,9 +524,11 @@ async fn edit(
 ) -> Result<Response> {
    guard::current_admin(auth, &ctx).await?;
    let product = product_by_id(&ctx, id).await?;
-    let image = product_images::first_for(&ctx, id).await?;
+    let images = product_images::for_product(&ctx.db, id).await?;
+    let variants = product_variants::Entity::for_product(&ctx.db, id).await?;
    let mut context = form_context(&ctx, &jar).await?;
-    context["product"] = view::product_form(&product, image);
+    context["product"] = view::product_form(&product, &images);
+    context["variants"] = json!(variants.iter().map(variant_form_json).collect::<Vec<_>>());
    format::view(&v, "admin/catalog/product_form.html", context)
 }

@@ -326,15 +544,14 @@ async fn update(
    let was_published = existing.published;
    let form = read_multipart_form(multipart).await?;
    let fields = parse_product_fields(&ctx, &form, Some(id)).await?;
+    let variants = parse_variants(&form)?;

+    let txn = ctx.db.begin().await?;
    let mut product = existing.into_active_model();
    product.name = Set(fields.name);
    product.slug = Set(fields.slug);
    product.description = Set(fields.description);
-    product.price_cents = Set(fields.price_cents);
    product.currency = Set(fields.currency);
-    product.sku = Set(fields.sku);
-    product.stock = Set(fields.stock);
    product.category_id = Set(fields.category_id);
    product.published = Set(fields.published);
    if fields.published && !was_published {
@@ -342,21 +559,10 @@ async fn update(
    } else if !fields.published {
        product.published_at = Set(None);
    }
-    product.update(&ctx.db).await?;
-
-    if let Some(data) = form.image {
-        let filename = store_image(&ctx, data).await?;
-        let next_position = product_images::count_for(&ctx, id).await?;
-        product_images::ActiveModel {
-            product_id: Set(id),
-            image_id: Set(filename),
-            position: Set(next_position),
-            alt: Set(None),
-            ..Default::default()
-        }
-        .insert(&ctx.db)
-        .await?;
-    }
+    product.update(&txn).await?;
+    sync_variants(&txn, id, &variants).await?;
+    sync_images(&ctx, &txn, id, &form.kept_image_ids, &form.images).await?;
+    txn.commit().await?;

    format::redirect("/admin/catalog/products")
 }
@@ -372,23 +578,16 @@ async fn delete(
    format::redirect("/admin/catalog/products")
 }

-// --- Discounts -------------------------------------------------------------
+// --- Discount profiles -----------------------------------------------------
 //
 // Two audiences, switched by an `?audience=` tab on the products page:
-// - **personal** (default): the public sale price (`products.sale_price_cents`)
-//   everyone sees.
-// - **business**: a baseline discount for all company accounts
-//   (`products.business_sale_price_cents`). Per-company profiles/negotiated
-//   prices still layer on top (lowest price wins). Both are off the regular price.
-
-#[derive(Debug, Deserialize)]
-struct DiscountForm {
-    /// "fixed" (enter the new price) or "percent" (enter % off). Defaults to
-    /// fixed for older/JSON callers.
-    mode: Option<String>,
-    sale_price: Option<String>,
-    percent: Option<String>,
-}
+// - **personal** (default): what everyone sees.
+// - **business**: what company accounts see (per-company profiles/negotiated
+//   prices still layer on top; lowest price wins).
+//
+// Per-product absolute quick-sale prices live on each variant and are edited in
+// the product form. This section is only the reusable *percentage* discount
+// profiles assigned to an audience.

 fn read_audience(params: &HashMap<String, String>) -> &'static str {
    match params.get("audience").map(String::as_str) {
@@ -397,32 +596,10 @@ fn read_audience(params: &HashMap<String, String>) -> &'static str {
    }
 }

-fn current_value(product: &products::Model, audience: &str) -> Option<i64> {
-    if audience == BUSINESS {
-        product.business_sale_price_cents
-    } else {
-        product.sale_price_cents
-    }
-}
-
-fn set_value(active: &mut products::ActiveModel, audience: &str, value: Option<i64>) {
-    if audience == BUSINESS {
-        active.business_sale_price_cents = Set(value);
-    } else {
-        active.sale_price_cents = Set(value);
-    }
-}
-
 fn list_redirect(audience: &str) -> Result<Response> {
    format::redirect(&format!("/admin/catalog/products?audience={audience}"))
 }

-/// Resolve a percentage off the regular price into a fixed sale price in cents.
-fn percent_to_sale_cents(regular_cents: i64, percent: f64) -> i64 {
-    let off = (regular_cents as f64 * percent / 100.0).round() as i64;
-    regular_cents - off
-}
-
 /// Percent off the regular price, rounded to a whole number.
 fn percent_off(regular_cents: i64, sale_cents: i64) -> i64 {
    if regular_cents <= 0 {
@@ -432,6 +609,28 @@ fn percent_off(regular_cents: i64, sale_cents: i64) -> i64 {
    off.round() as i64
 }

+/// Representative (first) variant for each product in `list`, in the same order,
+/// dropping products with no variants. Returns the products kept alongside their
+/// representative variant.
+async fn representatives<'a>(
+    ctx: &AppContext,
+    list: &'a [products::Model],
+) -> Result<(Vec<&'a products::Model>, Vec<product_variants::Model>)> {
+    let ids: Vec<i32> = list.iter().map(|p| p.id).collect();
+    let grouped = product_variants::Entity::grouped_for_products(&ctx.db, &ids).await?;
+    let mut products_kept = Vec::new();
+    let mut reps = Vec::new();
+    for product in list {
+        if let Some(variants) = grouped.get(&product.id) {
+            if let Some(first) = variants.first() {
+                products_kept.push(product);
+                reps.push(first.clone());
+            }
+        }
+    }
+    Ok((products_kept, reps))
+}
+
 /// Preview the effective prices that the submitted (unsaved) checkbox set would
 /// produce, without persisting anything. Returns OOB `<span>`s that htmx swaps
 /// into the effective-price column so the admin sees the effect before Save.
@@ -461,14 +660,15 @@ async fn profiles_preview(
        .order_by_desc(products::Column::CreatedAt)
        .all(&ctx.db)
        .await?;
+    let (products_kept, reps) = representatives(&ctx, &list).await?;
    let effective =
-        pricing::audience_price_many_preview(&ctx, &list, audience, profile_ids).await?;
+        pricing::audience_price_variants_preview(&ctx, &reps, audience, profile_ids).await?;

    let selected_category = params.get("category").map(String::as_str).unwrap_or("all");
    let filter = view::category_filter_ids(&all_categories, selected_category);

    let mut rows = Vec::new();
-    for (product, priced) in list.iter().zip(effective.iter()) {
+    for (product, priced) in products_kept.iter().zip(effective.iter()) {
        if !view::category_filter_keep(&filter, product.category_id) {
            continue;
        }
@@ -477,7 +677,7 @@ async fn profiles_preview(
            "currency": product.currency,
            "effective_price": format_price(priced.price_cents),
            "effective_reduced": priced.is_reduced(),
-            "effective_percent_off": percent_off(product.price_cents, priced.price_cents),
+            "effective_percent_off": percent_off(priced.regular_cents, priced.price_cents),
        }));
    }

@@ -523,162 +723,10 @@ async fn sync_profiles(
    list_redirect(audience)
 }

-/// What to pre-fill the discount form with: the chosen input mode and the raw
-/// values for each field, so a rejected submit (or a re-edit) shows what the
-/// admin had.
-#[derive(Default)]
-struct FormPrefill {
-    mode: String,
-    fixed: String,
-    percent: String,
-}
-
-fn render_discount_form(
-    v: &TeraView,
-    jar: &CookieJar,
-    product: &products::Model,
-    audience: &str,
-    prefill: &FormPrefill,
-    error: Option<&str>,
-) -> Result<Response> {
-    let mode = if prefill.mode == "percent" { "percent" } else { "fixed" };
-    format::view(
-        v,
-        "admin/catalog/discount_form.html",
-        json!({
-            "product": {
-                "id": product.id,
-                "name": product.name,
-                "currency": product.currency,
-                "regular_price": format_price(product.price_cents),
-                "regular_cents": product.price_cents,
-            },
-            "audience": audience,
-            "has_discount": current_value(product, audience).is_some(),
-            "mode": mode,
-            "fixed": prefill.fixed,
-            "percent": prefill.percent,
-            "error": error,
-            "lang": current_lang(jar),
-        }),
-    )
-}
-
-#[debug_handler]
-async fn discount_edit(
-    auth: auth::JWT,
-    jar: CookieJar,
-    ViewEngine(v): ViewEngine<TeraView>,
-    Path(id): Path<i32>,
-    Query(params): Query<HashMap<String, String>>,
-    State(ctx): State<AppContext>,
-) -> Result<Response> {
-    guard::current_admin(auth, &ctx).await?;
-    let audience = read_audience(&params);
-    let product = product_by_id(&ctx, id).await?;
-    // Re-editing always opens in fixed mode showing the current price.
-    let prefill = FormPrefill {
-        mode: "fixed".to_string(),
-        fixed: current_value(&product, audience)
-            .map(format_price)
-            .unwrap_or_default(),
-        percent: String::new(),
-    };
-    render_discount_form(&v, &jar, &product, audience, &prefill, None)
-}
-
-#[debug_handler]
-async fn discount_update(
-    auth: auth::JWT,
-    jar: CookieJar,
-    ViewEngine(v): ViewEngine<TeraView>,
-    Path(id): Path<i32>,
-    Query(params): Query<HashMap<String, String>>,
-    State(ctx): State<AppContext>,
-    Form(form): Form<DiscountForm>,
-) -> Result<Response> {
-    guard::current_admin(auth, &ctx).await?;
-    let audience = read_audience(&params);
-    let product = product_by_id(&ctx, id).await?;
-
-    let mode = match form.mode.as_deref() {
-        Some("percent") => "percent",
-        _ => "fixed",
-    };
-    let fixed = form.sale_price.unwrap_or_default().trim().to_string();
-    let percent = form.percent.unwrap_or_default().trim().to_string();
-
-    let prefill = FormPrefill {
-        mode: mode.to_string(),
-        fixed: fixed.clone(),
-        percent: percent.clone(),
-    };
-    let render_err =
-        |key: &str| render_discount_form(&v, &jar, &product, audience, &prefill, Some(key));
-
-    // Resolve the entered discount into a fixed sale price in cents. An empty
-    // input in the active mode clears the discount (same as the Remove action).
-    let sale_cents = if mode == "percent" {
-        if percent.is_empty() {
-            return clear_discount(&ctx, product, audience).await;
-        }
-        let pct = match parse_percent(&percent) {
-            Some(pct) => pct,
-            None => return render_err("discount-invalid"),
-        };
-        if pct <= 0.0 || pct >= 100.0 {
-            return render_err("discount-percent-range");
-        }
-        percent_to_sale_cents(product.price_cents, pct)
-    } else {
-        if fixed.is_empty() {
-            return clear_discount(&ctx, product, audience).await;
-        }
-        match parse_price_to_cents(&fixed) {
-            Ok(cents) => cents,
-            Err(_) => return render_err("discount-invalid"),
-        }
-    };
-
-    if sale_cents <= 0 {
-        return render_err("discount-must-be-positive");
-    }
-    if sale_cents >= product.price_cents {
-        return render_err("discount-below-regular");
-    }
-
-    let mut active = product.into_active_model();
-    set_value(&mut active, audience, Some(sale_cents));
-    active.update(&ctx.db).await?;
-    list_redirect(audience)
-}
-
-async fn clear_discount(
-    ctx: &AppContext,
-    product: products::Model,
-    audience: &str,
-) -> Result<Response> {
-    let mut active = product.into_active_model();
-    set_value(&mut active, audience, None);
-    active.update(&ctx.db).await?;
-    list_redirect(audience)
-}
-
-#[debug_handler]
-async fn discount_remove(
-    auth: auth::JWT,
-    Path(id): Path<i32>,
-    Query(params): Query<HashMap<String, String>>,
-    State(ctx): State<AppContext>,
-) -> Result<Response> {
-    guard::current_admin(auth, &ctx).await?;
-    let audience = read_audience(&params);
-    let product = product_by_id(&ctx, id).await?;
-    clear_discount(&ctx, product, audience).await
-}
-
 pub fn routes() -> Routes {
-    let image_limit = DefaultBodyLimit::max(IMAGE_MAX_BYTES + 1024 * 1024);
+    // Several images may be uploaded in one submission; allow a generous total
+    // (per-file size is still capped at IMAGE_MAX_BYTES while reading).
+    let image_limit = DefaultBodyLimit::max(IMAGE_MAX_BYTES * 12 + 1024 * 1024);
    Routes::new()
        .add("/admin/catalog/products", get(index))
        .add("/admin/catalog/products/new", get(new))
@@ -697,16 +745,4 @@ pub fn routes() -> Routes {
            post(update).layer(image_limit),
        )
        .add("/admin/catalog/products/{id}/delete", post(delete))
-        .add(
-            "/admin/catalog/products/{id}/discount/edit",
-            get(discount_edit),
-        )
-        .add(
-            "/admin/catalog/products/{id}/discount",
-            post(discount_update),
-        )
-        .add(
-            "/admin/catalog/products/{id}/discount/remove",
-            post(discount_remove),
-        )
 }
--- a/src/controllers/cart.rs
+++ b/src/controllers/cart.rs
@@ -1,4 +1,4 @@
-use crate::{controllers::i18n::current_lang, shared::{guard, money::format_price, pricing}, models::products};
+use crate::{controllers::i18n::current_lang, shared::{guard, money::format_price, pricing}, models::{product_variants, products}};
 use axum::{
    http::{HeaderMap, StatusCode},
    response::Redirect,
@@ -15,22 +15,22 @@ const CART_MAX_AGE_DAYS: i64 = 30;

 #[derive(Debug, Deserialize)]
 struct AddForm {
-    product_id: i32,
+    variant_id: i32,
    quantity: Option<i32>,
 }

 #[derive(Debug, Deserialize)]
 struct UpdateForm {
-    product_id: i32,
+    variant_id: i32,
    quantity: i32,
 }

 #[derive(Debug, Deserialize)]
 struct RemoveForm {
-    product_id: i32,
+    variant_id: i32,
 }

-/// Parse the `cart` cookie ("id:qty,id:qty") into `(product_id, quantity)`
+/// Parse the `cart` cookie ("id:qty,id:qty") into `(variant_id, quantity)`
 /// pairs, silently dropping malformed or non-positive entries.
 pub(crate) fn parse_cart(jar: &CookieJar) -> Vec<(i32, i32)> {
    let Some(cookie) = jar.get(CART_COOKIE) else {
@@ -64,12 +64,23 @@ fn cart_cookie(value: String) -> Cookie<'static> {
        .build()
 }

-/// Look up a published product, returning its current stock cap.
-async fn published_product(ctx: &AppContext, id: i32) -> Result<Option<products::Model>> {
-    Ok(products::Entity::find_by_id(id)
+/// Look up a variant whose product is published, returning the variant together
+/// with its parent product (for name/slug/currency).
+async fn published_variant(
+    ctx: &AppContext,
+    variant_id: i32,
+) -> Result<Option<(product_variants::Model, products::Model)>> {
+    let Some(variant) = product_variants::Entity::find_by_id(variant_id)
+        .one(&ctx.db)
+        .await?
+    else {
+        return Ok(None);
+    };
+    let product = products::Entity::find_by_id(variant.product_id)
        .filter(products::Column::Published.eq(true))
        .one(&ctx.db)
-        .await?)
+        .await?;
+    Ok(product.map(|p| (variant, p)))
 }

 #[debug_handler]
@@ -79,16 +90,16 @@ async fn add(
    headers: HeaderMap,
    Form(form): Form<AddForm>,
 ) -> Result<Response> {
-    let Some(product) = published_product(&ctx, form.product_id).await? else {
+    let Some((variant, _product)) = published_variant(&ctx, form.variant_id).await? else {
        return Err(Error::NotFound);
    };

    let mut items = parse_cart(&jar);
    let add_qty = form.quantity.unwrap_or(1).max(1);
-    if let Some(entry) = items.iter_mut().find(|(id, _)| *id == product.id) {
-        entry.1 = (entry.1 + add_qty).min(product.stock);
+    if let Some(entry) = items.iter_mut().find(|(id, _)| *id == variant.id) {
+        entry.1 = variant.cap(entry.1 + add_qty);
    } else {
-        items.push((product.id, add_qty.min(product.stock)));
+        items.push((variant.id, variant.cap(add_qty)));
    }
    items.retain(|(_, qty)| *qty > 0);

@@ -117,14 +128,15 @@ async fn update(
    headers: HeaderMap,
    Form(form): Form<UpdateForm>,
 ) -> Result<Response> {
-    let stock = published_product(&ctx, form.product_id)
-        .await?
-        .map(|p| p.stock)
-        .unwrap_or(0);
+    // Clamp the requested quantity to what's available (no cap for untracked
+    // variants); a removed variant clamps to 0 and drops out below.
+    let clamped = match published_variant(&ctx, form.variant_id).await? {
+        Some((variant, _)) => variant.cap(form.quantity),
+        None => 0,
+    };

    let mut items = parse_cart(&jar);
-    let clamped = form.quantity.clamp(0, stock);
-    if let Some(entry) = items.iter_mut().find(|(id, _)| *id == form.product_id) {
+    if let Some(entry) = items.iter_mut().find(|(id, _)| *id == form.variant_id) {
        entry.1 = clamped;
    }
    items.retain(|(_, qty)| *qty > 0);
@@ -142,7 +154,7 @@ async fn remove(
    Form(form): Form<RemoveForm>,
 ) -> Result<Response> {
    let mut items = parse_cart(&jar);
-    items.retain(|(id, _)| *id != form.product_id);
+    items.retain(|(id, _)| *id != form.variant_id);

    let jar = jar.add(cart_cookie(serialize_cart(&items)));
    cart_response(&ctx, &v, jar, &headers).await
@@ -192,38 +204,40 @@ pub(crate) async fn resolve_cart(
    // Resolve the cart entries to in-stock products first, then price them all
    // for the current viewer in one batch (the price depends on who's logged in).
    let user = guard::current_user(ctx, jar).await;
-    let mut items: Vec<(products::Model, i32)> = Vec::new();
+    let mut items: Vec<(product_variants::Model, products::Model, i32)> = Vec::new();
    for (id, qty) in parse_cart(jar) {
-        let Some(product) = published_product(ctx, id).await? else {
+        let Some((variant, product)) = published_variant(ctx, id).await? else {
            continue;
        };
-        let qty = qty.clamp(0, product.stock);
+        let qty = variant.cap(qty);
        if qty == 0 {
            continue;
        }
-        items.push((product, qty));
+        items.push((variant, product, qty));
    }
-    let products_only: Vec<products::Model> = items.iter().map(|(p, _)| p.clone()).collect();
-    let priced = pricing::price_many(ctx, &products_only, user.as_ref()).await?;
+    let variants_only: Vec<product_variants::Model> =
+        items.iter().map(|(v, _, _)| v.clone()).collect();
+    let priced = pricing::price_variants(ctx, &variants_only, user.as_ref()).await?;

    let mut lines = Vec::new();
    let mut valid = Vec::new();
    let mut total: i64 = 0;
-    for ((product, qty), priced) in items.iter().zip(priced.iter()) {
+    for ((variant, product, qty), priced) in items.iter().zip(priced.iter()) {
        let unit_price = priced.price_cents;
        let line_total = unit_price * i64::from(*qty);
        total += line_total;
-        valid.push((product.id, *qty));
+        valid.push((variant.id, *qty));
        lines.push(json!({
-            "id": product.id,
+            "id": variant.id,
            "name": product.name,
+            "variant_label": variant.label,
            "slug": product.slug,
            "price": format_price(unit_price),
            "regular_price": format_price(priced.regular_cents),
            "on_sale": priced.is_reduced(),
            "currency": product.currency,
            "quantity": qty,
-            "stock": product.stock,
+            "stock": variant.stock,
            "line_total": format_price(line_total),
        }));
    }
--- a/src/controllers/shop.rs
+++ b/src/controllers/shop.rs
@@ -9,22 +9,40 @@ use serde_json::json;
 use crate::{
    controllers::i18n::current_lang,
    shared::{guard, pricing},
-    models::{categories, product_images, products, users},
+    models::{categories, product_images, product_variants, products, users},
    views::shop as view,
 };

-/// Shape a list of products into card rows for `user` (None = public), pricing
-/// each via [`pricing::price_many`] and loading its primary image.
+/// Shape a list of products into card rows for `user` (None = public). Each card
+/// shows the resolved price of the product's representative (first) variant; the
+/// `variant_count` lets the template render "from {price}" for multi-variant
+/// products. Products with no variants are skipped (not purchasable).
 async fn product_rows(
    ctx: &AppContext,
    user: Option<&users::Model>,
    list: Vec<products::Model>,
 ) -> Result<Vec<serde_json::Value>> {
-    let priced = pricing::price_many(ctx, &list, user).await?;
-    let mut rows = Vec::with_capacity(list.len());
-    for (product, priced) in list.iter().zip(priced.iter()) {
+    let ids: Vec<i32> = list.iter().map(|p| p.id).collect();
+    let grouped = product_variants::Entity::grouped_for_products(&ctx.db, &ids).await?;
+
+    // Representative (first) variant per product, in list order, dropping any
+    // product that has no variants.
+    let mut entries: Vec<(&products::Model, product_variants::Model, usize)> = Vec::new();
+    for product in &list {
+        if let Some(variants) = grouped.get(&product.id) {
+            if let Some(first) = variants.first() {
+                entries.push((product, first.clone(), variants.len()));
+            }
+        }
+    }
+
+    let reps: Vec<product_variants::Model> = entries.iter().map(|(_, v, _)| v.clone()).collect();
+    let priced = pricing::price_variants(ctx, &reps, user).await?;
+
+    let mut rows = Vec::with_capacity(entries.len());
+    for ((product, rep, count), priced) in entries.iter().zip(priced.iter()) {
        let image = product_images::first_for(ctx, product.id).await?;
-        rows.push(view::product_card(product, priced, image, None));
+        rows.push(view::product_card(product, rep, priced, *count, image, None));
    }
    Ok(rows)
 }
@@ -121,13 +139,44 @@ async fn show(
    };

    let user = guard::current_user(&ctx, &jar).await;
-    let priced = pricing::price_for(&ctx, &product, user.as_ref()).await?;
+    let variants = product_variants::Entity::for_product(&ctx.db, product.id).await?;
+    let variant_prices = pricing::price_variants(&ctx, &variants, user.as_ref()).await?;
+    let options: Vec<serde_json::Value> = variants
+        .iter()
+        .zip(variant_prices.iter())
+        .map(|(variant, priced)| view::variant_option(variant, priced))
+        .collect();
+    // The card header uses the representative (first) variant for its headline
+    // price; the picker below lets the customer switch.
+    let representative = variants.first();
+    let priced = variant_prices.first().copied();
+    let card = match (representative, priced) {
+        (Some(rep), Some(priced)) => view::product_card(
+            &product,
+            rep,
+            &priced,
+            variants.len(),
+            None,
+            category.as_ref().map(|c| c.name.clone()),
+        ),
+        // A product with no variants isn't purchasable; show it without a price.
+        _ => serde_json::json!({
+            "id": product.id,
+            "name": product.name,
+            "slug": product.slug,
+            "description": product.description,
+            "currency": product.currency,
+            "variant_count": 0,
+            "has_options": false,
+        }),
+    };
    let c = guard::chrome_from(&ctx, user.as_ref());
    format::view(
        &v,
        "shop/show.html",
        json!({
-            "product": view::product_card(&product, &priced, None, category.as_ref().map(|c| c.name.clone())),
+            "product": card,
+            "variants": options,
            "images": images.iter().map(|i| i.image_id.clone()).collect::<Vec<_>>(),
            "category": category,
            "logged_in_admin": c.logged_in_admin,
--- a/src/models/_entities/account_discount_profiles.rs
+++ b/src/models/_entities/account_discount_profiles.rs
@@ -1,5 +1,4 @@
-//! `SeaORM` Entity assigning a discount profile to a business account.
-//! Hand-written to match the `account_discount_profiles` migration.
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -17,14 +16,6 @@ pub struct Model {

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
-    #[sea_orm(
-        belongs_to = "super::users::Entity",
-        from = "Column::UserId",
-        to = "super::users::Column::Id",
-        on_update = "Cascade",
-        on_delete = "Cascade"
-    )]
-    Users,
    #[sea_orm(
        belongs_to = "super::discount_profiles::Entity",
        from = "Column::DiscountProfileId",
@@ -33,12 +24,14 @@ pub enum Relation {
        on_delete = "Cascade"
    )]
    DiscountProfiles,
-}
-
-impl Related<super::users::Entity> for Entity {
-    fn to() -> RelationDef {
-        Relation::Users.def()
-    }
+    #[sea_orm(
+        belongs_to = "super::users::Entity",
+        from = "Column::UserId",
+        to = "super::users::Column::Id",
+        on_update = "Cascade",
+        on_delete = "Cascade"
+    )]
+    Users,
 }

 impl Related<super::discount_profiles::Entity> for Entity {
@@ -46,3 +39,9 @@ impl Related<super::discount_profiles::Entity> for Entity {
        Relation::DiscountProfiles.def()
    }
 }
+
+impl Related<super::users::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::Users.def()
+    }
+}
--- a/src/models/_entities/account_product_prices.rs
+++ b/src/models/_entities/account_product_prices.rs
@@ -1,5 +1,4 @@
-//! `SeaORM` Entity for per-account negotiated product prices. Hand-written to
-//! match the `account_product_prices` migration (one row per (user, product)).
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -11,13 +10,21 @@ pub struct Model {
    pub updated_at: DateTimeWithTimeZone,
    #[sea_orm(primary_key)]
    pub id: i32,
-    pub user_id: i32,
-    pub product_id: i32,
    pub price_cents: i64,
+    pub user_id: i32,
+    pub variant_id: i32,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
+    #[sea_orm(
+        belongs_to = "super::product_variants::Entity",
+        from = "Column::VariantId",
+        to = "super::product_variants::Column::Id",
+        on_update = "NoAction",
+        on_delete = "Cascade"
+    )]
+    ProductVariants,
    #[sea_orm(
        belongs_to = "super::users::Entity",
        from = "Column::UserId",
@@ -26,14 +33,12 @@ pub enum Relation {
        on_delete = "Cascade"
    )]
    Users,
-    #[sea_orm(
-        belongs_to = "super::products::Entity",
-        from = "Column::ProductId",
-        to = "super::products::Column::Id",
-        on_update = "Cascade",
-        on_delete = "Cascade"
-    )]
-    Products,
+}
+
+impl Related<super::product_variants::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::ProductVariants.def()
+    }
 }

 impl Related<super::users::Entity> for Entity {
@@ -41,9 +46,3 @@ impl Related<super::users::Entity> for Entity {
        Relation::Users.def()
    }
 }
-
-impl Related<super::products::Entity> for Entity {
-    fn to() -> RelationDef {
-        Relation::Products.def()
-    }
-}
--- a/src/models/_entities/account_product_resolutions.rs
+++ b/src/models/_entities/account_product_resolutions.rs
@@ -1,6 +1,4 @@
-//! `SeaORM` Entity for an account's chosen profile when two assigned profiles
-//! cover one product. Hand-written to match the `account_product_resolutions`
-//! migration.
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -13,28 +11,12 @@ pub struct Model {
    #[sea_orm(primary_key)]
    pub id: i32,
    pub user_id: i32,
-    pub product_id: i32,
    pub discount_profile_id: i32,
+    pub variant_id: i32,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
-    #[sea_orm(
-        belongs_to = "super::users::Entity",
-        from = "Column::UserId",
-        to = "super::users::Column::Id",
-        on_update = "Cascade",
-        on_delete = "Cascade"
-    )]
-    Users,
-    #[sea_orm(
-        belongs_to = "super::products::Entity",
-        from = "Column::ProductId",
-        to = "super::products::Column::Id",
-        on_update = "Cascade",
-        on_delete = "Cascade"
-    )]
-    Products,
    #[sea_orm(
        belongs_to = "super::discount_profiles::Entity",
        from = "Column::DiscountProfileId",
@@ -43,18 +25,22 @@ pub enum Relation {
        on_delete = "Cascade"
    )]
    DiscountProfiles,
-}
-
-impl Related<super::users::Entity> for Entity {
-    fn to() -> RelationDef {
-        Relation::Users.def()
-    }
-}
-
-impl Related<super::products::Entity> for Entity {
-    fn to() -> RelationDef {
-        Relation::Products.def()
-    }
+    #[sea_orm(
+        belongs_to = "super::product_variants::Entity",
+        from = "Column::VariantId",
+        to = "super::product_variants::Column::Id",
+        on_update = "NoAction",
+        on_delete = "Cascade"
+    )]
+    ProductVariants,
+    #[sea_orm(
+        belongs_to = "super::users::Entity",
+        from = "Column::UserId",
+        to = "super::users::Column::Id",
+        on_update = "Cascade",
+        on_delete = "Cascade"
+    )]
+    Users,
 }

 impl Related<super::discount_profiles::Entity> for Entity {
@@ -62,3 +48,15 @@ impl Related<super::discount_profiles::Entity> for Entity {
        Relation::DiscountProfiles.def()
    }
 }
+
+impl Related<super::product_variants::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::ProductVariants.def()
+    }
+}
+
+impl Related<super::users::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::Users.def()
+    }
+}
--- a/src/models/_entities/audience_discount_profiles.rs
+++ b/src/models/_entities/audience_discount_profiles.rs
@@ -1,6 +1,4 @@
-//! `SeaORM` Entity assigning a discount profile to a whole audience (all
-//! personal viewers or all company accounts). Hand-written to match the
-//! `audience_discount_profiles` migration.
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -12,7 +10,6 @@ pub struct Model {
    pub updated_at: DateTimeWithTimeZone,
    #[sea_orm(primary_key)]
    pub id: i32,
-    /// "personal" or "business".
    pub audience: String,
    pub discount_profile_id: i32,
 }
--- a/src/models/_entities/audit_logs.rs
+++ b/src/models/_entities/audit_logs.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/categories.rs
+++ b/src/models/_entities/categories.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -23,8 +23,6 @@ pub struct Model {

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
-    #[sea_orm(has_many = "super::products::Entity")]
-    Products,
    #[sea_orm(
        belongs_to = "Entity",
        from = "Column::ParentId",
@@ -32,7 +30,9 @@ pub enum Relation {
        on_update = "Cascade",
        on_delete = "SetNull"
    )]
-    Parent,
+    SelfRef,
+    #[sea_orm(has_many = "super::products::Entity")]
+    Products,
 }

 impl Related<super::products::Entity> for Entity {
--- a/src/models/_entities/customer_profiles.rs
+++ b/src/models/_entities/customer_profiles.rs
@@ -1,5 +1,4 @@
-//! `SeaORM` Entity for customer shipping/contact profiles. Hand-written to match
-//! the `customer_profiles` migration (1:1 with `users` via a unique `user_id`).
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -11,18 +10,18 @@ pub struct Model {
    pub updated_at: DateTimeWithTimeZone,
    #[sea_orm(primary_key)]
    pub id: i32,
-    #[sea_orm(unique)]
-    pub user_id: i32,
-    pub company_name: Option<String>,
-    pub company_id: Option<String>,
-    pub tax_id: Option<String>,
-    pub vat_id: Option<String>,
    pub phone_prefix: Option<String>,
    pub phone: Option<String>,
    pub address: Option<String>,
    pub city: Option<String>,
    pub zip: Option<String>,
    pub country: Option<String>,
+    #[sea_orm(unique)]
+    pub user_id: i32,
+    pub company_name: Option<String>,
+    pub company_id: Option<String>,
+    pub tax_id: Option<String>,
+    pub vat_id: Option<String>,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
--- a/src/models/_entities/discount_profile_products.rs
+++ b/src/models/_entities/discount_profile_products.rs
@@ -1,5 +1,4 @@
-//! `SeaORM` Entity for a discount profile's product membership. Hand-written to
-//! match the `discount_profile_products` migration.
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/discount_profiles.rs
+++ b/src/models/_entities/discount_profiles.rs
@@ -1,5 +1,4 @@
-//! `SeaORM` Entity for reusable discount profiles. Hand-written to match the
-//! `discount_profiles` migration.
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -12,24 +11,20 @@ pub struct Model {
    #[sea_orm(primary_key)]
    pub id: i32,
    pub name: String,
-    /// Discount in basis points (5% = 500).
    pub percent_bp: i32,
-    /// "include" (covers listed products) or "all_except" (covers all but them).
    pub scope_type: String,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
-    #[sea_orm(has_many = "super::discount_profile_products::Entity")]
-    DiscountProfileProducts,
    #[sea_orm(has_many = "super::account_discount_profiles::Entity")]
    AccountDiscountProfiles,
-}
-
-impl Related<super::discount_profile_products::Entity> for Entity {
-    fn to() -> RelationDef {
-        Relation::DiscountProfileProducts.def()
-    }
+    #[sea_orm(has_many = "super::account_product_resolutions::Entity")]
+    AccountProductResolutions,
+    #[sea_orm(has_many = "super::audience_discount_profiles::Entity")]
+    AudienceDiscountProfiles,
+    #[sea_orm(has_many = "super::discount_profile_products::Entity")]
+    DiscountProfileProducts,
 }

 impl Related<super::account_discount_profiles::Entity> for Entity {
@@ -37,3 +32,21 @@ impl Related<super::account_discount_profiles::Entity> for Entity {
        Relation::AccountDiscountProfiles.def()
    }
 }
+
+impl Related<super::account_product_resolutions::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountProductResolutions.def()
+    }
+}
+
+impl Related<super::audience_discount_profiles::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AudienceDiscountProfiles.def()
+    }
+}
+
+impl Related<super::discount_profile_products::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::DiscountProfileProducts.def()
+    }
+}
--- a/src/models/_entities/mod.rs
+++ b/src/models/_entities/mod.rs
@@ -1,22 +1,23 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 pub mod prelude;

 pub mod account_discount_profiles;
 pub mod account_product_prices;
-pub mod audience_discount_profiles;
 pub mod account_product_resolutions;
+pub mod audience_discount_profiles;
 pub mod audit_logs;
 pub mod categories;
+pub mod customer_profiles;
 pub mod discount_profile_products;
 pub mod discount_profiles;
-pub mod customer_profiles;
 pub mod o_auth2_sessions;
 pub mod order_items;
 pub mod orders;
 pub mod product_images;
 pub mod product_product_tags;
 pub mod product_tags;
+pub mod product_variants;
 pub mod products;
 pub mod shipping_methods;
 pub mod users;
--- a/src/models/_entities/o_auth2_sessions.rs
+++ b/src/models/_entities/o_auth2_sessions.rs
@@ -1,6 +1,4 @@
-//! `SeaORM` Entity for loco-oauth2 sessions. Hand-written to match the
-//! `o_auth2_sessions` migration (the rest of `_entities/` is codegen; this table
-//! is owned by the loco-oauth2 integration).
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -8,12 +6,13 @@ use serde::{Deserialize, Serialize};
 #[derive(Clone, Debug, PartialEq, DeriveEntityModel, Eq, Serialize, Deserialize)]
 #[sea_orm(table_name = "o_auth2_sessions")]
 pub struct Model {
-    pub created_at: DateTimeUtc,
-    pub updated_at: DateTimeUtc,
+    pub created_at: DateTimeWithTimeZone,
+    pub updated_at: DateTimeWithTimeZone,
    #[sea_orm(primary_key)]
    pub id: i32,
+    #[sea_orm(unique)]
    pub session_id: String,
-    pub expires_at: DateTimeUtc,
+    pub expires_at: DateTimeWithTimeZone,
    pub user_id: i32,
 }

--- a/src/models/_entities/order_items.rs
+++ b/src/models/_entities/order_items.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -15,6 +15,8 @@ pub struct Model {
    pub quantity: i32,
    pub order_id: i32,
    pub product_id: Option<i32>,
+    pub variant_label: String,
+    pub variant_id: Option<i32>,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
@@ -27,6 +29,14 @@ pub enum Relation {
        on_delete = "Cascade"
    )]
    Orders,
+    #[sea_orm(
+        belongs_to = "super::product_variants::Entity",
+        from = "Column::VariantId",
+        to = "super::product_variants::Column::Id",
+        on_update = "NoAction",
+        on_delete = "SetNull"
+    )]
+    ProductVariants,
    #[sea_orm(
        belongs_to = "super::products::Entity",
        from = "Column::ProductId",
@@ -43,6 +53,12 @@ impl Related<super::orders::Entity> for Entity {
    }
 }

+impl Related<super::product_variants::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::ProductVariants.def()
+    }
+}
+
 impl Related<super::products::Entity> for Entity {
    fn to() -> RelationDef {
        Relation::Products.def()
--- a/src/models/_entities/orders.rs
+++ b/src/models/_entities/orders.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -13,17 +13,10 @@ pub struct Model {
    #[sea_orm(unique)]
    pub order_number: String,
    pub email: String,
-    pub phone: Option<String>,
    pub customer_name: Option<String>,
    pub status: String,
    pub total_cents: i64,
    pub currency: String,
-    pub user_id: Option<i32>,
-    pub account_type: String,
-    pub company_name: Option<String>,
-    pub company_id: Option<String>,
-    pub tax_id: Option<String>,
-    pub vat_id: Option<String>,
    pub address: Option<String>,
    pub city: Option<String>,
    pub zip: Option<String>,
@@ -39,6 +32,13 @@ pub struct Model {
    pub tracking_number: Option<String>,
    pub shipment_id: Option<String>,
    pub label_url: Option<String>,
+    pub phone: Option<String>,
+    pub account_type: String,
+    pub company_name: Option<String>,
+    pub company_id: Option<String>,
+    pub tax_id: Option<String>,
+    pub vat_id: Option<String>,
+    pub user_id: Option<i32>,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
--- a/src/models/_entities/prelude.rs
+++ b/src/models/_entities/prelude.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 pub use super::account_discount_profiles::Entity as AccountDiscountProfiles;
 pub use super::account_product_prices::Entity as AccountProductPrices;
@@ -15,6 +15,7 @@ pub use super::orders::Entity as Orders;
 pub use super::product_images::Entity as ProductImages;
 pub use super::product_product_tags::Entity as ProductProductTags;
 pub use super::product_tags::Entity as ProductTags;
+pub use super::product_variants::Entity as ProductVariants;
 pub use super::products::Entity as Products;
 pub use super::shipping_methods::Entity as ShippingMethods;
 pub use super::users::Entity as Users;
--- a/src/models/_entities/product_images.rs
+++ b/src/models/_entities/product_images.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/product_product_tags.rs
+++ b/src/models/_entities/product_product_tags.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/product_tags.rs
+++ b/src/models/_entities/product_tags.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/product_variants.rs
+++ b/src/models/_entities/product_variants.rs
@@ -0,0 +1,63 @@
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19
+
+use sea_orm::entity::prelude::*;
+use serde::{Deserialize, Serialize};
+
+#[derive(Clone, Debug, PartialEq, DeriveEntityModel, Eq, Serialize, Deserialize)]
+#[sea_orm(table_name = "product_variants")]
+pub struct Model {
+    #[sea_orm(primary_key)]
+    pub id: i32,
+    pub created_at: DateTimeWithTimeZone,
+    pub updated_at: DateTimeWithTimeZone,
+    pub product_id: i32,
+    pub label: String,
+    pub position: i32,
+    pub sku: Option<String>,
+    pub stock: Option<i32>,
+    pub price_cents: i64,
+    pub sale_price_cents: Option<i64>,
+    pub business_sale_price_cents: Option<i64>,
+}
+
+#[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
+pub enum Relation {
+    #[sea_orm(has_many = "super::account_product_prices::Entity")]
+    AccountProductPrices,
+    #[sea_orm(has_many = "super::account_product_resolutions::Entity")]
+    AccountProductResolutions,
+    #[sea_orm(has_many = "super::order_items::Entity")]
+    OrderItems,
+    #[sea_orm(
+        belongs_to = "super::products::Entity",
+        from = "Column::ProductId",
+        to = "super::products::Column::Id",
+        on_update = "NoAction",
+        on_delete = "Cascade"
+    )]
+    Products,
+}
+
+impl Related<super::account_product_prices::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountProductPrices.def()
+    }
+}
+
+impl Related<super::account_product_resolutions::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountProductResolutions.def()
+    }
+}
+
+impl Related<super::order_items::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::OrderItems.def()
+    }
+}
+
+impl Related<super::products::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::Products.def()
+    }
+}
--- a/src/models/_entities/products.rs
+++ b/src/models/_entities/products.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -15,12 +15,7 @@ pub struct Model {
    pub slug: String,
    #[sea_orm(column_type = "Text", nullable)]
    pub description: Option<String>,
-    pub price_cents: i64,
-    pub sale_price_cents: Option<i64>,
-    pub business_sale_price_cents: Option<i64>,
    pub currency: String,
-    pub sku: Option<String>,
-    pub stock: i32,
    pub view_count: i32,
    pub published: bool,
    pub published_at: Option<DateTimeWithTimeZone>,
@@ -37,12 +32,16 @@ pub enum Relation {
        on_delete = "SetNull"
    )]
    Categories,
+    #[sea_orm(has_many = "super::discount_profile_products::Entity")]
+    DiscountProfileProducts,
    #[sea_orm(has_many = "super::order_items::Entity")]
    OrderItems,
    #[sea_orm(has_many = "super::product_images::Entity")]
    ProductImages,
    #[sea_orm(has_many = "super::product_product_tags::Entity")]
    ProductProductTags,
+    #[sea_orm(has_many = "super::product_variants::Entity")]
+    ProductVariants,
 }

 impl Related<super::categories::Entity> for Entity {
@@ -51,6 +50,12 @@ impl Related<super::categories::Entity> for Entity {
    }
 }

+impl Related<super::discount_profile_products::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::DiscountProfileProducts.def()
+    }
+}
+
 impl Related<super::order_items::Entity> for Entity {
    fn to() -> RelationDef {
        Relation::OrderItems.def()
@@ -69,6 +74,12 @@ impl Related<super::product_product_tags::Entity> for Entity {
    }
 }

+impl Related<super::product_variants::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::ProductVariants.def()
+    }
+}
+
 impl Related<super::product_tags::Entity> for Entity {
    fn to() -> RelationDef {
        super::product_product_tags::Relation::ProductTags.def()
--- a/src/models/_entities/shipping_methods.rs
+++ b/src/models/_entities/shipping_methods.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
--- a/src/models/_entities/users.rs
+++ b/src/models/_entities/users.rs
@@ -1,4 +1,4 @@
-//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.20
+//! `SeaORM` Entity, @generated by sea-orm-codegen 1.1.19

 use sea_orm::entity::prelude::*;
 use serde::{Deserialize, Serialize};
@@ -26,15 +26,45 @@ pub struct Model {
    pub magic_link_expiration: Option<DateTimeWithTimeZone>,
    pub theme: String,
    pub account_type: String,
+    #[sea_orm(column_type = "Text", nullable)]
    pub totp_secret: Option<String>,
    pub totp_enabled_at: Option<DateTimeWithTimeZone>,
+    #[sea_orm(column_type = "Text", nullable)]
    pub totp_backup_codes: Option<String>,
 }

 #[derive(Copy, Clone, Debug, EnumIter, DeriveRelation)]
 pub enum Relation {
+    #[sea_orm(has_many = "super::account_discount_profiles::Entity")]
+    AccountDiscountProfiles,
+    #[sea_orm(has_many = "super::account_product_prices::Entity")]
+    AccountProductPrices,
+    #[sea_orm(has_many = "super::account_product_resolutions::Entity")]
+    AccountProductResolutions,
    #[sea_orm(has_many = "super::audit_logs::Entity")]
    AuditLogs,
+    #[sea_orm(has_one = "super::customer_profiles::Entity")]
+    CustomerProfiles,
+    #[sea_orm(has_many = "super::o_auth2_sessions::Entity")]
+    OAuth2Sessions,
+}
+
+impl Related<super::account_discount_profiles::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountDiscountProfiles.def()
+    }
+}
+
+impl Related<super::account_product_prices::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountProductPrices.def()
+    }
+}
+
+impl Related<super::account_product_resolutions::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::AccountProductResolutions.def()
+    }
 }

 impl Related<super::audit_logs::Entity> for Entity {
@@ -42,3 +72,15 @@ impl Related<super::audit_logs::Entity> for Entity {
        Relation::AuditLogs.def()
    }
 }
+
+impl Related<super::customer_profiles::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::CustomerProfiles.def()
+    }
+}
+
+impl Related<super::o_auth2_sessions::Entity> for Entity {
+    fn to() -> RelationDef {
+        Relation::OAuth2Sessions.def()
+    }
+}
--- a/src/models/account_product_prices.rs
+++ b/src/models/account_product_prices.rs
@@ -25,7 +25,7 @@ impl ActiveModelBehavior for ActiveModel {
 }

 impl Model {
-    /// All negotiated prices for one account, as a `(product_id -> cents)` map.
+    /// All negotiated prices for one account, as a `(variant_id -> cents)` map.
    pub async fn map_for_user(
        db: &DatabaseConnection,
        user_id: i32,
@@ -34,26 +34,26 @@ impl Model {
            .filter(Column::UserId.eq(user_id))
            .all(db)
            .await?;
-        Ok(rows.into_iter().map(|r| (r.product_id, r.price_cents)).collect())
+        Ok(rows.into_iter().map(|r| (r.variant_id, r.price_cents)).collect())
    }

-    /// Insert or update the negotiated price for `(user_id, product_id)`.
+    /// Insert or update the negotiated price for `(user_id, variant_id)`.
    pub async fn upsert(
        db: &DatabaseConnection,
        user_id: i32,
-        product_id: i32,
+        variant_id: i32,
        price_cents: i64,
    ) -> Result<Self, DbErr> {
        let existing = Entity::find()
            .filter(Column::UserId.eq(user_id))
-            .filter(Column::ProductId.eq(product_id))
+            .filter(Column::VariantId.eq(variant_id))
            .one(db)
            .await?;
        let mut active = match existing {
            Some(row) => row.into_active_model(),
            None => ActiveModel {
                user_id: ActiveValue::set(user_id),
-                product_id: ActiveValue::set(product_id),
+                variant_id: ActiveValue::set(variant_id),
                ..Default::default()
            },
        };
@@ -61,15 +61,15 @@ impl Model {
        active.save(db).await?.try_into_model()
    }

-    /// Remove the negotiated price for `(user_id, product_id)`, if any.
+    /// Remove the negotiated price for `(user_id, variant_id)`, if any.
    pub async fn clear(
        db: &DatabaseConnection,
        user_id: i32,
-        product_id: i32,
+        variant_id: i32,
    ) -> Result<(), DbErr> {
        Entity::delete_many()
            .filter(Column::UserId.eq(user_id))
-            .filter(Column::ProductId.eq(product_id))
+            .filter(Column::VariantId.eq(variant_id))
            .exec(db)
            .await?;
        Ok(())
--- a/src/models/mod.rs
+++ b/src/models/mod.rs
@@ -24,3 +24,4 @@ pub mod product_tags;
 pub mod products;
 pub mod shipping_methods;
 pub mod users;
+pub mod product_variants;
--- a/src/models/o_auth2_sessions.rs
+++ b/src/models/o_auth2_sessions.rs
@@ -17,7 +17,7 @@ impl ActiveModelBehavior for ActiveModel {
    {
        if !insert && self.updated_at.is_unchanged() {
            let mut this = self;
-            this.updated_at = sea_orm::ActiveValue::Set(Utc::now());
+            this.updated_at = sea_orm::ActiveValue::Set(Utc::now().into());
            Ok(this)
        } else {
            Ok(self)
@@ -34,7 +34,7 @@ impl OAuth2SessionsTrait<users::Model> for Model {
            .one(db)
            .await?
            .ok_or_else(|| ModelError::EntityNotFound)?;
-        Ok(session.expires_at < Utc::now())
+        Ok(session.expires_at < Utc::now().fixed_offset())
    }

    /// Create or refresh the session row for `user` from the provider token.
@@ -58,14 +58,14 @@ impl OAuth2SessionsTrait<users::Model> for Model {
            Some(session) => {
                let mut session: o_auth2_sessions::ActiveModel = session.into();
                session.session_id = ActiveValue::set(session_id);
-                session.expires_at = ActiveValue::set(expires_at);
-                session.updated_at = ActiveValue::set(Utc::now());
+                session.expires_at = ActiveValue::set(expires_at.into());
+                session.updated_at = ActiveValue::set(Utc::now().into());
                session.update(&txn).await?
            }
            None => {
                o_auth2_sessions::ActiveModel {
                    session_id: ActiveValue::set(session_id),
-                    expires_at: ActiveValue::set(expires_at),
+                    expires_at: ActiveValue::set(expires_at.into()),
                    user_id: ActiveValue::set(user.id),
                    ..Default::default()
                }
--- a/src/models/orders.rs
+++ b/src/models/orders.rs
@@ -3,7 +3,7 @@ use sea_orm::entity::prelude::*;
 use sea_orm::{Set, TransactionTrait};
 use uuid::Uuid;

-use crate::models::_entities::{order_items, products, shipping_methods};
+use crate::models::_entities::{order_items, product_variants, products, shipping_methods};
 use crate::models::users;
 use crate::shared::pricing;
 pub use crate::models::_entities::orders::{ActiveModel, Column, Entity, Model};
@@ -40,10 +40,10 @@ fn generate_order_number() -> String {
    format!("ORD-{suffix}")
 }

-/// Atomically place an order for the given `(product_id, quantity)` lines:
-/// snapshot each product's price/name, decrement stock (re-checking inside the
-/// transaction so an item can't oversell between cart and pay), then write the
-/// order and its line items. Returns the persisted order.
+/// Atomically place an order for the given `(variant_id, quantity)` lines:
+/// snapshot each variant's price/name/label, decrement its stock (re-checking
+/// inside the transaction so an item can't oversell between cart and pay), then
+/// write the order and its line items. Returns the persisted order.
 pub async fn place(
    ctx: &AppContext,
    items: &[(i32, i32)],
@@ -55,30 +55,40 @@ pub async fn place(
    let mut subtotal: i64 = 0;
    let mut currency = "EUR".to_string();
    let mut snapshots = Vec::new();
-    for (product_id, qty) in items {
-        let product = products::Entity::find_by_id(*product_id)
+    for (variant_id, qty) in items {
+        let variant = product_variants::Entity::find_by_id(*variant_id)
+            .one(&txn)
+            .await?
+            .ok_or_else(|| Error::BadRequest("an item is no longer available".to_string()))?;
+        let product = products::Entity::find_by_id(variant.product_id)
            .filter(products::Column::Published.eq(true))
            .one(&txn)
            .await?
            .ok_or_else(|| Error::BadRequest("a product is no longer available".to_string()))?;
-        if product.stock < *qty {
-            return Err(Error::BadRequest(format!(
-                "not enough stock for {}",
-                product.name
-            )));
+        // Tracked variants can't oversell; untracked ones (stock = None) are
+        // always available and never decremented.
+        if let Some(on_hand) = variant.stock {
+            if on_hand < *qty {
+                return Err(Error::BadRequest(format!(
+                    "not enough stock for {}",
+                    product.name
+                )));
+            }
        }
        currency = product.currency.clone();
        // Snapshot the price the buyer actually pays — public sale or, for a
        // business account, their negotiated/lowest price (same resolver the
        // cart and storefront use).
-        let unit_price_cents = pricing::price_for(ctx, &product, user).await?.price_cents;
+        let unit_price_cents = pricing::price_variant(ctx, &variant, user).await?.price_cents;
        subtotal += unit_price_cents * i64::from(*qty);

-        let mut active = product.clone().into_active_model();
-        active.stock = Set(product.stock - *qty);
-        active.update(&txn).await?;
+        if let Some(on_hand) = variant.stock {
+            let mut active = variant.clone().into_active_model();
+            active.stock = Set(Some(on_hand - *qty));
+            active.update(&txn).await?;
+        }

-        snapshots.push((product.id, product.name, unit_price_cents, *qty));
+        snapshots.push((product.id, variant.id, product.name, variant.label, unit_price_cents, *qty));
    }

    let order = ActiveModel {
@@ -111,11 +121,13 @@ pub async fn place(
    .insert(&txn)
    .await?;

-    for (product_id, name, unit_price_cents, qty) in snapshots {
+    for (product_id, variant_id, name, variant_label, unit_price_cents, qty) in snapshots {
        order_items::ActiveModel {
            order_id: Set(order.id),
            product_id: Set(Some(product_id)),
+            variant_id: Set(Some(variant_id)),
            product_name: Set(name),
+            variant_label: Set(variant_label),
            unit_price_cents: Set(unit_price_cents),
            quantity: Set(qty),
            ..Default::default()
--- a/src/models/product_images.rs
+++ b/src/models/product_images.rs
@@ -37,11 +37,15 @@ pub async fn first_for(ctx: &AppContext, product_id: i32) -> Result<Option<Strin
        .map(|image| image.image_id))
 }

-/// Number of images already attached to a product, used to position new uploads.
-pub async fn count_for(ctx: &AppContext, product_id: i32) -> Result<i32> {
-    use sea_orm::PaginatorTrait;
+/// All of a product's images in display order (lowest position first). Takes a
+/// connection so it can run inside the update transaction.
+pub async fn for_product<C: ConnectionTrait>(
+    db: &C,
+    product_id: i32,
+) -> Result<Vec<Model>> {
    Ok(Entity::find()
        .filter(Column::ProductId.eq(product_id))
-        .count(&ctx.db)
-        .await? as i32)
+        .order_by_asc(Column::Position)
+        .all(db)
+        .await?)
 }
--- a/src/models/product_variants.rs
+++ b/src/models/product_variants.rs
@@ -0,0 +1,113 @@
+use sea_orm::entity::prelude::*;
+use sea_orm::QueryOrder;
+pub use super::_entities::product_variants::{ActiveModel, Column, Entity, Model};
+pub type ProductVariants = Entity;
+
+#[async_trait::async_trait]
+impl ActiveModelBehavior for ActiveModel {
+    async fn before_save<C>(self, _db: &C, insert: bool) -> std::result::Result<Self, DbErr>
+    where
+        C: ConnectionTrait,
+    {
+        if !insert && self.updated_at.is_unchanged() {
+            let mut this = self;
+            this.updated_at = sea_orm::ActiveValue::Set(chrono::Utc::now().into());
+            Ok(this)
+        } else {
+            Ok(self)
+        }
+    }
+}
+
+// implement your read-oriented logic here
+impl Model {
+    /// Whether a discount is currently active: a sale price is set and is
+    /// strictly below the regular price.
+    #[must_use]
+    pub fn on_sale(&self) -> bool {
+        matches!(self.sale_price_cents, Some(sale) if sale < self.price_cents)
+    }
+
+    /// The price actually charged: the sale price when [`Model::on_sale`],
+    /// otherwise the regular price.
+    #[must_use]
+    pub fn effective_price_cents(&self) -> i64 {
+        if self.on_sale() {
+            self.sale_price_cents.unwrap_or(self.price_cents)
+        } else {
+            self.price_cents
+        }
+    }
+
+    /// Whether a baseline business discount (for all company accounts) is set and
+    /// actually below the regular price.
+    #[must_use]
+    pub fn business_on_sale(&self) -> bool {
+        matches!(self.business_sale_price_cents, Some(sale) if sale < self.price_cents)
+    }
+
+    /// Whether the variant's inventory is tracked. A `None` stock means
+    /// "available, not tracked" (always purchasable, unlimited).
+    #[must_use]
+    pub fn tracked(&self) -> bool {
+        self.stock.is_some()
+    }
+
+    /// Whether the variant can currently be bought: untracked variants are always
+    /// available; tracked ones need a positive quantity on hand.
+    #[must_use]
+    pub fn in_stock(&self) -> bool {
+        self.stock.map_or(true, |s| s > 0)
+    }
+
+    /// Clamp a desired quantity to what's available: capped at the tracked stock,
+    /// or left as-is (only floored at 0) when untracked.
+    #[must_use]
+    pub fn cap(&self, qty: i32) -> i32 {
+        match self.stock {
+            Some(s) => qty.clamp(0, s),
+            None => qty.max(0),
+        }
+    }
+}
+
+// implement your write-oriented logic here
+impl ActiveModel {}
+
+// implement your custom finders, selectors oriented logic here
+impl Entity {
+    /// All variants for one product, in display order.
+    pub async fn for_product<C: ConnectionTrait>(
+        db: &C,
+        product_id: i32,
+    ) -> Result<Vec<Model>, DbErr> {
+        Entity::find()
+            .filter(Column::ProductId.eq(product_id))
+            .order_by_asc(Column::Position)
+            .order_by_asc(Column::Id)
+            .all(db)
+            .await
+    }
+
+    /// All variants for many products in one query, grouped by `product_id` and
+    /// ordered within each group. Products with no variants are absent.
+    pub async fn grouped_for_products<C: ConnectionTrait>(
+        db: &C,
+        product_ids: &[i32],
+    ) -> Result<std::collections::HashMap<i32, Vec<Model>>, DbErr> {
+        let mut map: std::collections::HashMap<i32, Vec<Model>> = std::collections::HashMap::new();
+        if product_ids.is_empty() {
+            return Ok(map);
+        }
+        let rows = Entity::find()
+            .filter(Column::ProductId.is_in(product_ids.to_vec()))
+            .order_by_asc(Column::Position)
+            .order_by_asc(Column::Id)
+            .all(db)
+            .await?;
+        for row in rows {
+            map.entry(row.product_id).or_default().push(row);
+        }
+        Ok(map)
+    }
+}
--- a/src/models/products.rs
+++ b/src/models/products.rs
@@ -19,32 +19,7 @@ impl ActiveModelBehavior for ActiveModel {
 }

 // implement your read-oriented logic here
-impl Model {
-    /// Whether a discount is currently active: a sale price is set and is
-    /// strictly below the regular price.
-    #[must_use]
-    pub fn on_sale(&self) -> bool {
-        matches!(self.sale_price_cents, Some(sale) if sale < self.price_cents)
-    }
-
-    /// The price actually charged: the sale price when [`Model::on_sale`],
-    /// otherwise the regular price.
-    #[must_use]
-    pub fn effective_price_cents(&self) -> i64 {
-        if self.on_sale() {
-            self.sale_price_cents.unwrap_or(self.price_cents)
-        } else {
-            self.price_cents
-        }
-    }
-
-    /// Whether a baseline business discount (for all company accounts) is set and
-    /// actually below the regular price.
-    #[must_use]
-    pub fn business_on_sale(&self) -> bool {
-        matches!(self.business_sale_price_cents, Some(sale) if sale < self.price_cents)
-    }
-}
+impl Model {}

 // implement your write-oriented logic here
 impl ActiveModel {}
--- a/src/seed.rs
+++ b/src/seed.rs
@@ -4,7 +4,7 @@ use loco_rs::prelude::*;
 use sea_orm::{ActiveModelTrait, ColumnTrait, EntityTrait, QueryFilter, Set};

 use crate::{
-    models::_entities::{categories, products},
+    models::_entities::{categories, product_variants, products},
    shared::slug::slugify,
 };

@@ -157,14 +157,11 @@ pub async fn seed_catalog(ctx: &AppContext) -> Result<()> {

        let now = chrono::Utc::now();

-        products::ActiveModel {
+        let product = products::ActiveModel {
            name: Set(item.name.to_string()),
            slug: Set(product_slug),
            description: Set(Some(item.description.to_string())),
-            price_cents: Set(item.price_cents),
            currency: Set("EUR".to_string()),
-            sku: Set(item.sku.map(|s| s.to_string())),
-            stock: Set(item.stock),
            published: Set(true),
            published_at: Set(Some(now.into())),
            category_id: Set(category.map(|c| c.id)),
@@ -172,6 +169,20 @@ pub async fn seed_catalog(ctx: &AppContext) -> Result<()> {
        }
        .insert(&ctx.db)
        .await?;
+
+        // Each seed product ships as a single default (unlabelled) variant
+        // carrying its price/stock/sku.
+        product_variants::ActiveModel {
+            product_id: Set(product.id),
+            label: Set(String::new()),
+            position: Set(0),
+            sku: Set(item.sku.map(|s| s.to_string())),
+            stock: Set(Some(item.stock)),
+            price_cents: Set(item.price_cents),
+            ..Default::default()
+        }
+        .insert(&ctx.db)
+        .await?;
    }

    Ok(())
--- a/src/shared/pricing.rs
+++ b/src/shared/pricing.rs
@@ -19,7 +19,8 @@ use sea_orm::{ColumnTrait, EntityTrait, QueryFilter};

 use crate::models::{
    account_discount_profiles, account_product_prices, account_product_resolutions,
-    audience_discount_profiles, discount_profile_products, discount_profiles, products, users,
+    audience_discount_profiles, discount_profile_products, discount_profiles, product_variants,
+    users,
 };
 use crate::shared::money::apply_discount_bp;

@@ -219,7 +220,7 @@ async fn load_b2b(ctx: &AppContext, user_id: i32) -> Result<B2bContext> {
        .all(&ctx.db)
        .await?
        .into_iter()
-        .map(|r| (r.product_id, r.discount_profile_id))
+        .map(|r| (r.variant_id, r.discount_profile_id))
        .collect();

    Ok(B2bContext {
@@ -236,13 +237,16 @@ struct PricingCtx {
    b2b: Option<B2bContext>,
 }

-/// Resolve the per-company automated price for a product: the single covering
-/// profile, the admin-resolved winner on a collision, or (unresolved) the
-/// biggest discount, flagged.
+/// Resolve the per-company automated price for a variant. Discount profiles
+/// cover the *product* (`product_id`); the admin's collision resolution is set
+/// per *variant* (`variant_id`). Result: the single covering profile, the
+/// admin-resolved winner on a collision, or (unresolved) the biggest discount,
+/// flagged.
 fn company_auto(
    b2b: &B2bContext,
    regular_cents: i64,
    product_id: i32,
+    variant_id: i32,
 ) -> (Option<i64>, Option<i32>, bool, Vec<i32>) {
    let covering = b2b.profiles.covering(product_id);
    let ids: Vec<i32> = covering.iter().map(|p| p.id).collect();
@@ -254,7 +258,7 @@ fn company_auto(
    } else {
        match b2b
            .resolutions
-            .get(&product_id)
+            .get(&variant_id)
            .and_then(|rid| covering.iter().find(|p| p.id == *rid).copied())
        {
            Some(resolved) => (resolved, false),
@@ -276,12 +280,14 @@ fn company_auto(
    )
 }

-fn detail_for(product: &products::Model, pc: &PricingCtx) -> PriceDetail {
-    let regular = product.price_cents;
+fn detail_for_variant(variant: &product_variants::Model, pc: &PricingCtx) -> PriceDetail {
+    let regular = variant.price_cents;
+    let product_id = variant.product_id;

-    // Personal price: public sale + personal-audience profiles, lowest wins.
-    let personal_sale = product.effective_price_cents();
-    let personal_profile = pc.personal.best_price(regular, product.id);
+    // Personal price: the variant's own public sale + personal-audience profiles
+    // (which cover the product), lowest wins.
+    let personal_sale = variant.effective_price_cents();
+    let personal_profile = pc.personal.best_price(regular, product_id);
    let personal_effective = personal_profile
        .map_or(personal_sale, |p| personal_sale.min(p));

@@ -289,12 +295,13 @@ fn detail_for(product: &products::Model, pc: &PricingCtx) -> PriceDetail {
        return PriceDetail::public_only(regular, personal_effective);
    };

-    // Business candidates (company accounts only).
-    let manual = b2b.manual.get(&product.id).copied();
+    // Business candidates (company accounts only). The negotiated price is keyed
+    // to the variant; the baseline business sale lives on the variant.
+    let manual = b2b.manual.get(&variant.id).copied();
    let (auto_cents, auto_profile_id, collision, covering_ids) =
-        company_auto(b2b, regular, product.id);
-    let business_global = product.business_sale_price_cents;
-    let business_profile = pc.business.best_price(regular, product.id);
+        company_auto(b2b, regular, product_id, variant.id);
+    let business_global = variant.business_sale_price_cents;
+    let business_profile = pc.business.best_price(regular, product_id);
    let business_best = lowest([manual, auto_cents, business_global, business_profile]);

    let priced = decide(regular, personal_effective, business_best);
@@ -328,14 +335,14 @@ async fn load_pricing_ctx(ctx: &AppContext, user: Option<&users::Model>) -> Resu
    })
 }

-/// Full breakdowns for many products for `user`, batching per-request lookups.
-pub async fn detail_many(
+/// Full breakdowns for many variants for `user`, batching per-request lookups.
+pub async fn detail_variants(
    ctx: &AppContext,
-    list: &[products::Model],
+    list: &[product_variants::Model],
    user: Option<&users::Model>,
 ) -> Result<Vec<PriceDetail>> {
    let pc = load_pricing_ctx(ctx, user).await?;
-    Ok(list.iter().map(|p| detail_for(p, &pc)).collect())
+    Ok(list.iter().map(|v| detail_for_variant(v, &pc)).collect())
 }

 /// Effective prices for a whole audience using only the global layers (the
@@ -343,9 +350,9 @@ pub async fn detail_many(
 /// no specific company's per-company deals. Used by the discounts admin page to
 /// preview what each tab's discounts produce. `audience` is "personal" or
 /// "business".
-pub async fn audience_price_many(
+pub async fn audience_price_variants(
    ctx: &AppContext,
-    list: &[products::Model],
+    list: &[product_variants::Model],
    audience: &str,
 ) -> Result<Vec<PricedProduct>> {
    let personal = load_audience(ctx, AUDIENCE_PERSONAL).await?;
@@ -367,7 +374,7 @@ pub async fn audience_price_many(
        business,
        b2b,
    };
-    Ok(list.iter().map(|p| detail_for(p, &pc).priced()).collect())
+    Ok(list.iter().map(|v| detail_for_variant(v, &pc).priced()).collect())
 }

 /// Like [`audience_price_many`], but prices against an *unsaved* set of profile
@@ -376,9 +383,9 @@ pub async fn audience_price_many(
 /// checkboxes, before they hit Save. For the business tab the personal layer
 /// stays the persisted one (businesses get the lower of personal/business), and
 /// only the business layer is replaced by the previewed selection.
-pub async fn audience_price_many_preview(
+pub async fn audience_price_variants_preview(
    ctx: &AppContext,
-    list: &[products::Model],
+    list: &[product_variants::Model],
    audience: &str,
    selected_profile_ids: Vec<i32>,
 ) -> Result<Vec<PricedProduct>> {
@@ -401,26 +408,26 @@ pub async fn audience_price_many_preview(
        business,
        b2b,
    };
-    Ok(list.iter().map(|p| detail_for(p, &pc).priced()).collect())
+    Ok(list.iter().map(|v| detail_for_variant(v, &pc).priced()).collect())
 }

-/// Price one product for `user` (`None` = anonymous/public).
-pub async fn price_for(
+/// Price one variant for `user` (`None` = anonymous/public).
+pub async fn price_variant(
    ctx: &AppContext,
-    product: &products::Model,
+    variant: &product_variants::Model,
    user: Option<&users::Model>,
 ) -> Result<PricedProduct> {
-    let detail = detail_many(ctx, std::slice::from_ref(product), user).await?;
+    let detail = detail_variants(ctx, std::slice::from_ref(variant), user).await?;
    Ok(detail[0].priced())
 }

-/// Price many products for `user`, batching the per-request lookups.
-pub async fn price_many(
+/// Price many variants for `user`, batching the per-request lookups.
+pub async fn price_variants(
    ctx: &AppContext,
-    list: &[products::Model],
+    list: &[product_variants::Model],
    user: Option<&users::Model>,
 ) -> Result<Vec<PricedProduct>> {
-    Ok(detail_many(ctx, list, user)
+    Ok(detail_variants(ctx, list, user)
        .await?
        .iter()
        .map(PriceDetail::priced)
--- a/src/views/checkout.rs
+++ b/src/views/checkout.rs
@@ -12,6 +12,7 @@ pub fn items(items: &[order_items::Model]) -> Vec<Value> {
        .map(|item| {
            json!({
                "product_name": item.product_name,
+                "variant_label": item.variant_label,
                "quantity": item.quantity,
                "unit_price": format_price(item.unit_price_cents),
                "line_total": format_price(item.unit_price_cents * i64::from(item.quantity)),
--- a/src/views/shop.rs
+++ b/src/views/shop.rs
@@ -2,23 +2,28 @@

 use serde_json::{json, Value};

-use crate::models::_entities::{categories, products};
+use crate::models::_entities::{categories, product_images, product_variants, products};
 use crate::shared::money::format_price;
 use crate::shared::pricing::PricedProduct;

 /// Card/list shape for a product: model fields plus the viewer's resolved price
-/// (from [`crate::shared::pricing`]), its optional primary image and category.
-/// `on_sale` means "render the price as reduced" — driven by the resolved price,
-/// so it covers both public sales and business deals; `is_business` flags the
-/// latter.
+/// for its representative (first) variant, the variant count (so the template can
+/// render "from {price}" for multi-variant products), its optional primary image
+/// and category. `on_sale` means "render the price as reduced" — driven by the
+/// resolved price, so it covers both public sales and business deals;
+/// `is_business` flags the latter. `representative` is the variant whose price is
+/// shown and whose stock/sku the card exposes.
 pub fn product_card(
    product: &products::Model,
+    representative: &product_variants::Model,
    priced: &PricedProduct,
+    variant_count: usize,
    image: Option<String>,
    category_name: Option<String>,
 ) -> Value {
    json!({
        "id": product.id,
+        "variant_id": representative.id,
        "name": product.name,
        "slug": product.slug,
        "description": product.description,
@@ -27,29 +32,50 @@ pub fn product_card(
        "is_business": priced.is_business,
        "regular_price": format_price(priced.regular_cents),
        "currency": product.currency,
-        "sku": product.sku,
-        "stock": product.stock,
+        "sku": representative.sku,
+        "stock": representative.stock,
+        "tracked": representative.tracked(),
+        "in_stock": representative.in_stock(),
+        "variant_count": variant_count,
+        "has_options": variant_count > 1,
        "published": product.published,
        "image": image,
        "category_name": category_name,
    })
 }

+/// One priced variant row for the product detail page's option picker.
+pub fn variant_option(variant: &product_variants::Model, priced: &PricedProduct) -> Value {
+    json!({
+        "id": variant.id,
+        "label": variant.label,
+        "sku": variant.sku,
+        "stock": variant.stock,
+        "tracked": variant.tracked(),
+        "in_stock": variant.in_stock(),
+        "price": format_price(priced.price_cents),
+        "on_sale": priced.is_reduced(),
+        "regular_price": format_price(priced.regular_cents),
+        "is_business": priced.is_business,
+    })
+}
+
 /// Shape used to pre-fill the admin product form (exposes `category_id` rather
-/// than a resolved name, and the current primary image).
-pub fn product_form(product: &products::Model, image: Option<String>) -> Value {
+/// than a resolved name, and the current images in display order — first is the
+/// main one). Variants are supplied separately by the controller.
+pub fn product_form(product: &products::Model, images: &[product_images::Model]) -> Value {
    json!({
        "id": product.id,
        "name": product.name,
        "slug": product.slug,
        "description": product.description,
-        "price": format_price(product.price_cents),
        "currency": product.currency,
-        "sku": product.sku,
-        "stock": product.stock,
        "published": product.published,
        "category_id": product.category_id,
-        "image": image,
+        "images": images
+            .iter()
+            .map(|im| json!({ "id": im.id, "image_id": im.image_id }))
+            .collect::<Vec<_>>(),
    })
 }
Author	SHA1	Message	Date
Priec	2d2aa012ec	multiple images in the edit product Some checks failed CI / Check Style (push) Has been cancelled Details CI / Run Clippy (push) Has been cancelled Details CI / Run Tests (push) Has been cancelled Details	2026-06-22 18:20:50 +02:00
Priec	125be1798e	muiltiple images in carousel	2026-06-22 17:40:55 +02:00
Priec	f724e9763f	upload picture now working well	2026-06-22 16:56:14 +02:00
Priec	681c88f85d	0 is out of stock and nothing is available from now on Some checks failed CI / Check Style (push) Has been cancelled Details CI / Run Clippy (push) Has been cancelled Details CI / Run Tests (push) Has been cancelled Details	2026-06-22 16:48:28 +02:00
Priec	6828854f24	the admin page now make sense for products Some checks failed CI / Check Style (push) Has been cancelled Details CI / Run Clippy (push) Has been cancelled Details CI / Run Tests (push) Has been cancelled Details	2026-06-22 16:21:52 +02:00
Priec	3a1ea7cdb4	I can see the product with different options Some checks failed CI / Check Style (push) Has been cancelled Details CI / Run Clippy (push) Has been cancelled Details CI / Run Tests (push) Has been cancelled Details	2026-06-22 16:14:04 +02:00
Priec	3f798432a0	now products have different options, like different parameters Some checks failed CI / Check Style (push) Has been cancelled Details CI / Run Clippy (push) Has been cancelled Details CI / Run Tests (push) Has been cancelled Details	2026-06-22 15:44:02 +02:00