Change the ship-to address on an order after labels are purchased
Destructive Change-Ship-To wizard execute. The everyday PATCH path
(PATCH /v1/orders/{id}) refuses to mutate shipping_address_id
while active Shippo labels exist (the post-label silent-misship hard
block). This endpoint is the CS Lead override that orchestrates the
full void-then-repurchase flow in one transactional sweep:
- Asserts
orders.override_post_label_edit(server-side; equivalent to the public-API destructive scope combination below). - Resolves the new address: either existing
new_address_idOR creates a newaccount_addressesrow fromnew_address_payloadvia the canonical addAddress() helper (Triple-lock validation Shippo USPS CASS + AvaTax fires inline). - For every active label on the order, voids via the canonical
voidLabelhandler (Shippo refund API + GL reversal of the freight JE keyedlabel:<id>+ residential-surcharge reversal if last active label + activity log). - Atomically updates
orders.shipping_address_id(and optionallybilling_address_idifalso_change_billing=true). - Calls
recalculateTaxForOrderagainst the new destination (AvaTax re-finalization). - Per
repurchase_strategy: auto-buys the cheapest new label per package (auto_cheapest), returns the rate set for the operator to choose (manual), or skips repurchase entirely (defer). - For every new label, calls the canonical
createShippingDeltaChargehelper to bill/refund the customer for the rate delta vs original (idempotent on label_id). - Logs ONE structured
ORDER_SHIP_TO_CHANGED_VIA_WIZARDactivity row with full metadata, and broadcastsorder.ship_to_changed.
Both confirm_void_labels=true AND confirm_repurchase_labels=true
are required (unless repurchase_strategy=defer, which only needs
confirm_void_labels=true). This is the two-key safety gate
equivalent of the wizard’s review-confirm step in the UI.
Partial failure semantics: if any label refuses to void (e.g.
carrier-scanned, in-transit), the orders row is NOT updated.
Response returns 422 partial_void_failure with the list of labels
that did void + the offender so the operator can route to carrier
Package Intercept.
Scopes: orders:write AND fulfillment:write both required.
Idempotency: Idempotency-Key header is supported; repeat
submissions return the original response without re-charging.
Filed by NEW-GAP-CS-ADDRESS-CHANGE-POST-LABEL-PURCHASE + NEW-GAP- CHANGE-SHIP-TO-WIZARD-VOID-AND-REPURCHASE (2026-05-16).
Industry parallel: Shopify Edit Order (void + reissue); NetSuite Reverse Fulfillment + Re-fulfill; Acumatica Cancel Shipment
- Reissue.
Authorizations
API key issued per entity via Settings > Developers > API Keys.
Each key carries scopes (e.g. orders:read, products:write).
Bearer token format: Authorization: Bearer ark_live_ent_
Test keys use ark_test_ent_. Both are issued per entity
via Settings > Developers > API Keys.
Headers
Client-generated unique key for idempotent POST/PATCH/DELETE operations. Alias for the Idempotency parameter. Max 255 chars. On retry with the same key, the original response is returned without re-executing the operation. Keys expire after 24 hours.
255Path Parameters
UUID of the order to change ship-to for.
Body
REQUIRED. Two-key safety gate; must be true to authorize label void.
Existing account_addresses.id (mutually exclusive with new_address_payload).
Raw address payload; creates a new account_addresses row via the canonical addAddress helper.
Also copy the new address into billing_address_id.
REQUIRED unless repurchase_strategy=defer.
auto_cheapest = auto-buy cheapest new label per package; manual = return rates and let operator choose; defer = leave packages unlabeled for the warehouse.
auto_cheapest, manual, defer Optional Stripe payment_method to bill the rate delta.
Audit attribution; defaults to API key owner if omitted.
Operator note for the audit log.
Response
Ship-to changed successfully (may include partial purchase_failures with HTTP 200 when at least one new label posted).

