Our app is a Sales Channel that directly creates orders via API. One of our merchants has another app which edits orders after they're created (to add 3PL and bundle-specific SKU details).
Right now the 2nd app isn't allowed to edit our orders creating an inconsistent experience for our merchant. We'd happily give the 2nd app permission to modify our orders but to my knowledge there's no way to do so without spinning up our own bespoke app-to-app api.
What's the recommended way to handle this? I'm sure there are other cases where order-creating and order-editing apps need to work with each other.