spree_api 6.0.2 → 6.0.4

data/app/controllers/spree/api/v3/store/carts_controller.rb

@@ -129,17 +129,20 @@ module Spree
             end
           end
 
-          # DELETE /api/v3/store/carts/:id
-          # Deletes/abandons the cart
+          # Abandons a cart after checking its completion claim under the row lock.
+          #
+          # @return [void]
           def destroy
             find_cart!
 
-            result = Spree.cart_destroy_service.call(cart: @cart)
+            with_order_lock do
+              result = Spree.cart_destroy_service.call(cart: @cart)
 
-            if result.success?
-              head :no_content
-            else
-              render_service_error(result.error.to_s)
+              if result.success?
+                head :no_content
+              else
+                render_service_error(result.error.to_s)
+              end
             end
           end
 

data/app/serializers/spree/api/v3/admin/admin_user_serializer.rb

@@ -9,8 +9,6 @@ module Spree
                    full_name: [:string, nullable: true],
                    selected_locale: [:string, nullable: true],
                    avatar_url: [:string, nullable: true],
-                   roles: 'Array<{ id: string; name: string }>',
-                   stores: 'Array<{ id: string; name: string; code: string }>',
                    status: [:string, enum: Spree::AdminUserMethods::STATUSES, enum_type_name: 'AdminUserStatus'],
                    last_active_at: [:string, nullable: true],
                    inviter: ['Actor', nullable: true]
@@ -45,6 +43,7 @@ module Spree
           # we fall back to `Spree::Current.store` if not.
           # Filtered in Ruby rather than with `for_resource`, so the staff
           # index's preloaded roles are used instead of a query per user.
+          typelize({ id: :string, name: :string }, multi: true)
           attribute :roles do |user, params|
             store = params&.dig(:store) || Spree::Current.store
             roles = user.spree_roles.to_a
@@ -57,6 +56,7 @@ module Spree
           # store switcher can offer all accessible stores. Read off the same
           # preloaded roles, and deduped/sorted in Ruby, so the staff index
           # spends no extra query per user.
+          typelize({ id: :string, name: :string, code: :string }, multi: true)
           attribute :stores do |user|
             stores = user.spree_roles.filter_map { |role| role.resource if role.resource.is_a?(Spree::Store) }
 

data/app/serializers/spree/api/v3/admin/company_membership_serializer.rb

@@ -4,6 +4,10 @@ module Spree
       module Admin
         class CompanyMembershipSerializer < V3::CompanyMembershipSerializer
           attributes created_at: :iso8601, updated_at: :iso8601
+
+          # The member as a customer, so a list can show their name, not only
+          # the email.
+          one :customer, resource: proc { Spree.api.admin_customer_serializer }, if: proc { expand?('customer') }
         end
       end
     end

data/app/serializers/spree/api/v3/admin/delivery_profile_serializer.rb

@@ -8,7 +8,6 @@ module Spree
                    digital: :boolean,
                    offers_pickup: :boolean, offers_shipping: :boolean,
                    stock_location_ids: [:string, multi: true],
-                   origin_groups: ['Array<{ id: string; name: string | null; position: number | null; stock_location_ids: Array<string> }>'],
                    products_count: :number, delivery_methods_count: :number,
                    delivery_zones_count: :number
 
@@ -36,6 +35,8 @@ module Spree
 
           # Origin groups partition the profile's fulfillment origins; zones
           # and methods reference one. A null name renders as "All locations".
+          typelize({ id: :string, name: [:string, { nullable: true }], position: [:number, { nullable: true }],
+                    stock_location_ids: 'string[]' }, multi: true)
           attribute :origin_groups do |record|
             record.delivery_origin_groups.map do |group|
               {

data/app/serializers/spree/api/v3/admin/diagnostics_serializer.rb

@@ -0,0 +1,30 @@
+module Spree
+  module Api
+    module V3
+      module Admin
+        # The diagnostics report (Spree::Diagnostics::Report). A computed
+        # value rather than a record, so it carries no id. `errors[].error_class`
+        # is an exception's class name on purpose: it is what a maintainer
+        # reads in a bug report, not a value any client branches on.
+        class DiagnosticsSerializer < V3::BaseSerializer
+          typelize generated_at: :string,
+                   spree_version: :string,
+                   markdown: :string,
+                   issue_url: :string,
+                   issue_prefilled: :boolean,
+                   sections: 'Array<{ key: string; title: string; rows: Array<{ label: string; value: string }> }>',
+                   errors: 'Array<{ error_class: string; source: string | null; frames: string[]; ' \
+                           'request_id: string | null; count: number; first_seen_at: string; last_seen_at: string }>'
+
+          _attributes.delete(:id)
+
+          attributes :spree_version, :sections, :errors, generated_at: :iso8601
+
+          attribute(:markdown, &:to_markdown)
+          attribute(:issue_url, &:issue_url)
+          attribute(:issue_prefilled, &:issue_prefilled?)
+        end
+      end
+    end
+  end
+end

data/app/serializers/spree/api/v3/admin/fulfillment_serializer.rb

@@ -17,7 +17,6 @@ module Spree
                    tax_total: [:string, nullable: false]
 
           typelize metadata: 'Record<string, unknown>',
-                   documents: "Array<{ kind: string; url: string }>",
                    provider_generates_labels: :boolean,
                    order_id: [:string, nullable: true],
                    stock_location_id: [:string, nullable: true]
@@ -31,6 +30,7 @@ module Spree
 
           # Customs forms and other paperwork the provider produced beside the
           # label; the labels themselves are listed under +labels+.
+          typelize({ kind: :string, url: :string }, multi: true)
           attribute :documents do |fulfillment|
             fulfillment.provider.documents(fulfillment).map(&:as_json)
           end

data/app/serializers/spree/api/v3/admin/import_serializer.rb

@@ -10,7 +10,6 @@ module Spree
                    failed_rows_count: :number,
                    processing_errors: [:string, nullable: true],
                    delimiter: :string,
-                   schema_fields: 'Array<{ name: string; label: string; required: boolean }>',
                    csv_headers: [:string, multi: true],
                    sample_row: 'Record<string, string | null>',
                    original_filename: [:string, nullable: true],
@@ -58,6 +57,7 @@ module Spree
             import.rows_status_counts['failed'] || 0
           end
 
+          typelize({ name: :string, label: :string, required: :boolean }, multi: true)
           attribute :schema_fields do |import|
             import.schema_fields.map do |field|
               { name: field[:name], label: field[:label], required: field[:required].present? }

data/app/serializers/spree/api/v3/admin/invitation_serializer.rb

@@ -13,8 +13,7 @@ module Spree
                    role_name: :string,
                    inviter_email: :string,
                    expires_at: :string,
-                   invitee_exists: :boolean,
-                   store: '{ id: string; name: string }'
+                   invitee_exists: :boolean
 
           attributes :email, :status,
                      created_at: :iso8601, updated_at: :iso8601, expires_at: :iso8601
@@ -43,6 +42,7 @@ module Spree
           # Minimal store identity for the unauthenticated acceptance page's
           # title ("Join <store>"). Full Store would over-expose internals to
           # a public landing page; this is the smallest shape that renders.
+          typelize({ id: :string, name: :string })
           attribute :store do |invitation|
             { id: invitation.store.prefixed_id, name: invitation.store.name }
           end

data/app/serializers/spree/api/v3/admin/line_item_serializer.rb

@@ -28,7 +28,8 @@ module Spree
                    price_list_id: [:string, nullable: true],
                    price_list_name: [:string, nullable: true],
                    catalog_id: [:string, nullable: true],
-                   catalog_name: [:string, nullable: true]
+                   catalog_name: [:string, nullable: true],
+                   product_id: [:string, nullable: true]
 
           # price_source is operational provenance — admin-only, never on the
           # store serializer.
@@ -66,6 +67,10 @@ module Spree
 
           prefixed_id_attributes :tax_category
 
+          # So an order page can link each line to its product without
+          # expanding the variant.
+          prefixed_id_attributes :product
+
           # Override inherited associations to use admin serializers
           many :option_values, resource: proc { Spree.api.admin_option_value_serializer }
           many :digital_links, resource: proc { Spree.api.admin_digital_link_serializer }

data/app/serializers/spree/api/v3/admin/price_rule_serializer.rb

@@ -34,10 +34,12 @@ module Spree
                resource: proc { Spree.api.admin_channel_serializer },
                if: proc { |rule| rule.respond_to?(:channels) }
 
+          # Only for a caller who may read customers; see the promotion rule
+          # serializer.
           many :users,
                key: :customers,
                resource: proc { Spree.api.admin_customer_serializer },
-               if: proc { |rule| rule.respond_to?(:users) }
+               if: proc { |rule| rule.respond_to?(:users) && params[:customer_records] }
         end
       end
     end

data/app/serializers/spree/api/v3/admin/product_serializer.rb

@@ -17,6 +17,7 @@ module Spree
                    product_type_id: [:string, nullable: true],
                    delivery_profile_id: [:string, nullable: true],
                    seller_name: [:string, nullable: true],
+                   total_on_hand: [:number, nullable: true],
                    price: ['Price', nullable: true],
                    deleted_at: [:string, nullable: true],
                    metadata: 'Record<string, unknown>',
@@ -49,6 +50,13 @@ module Spree
 
           prefixed_id_attributes :product_type, :tax_category
 
+          # Null when any variant is not tracked: its stock is unlimited, which
+          # is not a number to send.
+          attribute :total_on_hand do |product|
+            total = product.total_on_hand
+            total.to_i unless total.infinite?
+          end
+
           attribute :price do |product|
             price = price_for(product.default_variant)
             Spree.api.admin_price_serializer.new(price, params: params).to_h if price&.persisted?

data/app/serializers/spree/api/v3/admin/promotion_action_serializer.rb

@@ -13,8 +13,7 @@ module Spree
           typelize type: [:string, comment: 'Action type. Built-in: create_adjustment, create_item_adjustments, create_line_items, free_shipping. Extensions may register more.'],
                    promotion_id: :string,
                    preferences: 'Record<string, unknown>',
-                   calculator: 'TypedPromotionCalculator | null',
-                   line_items: 'Array<{ variant_id: string; quantity: number }> | null'
+                   calculator: 'TypedPromotionCalculator | null'
 
           attributes created_at: :iso8601, updated_at: :iso8601
 
@@ -44,6 +43,7 @@ module Spree
           # Line items the action will add for CreateLineItems. variant_id
           # is prefixed for consistency with the rest of the API. Null on
           # actions that don't have the association.
+          typelize({ variant_id: :string, quantity: :number }, multi: true, nullable: true)
           attribute :line_items do |action|
             next nil unless action.respond_to?(:promotion_action_line_items)
 

data/app/serializers/spree/api/v3/admin/promotion_rule_serializer.rb

@@ -61,9 +61,12 @@ module Spree
                resource: proc { Spree.api.admin_category_serializer },
                if: proc { |rule| rule.respond_to?(:categories) }
 
+          # Only for a caller who may read customers: a promotion is readable
+          # under `read_promotions`, and a customer rule would otherwise carry
+          # every targeted customer's email and notes along with it.
           many :customers,
                resource: proc { Spree.api.admin_customer_serializer },
-               if: proc { |rule| rule.respond_to?(:customers) }
+               if: proc { |rule| rule.respond_to?(:customers) && params[:customer_records] }
 
           many :customer_groups,
                resource: proc { Spree.api.admin_customer_group_serializer },

data/app/serializers/spree/api/v3/admin/promotion_serializer.rb

@@ -34,6 +34,19 @@ module Spree
           attribute :rule_ids do |promotion|
             promotion.promotion_rules.map(&:prefixed_id)
           end
+
+          # The rows under the same names the write accepts, on request: a
+          # reader holding only `rule_ids` cannot tell what a promotion does
+          # without a request per rule.
+          many :promotion_rules,
+               key: :rules,
+               resource: proc { Spree.api.admin_promotion_rule_serializer },
+               if: proc { expand?('rules') }
+
+          many :promotion_actions,
+               key: :actions,
+               resource: proc { Spree.api.admin_promotion_action_serializer },
+               if: proc { expand?('actions') }
         end
       end
     end

data/app/serializers/spree/api/v3/admin/return_serializer.rb

@@ -11,7 +11,6 @@ module Spree
 
           typelize memo: [:string, nullable: true],
                    metadata: 'Record<string, unknown>',
-                   documents: "Array<{ kind: string; url: string }>",
                    stock_location_id: [:string, nullable: true],
                    created_by_id: [:string, nullable: true],
                    created_by_type: [:string, nullable: true, enum: Spree::Actor::BUILT_IN_KINDS, enum_type_name: 'ActorKind'],
@@ -39,6 +38,7 @@ module Spree
 
           # Paperwork the provider produced beside the label: a cross-border
           # return is declared like any other export.
+          typelize({ kind: :string, url: :string }, multi: true)
           attribute :documents do |return_record|
             return_record.provider.documents(return_record).map(&:as_json)
           end

data/app/serializers/spree/api/v3/admin/seller_requirement_status_serializer.rb

@@ -14,10 +14,11 @@ module Spree
                    description: [:string, nullable: true],
                    required: :boolean, position: :number, status: [:string, enum: Spree::SellerRequirementStatus::STATUSES, enum_type_name: 'SellerRequirementState'],
                    blocking: :boolean, action_url: [:string, nullable: true],
-                   blocker: ['{ state: string; message: string | null } | null'],
                    required_policy_name: [:string, nullable: true]
 
-          attributes :id, :kind, :name, :description, :required, :position, :status, :action_url, :blocker
+          attributes :id, :kind, :name, :description, :required, :position, :status, :action_url
+          typelize({ state: :string, message: [:string, { nullable: true }] }, nullable: true)
+          attribute :blocker, &:blocker
 
           # Whether this stands between the seller and approval. Serialized
           # rather than left to each client to derive, so the dashboard's

data/app/serializers/spree/api/v3/admin/seller_serializer.rb

@@ -20,7 +20,6 @@ module Spree
                    deleted_at: [:string, nullable: true],
                    on_holiday: :boolean, sellable: :boolean,
                    products_count: :number, users_count: :number,
-                   onboarding_progress: '{ done: number; total: number }',
                    onboarding_complete: :boolean,
                    metadata: 'Record<string, unknown> | null'
 
@@ -56,6 +55,11 @@ module Spree
           # so the minimum-products requirement asks the same question free.
           attributes :products_count
 
+          # What is live and what waits on the operator's review, read in the
+          # same query as the total above.
+          typelize(Spree::Product::ALL_STATUSES.to_h { |status| [status.to_sym, :number] })
+          attribute :products_count_by_status, &:products_count_by_status
+
           attributes :users_count
 
           # How far through the marketplace's checklist this seller is — what
@@ -63,7 +67,8 @@ module Spree
           # requirements themselves, with their submissions, stay on the
           # heavier `onboarding` action; a list of sellers needs the number,
           # not the rows behind it.
-          attributes :onboarding_progress
+          typelize({ done: :number, total: :number })
+          attribute :onboarding_progress, &:onboarding_progress
 
           attribute :onboarding_complete, &:onboarding_complete?
 
@@ -78,6 +83,11 @@ module Spree
               resource: proc { Spree.api.admin_address_serializer },
               if: proc { |seller| seller.returns_address.present? }
 
+          # The stock location the returns address is read from. The address
+          # is not the seller's own to write — it is edited on this location.
+          typelize returns_location_id: [:string, nullable: true]
+          prefixed_id_attributes :returns_location
+
           expandable_custom_fields admin: true
         end
       end

data/app/serializers/spree/api/v3/fulfillment_serializer.rb

@@ -7,7 +7,6 @@ module Spree
                  fulfillment_type: [:string, enum: %w[shipping digital pickup pickup_point], enum_type_name: 'FulfillmentType'],
                  tracking: [:string, nullable: true], tracking_url: [:string, nullable: true],
                  fulfilled_at: [:string, nullable: true], delivered_at: [:string, nullable: true], unpriced: :boolean,
-                 items: 'Array<{ item_id: string; variant_id: string; quantity: number }>',
                  pickup_point_data: ['Record<string, unknown>', nullable: true],
                  selected_delivery_rate_id: [:string, nullable: true]
 
@@ -40,6 +39,7 @@ module Spree
 
         # Which items (and how many) are in this fulfillment.
         # A line item can be split across fulfillments with different quantities.
+        typelize({ item_id: :string, variant_id: :string, quantity: :number }, multi: true)
         attribute :items do |fulfillment|
           fulfillment.manifest.filter_map do |item|
             next unless item.line_item

data/app/serializers/spree/api/v3/product_category_serializer.rb

@@ -0,0 +1,26 @@
+module Spree
+  module Api
+    module V3
+      class ProductCategorySerializer < BaseSerializer
+        typelize product_id: [:string, nullable: true],
+                 category_id: [:string, nullable: true]
+
+        attribute :product_id do |product_category|
+          prefixed_id_for(Spree::Product, product_category.product_id)
+        end
+
+        attribute :category_id do |product_category|
+          prefixed_id_for(Spree::Category, product_category.category_id)
+        end
+
+        private
+
+        def prefixed_id_for(klass, id)
+          return nil if id.nil?
+
+          "#{klass._prefix_id_prefix}_#{Spree::PrefixedId::SQIDS.encode([id])}"
+        end
+      end
+    end
+  end
+end

data/app/serializers/spree/api/v3/product_collection_serializer.rb

@@ -0,0 +1,26 @@
+module Spree
+  module Api
+    module V3
+      class ProductCollectionSerializer < BaseSerializer
+        typelize product_id: [:string, nullable: true],
+                 collection_id: [:string, nullable: true]
+
+        attribute :product_id do |product_collection|
+          prefixed_id_for(Spree::Product, product_collection.product_id)
+        end
+
+        attribute :collection_id do |product_collection|
+          prefixed_id_for(Spree::Collection, product_collection.collection_id)
+        end
+
+        private
+
+        def prefixed_id_for(klass, id)
+          return nil if id.nil?
+
+          "#{klass._prefix_id_prefix}_#{Spree::PrefixedId::SQIDS.encode([id])}"
+        end
+      end
+    end
+  end
+end

data/app/serializers/spree/api/v3/seller/import_serializer.rb

@@ -16,7 +16,6 @@ module Spree
                    failed_rows_count: :number,
                    processing_errors: [:string, nullable: true],
                    delimiter: :string,
-                   schema_fields: 'Array<{ name: string; label: string; required: boolean }>',
                    csv_headers: [:string, multi: true],
                    sample_row: 'Record<string, string | null>',
                    original_filename: [:string, nullable: true],
@@ -52,6 +51,7 @@ module Spree
             import.rows_status_counts['failed'] || 0
           end
 
+          typelize({ name: :string, label: :string, required: :boolean }, multi: true)
           attribute :schema_fields do |import|
             import.schema_fields.map do |field|
               { name: field[:name], label: field[:label], required: field[:required].present? }

data/app/serializers/spree/api/v3/seller/invitation_serializer.rb

@@ -7,8 +7,7 @@ module Spree
                    expires_at: [:string, nullable: true],
                    accepted_at: [:string, nullable: true],
                    inviter_email: :string,
-                   invitee_exists: [:boolean, optional: true],
-                   seller: '{ id: string; name: string }'
+                   invitee_exists: [:boolean, optional: true]
 
           attributes :email,
                      created_at: :iso8601, expires_at: :iso8601, accepted_at: :iso8601
@@ -29,6 +28,7 @@ module Spree
 
           # The smallest shape the acceptance page's title ("Join <seller>")
           # needs; the page is public, so nothing more of the seller goes out.
+          typelize({ id: :string, name: :string })
           attribute :seller do |invitation|
             { id: invitation.resource.prefixed_id, name: invitation.resource.name }
           end

data/app/serializers/spree/api/v3/seller/order_line_item_serializer.rb

@@ -13,7 +13,7 @@ module Spree
         class OrderLineItemSerializer < V3::BaseSerializer
           typelize name: :string, sku: [:string, nullable: true], options_text: [:string, nullable: true],
                    quantity: :number, currency: [:string, enum: Spree::Money::Rounding::CURRENCY_CODES, enum_type_name: 'CurrencyCode'], variant_id: [:string, nullable: true],
-                   thumbnail_url: [:string, nullable: true]
+                   thumbnail_url: [:string, nullable: true], product_id: [:string, nullable: true]
 
           attributes :name, :options_text, :quantity, :currency
 
@@ -22,7 +22,7 @@ module Spree
           money_attributes :discounted_amount,
                            :additional_tax_total, :total
 
-          prefixed_id_attributes :variant
+          prefixed_id_attributes :variant, :product
 
           # How a seller finds the item on their own shelf.
           attribute :sku do |line_item|

data/app/serializers/spree/api/v3/seller/product_serializer.rb

@@ -18,12 +18,20 @@ module Spree
           typelize status: [:string, enum: Spree::Product.statuses, enum_type_name: 'ProductStatus'], metadata: 'Record<string, unknown>',
                    product_type_id: [:string, nullable: true],
                    delivery_profile_id: [:string, nullable: true],
+                   total_on_hand: [:number, nullable: true],
                    submission: ['ProductSubmission', nullable: true]
 
           attributes :status, :metadata, created_at: :iso8601, updated_at: :iso8601
 
           prefixed_id_attributes :product_type, :delivery_profile
 
+          # Null when any variant is not tracked: its stock is unlimited, which
+          # is not a number to send.
+          attribute :total_on_hand do |product|
+            total = product.total_on_hand
+            total.to_i unless total.infinite?
+          end
+
           many :variants,
                resource: proc { Spree.api.seller_variant_serializer },
                if: proc { expand?('variants') }

data/app/serializers/spree/api/v3/seller/requirement_status_serializer.rb

@@ -10,13 +10,14 @@ module Spree
                    description: [:string, nullable: true],
                    required: :boolean, position: :number, status: [:string, enum: Spree::SellerRequirementStatus::STATUSES, enum_type_name: 'SellerRequirementState'],
                    blocking: :boolean, action_url: [:string, nullable: true],
-                   blocker: ['{ state: string; message: string | null } | null'],
                    accepts_submissions: :boolean, requires_file: :boolean,
                    accepted_content_types: [:string, multi: true],
                    required_policy_name: [:string, nullable: true],
                    terms_html: [:string, nullable: true]
 
-          attributes :id, :kind, :name, :description, :required, :position, :status, :action_url, :blocker
+          attributes :id, :kind, :name, :description, :required, :position, :status, :action_url
+          typelize({ state: :string, message: [:string, { nullable: true }] }, nullable: true)
+          attribute :blocker, &:blocker
 
           attribute :blocking, &:blocking?
 

data/config/initializers/typelizer.rb

@@ -1,6 +1,8 @@
-# Disable automatic type generation on boot — types are generated manually
-# via `bundle exec rake typelizer:generate`. Set ENABLE_TYPELIZER=1 to enable.
-ENV["DISABLE_TYPELIZER"] ||= "true" unless ENV["ENABLE_TYPELIZER"]
+# Types are generated only by `bundle exec rake typelizer:generate`, which sets
+# TYPELIZER=true before booting; the engine's `spree.api.typelizer` initializer
+# keeps Typelizer from generating on its own.
+
+require 'spree/api/typelizer_generation'
 
 Rails.application.config.after_initialize do
   api_root = Spree::Api::Engine.root
@@ -10,22 +12,11 @@ Rails.application.config.after_initialize do
     config.comments = true
     config.listen = false
 
-    # Teach typelizer's Alba plugin about custom Alba types (see alba.rb);
-    # unmapped typed attributes crash generation.
-    config.plugin_configs = {
-      alba: {
-        ts_mapper: Typelizer::SerializerPlugins::Alba::ALBA_TS_MAPPER.merge(
-          'iso8601' => { type: :string },
-          'string' => { type: :string }
-        )
-      }
-    }
+    config.plugin_configs = Spree::Api::TypelizerGeneration.plugin_configs
 
     # Serializers that exist only for the Admin API. Event serializers stay in:
     # they describe the `data` of the typed webhook events the Store SDK ships.
-    store_excluded = %w[
-      Asset CartPromotion OrderPromotion Report TaxCategory
-    ].to_set
+    store_excluded = Spree::Api::TypelizerGeneration::STORE_EXCLUDED
 
     # Store SDK — no prefix, package provides namespace
     config.writer(:store) do |c|
@@ -74,9 +65,7 @@ Rails.application.config.after_initialize do
     # branch; Category and CustomField are not, but the store product
     # serializer this branch inherits references them, so their types still
     # have to exist in the package.
-    store_nested_for_seller = %w[
-      Category CustomField OptionType OptionValue Seller
-    ].to_set
+    store_nested_for_seller = Spree::Api::TypelizerGeneration::SELLER_STORE_TYPES
 
     config.writer(:seller) do |c|
       c.output_dir = api_root.join('../../packages/seller-sdk/src/types/generated')

data/config/routes.rb

@@ -285,6 +285,7 @@ Spree::Core::Engine.add_routes do
         patch 'me', to: 'me#update'
 
         resource :updates, only: :show
+        resource :diagnostics, only: :show
 
         # Store Settings
         resource :store, only: [:show, :update], controller: 'store' do
@@ -366,6 +367,11 @@ Spree::Core::Engine.add_routes do
             # (docs/plans/6.0-seller-product-submission.md).
             patch :approve
             patch :reject
+            # One product's status, through the workflow that publishes its
+            # event; bulk_status_update writes the column for many at once.
+            patch :activate
+            patch :archive
+            patch :draft
           end
           collection do
             post :bulk_status_update
@@ -605,7 +611,7 @@ Spree::Core::Engine.add_routes do
           # The operator is the only one who can repair a seller whose team
           # has locked itself out, which the seller's own panel cannot do.
           resources :team, only: [:index, :destroy], controller: 'sellers/team'
-          resources :invitations, only: [:index, :destroy], controller: 'sellers/invitations' do
+          resources :invitations, only: [:index, :create, :destroy], controller: 'sellers/invitations' do
             patch :resend, on: :member
             resource :acceptance_link, only: [:show], controller: 'sellers/invitations/acceptance_links'
           end
@@ -925,6 +931,7 @@ Spree::Core::Engine.add_routes do
 
           resources :digital_assets, controller: 'products/digital_assets',
                                      only: [:index, :create, :show, :update, :destroy]
+          resources :media, controller: 'products/media', only: [:destroy]
         end