spree_core 5.3.6 → 5.4.0.beta

metadata

@@ -1,15 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: spree_core
 version: !ruby/object:Gem::Version
-  version: 5.3.6
+  version: 5.4.0.beta
 platform: ruby
 authors:
 - Sean Schofield
 - Spark Solutions Sp. z o.o.
 - Vendo Connect Inc.
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-02-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n-tasks
@@ -217,6 +218,20 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '4'
+- !ruby/object:Gem::Dependency
+  name: jwt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.1'
 - !ruby/object:Gem::Dependency
   name: money
   requirement: !ruby/object:Gem::Requirement
@@ -489,20 +504,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
-- !ruby/object:Gem::Dependency
-  name: request_store
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.7'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '1.7'
 - !ruby/object:Gem::Dependency
   name: wannabe_bool
   requirement: !ruby/object:Gem::Requirement
@@ -574,26 +575,39 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: ssrf_filter
+  name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '3.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '3.1'
+- !ruby/object:Gem::Dependency
+  name: sqids
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
 description: Spree Models, Helpers, Services and core libraries
 email: hello@spreecommerce.org
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- LICENSE.md
 - README.md
 - Rakefile
 - app/assets/config/spree_core_manifest.js
@@ -827,7 +841,7 @@ files:
 - app/finders/spree/posts/find.rb
 - app/finders/spree/product_properties/find_available.rb
 - app/finders/spree/products/find.rb
-- app/finders/spree/stores/find_current.rb
+- app/finders/spree/stores/find_default.rb
 - app/finders/spree/taxons/find.rb
 - app/finders/spree/variants/find.rb
 - app/finders/spree/variants/option_types_finder.rb
@@ -849,6 +863,7 @@ files:
 - app/javascript/spree/core/helpers/debounce.js
 - app/javascript/spree/core/helpers/scroll_lock.js
 - app/jobs/spree/addresses/geocode_address_job.rb
+- app/jobs/spree/api_key_touch_job.rb
 - app/jobs/spree/base_job.rb
 - app/jobs/spree/coupon_codes/bulk_generate_job.rb
 - app/jobs/spree/events/subscriber_job.rb
@@ -888,17 +903,19 @@ files:
 - app/models/concerns/spree/metadata.rb
 - app/models/concerns/spree/metafields.rb
 - app/models/concerns/spree/multi_searchable.rb
-- app/models/concerns/spree/multi_store_resource.rb
 - app/models/concerns/spree/named_type.rb
 - app/models/concerns/spree/number_as_param.rb
 - app/models/concerns/spree/number_identifier.rb
 - app/models/concerns/spree/parameterizable_name.rb
 - app/models/concerns/spree/payment_source_concern.rb
+- app/models/concerns/spree/prefixed_id.rb
 - app/models/concerns/spree/previewable.rb
 - app/models/concerns/spree/product_scopes.rb
 - app/models/concerns/spree/publishable.rb
 - app/models/concerns/spree/ransackable_attributes.rb
 - app/models/concerns/spree/single_store_resource.rb
+- app/models/concerns/spree/store_scoped_resource.rb
+- app/models/concerns/spree/stores/markets.rb
 - app/models/concerns/spree/stores/setup.rb
 - app/models/concerns/spree/stores/socials.rb
 - app/models/concerns/spree/translatable_resource.rb
@@ -920,8 +937,11 @@ files:
 - app/models/spree/adjustable/adjustments_updater.rb
 - app/models/spree/adjustable/promotion_accumulator.rb
 - app/models/spree/adjustment.rb
+- app/models/spree/api_key.rb
 - app/models/spree/asset.rb
 - app/models/spree/asset/support/active_storage.rb
+- app/models/spree/authentication/strategies/base_strategy.rb
+- app/models/spree/authentication/strategies/email_password_strategy.rb
 - app/models/spree/base.rb
 - app/models/spree/base_analytics_event_handler.rb
 - app/models/spree/calculator.rb
@@ -945,7 +965,6 @@ files:
 - app/models/spree/coupon_code.rb
 - app/models/spree/credit_card.rb
 - app/models/spree/current.rb
-- app/models/spree/custom_domain.rb
 - app/models/spree/customer_group.rb
 - app/models/spree/customer_group_user.rb
 - app/models/spree/customer_return.rb
@@ -975,15 +994,20 @@ files:
 - app/models/spree/import_mapping.rb
 - app/models/spree/import_row.rb
 - app/models/spree/import_schema.rb
+- app/models/spree/import_schemas/customers.rb
 - app/models/spree/import_schemas/products.rb
+- app/models/spree/imports/customers.rb
 - app/models/spree/imports/products.rb
 - app/models/spree/integration.rb
 - app/models/spree/inventory_unit.rb
 - app/models/spree/invitation.rb
 - app/models/spree/invitations/store.rb
+- app/models/spree/legacy_admin_user.rb
 - app/models/spree/legacy_user.rb
 - app/models/spree/line_item.rb
 - app/models/spree/log_entry.rb
+- app/models/spree/market.rb
+- app/models/spree/market_country.rb
 - app/models/spree/metafield.rb
 - app/models/spree/metafield_definition.rb
 - app/models/spree/metafields/boolean.rb
@@ -1022,6 +1046,9 @@ files:
 - app/models/spree/payment_method.rb
 - app/models/spree/payment_method/check.rb
 - app/models/spree/payment_method/store_credit.rb
+- app/models/spree/payment_session.rb
+- app/models/spree/payment_sessions/bogus.rb
+- app/models/spree/payment_setup_session.rb
 - app/models/spree/payment_source.rb
 - app/models/spree/permission_sets/base.rb
 - app/models/spree/permission_sets/configuration_management.rb
@@ -1046,6 +1073,7 @@ files:
 - app/models/spree/price_list.rb
 - app/models/spree/price_rule.rb
 - app/models/spree/price_rules/customer_group_rule.rb
+- app/models/spree/price_rules/market_rule.rb
 - app/models/spree/price_rules/user_rule.rb
 - app/models/spree/price_rules/volume_rule.rb
 - app/models/spree/price_rules/zone_rule.rb
@@ -1180,6 +1208,7 @@ files:
 - app/models/spree/taxon_rules/sale.rb
 - app/models/spree/taxon_rules/tag.rb
 - app/models/spree/taxonomy.rb
+- app/models/spree/user_identity.rb
 - app/models/spree/variant.rb
 - app/models/spree/variant/webhooks.rb
 - app/models/spree/webhook_delivery.rb
@@ -1190,7 +1219,6 @@ files:
 - app/models/spree/zone_member.rb
 - app/paginators/spree/shared/paginate.rb
 - app/presenters/spree/csv/customer_presenter.rb
-- app/presenters/spree/csv/formula_sanitizer.rb
 - app/presenters/spree/csv/gift_card_presenter.rb
 - app/presenters/spree/csv/metafields_helper.rb
 - app/presenters/spree/csv/newsletter_subscriber_presenter.rb
@@ -1206,41 +1234,6 @@ files:
 - app/presenters/spree/variant_presenter.rb
 - app/presenters/spree/variants/option_types_presenter.rb
 - app/presenters/spree/variants/options_presenter.rb
-- app/serializers/spree/events/asset_serializer.rb
-- app/serializers/spree/events/base_serializer.rb
-- app/serializers/spree/events/customer_return_serializer.rb
-- app/serializers/spree/events/digital_link_serializer.rb
-- app/serializers/spree/events/digital_serializer.rb
-- app/serializers/spree/events/export_serializer.rb
-- app/serializers/spree/events/gift_card_batch_serializer.rb
-- app/serializers/spree/events/gift_card_serializer.rb
-- app/serializers/spree/events/image_serializer.rb
-- app/serializers/spree/events/import_row_serializer.rb
-- app/serializers/spree/events/import_serializer.rb
-- app/serializers/spree/events/invitation_serializer.rb
-- app/serializers/spree/events/line_item_serializer.rb
-- app/serializers/spree/events/newsletter_subscriber_serializer.rb
-- app/serializers/spree/events/order_serializer.rb
-- app/serializers/spree/events/payment_serializer.rb
-- app/serializers/spree/events/post_category_serializer.rb
-- app/serializers/spree/events/post_serializer.rb
-- app/serializers/spree/events/price_serializer.rb
-- app/serializers/spree/events/product_serializer.rb
-- app/serializers/spree/events/promotion_serializer.rb
-- app/serializers/spree/events/refund_serializer.rb
-- app/serializers/spree/events/reimbursement_serializer.rb
-- app/serializers/spree/events/report_serializer.rb
-- app/serializers/spree/events/return_authorization_serializer.rb
-- app/serializers/spree/events/return_item_serializer.rb
-- app/serializers/spree/events/shipment_serializer.rb
-- app/serializers/spree/events/stock_item_serializer.rb
-- app/serializers/spree/events/stock_movement_serializer.rb
-- app/serializers/spree/events/stock_transfer_serializer.rb
-- app/serializers/spree/events/store_credit_serializer.rb
-- app/serializers/spree/events/user_serializer.rb
-- app/serializers/spree/events/variant_serializer.rb
-- app/serializers/spree/events/wished_item_serializer.rb
-- app/serializers/spree/events/wishlist_serializer.rb
 - app/services/spree/account/addresses/create.rb
 - app/services/spree/account/addresses/update.rb
 - app/services/spree/account/create.rb
@@ -1285,6 +1278,7 @@ files:
 - app/services/spree/gift_cards/redeem.rb
 - app/services/spree/gift_cards/remove.rb
 - app/services/spree/imports/row_processors/base.rb
+- app/services/spree/imports/row_processors/customer.rb
 - app/services/spree/imports/row_processors/product_variant.rb
 - app/services/spree/line_items/create.rb
 - app/services/spree/line_items/destroy.rb
@@ -1301,8 +1295,11 @@ files:
 - app/services/spree/products/auto_match_taxons.rb
 - app/services/spree/products/duplicator.rb
 - app/services/spree/products/prepare_nested_attributes.rb
+- app/services/spree/sample_data/import_runner.rb
+- app/services/spree/sample_data/loader.rb
 - app/services/spree/seeds/admin_user.rb
 - app/services/spree/seeds/all.rb
+- app/services/spree/seeds/api_keys.rb
 - app/services/spree/seeds/countries.rb
 - app/services/spree/seeds/default_reimbursement_types.rb
 - app/services/spree/seeds/digital_delivery.rb
@@ -1366,6 +1363,7 @@ files:
 - app/views/spree/shared/_payment.html.erb
 - app/views/spree/test_mailer/test_email.html.erb
 - app/views/spree/test_mailer/test_email.text.erb
+- config/brakeman.ignore
 - config/i18n-tasks.yml
 - config/importmap.rb
 - config/initializers/active_storage.rb
@@ -1490,6 +1488,7 @@ files:
 - db/migrate/20250914101955_add_missing_indexes_on_spree_adjustments.rb
 - db/migrate/20250915093930_add_metadata_to_spree_newsletter_subscribers.rb
 - db/migrate/20250923141845_create_spree_imports.rb
+- db/migrate/20250923141900_create_spree_user_identities.rb
 - db/migrate/20251110120000_create_spree_price_lists.rb
 - db/migrate/20251110120001_create_spree_price_rules.rb
 - db/migrate/20251110120002_add_price_list_id_to_spree_prices.rb
@@ -1506,6 +1505,19 @@ files:
 - db/migrate/20260119120000_add_counter_caches_to_spree_products.rb
 - db/migrate/20260119170000_add_counter_caches_to_spree_taxons.rb
 - db/migrate/20260120120000_add_image_count_to_spree_variants.rb
+- db/migrate/20260123000000_create_spree_api_keys.rb
+- db/migrate/20260131000000_add_thumbnail_id_to_spree_variants_and_products.rb
+- db/migrate/20260213000000_create_spree_payment_sessions.rb
+- db/migrate/20260218000000_create_spree_payment_setup_sessions.rb
+- db/migrate/20260220000000_create_spree_markets.rb
+- db/sample_data/customers.csv
+- db/sample_data/metafield_definitions.rb
+- db/sample_data/orders.rb
+- db/sample_data/payment_methods.rb
+- db/sample_data/posts.rb
+- db/sample_data/products.csv
+- db/sample_data/promotions.rb
+- db/sample_data/shipping_methods.rb
 - db/seeds.rb
 - lib/friendly_id/history_decorator.rb
 - lib/friendly_id/paranoia.rb
@@ -1513,6 +1525,9 @@ files:
 - lib/generators/spree/authentication/custom/templates/authentication_helpers.rb.tt
 - lib/generators/spree/authentication/devise/devise_generator.rb
 - lib/generators/spree/authentication/devise/templates/authentication_helpers.rb.tt
+- lib/generators/spree/authentication/dummy/dummy_generator.rb
+- lib/generators/spree/authentication/dummy/templates/authentication_helpers.rb.tt
+- lib/generators/spree/authentication/dummy/templates/create_spree_admin_users.rb.tt
 - lib/generators/spree/cursor_rules/cursor_rules_generator.rb
 - lib/generators/spree/cursor_rules/templates/spree_rules.mdc
 - lib/generators/spree/dummy/dummy_generator.rb
@@ -1595,6 +1610,7 @@ files:
 - lib/spree/testing_support/factories.rb
 - lib/spree/testing_support/factories/address_factory.rb
 - lib/spree/testing_support/factories/adjustment_factory.rb
+- lib/spree/testing_support/factories/api_key_factory.rb
 - lib/spree/testing_support/factories/asset_factory.rb
 - lib/spree/testing_support/factories/calculator_factory.rb
 - lib/spree/testing_support/factories/classification_factory.rb
@@ -1622,6 +1638,7 @@ files:
 - lib/spree/testing_support/factories/invitation_factory.rb
 - lib/spree/testing_support/factories/line_item_factory.rb
 - lib/spree/testing_support/factories/log_entry_factory.rb
+- lib/spree/testing_support/factories/market_factory.rb
 - lib/spree/testing_support/factories/metafield_definition_factory.rb
 - lib/spree/testing_support/factories/metafield_factory.rb
 - lib/spree/testing_support/factories/newsletter_subscriber_factory.rb
@@ -1631,6 +1648,8 @@ files:
 - lib/spree/testing_support/factories/payment_capture_event_factory.rb
 - lib/spree/testing_support/factories/payment_factory.rb
 - lib/spree/testing_support/factories/payment_method_factory.rb
+- lib/spree/testing_support/factories/payment_session_factory.rb
+- lib/spree/testing_support/factories/payment_setup_session_factory.rb
 - lib/spree/testing_support/factories/payment_source_factory.rb
 - lib/spree/testing_support/factories/policy_factory.rb
 - lib/spree/testing_support/factories/post_category_factory.rb
@@ -1681,6 +1700,7 @@ files:
 - lib/spree/testing_support/factories/taxon_rule_factory.rb
 - lib/spree/testing_support/factories/taxonomy_factory.rb
 - lib/spree/testing_support/factories/user_factory.rb
+- lib/spree/testing_support/factories/user_identity_factory.rb
 - lib/spree/testing_support/factories/variant_factory.rb
 - lib/spree/testing_support/factories/webhook_delivery_factory.rb
 - lib/spree/testing_support/factories/webhook_endpoint_factory.rb
@@ -1709,10 +1729,14 @@ files:
 - lib/tasks/core.rake
 - lib/tasks/dependencies.rake
 - lib/tasks/exchanges.rake
+- lib/tasks/images.rake
+- lib/tasks/markets.rake
 - lib/tasks/products.rake
+- lib/tasks/sample_data.rake
 - lib/tasks/taxons.rake
 - lib/tasks/variants.rake
 - spec/fixtures/favicon.ico
+- spec/fixtures/files/customers_import.csv
 - spec/fixtures/files/example.json
 - spec/fixtures/files/icon_256x256.gif
 - spec/fixtures/files/icon_256x256.png
@@ -1728,13 +1752,13 @@ files:
 - vendor/javascript/tailwindcss-stimulus-components.js
 homepage: https://spreecommerce.org
 licenses:
-- AGPL-3.0-or-later
 - BSD-3-Clause
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v5.3.6
+  changelog_uri: https://github.com/spree/spree/releases/tag/v5.4.0.beta
   documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v5.3.6
+  source_code_uri: https://github.com/spree/spree/tree/v5.4.0.beta
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -1749,7 +1773,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.8.23
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 3.5.22
+signing_key:
 specification_version: 4
 summary: The bare bones necessary for Spree
 test_files: []

data/LICENSE.md

@@ -1,57 +0,0 @@
-# License
-
-Copyright © 2024-present, Vendo Connect Inc.
-
-Copyright © 2015-2024, Spark Solutions Sp. z o.o.
-
-Copyright © 2007-2015, Spree Commerce Inc.
-
-Spree Commerce is a free, open-source eCommerce framework giving you full control and customizability.
-
-For **Spree Commerce versions 4.10** and later in the [spree/spree](https://github.com/spree/spree) repository two licenses apply simultaneously and users are required to comply with the terms of these two licenses at the same time:
-
-* [AGPL-3.0](https://opensource.org/license/agpl-v3) - for all contributions from version 4.10 onwards
-
-* [BSD-3-Clause](https://opensource.org/license/bsd-3-clause) - for all other contributions predating version 4.10
-Effectively, for versions 4.10 and upwards **AGPL-3.0** license applies.
-
-**Spree Commerce versions 4.9** and earlier in the [spree/spree](https://github.com/spree/spree) repository are available under the **BSD-3-Clause** license and users are required to comply with its terms.
-
-If you’d like to use Spree Commerce without the AGPL-3.0 restrictions e.g. for a **SaaS** business, please talk to us about obtaining a [Commercial License](#commercial-license).
-
-All third party components incorporated into this software are licensed under the original license provided by the owner of the applicable component.
-
-Please refer to our [Licensing FAQ](https://spreecommerce.org/why-spree-is-changing-its-open-source-license-to-agpl-3-0-and-introducing-a-commercial-license/) in case of questions.
-
-## AGPL-3.0 License - Spree 4.10 upwards
-
-If you decide to accept the AGPL-3.0 license by using Spree Commerce version 4.10 or later, you must comply with the following terms:
-
-This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
-
-This program is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU Affero General Public License for more details.
-
-You should have received a copy of the GNU Affero General Public License
-along with this program.  If not, see [https://www.gnu.org/licenses/](https://www.gnu.org/licenses/).
-
-## BSD 3-Clause License
-
-If you decide to accept the BSD-3-Clause license by using Spree Commerce, you must comply with the following terms:
-
-Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
-Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
-Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
-Neither the name of Spree Commerce Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,     THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR                CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,              PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF         LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
-## Commercial License
-
-Should you decide to use Spree Commerce version 4.10 or later for commercial redistribution (eg. SaaS) - also known as Commercial Distribution - you must do so in accordance with the terms and conditions contained in a separate written agreement between you and [Vendo Connect Inc.](https://www.getvendo.com/).
-
-For more information about the Commercial License (CL) please contact [sales@getvendo.com](mailto:sales@getvendo.com).
-
-Please refer to our [Licensing FAQ](https://spreecommerce.org/why-spree-is-changing-its-open-source-license-to-agpl-3-0-and-introducing-a-commercial-license/) in case of questions.

data/app/finders/spree/stores/find_current.rb

@@ -1,28 +0,0 @@
-module Spree
-  module Stores
-    class FindCurrent
-      def initialize(scope: nil, url: nil)
-        @scope = scope || Spree::Store
-        @url = url
-      end
-
-      def execute
-        store = by_url(scope) || scope.default
-        return if store.nil?
-
-        Spree::Current.store = store
-        store
-      end
-
-      protected
-
-      attr_reader :scope, :url
-
-      def by_url(scope)
-        return if url.blank?
-
-        scope.by_custom_domain(url).or(scope.by_url(url)).first
-      end
-    end
-  end
-end

data/app/models/spree/custom_domain.rb

@@ -1,59 +0,0 @@
-module Spree
-  class CustomDomain < Spree::Base
-    include Spree::SingleStoreResource
-    include Spree::Metafields
-    include Spree::Metadata
-
-    normalizes :url, with: ->(value) { value&.to_s&.squish&.presence }
-
-    #
-    # Associations
-    #
-    belongs_to :store, class_name: 'Spree::Store', inverse_of: :custom_domains, touch: true
-
-    #
-    # Validations
-    #
-    validates :url, presence: true, uniqueness: true, format: {
-      with: %r{\A(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\z}i
-    }, length: { in: 1..63 }
-    validate :url_is_valid
-
-    #
-    # Callbacks
-    #
-    before_validation :sanitize_url
-    after_save :ensure_has_one_default
-    after_validation :ensure_default, on: :create
-
-    def url_is_valid
-      return if url.blank?
-      parts = url.split('.')
-
-      errors.add(:url, 'use domain or subdomain') if parts.size > 4 || parts.size < 2
-    end
-
-    def ensure_default
-      self.default = store.custom_domains.count.zero?
-    end
-
-    def ensure_has_one_default
-      store.custom_domains.where.not(id: id).update_all(default: false) if default?
-    end
-
-    def active?
-      true
-    end
-
-    def name
-      url
-    end
-
-    private
-
-    # remove https:// and http:// from the url
-    def sanitize_url
-      self.url = url&.gsub(%r{https?://}, '')
-    end
-  end
-end

data/app/presenters/spree/csv/formula_sanitizer.rb

@@ -1,28 +0,0 @@
-module Spree
-  module CSV
-    # Neutralizes CSV formula injection (CWE-1236 / OWASP "CSV Injection")
-    # by prefixing cells that would otherwise be evaluated as a formula
-    # when the exported file is opened in Excel, Google Sheets, LibreOffice,
-    # or Numbers.
-    #
-    # The leading apostrophe is the OWASP-recommended marker — spreadsheets
-    # render the cell as plain text without displaying the apostrophe.
-    module FormulaSanitizer
-      TRIGGERS = ["=", "+", "-", "@", "\t", "\r", "\n"].freeze
-
-      module_function
-
-      def cell(value)
-        return value unless value.is_a?(String)
-        return value if value.empty?
-        return value unless TRIGGERS.include?(value[0])
-
-        "'#{value}"
-      end
-
-      def row(values)
-        values.map { |v| cell(v) }
-      end
-    end
-  end
-end

data/app/serializers/spree/events/asset_serializer.rb

@@ -1,22 +0,0 @@
-# frozen_string_literal: true
-
-module Spree
-  module Events
-    class AssetSerializer < BaseSerializer
-      protected
-
-      def attributes
-        {
-          id: resource.id,
-          type: resource.type,
-          viewable_type: resource.viewable_type,
-          viewable_id: resource.viewable_id,
-          position: resource.position,
-          alt: resource.alt,
-          created_at: timestamp(resource.created_at),
-          updated_at: timestamp(resource.updated_at)
-        }
-      end
-    end
-  end
-end

data/app/serializers/spree/events/base_serializer.rb

@@ -1,61 +0,0 @@
-# frozen_string_literal: true
-
-module Spree
-  module Events
-    class BaseSerializer
-      attr_reader :resource, :context
-
-      def initialize(resource, context = {})
-        @resource = resource
-        @context = context
-      end
-
-      # Main serialization method
-      def as_json
-        attributes
-      end
-
-      # Class method for convenience
-      def self.serialize(resource, context = {})
-        new(resource, context).as_json
-      end
-
-      protected
-
-      # Override in subclasses to define attributes
-      def attributes
-        {
-          id: resource.id
-        }
-      end
-
-      # Context helpers
-      def event_name
-        context[:event_name]
-      end
-
-      def triggered_at
-        context[:triggered_at] || Time.current
-      end
-
-      # Attribute helpers
-
-      # Safely get attribute, returns nil if not present
-      def attribute(name)
-        resource.public_send(name) if resource.respond_to?(name)
-      end
-
-      # Timestamp helper - ISO8601 format
-      def timestamp(time)
-        time&.iso8601
-      end
-
-      # Money helper - decimal value for events
-      def money(amount)
-        return nil if amount.nil?
-
-        amount.respond_to?(:to_d) ? amount.to_d : amount
-      end
-    end
-  end
-end

data/app/serializers/spree/events/customer_return_serializer.rb

@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-module Spree
-  module Events
-    class CustomerReturnSerializer < BaseSerializer
-      protected
-
-      def attributes
-        {
-          id: resource.id,
-          number: resource.number,
-          stock_location_id: resource.stock_location_id,
-          store_id: resource.store_id,
-          created_at: timestamp(resource.created_at),
-          updated_at: timestamp(resource.updated_at)
-        }
-      end
-    end
-  end
-end