spree_core 5.6.1 → 6.0.0.beta2

data/lib/spree/core.rb

@@ -5,8 +5,6 @@ require 'active_job/railtie'
 require 'active_model/railtie'
 require 'active_record/railtie'
 require 'active_storage/engine'
-require 'action_text/engine'
-require 'action_cable/engine'
 require 'pagy'
 
 require 'mail'
@@ -23,9 +21,11 @@ require 'jwt'
 require 'monetize'
 require 'mobility'
 require 'name_of_person'
+require 'nokogiri'
+require 'rails-html-sanitizer'
 require 'paranoia'
+require 'request_store'
 require 'ransack'
-require 'state_machines-activerecord'
 require 'active_storage_validations'
 require 'wannabe_bool'
 require 'geocoder'
@@ -34,16 +34,25 @@ require 'safely_block'
 require 'ar_lazy_preload'
 require 'sqids'
 
-# This is required because ActiveModel::Validations#invalid? conflicts with the
-# invalid state of a Payment. In the future this should be removed.
-StateMachines::Machine.ignore_method_conflicts = true
-
 module Spree
-  mattr_accessor :base_class, :user_class, :admin_user_class,
+  mattr_accessor :base_class, :customer_class, :admin_user_class,
                  :private_storage_service_name, :public_storage_service_name,
-                 :cdn_host, :root_domain, :searcher_class, :events_adapter_class, :queues,
+                 :cdn_host, :root_domain, :events_adapter_class, :queues,
                  :google_places_api_key
 
+  # Whether the connected database is MySQL or a MySQL-compatible server.
+  # The single definition every adapter branch reads — models, services and
+  # migrations alike — so a new adapter name is added in one place.
+  #
+  # Matches Trilogy and MariaDB as well as Mysql2: they share the behaviors
+  # Spree branches on (no partial indexes, `upsert_all` inferring its own
+  # conflict target, NULLs distinct in unique indexes).
+  #
+  # @return [Boolean]
+  def self.mysql?
+    ActiveRecord::Base.connection.adapter_name.match?(/mysql|trilogy/i)
+  end
+
   def self.base_class(constantize: true)
     @@base_class ||= 'Spree::Base'
     if @@base_class.is_a?(Class)
@@ -53,14 +62,26 @@ module Spree
     end
   end
 
-  def self.user_class(constantize: true)
-    if @@user_class.is_a?(Class)
-      raise 'Spree.user_class MUST be a String or Symbol object, not a Class object.'
-    elsif @@user_class.is_a?(String) || @@user_class.is_a?(Symbol)
-      constantize ? @@user_class.to_s.constantize : @@user_class.to_s
+  def self.customer_class(constantize: true)
+    if @@customer_class.is_a?(Class)
+      raise 'Spree.customer_class MUST be a String or Symbol object, not a Class object.'
+    elsif @@customer_class.is_a?(String) || @@customer_class.is_a?(Symbol)
+      constantize ? @@customer_class.to_s.constantize : @@customer_class.to_s
     end
   end
 
+  # @deprecated Spree.user_class was renamed to Spree.customer_class in 6.0; removed in 6.1.
+  def self.user_class(constantize: true)
+    Spree::Deprecation.warn('Spree.user_class is deprecated and will be removed in Spree 6.1. Use Spree.customer_class instead.') if defined?(Spree::Deprecation)
+    customer_class(constantize: constantize)
+  end
+
+  # @deprecated Spree.user_class= was renamed to Spree.customer_class= in 6.0; removed in 6.1.
+  def self.user_class=(value)
+    Spree::Deprecation.warn('Spree.user_class= is deprecated and will be removed in Spree 6.1. Use Spree.customer_class= instead.') if defined?(Spree::Deprecation)
+    self.customer_class = value
+  end
+
   def self.admin_user_class(constantize: true)
     if @@admin_user_class.is_a?(Class)
       raise 'Spree.admin_user_class MUST be a String or Symbol object, not a Class object.'
@@ -101,10 +122,10 @@ module Spree
       images: :default,
       imports: :default,
       products: :default,
-      reports: :default,
       variants: :default,
-      taxons: :default,
-      stock_location_stock_items: :default,
+      categories: :default,
+      collections: :default,
+      stock_location_stock_levels: :default,
       coupon_codes: :default,
       themes: :default,
       addresses: :default,
@@ -113,23 +134,37 @@ module Spree
       payment_webhooks: :default,
       api_keys: :default,
       search: :default,
-      stock_reservations: :default
-    )
-  end
+      stock_reservations: :default,
+      tax_identifiers: :default,
+      data_requests: :default,
+      payouts: :default
+    ).tap do |queues|
+      # @deprecated The taxons queue was renamed to categories in 6.0; removed in 6.1.
+      queues.define_singleton_method(:taxons) do
+        Spree::Deprecation.warn('Spree.queues.taxons is deprecated and will be removed in Spree 6.1. Use Spree.queues.categories instead.') if defined?(Spree::Deprecation)
+        categories
+      end
 
-  # @deprecated Spree.searcher_class is deprecated and will be removed in Spree 5.5. Use Spree.search_provider instead.
-  def self.searcher_class=(value)
-    Spree::Deprecation.warn('Spree.searcher_class is deprecated and will be removed in Spree 5.5. Use Spree.search_provider instead.')
-    @@searcher_class = value
-  end
+      # @deprecated Renamed with the stock level rename in 6.0; removed in 6.1.
+      #
+      # The writer matters as much as the reader here: this is an OpenStruct, so
+      # an existing initializer assigning the old name would quietly define a
+      # field nobody reads and its jobs would fall back to the default queue.
+      queues.define_singleton_method(:stock_location_stock_items) do
+        Spree::Deprecation.warn('Spree.queues.stock_location_stock_items is deprecated and will be removed in Spree 6.1. Use Spree.queues.stock_location_stock_levels instead.') if defined?(Spree::Deprecation)
+        stock_location_stock_levels
+      end
 
-  def self.searcher_class(constantize: true)
-    @@searcher_class
+      queues.define_singleton_method(:stock_location_stock_items=) do |value|
+        Spree::Deprecation.warn('Spree.queues.stock_location_stock_items= is deprecated and will be removed in Spree 6.1. Use Spree.queues.stock_location_stock_levels= instead.') if defined?(Spree::Deprecation)
+        self.stock_location_stock_levels = value
+      end
+    end
   end
 
   # Search provider class name. Controls product search, filtering, and faceted navigation.
   #
-  #   Spree.search_provider = 'Spree::SearchProvider::Meilisearch'
+  #   Spree.search_provider = 'SpreeMeilisearch::SearchProvider'
   #
   def self.search_provider
     @@search_provider ||= 'Spree::SearchProvider::Database'
@@ -139,6 +174,30 @@ module Spree
     @@search_provider = value.to_s
   end
 
+  # Tax ID validators, keyed by registration kind.
+  #
+  # Core ships one, for +eu_vat+, and it checks format only — the shape of an EU
+  # VAT number is arithmetic, so it costs nothing and needs no credentials.
+  # Core ships **no registry client** for any jurisdiction: asking whether a
+  # number is actually registered means a network call to somebody's government,
+  # and that belongs to the extension that wants it.
+  #
+  #   # Take over both halves of eu_vat, format and registry alike.
+  #   Spree.tax_identifier_validators['eu_vat'] = 'SpreeEuVat::TaxIdentifierValidator'
+  #
+  #   # Or cover a kind nothing here knows about.
+  #   Spree.tax_identifier_validators['au_abn'] = 'SpreeAuAbn::TaxIdentifierValidator'
+  #
+  # Class names are stored as strings and constantized at call time, so an
+  # initializer can register a validator before its class is autoloaded.
+  # Whether a kind has a validator is also what tells the admin apart the two
+  # reasons a registration has no verdict: unchecked, or uncheckable here.
+  #
+  # @return [Hash{String => String}]
+  def self.tax_identifier_validators
+    @@tax_identifier_validators ||= { 'eu_vat' => 'Spree::TaxIdentifiers::Validator::EuVat' }
+  end
+
   # Returns the events adapter class used for publishing and subscribing to events.
   #
   # @example Using a custom adapter
@@ -262,6 +321,143 @@ module Spree
     Rails.application.config.spree.adjusters = value
   end
 
+  # Model names a {Spree::Media} row may be placed on — where a file *lives*.
+  # The viewable column is polymorphic, so this is what keeps it from accepting
+  # any constant, and what store resolution, counter caches and the usage panel
+  # reason about.
+  #
+  # Append, never assign, so an extension does not drop what another added:
+  #
+  #   Spree.media_viewable_types += ['MyApp::Lookbook']
+  #
+  # @return [Array<String>]
+  def self.media_viewable_types
+    Rails.application.config.spree.media_viewable_types
+  end
+
+  def self.media_viewable_types=(value)
+    Rails.application.config.spree.media_viewable_types = value
+  end
+
+  # The tax engine used when a market names none — the fallback behind
+  # {Spree::Purchase::Taxation#tax_provider}, which is what call sites actually
+  # use. Defaults to {Spree::TaxProvider::Internal}.
+  #
+  #   Spree.default_tax_provider = SpreeTaxAvalara::TaxProvider
+  #
+  # Returns the class rather than an instance: callers that want one say `.new`,
+  # and the ones that only need to name it (market selection constantizing its
+  # own choice, the admin marking which entry is the default) do not pay for an
+  # object they discard. A String or Symbol is accepted and constantized, so an
+  # initializer can name a provider before its class is autoloaded.
+  #
+  # @return [Class]
+  def self.default_tax_provider
+    provider = Rails.application.config.spree.default_tax_provider
+    provider.is_a?(Class) ? provider : provider.to_s.constantize
+  end
+
+  def self.default_tax_provider=(value)
+    Rails.application.config.spree.default_tax_provider = value
+  end
+
+  # Tax engines a market can be pointed at. Provider gems append their own, so a
+  # merchant picks from what is actually installed rather than typing a class
+  # name and finding out at checkout.
+  #
+  # @return [Array<Class>]
+  def self.tax_providers
+    Rails.application.config.spree.tax_providers
+  end
+
+  def self.tax_providers=(value)
+    Rails.application.config.spree.tax_providers = value
+  end
+
+  # Pricing engines a store can be pointed at. Connector gems append their own,
+  # so a merchant picks from what is actually installed.
+  #
+  # @return [Array<Class>]
+  def self.pricing_providers
+    Rails.application.config.spree.pricing_providers
+  end
+
+  def self.pricing_providers=(value)
+    Rails.application.config.spree.pricing_providers = value
+  end
+
+  # Inventory sources a store can be pointed at.
+  #
+  # @return [Array<Class>]
+  def self.inventory_providers
+    Rails.application.config.spree.inventory_providers
+  end
+
+  def self.inventory_providers=(value)
+    Rails.application.config.spree.inventory_providers = value
+  end
+
+  # How sellers get paid. Core ships {Spree::PayoutProvider::System}, which
+  # keeps the books and leaves the operator to settle; a provider gem appends
+  # one that moves the money itself.
+  #
+  # @return [Array<Class>]
+  def self.payout_providers
+    Rails.application.config.spree.payout_providers
+  end
+
+  def self.payout_providers=(value)
+    Rails.application.config.spree.payout_providers = value
+  end
+
+  # The provider a store pays through when it has named none.
+  #
+  # @return [Class]
+  def self.default_payout_provider
+    Rails.application.config.spree.default_payout_provider
+  end
+
+  def self.default_payout_provider=(value)
+    Rails.application.config.spree.default_payout_provider = value
+  end
+
+  # Validator enforcing the password policy on the default auth models
+  # ({Spree::Customer}, {Spree::AdminUser}). Defaults to
+  # {Spree::PasswordLengthValidator}, which reads the configurable length bounds.
+  #
+  # Assign an +ActiveModel::Validator+ subclass to replace the policy wholesale —
+  # corporate rules, breach-list lookups, entropy scoring. Errors it adds to
+  # +:password+ reach API clients through the standard 422 path, so the
+  # validator's message is the user-facing reason.
+  #
+  #   Spree.password_validator = MyApp::PasswordValidator
+  #
+  # @return [Class]
+  def self.password_validator
+    Rails.application.config.spree.password_validator
+  end
+
+  def self.password_validator=(value)
+    Rails.application.config.spree.password_validator = value
+  end
+
+  def self.fulfillment_providers
+    Rails.application.config.spree.fulfillment_providers
+  end
+
+  def self.fulfillment_providers=(value)
+    Rails.application.config.spree.fulfillment_providers = value
+  end
+
+  def self.tracking_carriers
+    Rails.application.config.spree.tracking_carriers
+  end
+
+  def self.tracking_carriers=(value)
+    Rails.application.config.spree.tracking_carriers = value
+  end
+
+
   def self.stock_splitters
     Rails.application.config.spree.stock_splitters
   end
@@ -270,6 +466,94 @@ module Spree
     Rails.application.config.spree.stock_splitters = value
   end
 
+  # Commission rule kinds selectable on a commission rate.
+  #
+  # @return [Array<Class>]
+  def self.commission_rules
+    Rails.application.config.spree.commission_rules
+  end
+
+  def self.commission_rules=(value)
+    Rails.application.config.spree.commission_rules = value
+  end
+
+  # Seller onboarding requirement kinds an operator can configure
+  # (docs/plans/6.0-seller-onboarding-requirements.md).
+  #
+  # @return [Array<Class>]
+  def self.seller_requirements
+    Rails.application.config.spree.seller_requirements
+  end
+
+  def self.seller_requirements=(value)
+    Rails.application.config.spree.seller_requirements = value
+  end
+
+  def self.delivery_method_rules
+    Rails.application.config.spree.delivery_method_rules
+  end
+
+  def self.delivery_method_rules=(value)
+    Rails.application.config.spree.delivery_method_rules = value
+  end
+
+  # Quoting strategies selectable on a delivery method.
+  #
+  # @return [Array<Class>]
+  def self.delivery_rate_providers
+    Rails.application.config.spree.delivery_rate_providers
+  end
+
+  def self.delivery_rate_providers=(value)
+    Rails.application.config.spree.delivery_rate_providers = value
+  end
+
+  # Re-resolves every provider registry entry by name, in place.
+  #
+  # The registries hold class objects, and in development Zeitwerk reloads
+  # the classes underneath them on each code change. The old objects stay in
+  # the array, and a method on one — `service_catalog`, say — looks its
+  # sibling constants up in a namespace that no longer exists, which is a
+  # NameError on the admin provider catalog until the server restarts.
+  # Swapping each entry for the class currently answering to its name fixes
+  # that; in place, so a gem that appended its provider keeps its entry.
+  # Anonymous classes have no name to resolve and are left alone.
+  #
+  # Run from the engine's to_prepare hook: every reload in development, once
+  # at boot in production.
+  #
+  # @return [void]
+  def self.refresh_provider_registries!
+    [Rails.application.config.spree.delivery_rate_providers,
+     Rails.application.config.spree.fulfillment_providers].compact.each do |registry|
+      registry.map! { |entry| entry.is_a?(Module) && entry.name ? entry.name.constantize : entry }
+    end
+  end
+
+  # Strategies selectable as a digital asset's source. Core registers the
+  # uploaded-file default; host apps append providers that resolve a
+  # deliverable elsewhere (a licensing system, a code pool).
+  #
+  # @return [Array<Class>]
+  def self.digital_asset_providers
+    Rails.application.config.spree.digital_asset_providers
+  end
+
+  def self.digital_asset_providers=(value)
+    Rails.application.config.spree.digital_asset_providers = value
+  end
+
+  # Fulfillment profile kinds selectable when creating a profile.
+  #
+  # @return [Array<Class>]
+  def self.delivery_profile_types
+    Rails.application.config.spree.delivery_profile_types
+  end
+
+  def self.delivery_profile_types=(value)
+    Rails.application.config.spree.delivery_profile_types = value
+  end
+
   def self.order_routing
     Rails.application.config.spree.order_routing
   end
@@ -327,12 +611,12 @@ module Spree
   end
 
   # Class-name strings (`'Spree::Product'`, `'Spree::Order'`,
-  # `Spree.user_class.to_s`, plus any registered by apps) for resources that
+  # `Spree.customer_class.to_s`, plus any registered by apps) for resources that
   # expose tags via `acts_as_taggable_on :tags`. Used by the Admin API
   # `/tags` autocomplete endpoint to validate `taggable_type`. Apps extend
   # the list in an initializer:
   #
-  #   Spree.taggable_types << 'MyApp::Vendor'
+  #   Spree.taggable_types << 'MyApp::Seller'
   def self.taggable_types
     Rails.application.config.spree.taggable_types
   end
@@ -341,14 +625,26 @@ module Spree
     Rails.application.config.spree.taggable_types = value
   end
 
-  def self.reports
-    Rails.application.config.spree.reports
+  # Class-name strings for the models that may be recorded as having performed
+  # an action — what an `acted_by` association's `*_type` column is allowed to
+  # hold. The admin user class and `Spree::ApiKey` ship registered; an
+  # extension adds its own App or bot class in an initializer:
+  #
+  #   Spree.actor_classes << 'MyApp::App'
+  #
+  # A class listed here includes {Spree::Actor}, so a timeline can name it.
+  # See docs/plans/6.0-action-actors.md.
+  #
+  # @return [Array<String>]
+  def self.actor_classes
+    Rails.application.config.spree.actor_classes
   end
 
-  def self.reports=(value)
-    Rails.application.config.spree.reports = value
+  def self.actor_classes=(value)
+    Rails.application.config.spree.actor_classes = value
   end
 
+
   # Registry of the Getting Started onboarding tasks shown on the admin
   # dashboard. See {Spree::SetupTasks} for the extension API.
   #
@@ -365,8 +661,13 @@ module Spree
     Rails.application.config.spree.translatable_resources = value
   end
 
+  def self.custom_fields
+    Rails.application.config.spree.custom_fields
+  end
+
   def self.metafields
-    Rails.application.config.spree.metafields
+    Spree::Deprecation.warn('Spree.metafields is deprecated and will be removed in Spree 6.1. Use Spree.custom_fields instead.') if defined?(Spree::Deprecation)
+    custom_fields
   end
 
   def self.integrations
@@ -377,6 +678,17 @@ module Spree
     Rails.application.config.spree.integrations = value
   end
 
+  # Registry mapping a numbered resource to the generator that produces its
+  # document numbers. With no entry, the store's `document_number_format`
+  # preference picks between the sequential and random strategies.
+  #
+  # @return [Spree::NumberGenerators::Registry]
+  # @example Custom order numbers
+  #   Spree.number_generators[:order] = 'MyApp::BranchOrderNumbers'
+  def self.number_generators
+    Rails.application.config.spree.number_generators
+  end
+
   # Event subscribers that handle lifecycle and custom events
   # @example Adding a custom subscriber
   #   Spree.subscribers << MyApp::OrderNotificationSubscriber
@@ -428,6 +740,38 @@ module Spree
     Rails.application.config.spree.admin_authentication_strategies = value
   end
 
+  # Registry of authentication strategy classes for the Seller API.
+  #
+  # Login policy is per surface, not per principal: marketplace sellers and the
+  # store's own staff are both Spree.admin_user_class, so a store that requires
+  # SSO for staff can still let sellers sign in with a password by leaving this
+  # registry's :email strategy in place.
+  #
+  # @return [Spree::Authentication::StrategyRegistry]
+  # @example Registering an SSO strategy for seller users
+  #   Spree.seller_authentication_strategies.add(:okta, MyApp::Auth::OktaStrategy)
+  def self.seller_authentication_strategies
+    Rails.application.config.spree.seller_authentication_strategies
+  end
+
+  # @param value [Spree::Authentication::StrategyRegistry] the registry to use for Seller API authentication dispatch
+  # @return [Spree::Authentication::StrategyRegistry] the assigned registry
+  def self.seller_authentication_strategies=(value)
+    Rails.application.config.spree.seller_authentication_strategies = value
+  end
+
+  # Semantic reporting registry — the queryable metric/dimension vocabulary.
+  # Not to be confused with +Spree.analytics+ (storefront event tracking).
+  #
+  # @return [Spree::Reporting::Registry]
+  def self.reporting
+    Rails.application.config.spree.reporting
+  end
+
+  def self.reporting=(value)
+    Rails.application.config.spree.reporting = value
+  end
+
   def self.analytics
     @analytics ||= AnalyticsConfig.new
   end
@@ -451,18 +795,16 @@ module Spree
     end
   end
 
-  # Permission configuration accessor for managing role-to-permission-set mappings.
-  #
-  # @example Assigning permission sets to a role
-  #   Spree.permissions.assign(:customer_service, [
-  #     Spree::PermissionSets::OrderDisplay,
-  #     Spree::PermissionSets::UserManagement
-  #   ])
+  # The permission catalog — the grant vocabulary shared by staff roles and
+  # secret API key scopes. Roles themselves are data (Spree::Role#permissions);
+  # code only registers the vocabulary.
   #
-  # @example Clearing permission sets from a role
-  #   Spree.permissions.clear(:customer_service)
+  # @example Registering a scope from an extension
+  #   Spree.permissions.register_scope(:reviews, group: :catalog, resources: -> {
+  #     [SpreeReviews::Review]
+  #   })
   #
-  # @return [Spree::PermissionConfiguration] the permission configuration instance
+  # @return [Spree::PermissionConfiguration] the permission catalog
   def self.permissions
     @permissions ||= PermissionConfiguration.new
   end
@@ -471,9 +813,9 @@ module Spree
   # associations, and scopes across Spree models.
   #
   # @example Adding custom searchable fields
-  #   Spree.ransack.add_attribute(Spree::Product, :vendor_id)
-  #   Spree.ransack.add_scope(Spree::Product, :by_vendor)
-  #   Spree.ransack.add_association(Spree::Product, :vendor)
+  #   Spree.ransack.add_attribute(Spree::Product, :seller_id)
+  #   Spree.ransack.add_scope(Spree::Product, :by_seller)
+  #   Spree.ransack.add_association(Spree::Product, :seller)
   #
   # @return [Spree::RansackConfiguration] the ransack configuration instance
   def self.ransack
@@ -509,13 +851,51 @@ module Spree
     private
 
     def core_dependency?(name)
-      defined?(Spree::Dependencies) &&
-        Spree::Dependencies.class::INJECTION_POINTS.include?(name)
+      return false unless defined?(Spree::Dependencies)
+
+      Spree::Dependencies.class::INJECTION_POINTS.include?(name) ||
+        Spree::Dependencies.class::LEGACY_WORKFLOW_KEYS.key?(name) ||
+        Spree::Dependencies.class::LEGACY_SERVICE_KEYS.key?(name) ||
+        Spree::Dependencies.class::RENAMED_SERVICE_KEYS.key?(name)
     end
   end
 
   module Core
     class GatewayError < RuntimeError; end
+
+    # A gift card that could not be taken back off a cart or draft order
+    # holding its balance. No gateway is involved — reported separately so a
+    # money discrepancy is not triaged alongside payment outages.
+    class GiftCardHoldReleaseFailed < RuntimeError; end
+
+    # A label purchase that failed inside the one-click fulfill path, where
+    # the parcel ships regardless — reported so the merchant's error tracker
+    # sees why there is no label.
+    class LabelPurchaseFailed < RuntimeError; end
+
+    # A carrier refusing to sell a label, in its own words. Raised by a
+    # provider when it knows why — a warehouse with no address, an
+    # unserviceable destination — so the merchant reads the actual reason
+    # instead of being sent to check a connection that is fine.
+    class LabelPurchaseRefused < RuntimeError; end
+
+    # A carrier refusing to void a label, in its own words — a parcel it has
+    # already collected, a label past its void window. Raised by a provider
+    # when it knows why, so the merchant reads the reason.
+    class LabelRefundRefused < RuntimeError; end
+
+    # A label the carrier refused to refund while a parcel was being
+    # cancelled. The cancellation proceeds; the postage is the merchant's to
+    # chase, so it is reported rather than dropped.
+    class LabelRefundFailed < RuntimeError; end
+
+    # The call may or may not have taken effect — a timeout, a dropped
+    # connection, anything that leaves the answer at the provider rather than
+    # in the response. Distinct from its parent because the safe reaction is
+    # the opposite one: a definite failure can be retried, while an unknown
+    # outcome must not be, since retrying is how the same money moves twice.
+    class AmbiguousGatewayError < GatewayError; end
+
     class DestroyWithOrdersError < StandardError; end
   end
 end
@@ -523,28 +903,34 @@ end
 require 'spree/core/version'
 
 require 'spree/core/number_generator'
+require 'spree/number_generators/registry'
 require 'spree/migrations'
 require 'spree/translation_migrations'
+require 'spree/validators'
 require 'spree/core/engine'
 
 require 'spree/i18n'
+require 'spree/iso_data'
 require 'spree/localized_number'
+require 'spree/measurement'
 require 'spree/translations'
 require 'spree/money'
-require 'spree/permitted_attributes'
 require 'spree/service_module'
+require 'spree/workflow'
 require 'spree/analytics'
+require 'spree/reporting'
 require 'spree/events'
-require 'spree/webhooks'
+require 'spree/store_scope_guard'
+
+# Not autoloaded from app/: the registry keeps registered steps in
+# class-level state, which a reload would discard.
+require 'spree/checkout/step'
+require 'spree/checkout/requirement'
+require 'spree/checkout/registry'
+require 'spree/checkout/default_requirements'
+require 'spree/checkout/requirements'
 
-require 'spree/core/partials'
-require 'spree/core/controller_helpers/auth'
-require 'spree/core/controller_helpers/order'
 require 'spree/core/controller_helpers/store'
-require 'spree/core/controller_helpers/strong_parameters'
-require 'spree/core/controller_helpers/locale'
-require 'spree/core/controller_helpers/currency'
-require 'spree/core/controller_helpers/turbo'
 
 require 'spree/core/preferences/store'
 require 'spree/core/preferences/scoped_store'
@@ -554,4 +940,5 @@ require 'spree/core/preferences/masking'
 require 'spree/core/permission_configuration'
 require 'spree/core/ransack_configuration'
 require 'spree/core/pricing/context'
+require 'spree/core/pricing/price_resolution'
 require 'spree/core/pricing/resolver'