@spree/docs 0.1.127 → 0.1.129

package/dist/api-reference/store.yaml

@@ -2276,7 +2276,8 @@ paths:
         bearer_auth: []
       description: |
         Associates a guest cart with the currently authenticated user.
-        Requires JWT authentication. The cart must not belong to another user.
+        Requires JWT authentication and possession of the cart's token
+        (x-spree-token) — the token authorizes claiming the cart.
       x-codeSamples:
       - lang: javascript
         label: Spree SDK
@@ -2302,6 +2303,12 @@ paths:
         required: true
         schema:
           type: string
+      - name: x-spree-token
+        in: header
+        required: true
+        description: Cart token
+        schema:
+          type: string
       - name: id
         in: path
         required: true
@@ -2497,6 +2504,16 @@ paths:
                   message: Authentication required
               schema:
                 "$ref": "#/components/schemas/ErrorResponse"
+        '403':
+          description: forbidden - cart token missing or does not match
+          content:
+            application/json:
+              example:
+                error:
+                  code: access_denied
+                  message: You are not authorized to access this page.
+              schema:
+                "$ref": "#/components/schemas/ErrorResponse"
   "/api/v3/store/carts/{id}/complete":
     post:
       summary: Complete cart

package/dist/developer/admin/extending-ui.md

@@ -429,6 +429,31 @@ Here's a list of all places you can inject your custom code:
 </details>
 
 
+  <details>
+<summary>Customer Page Sidebar</summary>
+
+`user_page_sidebar`
+
+    #### Variables
+
+    - **`user`** (`Spree.user_class`) — The customer displayed on the page.
+
+    Injects a section into the customer detail page sidebar. This partial has access to the `user` variable.
+
+    ```erb
+    <div class="card">
+      <div class="card-header">
+        <h5 class="card-title">Account review</h5>
+      </div>
+      <div class="card-body">
+        <%= user.email %>
+      </div>
+    </div>
+    ```
+
+</details>
+
+
 ### Stock Items
 
 <details>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spree/docs",
-  "version": "0.1.127",
+  "version": "0.1.129",
   "description": "Spree Commerce developer documentation for AI agents and local reference",
   "type": "module",
   "license": "CC-BY-4.0",