feat: add status filter to purchase index query for enhanced data retrieval

Move Catalog endpoints under /api/tenants/{tenant:codigo} and derive tenant
context from the route instead of request payload fields.

- scope marcas, categorias, productos, and product-attributes by tenant
- enforce tenant ownership in catalog controllers
- remove tenant_codigo and tenant_code from Catalog request validation
- update product attribute tests to use tenant-scoped routes

.env.example

@@ -1,8 +1,10 @@
 APP_NAME=Laravel
-APP_ENV=local
+APP_ENV=production
 APP_KEY=
-APP_DEBUG=true
+APP_DEBUG=false
 APP_URL=http://localhost
+FRONTEND_URL=http://localhost:4200
+INTEGRATION_SECRET=
 
 APP_LOCALE=en
 APP_FALLBACK_LOCALE=en
@@ -56,10 +58,13 @@ MAIL_PASSWORD=null
 MAIL_FROM_ADDRESS="hello@example.com"
 MAIL_FROM_NAME="${APP_NAME}"
 
+
+AWS_ENDPOINT=
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
-AWS_DEFAULT_REGION=us-east-1
+AWS_DEFAULT_REGION=
 AWS_BUCKET=
-AWS_USE_PATH_STYLE_ENDPOINT=false
+AWS_USE_PATH_STYLE_ENDPOINT=
+AWS_HTTP_VERIFY=
 
 VITE_APP_NAME="${APP_NAME}"

.gitignore

@@ -1,6 +1,7 @@
 *.log
 .DS_Store
 .env
+.env.testing
 .env.backup
 .env.production
 .phpactor.json

Tenant_CRUD_Postman_Collection.json

@@ -0,0 +1,367 @@
+{
+	"info": {
+		"_postman_id": "76df1733-a3d8-4f2b-9ffb-7c70e3032549",
+		"name": "ShopIt - Tenant CRUD",
+		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
+	},
+	"item": [
+		{
+			"name": "List Tenants",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Bootstrap Tenant",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/bootstrap/acme.com",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"bootstrap",
+						"acme.com"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Create Tenant (JSON)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n    \"codigo\": \"acme\",\n    \"nombre\": \"Acme Corporation\",\n    \"dominio\": \"acme.com\",\n    \"primary_color\": \"#111111\",\n    \"secondary_color\": \"#222222\",\n    \"danger_color\": \"#333333\",\n    \"header_bg_color\": \"#444444\",\n    \"footer_bg_color\": \"#444444\",\n    \"header_logo\": \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==\",\n    \"footer_logo\": \"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==\"\n}"
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Create Tenant (Form Data)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "codigo",
+							"value": "acme",
+							"type": "text"
+						},
+						{
+							"key": "nombre",
+							"value": "Acme Corporation",
+							"type": "text"
+						},
+						{
+							"key": "dominio",
+							"value": "acme.com",
+							"type": "text"
+						},
+						{
+							"key": "primary_color",
+							"value": "#111111",
+							"type": "text"
+						},
+						{
+							"key": "secondary_color",
+							"value": "#222222",
+							"type": "text"
+						},
+						{
+							"key": "danger_color",
+							"value": "#333333",
+							"type": "text"
+						},
+						{
+							"key": "header_bg_color",
+							"value": "#444444",
+							"type": "text"
+						},
+						{
+							"key": "footer_bg_color",
+							"value": "#444444",
+							"type": "text"
+						},
+						{
+							"key": "header_logo",
+							"type": "file",
+							"src": []
+						},
+						{
+							"key": "footer_logo",
+							"type": "file",
+							"src": []
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Show Tenant",
+			"request": {
+				"method": "GET",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Update Tenant (JSON)",
+			"request": {
+				"method": "PUT",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					},
+					{
+						"key": "Content-Type",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "raw",
+					"raw": "{\n    \"codigo\": \"acme\",\n    \"nombre\": \"Acme Corporation Updated\",\n    \"dominio\": \"acme.com\",\n    \"primary_color\": \"#555555\",\n    \"secondary_color\": \"#666666\",\n    \"danger_color\": \"#777777\",\n    \"header_bg_color\": \"#888888\",\n    \"footer_bg_color\": \"#888888\"\n}"
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Update Tenant (Form Data)",
+			"request": {
+				"method": "POST",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"body": {
+					"mode": "formdata",
+					"formdata": [
+						{
+							"key": "_method",
+							"value": "PUT",
+							"type": "text"
+						},
+						{
+							"key": "codigo",
+							"value": "acme",
+							"type": "text"
+						},
+						{
+							"key": "nombre",
+							"value": "Acme Corporation Updated",
+							"type": "text"
+						},
+						{
+							"key": "dominio",
+							"value": "acme.com",
+							"type": "text"
+						},
+						{
+							"key": "primary_color",
+							"value": "#555555",
+							"type": "text"
+						},
+						{
+							"key": "secondary_color",
+							"value": "#666666",
+							"type": "text"
+						},
+						{
+							"key": "danger_color",
+							"value": "#777777",
+							"type": "text"
+						},
+						{
+							"key": "header_bg_color",
+							"value": "#888888",
+							"type": "text"
+						},
+						{
+							"key": "footer_bg_color",
+							"value": "#888888",
+							"type": "text"
+						},
+						{
+							"key": "header_logo",
+							"type": "file",
+							"src": []
+						},
+						{
+							"key": "footer_logo",
+							"type": "file",
+							"src": []
+						}
+					]
+				},
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		},
+		{
+			"name": "Delete Tenant",
+			"request": {
+				"method": "DELETE",
+				"header": [
+					{
+						"key": "Accept",
+						"value": "application/json",
+						"type": "text"
+					}
+				],
+				"url": {
+					"raw": "{{base_url}}/api/tenants/acme",
+					"host": [
+						"{{base_url}}"
+					],
+					"path": [
+						"api",
+						"tenants",
+						"acme"
+					]
+				}
+			},
+			"response": []
+		}
+	],
+	"event": [
+		{
+			"listen": "prerequest",
+			"script": {
+				"type": "text/javascript",
+				"exec": [
+					""
+				]
+			}
+		},
+		{
+			"listen": "test",
+			"script": {
+				"type": "text/javascript",
+				"exec": [
+					""
+				]
+			}
+		}
+	],
+	"variable": [
+		{
+			"key": "base_url",
+			"value": "http://localhost:8000",
+			"type": "string"
+		}
+	]
+}

app/Domains/Attachable/Enums/AttachmentType.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Domains\Attachable\Enums;
+
+enum AttachmentType: string
+{
+    case Image = 'image';
+    case Video = 'video';
+    case Pdf = 'pdf';
+    case Document = 'document';
+    case Audio = 'audio';
+    case Other = 'other';
+}

app/Domains/Attachable/Exceptions/AttachmentStorageException.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Attachable\Exceptions;
+
+use RuntimeException;
+
+class AttachmentStorageException extends RuntimeException
+{
+}

app/Domains/Attachable/Models/Attachment.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Domains\Attachable\Models;
+
+use App\Domains\Attachable\Enums\AttachmentType;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Support\Str;
+
+#[Fillable([
+    'key',
+    'path',
+    'filename',
+    'type',
+    'mime_type',
+    'extension',
+    'size',
+])]
+class Attachment extends Model
+{
+    use HasFactory;
+
+    protected $table = 'attachments';
+
+    protected static function booted(): void
+    {
+        static::creating(function (self $attachment): void {
+            if (! $attachment->key) {
+                $attachment->key = (string) Str::uuid();
+            }
+        });
+    }
+
+    protected function casts(): array
+    {
+        return [
+            'type' => AttachmentType::class,
+            'size' => 'integer',
+        ];
+    }
+
+    /**
+     * Get the pre-signed temporary S3 URL for this attachment.
+     */
+    public function getTemporaryUrl(int $expiresInMinutes = 10): string
+    {
+        return \Illuminate\Support\Facades\Storage::disk('s3')->temporaryUrl(
+            $this->path,
+            now()->addMinutes($expiresInMinutes)
+        );
+    }
+}

app/Domains/Attachable/Services/AttachmentService.php

@@ -0,0 +1,253 @@
+<?php
+
+namespace App\Domains\Attachable\Services;
+
+use App\Domains\Attachable\Enums\AttachmentType;
+use App\Domains\Attachable\Exceptions\AttachmentStorageException;
+use App\Domains\Attachable\Models\Attachment;
+use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Symfony\Component\Mime\MimeTypes;
+use Throwable;
+
+class AttachmentService
+{
+    public function store(
+        UploadedFile|string $file,
+        string $path,
+    ): Attachment {
+        $normalizedPath = $this->normalizeDirectory($path);
+
+        if ($normalizedPath === '') {
+            throw new AttachmentStorageException('The attachment path cannot be empty.');
+        }
+
+        $key = (string) Str::uuid();
+        $fileData = $this->resolveFileData($file, $key);
+        $storedPath = $this->storeFile(
+            $fileData,
+            $normalizedPath,
+            $this->buildStoredFilename($key, $fileData['extension']),
+        );
+
+        if (! is_string($storedPath) || $storedPath === '') {
+            throw new AttachmentStorageException('No se pudo subir el archivo al disco s3.');
+        }
+
+        try {
+            /** @var Attachment $attachment */
+            $attachment = Attachment::query()->create([
+                'key' => $key,
+                'path' => $storedPath,
+                'filename' => $this->resolveFilename($file, $key),
+                'type' => $this->resolveAttachmentType($fileData['mime_type']),
+                'mime_type' => $fileData['mime_type'],
+                'extension' => $fileData['extension'],
+                'size' => $fileData['size'],
+            ]);
+
+            return $attachment;
+        } catch (Throwable $throwable) {
+            Storage::disk('s3')->delete($storedPath);
+
+            throw $throwable;
+        }
+    }
+
+    public function delete(Attachment $attachment): void
+    {
+        $deleted = Storage::disk('s3')->delete($attachment->path);
+
+        if (! $deleted) {
+            throw new AttachmentStorageException('No se pudo eliminar el archivo del disco s3.');
+        }
+
+        $attachment->delete();
+    }
+
+    protected function normalizeDirectory(string $path): string
+    {
+        return trim($path, '/');
+    }
+
+    protected function resolveFilename(UploadedFile|string $file, string $key): string
+    {
+        if ($file instanceof UploadedFile) {
+            $originalName = trim($file->getClientOriginalName());
+
+            if ($originalName !== '') {
+                return $originalName;
+            }
+        }
+
+        return $key;
+    }
+
+    /**
+     * @return array{contents: string|null, extension: string, file: UploadedFile|null, mime_type: string, size: int}
+     */
+    protected function resolveFileData(UploadedFile|string $file, string $filename): array
+    {
+        if ($file instanceof UploadedFile) {
+            return $this->fileDataFromUploadedFile($file);
+        }
+
+        return $this->fileDataFromBase64($file, $filename);
+    }
+
+    /**
+     * @return array{contents: string|null, extension: string, file: UploadedFile, mime_type: string, size: int}
+     */
+    protected function fileDataFromUploadedFile(UploadedFile $file): array
+    {
+        $mimeType = strtolower($file->getClientMimeType() ?? $file->getMimeType() ?? 'application/octet-stream');
+
+        return [
+            'contents' => null,
+            'extension' => strtolower($file->getClientOriginalExtension() ?: $file->extension() ?: ''),
+            'file' => $file,
+            'mime_type' => $mimeType,
+            'size' => $file->getSize() ?? 0,
+        ];
+    }
+
+    /**
+     * @return array{contents: string, extension: string, file: null, mime_type: string, size: int}
+     */
+    protected function fileDataFromBase64(string $file, string $filename): array
+    {
+        ['data' => $contents, 'mime_type' => $declaredMimeType] = $this->decodeBase64File($file);
+        $mimeType = $this->detectMimeType($contents, $declaredMimeType);
+
+        return [
+            'contents' => $contents,
+            'extension' => $this->resolveExtension($filename, $mimeType),
+            'file' => null,
+            'mime_type' => $mimeType,
+            'size' => strlen($contents),
+        ];
+    }
+
+    /**
+     * @return array{data: string, mime_type: string|null}
+     */
+    protected function decodeBase64File(string $file): array
+    {
+        $payload = trim($file);
+
+        if ($payload === '') {
+            throw new AttachmentStorageException('The base64 attachment content cannot be empty.');
+        }
+
+        $declaredMimeType = null;
+
+        if (preg_match('/^data:(?<mime>[-\w.+\/]+);base64,(?<data>.+)$/s', $payload, $matches) === 1) {
+            $declaredMimeType = strtolower($matches['mime']);
+            $payload = $matches['data'];
+        }
+
+        $decoded = base64_decode(preg_replace('/\s+/', '', $payload), true);
+
+        if ($decoded === false || $decoded === '') {
+            throw new AttachmentStorageException('The attachment base64 payload is invalid.');
+        }
+
+        return [
+            'data' => $decoded,
+            'mime_type' => $declaredMimeType,
+        ];
+    }
+
+    protected function detectMimeType(string $contents, ?string $fallback = null): string
+    {
+        if (is_string($fallback) && $fallback !== '') {
+            return strtolower($fallback);
+        }
+
+        $detectedMimeType = (new \finfo(FILEINFO_MIME_TYPE))->buffer($contents);
+
+        if (is_string($detectedMimeType) && $detectedMimeType !== '') {
+            return strtolower($detectedMimeType);
+        }
+
+        return strtolower($fallback ?? 'application/octet-stream');
+    }
+
+    protected function resolveExtension(string $filename, string $mimeType): string
+    {
+        $extension = strtolower(pathinfo($filename, PATHINFO_EXTENSION));
+
+        if ($extension !== '') {
+            return $extension;
+        }
+
+        return strtolower(MimeTypes::getDefault()->getExtensions($mimeType)[0] ?? '');
+    }
+
+    /**
+     * @param  array{contents: string|null, extension: string, file: UploadedFile|null, mime_type: string, size: int}  $fileData
+     */
+    protected function storeFile(array $fileData, string $directory, string $storedFilename): string
+    {
+        if ($fileData['file'] instanceof UploadedFile) {
+            return Storage::disk('s3')->putFileAs($directory, $fileData['file'], $storedFilename);
+        }
+
+        $storedPath = $directory !== ''
+            ? $directory.'/'.$storedFilename
+            : $storedFilename;
+
+        $stored = Storage::disk('s3')->put($storedPath, $fileData['contents'] ?? '');
+
+        if (! $stored) {
+            return '';
+        }
+
+        return $storedPath;
+    }
+
+    protected function resolveAttachmentType(string $mimeType): AttachmentType
+    {
+        $mimeType = strtolower($mimeType);
+
+        if (str_starts_with($mimeType, 'image/')) {
+            return AttachmentType::Image;
+        }
+
+        if (str_starts_with($mimeType, 'video/')) {
+            return AttachmentType::Video;
+        }
+
+        if ($mimeType === 'application/pdf') {
+            return AttachmentType::Pdf;
+        }
+
+        if (str_starts_with($mimeType, 'audio/')) {
+            return AttachmentType::Audio;
+        }
+
+        if (
+            str_starts_with($mimeType, 'text/')
+            || str_contains($mimeType, 'document')
+            || str_contains($mimeType, 'word')
+            || str_contains($mimeType, 'excel')
+            || str_contains($mimeType, 'spreadsheet')
+            || str_contains($mimeType, 'presentation')
+            || str_contains($mimeType, 'officedocument')
+        ) {
+            return AttachmentType::Document;
+        }
+
+        return AttachmentType::Other;
+    }
+
+    protected function buildStoredFilename(string $key, string $extension): string
+    {
+        if ($extension === '') {
+            return $key;
+        }
+
+        return $key.'.'.$extension;
+    }
+}

app/Domains/Auth/Controllers/LoginController.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Domains\Auth\Requests\LoginUserRequest;
+use App\Domains\Auth\Models\User;
+use App\Domains\Auth\Resources\UserResource;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\ValidationException;
+
+class LoginController extends Controller
+{
+    /**
+     * @throws ValidationException
+     */
+    public function __invoke(LoginUserRequest $request): JsonResponse
+    {
+        $credentials = $request->validated();
+        $user = User::query()->where('email', $credentials['email'])->first();
+
+        if (! $user || ! Hash::check($credentials['password'], $user->password)) {
+            throw ValidationException::withMessages([
+                'email' => 'Email o Contraseña incorrectos.',
+            ]);
+        }
+
+        $token = $user->createToken('api-token')->plainTextToken;
+
+        return response()->json([
+            'message' => 'Sesion iniciada correctamente.',
+            'token' => $token,
+            'token_type' => 'Bearer',
+            'user' => UserResource::make($user),
+        ]);
+    }
+}

app/Domains/Auth/Controllers/LogoutController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class LogoutController extends Controller
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $user = $request->user();
+
+        $user->currentAccessToken()?->delete();
+        $user->tokens()->delete();
+        Auth::guard('web')->logout();
+
+        if ($request->hasSession()) {
+            $request->session()->invalidate();
+            $request->session()->regenerateToken();
+        }
+
+        return response()->json([
+            'message' => 'Sesion cerrada correctamente.',
+        ]);
+    }
+}

app/Domains/Auth/Controllers/MeController.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Domains\Auth\Resources\UserResource;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class MeController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json(UserResource::make($request->user())->resolve());
+    }
+}

app/Domains/Auth/Controllers/RegisterController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Domains\Auth\Requests\RegisterUserRequest;
+use App\Domains\Auth\Resources\UserResource;
+use App\Domains\Auth\Services\RegisterUserService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+
+class RegisterController extends Controller
+{
+    public function __construct(
+        protected RegisterUserService $registerUserService,
+    ) {
+    }
+
+    public function __invoke(RegisterUserRequest $request): JsonResponse
+    {
+        $user = $this->registerUserService->register($request->validated());
+
+        return UserResource::make($user)
+            ->additional(['message' => 'Usuario registrado correctamente.'])
+            ->response()
+            ->setStatusCode(201);
+    }
+}

app/Domains/Auth/Models/User.php

@@ -1,25 +1,28 @@
 <?php
 
-namespace App\Models;
+namespace App\Domains\Auth\Models;
 
-// use Illuminate\Contracts\Auth\MustVerifyEmail;
 use Database\Factories\UserFactory;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Attributes\Hidden;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
+use Laravel\Sanctum\HasApiTokens;
 
-#[Fillable(['name', 'email', 'password'])]
+#[Fillable(['nombre_apellido', 'email', 'password', 'dni', 'telefono'])]
 #[Hidden(['password', 'remember_token'])]
 class User extends Authenticatable
 {
     /** @use HasFactory<UserFactory> */
-    use HasFactory, Notifiable;
+    use HasApiTokens, HasFactory, Notifiable;
+
+    protected static function newFactory(): UserFactory
+    {
+        return UserFactory::new();
+    }
 
     /**
-     * Get the attributes that should be cast.
-     *
      * @return array<string, string>
      */
     protected function casts(): array

app/Domains/Auth/Requests/LoginUserRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Auth\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class LoginUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email', 'max:255'],
+            'password' => ['required', 'string'],
+        ];
+    }
+}

app/Domains/Auth/Requests/RegisterUserRequest.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Domains\Auth\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class RegisterUserRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'nombre_apellido' => ['required', 'string', 'max:255'],
+            'email' => ['required', 'string', 'email', 'max:255', Rule::unique('users', 'email')],
+            'password' => ['required', 'string', 'confirmed'],
+            'dni' => ['nullable', 'string', 'max:255'],
+            'telefono' => ['nullable', 'string', 'max:255'],
+        ];
+    }
+}

app/Domains/Auth/Resources/UserResource.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Auth\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Auth\Models\User
+ */
+class UserResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'nombre_apellido' => $this->nombre_apellido,
+            'email' => $this->email,
+            'dni' => $this->dni,
+            'telefono' => $this->telefono,
+        ];
+    }
+}

app/Domains/Auth/Services/RegisterUserService.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Auth\Services;
+
+use App\Domains\Auth\Models\User;
+
+class RegisterUserService
+{
+    /**
+     * @param  array{nombre_apellido: string, email: string, password: string, dni?: string|null, telefono?: string|null}  $data
+     */
+    public function register(array $data): User
+    {
+        return User::query()->create([
+            'nombre_apellido' => $data['nombre_apellido'],
+            'email' => $data['email'],
+            'password' => $data['password'],
+            'dni' => $data['dni'] ?? null,
+            'telefono' => $data['telefono'] ?? null,
+        ]);
+    }
+}

app/Domains/Auth/routes/api.php

@@ -0,0 +1,12 @@
+<?php
+
+use App\Domains\Auth\Controllers\LoginController;
+use App\Domains\Auth\Controllers\LogoutController;
+use App\Domains\Auth\Controllers\MeController;
+use App\Domains\Auth\Controllers\RegisterController;
+use Illuminate\Support\Facades\Route;
+
+Route::post('/register', RegisterController::class);
+Route::post('/login', LoginController::class);
+Route::middleware('auth:sanctum')->post('/logout', LogoutController::class);
+Route::middleware('auth:sanctum')->get('/me', MeController::class);

app/Domains/Cart/Controllers/CartController.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Domains\Cart\Controllers;
+
+use App\Domains\Cart\Requests\AddCartItemRequest;
+use App\Domains\Cart\Requests\UpdateCartItemQuantityRequest;
+use App\Domains\Cart\Resources\CartResource;
+use App\Domains\Cart\Services\CartService;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class CartController extends Controller
+{
+    public function __construct(
+        protected CartService $cartService,
+    ) {
+    }
+
+    public function show(Request $request, Tenant $tenant): CartResource
+    {
+        return CartResource::make($this->cartService->show($tenant, $request));
+    }
+
+    public function addItem(AddCartItemRequest $request, Tenant $tenant): JsonResponse
+    {
+        $result = $this->cartService->addItem(
+            $tenant,
+            $request,
+            (int) $request->validated('product_variant_id'),
+            (int) $request->validated('cantidad'),
+        );
+
+        $response = CartResource::make($result['cart'])
+            ->additional(['message' => 'Producto agregado al carrito.'])
+            ->response();
+
+        if ($result['guest_token'] !== null) {
+            $response->withCookie($this->cartService->makeGuestTokenCookie($result['guest_token']));
+        }
+
+        return $response;
+    }
+
+    public function updateItemQuantity(
+        UpdateCartItemQuantityRequest $request,
+        Tenant $tenant,
+        ProductVariant $productVariant,
+    ): CartResource {
+        return CartResource::make(
+            $this->cartService->updateItemQuantity(
+                $tenant,
+                $request,
+                $productVariant->getKey(),
+                (int) $request->validated('cantidad'),
+            )
+        )->additional(['message' => 'Cantidad de producto actualizada.']);
+    }
+
+    public function removeItem(Request $request, Tenant $tenant, ProductVariant $productVariant): CartResource
+    {
+        return CartResource::make(
+            $this->cartService->removeItem($tenant, $request, $productVariant->getKey())
+        )->additional(['message' => 'Producto eliminado del carrito.']);
+    }
+}

app/Domains/Cart/Middleware/MergeGuestCartMiddleware.php

@@ -0,0 +1,73 @@
+<?php
+
+namespace App\Domains\Cart\Middleware;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Tenant\Models\Tenant;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Cookie;
+use Symfony\Component\HttpFoundation\Response;
+
+class MergeGuestCartMiddleware
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $guestToken = $request->cookie('guest_token');
+
+        // Resolve authenticated user optionally (from default guard or sanctum guard)
+        $user = $request->user() ?? Auth::guard('sanctum')->user();
+        $userId = $user?->getKey();
+
+        \Illuminate\Support\Facades\Log::info('MergeGuestCartMiddleware processed', [
+            'user_id' => $userId,
+            'guest_token' => $guestToken,
+        ]);
+
+        if ($user !== null && is_string($guestToken) && $guestToken !== '') {
+            $tenantParam = $request->route('tenant');
+            $tenantCodigo = null;
+
+            if ($tenantParam instanceof Tenant) {
+                $tenantCodigo = $tenantParam->codigo;
+            } elseif (is_string($tenantParam)) {
+                $tenantCodigo = $tenantParam;
+            }
+
+            if ($tenantCodigo !== null) {
+                $guestCart = Cart::query()
+                    ->where('tenant_codigo', $tenantCodigo)
+                    ->where('guest_token', $guestToken)
+                    ->first();
+
+                if ($guestCart !== null && $guestCart->items()->exists()) {
+                    $userCart = Cart::query()
+                        ->where('tenant_codigo', $tenantCodigo)
+                        ->where('user_id', $userId)
+                        ->first();
+
+                    if ($userCart !== null) {
+                        $userCart->delete();
+                    }
+
+                    $guestCart->update([
+                        'user_id' => $userId,
+                        'guest_token' => null,
+                    ]);
+                }
+            }
+        }
+
+        $response = $next($request);
+
+        if ($user !== null && is_string($guestToken) && $guestToken !== '') {
+            // Remove the cookie from the response since the user is authenticated.
+            if (method_exists($response, 'withCookie')) {
+                $response->withCookie(Cookie::forget('guest_token'));
+            }
+        }
+
+        return $response;
+    }
+}

app/Domains/Cart/Models/Cart.php

@@ -0,0 +1,187 @@
+<?php
+
+namespace App\Domains\Cart\Models;
+
+use App\Domains\Auth\Models\User;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\SoftDeletes;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+#[Fillable([
+    'tenant_codigo',
+    'user_id',
+    'guest_token',
+    'status',
+])]
+class Cart extends Model
+{
+    use HasFactory;
+    use SoftDeletes;
+
+    protected $table = 'carritos';
+
+    protected function casts(): array
+    {
+        return [
+            'user_id' => 'integer',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    /**
+     * @return BelongsTo<User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return HasMany<CartItem, $this>
+     */
+    public function items(): HasMany
+    {
+        return $this->hasMany(CartItem::class, 'cart_id');
+    }
+
+    public function getTotalAmount(): float
+    {
+        $items = $this->relationLoaded('items')
+            ? $this->getRelation('items')
+            : $this->items()->with('variant.product')->get();
+
+        return (float) $items->reduce(
+            fn (float $carry, $item): float => $carry + ((float) ($item->variant?->product?->precio ?? 0) * $item->cantidad),
+            0.0,
+        );
+    }
+
+    public function addItem(int $productVariantId, int $quantity): CartItem
+    {
+        if ($quantity <= 0) {
+            throw ValidationException::withMessages([
+                'cantidad' => 'La cantidad debe ser mayor a cero.',
+            ]);
+        }
+
+        return DB::transaction(function () use ($productVariantId, $quantity): CartItem {
+            $variant = $this->resolveScopedVariant($productVariantId, true);
+
+            if ($variant->stock_tecnico < $quantity) {
+                throw ValidationException::withMessages([
+                    'cantidad' => "Stock insuficiente para la variante solicitada. Maximo disponible: {$variant->stock_tecnico}.",
+                ]);
+            }
+
+            /** @var CartItem|null $item */
+            $item = $this->items()
+                ->where('producto_variante_id', $variant->getKey())
+                ->lockForUpdate()
+                ->first();
+
+            if ($item === null) {
+                $item = $this->items()->create([
+                    'producto_variante_id' => $variant->getKey(),
+                    'cantidad' => $quantity,
+                ]);
+            } else {
+                $item->cantidad += $quantity;
+                $item->save();
+            }
+
+            $variant->incrementReservedStock($quantity);
+
+            return $item->fresh();
+        });
+    }
+
+    public function updateItem(int $productVariantId, int $quantity): CartItem
+    {
+        if ($quantity <= 0) {
+            throw ValidationException::withMessages([
+                'cantidad' => 'La cantidad debe ser mayor a cero.',
+            ]);
+        }
+
+        return DB::transaction(function () use ($productVariantId, $quantity): CartItem {
+            /** @var CartItem $item */
+            $item = $this->items()
+                ->where('producto_variante_id', $productVariantId)
+                ->lockForUpdate()
+                ->firstOrFail();
+
+            $variant = $this->resolveScopedVariant($productVariantId, true);
+            $delta = $quantity - $item->cantidad;
+
+            if ($delta > 0 && $variant->stock_tecnico < $delta) {
+                $maxAvailable = $variant->stock_tecnico + $item->cantidad;
+                throw ValidationException::withMessages([
+                    'cantidad' => "El máximo que se puede agregar es {$maxAvailable}.",
+                ]);
+            }
+
+            $item->cantidad = $quantity;
+            $item->save();
+
+            if ($delta > 0) {
+                $variant->incrementReservedStock($delta);
+            }
+
+            if ($delta < 0) {
+                $variant->decrementReservedStock(abs($delta));
+            }
+
+            return $item->fresh();
+        });
+    }
+
+    public function removeItem(int $productVariantId): void
+    {
+        DB::transaction(function () use ($productVariantId): void {
+            /** @var CartItem $item */
+            $item = $this->items()
+                ->where('producto_variante_id', $productVariantId)
+                ->lockForUpdate()
+                ->firstOrFail();
+
+            $variant = $this->resolveScopedVariant($productVariantId, true);
+            $variant->decrementReservedStock($item->cantidad);
+            $item->delete();
+        });
+    }
+
+    protected function resolveScopedVariant(int $productVariantId, bool $lockForUpdate = false): ProductVariant
+    {
+        $query = ProductVariant::query()
+            ->whereKey($productVariantId)
+            ->whereHas('product', fn ($query) => $query->where('tenant_codigo', $this->tenant_codigo));
+
+        if ($lockForUpdate) {
+            $query->lockForUpdate();
+        }
+
+        /** @var ProductVariant|null $variant */
+        $variant = $query->first();
+
+        if ($variant === null) {
+            throw new NotFoundHttpException('Product variant not found for tenant.');
+        }
+
+        return $variant;
+    }
+}

app/Domains/Cart/Models/CartItem.php

@@ -0,0 +1,46 @@
+<?php
+
+namespace App\Domains\Cart\Models;
+
+use App\Domains\Catalog\Models\ProductVariant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'cart_id',
+    'producto_variante_id',
+    'cantidad',
+])]
+class CartItem extends Model
+{
+    use HasFactory;
+
+    protected $table = 'carrito_items';
+
+    protected function casts(): array
+    {
+        return [
+            'cart_id' => 'integer',
+            'producto_variante_id' => 'integer',
+            'cantidad' => 'integer',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Cart, $this>
+     */
+    public function cart(): BelongsTo
+    {
+        return $this->belongsTo(Cart::class, 'cart_id');
+    }
+
+    /**
+     * @return BelongsTo<ProductVariant, $this>
+     */
+    public function variant(): BelongsTo
+    {
+        return $this->belongsTo(ProductVariant::class, 'producto_variante_id');
+    }
+}

app/Domains/Cart/Requests/AddCartItemRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Cart\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class AddCartItemRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'product_variant_id' => ['required', 'integer'],
+            'cantidad' => ['required', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Cart/Requests/UpdateCartItemQuantityRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Cart\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateCartItemQuantityRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'cantidad' => ['required', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Cart/Resources/CartItemResource.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Domains\Cart\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Cart\Models\CartItem
+ */
+class CartItemResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $variant = $this->variant;
+        $product = $variant?->product;
+
+        $attributesText = '';
+        if ($variant && $variant->relationLoaded('definitions')) {
+            $attributesText = $variant->definitions
+                ->map(function ($definition) {
+                    $attrName = $definition->productAttribute?->attribute?->nombre;
+                    $value = $definition->value;
+                    return $attrName ? "{$attrName}: {$value}" : $value;
+                })
+                ->filter()
+                ->implode(', ');
+        }
+
+        $productName = $product?->nombre;
+        if ($productName && $attributesText !== '') {
+            $productName .= " ({$attributesText})";
+        }
+
+        $imageUrl = null;
+        if ($variant && $variant->relationLoaded('attachments')) {
+            $firstAttachment = $variant->attachments->first();
+            if ($firstAttachment) {
+                $imageUrl = $firstAttachment->getTemporaryUrl(1440);
+            }
+        }
+
+        return [
+            'id' => $this->id,
+            'cantidad' => $this->cantidad,
+            'precio_unitario' => $this->formatMoney($product?->precio),
+            'product_id' => $product?->id,
+            'product_variant_id' => $this->producto_variante_id,
+            'product' => $product === null ? null : [
+                'nombre' => $productName,
+                'imagen' => $imageUrl,
+            ],
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Cart/Resources/CartResource.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Domains\Cart\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Cart\Models\Cart
+ */
+class CartResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $items = $this->resource->relationLoaded('items')
+            ? $this->resource->getRelation('items')
+            : collect();
+
+        $subtotal = $items->reduce(
+            fn (float $carry, $item): float => $carry + ((float) ($item->variant?->product?->precio ?? 0) * $item->cantidad),
+            0.0,
+        );
+
+        return [
+            'id' => $this->id,
+            'tenant_codigo' => $this->tenant_codigo,
+            'status' => $this->status ?? 'active',
+            'items' => CartItemResource::collection($items),
+            'subtotal' => $this->formatMoney($subtotal),
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Cart/Services/CartService.php

@@ -0,0 +1,205 @@
+<?php
+
+namespace App\Domains\Cart\Services;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Auth\Models\User;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Http\Request;
+use Illuminate\Support\Str;
+use Symfony\Component\HttpFoundation\Cookie;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class CartService
+{
+    public function show(Tenant $tenant, Request $request): Cart
+    {
+        $resolvedIdentity = $this->resolveIdentity($request);
+
+        if ($resolvedIdentity === null) {
+            return $this->makeEmptyCart($tenant);
+        }
+
+        $cart = $this->findCart($tenant, $resolvedIdentity['identity']);
+
+        if ($cart === null) {
+            return $this->makeEmptyCart($tenant);
+        }
+
+        return $this->loadCart($cart);
+    }
+
+    /**
+     * @return array{cart: Cart, guest_token: ?string}
+     */
+    public function addItem(Tenant $tenant, Request $request, int $productVariantId, int $quantity): array
+    {
+        $resolvedIdentity = $this->resolveIdentity($request, true);
+        $identity = $resolvedIdentity['identity'];
+        $cart = $this->findOrCreateCart($tenant, $identity);
+        $cart->addItem($productVariantId, $quantity);
+
+        return [
+            'cart' => $this->loadCart($cart),
+            'guest_token' => $resolvedIdentity['generated_guest_token'],
+        ];
+    }
+
+    public function updateItemQuantity(Tenant $tenant, Request $request, int $productVariantId, int $quantity): Cart
+    {
+        $identity = $this->requireIdentity($request);
+        $cart = $this->findCartOrFail($tenant, $identity);
+        $cart->updateItem($productVariantId, $quantity);
+
+        return $this->loadCart($cart);
+    }
+
+    public function removeItem(Tenant $tenant, Request $request, int $productVariantId): Cart
+    {
+        $identity = $this->requireIdentity($request);
+        $cart = $this->findCartOrFail($tenant, $identity);
+        $cart->removeItem($productVariantId);
+
+        return $this->loadCart($cart);
+    }
+
+    public function makeGuestTokenCookie(string $guestToken): Cookie
+    {
+        return cookie(
+            'guest_token',
+            $guestToken,
+            60 * 24 * 180,
+            '/',
+            null,
+            false,
+            true,
+            false,
+            'lax',
+        );
+    }
+
+    protected function makeEmptyCart(Tenant $tenant): Cart
+    {
+        $cart = new Cart([
+            'tenant_codigo' => $tenant->codigo,
+            'status' => 'active',
+        ]);
+
+        $cart->setRelation('items', collect());
+
+        return $cart;
+    }
+
+    protected function loadCart(Cart $cart): Cart
+    {
+        return $cart->fresh()->load([
+            'items.variant.product',
+            'items.variant.definitions.productAttribute.attribute',
+            'items.variant.attachments',
+        ]);
+    }
+
+    /**
+     * @return array{identity: array{user_id: ?int, guest_token: ?string}, generated_guest_token: ?string}|null
+     */
+    protected function resolveIdentity(Request $request, bool $generateGuestToken = false): ?array
+    {
+        $user = $request->user() ?? \Illuminate\Support\Facades\Auth::guard('sanctum')->user();
+
+        if ($user instanceof User) {
+            return [
+                'identity' => [
+                    'user_id' => $user->getKey(),
+                    'guest_token' => null,
+                ],
+                'generated_guest_token' => null,
+            ];
+        }
+
+        $guestToken = $request->cookie('guest_token');
+
+        if (is_string($guestToken) && $guestToken !== '') {
+            return [
+                'identity' => [
+                    'user_id' => null,
+                    'guest_token' => $guestToken,
+                ],
+                'generated_guest_token' => null,
+            ];
+        }
+
+        if (! $generateGuestToken) {
+            return null;
+        }
+
+        $generatedGuestToken = (string) Str::uuid();
+
+        return [
+            'identity' => [
+                'user_id' => null,
+                'guest_token' => $generatedGuestToken,
+            ],
+            'generated_guest_token' => $generatedGuestToken,
+        ];
+    }
+
+    /**
+     * @return array{user_id: ?int, guest_token: ?string}
+     */
+    protected function requireIdentity(Request $request): array
+    {
+        $resolvedIdentity = $this->resolveIdentity($request);
+
+        if ($resolvedIdentity === null) {
+            throw new NotFoundHttpException('Cart not found.');
+        }
+
+        return $resolvedIdentity['identity'];
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findCart(Tenant $tenant, array $identity): ?Cart
+    {
+        return Cart::query()
+            ->where('tenant_codigo', $tenant->codigo)
+            ->when(
+                $identity['user_id'] !== null,
+                fn ($query) => $query->where('user_id', $identity['user_id']),
+                fn ($query) => $query->where('guest_token', $identity['guest_token']),
+            )
+            ->first();
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findCartOrFail(Tenant $tenant, array $identity): Cart
+    {
+        $cart = $this->findCart($tenant, $identity);
+
+        if ($cart === null) {
+            throw new NotFoundHttpException('Cart not found.');
+        }
+
+        return $cart;
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findOrCreateCart(Tenant $tenant, array $identity): Cart
+    {
+        $attributes = ['tenant_codigo' => $tenant->codigo];
+
+        if ($identity['user_id'] !== null) {
+            $attributes['user_id'] = $identity['user_id'];
+        } else {
+            $attributes['guest_token'] = $identity['guest_token'];
+        }
+
+        return Cart::query()->firstOrCreate($attributes, ['status' => 'active']);
+    }
+
+}

app/Domains/Cart/routes/api.php

@@ -0,0 +1,13 @@
+<?php
+
+use App\Domains\Cart\Controllers\CartController;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('tenants/{tenant:codigo}')
+    ->middleware(\App\Domains\Cart\Middleware\MergeGuestCartMiddleware::class)
+    ->group(function (): void {
+        Route::get('cart', [CartController::class, 'show']);
+        Route::post('cart/items', [CartController::class, 'addItem']);
+        Route::patch('cart/items/{productVariant}', [CartController::class, 'updateItemQuantity']);
+        Route::delete('cart/items/{productVariant}', [CartController::class, 'removeItem']);
+    });

app/Domains/Catalog/Controllers/AttributeController.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Domains\Catalog\Controllers;
+
+use App\Domains\Catalog\Models\Attribute;
+use App\Domains\Catalog\Requests\StoreAttributeRequest;
+use App\Domains\Catalog\Requests\UpdateAttributeRequest;
+use App\Domains\Catalog\Resources\AttributeResource;
+use App\Domains\Catalog\Services\ProductService;
+use App\Domains\Shared\Enums\FieldType;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Response;
+use Illuminate\Support\Facades\DB;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class AttributeController extends Controller
+{
+    public function index(Tenant $tenant): JsonResponse
+    {
+        $query = Attribute::query()
+            ->where('tenant_codigo', $tenant->codigo)
+            ->with('options')
+            ->latest();
+
+        return AttributeResource::collection($query->paginateFromRequest())->response();
+    }
+
+    public function store(StoreAttributeRequest $request, Tenant $tenant): JsonResponse
+    {
+        $attribute = ProductService::createAttribute($tenant, $request->validated());
+
+        return AttributeResource::make($attribute)->response()->setStatusCode(201);
+    }
+
+    public function show(Tenant $tenant, Attribute $attribute): AttributeResource
+    {
+        $attribute = $this->resolveScopedAttribute($tenant, $attribute);
+
+        return AttributeResource::make($attribute->load('options'));
+    }
+
+    public function update(UpdateAttributeRequest $request, Tenant $tenant, Attribute $attribute): AttributeResource
+    {
+        $attribute = $this->resolveScopedAttribute($tenant, $attribute);
+        $attribute = ProductService::updateAttribute($attribute, $request->validated());
+
+        return AttributeResource::make($attribute);
+    }
+
+    public function destroy(Tenant $tenant, Attribute $attribute): Response
+    {
+        $attribute = $this->resolveScopedAttribute($tenant, $attribute);
+        ProductService::deleteAttribute($attribute);
+
+        return response()->noContent();
+    }
+
+    protected function resolveScopedAttribute(Tenant $tenant, Attribute $attribute): Attribute
+    {
+        if ($attribute->tenant_codigo !== $tenant->codigo) {
+            throw new NotFoundHttpException('Attribute not found for tenant.');
+        }
+
+        return $attribute;
+    }
+}

app/Domains/Catalog/Controllers/BrandController.php

@@ -6,48 +6,60 @@ use App\Domains\Catalog\Models\Brand;
 use App\Domains\Catalog\Requests\StoreBrandRequest;
 use App\Domains\Catalog\Requests\UpdateBrandRequest;
 use App\Domains\Catalog\Resources\BrandResource;
+use App\Domains\Tenant\Models\Tenant;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Response;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 
 class BrandController extends Controller
 {
-    public function index(): JsonResponse
+    public function index(Tenant $tenant): JsonResponse
     {
-        return BrandResource::collection(Brand::query()->orderByDesc('id')->get())->response();
+        return BrandResource::collection(
+            Brand::query()->where('tenant_codigo', $tenant->codigo)->orderByDesc('id')->paginateFromRequest()
+        )->response();
     }
 
-    public function store(StoreBrandRequest $request): JsonResponse
+    public function store(StoreBrandRequest $request, Tenant $tenant): JsonResponse
     {
-        $validated = $request->validated();
+        $brand = Brand::query()->create([
-        $props = $validated['props'] ?? [];
+            ...$request->validated(),
-        unset($validated['props']);
+            'tenant_codigo' => $tenant->codigo,
-
+        ]);
-        $brand = Brand::createWithProps($validated, $props);
 
         return BrandResource::make($brand)->response()->setStatusCode(201);
     }
 
-    public function show(Brand $marca): BrandResource
+    public function show(Tenant $tenant, Brand $marca): BrandResource
     {
-        return BrandResource::make($marca);
+        $marca = $this->resolveScopedBrand($tenant, $marca);
-    }
-
-    public function update(UpdateBrandRequest $request, Brand $marca): BrandResource
-    {
-        $validated = $request->validated();
-        $props = $validated['props'] ?? [];
-        unset($validated['props']);
-
-        $marca = $marca->updateWithProps($validated, $props);
 
         return BrandResource::make($marca);
     }
 
-    public function destroy(Brand $marca): Response
+    public function update(UpdateBrandRequest $request, Tenant $tenant, Brand $marca): BrandResource
     {
+        $marca = $this->resolveScopedBrand($tenant, $marca);
+        $marca->update($request->validated());
+
+        return BrandResource::make($marca);
+    }
+
+    public function destroy(Tenant $tenant, Brand $marca): Response
+    {
+        $marca = $this->resolveScopedBrand($tenant, $marca);
         $marca->delete();
 
         return response()->noContent();
     }
+
+    protected function resolveScopedBrand(Tenant $tenant, Brand $brand): Brand
+    {
+        if ($brand->tenant_codigo !== $tenant->codigo) {
+            throw new NotFoundHttpException('Brand not found for tenant.');
+        }
+
+        return $brand;
+    }
 }

app/Domains/Catalog/Controllers/CategoryController.php

@@ -6,52 +6,80 @@ use App\Domains\Catalog\Models\Category;
 use App\Domains\Catalog\Requests\StoreCategoryRequest;
 use App\Domains\Catalog\Requests\UpdateCategoryRequest;
 use App\Domains\Catalog\Resources\CategoryResource;
+use App\Domains\Tenant\Models\Tenant;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Response;
+use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 
 class CategoryController extends Controller
 {
-    public function index(): JsonResponse
+    public function index(Tenant $tenant): JsonResponse
     {
         return CategoryResource::collection(
-            Category::query()->with(['parent', 'subCategories','tenant'])->orderByDesc('id')->get()
+            Category::query()
+                ->where(function ($query) use ($tenant): void {
+                    $query
+                        ->where('tenant_code', $tenant->codigo)
+                        ->orWhereNull('tenant_code');
+                })
+                ->with(['parent', 'subCategories', 'tenant'])
+                ->orderByDesc('id')
+                ->get()
         )->response();
     }
 
-    public function store(StoreCategoryRequest $request): JsonResponse
+    public function store(StoreCategoryRequest $request, Tenant $tenant): JsonResponse
     {
-        $validated = $request->validated();
+        $category = Category::query()->create([
-        $props = $validated['props'] ?? [];
+            ...$request->validated(),
-        unset($validated['props']);
+            'tenant_code' => $tenant->codigo,
-
+        ]);
-        $category = Category::createWithProps($validated, $props);
 
         return CategoryResource::make($category->load(['parent', 'subCategories', 'tenant']))
             ->response()
             ->setStatusCode(201);
     }
 
-    public function show(Category $categoria): CategoryResource
+    public function show(Tenant $tenant, Category $categoria): CategoryResource
     {
-        return CategoryResource::make($categoria->load(['parent', 'subCategories', 'tenant']));
+        $categoria = $this->resolveScopedCategory($tenant, $categoria);
-    }
-
-    public function update(UpdateCategoryRequest $request, Category $categoria): CategoryResource
-    {
-        $validated = $request->validated();
-        $props = $validated['props'] ?? [];
-        unset($validated['props']);
-
-        $categoria = $categoria->updateWithProps($validated, $props);
 
         return CategoryResource::make($categoria->load(['parent', 'subCategories', 'tenant']));
     }
 
-    public function destroy(Category $categoria): Response
+    public function update(UpdateCategoryRequest $request, Tenant $tenant, Category $categoria): CategoryResource
     {
+        $categoria = $this->resolveScopedCategory($tenant, $categoria);
+        $this->ensureCategoryIsMutable($categoria);
+        $categoria->update($request->validated());
+
+        return CategoryResource::make($categoria->load(['parent', 'subCategories', 'tenant']));
+    }
+
+    public function destroy(Tenant $tenant, Category $categoria): Response
+    {
+        $categoria = $this->resolveScopedCategory($tenant, $categoria);
+        $this->ensureCategoryIsMutable($categoria);
         $categoria->delete();
 
         return response()->noContent();
     }
+
+    protected function resolveScopedCategory(Tenant $tenant, Category $category): Category
+    {
+        if ($category->tenant_code !== null && $category->tenant_code !== $tenant->codigo) {
+            throw new NotFoundHttpException('Category not found for tenant.');
+        }
+
+        return $category;
+    }
+
+    protected function ensureCategoryIsMutable(Category $category): void
+    {
+        if ($category->isGlobal()) {
+            throw new AccessDeniedHttpException('Global categories are read-only.');
+        }
+    }
 }

app/Domains/Catalog/Controllers/ProductController.php

@@ -3,51 +3,66 @@
 namespace App\Domains\Catalog\Controllers;
 
 use App\Domains\Catalog\Models\Product;
+use App\Domains\Catalog\Requests\ProductDetailRequest;
 use App\Domains\Catalog\Requests\StoreProductRequest;
 use App\Domains\Catalog\Requests\UpdateProductRequest;
 use App\Domains\Catalog\Resources\ProductResource;
+use App\Domains\Catalog\Services\ProductService;
+use App\Domains\Tenant\Models\Tenant;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
 use Illuminate\Http\Response;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 
 class ProductController extends Controller
 {
-    public function index(): JsonResponse
+    public function index(Tenant $tenant, ProductService $productService): JsonResponse
     {
-        return ProductResource::collection(Product::query()->latest()->get())->response();
+        return ProductResource::collection(
+            $productService->getProductos($tenant)
+        )->response();
     }
 
-    public function store(StoreProductRequest $request): JsonResponse
+    public function store(StoreProductRequest $request, Tenant $tenant, ProductService $productService): JsonResponse
     {
-        $validated = $request->validated();
+        $product = $productService->create($tenant, $request->validated());
-        $props = $validated['props'] ?? [];
-        unset($validated['props']);
-
-        $product = Product::createWithProps($validated, $props);
 
         return ProductResource::make($product)->response()->setStatusCode(201);
     }
 
-    public function show(Product $producto): ProductResource
+    public function show(ProductDetailRequest $request, Tenant $tenant, Product $producto, ProductService $productService): ProductResource
     {
-        return ProductResource::make($producto);
+        $producto = $this->resolveScopedProduct($tenant, $producto);
-    }
+        $variantId = $request->query('variant_id');
-
+        $variantId = $variantId !== null ? (int) $variantId : null;
-    public function update(UpdateProductRequest $request, Product $producto): ProductResource
+        $producto = $productService->getProductDetail($tenant, $producto, $variantId);
-    {
-        $validated = $request->validated();
-        $props = $validated['props'] ?? [];
-        unset($validated['props']);
-
-        $producto = $producto->updateWithProps($validated, $props);
 
         return ProductResource::make($producto);
     }
 
-    public function destroy(Product $producto): Response
+    public function update(UpdateProductRequest $request, Tenant $tenant, Product $producto, ProductService $productService): ProductResource
     {
-        $producto->delete();
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+        $producto = $productService->update($producto, $request->validated());
+
+        return ProductResource::make($producto);
+    }
+
+    public function destroy(Tenant $tenant, Product $producto, ProductService $productService): Response
+    {
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+        $productService->delete($producto);
 
         return response()->noContent();
     }
+
+    protected function resolveScopedProduct(Tenant $tenant, Product $product): Product
+    {
+        if ($product->tenant_codigo !== $tenant->codigo) {
+            throw new NotFoundHttpException('Product not found.');
+        }
+
+        return $product;
+    }
 }

app/Domains/Catalog/Controllers/ProductVariantController.php

@@ -0,0 +1,87 @@
+<?php
+
+namespace App\Domains\Catalog\Controllers;
+
+use App\Domains\Catalog\Models\Product;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Catalog\Requests\StoreProductVariantRequest;
+use App\Domains\Catalog\Requests\UpdateProductVariantRequest;
+use App\Domains\Catalog\Resources\ProductVariantResource;
+use App\Domains\Catalog\Services\ProductService;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Response;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class ProductVariantController extends Controller
+{
+    public function index(Tenant $tenant, Product $producto): JsonResponse
+    {
+
+        $query = ProductVariant::query()
+            ->where('producto_id', $producto->id)
+            ->with(['product', 'definitions.productAttribute.attribute.options', 'attachments'])
+            ->latest();
+
+        return ProductVariantResource::collection($query->paginateFromRequest())->response();
+    }
+
+    public function store(StoreProductVariantRequest $request, Tenant $tenant, Product $producto, ProductService $productService): JsonResponse
+    {
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+
+        $variant = $productService->createVariant($producto, $request->validated());
+
+        return ProductVariantResource::make($variant)->response()->setStatusCode(201);
+    }
+
+    public function show(Tenant $tenant, Product $producto, ProductVariant $productVariant): ProductVariantResource
+    {
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+        $productVariant = $this->resolveScopedVariant($producto, $productVariant);
+
+        return ProductVariantResource::make($productVariant->load([
+            'attachments' => fn ($query) => $query->orderBy('attachments.id'),
+            'definitions.productAttribute.attribute.options',
+            'product.attachments' => fn ($query) => $query->orderBy('attachments.id'),
+        ]));
+    }
+
+    public function update(UpdateProductVariantRequest $request, Tenant $tenant, Product $producto, ProductVariant $productVariant, ProductService $productService): ProductVariantResource
+    {
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+        $productVariant = $this->resolveScopedVariant($producto, $productVariant);
+
+        $productVariant = $productService->updateVariant($productVariant, $request->validated());
+
+        return ProductVariantResource::make($productVariant);
+    }
+
+    public function destroy(Tenant $tenant, Product $producto, ProductVariant $productVariant, ProductService $productService): Response
+    {
+        $producto = $this->resolveScopedProduct($tenant, $producto);
+        $productVariant = $this->resolveScopedVariant($producto, $productVariant);
+        $productService->deleteVariant($productVariant);
+
+        return response()->noContent();
+    }
+
+    protected function resolveScopedProduct(Tenant $tenant, Product $product): Product
+    {
+        if ($product->tenant_codigo !== $tenant->codigo) {
+            throw new NotFoundHttpException('Product not found for tenant.');
+        }
+
+        return $product;
+    }
+
+    protected function resolveScopedVariant(Product $product, ProductVariant $variant): ProductVariant
+    {
+        if ($variant->producto_id !== $product->id) {
+            throw new NotFoundHttpException('Product variant not found for product.');
+        }
+
+        return $variant;
+    }
+}

app/Domains/Catalog/Models/Attribute.php

@@ -0,0 +1,78 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use App\Domains\Shared\Enums\FieldType;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\HasManyThrough;
+
+#[Fillable([
+    'tenant_codigo',
+    'codigo',
+    'nombre',
+    'is_required',
+    'metadata_schema',
+    'type',
+])]
+class Attribute extends Model
+{
+    use HasFactory;
+
+    protected $table = 'attribute';
+
+    /**
+     * @return array<string, string>
+     */
+    protected function casts(): array
+    {
+        return [
+            'is_required' => 'boolean',
+            'metadata_schema' => 'array',
+            'type' => FieldType::class,
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    /**
+     * @return HasMany<AttributeOption, $this>
+     */
+    public function options(): HasMany
+    {
+        return $this->hasMany(AttributeOption::class, 'attribute_id')->orderBy('sort_order');
+    }
+
+    /**
+     * @return HasMany<ProductAttribute, $this>
+     */
+    public function productAttributes(): HasMany
+    {
+        return $this->hasMany(ProductAttribute::class, 'attribute_id');
+    }
+
+    /**
+     * @return HasManyThrough<ProductVariantDefinition, ProductAttribute, $this>
+     */
+    public function variantDefinitions(): HasManyThrough
+    {
+        return $this->hasManyThrough(
+            ProductVariantDefinition::class,
+            ProductAttribute::class,
+            'attribute_id',
+            'products_attribute_id',
+            'id',
+            'id'
+        );
+    }
+}

app/Domains/Catalog/Models/AttributeOption.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'attribute_id',
+    'value',
+    'label',
+    'sort_order',
+    'metadata',
+])]
+class AttributeOption extends Model
+{
+    use HasFactory;
+
+    protected $table = 'attribute_options';
+
+    /**
+     * @return array<string, string>
+     */
+    protected function casts(): array
+    {
+        return [
+            'sort_order' => 'integer',
+            'metadata' => 'array',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Attribute, $this>
+     */
+    public function attribute(): BelongsTo
+    {
+        return $this->belongsTo(Attribute::class, 'attribute_id');
+    }
+}

app/Domains/Catalog/Models/Brand.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Models;
 
-use App\Domains\Prop\Concerns\Propable;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -17,7 +16,6 @@ use Illuminate\Database\Eloquent\Relations\BelongsTo;
 class Brand extends Model
 {
     use HasFactory;
-    use Propable;
 
     protected $table = 'brands';
 

app/Domains/Catalog/Models/Category.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Models;
 
-use App\Domains\Prop\Concerns\Propable;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -18,7 +17,6 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
 class Category extends Model
 {
     use HasFactory;
-    use Propable;
 
     protected $table = 'categorias';
 

app/Domains/Catalog/Models/Product.php

@@ -2,16 +2,22 @@
 
 namespace App\Domains\Catalog\Models;
 
-use App\Domains\Prop\Concerns\Propable;
+use App\Domains\Attachable\Models\Attachment;
+use App\Domains\Catalog\Models\Brand;
+use App\Domains\Catalog\Models\Category;
+use App\Domains\Catalog\Models\ProductAttribute;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\HasMany;
 
 #[Fillable([
     'tenant_codigo',
     'categoria_id',
+    'brand_id',
     'slug',
     'nombre',
     'descripcion',
@@ -20,14 +26,15 @@ use Illuminate\Database\Eloquent\Relations\BelongsTo;
 class Product extends Model
 {
     use HasFactory;
-    use Propable;
 
     protected $table = 'productos';
     
+    protected ?ProductVariant $selectedVariant = null;
     protected function casts(): array
     {
         return [
             'categoria_id' => 'integer',
+            'brand_id' => 'integer',
             'precio' => 'decimal:2',
         ];
     }
@@ -39,4 +46,259 @@ class Product extends Model
     {
         return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
     }
+
+    /**
+     * @return BelongsTo<Category, $this>
+     */
+    public function category(): BelongsTo
+    {
+        return $this->belongsTo(Category::class, 'categoria_id');
+    }
+
+    /**
+     * @return BelongsTo<Brand, $this>
+     */
+    public function brand(): BelongsTo
+    {
+        return $this->belongsTo(Brand::class, 'brand_id');
+    }
+
+    /**
+     * @return HasMany<ProductVariant, $this>
+     */
+    public function variants(): HasMany
+    {
+        return $this->hasMany(ProductVariant::class, 'producto_id');
+    }
+
+    /**
+     * @return BelongsToMany<Attribute, $this>
+     */
+    public function attributes(): BelongsToMany
+    {
+        return $this->belongsToMany(
+            Attribute::class,
+            'products_attributes',
+            'product_id',
+            'attribute_id'
+        )->withTimestamps();
+    }
+
+    /**
+     * @return HasMany<ProductAttribute, $this>
+     */
+    public function productAttributes(): HasMany
+    {
+        return $this->hasMany(ProductAttribute::class, 'product_id');
+    }
+
+    /**
+     * @return BelongsToMany<Attachment, $this>
+     */
+    public function attachments(): BelongsToMany
+    {
+        return $this->belongsToMany(
+            Attachment::class,
+            'productos_attachments',
+            'producto_id',
+            'attachment_id'
+        )->withTimestamps();
+    }
+
+    /**
+     * Create a variant for this product with its definitions.
+     *
+     * @param array<string, mixed> $data
+     */
+    public function createVariant(array $data): ProductVariant
+    {
+        $definitions = $data['definitions'] ?? [];
+        $this->validateVariantDefinitions($definitions);
+
+        unset($data['definitions']);
+
+        /** @var ProductVariant $variant */
+        $variant = $this->variants()->create($data);
+        $variant->definitions()->createMany($definitions);
+
+        return $variant;
+    }
+
+    /**
+     * Create multiple variants for this product.
+     *
+     * @param array<int, array<string, mixed>> $variantsData
+     * @return \Illuminate\Database\Eloquent\Collection<int, ProductVariant>
+     */
+    public function createVariants(array $variantsData): \Illuminate\Database\Eloquent\Collection
+    {
+        $variants = new \Illuminate\Database\Eloquent\Collection();
+
+        foreach ($variantsData as $variantData) {
+            $variants->push($this->createVariant($variantData));
+        }
+
+        return $variants;
+    }
+
+    /**
+     * Update a product variant.
+     *
+     * @param array<string, mixed> $data
+     */
+    public function updateVariant(ProductVariant $variant, array $data): ProductVariant
+    {
+        $definitions = $data['definitions'] ?? [];
+        $this->validateVariantDefinitions($definitions);
+
+        unset($data['definitions']);
+        unset($data['producto_id']);
+
+        $variant->update($data);
+        $variant->definitions()->delete();
+        $variant->definitions()->createMany($definitions);
+
+        return $variant;
+    }
+
+    /**
+     * Delete a product variant.
+     */
+    public function deleteVariant(ProductVariant $variant): void
+    {
+        $variant->definitions()->delete();
+        $variant->delete();
+    }
+
+    /**
+     * Validate variant definitions options against Attribute configuration.
+     *
+     * @param array $definitions
+     * @throws \InvalidArgumentException
+     */
+    protected function validateVariantDefinitions(array $definitions): void
+    {
+        foreach ($definitions as $definition) {
+            $productAttributeId = $definition['products_attribute_id'] ?? null;
+            if (! $productAttributeId) {
+                continue;
+            }
+
+            $productAttribute = $this->productAttributes()
+                ->with('attribute.options')
+                ->find($productAttributeId);
+
+            $attribute = $productAttribute?->attribute;
+
+            if (! $productAttribute || ! $attribute) {
+                throw new \InvalidArgumentException("Product attribute with ID {$productAttributeId} not found for product {$this->id}.");
+            }
+
+            if ($attribute->type === \App\Domains\Shared\Enums\FieldType::Select) {
+                $allowedValues = $attribute->options()->pluck('value')->toArray();
+                $val = $definition['value'] ?? null;
+                if ($val !== null && ! in_array($val, $allowedValues, true)) {
+                    throw new \InvalidArgumentException("The value '{$val}' is not a valid option for the select attribute '{$attribute->nombre}'.");
+                }
+            } elseif ($attribute->type === \App\Domains\Shared\Enums\FieldType::Multiselect) {
+                $allowedValues = $attribute->options()->pluck('value')->toArray();
+                $val = $definition['value'] ?? null;
+                if ($val !== null) {
+                    $values = [];
+                    if (is_array($val)) {
+                        $values = $val;
+                    } else {
+                        $decoded = json_decode($val, true);
+                        if (is_array($decoded)) {
+                            $values = $decoded;
+                        } else {
+                            $values = array_map('trim', explode(',', $val));
+                        }
+                    }
+                    foreach ($values as $v) {
+                        if (! in_array($v, $allowedValues, true)) {
+                            throw new \InvalidArgumentException("The value '{$v}' is not a valid option for the multiselect attribute '{$attribute->nombre}'.");
+                        }
+                    }
+                }
+            }
+        }
+    }
+
+    /**
+     * Create an attribute.
+     *
+     * @param array<string, mixed> $data
+     */
+    public static function createAttribute(Tenant $tenant, array $data): Attribute
+    {
+        $options = $data['options'] ?? [];
+        unset($data['options']);
+
+        $type = \App\Domains\Shared\Enums\FieldType::from((string) $data['type']);
+        if (! $type->supportsOptions() && ! empty($options)) {
+            throw new \InvalidArgumentException('Options are only allowed for select and multiselect attributes.');
+        }
+
+        if (! $type->supportsOptions()) {
+            $data['metadata_schema'] = null;
+        }
+
+        /** @var Attribute $attribute */
+        $attribute = Attribute::query()->create([
+            ...$data,
+            'tenant_codigo' => $tenant->codigo,
+        ]);
+        $attribute->options()->createMany($options);
+
+        return $attribute->load('options');
+    }
+
+    /**
+     * Update an attribute.
+     *
+     * @param array<string, mixed> $data
+     */
+    public static function updateAttribute(Attribute $attribute, array $data): Attribute
+    {
+        $options = $data['options'] ?? [];
+        unset($data['options']);
+
+        $typeStr = $data['type'] ?? $attribute->type->value;
+        $type = \App\Domains\Shared\Enums\FieldType::from((string) $typeStr);
+        if (! $type->supportsOptions() && ! empty($options)) {
+            throw new \InvalidArgumentException('Options are only allowed for select and multiselect attributes.');
+        }
+
+        if (! $type->supportsOptions()) {
+            $data['metadata_schema'] = null;
+        }
+
+        $attribute->update($data);
+        $attribute->options()->delete();
+        $attribute->options()->createMany($options);
+
+        return $attribute->load('options');
+    }
+
+    /**
+     * Delete an attribute.
+     */
+    public static function deleteAttribute(Attribute $attribute): void
+    {
+        $attribute->options()->delete();
+        $attribute->delete();
+    }
+
+    
+
+    public function setSelectedVariant(ProductVariant $variant): void
+    {
+        $this->selectedVariant = $variant;
+    }
+
+    public function getSelectedVariant(): ?ProductVariant
+    {
+        return $this->selectedVariant;
+    }
 }

app/Domains/Catalog/Models/ProductAttribute.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+#[Fillable([
+    'product_id',
+    'attribute_id',
+])]
+class ProductAttribute extends Model
+{
+    use HasFactory;
+
+    protected $table = 'products_attributes';
+
+    /**
+     * @return BelongsTo<Product, $this>
+     */
+    public function product(): BelongsTo
+    {
+        return $this->belongsTo(Product::class, 'product_id');
+    }
+
+    /**
+     * @return BelongsTo<Attribute, $this>
+     */
+    public function attribute(): BelongsTo
+    {
+        return $this->belongsTo(Attribute::class, 'attribute_id');
+    }
+
+    /**
+     * @return HasMany<ProductVariantDefinition, $this>
+     */
+    public function variantDefinitions(): HasMany
+    {
+        return $this->hasMany(ProductVariantDefinition::class, 'products_attribute_id');
+    }
+}

app/Domains/Catalog/Models/ProductVariant.php

@@ -0,0 +1,160 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use App\Domains\Attachable\Models\Attachment;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+use Illuminate\Database\Eloquent\Casts\Attribute;
+
+#[Fillable([
+    'producto_id',
+    'stock_real',
+    'stock_reservado',
+    'stock',
+    'is_placeholder',
+])]
+class ProductVariant extends Model
+{
+    use HasFactory;
+
+    protected $table = 'productos_variantes';
+
+    protected $appends = ['stock_tecnico'];
+
+    protected static function booted(): void
+    {
+        static::saving(function (ProductVariant $variant) {
+            $variant->validateStock();
+        });
+    }
+
+    public function validateStock(): void
+    {
+        if ($this->stock_real < 0) {
+            throw new \InvalidArgumentException('El stock real no puede ser negativo.');
+        }
+
+        if ($this->stock_reservado < 0) {
+            throw new \InvalidArgumentException('El stock reservado no puede ser negativo.');
+        }
+
+        if ($this->stock_reservado > $this->stock_real) {
+            throw new \InvalidArgumentException('El stock reservado no puede ser mayor que el stock real.');
+        }
+    }
+
+    public function incrementRealStock(int $amount): void
+    {
+        if ($amount < 0) {
+            throw new \InvalidArgumentException('El monto a incrementar debe ser positivo.');
+        }
+        $this->stock_real += $amount;
+        $this->save();
+    }
+
+    public function decrementRealStock(int $amount): void
+    {
+        if ($amount < 0) {
+            throw new \InvalidArgumentException('El monto a decrementar debe ser positivo.');
+        }
+        $this->stock_real -= $amount;
+        $this->save();
+    }
+
+    public function incrementReservedStock(int $amount): void
+    {
+        if ($amount < 0) {
+            throw new \InvalidArgumentException('El monto a incrementar debe ser positivo.');
+        }
+        $this->stock_reservado += $amount;
+        $this->save();
+    }
+
+    public function decrementReservedStock(int $amount): void
+    {
+        if ($amount < 0) {
+            throw new \InvalidArgumentException('El monto a decrementar debe ser positivo.');
+        }
+        $this->stock_reservado -= $amount;
+        $this->save();
+    }
+
+    public function confirmReservedStock(int $amount): void
+    {
+        if ($amount < 0) {
+            throw new \InvalidArgumentException('El monto a confirmar debe ser positivo.');
+        }
+
+        if ($this->stock_real < $amount) {
+            throw new \InvalidArgumentException('No hay suficiente stock real para confirmar la reserva.');
+        }
+
+        if ($this->stock_reservado < $amount) {
+            throw new \InvalidArgumentException('No hay suficiente stock reservado para confirmar la reserva.');
+        }
+
+        $this->stock_real -= $amount;
+        $this->stock_reservado -= $amount;
+        $this->save();
+    }
+
+    protected function stockTecnico(): Attribute
+    {
+        return Attribute::get(fn () => $this->stock_real - $this->stock_reservado);
+    }
+
+    protected function stock(): Attribute
+    {
+        return Attribute::make(
+            get: fn () => $this->stock_real,
+            set: fn ($value) => [
+                'stock_real' => $value,
+            ]
+        );
+    }
+
+    protected function casts(): array
+    {
+        return [
+            'producto_id' => 'integer',
+            'stock_real' => 'integer',
+            'stock_reservado' => 'integer',
+            'is_placeholder' => 'boolean',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Product, $this>
+     */
+    public function product(): BelongsTo
+    {
+        return $this->belongsTo(Product::class, 'producto_id');
+    }
+
+    /**
+     * @return HasMany<ProductVariantDefinition, $this>
+     */
+    public function definitions(): HasMany
+    {
+        return $this->hasMany(ProductVariantDefinition::class, 'producto_variante_id');
+    }
+
+    /**
+     * @return BelongsToMany<Attachment, $this>
+     */
+    public function attachments(): BelongsToMany
+    {
+        return $this->belongsToMany(
+            Attachment::class,
+            'variantes_attachments',
+            'variante_id',
+            'attachment_id'
+        )->withTimestamps();
+    }
+}

app/Domains/Catalog/Models/ProductVariantDefinition.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'producto_variante_id',
+    'products_attribute_id',
+    'value',
+])]
+class ProductVariantDefinition extends Model
+{
+    use HasFactory;
+
+    protected $table = 'productos_variantes_values';
+
+    /**
+     * @return BelongsTo<ProductVariant, $this>
+     */
+    public function variant(): BelongsTo
+    {
+        return $this->belongsTo(ProductVariant::class, 'producto_variante_id');
+    }
+
+    /**
+     * @return BelongsTo<ProductAttribute, $this>
+     */
+    public function productAttribute(): BelongsTo
+    {
+        return $this->belongsTo(ProductAttribute::class, 'products_attribute_id');
+    }
+}

app/Domains/Catalog/Requests/ProductDetailRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class ProductDetailRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'variant_id' => ['sometimes', 'integer'],
+        ];
+    }
+}

app/Domains/Catalog/Requests/StoreAttributeRequest.php

@@ -0,0 +1,68 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use App\Domains\Shared\Enums\FieldType;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+use Illuminate\Validation\Validator;
+
+class StoreAttributeRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'codigo' => [
+                'required',
+                'string',
+                'max:255',
+                Rule::unique('attribute', 'codigo')->where(
+                    fn ($query) => $query->where('tenant_codigo', $this->route('tenant')?->codigo)
+                ),
+            ],
+            'nombre' => ['required', 'string', 'max:255'],
+            'is_required' => ['sometimes', 'boolean'],
+            'metadata_schema' => ['nullable', 'array'],
+            'type' => ['required', Rule::enum(FieldType::class)],
+            'options' => [
+                Rule::requiredIf(fn (): bool => in_array($this->input('type'), [
+                    FieldType::Select->value,
+                    FieldType::Multiselect->value,
+                ], true)),
+                Rule::prohibitedIf(fn (): bool => ! in_array($this->input('type'), [
+                    FieldType::Select->value,
+                    FieldType::Multiselect->value,
+                ], true)),
+                'array',
+            ],
+            'options.*.value' => ['required', 'string', 'max:255'],
+            'options.*.label' => ['required', 'string', 'max:255'],
+            'options.*.sort_order' => ['sometimes', 'integer'],
+            'options.*.metadata' => ['nullable', 'array'],
+        ];
+    }
+
+    public function withValidator(Validator $validator): void
+    {
+        $validator->after(function (Validator $validator): void {
+            $type = $this->input('type');
+            $supportsOptions = in_array($type, [FieldType::Select->value, FieldType::Multiselect->value], true);
+
+            if (! $supportsOptions && $this->filled('metadata_schema')) {
+                $validator->errors()->add('metadata_schema', 'The metadata_schema field is only allowed for select and multiselect attributes.');
+            }
+
+            if (! $supportsOptions && $this->filled('options')) {
+                $validator->errors()->add('options', 'Options are only allowed for select and multiselect attributes.');
+            }
+        });
+    }
+}

app/Domains/Catalog/Requests/StoreBrandRequest.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Requests;
 
-use App\Domains\Prop\Support\PropRules;
 use Illuminate\Foundation\Http\FormRequest;
 
 class StoreBrandRequest extends FormRequest
@@ -18,10 +17,8 @@ class StoreBrandRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'tenant_codigo' => ['required', 'string', 'exists:tenants,codigo'],
             'nombre' => ['required', 'string', 'max:255'],
             'descripcion' => ['nullable', 'string'],
-            ...PropRules::sync(),
         ];
     }
 }

app/Domains/Catalog/Requests/StoreCategoryRequest.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Requests;
 
-use App\Domains\Prop\Support\PropRules;
 use Illuminate\Foundation\Http\FormRequest;
 
 class StoreCategoryRequest extends FormRequest
@@ -18,10 +17,8 @@ class StoreCategoryRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'tenant_code' => ['required', 'string', 'exists:tenants,codigo'],
             'categoria_id' => ['nullable', 'integer', 'exists:categorias,id'],
             'nombre' => ['required', 'string', 'max:255'],
-            ...PropRules::sync(),
         ];
     }
 }

app/Domains/Catalog/Requests/StoreProductRequest.php

@@ -2,7 +2,7 @@
 
 namespace App\Domains\Catalog\Requests;
 
-use App\Domains\Prop\Support\PropRules;
+use App\Domains\Shared\Rules\ImageOrBase64Rule;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
 
@@ -19,13 +19,29 @@ class StoreProductRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'tenant_codigo' => ['required', 'string', 'exists:tenants,codigo'],
             'categoria_id' => ['required', 'integer'],
+            'brand_id' => [
+                'required',
+                'integer',
+                Rule::exists('brands', 'id')->where(
+                    fn ($query) => $query->where('tenant_codigo', $this->route('tenant')?->codigo)
+                ),
+            ],
             'slug' => ['required', 'string', 'max:255', Rule::unique('productos', 'slug')],
             'nombre' => ['required', 'string', 'max:255'],
             'descripcion' => ['nullable', 'string'],
             'precio' => ['required', 'numeric', 'min:0'],
-            ...PropRules::sync(),
+            'stock' => ['sometimes', 'integer', 'min:0'],
+            'attribute_ids' => ['sometimes', 'array'],
+            'attribute_ids.*' => [
+                'required',
+                'integer',
+                Rule::exists('attribute', 'id')->where(
+                    fn ($query) => $query->where('tenant_codigo', $this->route('tenant')?->codigo)
+                ),
+            ],
+            'images' => ['sometimes', 'nullable', 'array'],
+            'images.*' => ['required', new ImageOrBase64Rule()],
         ];
     }
 }

app/Domains/Catalog/Requests/StoreProductVariantRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use App\Domains\Shared\Rules\ImageOrBase64Rule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreProductVariantRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'stock' => ['sometimes', 'integer', 'min:0'],
+            'definitions' => ['sometimes', 'array'],
+            'definitions.*.products_attribute_id' => [
+                'required',
+                'integer',
+                'distinct',
+                Rule::exists('products_attributes', 'id')->where(
+                    fn ($query) => $query->where('product_id', $this->route('producto')?->id)
+                ),
+            ],
+            'definitions.*.value' => ['nullable', 'string'],
+            'images' => ['sometimes', 'nullable', 'array'],
+            'images.*' => ['required', new ImageOrBase64Rule()],
+        ];
+    }
+}

app/Domains/Catalog/Requests/UpdateAttributeRequest.php

@@ -0,0 +1,62 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use App\Domains\Catalog\Models\Attribute;
+use App\Domains\Shared\Enums\FieldType;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+use Illuminate\Validation\Validator;
+
+class UpdateAttributeRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        /** @var Attribute|null $attribute */
+        $attribute = $this->route('attribute');
+
+        return [
+            'codigo' => [
+                'required',
+                'string',
+                'max:255',
+                Rule::unique('attribute', 'codigo')
+                    ->ignore($attribute?->id)
+                    ->where(fn ($query) => $query->where('tenant_codigo', $attribute?->tenant_codigo)),
+            ],
+            'nombre' => ['required', 'string', 'max:255'],
+            'is_required' => ['sometimes', 'boolean'],
+            'metadata_schema' => ['nullable', 'array'],
+            'type' => ['required', Rule::enum(FieldType::class)],
+            'options' => ['sometimes', 'array'],
+            'options.*.value' => ['required', 'string', 'max:255'],
+            'options.*.label' => ['required', 'string', 'max:255'],
+            'options.*.sort_order' => ['sometimes', 'integer'],
+            'options.*.metadata' => ['nullable', 'array'],
+        ];
+    }
+
+    public function withValidator(Validator $validator): void
+    {
+        $validator->after(function (Validator $validator): void {
+            $type = $this->input('type');
+            $supportsOptions = in_array($type, [FieldType::Select->value, FieldType::Multiselect->value], true);
+
+            if (! $supportsOptions && $this->filled('metadata_schema')) {
+                $validator->errors()->add('metadata_schema', 'The metadata_schema field is only allowed for select and multiselect attributes.');
+            }
+
+            if (! $supportsOptions && $this->filled('options')) {
+                $validator->errors()->add('options', 'Options are only allowed for select and multiselect attributes.');
+            }
+        });
+    }
+}

app/Domains/Catalog/Requests/UpdateBrandRequest.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Requests;
 
-use App\Domains\Prop\Support\PropRules;
 use Illuminate\Foundation\Http\FormRequest;
 
 class UpdateBrandRequest extends FormRequest
@@ -18,10 +17,8 @@ class UpdateBrandRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'tenant_codigo' => ['required', 'string', 'exists:tenants,codigo'],
             'nombre' => ['required', 'string', 'max:255'],
             'descripcion' => ['nullable', 'string'],
-            ...PropRules::sync(),
         ];
     }
 }

app/Domains/Catalog/Requests/UpdateCategoryRequest.php

@@ -3,7 +3,6 @@
 namespace App\Domains\Catalog\Requests;
 
 use App\Domains\Catalog\Models\Category;
-use App\Domains\Prop\Support\PropRules;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
 
@@ -23,7 +22,6 @@ class UpdateCategoryRequest extends FormRequest
         $category = $this->route('categoria');
 
         return [
-            'tenant_code' => ['required', 'string', 'exists:tenants,codigo'],
             'categoria_id' => [
                 'nullable',
                 'integer',
@@ -31,7 +29,6 @@ class UpdateCategoryRequest extends FormRequest
                 Rule::notIn([$category?->id]),
             ],
             'nombre' => ['required', 'string', 'max:255'],
-            ...PropRules::sync(),
         ];
     }
 }

app/Domains/Catalog/Requests/UpdateProductRequest.php

@@ -3,7 +3,7 @@
 namespace App\Domains\Catalog\Requests;
 
 use App\Domains\Catalog\Models\Product;
-use App\Domains\Prop\Support\PropRules;
+use App\Domains\Shared\Rules\ImageOrBase64Rule;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
 
@@ -23,8 +23,14 @@ class UpdateProductRequest extends FormRequest
         $product = $this->route('producto');
 
         return [
-            'tenant_codigo' => ['required', 'string', 'exists:tenants,codigo'],
             'categoria_id' => ['required', 'integer'],
+            'brand_id' => [
+                'required',
+                'integer',
+                Rule::exists('brands', 'id')->where(
+                    fn ($query) => $query->where('tenant_codigo', $this->route('tenant')?->codigo)
+                ),
+            ],
             'slug' => [
                 'required',
                 'string',
@@ -34,7 +40,16 @@ class UpdateProductRequest extends FormRequest
             'nombre' => ['required', 'string', 'max:255'],
             'descripcion' => ['nullable', 'string'],
             'precio' => ['required', 'numeric', 'min:0'],
-            ...PropRules::sync(),
+            'attribute_ids' => ['sometimes', 'array'],
+            'attribute_ids.*' => [
+                'required',
+                'integer',
+                Rule::exists('attribute', 'id')->where(
+                    fn ($query) => $query->where('tenant_codigo', $this->route('tenant')?->codigo)
+                ),
+            ],
+            'images' => ['sometimes', 'nullable', 'array'],
+            'images.*' => ['required', new ImageOrBase64Rule()],
         ];
     }
 }

app/Domains/Catalog/Requests/UpdateProductVariantRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use App\Domains\Shared\Rules\ImageOrBase64Rule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateProductVariantRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'stock' => ['sometimes', 'integer', 'min:0'],
+            'definitions' => ['sometimes', 'array'],
+            'definitions.*.products_attribute_id' => [
+                'required',
+                'integer',
+                'distinct',
+                Rule::exists('products_attributes', 'id')->where(
+                    fn ($query) => $query->where('product_id', $this->route('producto')?->id)
+                ),
+            ],
+            'definitions.*.value' => ['nullable', 'string'],
+            'images' => ['sometimes', 'nullable', 'array'],
+            'images.*' => ['required', new ImageOrBase64Rule()],
+        ];
+    }
+}

app/Domains/Catalog/Resources/AttributeOptionResource.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Catalog\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Catalog\Models\AttributeOption
+ */
+class AttributeOptionResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'value' => $this->value,
+            'label' => $this->label,
+            'sort_order' => $this->sort_order,
+            'metadata' => $this->metadata,
+        ];
+    }
+}

app/Domains/Catalog/Resources/AttributeResource.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Domains\Catalog\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Catalog\Models\Attribute
+ */
+class AttributeResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'codigo' => $this->codigo,
+            'nombre' => $this->nombre,
+            'is_required' => $this->is_required,
+            'metadata_schema' => $this->metadata_schema,
+            'type' => $this->type?->value ?? $this->type,
+            'options' => AttributeOptionResource::collection($this->whenLoaded('options')),
+        ];
+    }
+}

app/Domains/Catalog/Resources/BrandResource.php

@@ -17,7 +17,6 @@ class BrandResource extends JsonResource
     {
         return [
             'id' => $this->id,
-            'tenant_codigo' => $this->tenant_codigo,
             'nombre' => $this->nombre,
             'descripcion' => $this->descripcion,
         ];

app/Domains/Catalog/Resources/CategoryResource.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Catalog\Resources;
 
-use App\Domains\Tenant\Resources\TenantResource;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -18,15 +17,28 @@ class CategoryResource extends JsonResource
     {
         return [
             'id' => $this->id,
-            'tenant_code' => $this->tenant_code,
             'is_global' => $this->resource->isGlobal(),
-            'tenant' => $this->resource->isGlobal()
-                ? null
-                : TenantResource::make($this->whenLoaded('tenant')),
-            'categoria_id' => $this->categoria_id,
             'nombre' => $this->nombre,
-            'parent' => self::make($this->whenLoaded('parent')),
+            'parent' => $this->whenLoaded('parent', fn () => $this->serializeRelatedCategory($this->parent)),
-            'sub_categories' => self::collection($this->whenLoaded('subCategories')),
+            'sub_categories' => $this->whenLoaded('subCategories', fn () =>
+                $this->subCategories->map(fn ($category) => $this->serializeRelatedCategory($category))->values()
+            ),
+        ];
+    }
+
+    /**
+     * @return array<string, mixed>|null
+     */
+    protected function serializeRelatedCategory(?\App\Domains\Catalog\Models\Category $category): ?array
+    {
+        if ($category === null) {
+            return null;
+        }
+
+        return [
+            'id' => $category->id,
+            'is_global' => $category->isGlobal(),
+            'nombre' => $category->nombre,
         ];
     }
 }

app/Domains/Catalog/Resources/ProductResource.php

@@ -2,11 +2,12 @@
 
 namespace App\Domains\Catalog\Resources;
 
+use App\Domains\Catalog\Models\Product;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
 /**
- * @mixin \App\Domains\Catalog\Models\Product
+ * @mixin Product
  */
 class ProductResource extends JsonResource
 {
@@ -17,14 +18,36 @@ class ProductResource extends JsonResource
     {
         return [
             'id' => $this->id,
-            'tenant_codigo' => $this->tenant_codigo,
+            'category_id' => $this->categoria_id,
-            'categoria_id' => $this->categoria_id,
+            'brand_id' => $this->brand_id,
             'slug' => $this->slug,
             'nombre' => $this->nombre,
             'descripcion' => $this->descripcion,
             'precio' => $this->precio,
-            'created_at' => $this->created_at,
+            'category' => $this->whenLoaded('category', fn () => $this->category?->nombre),
-            'updated_at' => $this->updated_at,
+            'brand' => $this->whenLoaded('brand', fn () => $this->brand?->nombre),
+            'images' => $this->whenLoaded('attachments', fn () => $this->attachments
+                ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
+                ->values()
+            ),
+            'attributes' => AttributeResource::collection($this->whenLoaded('attributes')),
+            'variants_map' => $this->whenLoaded('variants', fn () => $this->variants
+                ->map(fn ($variant) => [
+                    'variant_id' => $variant->id,
+                    'cantidad_maxima' => $variant->stock_tecnico,
+                    'attributes' => $variant->definitions
+                        ->mapWithKeys(fn ($definition) => [
+                            $definition->productAttribute?->attribute?->codigo => $definition->value,
+                        ])
+                        ->filter(fn ($value, $key) => $key !== null)
+                        ->toArray(),
+                ])
+                ->values()
+            ),
+            'variant' => $this->when(
+                $this->getSelectedVariant() !== null,
+                fn () => ProductVariantResource::make($this->getSelectedVariant())
+            ),
         ];
     }
 }

app/Domains/Catalog/Resources/ProductVariantDefinitionResource.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Domains\Catalog\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Catalog\Models\ProductVariantDefinition
+ */
+class ProductVariantDefinitionResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'producto_variante_id' => $this->producto_variante_id,
+            'products_attribute_id' => $this->products_attribute_id,
+            'attribute_id' => $this->whenLoaded('productAttribute', fn () => $this->productAttribute?->attribute_id),
+            'value' => $this->value,
+            'attribute' => $this->whenLoaded('productAttribute', fn () => $this->productAttribute?->attribute?->nombre),
+            'metadata' => $this->resolveMetadata(),
+        ];
+    }
+
+    /**
+     * @return array<string, mixed>|null
+     */
+    protected function resolveMetadata(): ?array
+    {
+        if (! $this->relationLoaded('productAttribute')) {
+            return null;
+        }
+
+        $attribute = $this->productAttribute?->attribute;
+
+        if (! $attribute?->relationLoaded('options')) {
+            return null;
+        }
+
+        $option = $attribute->options->firstWhere('value', $this->value);
+
+        if ($option === null || $option->metadata === null) {
+            return null;
+        }
+
+        return $option->metadata;
+    }
+}

app/Domains/Catalog/Resources/ProductVariantResource.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Domains\Catalog\Resources;
+
+use App\Domains\Catalog\Models\ProductVariant;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin ProductVariant
+ */
+class ProductVariantResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'cantidad_maxima' => $this->stock_tecnico,
+            'product' => ProductResource::make($this->whenLoaded('product')),
+            'definitions' => $this->whenLoaded(
+                'definitions',
+                fn () => $this->definitions
+                    ->mapWithKeys(fn ($definition) => [
+                        $definition->productAttribute?->attribute?->codigo => $definition->value,
+                    ])
+                    ->filter(fn ($value, $key) => $key !== null)
+                    ->toArray()
+            ),
+            'images' => $this->whenLoaded('attachments', function () {
+                if ($this->attachments->isNotEmpty()) {
+                    return $this->attachments
+                        ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
+                        ->values();
+                }
+
+                if ($this->relationLoaded('fallbackAttachments')) {
+                    return $this->fallbackAttachments
+                        ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
+                        ->values();
+                }
+
+                if ($this->relationLoaded('product') && $this->product?->relationLoaded('attachments')) {
+                    return $this->product->attachments
+                        ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
+                        ->values();
+                }
+
+                return collect();
+            }),
+        ];
+    }
+}

app/Domains/Catalog/Services/ProductService.php

@@ -2,7 +2,385 @@
 
 namespace App\Domains\Catalog\Services;
 
+use App\Domains\Attachable\Services\AttachmentService;
+use App\Domains\Catalog\Models\Attribute;
+use App\Domains\Catalog\Models\Product;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Contracts\Pagination\LengthAwarePaginator;
+use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
 class ProductService
 {
-    // Reserved for product domain business logic.
+    public function __construct(protected AttachmentService $attachmentService) {}
+
+    /**
+     * Create a product.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public function create(Tenant $tenant, array $data): Product
+    {
+        return DB::transaction(function () use ($tenant, $data) {
+            $attributeIds = $data['attribute_ids'] ?? [];
+            $images = $data['images'] ?? [];
+            $stock = $data['stock'] ?? 0;
+            unset($data['attribute_ids'], $data['images'], $data['stock']);
+
+            /** @var Product $product */
+            $product = Product::query()->create([
+                ...$data,
+                'tenant_codigo' => $tenant->codigo,
+            ]);
+
+            $product->attributes()->sync($attributeIds);
+
+            if (! empty($images)) {
+                $this->syncProductImages($product, $images);
+            }
+
+            // Create default variant with stock
+            $this->createVariant($product, [
+                'stock' => $stock,
+                'is_placeholder' => true,
+                'definitions' => [],
+            ]);
+
+            return $product->load(['attributes.options', 'attachments', 'brand', 'category']);
+        });
+    }
+
+    /**
+     * Update a product.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public function update(Product $product, array $data): Product
+    {
+        return DB::transaction(function () use ($product, $data) {
+            $hasAttributeIds = array_key_exists('attribute_ids', $data);
+            $attributeIds = $data['attribute_ids'] ?? [];
+            $hasImages = array_key_exists('images', $data);
+            $images = $data['images'] ?? [];
+            unset($data['attribute_ids'], $data['images']);
+
+            // Ensure tenant_codigo cannot be updated/changed
+            unset($data['tenant_codigo']);
+
+            $product->update($data);
+
+            if ($hasAttributeIds) {
+                $product->attributes()->sync($attributeIds);
+            }
+
+            if ($hasImages) {
+                $this->syncProductImages($product, $images);
+            }
+
+            return $product->load(['attributes.options', 'attachments', 'brand', 'category']);
+        });
+    }
+
+    /**
+     * Delete a product.
+     */
+    public function delete(Product $product): void
+    {
+        DB::transaction(function () use ($product) {
+            foreach ($product->variants as $variant) {
+                $this->deleteVariantAttachments($variant);
+                $product->deleteVariant($variant);
+            }
+
+            // Delete product-level attachments from S3 and database
+            $existing = $product->attachments()->get();
+            $product->attachments()->detach();
+            foreach ($existing as $attachment) {
+                $this->attachmentService->delete($attachment);
+            }
+
+            $product->attributes()->detach();
+            $product->delete();
+        });
+    }
+
+    /**
+     * Create a product variant.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public function createVariant(Product $product, array $data): ProductVariant
+    {
+        return DB::transaction(function () use ($product, $data) {
+            $images = $data['images'] ?? [];
+            unset($data['images']);
+
+            // Determine if the variant being created is a placeholder one
+            $hasDefinitions = ! empty($data['definitions']);
+            $isPlaceholder = $data['is_placeholder'] ?? (! $hasDefinitions);
+            $data['is_placeholder'] = $isPlaceholder;
+
+            // Remove any existing placeholder variants
+            $defaultVariants = $product->variants()->where('is_placeholder', true)->get();
+            foreach ($defaultVariants as $defaultVariant) {
+                $this->deleteVariantAttachments($defaultVariant);
+                $product->deleteVariant($defaultVariant);
+            }
+
+            $variant = $product->createVariant($data);
+
+            if (! empty($images)) {
+                $this->syncVariantImages($variant, $images);
+            }
+
+            return $variant->load(['product', 'definitions.productAttribute.attribute.options', 'attachments']);
+        });
+    }
+
+    /**
+     * Update a product variant.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public function updateVariant(ProductVariant $variant, array $data): ProductVariant
+    {
+        return DB::transaction(function () use ($variant, $data) {
+            $hasImages = array_key_exists('images', $data);
+            $images = $data['images'] ?? [];
+            unset($data['images']);
+
+            /** @var Product $product */
+            $product = $variant->product;
+            $updatedVariant = $product->updateVariant($variant, $data);
+
+            if ($hasImages) {
+                $this->syncVariantImages($updatedVariant, $images);
+            }
+
+            return $updatedVariant->load(['product', 'definitions.productAttribute.attribute.options', 'attachments']);
+        });
+    }
+
+    /**
+     * Delete a product variant.
+     */
+    public function deleteVariant(ProductVariant $variant): void
+    {
+        DB::transaction(function () use ($variant) {
+            /** @var Product $product */
+            $product = $variant->product;
+            $this->deleteVariantAttachments($variant);
+            $product->deleteVariant($variant);
+
+            // Re-create a default variant with stock 0 if it has no variants left
+            if ($product->variants()->count() === 0) {
+                $product->createVariant([
+                    'stock' => 0,
+                    'is_placeholder' => true,
+                    'definitions' => [],
+                ]);
+            }
+        });
+    }
+
+    /**
+     * Create an attribute.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public static function createAttribute(Tenant $tenant, array $data): Attribute
+    {
+        return DB::transaction(function () use ($tenant, $data) {
+            return Product::createAttribute($tenant, $data);
+        });
+    }
+
+    /**
+     * Update an attribute.
+     *
+     * @param  array<string, mixed>  $data
+     */
+    public static function updateAttribute(Attribute $attribute, array $data): Attribute
+    {
+        return DB::transaction(function () use ($attribute, $data) {
+            return Product::updateAttribute($attribute, $data);
+        });
+    }
+
+    /**
+     * Upload a list of image files/base64 strings and sync them to a variant.
+     *
+     * When called on update, the existing attachments are detached first so the
+     * final set always matches exactly what was sent in the request.
+     *
+     * @param  array<int, UploadedFile|string>  $images
+     */
+    protected function syncVariantImages(ProductVariant $variant, array $images): void
+    {
+        $this->deleteVariantAttachments($variant);
+
+        $attachmentIds = [];
+
+        foreach ($images as $image) {
+            $attachment = $this->attachmentService->store($image, 'variants');
+            $attachmentIds[] = $attachment->id;
+        }
+
+        $variant->attachments()->sync($attachmentIds);
+    }
+
+    /**
+     * Upload a list of image files/base64 strings and sync them to a product.
+     *
+     * Same logic as syncVariantImages but for products without variants.
+     *
+     * @param  array<int, UploadedFile|string>  $images
+     */
+    protected function syncProductImages(Product $product, array $images): void
+    {
+        // Detach pivot record and delete attachment from S3 and database
+        $existing = $product->attachments()->get();
+        $product->attachments()->detach();
+        foreach ($existing as $attachment) {
+            $this->attachmentService->delete($attachment);
+        }
+
+        $attachmentIds = [];
+
+        foreach ($images as $image) {
+            $attachment = $this->attachmentService->store($image, 'products');
+            $attachmentIds[] = $attachment->id;
+        }
+
+        $product->attachments()->sync($attachmentIds);
+    }
+
+    protected function deleteVariantAttachments(ProductVariant $variant): void
+    {
+        $existing = $variant->attachments()->get();
+        $variant->attachments()->detach();
+
+        foreach ($existing as $attachment) {
+            $this->attachmentService->delete($attachment);
+        }
+    }
+
+    /**
+     * Delete an attribute.
+     */
+    public static function deleteAttribute(Attribute $attribute): void
+    {
+        DB::transaction(function () use ($attribute) {
+            Product::deleteAttribute($attribute);
+        });
+    }
+
+    /**
+     * Get products for a tenant with resolved first image (with fallback to first variant's first image).
+     */
+    public function getProductos(Tenant $tenant): LengthAwarePaginator
+    {
+        $products = Product::query()
+            ->where('tenant_codigo', $tenant->codigo)
+            ->with([
+                'attachments' => fn ($query) => $query->orderBy('attachments.id'),
+                'brand',
+                'category',
+                'variants.attachments' => fn ($query) => $query->orderBy('attachments.id'),
+            ])
+            ->latest()
+            ->paginateFromRequest();
+
+        foreach ($products as $product) {
+            $resolvedAttachment = null;
+            if ($product->attachments->isNotEmpty()) {
+                $resolvedAttachment = $product->attachments->first();
+            } else {
+                $firstVariant = $product->variants->sortBy('id')->first();
+                if ($firstVariant && $firstVariant->attachments->isNotEmpty()) {
+                    $resolvedAttachment = $firstVariant->attachments->first();
+                }
+            }
+
+            $product->setRelation('attachments', $resolvedAttachment ? collect([$resolvedAttachment]) : collect());
+            $product->unsetRelation('variants');
+        }
+
+        return $products;
+    }
+
+    public function getProductDetail(Tenant $tenant, Product $product, ?int $variantId = null): Product
+    {
+        $product->load([
+            'attachments' => fn ($query) => $query->orderBy('attachments.id'),
+            'attributes.options',
+            'brand',
+            'category',
+            'variants' => fn ($query) => $query->orderBy('id'),
+            'variants.definitions.productAttribute.attribute.options',
+        ]);
+
+        $this->filterProductDetailAttributeOptions($product);
+
+        $selectedVariant = $variantId !== null
+            ? $product->variants->firstWhere('id', $variantId)
+            : $product->variants->first(fn (ProductVariant $variant) => $variant->stock_tecnico > 0);
+
+        if ($variantId !== null && $selectedVariant === null) {
+            throw new NotFoundHttpException('Product variant not found for product.');
+        }
+
+        if ($variantId !== null && $selectedVariant->stock_tecnico <= 0) {
+            throw ValidationException::withMessages([
+                'variant_id' => 'La variante seleccionada no tiene stock.',
+            ]);
+        }
+
+        $selectedVariant ??= $product->variants->first();
+
+        if ($selectedVariant !== null) {
+            $selectedVariant->load([
+                'attachments' => fn ($query) => $query->orderBy('attachments.id'),
+            ]);
+            $selectedVariant->setRelation('fallbackAttachments', $product->attachments);
+            $product->setSelectedVariant($selectedVariant);
+        }
+
+        return $product;
+    }
+
+    protected function filterProductDetailAttributeOptions(Product $product): void
+    {
+        $availableValuesByAttributeId = [];
+
+        foreach ($product->variants as $variant) {
+            foreach ($variant->definitions as $definition) {
+                $attributeId = $definition->productAttribute?->attribute_id;
+
+                if ($attributeId === null || $definition->value === null) {
+                    continue;
+                }
+
+                $availableValuesByAttributeId[$attributeId][$definition->value] = true;
+            }
+        }
+
+        foreach ($product->attributes as $attribute) {
+            if (! $attribute->relationLoaded('options')) {
+                continue;
+            }
+
+            $availableValues = $availableValuesByAttributeId[$attribute->id] ?? [];
+
+            $attribute->setRelation(
+                'options',
+                $attribute->options
+                    ->filter(fn ($option): bool => array_key_exists($option->value, $availableValues))
+                    ->values()
+            );
+        }
+    }
 }

app/Domains/Catalog/routes/api.php

@@ -3,8 +3,18 @@
 use App\Domains\Catalog\Controllers\BrandController;
 use App\Domains\Catalog\Controllers\CategoryController;
 use App\Domains\Catalog\Controllers\ProductController;
+use App\Domains\Catalog\Controllers\AttributeController;
+use App\Domains\Catalog\Controllers\ProductVariantController;
 use Illuminate\Support\Facades\Route;
 
+Route::prefix('tenants/{tenant:codigo}')->group(function (): void {
     Route::apiResource('marcas', BrandController::class)->parameters(['marcas' => 'marca']);
     Route::apiResource('categorias', CategoryController::class)->parameters(['categorias' => 'categoria']);
     Route::apiResource('productos', ProductController::class);
+    Route::apiResource('attributes', AttributeController::class);
+    Route::apiResource('productos.variants', ProductVariantController::class)
+        ->parameters([
+            'productos' => 'producto',
+            'variants' => 'productVariant',
+        ]);
+});

app/Domains/Integration/Casts/EncryptedIntegrationData.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Domains\Integration\Casts;
+
+use Illuminate\Contracts\Database\Eloquent\CastsAttributes;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Encryption\Encrypter;
+use Exception;
+
+class EncryptedIntegrationData implements CastsAttributes
+{
+    protected function getEncrypter(): Encrypter
+    {
+        $secret = config('services.integrations.secret');
+        
+        if (empty($secret)) {
+            throw new Exception('The integrations secret is not configured.');
+        }
+
+        // Laravel encrypter requires a key of exact length. Typically 32 bytes for AES-256-CBC.
+        // If the secret is base64 encoded like the APP_KEY:
+        if (str_starts_with($secret, 'base64:')) {
+            $key = base64_decode(substr($secret, 7));
+        } else {
+            // Otherwise, we hash it to ensure 32 bytes for AES-256-CBC.
+            $key = hash('sha256', $secret, true);
+        }
+        
+        return new Encrypter($key, config('app.cipher', 'AES-256-CBC'));
+    }
+
+    /**
+     * Cast the given value.
+     *
+     * @param  array<string, mixed>  $attributes
+     */
+    public function get(Model $model, string $key, mixed $value, array $attributes): mixed
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        try {
+            $decrypted = $this->getEncrypter()->decryptString($value);
+            return json_decode($decrypted, true);
+        } catch (Exception $e) {
+            // Return null or throw depending on how strict we want to be.
+            return null;
+        }
+    }
+
+    /**
+     * Prepare the given value for storage.
+     *
+     * @param  array<string, mixed>  $attributes
+     */
+    public function set(Model $model, string $key, mixed $value, array $attributes): mixed
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        $json = json_encode($value);
+        return $this->getEncrypter()->encryptString($json);
+    }
+}

app/Domains/Integration/Controllers/IntegrationController.php

@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Domains\Integration\Controllers;
+
+use App\Domains\Integration\Models\Integration;
+use App\Domains\Integration\Requests\StoreIntegrationRequest;
+use App\Domains\Integration\Requests\UpdateIntegrationRequest;
+use Illuminate\Routing\Controller;
+
+class IntegrationController extends Controller
+{
+    public function index()
+    {
+        return response()->json(Integration::all());
+    }
+
+    public function store(StoreIntegrationRequest $request)
+    {
+        $integration = Integration::create($request->validated());
+
+        return response()->json($integration, 201);
+    }
+
+    public function show(Integration $integration)
+    {
+        return response()->json($integration);
+    }
+
+    public function update(UpdateIntegrationRequest $request, Integration $integration)
+    {
+        $integration->update($request->validated());
+
+        return response()->json($integration->fresh());
+    }
+
+    public function destroy(Integration $integration)
+    {
+        $integration->delete();
+
+        return response()->noContent();
+    }
+}

app/Domains/Integration/Controllers/TelepagosWebhookController.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Domains\Integration\Controllers;
+
+use App\Domains\Integration\Requests\TelepagosWebhookRequest;
+use App\Domains\Integration\Services\TelepagosWebhookService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TelepagosWebhookController extends Controller
+{
+    /**
+     * Handle the incoming Telepagos webhook.
+     *
+     * @param TelepagosWebhookRequest $request
+     * @param string $tenantCodigo
+     * @param TelepagosWebhookService $service
+     * @return JsonResponse
+     */
+    public function handle(TelepagosWebhookRequest $request, string $tenantCodigo, TelepagosWebhookService $service): JsonResponse
+    {
+        try {
+            $cashinId = $request->validated('id');
+            
+            $service->handleWebhook($tenantCodigo, $cashinId);
+            
+            return response()->json(['status' => 'success']);
+        } catch (\Exception $e) {
+            return response()->json(['status' => 'error', 'message' => $e->getMessage()], 500);
+        }
+    }
+}

app/Domains/Integration/Controllers/TenantIntegrationController.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Domains\Integration\Controllers;
+
+use App\Domains\Integration\Models\Integration;
+use App\Domains\Integration\Requests\StoreTenantIntegrationRequest;
+use App\Domains\Integration\Services\TenantIntegrationService;
+use Illuminate\Routing\Controller;
+
+class TenantIntegrationController extends Controller
+{
+    protected TenantIntegrationService $tenantIntegrationService;
+
+    public function __construct(TenantIntegrationService $tenantIntegrationService)
+    {
+        $this->tenantIntegrationService = $tenantIntegrationService;
+    }
+
+    public function index(string $tenantCode)
+    {
+        return response()->json($this->tenantIntegrationService->getAllForTenant($tenantCode));
+    }
+
+    public function show(string $tenantCode, string $integrationCode)
+    {
+        $integration = $this->tenantIntegrationService->getTenantIntegration($tenantCode, $integrationCode);
+        
+        if (!$integration) {
+            return response()->json(['message' => 'Integration not configured for this tenant'], 404);
+        }
+
+        return response()->json($integration);
+    }
+
+    public function store(StoreTenantIntegrationRequest $request, string $tenantCode, string $integrationCode)
+    {
+        $integration = Integration::where('integration_code', $integrationCode)->firstOrFail();
+        
+        try {
+            $tenantIntegration = $this->tenantIntegrationService->updateOrCreateIntegration(
+                $tenantCode,
+                $integration,
+                $request->input('integration_data', [])
+            );
+
+            return response()->json($tenantIntegration);
+        } catch (\Exception $e) {
+            return response()->json([
+                'message' => 'Error validando la configuración: ' . $e->getMessage()
+            ], 400);
+        }
+    }
+}

app/Domains/Integration/Models/Integration.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Integration\Models;
+
+use Illuminate\Database\Eloquent\Model;
+
+class Integration extends Model
+{
+    protected $table = 'integrations';
+
+    protected $fillable = [
+        'integration_code',
+        'name',
+        'url',
+        'integration_data_schema',
+    ];
+
+    protected $casts = [
+        'integration_data_schema' => 'array',
+    ];
+    
+    public function tenantIntegrations()
+    {
+        return $this->hasMany(TenantIntegration::class, 'integration_code', 'integration_code');
+    }
+}

app/Domains/Integration/Models/TenantIntegration.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Integration\Models;
+
+use App\Domains\Integration\Casts\EncryptedIntegrationData;
+use Illuminate\Database\Eloquent\Model;
+
+class TenantIntegration extends Model
+{
+    protected $table = 'tenant_integration';
+
+    protected $fillable = [
+        'integration_code',
+        'tenant_code',
+        'integration_data',
+    ];
+
+    protected $casts = [
+        'integration_data' => EncryptedIntegrationData::class,
+    ];
+
+    public function integration()
+    {
+        return $this->belongsTo(Integration::class, 'integration_code', 'integration_code');
+    }
+}

app/Domains/Integration/Requests/StoreIntegrationRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Integration\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StoreIntegrationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'integration_code' => ['required', 'string', 'unique:integrations,integration_code'],
+            'name' => ['required', 'string', 'max:255'],
+            'url' => ['nullable', 'url', 'max:255'],
+            'integration_data_schema' => ['nullable', 'array'],
+        ];
+    }
+}

app/Domains/Integration/Requests/StoreTenantIntegrationRequest.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Domains\Integration\Requests;
+
+use App\Domains\Integration\Models\Integration;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\ValidationException;
+
+class StoreTenantIntegrationRequest extends FormRequest
+{
+    protected ?Integration $integrationModel = null;
+
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    protected function prepareForValidation()
+    {
+        $integrationCode = $this->route('integration_code');
+        $this->integrationModel = Integration::where('integration_code', $integrationCode)->first();
+
+        if (!$this->integrationModel) {
+            throw ValidationException::withMessages([
+                'integration_code' => 'Integration not found.'
+            ]);
+        }
+    }
+
+    public function rules(): array
+    {
+        $rules = [];
+
+        // Dynamic validation rules based on the integration data schema
+        if ($this->integrationModel && $this->integrationModel->integration_data_schema) {
+            foreach ($this->integrationModel->integration_data_schema as $field => $rule) {
+                $rules['integration_data.' . $field] = $rule;
+            }
+        }
+
+        return $rules;
+    }
+}

app/Domains/Integration/Requests/TelepagosWebhookRequest.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Domains\Integration\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class TelepagosWebhookRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'id' => ['required', 'string'],
+        ];
+    }
+}

app/Domains/Integration/Requests/UpdateIntegrationRequest.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Integration\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateIntegrationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $integration = $this->route('integration');
+        
+        return [
+            'name' => ['sometimes', 'required', 'string', 'max:255'],
+            'url' => ['nullable', 'url', 'max:255'],
+            'integration_data_schema' => ['nullable', 'array'],
+            // the code shouldn't ideally be updatable, but if it is:
+            'integration_code' => ['sometimes', 'required', 'string', 'unique:integrations,integration_code,' . ($integration->id ?? '')],
+        ];
+    }
+}

app/Domains/Integration/Services/BaseIntegrationService.php

@@ -0,0 +1,167 @@
+<?php
+
+namespace App\Domains\Integration\Services;
+
+use App\Domains\Integration\Models\Integration;
+use App\Domains\Integration\Models\TenantIntegration;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Http\Client\PendingRequest;
+use Exception;
+
+abstract class BaseIntegrationService
+{
+    /**
+     * The unique code of the integration.
+     *
+     * @var string
+     */
+    protected string $integrationCode;
+
+    /**
+     * The current tenant code.
+     *
+     * @var string
+     */
+    protected string $tenantCode;
+
+    /**
+     * The integration model instance.
+     *
+     * @var Integration|null
+     */
+    protected ?Integration $integration = null;
+
+    /**
+     * The tenant-specific integration model instance.
+     *
+     * @var TenantIntegration|null
+     */
+    protected ?TenantIntegration $tenantIntegration = null;
+
+    /**
+     * Set the integration code.
+     *
+     * @param string $integrationCode
+     * @return $this
+     */
+    public function setIntegrationCode(string $integrationCode): self
+    {
+        $this->integrationCode = $integrationCode;
+        return $this;
+    }
+
+    /**
+     * Get the integration code.
+     *
+     * @return string
+     */
+    public function getIntegrationCode(): string
+    {
+        return $this->integrationCode;
+    }
+
+    /**
+     * Set the tenant code and load the integration models.
+     *
+     * @param string $tenantCode
+     * @return $this
+     * @throws Exception
+     */
+    public function forTenant(string $tenantCode): self
+    {
+        $this->tenantCode = $tenantCode;
+        $this->loadIntegration();
+        return $this;
+    }
+
+    /**
+     * Load the Integration and TenantIntegration models.
+     *
+     * @throws Exception
+     */
+    protected function loadIntegration(): void
+    {
+        if (empty($this->integrationCode)) {
+            throw new Exception("Integration code is not set.");
+        }
+
+        $this->integration = Integration::where('integration_code', $this->integrationCode)->first();
+        if (!$this->integration) {
+            throw new Exception("Integration with code '{$this->integrationCode}' not found.");
+        }
+
+        $this->tenantIntegration = TenantIntegration::where('tenant_code', $this->tenantCode)
+            ->where('integration_code', $this->integrationCode)
+            ->first();
+
+        if (!$this->tenantIntegration) {
+            throw new Exception("Tenant '{$this->tenantCode}' does not have integration '{$this->integrationCode}' configured.");
+        }
+    }
+
+    /**
+     * Build the request URL.
+     *
+     * @param string $path
+     * @return string
+     * @throws Exception
+     */
+    public function getUrl(string $path = ''): string
+    {
+        if (!$this->integration) {
+            throw new Exception("Integration is not loaded. Call forTenant() first.");
+        }
+
+        $baseUrl = rtrim($this->integration->url, '/');
+        $path = ltrim($path, '/');
+
+        return $path !== '' ? "{$baseUrl}/{$path}" : $baseUrl;
+    }
+
+    /**
+     * Get integration setting by key from tenant's integration data.
+     *
+     * @param string $key
+     * @param mixed $default
+     * @return mixed
+     */
+    protected function getIntegrationSetting(string $key, mixed $default = null): mixed
+    {
+        if (!$this->tenantIntegration || !$this->tenantIntegration->integration_data) {
+            return $default;
+        }
+
+        return $this->tenantIntegration->integration_data[$key] ?? $default;
+    }
+
+    /**
+     * Get a pre-configured HTTP client builder.
+     *
+     * @return PendingRequest
+     * @throws Exception
+     */
+    public function client(): PendingRequest
+    {
+        return Http::baseUrl($this->getUrl())
+            ->withHeaders($this->getHeaders());
+    }
+
+    /**
+     * Get the headers for the integration.
+     *
+     * @return array
+     */
+    abstract public function getHeaders(): array;
+
+    /**
+     * Hook called after the integration is configured for the tenant.
+     * Can be used to validate credentials or perform initial setups.
+     * Throw an Exception on failure.
+     *
+     * @return void
+     */
+    public function onSetup(): void
+    {
+        // Override in child classes if needed
+    }
+}

app/Domains/Integration/Services/TelepagosIntegrationService.php

@@ -0,0 +1,228 @@
+<?php
+
+namespace App\Domains\Integration\Services;
+
+use Exception;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+use Carbon\Carbon;
+
+class TelepagosIntegrationService extends BaseIntegrationService
+{
+    /**
+     * TelepagosIntegrationService constructor.
+     *
+     * @param string $integrationCode
+     */
+    public function __construct(string $integrationCode = 'telepagos')
+    {
+        // Force homologation code if not in production and using default
+        if ($integrationCode === 'telepagos' && !app()->environment('production')) {
+            $integrationCode = 'telepagos_homo';
+        }
+        
+        $this->integrationCode = $integrationCode;
+    }
+
+    /**
+     * Get the headers for Telepagos integration.
+     *
+     * @return array
+     * @throws Exception
+     */
+    public function getHeaders(): array
+    {
+        return [
+            'Authorization' => 'Bearer ' . $this->getToken(),
+            'Content-Type' => 'application/json',
+            'Accept' => 'application/json',
+        ];
+    }
+
+    /**
+     * Get a valid token, either from cache or by performing a login.
+     *
+     * @return string
+     * @throws Exception
+     */
+    public function getToken(): string
+    {
+        if (!$this->tenantIntegration) {
+            throw new Exception("Tenant integration is not loaded. Call forTenant() first.");
+        }
+
+        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+
+        $token = Cache::get($cacheKey);
+
+        if ($token) {
+            return $token;
+        }
+
+        return $this->login();
+    }
+
+    /**
+     * Authenticate with Telepagos and cache the returned token.
+     *
+     * @return string
+     * @throws Exception
+     */
+    public function login(): string
+    {
+        $username = $this->getIntegrationSetting('username');
+        $password = $this->getIntegrationSetting('password');
+
+        if (empty($username) || empty($password)) {
+            throw new Exception("Missing username or password in Telepagos integration settings.");
+        }
+
+        $url = $this->getUrl('/v2/auth/token');
+
+        $response = Http::post($url, [
+            'username' => $username,
+            'password' => $password,
+        ]);
+
+        $data = $this->handleResponse($response, 'authentication', [
+            'username' => $username,
+        ]);
+
+        $token = $data['token'] ?? null;
+        $expiresAtStr = $data['expires_at'] ?? null;
+
+        if (!$token || !$expiresAtStr) {
+            throw new Exception("Telepagos authentication response is missing token or expires_at.");
+        }
+
+        $expiresAt = Carbon::parse($expiresAtStr);
+        // Calculate TTL and subtract a buffer of 60 seconds
+        $ttlSeconds = max(1, $expiresAt->diffInSeconds(now()) - 60);
+
+        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+        Cache::put($cacheKey, $token, $ttlSeconds);
+
+        return $token;
+    }
+
+    /**
+     * Send a request to Telepagos, handling 401 Unauthorized for token refresh.
+     *
+     * @param string $method
+     * @param string $endpoint
+     * @param array $data
+     * @return \Illuminate\Http\Client\Response
+     */
+    protected function sendRequest(string $method, string $endpoint, array $data = []): \Illuminate\Http\Client\Response
+    {
+        $response = $this->client()->$method($endpoint, $data);
+
+        if ($response->status() === 401) {
+            Log::info("Telepagos 401 Unauthorized. Refreshing token and retrying...");
+            
+            $this->clearToken();
+            
+            $response = $this->client()->$method($endpoint, $data);
+        }
+
+        return $response;
+    }
+
+    /**
+     * Generate a QR code for cash-in.
+     *
+     * @param float $amount
+     * @param string $concept
+     * @param string $description
+     * @return array
+     * @throws Exception
+     */
+    public function generateQr(float $amount, string $concept, string $description): array
+    {
+        $payload = [
+            'amount' => $amount,
+            'concept' => $concept,
+            'description' => $description,
+        ];
+
+        $response = $this->sendRequest('post', '/v2/payment/cashin/qr/generate', $payload);
+
+        return $this->handleResponse($response, 'QR generation', $payload);
+    }
+
+    /**
+     * Get the details of a cash-in payment.
+     *
+     * @param int $cashinId
+     * @return array
+     * @throws Exception
+     */
+    public function getCashinDetails(string $cashinId): array
+    {
+        $response = $this->sendRequest('get', "/v2/payment/cashin/{$cashinId}");
+
+        return $this->handleResponse($response, 'get cash-in details', [
+            'cashin_id' => $cashinId,
+        ]);
+    }
+
+    /**
+     * Get the account info.
+     *
+     * @return array
+     * @throws Exception
+     */
+    public function getAccountInfo(): array
+    {
+        $response = $this->sendRequest('get', '/v2/account/info');
+        return $this->handleResponse($response, 'get account info');
+    }
+
+    /**
+     * Handle the Telepagos API response, logging any failures and throwing Exceptions.
+     *
+     * @param \Illuminate\Http\Client\Response $response
+     * @param string $actionDescription
+     * @param array $context
+     * @return array
+     * @throws Exception
+     */
+    protected function handleResponse(\Illuminate\Http\Client\Response $response, string $actionDescription, array $context = []): array
+    {
+        if ($response->failed() || $response->json('status') !== 'ok') {
+            $errorMessage = $response->json('message') ?? $response->body();
+            Log::error("Telepagos {$actionDescription} failed: {$errorMessage}", array_merge([
+                'response_status' => $response->status(),
+                'response_body' => $response->json() ?? $response->body(),
+            ], $context));
+
+            throw new Exception("Telepagos {$actionDescription} failed: {$errorMessage}");
+        }
+
+        return $response->json() ?? [];
+    }
+
+    /**
+     * Clear the cached token.
+     *
+     * @return void
+     */
+    public function clearToken(): void
+    {
+        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+        Cache::forget($cacheKey);
+    }
+
+    /**
+     * Perform initial setup validation for Telepagos.
+     *
+     * @return void
+     * @throws Exception
+     */
+    public function onSetup(): void
+    {
+        // Realiza un login de prueba para validar que las credenciales son correctas.
+        $this->login();
+    }
+}

app/Domains/Integration/Services/TelepagosWebhookService.php

@@ -0,0 +1,134 @@
+<?php
+
+namespace App\Domains\Integration\Services;
+
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Purchase\Models\TelepagosPayment;
+use App\Domains\Purchase\Models\TelepagosQr;
+use App\Domains\Purchase\Services\CheckoutService;
+use App\Domains\Tenant\Models\Tenant;
+use Exception;
+use Illuminate\Support\Facades\Log;
+
+class TelepagosWebhookService
+{
+    public function __construct(
+        private readonly CheckoutService $checkoutService,
+    ) {}
+
+    /**
+     * Handle the Telepagos webhook notification.
+     *
+     * @param string $tenantCodigo
+     * @param string $cashinId
+     * @return void
+     * @throws Exception
+     */
+    public function handleWebhook(string $tenantCodigo, string $cashinId): void
+    {
+        $tenant = Tenant::where('codigo', $tenantCodigo)->firstOrFail();
+
+        $telepagosService = new TelepagosIntegrationService();
+        $telepagosService->forTenant($tenant->codigo);
+
+        try {
+            $details = $telepagosService->getCashinDetails($cashinId);
+
+            $qrOrderId = $details['data']['qr_order_id'] ?? $details['qr_order_id'] ?? null;
+            $amount = $this->normalizeAmount($details['data']['amount'] ?? $details['amount'] ?? 0);
+            $operationId = $details['data']['operation_id'] ?? $details['operation_id'] ?? null;
+
+            $transferenciaOperationIds = [1, 3, 11];
+            $qrOperationIds = [31, 37, 47];
+
+            $compra = null;
+
+            if (in_array((int) $operationId, $transferenciaOperationIds, true)) {
+                $cuit = $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null;
+
+                if (! $cuit) {
+                    Log::warning("Telepagos webhook: CUIT not found for Transferencia cashin {$cashinId}");
+                    return;
+                }
+
+                $dni = substr($cuit, 2, -1);
+
+                $compra = Purchase::where('tenant_codigo', $tenantCodigo)
+                    ->whereRaw("REPLACE(dni, '.', '') = ?", [$dni])
+                    ->whereIn('status', [Purchase::STATUS_CREATED, Purchase::STATUS_PENDING_PAYMENT])
+                    ->where('payment_method', 'transfer')
+                    ->where('total', $amount)
+                    ->latest()
+                    ->first();
+
+                if (! $compra) {
+                    Log::warning("Telepagos webhook: No matching purchase found for DNI {$dni} and amount {$amount} for cashin {$cashinId}");
+                    return;
+                }
+            } elseif (in_array((int) $operationId, $qrOperationIds, true)) {
+                if (! $qrOrderId) {
+                    Log::warning("Telepagos webhook: qr_order_id not found for QR cashin {$cashinId}");
+                    return;
+                }
+
+                $telepagosQr = TelepagosQr::where('qr_order_id', $qrOrderId)->first();
+
+                if (! $telepagosQr) {
+                    Log::warning("Telepagos webhook: QR {$qrOrderId} not found in database for cashin {$cashinId}");
+                    return;
+                }
+
+                $compra = $telepagosQr->compra;
+
+                if (! $compra) {
+                    Log::warning("Telepagos webhook: Purchase not found for QR {$qrOrderId}");
+                    return;
+                }
+
+                if ($compra->status !== Purchase::STATUS_PENDING_PAYMENT) {
+                    Log::warning("Telepagos webhook: Purchase {$compra->id} is not awaiting payment confirmation");
+                    return;
+                }
+
+                $totalAmount = $this->normalizeAmount($compra->getTotalAmount());
+
+                if ($amount !== $totalAmount) {
+                    Log::warning("Telepagos webhook: Amount mismatch. Cashin amount: {$amount}, Purchase amount: {$totalAmount}");
+                    return;
+                }
+            } else {
+                Log::warning("Telepagos webhook: Unknown operation_id {$operationId} for cashin {$cashinId}");
+                return;
+            }
+
+            $paymentData = [
+                'compra_id' => $compra->id,
+                'cuit_buyer' => $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null,
+                'cvu_buyer' => $details['data']['buyer']['cvu'] ?? $details['buyer']['cvu'] ?? null,
+                'amount' => $amount,
+                'concept' => $details['data']['concept'] ?? $details['concept'] ?? null,
+                'operation' => $details['data']['operation'] ?? $details['operation'] ?? null,
+                'operation_id' => $details['data']['operation_id'] ?? $details['operation_id'] ?? null,
+                'transaction_id' => $details['data']['transaction_id'] ?? $details['transaction_id'] ?? null,
+                'qr_order_id' => $qrOrderId,
+                'link_id' => $details['data']['link_id'] ?? $details['link_id'] ?? null,
+            ];
+
+            \Illuminate\Support\Facades\DB::transaction(function () use ($compra, $paymentData) {
+                TelepagosPayment::create($paymentData);
+                $this->checkoutService->confirmPurchase($compra);
+                $compra->markAsPaid();
+            });
+
+            Log::info("Telepagos webhook: Successfully processed cashin {$cashinId} for purchase {$compra->id}");
+        } catch (Exception $e) {
+            Log::error("Telepagos webhook error: " . $e->getMessage());
+            throw $e;
+        }
+    }
+
+    protected function normalizeAmount(mixed $amount): string
+    {
+        return number_format((float) $amount, 2, '.', '');
+    }
+}

app/Domains/Integration/Services/TenantIntegrationService.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Domains\Integration\Services;
+
+use App\Domains\Integration\Models\Integration;
+use App\Domains\Integration\Models\TenantIntegration;
+use Illuminate\Support\Facades\DB;
+
+class TenantIntegrationService
+{
+    public function getTenantIntegration(string $tenantCode, string $integrationCode): ?TenantIntegration
+    {
+        return TenantIntegration::where('tenant_code', $tenantCode)
+            ->where('integration_code', $integrationCode)
+            ->first();
+    }
+
+    public function getAllForTenant(string $tenantCode)
+    {
+        return TenantIntegration::with('integration')
+            ->where('tenant_code', $tenantCode)
+            ->get();
+    }
+
+    public function updateOrCreateIntegration(string $tenantCode, Integration $integration, array $data): TenantIntegration
+    {
+        return DB::transaction(function () use ($tenantCode, $integration, $data) {
+            $tenantIntegration = TenantIntegration::updateOrCreate(
+                [
+                    'tenant_code' => $tenantCode,
+                    'integration_code' => $integration->integration_code,
+                ],
+                [
+                    'integration_data' => $data,
+                ]
+            );
+
+            $service = $this->resolveService($integration->integration_code);
+            if ($service) {
+                $service->forTenant($tenantCode)->onSetup();
+            }
+
+            return $tenantIntegration;
+        });
+    }
+
+    protected function resolveService(string $integrationCode): ?BaseIntegrationService
+    {
+        switch ($integrationCode) {
+            case 'telepagos':
+            case 'telepagos_homo':
+                return new TelepagosIntegrationService($integrationCode);
+            default:
+                return null;
+        }
+    }
+}

app/Domains/Integration/routes/api.php

@@ -0,0 +1,21 @@
+<?php
+
+use App\Domains\Integration\Controllers\IntegrationController;
+use App\Domains\Integration\Controllers\TenantIntegrationController;
+use Illuminate\Support\Facades\Route;
+
+Route::group(['prefix' => 'integrations'], function () {
+    Route::get('/', [IntegrationController::class, 'index']);
+    Route::post('/', [IntegrationController::class, 'store']);
+    Route::get('/{integration}', [IntegrationController::class, 'show']);
+    Route::put('/{integration}', [IntegrationController::class, 'update']);
+    Route::delete('/{integration}', [IntegrationController::class, 'destroy']);
+});
+
+Route::group(['prefix' => '{tenant_code}/integrations'], function () {
+    Route::get('/', [TenantIntegrationController::class, 'index']);
+    Route::get('/{integration_code}', [TenantIntegrationController::class, 'show']);
+    Route::post('/{integration_code}', [TenantIntegrationController::class, 'store']);
+});
+
+Route::post('webhooks/telepagos/{tenant_codigo}', [\App\Domains\Integration\Controllers\TelepagosWebhookController::class, 'handle']);

app/Domains/Prop/Concerns/Propable.php

@@ -1,138 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Concerns;
-
-use App\Domains\Prop\Models\ModelPropValue;
-use App\Domains\Prop\Models\Prop;
-use Illuminate\Database\Eloquent\Builder;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\HasMany;
-use Illuminate\Support\Facades\DB;
-use LogicException;
-
-trait Propable
-{
-    /**
-     * @param  array<string, mixed>  $attributes
-     * @param  array<string, mixed>  $props
-     * @return static
-     */
-    public static function createWithProps(array $attributes, array $props = []): static
-    {
-        /** @var static $model */
-        $model = DB::transaction(function () use ($attributes, $props): Model {
-            /** @var static $createdModel */
-            $createdModel = static::query()->create($attributes);
-            $createdModel->syncPropValues($props);
-
-            return $createdModel;
-        });
-
-        return $model;
-    }
-
-    /**
-     * @param  array<string, mixed>  $attributes
-     */
-    public static function createProp(array $attributes): Prop
-    {
-        return Prop::query()->create([
-            ...$attributes,
-            'propable_type' => static::class,
-        ]);
-    }
-
-    /**
-     * @return Builder<Prop>
-     */
-    public function props(): Builder
-    {
-        return Prop::query()->forModel(static::class);
-    }
-
-    /**
-     * @return HasMany<ModelPropValue, $this>
-     */
-    public function propValues(): HasMany
-    {
-        return $this->hasMany(ModelPropValue::class, 'valuable_id')
-            ->whereHas('prop', fn (Builder $query) => $query->forModel(static::class));
-    }
-
-    public function getPropValue(Prop|string $prop): ?ModelPropValue
-    {
-        $resolvedProp = $this->resolveProp($prop);
-
-        return $this->propValues()
-            ->where('prop_id', $resolvedProp->getKey())
-            ->first();
-    }
-
-    public function setPropValue(Prop|string $prop, mixed $value): ModelPropValue
-    {
-        $this->ensurePropValuesCanBeManaged();
-
-        $resolvedProp = $this->resolveProp($prop);
-
-        return $this->propValues()->updateOrCreate(
-            ['prop_id' => $resolvedProp->getKey()],
-            ['value' => $value],
-        );
-    }
-
-    /**
-     * @param  array<string, mixed>  $props
-     */
-    public function syncPropValues(array $props): void
-    {
-        foreach ($props as $codigo => $value) {
-            $this->setPropValue($codigo, $value);
-        }
-    }
-
-    /**
-     * @param  array<string, mixed>  $attributes
-     * @param  array<string, mixed>  $props
-     */
-    public function updateWithProps(array $attributes, array $props = []): static
-    {
-        DB::transaction(function () use ($attributes, $props): void {
-            $this->update($attributes);
-            $this->syncPropValues($props);
-        });
-
-        return $this;
-    }
-
-    public function deletePropValue(Prop|string $prop): bool
-    {
-        $resolvedProp = $this->resolveProp($prop);
-
-        return $this->propValues()
-            ->where('prop_id', $resolvedProp->getKey())
-            ->delete() > 0;
-    }
-
-    protected function ensurePropValuesCanBeManaged(): void
-    {
-        if (! $this->exists) {
-            throw new LogicException('Cannot manage prop values for an unsaved model.');
-        }
-    }
-
-    protected function resolveProp(Prop|string $prop): Prop
-    {
-        if ($prop instanceof Prop) {
-            if ($prop->propable_type !== static::class) {
-                throw new LogicException('The given prop does not belong to this model type.');
-            }
-
-            return $prop;
-        }
-
-        return Prop::query()
-            ->forModel(static::class)
-            ->where('codigo', $prop)
-            ->firstOrFail();
-    }
-}

app/Domains/Prop/Controllers/PropController.php

@@ -1,70 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Controllers;
-
-use App\Domains\Prop\Models\Prop;
-use App\Domains\Prop\Requests\StorePropRequest;
-use App\Domains\Prop\Requests\UpdatePropRequest;
-use App\Domains\Prop\Resources\PropResource;
-use App\Domains\Prop\Support\PropableModels;
-use App\Http\Controllers\Controller;
-use Illuminate\Http\JsonResponse;
-use Illuminate\Http\Response;
-use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
-
-class PropController extends Controller
-{
-    public function index(string $propableType): JsonResponse
-    {
-        $modelClass = PropableModels::resolveOrFail($propableType);
-
-        return PropResource::collection(
-            Prop::query()->forModel($modelClass)->latest()->get()
-        )->response();
-    }
-
-    public function store(StorePropRequest $request, string $propableType): JsonResponse
-    {
-        $modelClass = PropableModels::resolveOrFail($propableType);
-
-        /** @var Prop $prop */
-        $prop = $modelClass::createProp($request->validated());
-
-        return PropResource::make($prop)->response()->setStatusCode(201);
-    }
-
-    public function show(string $propableType, Prop $prop): PropResource
-    {
-        $modelClass = PropableModels::resolveOrFail($propableType);
-        $prop = $this->resolveScopedProp($prop, $modelClass);
-
-        return PropResource::make($prop);
-    }
-
-    public function update(UpdatePropRequest $request, string $propableType, Prop $prop): PropResource
-    {
-        $modelClass = PropableModels::resolveOrFail($propableType);
-        $prop = $this->resolveScopedProp($prop, $modelClass);
-        $prop->update($request->validated());
-
-        return PropResource::make($prop);
-    }
-
-    public function destroy(string $propableType, Prop $prop): Response
-    {
-        $modelClass = PropableModels::resolveOrFail($propableType);
-        $prop = $this->resolveScopedProp($prop, $modelClass);
-        $prop->delete();
-
-        return response()->noContent();
-    }
-
-    protected function resolveScopedProp(Prop $prop, string $modelClass): Prop
-    {
-        if ($prop->propable_type !== $modelClass) {
-            throw new NotFoundHttpException('Prop not found for the given model type.');
-        }
-
-        return $prop;
-    }
-}

app/Domains/Prop/Models/ModelPropValue.php

@@ -1,28 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Models;
-
-use Illuminate\Database\Eloquent\Attributes\Fillable;
-use Illuminate\Database\Eloquent\Factories\HasFactory;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\BelongsTo;
-
-#[Fillable([
-    'valuable_id',
-    'prop_id',
-    'value',
-])]
-class ModelPropValue extends Model
-{
-    use HasFactory;
-
-    protected $table = 'model_prop_values';
-
-    /**
-     * @return BelongsTo<Prop, $this>
-     */
-    public function prop(): BelongsTo
-    {
-        return $this->belongsTo(Prop::class, 'prop_id');
-    }
-}

app/Domains/Prop/Models/Prop.php

@@ -1,57 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Models;
-
-use App\Domains\Prop\Support\PropDataType;
-use Illuminate\Database\Eloquent\Attributes\Fillable;
-use Illuminate\Database\Eloquent\Builder;
-use Illuminate\Database\Eloquent\Factories\HasFactory;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\HasMany;
-
-#[Fillable([
-    'propable_type',
-    'codigo',
-    'nombre',
-    'is_required',
-    'data_type',
-])]
-class Prop extends Model
-{
-    use HasFactory;
-
-    /**
-     * @return array<string, string>
-     */
-    protected function casts(): array
-    {
-        return [
-            'is_required' => 'boolean',
-            'data_type' => PropDataType::class,
-        ];
-    }
-
-    /**
-     * @param  Builder<self>  $query
-     */
-    public function scopeForModel(Builder $query, Model|string $model): void
-    {
-        $query->where('propable_type', is_string($model) ? $model : $model::class);
-    }
-
-    /**
-     * @return HasMany<PropOption, $this>
-     */
-    public function options(): HasMany
-    {
-        return $this->hasMany(PropOption::class);
-    }
-
-    /**
-     * @return HasMany<ModelPropValue, $this>
-     */
-    public function modelValues(): HasMany
-    {
-        return $this->hasMany(ModelPropValue::class, 'prop_id');
-    }
-}

app/Domains/Prop/Models/PropOption.php

@@ -1,27 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Models;
-
-use Illuminate\Database\Eloquent\Attributes\Fillable;
-use Illuminate\Database\Eloquent\Factories\HasFactory;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Database\Eloquent\Relations\BelongsTo;
-
-#[Fillable([
-    'prop_id',
-    'value',
-    'label',
-    'sort_order',
-])]
-class PropOption extends Model
-{
-    use HasFactory;
-
-    /**
-     * @return BelongsTo<Prop, $this>
-     */
-    public function prop(): BelongsTo
-    {
-        return $this->belongsTo(Prop::class);
-    }
-}

app/Domains/Prop/Requests/StorePropRequest.php

@@ -1,28 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Requests;
-
-use App\Domains\Prop\Support\PropDataType;
-use Illuminate\Foundation\Http\FormRequest;
-use Illuminate\Validation\Rule;
-
-class StorePropRequest extends FormRequest
-{
-    public function authorize(): bool
-    {
-        return true;
-    }
-
-    /**
-     * @return array<string, mixed>
-     */
-    public function rules(): array
-    {
-        return [
-            'codigo' => ['required', 'string', 'max:255', Rule::unique('props', 'codigo')],
-            'nombre' => ['required', 'string', 'max:255'],
-            'is_required' => ['sometimes', 'boolean'],
-            'data_type' => ['required', Rule::enum(PropDataType::class)],
-        ];
-    }
-}

app/Domains/Prop/Requests/UpdatePropRequest.php

@@ -1,32 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Requests;
-
-use App\Domains\Prop\Models\Prop;
-use App\Domains\Prop\Support\PropDataType;
-use Illuminate\Foundation\Http\FormRequest;
-use Illuminate\Validation\Rule;
-
-class UpdatePropRequest extends FormRequest
-{
-    public function authorize(): bool
-    {
-        return true;
-    }
-
-    /**
-     * @return array<string, mixed>
-     */
-    public function rules(): array
-    {
-        /** @var Prop|null $prop */
-        $prop = $this->route('prop');
-
-        return [
-            'codigo' => ['required', 'string', 'max:255', Rule::unique('props', 'codigo')->ignore($prop?->id)],
-            'nombre' => ['required', 'string', 'max:255'],
-            'is_required' => ['sometimes', 'boolean'],
-            'data_type' => ['required', Rule::enum(PropDataType::class)],
-        ];
-    }
-}

app/Domains/Prop/Resources/PropResource.php

@@ -1,31 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Resources;
-
-use App\Domains\Prop\Models\Prop;
-use App\Domains\Prop\Support\PropableModels;
-use Illuminate\Http\Request;
-use Illuminate\Http\Resources\Json\JsonResource;
-
-/**
- * @mixin Prop
- */
-class PropResource extends JsonResource
-{
-    /**
-     * @return array<string, mixed>
-     */
-    public function toArray(Request $request): array
-    {
-        return [
-            'id' => $this->id,
-            'propable_type' => PropableModels::aliasFor($this->propable_type) ?? $this->propable_type,
-            'codigo' => $this->codigo,
-            'nombre' => $this->nombre,
-            'is_required' => $this->is_required,
-            'data_type' => $this->data_type?->value,
-            'created_at' => $this->created_at,
-            'updated_at' => $this->updated_at,
-        ];
-    }
-}

app/Domains/Prop/Resources/PropValueResource.php

@@ -1,50 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Resources;
-
-use App\Domains\Prop\Concerns\Propable;
-use App\Domains\Prop\Models\ModelPropValue;
-use Illuminate\Http\Request;
-use Illuminate\Http\Resources\Json\JsonResource;
-use InvalidArgumentException;
-
-/**
- * @mixin ModelPropValue
- */
-class PropValueResource extends JsonResource
-{
-    /**
-     * @param  iterable<ModelPropValue>  $propValues
-     * @return array<string, mixed>
-     */
-    public static function collapsed(iterable $propValues): array
-    {
-        return collect($propValues)
-            ->mapWithKeys(fn (ModelPropValue $propValue) => [
-                $propValue->prop->codigo => $propValue->value,
-            ])
-            ->all();
-    }
-
-    /**
-     * @return array<string, mixed>
-     */
-    public static function collapsedFromPropable(object $model): array
-    {
-        if (! in_array(Propable::class, class_uses_recursive($model), true)) {
-            throw new InvalidArgumentException('The given model must use the Propable trait.');
-        }
-
-        return static::collapsed(
-            $model->propValues()->with('prop')->get(),
-        );
-    }
-
-    /**
-     * @return array<string, mixed>
-     */
-    public function toArray(Request $request): array
-    {
-        return [$this->prop->codigo => $this->value];
-    }
-}

app/Domains/Prop/Support/PropDataType.php

@@ -1,26 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Support;
-
-enum PropDataType: string
-{
-    case String = 'string';
-    case Integer = 'integer';
-    case Decimal = 'decimal';
-    case Boolean = 'boolean';
-    case Date = 'date';
-    case DateTime = 'datetime';
-    case Json = 'json';
-    case Select = 'select';
-
-    /**
-     * @return list<string>
-     */
-    public static function values(): array
-    {
-        return array_map(
-            static fn (self $type): string => $type->value,
-            self::cases(),
-        );
-    }
-}

app/Domains/Prop/Support/PropRules.php

@@ -1,17 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Support;
-
-class PropRules
-{
-    /**
-     * @return array<string, mixed>
-     */
-    public static function sync(): array
-    {
-        return [
-            'props' => ['sometimes', 'array'],
-            'props.*' => ['nullable'],
-        ];
-    }
-}

app/Domains/Prop/Support/PropableModels.php

@@ -1,47 +0,0 @@
-<?php
-
-namespace App\Domains\Prop\Support;
-
-use App\Domains\Catalog\Models\Brand;
-use App\Domains\Catalog\Models\Category;
-use App\Domains\Catalog\Models\Product;
-use App\Domains\Prop\Concerns\Propable;
-use App\Domains\Tenant\Models\Tenant;
-use Illuminate\Database\Eloquent\Model;
-use Illuminate\Support\Arr;
-use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
-
-class PropableModels
-{
-    /**
-     * @return array<string, class-string<Model>>
-     */
-    public static function map(): array
-    {
-        return [
-            'brand' => Brand::class,
-            'category' => Category::class,
-            'product' => Product::class,
-            'tenant' => Tenant::class,
-        ];
-    }
-
-    /**
-     * @return class-string<Model>
-     */
-    public static function resolveOrFail(string $alias): string
-    {
-        $modelClass = Arr::get(static::map(), $alias);
-
-        if (! is_string($modelClass) || ! is_subclass_of($modelClass, Model::class) || ! in_array(Propable::class, class_uses_recursive($modelClass), true)) {
-            throw new NotFoundHttpException('Propable model not found.');
-        }
-
-        return $modelClass;
-    }
-
-    public static function aliasFor(string $modelClass): ?string
-    {
-        return array_search($modelClass, static::map(), true) ?: null;
-    }
-}

app/Domains/Prop/routes/api.php

@@ -1,10 +0,0 @@
-<?php
-
-use App\Domains\Prop\Controllers\PropController;
-use Illuminate\Support\Facades\Route;
-
-Route::apiResource('prop-models.props', PropController::class)
-    ->parameters([
-        'prop-models' => 'propableType',
-        'props' => 'prop',
-    ]);

app/Domains/Purchase/Controllers/PurchaseController.php

@@ -0,0 +1,143 @@
+<?php
+
+namespace App\Domains\Purchase\Controllers;
+
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Purchase\Requests\StorePurchaseRequest;
+use App\Domains\Purchase\Resources\PurchaseResource;
+use App\Domains\Purchase\Services\CheckoutService;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class PurchaseController extends Controller
+{
+    public function index(Request $request, Tenant $tenant): JsonResponse
+    {
+        return PurchaseResource::collection(
+            Purchase::query()
+                ->with(['items.variant.product', 'items.variant.definitions.productAttribute.attribute'])
+                ->where('tenant_codigo', $tenant->codigo)
+                ->where('user_id', $request->user()->id)
+                ->when($request->query('status'), function ($query, $status) {
+                    $query->where('status', $status);
+                })
+                ->latest()
+                ->paginateFromRequest()
+        )->response();
+    }
+
+    public function store(StorePurchaseRequest $request, Tenant $tenant, CheckoutService $checkoutService): JsonResponse
+    {
+        $data = $request->validated();
+
+        $purchase = $checkoutService->startCheckout(
+            $tenant,
+            $request->user()->id,
+            $data
+        );
+
+        return PurchaseResource::make($purchase)->response()->setStatusCode(201);
+    }
+
+    public function show(Request $request, Tenant $tenant, Purchase $compra): PurchaseResource
+    {
+        $compra = $this->resolveScopedPurchase($tenant, $request->user()->id, $compra);
+
+        return PurchaseResource::make(
+            $compra->loadMissing(['items.variant.product', 'items.variant.definitions.productAttribute.attribute'])
+        );
+    }
+
+    public function paymentIntent(\App\Domains\Purchase\Requests\PaymentIntentRequest $request, Tenant $tenant, Purchase $compra): JsonResponse
+    {
+        $compra = $this->resolveScopedPurchase($tenant, $request->user()->id, $compra);
+        $method = $request->validated('method');
+        $totalAmount = $compra->calculateCurrentTotalAmount();
+
+        $compra->update([
+            'payment_method' => $method,
+            'total' => $totalAmount,
+        ]);
+
+        if ($method === 'transfer') {
+            $telepagosService = new \App\Domains\Integration\Services\TelepagosIntegrationService();
+            $telepagosService->forTenant($tenant->codigo);
+
+            try {
+                $accountInfo = $telepagosService->getAccountInfo();
+
+                return response()->json([
+                    'payment_method' => 'transfer',
+                    'transfer_data' => [
+                        'titular' => $accountInfo['holder'] ?? null,
+                        'cvu' => $accountInfo['cvu'] ?? null,
+                        'alias' => $accountInfo['alias'] ?? null,
+                        'cuit' => $accountInfo['cuit'] ?? null,
+                        'entidad' => $accountInfo['entity'] ?? 'Telepagos S.A.',
+                    ],
+                ]);
+            } catch (\Exception $e) {
+                return response()->json([
+                    'message' => 'Error getting account info: ' . $e->getMessage()
+                ], 500);
+            }
+        }
+
+        if ($method === 'qr') {
+            $telepagosService = new \App\Domains\Integration\Services\TelepagosIntegrationService();
+            $telepagosService->forTenant($tenant->codigo);
+
+            try {
+                Log::info("Generating QR for purchase ID: {$compra->id}, amount: {$totalAmount}");
+                $qrResponse = $telepagosService->generateQr(
+                    $totalAmount,
+                    'Compra',
+                    "Compra #{$compra->id}"
+                );
+
+                $telepagosQr = $compra->telepagosQr()->create([
+                    'qr_order_id' => (string) ($qrResponse['qr_order_id'] ?? ''),
+                    'qr_code' =>  $qrResponse['qr_code'] ?? '',
+                ]);
+            } catch (\Exception $e) {
+                return response()->json([
+                    'message' => 'Error generating QR: ' . $e->getMessage()
+                ], 500);
+            }
+
+            return response()->json([
+                'payment_method' => 'qr',
+                'qr_data' => [
+                    'qr_code' => $telepagosQr->qr_code,
+                    'qr_order_id' => $telepagosQr->qr_order_id,
+                ],
+            ]);
+        }
+
+        return response()->json([
+            'message' => 'Invalid payment method.',
+        ], 400);
+    }
+
+    public function complete(Request $request, Tenant $tenant, Purchase $compra, CheckoutService $checkoutService): PurchaseResource
+    {
+        $compra = $this->resolveScopedPurchase($tenant, $request->user()->id, $compra);
+
+        return PurchaseResource::make(
+            $checkoutService->completePurchase($compra)
+        );
+    }
+
+    protected function resolveScopedPurchase(Tenant $tenant, int $userId, Purchase $purchase): Purchase
+    {
+        if ($purchase->tenant_codigo !== $tenant->codigo || $purchase->user_id !== $userId) {
+            throw new NotFoundHttpException('Purchase not found for tenant.');
+        }
+
+        return $purchase;
+    }
+}

app/Domains/Purchase/Models/Purchase.php

@@ -0,0 +1,138 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use App\Domains\Auth\Models\User;
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+#[Fillable([
+    'cart_id',
+    'tenant_codigo',
+    'user_id',
+    'status',
+    'payment_method',
+    'total',
+    'dni',
+    'telefono',
+    'nombre_apellido',
+    'email',
+])]
+class Purchase extends Model
+{
+    use HasFactory;
+
+    public const STATUS_CREATED = 'created';
+    public const STATUS_PENDING_PAYMENT = 'pending_payment';
+    public const STATUS_PAID = 'paid';
+    public const STATUS_CANCELLED = 'cancelled';
+    public const STATUS_REJECTED = 'rejected';
+
+    protected $table = 'compras';
+
+    protected function casts(): array
+    {
+        return [
+            'cart_id' => 'integer',
+            'user_id' => 'integer',
+            'total' => 'decimal:2',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    /**
+     * @return BelongsTo<User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return BelongsTo<Cart, $this>
+     */
+    public function cart(): BelongsTo
+    {
+        return $this->belongsTo(Cart::class, 'cart_id');
+    }
+
+    /**
+     * @return HasMany<PurchaseItem, $this>
+     */
+    public function items(): HasMany
+    {
+        return $this->hasMany(PurchaseItem::class, 'compra_id');
+    }
+
+    /**
+     * @return \Illuminate\Database\Eloquent\Relations\HasOne<TelepagosQr, $this>
+     */
+    public function telepagosQr()
+    {
+        return $this->hasOne(TelepagosQr::class, 'compra_id');
+    }
+
+    /**
+     * @return HasMany<TelepagosPayment, $this>
+     */
+    public function telepagosPayments(): HasMany
+    {
+        return $this->hasMany(TelepagosPayment::class, 'compra_id');
+    }
+
+    public function getTotalAmount(): float
+    {
+        if ($this->total !== null) {
+            return (float) $this->total;
+        }
+
+        return $this->calculateCurrentTotalAmount();
+    }
+
+    public function calculateCurrentTotalAmount(): float
+    {
+        if ($this->relationLoaded('items') && $this->getRelation('items')->isNotEmpty()) {
+            return (float) $this->getRelation('items')->sum('total');
+        }
+
+        if ($this->items()->exists()) {
+            return (float) $this->items()->sum('total');
+        }
+
+        $cart = $this->relationLoaded('cart')
+            ? $this->getRelation('cart')
+            : $this->cart()->with('items.variant.product')->first();
+
+        if (! $cart) {
+            return 0.0;
+        }
+
+        return $cart->getTotalAmount();
+    }
+
+    public function markAsPendingPayment(): void
+    {
+        $this->update([
+            'status' => self::STATUS_PENDING_PAYMENT,
+        ]);
+    }
+
+    public function markAsPaid(): void
+    {
+        $this->update([
+            'status' => self::STATUS_PAID,
+        ]);
+    }
+}

app/Domains/Purchase/Models/PurchaseItem.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use App\Domains\Catalog\Models\ProductVariant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'compra_id',
+    'producto_variante_id',
+    'cantidad',
+    'precio_unitario',
+    'discount_total',
+    'tax_total',
+    'total',
+])]
+class PurchaseItem extends Model
+{
+    use HasFactory;
+
+    protected $table = 'compra_items';
+
+    protected function casts(): array
+    {
+        return [
+            'compra_id' => 'integer',
+            'producto_variante_id' => 'integer',
+            'cantidad' => 'integer',
+            'precio_unitario' => 'decimal:2',
+            'discount_total' => 'decimal:2',
+            'tax_total' => 'decimal:2',
+            'total' => 'decimal:2',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Purchase, $this>
+     */
+    public function purchase(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'compra_id');
+    }
+
+    /**
+     * @return BelongsTo<ProductVariant, $this>
+     */
+    public function variant(): BelongsTo
+    {
+        return $this->belongsTo(ProductVariant::class, 'producto_variante_id');
+    }
+}

app/Domains/Purchase/Models/TelepagosPayment.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'compra_id',
+    'cuit_buyer',
+    'cvu_buyer',
+    'amount',
+    'concept',
+    'operation',
+    'operation_id',
+    'transaction_id',
+    'qr_order_id',
+    'link_id',
+])]
+class TelepagosPayment extends Model
+{
+    use HasFactory;
+
+    protected $table = 'telepagos_payments';
+
+    protected function casts(): array
+    {
+        return [
+            'compra_id' => 'integer',
+            'amount' => 'decimal:2',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Purchase, $this>
+     */
+    public function compra(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'compra_id');
+    }
+}

app/Domains/Purchase/Models/TelepagosQr.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'compra_id',
+    'qr_order_id',
+    'qr_code',
+])]
+class TelepagosQr extends Model
+{
+    use HasFactory;
+
+    protected $table = 'telepagos_qr';
+
+    protected function casts(): array
+    {
+        return [
+            'compra_id' => 'integer',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Purchase, $this>
+     */
+    public function compra(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'compra_id');
+    }
+}

app/Domains/Purchase/Requests/PaymentIntentRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Purchase\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class PaymentIntentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return $this->user() !== null;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'method' => ['required', 'string', Rule::in(['qr', 'transfer'])],
+        ];
+    }
+}

app/Domains/Purchase/Requests/StorePurchaseRequest.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Purchase\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class StorePurchaseRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return $this->user() !== null;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'cart_id' => ['required', 'integer', 'exists:carritos,id'],
+            'dni' => ['required', 'string'],
+            'telefono' => ['required', 'string'],
+            'nombre_apellido' => ['required', 'string'],
+            'email' => ['required', 'string', 'email'],
+        ];
+    }
+}

app/Domains/Purchase/Resources/PurchaseItemResource.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Domains\Purchase\Resources;
+
+use App\Domains\Catalog\Resources\ProductVariantDefinitionResource;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Purchase\Models\PurchaseItem
+ */
+class PurchaseItemResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $variant = $this->variant;
+        $product = $variant?->product;
+
+        return [
+            'id' => $this->id,
+            'cantidad' => $this->cantidad,
+            'precio_unitario' => $this->formatMoney($this->precio_unitario),
+            'total' => $this->formatMoney($this->total),
+            'product' => $product === null ? null : [
+                'id' => $product->id,
+                'nombre' => $product->nombre,
+                'slug' => $product->slug,
+            ],
+            'variant' => $variant === null ? null : [
+                'id' => $variant->id,
+                'definitions' => ProductVariantDefinitionResource::collection($variant->definitions),
+            ],
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): ?string
+    {
+        if ($amount === null) {
+            return null;
+        }
+
+        return number_format((float) $amount, 2, '.', '');
+    }
+}

app/Domains/Purchase/Resources/PurchaseResource.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Domains\Purchase\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Purchase\Models\Purchase
+ */
+class PurchaseResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $items = $this->resource->relationLoaded('items')
+            ? $this->resource->getRelation('items')
+            : collect();
+
+        $subtotal = $items->isNotEmpty()
+            ? $items->reduce(
+                fn (float $carry, $item): float => $carry + ((float) $item->precio_unitario * $item->cantidad),
+                0.0,
+            )
+            : (float) ($this->total ?? 0);
+
+        $total = $items->isNotEmpty()
+            ? $items->reduce(
+                fn (float $carry, $item): float => $carry + (float) $item->total,
+                0.0,
+            )
+            : (float) ($this->total ?? 0);
+
+        return [
+            'id' => $this->id,
+            'cart_id' => $this->cart_id,
+            'tenant_codigo' => $this->tenant_codigo,
+            'user_id' => $this->user_id,
+            'status' => $this->status,
+            'payment_method' => $this->payment_method,
+            'dni' => $this->dni,
+            'telefono' => $this->telefono,
+            'nombre_apellido' => $this->nombre_apellido,
+            'email' => $this->email,
+            'items' => PurchaseItemResource::collection($items),
+            'subtotal' => $this->formatMoney($subtotal),
+            'total' => $this->formatMoney($total),
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Purchase/Services/CheckoutService.php

@@ -0,0 +1,235 @@
+<?php
+
+namespace App\Domains\Purchase\Services;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Cart\Models\CartItem;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class CheckoutService
+{
+    public function startCheckout(Tenant $tenant, int $userId, array $purchaseData): Purchase
+    {
+        $cartId = (int) $purchaseData['cart_id'];
+        unset($purchaseData['cart_id']);
+
+        return DB::transaction(function () use ($tenant, $userId, $purchaseData, $cartId): Purchase {
+            $cart = $this->resolveCheckoutCart($tenant, $userId, $cartId);
+            $cartItems = $cart->items()->lockForUpdate()->get();
+
+            if ($cartItems->isEmpty()) {
+                throw ValidationException::withMessages([
+                    'cart_id' => 'The selected cart does not contain items.',
+                ]);
+            }
+
+            $cartItems->load('variant.product');
+            $cart->setRelation('items', $cartItems);
+            $totalAmount = $cart->getTotalAmount();
+
+            /** @var Purchase|null $purchase */
+            $purchase = Purchase::query()
+                ->where('cart_id', $cart->getKey())
+                ->where('tenant_codigo', $tenant->codigo)
+                ->where('user_id', $userId)
+                ->whereIn('status', [Purchase::STATUS_CREATED, Purchase::STATUS_PENDING_PAYMENT])
+                ->latest('id')
+                ->first();
+
+            if ($purchase === null) {
+                /** @var Purchase $purchase */
+                $purchase = Purchase::query()->create([
+                    ...$purchaseData,
+                    'cart_id' => $cart->getKey(),
+                    'tenant_codigo' => $tenant->codigo,
+                    'user_id' => $userId,
+                    'status' => Purchase::STATUS_CREATED,
+                    'payment_method' => null,
+                    'total' => $totalAmount,
+                ]);
+            } else {
+                $purchase->fill([
+                    ...$purchaseData,
+                    'status' => Purchase::STATUS_CREATED,
+                    'payment_method' => null,
+                    'total' => $totalAmount,
+                ]);
+                $purchase->save();
+            }
+
+            return $purchase->load(['items.variant.product', 'items.variant.definitions.productAttribute.attribute']);
+        });
+    }
+
+    public function completePurchase(Purchase $purchase): Purchase
+    {
+        return DB::transaction(function () use ($purchase): Purchase {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()
+                ->lockForUpdate()
+                ->findOrFail($purchase->getKey());
+
+            if ($purchase->payment_method === null) {
+                throw ValidationException::withMessages([
+                    'payment_method' => 'The purchase payment method must be selected before finalizing.',
+                ]);
+            }
+
+            if (in_array($purchase->status, [Purchase::STATUS_PAID, Purchase::STATUS_CANCELLED, Purchase::STATUS_REJECTED], true)) {
+                return $purchase->load(['items.variant.product', 'items.variant.definitions.productAttribute.attribute']);
+            }
+
+            $purchase->update([
+                'status' => Purchase::STATUS_PENDING_PAYMENT,
+                'total' => $purchase->calculateCurrentTotalAmount(),
+            ]);
+
+            return $purchase->load(['items.variant.product', 'items.variant.definitions.productAttribute.attribute']);
+        });
+    }
+
+    public function confirmPurchase(Purchase $purchase): void
+    {
+        DB::transaction(function () use ($purchase): void {
+            /** @var Cart|null $cart */
+            $cart = $purchase->cart()->lockForUpdate()->first();
+
+            if ($cart === null) {
+                throw ValidationException::withMessages([
+                    'cart_id' => 'The purchase cart is no longer available.',
+                ]);
+            }
+
+            $cartItems = $cart->items()->lockForUpdate()->get();
+
+            if ($cartItems->isEmpty()) {
+                throw ValidationException::withMessages([
+                    'cart_id' => 'The purchase cart does not contain items.',
+                ]);
+            }
+
+            if ($purchase->items()->exists()) {
+                return;
+            }
+
+            $cartItems->load('variant.product');
+            $variants = $this->resolveTenantVariants($purchase->tenant, $cartItems);
+            $purchaseItemsPayload = $this->buildPurchaseItemsPayload($cartItems, $variants);
+
+            $purchase->items()->createMany($purchaseItemsPayload);
+            $this->completeCartConversion($cart, $cartItems, $variants);
+        });
+    }
+
+    /**
+     * @return Collection<int, ProductVariant>
+     */
+    protected function resolveTenantVariants(Tenant $tenant, Collection $cartItems): Collection
+    {
+        $variantIds = $cartItems
+            ->pluck('producto_variante_id')
+            ->map(static fn (mixed $id): int => (int) $id)
+            ->unique()
+            ->values();
+
+        /** @var Collection<int, ProductVariant> $variants */
+        $variants = ProductVariant::query()
+            ->with('product')
+            ->whereIn('id', $variantIds)
+            ->whereHas('product', fn ($query) => $query->where('tenant_codigo', $tenant->codigo))
+            ->lockForUpdate()
+            ->get()
+            ->keyBy('id');
+
+        if ($variants->count() !== $variantIds->count()) {
+            throw ValidationException::withMessages([
+                'cart_id' => 'One or more product variants do not belong to the tenant.',
+            ]);
+        }
+
+        return $variants;
+    }
+
+    /**
+     * @param  Collection<int, CartItem>  $cartItems
+     * @return \Illuminate\Support\Collection<int, ProductVariant>
+     */
+    protected function resolveCheckoutCart(Tenant $tenant, int $userId, int $cartId): Cart
+    {
+        /** @var Cart|null $cart */
+        $cart = Cart::query()
+            ->lockForUpdate()
+            ->find($cartId);
+
+        if ($cart === null || $cart->tenant_codigo !== $tenant->codigo || $cart->user_id !== $userId) {
+            throw new NotFoundHttpException('Cart not found for tenant.');
+        }
+
+        if ($cart->status !== 'active') {
+            throw ValidationException::withMessages([
+                'cart_id' => 'The selected cart is no longer active.',
+            ]);
+        }
+
+        return $cart;
+    }
+
+    /**
+     * @param  Collection<int, CartItem>  $cartItems
+     * @param  Collection<int, ProductVariant>  $variants
+     * @return array<int, array<string, mixed>>
+     */
+    protected function buildPurchaseItemsPayload(Collection $cartItems, Collection $variants): array
+    {
+        return $cartItems
+            ->map(function (CartItem $item) use ($variants): array {
+                /** @var ProductVariant $variant */
+                $variant = $variants->get((int) $item['producto_variante_id']);
+                $quantity = (int) $item['cantidad'];
+                $unitPrice = (float) ($variant->product?->precio ?? 0);
+
+                return [
+                    'producto_variante_id' => $variant->getKey(),
+                    'cantidad' => $quantity,
+                    'precio_unitario' => $unitPrice,
+                    'discount_total' => null,
+                    'tax_total' => null,
+                    'total' => $unitPrice * $quantity,
+                ];
+            })
+            ->all();
+    }
+
+    /**
+     * @param  Collection<int, CartItem>  $cartItems
+     * @param  Collection<int, ProductVariant>  $variants
+     */
+    protected function completeCartConversion(Cart $cart, Collection $cartItems, Collection $variants): void
+    {
+        foreach ($cartItems as $item) {
+            /** @var ProductVariant $variant */
+            $variant = $variants->get((int) $item->producto_variante_id);
+            $quantity = (int) $item->cantidad;
+
+            try {
+                $variant->confirmReservedStock($quantity);
+            } catch (\InvalidArgumentException $exception) {
+                throw ValidationException::withMessages([
+                    'cart_id' => 'The selected cart has inconsistent stock state.',
+                ]);
+            }
+        }
+
+        $cart->status = 'converted';
+        $cart->user_id = null;
+        $cart->guest_token = null;
+        $cart->save();
+        $cart->delete();
+    }
+}

app/Domains/Purchase/routes/api.php

@@ -0,0 +1,10 @@
+<?php
+
+use App\Domains\Purchase\Controllers\PurchaseController;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('tenants/{tenant:codigo}')->middleware(['auth:sanctum', \App\Domains\Cart\Middleware\MergeGuestCartMiddleware::class])->group(function (): void {
+    Route::apiResource('compras', PurchaseController::class)->only(['index', 'store', 'show']);
+    Route::post('compras/{compra}/payment-intent', [PurchaseController::class, 'paymentIntent']);
+    Route::post('compras/{compra}/complete', [PurchaseController::class, 'complete']);
+});