feat(category): implement category configuration management with sorting and validation

feat(migration): create addresses and tenant_addresses tables
feat(migration): add data migration for copying contact menu addresses
test: add ContactAddressesTest for address and tenant address functionality

app/Domains/Commerce/Catalog/Controllers/AdminApp/CategoryConfigurationController.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Domains\Commerce\Catalog\Controllers\AdminApp;
+
+use App\Domains\Commerce\Catalog\Requests\AdminApp\UpdateCategoryConfigurationRequest;
+use App\Domains\Commerce\Catalog\Resources\AdminApp\CategoryConfigurationResource;
+use App\Domains\Commerce\Catalog\Services\CategoryConfigurationService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+
+class CategoryConfigurationController extends Controller
+{
+    public function index(Request $request, CategoryConfigurationService $service): AnonymousResourceCollection
+    {
+        return CategoryConfigurationResource::collection(
+            $service->forTenant($request->user()->tenant()->firstOrFail())
+        );
+    }
+
+    public function update(UpdateCategoryConfigurationRequest $request, CategoryConfigurationService $service): AnonymousResourceCollection
+    {
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $service->update($tenant, $request->validated());
+
+        return CategoryConfigurationResource::collection($service->forTenant($tenant));
+    }
+}

app/Domains/Commerce/Catalog/Controllers/CatalogController.php

@@ -15,6 +15,7 @@ use App\Domains\Commerce\Catalog\Resources\CatalogFeaturedGroupResource;
 use App\Domains\Commerce\Catalog\Resources\CatalogItemDetailResource;
 use App\Domains\Commerce\Catalog\Resources\CatalogSearchItemResource;
 use App\Domains\Commerce\Catalog\Resources\CatalogVariantOptionsResource;
+use App\Domains\Commerce\Catalog\Resources\CategoryResource;
 use App\Domains\Commerce\Catalog\Services\CatalogItemAllowanceService;
 use App\Domains\Commerce\Catalog\Services\CatalogService;
 use App\Domains\Commerce\Catalog\Services\FeaturedGroupService;
@@ -78,11 +79,7 @@ class CatalogController extends Controller
         $allowances->attach($items->getCollection(), $this->userId($request));
 
         return CatalogSearchItemResource::collection($items)->additional([
-            'category' => [
-                'id' => $category->id,
-                'nombre' => $category->nombre,
-                'categoria_id' => $category->categoria_id,
-            ],
+            'category' => CategoryResource::make($category)->resolve($request),
             'layout' => $tenant->search_product_layout->value,
             'group_layout' => $tenant->search_group_layout->value,
         ]);

app/Domains/Commerce/Catalog/Models/Category.php

@@ -4,6 +4,7 @@ namespace App\Domains\Commerce\Catalog\Models;
 
 use App\Domains\Core\Auth\Models\User;
 use App\Domains\Core\Tenant\Models\Tenant;
+use App\Shared\Attachable\Models\Attachment;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
@@ -16,6 +17,9 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
     'categoria_id',
     'nombre',
     'is_enabled',
+    'banner_id',
+    'banner_enabled',
+    'sort_order',
 ])]
 class Category extends Model
 {
@@ -25,6 +29,7 @@ class Category extends Model
 
     protected $attributes = [
         'is_enabled' => true,
+        'banner_enabled' => false,
     ];
 
     /**
@@ -35,6 +40,9 @@ class Category extends Model
         return [
             'categoria_id' => 'integer',
             'is_enabled' => 'boolean',
+            'banner_id' => 'integer',
+            'banner_enabled' => 'boolean',
+            'sort_order' => 'integer',
         ];
     }
 
@@ -59,6 +67,12 @@ class Category extends Model
         return $this->belongsTo(self::class, 'categoria_id');
     }
 
+    /** @return BelongsTo<Attachment, $this> */
+    public function banner(): BelongsTo
+    {
+        return $this->belongsTo(Attachment::class, 'banner_id');
+    }
+
     /**
      * @return HasMany<Category, $this>
      */

app/Domains/Commerce/Catalog/Requests/AdminApp/UpdateCategoryConfigurationRequest.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Domains\Commerce\Catalog\Requests\AdminApp;
+
+use App\Shared\Rules\ImageOrBase64Rule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Facades\Validator;
+use Illuminate\Validation\Validator as ValidationValidator;
+
+class UpdateCategoryConfigurationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'categories' => ['present', 'array', 'max:500'],
+            'deleted_ids' => ['present', 'array', 'max:1000'],
+            'deleted_ids.*' => ['required', 'integer', 'min:1', 'distinct'],
+        ];
+    }
+
+    public function withValidator(ValidationValidator $validator): void
+    {
+        $validator->after(function (ValidationValidator $validator): void {
+            if ($validator->errors()->isNotEmpty()) {
+                return;
+            }
+            $this->validateNodes($validator, $this->input('categories'), 'categories', 0);
+        });
+    }
+
+    private function validateNodes(ValidationValidator $validator, array $nodes, string $path, int $depth): void
+    {
+        if ($depth > 10) {
+            $validator->errors()->add($path, 'La jerarquía de categorías es demasiado profunda.');
+
+            return;
+        }
+
+        foreach ($nodes as $index => $node) {
+            $key = "{$path}.{$index}";
+            if (! is_array($node)) {
+                $validator->errors()->add($key, 'La categoría debe ser un objeto.');
+
+                continue;
+            }
+            $nested = Validator::make($node, [
+                'id' => ['present', 'nullable', 'integer', 'min:1'],
+                'nombre' => ['required', 'string', 'max:255'],
+                'is_enabled' => ['required', 'boolean'],
+                'banner_enabled' => ['required', 'boolean'],
+                'banner' => ['present', 'nullable', new ImageOrBase64Rule],
+                'subcategories' => ['present', 'array', 'max:500'],
+            ]);
+            foreach ($nested->errors()->messages() as $field => $messages) {
+                foreach ($messages as $message) {
+                    $validator->errors()->add("{$key}.{$field}", $message);
+                }
+            }
+            if (! $nested->fails()) {
+                $this->validateNodes($validator, $node['subcategories'], "{$key}.subcategories", $depth + 1);
+            }
+        }
+    }
+}

app/Domains/Commerce/Catalog/Resources/AdminApp/CategoryConfigurationResource.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Domains\Commerce\Catalog\Resources\AdminApp;
+
+use App\Domains\Commerce\Catalog\Models\Category;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin Category */
+class CategoryConfigurationResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'nombre' => $this->nombre,
+            'is_enabled' => $this->is_enabled,
+            'banner_enabled' => $this->banner_enabled,
+            'banner_key' => $this->banner?->key,
+            'banner_name' => $this->banner?->filename,
+            'banner_url' => $this->banner?->getTemporaryUrl(1440),
+            'subcategories' => self::collection($this->subCategories),
+        ];
+    }
+}

app/Domains/Commerce/Catalog/Resources/CategoryResource.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Commerce\Catalog\Resources;
+
+use App\Domains\Commerce\Catalog\Models\Category;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin Category */
+class CategoryResource extends JsonResource
+{
+    /** @return array<string, mixed> */
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'nombre' => $this->nombre,
+            'categoria_id' => $this->categoria_id,
+            'banner_url' => $this->banner_enabled
+                ? $this->banner?->getTemporaryUrl(1440)
+                : null,
+        ];
+    }
+}

app/Domains/Commerce/Catalog/Services/CategoryConfigurationService.php

@@ -0,0 +1,141 @@
+<?php
+
+namespace App\Domains\Commerce\Catalog\Services;
+
+use App\Domains\Commerce\Catalog\Models\Category;
+use App\Domains\Commerce\Catalog\Models\FeaturedGroup;
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Shared\Attachable\Enums\AttachmentType;
+use App\Shared\Attachable\Models\Attachment;
+use App\Shared\Attachable\Services\AttachmentService;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+use Throwable;
+
+class CategoryConfigurationService
+{
+    public function __construct(private readonly AttachmentService $attachments) {}
+
+    /** @return Collection<int, Category> */
+    public function forTenant(Tenant $tenant): Collection
+    {
+        $all = $tenant->categories()->with('banner')->orderBy('sort_order')->orderBy('id')->get();
+        $children = $all->groupBy('categoria_id');
+        foreach ($all as $category) {
+            $category->setRelation('subCategories', $children->get($category->id, collect()));
+        }
+
+        return $all->filter(fn (Category $category) => $category->categoria_id === null)->values();
+    }
+
+    /** @param array<string, mixed> $data */
+    public function update(Tenant $tenant, array $data): void
+    {
+        $created = [];
+        try {
+            DB::transaction(function () use ($tenant, $data, &$created): void {
+                // Serialize saves for this tenant, including creation of new categories.
+                Tenant::query()->whereKey($tenant->id)->lockForUpdate()->firstOrFail();
+                $existing = $tenant->categories()->with('banner')->lockForUpdate()->get()->keyBy('id');
+                $deleted = array_map('intval', $data['deleted_ids']);
+                $seen = [];
+                $allowedBannerKeys = $existing->pluck('banner.key')->filter()->all();
+                $this->validateNodes($data['categories'], $existing, $deleted, $seen, $allowedBannerKeys);
+
+                foreach ($deleted as $id) {
+                    $category = $existing->get($id);
+                    if ($category === null) {
+                        $this->invalid('deleted_ids', 'Una categoría a eliminar no pertenece a esta tienda.');
+                    }
+                    if ($category->catalogItems()->withTrashed()->exists()
+                        || FeaturedGroup::query()->where('category_id', $id)->exists()) {
+                        $this->invalid('deleted_ids', "No se puede eliminar «{$category->nombre}» porque tiene productos o grupos destacados asociados. Podés ocultarla.");
+                    }
+                }
+
+                $this->saveNodes($tenant, $data['categories'], null, $existing, $created);
+                $remaining = $tenant->categories()->whereNotIn('id', $deleted)->get();
+                $parents = $remaining->pluck('categoria_id', 'id');
+                foreach ($remaining as $category) {
+                    $visited = [$category->id => true];
+                    $parentId = $category->categoria_id;
+                    while ($parentId !== null) {
+                        if (isset($visited[$parentId]) || ! $parents->has($parentId)) {
+                            $this->invalid('categories', 'La jerarquía contiene un ciclo o una categoría padre eliminada.');
+                        }
+                        $visited[$parentId] = true;
+                        $parentId = $parents->get($parentId);
+                    }
+                }
+
+                // Detach only explicitly deleted nodes before removing parents and children together.
+                $tenant->categories()->whereIn('id', $deleted)->update(['categoria_id' => null]);
+                $tenant->categories()->whereIn('id', $deleted)->delete();
+            });
+        } catch (Throwable $error) {
+            foreach ($created as $attachment) {
+                Storage::disk('s3')->delete($attachment->path);
+            }
+            throw $error;
+        }
+    }
+
+    private function validateNodes(array $nodes, Collection $existing, array $deleted, array &$seen, array $bannerKeys, string $path = 'categories'): void
+    {
+        foreach ($nodes as $index => $node) {
+            $field = "{$path}.{$index}";
+            if ($node['id'] !== null) {
+                $id = (int) $node['id'];
+                if (! $existing->has($id) || isset($seen[$id]) || in_array($id, $deleted, true)) {
+                    $this->invalid("{$field}.id", 'La categoría es ajena a la tienda, está repetida o fue marcada para eliminar.');
+                }
+                $seen[$id] = true;
+            }
+            if (trim($node['nombre']) === '') {
+                $this->invalid("{$field}.nombre", 'Completá el nombre de la categoría.');
+            }
+            if (is_string($node['banner']) && Str::isUuid($node['banner'])
+                && ! in_array($node['banner'], $bannerKeys, true)) {
+                $this->invalid("{$field}.banner", 'El banner no pertenece a las categorías de esta tienda.');
+            }
+            $this->validateNodes($node['subcategories'], $existing, $deleted, $seen, $bannerKeys, "{$field}.subcategories");
+        }
+    }
+
+    private function saveNodes(Tenant $tenant, array $nodes, ?int $parentId, Collection $existing, array &$created): void
+    {
+        foreach (array_values($nodes) as $order => $node) {
+            $category = $node['id'] === null ? new Category : $existing->get((int) $node['id']);
+            $banner = null;
+            if ($node['banner'] !== null) {
+                if (is_string($node['banner']) && Str::isUuid($node['banner'])) {
+                    $banner = Attachment::query()->where('key', $node['banner'])->firstOrFail();
+                    if ($banner->type !== AttachmentType::Image) {
+                        $this->invalid('categories', 'El banner debe ser una imagen.');
+                    }
+                } else {
+                    $banner = $this->attachments->store($node['banner'], "tenants/{$tenant->codigo}/categories");
+                    $created[] = $banner;
+                }
+            }
+            $category->fill([
+                'tenant_code' => $tenant->codigo,
+                'categoria_id' => $parentId,
+                'nombre' => trim($node['nombre']),
+                'is_enabled' => $node['is_enabled'],
+                'banner_id' => $banner?->id,
+                'banner_enabled' => $node['banner_enabled'],
+                'sort_order' => $order,
+            ])->save();
+            $this->saveNodes($tenant, $node['subcategories'], $category->id, $existing, $created);
+        }
+    }
+
+    private function invalid(string $field, string $message): never
+    {
+        throw ValidationException::withMessages([$field => $message]);
+    }
+}

app/Domains/Commerce/Catalog/documentacion/README.md

@@ -31,6 +31,16 @@ Bajo `/tenants/{tenant:codigo}` se publican catálogo, búsqueda, categoría, de
 
 Bajo `/v1/adminapp/tenant/featured-groups`, con `auth:sanctum` y `adminapp.tenant`, se listan, crean y actualizan grupos destacados.
 
+### Configuración de categorías de producto
+
+`GET /v1/adminapp/tenant/categories` devuelve un árbol ordenado de las categorías del tenant autenticado, incluidas las ocultas. Cada nodo contiene `id`, `nombre`, `is_enabled`, `banner_enabled`, `banner_key`, `banner_name`, `banner_url` y `subcategories`. La URL administrativa se devuelve incluso si el banner está deshabilitado.
+
+`PUT /v1/adminapp/tenant/categories` recibe `categories` y `deleted_ids`. Cada nodo enviado contiene `id` (null para altas), `nombre`, `is_enabled`, `banner_enabled`, `banner` y `subcategories`. `banner` es una clave UUID de un banner ya asociado a las categorías del tenant, una imagen base64/archivo para reemplazarlo o null para quitarlo. Deshabilitar un banner conserva el adjunto. Duplicar una categoría puede compartir su banner; los adjuntos previos no se eliminan al quitar o reemplazar esa referencia.
+
+La posición de cada nodo en su lista determina `sort_order`; este campo no se expone en las respuestas públicas ni administrativas. La migración inicial conserva el orden alfabético existente. El bootstrap del storefront ordena por `sort_order` e ID y no muestra categorías ocultas ni sus descendientes.
+
+El guardado es transaccional. Solo se eliminan los IDs explícitos, se rechazan IDs y banners ajenos, categorías repetidas y jerarquías inválidas. No se pueden eliminar categorías con productos (incluidos los archivados) o grupos destacados asociados. Los archivos recién subidos se limpian si falla la transacción. La respuesta devuelve el árbol persistido y los IDs asignados a las altas.
+
 ## Dependencias y reglas
 
 Usa `Attachable` para imágenes/archivos, `Tenant` para aislamiento y `Ticket`/`Event` para vigencia y fechas. `Cart` y `Purchase` consumen sus precios, variantes e inventario. Los cambios de stock deben pasar por `CatalogInventoryService` para conservar reservas y disponibilidad.

app/Domains/Commerce/Catalog/routes/adminapp.php

@@ -1,11 +1,14 @@
 <?php
 
+use App\Domains\Commerce\Catalog\Controllers\AdminApp\CategoryConfigurationController;
 use App\Domains\Commerce\Catalog\Controllers\AdminApp\OnTicketFeaturedGroupController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('v1/adminapp/tenant')
     ->middleware(['auth:sanctum', 'adminapp.tenant'])
     ->group(function (): void {
+        Route::get('categories', [CategoryConfigurationController::class, 'index']);
+        Route::put('categories', [CategoryConfigurationController::class, 'update']);
         Route::get('featured-groups', [OnTicketFeaturedGroupController::class, 'index'])
             ->name('adminapp.featured-groups.index');
         Route::post('featured-groups', [OnTicketFeaturedGroupController::class, 'store'])

app/Domains/Commerce/Purchase/Services/PurchaseRefundSummaryService.php

@@ -8,12 +8,14 @@ use Illuminate\Database\Eloquent\Builder;
 
 class PurchaseRefundSummaryService
 {
-    public function totalForTenant(Tenant $tenant): string
+    public function totalForTenant(Tenant $tenant, ?int $eventId = null): string
     {
         $total = TicketRefund::query()
             ->whereHas(
                 'purchaseItem.purchase',
-                fn (Builder $query): Builder => $query->where('tenant_codigo', $tenant->codigo)
+                fn (Builder $query): Builder => $query
+                    ->where('tenant_codigo', $tenant->codigo)
+                    ->when($eventId !== null, fn (Builder $query): Builder => $query->where('event_id', $eventId))
             )
             ->sum('amount');
 

app/Domains/Commerce/Sale/Controllers/AdminApp/SaleController.php

@@ -32,10 +32,10 @@ class SaleController extends Controller
         $tenant = $request->user()->tenant()->firstOrFail();
 
         return SaleResource::collection(
-            $this->saleService->sales($tenant, $request->validated())
+            $this->saleService->sales($tenant, $request->validated(), $request->user()->event_id)
         )->additional([
-            'confirmed_sales_total' => $this->saleService->confirmedSalesTotal($tenant),
-            'refunded_total' => $this->saleService->refundedTotal($tenant),
+            'confirmed_sales_total' => $this->saleService->confirmedSalesTotal($tenant, $request->user()->event_id),
+            'refunded_total' => $this->saleService->refundedTotal($tenant, $request->user()->event_id),
         ]);
     }
 
@@ -43,7 +43,7 @@ class SaleController extends Controller
     {
         $tenant = $request->user()->tenant()->firstOrFail();
 
-        return new SaleDetailResource($this->saleService->detail($tenant, $sale));
+        return new SaleDetailResource($this->saleService->detail($tenant, $sale, $request->user()->event_id));
     }
 
     public function tickets(Request $request, int $sale): AnonymousResourceCollection
@@ -51,7 +51,7 @@ class SaleController extends Controller
         $tenant = $request->user()->tenant()->firstOrFail();
 
         return SaleTicketResource::collection(
-            $this->saleService->tickets($tenant, $sale)
+            $this->saleService->tickets($tenant, $sale, $request->user()->event_id)
         );
     }
 
@@ -59,14 +59,14 @@ class SaleController extends Controller
     {
         $tenant = $request->user()->tenant()->firstOrFail();
 
-        return new SaleResource($this->saleService->confirm($tenant, $sale));
+        return new SaleResource($this->saleService->confirm($tenant, $sale, $request->user()->event_id));
     }
 
     public function cancel(Request $request, int $sale): SaleResource
     {
         $tenant = $request->user()->tenant()->firstOrFail();
 
-        return new SaleResource($this->saleService->cancel($tenant, $sale));
+        return new SaleResource($this->saleService->cancel($tenant, $sale, $request->user()->event_id));
     }
 
     public function modifications(
@@ -76,6 +76,7 @@ class SaleController extends Controller
             $this->saleService->modifications(
                 $request->user()->tenant()->firstOrFail(),
                 $request->validated(),
+                $request->user()->event_id,
             )
         );
     }
@@ -86,7 +87,7 @@ class SaleController extends Controller
 
         return $this->salePdfService->downloadSales(
             $tenant,
-            $this->saleService->salesForExport($tenant, $request->validated()),
+            $this->saleService->salesForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }
@@ -97,7 +98,7 @@ class SaleController extends Controller
 
         return $this->salePdfService->downloadModifications(
             $tenant,
-            $this->saleService->modificationsForExport($tenant, $request->validated()),
+            $this->saleService->modificationsForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }
@@ -108,7 +109,7 @@ class SaleController extends Controller
 
         return $this->saleExcelService->downloadSales(
             $tenant,
-            $this->saleService->salesForExport($tenant, $request->validated()),
+            $this->saleService->salesForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }
@@ -120,7 +121,7 @@ class SaleController extends Controller
 
         return $this->saleExcelService->downloadModifications(
             $tenant,
-            $this->saleService->modificationsForExport($tenant, $request->validated()),
+            $this->saleService->modificationsForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }

app/Domains/Commerce/Sale/Services/AdminAppSaleService.php

@@ -2,7 +2,6 @@
 
 namespace App\Domains\Commerce\Sale\Services;
 
-use App\Shared\Logging\Models\ValueChange;
 use App\Domains\Commerce\Purchase\Models\Purchase;
 use App\Domains\Commerce\Purchase\Services\CheckoutService;
 use App\Domains\Commerce\Purchase\Services\PurchaseRefundSummaryService;
@@ -10,6 +9,7 @@ use App\Domains\Core\Tenant\Models\Tenant;
 use App\Domains\Ticketing\Ticket\Models\Ticket;
 use App\Domains\Ticketing\Ticket\Services\TicketPresentationResolver;
 use App\Domains\Ticketing\Ticket\Services\TicketValidityResolver;
+use App\Shared\Logging\Models\ValueChange;
 use Illuminate\Database\Eloquent\Builder;
 use Illuminate\Pagination\LengthAwarePaginator;
 use Illuminate\Support\Collection;
@@ -21,19 +21,18 @@ class AdminAppSaleService
         protected PurchaseRefundSummaryService $refundSummaryService,
     ) {}
 
-    public function confirmedSalesTotal(Tenant $tenant): string
+    public function confirmedSalesTotal(Tenant $tenant, ?int $eventId = null): string
     {
-        $total = Purchase::query()
-            ->where('tenant_codigo', $tenant->codigo)
+        $total = $this->purchasesQuery($tenant, $eventId)
             ->where('status', Purchase::STATUS_PAID)
             ->sum('total');
 
         return number_format((float) $total, 2, '.', '');
     }
 
-    public function refundedTotal(Tenant $tenant): string
+    public function refundedTotal(Tenant $tenant, ?int $eventId = null): string
     {
-        return $this->refundSummaryService->totalForTenant($tenant);
+        return $this->refundSummaryService->totalForTenant($tenant, $eventId);
     }
 
     /**
@@ -47,43 +46,42 @@ class AdminAppSaleService
      * }  $filters
      * @return LengthAwarePaginator<Purchase>
      */
-    public function sales(Tenant $tenant, array $filters = []): LengthAwarePaginator
+    public function sales(Tenant $tenant, array $filters = [], ?int $eventId = null): LengthAwarePaginator
     {
-        return $this->salesQuery($tenant, $filters)
+        return $this->salesQuery($tenant, $filters, $eventId)
             ->paginateFromRequest()
             ->withQueryString();
     }
 
-    public function detail(Tenant $tenant, int $saleId): Purchase
+    public function detail(Tenant $tenant, int $saleId, ?int $eventId = null): Purchase
     {
-        return Purchase::query()
-            ->where('tenant_codigo', $tenant->codigo)
+        return $this->purchasesQuery($tenant, $eventId)
             ->with('items')
             ->findOrFail($saleId);
     }
 
     /** @return Collection<int, Ticket> */
-    public function tickets(Tenant $tenant, int $saleId): Collection
+    public function tickets(Tenant $tenant, int $saleId, ?int $eventId = null): Collection
     {
-        return $this->findForTenant($tenant, $saleId)
+        return $this->findForTenant($tenant, $saleId, $eventId)
             ->tickets()
             ->with([...TicketValidityResolver::RELATIONS, ...TicketPresentationResolver::RELATIONS, 'refund'])
             ->orderBy('id')
             ->get();
     }
 
-    public function confirm(Tenant $tenant, int $saleId): Purchase
+    public function confirm(Tenant $tenant, int $saleId, ?int $eventId = null): Purchase
     {
-        $sale = $this->findForTenant($tenant, $saleId);
+        $sale = $this->findForTenant($tenant, $saleId, $eventId);
 
         return $this->saleForResponse(
             $this->checkoutService->confirmPaidPurchase($sale)
         );
     }
 
-    public function cancel(Tenant $tenant, int $saleId): Purchase
+    public function cancel(Tenant $tenant, int $saleId, ?int $eventId = null): Purchase
     {
-        $sale = $this->findForTenant($tenant, $saleId);
+        $sale = $this->findForTenant($tenant, $saleId, $eventId);
 
         return $this->saleForResponse(
             $this->checkoutService->cancelPurchaseFromAdmin($sale)
@@ -94,18 +92,18 @@ class AdminAppSaleService
      * @param  array<string, mixed>  $filters
      * @return Collection<int, Purchase>
      */
-    public function salesForExport(Tenant $tenant, array $filters = []): Collection
+    public function salesForExport(Tenant $tenant, array $filters = [], ?int $eventId = null): Collection
     {
-        return $this->salesQuery($tenant, $filters)->get();
+        return $this->salesQuery($tenant, $filters, $eventId)->get();
     }
 
     /**
      * @param  array<string, mixed>  $filters
      * @return LengthAwarePaginator<ValueChange>
      */
-    public function modifications(Tenant $tenant, array $filters = []): LengthAwarePaginator
+    public function modifications(Tenant $tenant, array $filters = [], ?int $eventId = null): LengthAwarePaginator
     {
-        return $this->modificationsQuery($tenant, $filters)
+        return $this->modificationsQuery($tenant, $filters, $eventId)
             ->paginateFromRequest()
             ->withQueryString();
     }
@@ -114,13 +112,13 @@ class AdminAppSaleService
      * @param  array<string, mixed>  $filters
      * @return Collection<int, ValueChange>
      */
-    public function modificationsForExport(Tenant $tenant, array $filters = []): Collection
+    public function modificationsForExport(Tenant $tenant, array $filters = [], ?int $eventId = null): Collection
     {
-        return $this->modificationsQuery($tenant, $filters)->get();
+        return $this->modificationsQuery($tenant, $filters, $eventId)->get();
     }
 
     /** @param array<string, mixed> $filters */
-    protected function salesQuery(Tenant $tenant, array $filters): Builder
+    protected function salesQuery(Tenant $tenant, array $filters, ?int $eventId = null): Builder
     {
         $sortColumns = [
             'id' => 'id',
@@ -137,8 +135,7 @@ class AdminAppSaleService
             ? $requestedDirection
             : 'desc';
 
-        return Purchase::query()
-            ->where('tenant_codigo', $tenant->codigo)
+        return $this->purchasesQuery($tenant, $eventId)
             ->when($filters['q'] ?? null, function (Builder $query, string $search): void {
                 $term = trim($search);
 
@@ -176,11 +173,18 @@ class AdminAppSaleService
      * @param  array<string, mixed>  $filters
      * @return Builder<ValueChange>
      */
-    protected function modificationsQuery(Tenant $tenant, array $filters): Builder
+    protected function modificationsQuery(Tenant $tenant, array $filters, ?int $eventId = null): Builder
     {
         return ValueChange::query()
             ->where('tenant_code', $tenant->codigo)
             ->where('trackable_type', (new Purchase)->getMorphClass())
+            ->when($eventId !== null, fn (Builder $query): Builder => $query->whereHasMorph(
+                'trackable',
+                [Purchase::class],
+                fn (Builder $sales): Builder => $sales
+                    ->where('tenant_codigo', $tenant->codigo)
+                    ->where('event_id', $eventId),
+            ))
             ->when($filters['q'] ?? null, function (Builder $query, string $search): void {
                 $term = trim($search);
 
@@ -221,11 +225,18 @@ class AdminAppSaleService
             ->orderByDesc('id');
     }
 
-    protected function findForTenant(Tenant $tenant, int $saleId): Purchase
+    protected function findForTenant(Tenant $tenant, int $saleId, ?int $eventId = null): Purchase
+    {
+        return $this->purchasesQuery($tenant, $eventId)
+            ->findOrFail($saleId);
+    }
+
+    /** @return Builder<Purchase> */
+    protected function purchasesQuery(Tenant $tenant, ?int $eventId): Builder
     {
         return Purchase::query()
             ->where('tenant_codigo', $tenant->codigo)
-            ->findOrFail($saleId);
+            ->when($eventId !== null, fn (Builder $query): Builder => $query->where('event_id', $eventId));
     }
 
     protected function saleForResponse(Purchase $sale): Purchase

app/Domains/Commerce/Sale/documentacion/README.md

@@ -29,4 +29,8 @@ Consume compras de `Purchase`, datos del tenant y entradas de `Logging`. No es d
 
 La consulta paginada y la colección de exportación deben aplicar los mismos filtros para evitar diferencias entre pantalla, PDF y Excel.
 
+Cuando el usuario autenticado tiene `event_id`, el controlador lo pasa al servicio como alcance obligatorio para ventas, totales, historial y exportaciones. El alcance se combina con el tenant y no se obtiene de los filtros enviados por el cliente. Los administradores sin `event_id` conservan el alcance del tenant.
+
+El detalle, los tickets de una venta, la confirmación y la cancelación buscan la compra dentro del mismo alcance. Una venta de otro evento o sin evento devuelve 404 para un administrador con `event_id`, antes de ejecutar cualquier acción en `CheckoutService`.
+
 El historial comparte con ventas los filtros de búsqueda, ID, fecha de venta y estado. En el historial, el estado se evalúa sobre `ValueChange.new_value`: representa el resultado de esa modificación y no el estado actual de la venta.

app/Domains/Core/Address/Models/Address.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Domains\Core\Address\Models;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Domains\Ticketing\Event\Models\Event;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+class Address extends Model
+{
+    protected $fillable = ['label', 'address_text', 'latitude', 'longitude'];
+
+    protected function casts(): array
+    {
+        return [
+            'latitude' => 'decimal:7',
+            'longitude' => 'decimal:7',
+        ];
+    }
+
+    /** @return array{latitude: float, longitude: float}|null */
+    public function coordinates(): ?array
+    {
+        if ($this->latitude === null || $this->longitude === null) {
+            return null;
+        }
+
+        return ['latitude' => (float) $this->latitude, 'longitude' => (float) $this->longitude];
+    }
+
+    /** @return HasMany<Event, $this> */
+    public function events(): HasMany
+    {
+        return $this->hasMany(Event::class);
+    }
+
+    /** @return BelongsToMany<Tenant, $this> */
+    public function tenants(): BelongsToMany
+    {
+        return $this->belongsToMany(Tenant::class, 'tenant_addresses', 'address_id', 'tenant_codigo', 'id', 'codigo')
+            ->using(TenantAddress::class)
+            ->withPivot(['id', 'is_main'])
+            ->withTimestamps();
+    }
+}

app/Domains/Core/Address/Models/TenantAddress.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Domains\Core\Address\Models;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\Pivot;
+
+class TenantAddress extends Pivot
+{
+    protected $table = 'tenant_addresses';
+
+    public $incrementing = true;
+
+    protected $fillable = ['tenant_codigo', 'address_id', 'is_main'];
+
+    protected function casts(): array
+    {
+        return ['is_main' => 'boolean'];
+    }
+
+    /** @return BelongsTo<Tenant, $this> */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    /** @return BelongsTo<Address, $this> */
+    public function address(): BelongsTo
+    {
+        return $this->belongsTo(Address::class);
+    }
+}

app/Domains/Core/Address/Resources/AddressResource.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Core\Address\Resources;
+
+use App\Domains\Core\Address\Models\Address;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin Address */
+class AddressResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'label' => $this->label,
+            'address_text' => $this->address_text,
+            'latitude' => $this->latitude === null ? null : (float) $this->latitude,
+            'longitude' => $this->longitude === null ? null : (float) $this->longitude,
+        ];
+    }
+}

app/Domains/Core/Administrator/Controllers/AdminAppAdministratorController.php

@@ -20,6 +20,7 @@ class AdminAppAdministratorController extends Controller
         return AdministratorResource::collection($this->administratorService->list(
             $request->user()->tenant()->firstOrFail(),
             $request->string('search')->trim()->toString() ?: null,
+            $request->user()->event_id,
         ));
     }
 
@@ -28,6 +29,7 @@ class AdminAppAdministratorController extends Controller
         return AdministratorResource::make($this->administratorService->create(
             $request->user()->tenant()->firstOrFail(),
             $request->validated(),
+            $request->user()->event_id,
         ));
     }
 
@@ -37,6 +39,7 @@ class AdminAppAdministratorController extends Controller
             $request->user()->tenant()->firstOrFail(),
             $administrator,
             $request->validated(),
+            $request->user()->event_id,
         ));
     }
 

app/Domains/Core/Administrator/Resources/AdministratorResource.php

@@ -18,6 +18,7 @@ class AdministratorResource extends JsonResource
             'dni' => $this->dni,
             'email' => $this->email,
             'rol_codigo' => $this->rol_codigo,
+            'event_id' => $this->event_id,
             'role' => $this->whenLoaded('role', fn () => [
                 'codigo' => $this->role?->codigo,
                 'nombre' => $this->role?->nombre,

app/Domains/Core/Administrator/Services/AdministratorService.php

@@ -19,9 +19,9 @@ class AdministratorService
     public function __construct(private readonly ResetPasswordAttemptService $resetPasswordAttemptService) {}
 
     /** @return Collection<int, User> */
-    public function list(Tenant $tenant, ?string $search = null): Collection
+    public function list(Tenant $tenant, ?string $search = null, ?int $eventId = null): Collection
     {
-        return $this->query($tenant)->with('role')
+        return $this->query($tenant, $eventId)->with('role')
             ->when($search, fn (Builder $query, string $search) => $query->where(function (Builder $query) use ($search): void {
                 $query->where('nombre_apellido', 'like', "%{$search}%")
                     ->orWhere('dni', 'like', "%{$search}%")
@@ -31,14 +31,15 @@ class AdministratorService
     }
 
     /** @param array<string, mixed> $data */
-    public function create(Tenant $tenant, array $data): User
+    public function create(Tenant $tenant, array $data, ?int $eventId = null): User
     {
-        return DB::transaction(function () use ($tenant, $data): User {
+        return DB::transaction(function () use ($tenant, $data, $eventId): User {
             $administrator = User::query()->create([
                 ...$this->attributes($data),
                 'password' => Str::random(64),
                 'rol_codigo' => RoleCode::AdminApp->value,
                 'tenant_codigo' => $tenant->codigo,
+                'event_id' => $eventId,
             ]);
             $this->resetPasswordAttemptService->createForAdminAppEmail(
                 $administrator->email,
@@ -50,10 +51,10 @@ class AdministratorService
     }
 
     /** @param array<string, mixed> $data */
-    public function update(Tenant $tenant, int $administratorId, array $data): User
+    public function update(Tenant $tenant, int $administratorId, array $data, ?int $eventId = null): User
     {
-        return DB::transaction(function () use ($tenant, $administratorId, $data): User {
-            $administrator = $this->query($tenant)->lockForUpdate()->findOrFail($administratorId);
+        return DB::transaction(function () use ($tenant, $administratorId, $data, $eventId): User {
+            $administrator = $this->query($tenant, $eventId)->lockForUpdate()->findOrFail($administratorId);
             $administrator->update($this->attributes($data));
 
             return $administrator->load('role');
@@ -66,11 +67,11 @@ class AdministratorService
             // Serialize deletions for this tenant, including requests already authenticated
             // when another administrator removes their account.
             Tenant::query()->whereKey($tenant->getKey())->lockForUpdate()->firstOrFail();
-            $administrator = $this->query($tenant)->lockForUpdate()->findOrFail($administratorId);
+            $administrator = $this->query($tenant, $actor->event_id)->lockForUpdate()->findOrFail($administratorId);
             if ($administrator->is($actor)) {
                 throw ValidationException::withMessages(['administrator' => 'No podés eliminar tu propio usuario.']);
             }
-            $activeAdministrators = $this->query($tenant)->lockForUpdate()->get();
+            $activeAdministrators = $this->query($tenant, $actor->event_id)->lockForUpdate()->get();
             if ($activeAdministrators->count() <= 1) {
                 throw ValidationException::withMessages(['administrator' => 'El tenant debe conservar al menos un administrador.']);
             }
@@ -80,10 +81,11 @@ class AdministratorService
         });
     }
 
-    private function query(Tenant $tenant): Builder
+    private function query(Tenant $tenant, ?int $eventId = null): Builder
     {
         return User::query()->where('tenant_codigo', $tenant->codigo)
-            ->where('rol_codigo', RoleCode::AdminApp->value);
+            ->where('rol_codigo', RoleCode::AdminApp->value)
+            ->when($eventId !== null, fn (Builder $query): Builder => $query->where('event_id', $eventId));
     }
 
     /** @param array<string, mixed> $data

app/Domains/Core/Administrator/documentacion/README.md

@@ -55,6 +55,8 @@ No agrega tablas ni migraciones. No modifica el CRUD de escáneres ni el fronten
 
 ## Verificación
 
+Cuando el actor tiene `event_id`, los nuevos administradores heredan su evento y el listado, la búsqueda, la edición y la baja se limitan a ese evento dentro del tenant. La comprobación de administradores activos también usa ese alcance. El evento se toma del usuario autenticado, no del cuerpo de la solicitud; sin `event_id` se conserva el comportamiento por tenant.
+
 `php artisan test tests/Feature/Administrator/AdministratorControllerTest.php`
 
 Las pruebas cubren CRUD, normalización y unicidad del email, establecimiento de

app/Domains/Core/Auth/Models/User.php

@@ -2,11 +2,12 @@
 
 namespace App\Domains\Core\Auth\Models;
 
+use App\Domains\Commerce\Catalog\Models\Category;
 use App\Domains\Core\Authorization\Enums\RoleCode;
 use App\Domains\Core\Authorization\Models\Role;
-use App\Domains\Commerce\Catalog\Models\Category;
-use App\Domains\Ticketing\Event\Models\EventDateChangeView;
 use App\Domains\Core\Tenant\Models\Tenant;
+use App\Domains\Ticketing\Event\Models\Event;
+use App\Domains\Ticketing\Event\Models\EventDateChangeView;
 use App\Domains\Ticketing\Ticket\Models\ScanAttempt;
 use Database\Factories\UserFactory;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
@@ -20,7 +21,7 @@ use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Sanctum\HasApiTokens;
 
-#[Fillable(['nombre_apellido', 'email', 'password', 'dni', 'telefono', 'google_id', 'rol_codigo', 'tenant_codigo'])]
+#[Fillable(['nombre_apellido', 'email', 'password', 'dni', 'telefono', 'google_id', 'rol_codigo', 'tenant_codigo', 'event_id'])]
 #[Hidden(['password', 'remember_token', 'active_email', 'active_google_id'])]
 class User extends Authenticatable
 {
@@ -86,6 +87,12 @@ class User extends Authenticatable
         return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
     }
 
+    /** @return BelongsTo<Event, $this> */
+    public function event(): BelongsTo
+    {
+        return $this->belongsTo(Event::class);
+    }
+
     /** @return BelongsToMany<Category, $this> */
     public function scanCategories(): BelongsToMany
     {
@@ -103,6 +110,7 @@ class User extends Authenticatable
     protected function casts(): array
     {
         return [
+            'event_id' => 'integer',
             'email_verified_at' => 'datetime',
             'password' => 'hashed',
             'failed_login_attempts' => 'integer',

app/Domains/Core/Auth/Resources/UserResource.php

@@ -24,6 +24,7 @@ class UserResource extends JsonResource
             'telefono' => $this->telefono,
             'rol_codigo' => $this->rol_codigo,
             'tenant_codigo' => $this->tenant_codigo,
+            'event_id' => $this->event_id,
             'categories' => $this->whenLoaded('scanCategories', fn () => $this->scanCategories
                 ->map(fn ($category) => [
                     'id' => $category->id,

app/Domains/Core/Auth/Services/AdminAppContextService.php

@@ -11,6 +11,9 @@ class AdminAppContextService
     {
         $tenant = $user->tenant()
             ->with([
+                'socialMedia',
+                'addresses',
+                'phoneNumbers',
                 'menues' => fn ($query) => $query
                     ->whereHas(
                         'roles',

app/Domains/Core/Bootstrap/Services/TenantBootstrapService.php

@@ -33,12 +33,17 @@ class TenantBootstrapService
             $tenant,
             [
                 'eventDateChanges',
-                'menues' => fn ($query) => $query->whereHas(
-                    'roles',
-                    fn ($query) => $query->where('codigo', RoleCode::User->value)
-                ),
-                $tenant->storefront_website_type_code === 'onticket_multi_event'
-                    ? 'eventCategories' : 'categories' => fn ($query) => $query->orderBy('nombre'),
+                'menues' => fn ($query) => $query
+                    ->where(fn ($query) => $query
+                        ->where('menues.code', 'help.contact')
+                        ->orWhere('tenants_menues.is_enabled', true))
+                    ->whereHas(
+                        'roles',
+                        fn ($query) => $query->where('codigo', RoleCode::User->value)
+                    ),
+                ...($tenant->storefront_website_type_code === 'onticket_multi_event'
+                    ? ['eventCategories' => fn ($query) => $query->orderBy('nombre')]
+                    : ['categories' => fn ($query) => $query->orderBy('sort_order')->orderBy('id')]),
             ]
         );
     }

app/Domains/Core/Menu/Models/Menu.php

@@ -76,7 +76,7 @@ class Menu extends Model
             'codigo'
         )
             ->using(TenantMenu::class)
-            ->withPivot('static_content')
+            ->withPivot('static_content', 'is_enabled')
             ->withTimestamps();
     }
 

app/Domains/Core/Menu/Models/TenantMenu.php

@@ -16,12 +16,14 @@ class TenantMenu extends Pivot
         'tenant_code',
         'menu_code',
         'static_content',
+        'is_enabled',
     ];
 
     protected function casts(): array
     {
         return [
             'static_content' => 'array',
+            'is_enabled' => 'boolean',
         ];
     }
 

app/Domains/Core/PhoneNumber/Models/PhoneNumber.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Domains\Core\PhoneNumber\Models;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+
+class PhoneNumber extends Model
+{
+    protected $attributes = ['country_code' => '+54', 'mobile_prefix' => '9'];
+
+    protected $fillable = ['label', 'country_code', 'mobile_prefix', 'area_code', 'local_number'];
+
+    public function getNumberAttribute(?string $legacyNumber): string
+    {
+        if ($this->local_number === null) {
+            return $legacyNumber ?? '';
+        }
+
+        $areaCode = $this->mobile_prefix && $this->area_code
+            ? '('.$this->area_code.')'
+            : $this->area_code;
+
+        return implode(' ', array_filter([
+            $this->country_code,
+            $this->mobile_prefix,
+            $areaCode,
+            $this->local_number,
+        ], fn ($part): bool => $part !== null && $part !== ''));
+    }
+
+    public static function dialableNumber(string $number): string
+    {
+        return preg_replace('/[^0-9+]/', '', $number);
+    }
+
+    public function telUrl(): string
+    {
+        if ($this->country_code === null || $this->local_number === null) {
+            return 'tel:'.self::dialableNumber($this->number);
+        }
+
+        $areaCode = $this->area_code ?? '';
+        if ($this->country_code === '+54') {
+            $areaCode = ltrim($areaCode, '0');
+        }
+
+        return 'tel:'.self::dialableNumber(
+            $this->country_code.($this->mobile_prefix ?? '').$areaCode.$this->local_number
+        );
+    }
+
+    public function tenants(): BelongsToMany
+    {
+        return $this->belongsToMany(Tenant::class, 'tenant_phone_numbers', 'phone_number_id', 'tenant_codigo', 'id', 'codigo')
+            ->using(TenantPhoneNumber::class)
+            ->withPivot(['id', 'is_main'])
+            ->withTimestamps();
+    }
+}

app/Domains/Core/PhoneNumber/Models/TenantPhoneNumber.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Core\PhoneNumber\Models;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\Pivot;
+
+class TenantPhoneNumber extends Pivot
+{
+    protected $table = 'tenant_phone_numbers';
+
+    public $incrementing = true;
+
+    protected $fillable = ['tenant_codigo', 'phone_number_id', 'is_main'];
+
+    protected function casts(): array
+    {
+        return ['is_main' => 'boolean'];
+    }
+
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    public function phoneNumber(): BelongsTo
+    {
+        return $this->belongsTo(PhoneNumber::class);
+    }
+}

app/Domains/Core/PhoneNumber/Resources/PhoneNumberResource.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Core\PhoneNumber\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class PhoneNumberResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'label' => $this->label,
+            'country_code' => $this->country_code,
+            'mobile_prefix' => $this->mobile_prefix,
+            'area_code' => $this->area_code,
+            'local_number' => $this->local_number,
+            'number' => $this->number,
+            'tel_url' => $this->resource->telUrl(),
+            'is_main' => $this->whenPivotLoaded('tenant_phone_numbers', fn () => (bool) $this->pivot->is_main),
+        ];
+    }
+}

app/Domains/Core/Staff/Controllers/AdminAppStaffController.php

@@ -26,6 +26,7 @@ class AdminAppStaffController extends Controller
         return StaffResource::collection($this->staffService->list(
             $request->user()->tenant()->firstOrFail(),
             $request->string('search')->trim()->toString() ?: null,
+            $request->user()->event_id,
         ));
     }
 
@@ -34,6 +35,7 @@ class AdminAppStaffController extends Controller
         return StaffResource::make($this->staffService->create(
             $request->user()->tenant()->firstOrFail(),
             $request->validated(),
+            $request->user()->event_id,
         ));
     }
 
@@ -43,12 +45,13 @@ class AdminAppStaffController extends Controller
             $request->user()->tenant()->firstOrFail(),
             $staff,
             $request->validated(),
+            $request->user()->event_id,
         ));
     }
 
     public function destroy(Request $request, int $staff): Response
     {
-        $this->staffService->delete($request->user()->tenant()->firstOrFail(), $staff);
+        $this->staffService->delete($request->user()->tenant()->firstOrFail(), $staff, $request->user()->event_id);
 
         return response()->noContent();
     }
@@ -60,6 +63,7 @@ class AdminAppStaffController extends Controller
         $scanner = $this->staffService->find(
             $request->user()->tenant()->firstOrFail(),
             $staff,
+            $request->user()->event_id,
         );
 
         return ScanAttemptResource::collection(

app/Domains/Core/Staff/Resources/StaffResource.php

@@ -18,6 +18,7 @@ class StaffResource extends JsonResource
             'dni' => $this->dni,
             'email' => $this->email,
             'rol_codigo' => $this->rol_codigo,
+            'event_id' => $this->event_id,
             'role' => $this->whenLoaded('role', fn () => [
                 'codigo' => $this->role?->codigo,
                 'nombre' => $this->role?->nombre,

app/Domains/Core/Staff/Services/StaffService.php

@@ -2,11 +2,11 @@
 
 namespace App\Domains\Core\Staff\Services;
 
+use App\Domains\Commerce\Catalog\Models\Category;
 use App\Domains\Core\Auth\Models\ResetPasswordAttempt;
 use App\Domains\Core\Auth\Models\User;
 use App\Domains\Core\Auth\Services\ResetPasswordAttemptService;
 use App\Domains\Core\Authorization\Enums\RoleCode;
-use App\Domains\Commerce\Catalog\Models\Category;
 use App\Domains\Core\Tenant\Models\Tenant;
 use Illuminate\Database\Eloquent\Builder;
 use Illuminate\Database\Eloquent\Collection;
@@ -22,9 +22,9 @@ class StaffService
     ) {}
 
     /** @return Collection<int, User> */
-    public function list(Tenant $tenant, ?string $search = null): Collection
+    public function list(Tenant $tenant, ?string $search = null, ?int $eventId = null): Collection
     {
-        return $this->staffQuery($tenant)
+        return $this->staffQuery($tenant, $eventId)
             ->with(['role', 'scanCategories' => fn ($query) => $query->orderBy('nombre')])
             ->when($search, function (Builder $query, string $search): void {
                 $query->where(function (Builder $query) use ($search): void {
@@ -52,18 +52,19 @@ class StaffService
     }
 
     /** @param array<string, mixed> $data */
-    public function create(Tenant $tenant, array $data): User
+    public function create(Tenant $tenant, array $data, ?int $eventId = null): User
     {
         $categoryIds = $this->categoryIdsFor($tenant, $data);
         $this->assertCategoriesBelongToTenant($tenant, $categoryIds);
 
-        return DB::transaction(function () use ($tenant, $data, $categoryIds): User {
+        return DB::transaction(function () use ($tenant, $data, $categoryIds, $eventId): User {
             $staff = User::query()->create([
                 ...Arr::only($data, ['nombre_apellido', 'dni', 'email']),
                 'email' => mb_strtolower(trim((string) $data['email'])),
                 'password' => Str::random(64),
                 'rol_codigo' => RoleCode::Scanner->value,
                 'tenant_codigo' => $tenant->codigo,
+                'event_id' => $eventId,
             ]);
             $staff->scanCategories()->sync($categoryIds);
             $this->resetPasswordAttemptService->createForScannerEmail(
@@ -76,9 +77,9 @@ class StaffService
     }
 
     /** @param array<string, mixed> $data */
-    public function update(Tenant $tenant, int $staffId, array $data): User
+    public function update(Tenant $tenant, int $staffId, array $data, ?int $eventId = null): User
     {
-        $staff = $this->find($tenant, $staffId);
+        $staff = $this->find($tenant, $staffId, $eventId);
         $categoryIds = $this->categoryIdsFor($tenant, $data);
         $this->assertCategoriesBelongToTenant($tenant, $categoryIds);
 
@@ -92,9 +93,9 @@ class StaffService
         });
     }
 
-    public function delete(Tenant $tenant, int $staffId): void
+    public function delete(Tenant $tenant, int $staffId, ?int $eventId = null): void
     {
-        $staff = $this->find($tenant, $staffId);
+        $staff = $this->find($tenant, $staffId, $eventId);
 
         DB::transaction(function () use ($staff): void {
             $staff->tokens()->delete();
@@ -102,16 +103,17 @@ class StaffService
         });
     }
 
-    public function find(Tenant $tenant, int $staffId): User
+    public function find(Tenant $tenant, int $staffId, ?int $eventId = null): User
     {
-        return $this->staffQuery($tenant)->findOrFail($staffId);
+        return $this->staffQuery($tenant, $eventId)->findOrFail($staffId);
     }
 
-    private function staffQuery(Tenant $tenant): Builder
+    private function staffQuery(Tenant $tenant, ?int $eventId = null): Builder
     {
         return User::query()
             ->where('tenant_codigo', $tenant->codigo)
-            ->where('rol_codigo', RoleCode::Scanner->value);
+            ->where('rol_codigo', RoleCode::Scanner->value)
+            ->when($eventId !== null, fn (Builder $query): Builder => $query->where('event_id', $eventId));
     }
 
     /**

app/Domains/Core/Staff/documentacion/README.md

@@ -18,3 +18,5 @@ Recurso REST `/v1/adminapp/tenant/staff`, excepto detalle individual, protegido
 ## Dependencias y reglas
 
 Usa `Auth/User` como entidad de personal, `Authorization` para su rol, `Catalog/Category` para asignaciones y `Tenant` para aislamiento. Toda búsqueda, edición o borrado debe comprobar que el usuario pertenece al tenant autenticado.
+
+Si el administrador autenticado tiene `event_id`, el alta de scanners hereda ese valor y las búsquedas, ediciones, bajas y consultas de intentos de escaneo se limitan a personal del mismo evento. El cliente no puede elegir ni cambiar el evento. Sin `event_id`, se mantiene el alcance por tenant.

app/Domains/Core/Tenant/Controllers/AdminApp/BrandController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Controllers\AdminApp;
+
+use App\Domains\Core\Tenant\Requests\AdminApp\UpdateBrandRequest;
+use App\Domains\Core\Tenant\Resources\AdminApp\BrandResource;
+use App\Domains\Core\Tenant\Services\BrandService;
+use App\Domains\Core\Tenant\Services\TenantInformationService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class BrandController extends Controller
+{
+    public function show(Request $request, TenantInformationService $tenantInformationService): BrandResource
+    {
+        $tenant = $request->user()->tenant()->firstOrFail();
+
+        return BrandResource::make($tenantInformationService->load($tenant));
+    }
+
+    public function update(
+        UpdateBrandRequest $request,
+        BrandService $brandService,
+        TenantInformationService $tenantInformationService,
+    ): BrandResource {
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $brandService->update($tenant, $request->validated());
+
+        return BrandResource::make($tenantInformationService->load($tenant->fresh()));
+    }
+}

app/Domains/Core/Tenant/Controllers/AdminApp/ContactController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Controllers\AdminApp;
+
+use App\Domains\Core\Tenant\Requests\AdminApp\UpdateContactRequest;
+use App\Domains\Core\Tenant\Resources\AdminApp\ContactResource;
+use App\Domains\Core\Tenant\Services\ContactService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+
+class ContactController extends Controller
+{
+    public function show(Request $request, ContactService $service): ContactResource
+    {
+        return ContactResource::make($service->load($request->user()->tenant()->firstOrFail()));
+    }
+
+    public function update(UpdateContactRequest $request, ContactService $service): ContactResource
+    {
+        return ContactResource::make($service->update($request->user()->tenant()->firstOrFail(), $request->validated()));
+    }
+}

app/Domains/Core/Tenant/Controllers/AdminApp/HelpMenuController.php

@@ -0,0 +1,90 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Controllers\AdminApp;
+
+use App\Domains\Core\Tenant\Requests\AdminApp\UpdateHelpMenuContentRequest;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class HelpMenuController extends Controller
+{
+    private const MENU_CODES = [
+        'help.faq',
+        'help.terms-and-conditions',
+    ];
+
+    public function index(Request $request): JsonResponse
+    {
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $menus = $tenant->menues()
+            ->whereIn('menues.code', self::MENU_CODES)
+            ->get()
+            ->keyBy('code');
+
+        return response()->json([
+            'data' => collect(self::MENU_CODES)->mapWithKeys(
+                fn (string $code): array => [$code => [
+                    'code' => $code,
+                    'is_enabled' => (bool) ($menus->get($code)?->pivot?->is_enabled ?? false),
+                    'static_content' => $menus->get($code)?->pivot?->static_content
+                        ?? $this->emptyContent($code),
+                ]]
+            ),
+        ]);
+    }
+
+    public function toggle(
+        Request $request,
+        string $menuCode,
+    ): JsonResponse {
+        abort_unless(in_array($menuCode, self::MENU_CODES, true), 404);
+
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $tenantMenu = $tenant->menues()
+            ->where('menues.code', $menuCode)
+            ->firstOrFail();
+        $isEnabled = ! $tenantMenu->pivot->is_enabled;
+
+        $tenant->menues()->updateExistingPivot($menuCode, [
+            'is_enabled' => $isEnabled,
+        ]);
+
+        return response()->json([
+            'data' => [
+                'code' => $tenantMenu->code,
+                'is_enabled' => $isEnabled,
+            ],
+        ]);
+    }
+
+    public function updateContent(
+        UpdateHelpMenuContentRequest $request,
+        string $menuCode,
+    ): JsonResponse {
+        abort_unless(in_array($menuCode, self::MENU_CODES, true), 404);
+
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $tenantMenu = $tenant->menues()
+            ->where('menues.code', $menuCode)
+            ->firstOrFail();
+        $staticContent = $request->validated('static_content');
+
+        $tenant->menues()->updateExistingPivot($menuCode, [
+            'static_content' => $staticContent,
+        ]);
+
+        return response()->json([
+            'data' => [
+                'code' => $tenantMenu->code,
+                'is_enabled' => (bool) $tenantMenu->pivot->is_enabled,
+                'static_content' => $staticContent,
+            ],
+        ]);
+    }
+
+    private function emptyContent(string $menuCode): array
+    {
+        return $menuCode === 'help.faq' ? [] : ['html' => ''];
+    }
+}

app/Domains/Core/Tenant/Models/Tenant.php

@@ -6,6 +6,10 @@ use App\Domains\Commerce\Catalog\Enums\GroupLayout;
 use App\Domains\Commerce\Catalog\Enums\ProductLayout;
 use App\Domains\Commerce\Catalog\Models\CatalogItem;
 use App\Domains\Commerce\Catalog\Models\Category;
+use App\Domains\Core\Address\Models\Address;
+use App\Domains\Core\Address\Models\TenantAddress;
+use App\Domains\Core\PhoneNumber\Models\PhoneNumber;
+use App\Domains\Core\PhoneNumber\Models\TenantPhoneNumber;
 use App\Domains\Core\Client\Models\Client;
 use App\Domains\Core\Menu\Models\Menu;
 use App\Domains\Core\Menu\Models\TenantMenu;
@@ -22,6 +26,7 @@ use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\HasOneThrough;
 use Illuminate\Support\Facades\Schema;
 
 #[Fillable([
@@ -308,6 +313,39 @@ class Tenant extends Model
         return $this->hasMany(WebsiteExtra::class, 'website_code', 'codigo');
     }
 
+    /** @return BelongsToMany<Address, $this> */
+    public function addresses(): BelongsToMany
+    {
+        return $this->belongsToMany(Address::class, 'tenant_addresses', 'tenant_codigo', 'address_id', 'codigo', 'id')
+            ->using(TenantAddress::class)
+            ->withPivot(['id', 'is_main'])
+            ->withTimestamps()
+            ->orderByPivot('id');
+    }
+
+    /** @return HasOneThrough<Address, TenantAddress, $this> */
+    public function mainAddress(): HasOneThrough
+    {
+        return $this->hasOneThrough(Address::class, TenantAddress::class, 'tenant_codigo', 'id', 'codigo', 'address_id')
+            ->where('tenant_addresses.is_main', true);
+    }
+
+    public function phoneNumbers(): BelongsToMany
+    {
+        return $this->belongsToMany(PhoneNumber::class, 'tenant_phone_numbers', 'tenant_codigo', 'phone_number_id', 'codigo', 'id')
+            ->using(TenantPhoneNumber::class)
+            ->withPivot(['id', 'is_main'])
+            ->withTimestamps()
+            ->orderByPivot('is_main', 'desc')
+            ->orderByPivot('id');
+    }
+
+    public function mainPhoneNumber(): HasOneThrough
+    {
+        return $this->hasOneThrough(PhoneNumber::class, TenantPhoneNumber::class, 'tenant_codigo', 'id', 'codigo', 'phone_number_id')
+            ->where('tenant_phone_numbers.is_main', true);
+    }
+
     public function menues(): BelongsToMany
     {
         return $this->belongsToMany(
@@ -319,7 +357,7 @@ class Tenant extends Model
             'code'
         )
             ->using(TenantMenu::class)
-            ->withPivot('static_content')
+            ->withPivot('static_content', 'is_enabled')
             ->withTimestamps();
     }
 }

app/Domains/Core/Tenant/Requests/AdminApp/UpdateBrandRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Requests\AdminApp;
+
+use App\Shared\Rules\CroppedImageOrBase64Rule;
+use App\Shared\Rules\ImageOrBase64Rule;
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateBrandRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        $shopit = $this->user()->tenant()->firstOrFail()->storefront_website_type_code === 'shopit';
+
+        return [
+            'nombre' => ['required', 'string', 'max:255'],
+            'primary_color' => ['required', 'regex:/^#[0-9a-fA-F]{6}$/'],
+            'footer_bg_color' => ['required', 'regex:/^#[0-9a-fA-F]{6}$/'],
+            'header_logo' => ['present', 'nullable', new ImageOrBase64Rule],
+            'footer_logo' => ['present', 'nullable', new ImageOrBase64Rule],
+            'banner_images' => [$shopit ? 'present' : 'prohibited', 'array', 'max:10'],
+            'banner_images.*' => ['required', new CroppedImageOrBase64Rule],
+        ];
+    }
+}

app/Domains/Core/Tenant/Requests/AdminApp/UpdateContactRequest.php

@@ -0,0 +1,71 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Requests\AdminApp;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateContactRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        $tenantCode = $this->user()->tenant_codigo;
+
+        return [
+            'social_media' => ['present', 'array', 'max:30'],
+            'social_media.*' => ['array:code,url'],
+            'social_media.*.code' => ['required', 'string', 'distinct', Rule::exists('social_media', 'code')],
+            'social_media.*.url' => ['required', 'url:http,https', 'max:255'],
+            'addresses' => ['present', 'array', 'list', 'max:50'],
+            'addresses.*' => ['array:id,address_text,is_main'],
+            'addresses.*.id' => ['nullable', 'integer', 'distinct', Rule::exists('tenant_addresses', 'address_id')->where('tenant_codigo', $tenantCode)],
+            'addresses.*.address_text' => ['required', 'string', 'max:1000'],
+            'addresses.*.is_main' => ['sometimes', 'boolean'],
+            'phone_numbers' => ['present', 'array', 'list', 'max:50'],
+            'phone_numbers.*' => ['array:id,country_code,mobile_prefix,area_code,local_number,is_main'],
+            'phone_numbers.*.id' => ['nullable', 'integer', 'distinct', Rule::exists('tenant_phone_numbers', 'phone_number_id')->where('tenant_codigo', $tenantCode)],
+            'phone_numbers.*.country_code' => ['present', 'nullable', 'regex:/^\+[0-9]{1,4}$/'],
+            'phone_numbers.*.mobile_prefix' => ['present', 'nullable', 'regex:/^[0-9]{1,4}$/'],
+            'phone_numbers.*.area_code' => ['present', 'nullable', 'regex:/^[0-9]{1,8}$/'],
+            'phone_numbers.*.local_number' => ['required', 'string', 'max:50', 'regex:/^[0-9+() .-]+$/', 'regex:/[0-9]/'],
+            'phone_numbers.*.is_main' => ['sometimes', 'boolean'],
+        ];
+    }
+
+    public function attributes(): array
+    {
+        return [
+            'social_media' => 'redes sociales',
+            'social_media.*.code' => 'red social',
+            'social_media.*.url' => 'URL de la red social',
+            'addresses' => 'direcciones',
+            'addresses.*.id' => 'dirección',
+            'addresses.*.address_text' => 'dirección',
+            'addresses.*.is_main' => 'dirección principal',
+            'phone_numbers' => 'teléfonos',
+            'phone_numbers.*.id' => 'teléfono',
+            'phone_numbers.*.country_code' => 'código de país',
+            'phone_numbers.*.mobile_prefix' => 'prefijo móvil',
+            'phone_numbers.*.area_code' => 'código de área',
+            'phone_numbers.*.local_number' => 'número de teléfono',
+            'phone_numbers.*.is_main' => 'teléfono principal',
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'required' => 'Completá :attribute.',
+            'url' => 'La URL debe ser válida y comenzar con http:// o https://.',
+            'regex' => 'El formato de :attribute no es válido.',
+            'exists' => 'El valor de :attribute no está disponible para este comercio.',
+            'distinct' => 'Hay un valor duplicado en :attribute.',
+            'max.string' => 'El campo :attribute admite hasta :max caracteres.',
+        ];
+    }
+}

app/Domains/Core/Tenant/Requests/AdminApp/UpdateHelpMenuContentRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Requests\AdminApp;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateHelpMenuContentRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return match ($this->route('menuCode')) {
+            'help.faq' => [
+                'static_content' => ['required', 'array'],
+                'static_content.*.pregunta' => ['required', 'string'],
+                'static_content.*.respuesta' => ['required', 'string'],
+                'static_content.*.is_active' => ['required', 'boolean'],
+            ],
+            'help.terms-and-conditions' => [
+                'static_content' => ['required', 'array'],
+                'static_content.html' => ['present', 'nullable', 'string'],
+            ],
+            default => [],
+        };
+    }
+}

app/Domains/Core/Tenant/Resources/AdminApp/BrandResource.php

@@ -0,0 +1,104 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Resources\AdminApp;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Shared\Attachable\Models\Attachment;
+use App\Shared\Attachable\Models\AttachmentCrop;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin Tenant */
+class BrandResource extends JsonResource
+{
+    /** @return array<string, mixed> */
+    public function toArray(Request $request): array
+    {
+        return [
+            'nombre' => $this->nombre,
+            'primary_color' => $this->primary_color,
+            'header_bg_color' => $this->header_bg_color,
+            'footer_color' => $this->footerColor(),
+            'header_logo' => $this->headerLogo?->getTemporaryUrl(1440),
+            'header_logo_key' => $this->headerLogo?->key,
+            'footer_logo' => $this->footerLogo?->getTemporaryUrl(1440),
+            'footer_logo_key' => $this->footerLogo?->key,
+            'can_edit_carousel' => $this->canEditCarousel(),
+            'banner_images' => $this->bannerImages(),
+        ];
+    }
+
+    private function footerColor(): string
+    {
+        $footerColor = strtolower(trim((string) $this->footer_bg_color));
+        $primaryColor = strtolower(trim((string) $this->primary_color));
+
+        if ($footerColor !== '' && $footerColor === $primaryColor) {
+            return 'primary';
+        }
+
+        if (in_array($footerColor, ['#000', '#000000', 'black'], true)) {
+            return 'black';
+        }
+
+        if ($footerColor === '' || in_array($footerColor, ['#fff', '#ffffff', 'white'], true)) {
+            return 'white';
+        }
+
+        return 'primary';
+    }
+
+    /** @return array<int, array<string, mixed>> */
+    private function bannerImages(): array
+    {
+        if (! $this->canEditCarousel()) {
+            return [];
+        }
+
+        $extra = $this->websiteExtras->first(
+            fn ($extra) => $extra->is_enabled && $extra->websiteTypeExtra->codigo === 'carousel'
+        );
+
+        if ($extra === null) {
+            return [];
+        }
+
+        $images = $extra->resolvedConfig();
+
+        if (! is_array($images)) {
+            return [];
+        }
+
+        return collect($images)
+            ->filter(fn ($image) => $image instanceof Attachment)
+            ->map(function (Attachment $image): array {
+                $desktopCrop = $image->cropVariants
+                    ->firstWhere('variant', AttachmentCrop::DESKTOP);
+
+                return [
+                    'key' => $image->key,
+                    'url' => ($desktopCrop?->croppedAttachment ?? $image)->getTemporaryUrl(1440),
+                    'original_url' => $image->getTemporaryUrl(1440),
+                    'crop' => $desktopCrop === null ? null : [
+                        'crop_horizontal' => $desktopCrop->crop_horizontal,
+                        'crop_vertical' => $desktopCrop->crop_vertical,
+                    ],
+                ];
+            })
+            ->values()
+            ->all();
+    }
+
+    private function canEditCarousel(): bool
+    {
+        if ($this->storefront_website_type_code !== 'shopit') {
+            return false;
+        }
+
+        $extra = $this->websiteExtras->first(
+            fn ($extra) => $extra->websiteTypeExtra->codigo === 'carousel'
+        );
+
+        return $extra === null || $extra->is_enabled;
+    }
+}

app/Domains/Core/Tenant/Resources/AdminApp/ContactResource.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Resources\AdminApp;
+
+use App\Domains\Core\PhoneNumber\Resources\PhoneNumberResource;
+use App\Domains\Core\Tenant\Resources\TenantAddressResource;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class ContactResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'social_media' => $this->socialMedia->map(fn ($network) => [
+                'code' => $network->code,
+                'url' => $network->pivot->url,
+            ])->values(),
+            'addresses' => TenantAddressResource::collection($this->addresses),
+            'phone_numbers' => PhoneNumberResource::collection($this->phoneNumbers),
+        ];
+    }
+}

app/Domains/Core/Tenant/Resources/TenantAddressResource.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Resources;
+
+use App\Domains\Core\Address\Resources\AddressResource;
+use Illuminate\Http\Request;
+
+class TenantAddressResource extends AddressResource
+{
+    public function toArray(Request $request): array
+    {
+        return [...parent::toArray($request), 'is_main' => (bool) $this->pivot->is_main];
+    }
+}

app/Domains/Core/Tenant/Resources/TenantResource.php

@@ -3,7 +3,9 @@
 namespace App\Domains\Core\Tenant\Resources;
 
 use App\Domains\Commerce\Catalog\Models\Category;
+use App\Domains\Core\Address\Resources\AddressResource;
 use App\Domains\Core\Menu\Models\Menu;
+use App\Domains\Core\PhoneNumber\Resources\PhoneNumberResource;
 use App\Domains\Core\Tenant\Models\StorefrontWebsiteType;
 use App\Domains\Core\Tenant\Models\Tenant;
 use App\Domains\Ticketing\Event\Models\Event;
@@ -41,7 +43,11 @@ class TenantResource extends JsonResource
             'site_title' => $this->site_title ?? 'ShopitFront',
             'asset_url' => config('filesystems.disks.s3.url'),
             'address' => $this->address,
+            'addresses' => $this->whenLoaded('addresses', fn () => TenantAddressResource::collection($this->addresses)),
+            'main_address' => $this->whenLoaded('mainAddress', fn () => AddressResource::make($this->mainAddress)),
             'phone' => $this->phone,
+            'phone_numbers' => $this->whenLoaded('phoneNumbers', fn () => PhoneNumberResource::collection($this->phoneNumbers)),
+            'main_phone_number' => $this->whenLoaded('mainPhoneNumber', fn () => PhoneNumberResource::make($this->mainPhoneNumber)),
             'favicon' => $this->favicon?->getTemporaryUrl(1440),
             'primary_color' => $this->primary_color,
             'secondary_color' => $this->secondary_color,
@@ -99,6 +105,13 @@ class TenantResource extends JsonResource
                     ])
                     ->values()
             ),
+            'tenant_social_media' => $this->whenLoaded('socialMedia', fn () => $this->socialMedia
+                ->map(fn ($socialMedia) => [
+                    'code' => $socialMedia->code,
+                    'icon' => $socialMedia->icon,
+                    'name' => $socialMedia->name,
+                    'url' => $socialMedia->pivot->url,
+                ])->values()),
             'menues' => $this->whenLoaded(
                 'menues',
                 fn () => $this->menuTree($this->menues)
@@ -127,6 +140,7 @@ class TenantResource extends JsonResource
             'subtitle' => $event->subtitle,
             'description' => $event->description,
             'location' => $event->location,
+            'address' => AddressResource::make($event->address),
             'date_text' => $event->date_text,
             'dates' => $event->dates
                 ->filter(fn (EventDate $date): bool => $date->rescheduled_to_event_date_id === null)
@@ -193,12 +207,14 @@ class TenantResource extends JsonResource
                 'nombre' => $category->nombre,
                 'subcategories' => $childrenByParent
                     ->get($category->id, collect())
+                    ->filter(fn (Category $child) => $child->is_enabled)
                     ->map($formatCategory)
                     ->values(),
             ];
         };
 
         return $categories
+            ->filter(fn (Category $category) => $category->is_enabled)
             ->filter(fn (Category $category) => $category->categoria_id === null
                 || ! $categoryIds->has($category->categoria_id))
             ->map($formatCategory)
@@ -226,7 +242,7 @@ class TenantResource extends JsonResource
                 'route' => $menu->route,
             ];
 
-            if ($menu->pivot?->static_content !== null) {
+            if ($menu->content_type === Menu::CONTENT_TYPE_STATIC && $menu->pivot?->static_content !== null) {
                 $formatted['static_content'] = $menu->pivot->static_content;
             }
 

app/Domains/Core/Tenant/Services/BrandService.php

@@ -0,0 +1,165 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Services;
+
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Shared\Attachable\Enums\AttachmentType;
+use App\Shared\Attachable\Models\Attachment;
+use App\Shared\Attachable\Services\AttachmentService;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+use Throwable;
+
+class BrandService
+{
+    public function __construct(
+        private readonly AttachmentService $attachmentService,
+        private readonly WebsiteExtraService $websiteExtraService,
+    ) {}
+
+    /** @param array<string, mixed> $data */
+    public function update(Tenant $tenant, array $data): void
+    {
+        $carousel = $tenant->storefront_website_type_code === 'shopit'
+            ? $tenant->websiteExtras()->whereHas('websiteTypeExtra',
+                fn ($query) => $query->where('codigo', 'carousel'))->first()
+            : null;
+        $allowedBannerIds = is_array($carousel?->config) ? $carousel->config : [];
+        if ($carousel !== null && ! $carousel->is_enabled && ($data['banner_images'] ?? []) !== []) {
+            throw ValidationException::withMessages(['banner_images' => 'El carrusel está deshabilitado.']);
+        }
+        $seen = [];
+
+        foreach (['header_logo' => $tenant->header_logo_id, 'footer_logo' => $tenant->footer_logo_id] as $field => $id) {
+            $this->existingImage($data[$field], $id === null ? [] : [$id], $field);
+        }
+        foreach ($data['banner_images'] ?? [] as $index => $item) {
+            $image = is_array($item) ? $item['image'] : $item;
+            $attachment = $this->existingImage($image, $allowedBannerIds, "banner_images.{$index}");
+            if ($attachment !== null) {
+                if (isset($seen[$attachment->id])) {
+                    throw ValidationException::withMessages(["banner_images.{$index}" => 'La imagen está repetida.']);
+                }
+                $seen[$attachment->id] = true;
+            }
+        }
+
+        $created = [];
+
+        try {
+            DB::transaction(function () use ($tenant, $data, $carousel, &$created): void {
+                $header = $this->logo($data['header_logo'], $tenant->header_logo_id, $tenant, $created);
+                $footer = $this->logo($data['footer_logo'], $tenant->footer_logo_id, $tenant, $created);
+
+                $tenant->update([
+                    'nombre' => trim($data['nombre']),
+                    'primary_color' => $data['primary_color'],
+                    'footer_bg_color' => $data['footer_bg_color'],
+                    'header_logo_id' => $header?->id,
+                    'footer_logo_id' => $footer?->id,
+                ]);
+
+                if ($tenant->storefront_website_type_code !== 'shopit'
+                    || ($carousel !== null && ! $carousel->is_enabled)) {
+                    return;
+                }
+
+                $definition = $this->websiteExtraService->definitionForTenant($tenant, 'carousel');
+                $ids = [];
+                $recrops = [];
+                foreach ($data['banner_images'] as $item) {
+                    $image = is_array($item) ? $item['image'] : $item;
+                    $attachment = $this->existingImage($image, $carousel?->config ?? [], 'banner_images');
+                    $crops = $this->crops($item);
+
+                    if ($attachment === null) {
+                        $attachment = $crops === null
+                            ? $this->attachmentService->store($image, "tenants/{$tenant->codigo}/extras/carousel")
+                            : $this->attachmentService->storeCroppedImageVariants(
+                                $image, "tenants/{$tenant->codigo}/extras/carousel", $crops
+                            );
+                        $created[] = $attachment;
+                    } elseif ($crops !== null) {
+                        $recrops[] = [$attachment, $crops];
+                    }
+                    $ids[] = $attachment->id;
+                }
+
+                $tenant->websiteExtras()->updateOrCreate(
+                    ['website_type_extra_id' => $definition->id],
+                    ['config' => $ids]
+                );
+
+                foreach ($recrops as [$attachment, $crops]) {
+                    $this->attachmentService->updateImageCropVariants($attachment, $crops);
+                }
+            });
+        } catch (Throwable $error) {
+            foreach ($created as $attachment) {
+                $paths = [$attachment->path];
+                foreach ($attachment->cropVariants as $crop) {
+                    if ($crop->croppedAttachment !== null) {
+                        $paths[] = $crop->croppedAttachment->path;
+                    }
+                }
+                Storage::disk('s3')->delete($paths);
+            }
+            throw $error;
+        }
+    }
+
+    /** @param array<int, int> $allowedIds */
+    private function existingImage(mixed $value, array $allowedIds, string $field): ?Attachment
+    {
+        if (! is_string($value) || ! Str::isUuid($value)) {
+            return null;
+        }
+
+        $attachment = Attachment::query()->where('key', $value)->first();
+        if ($attachment === null || $attachment->type !== AttachmentType::Image
+            || ! in_array($attachment->id, $allowedIds, true)) {
+            throw ValidationException::withMessages([$field => 'La imagen no pertenece a esta marca.']);
+        }
+
+        return $attachment;
+    }
+
+    /** @param array<int, Attachment> $created */
+    private function logo(mixed $value, ?int $currentId, Tenant $tenant, array &$created): ?Attachment
+    {
+        if ($value === null) {
+            return null;
+        }
+
+        $existing = $this->existingImage($value, $currentId === null ? [] : [$currentId], 'logo');
+        if ($existing !== null) {
+            return $existing;
+        }
+
+        $attachment = $this->attachmentService->store($value, "tenants/{$tenant->codigo}/logos");
+        $created[] = $attachment;
+
+        return $attachment;
+    }
+
+    /** @return array<string, array<string, mixed>>|null */
+    private function crops(mixed $item): ?array
+    {
+        if (! is_array($item)) {
+            return null;
+        }
+
+        if (! isset($item['crop_horizontal'], $item['crop_vertical'])) {
+            return null;
+        }
+
+        $crop = [
+            'crop_horizontal' => $item['crop_horizontal'],
+            'crop_vertical' => $item['crop_vertical'],
+        ];
+
+        return ['desktop' => $crop, 'mobile' => $crop];
+    }
+}

app/Domains/Core/Tenant/Services/ContactService.php

@@ -0,0 +1,73 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Services;
+
+use App\Domains\Core\Address\Models\Address;
+use App\Domains\Core\PhoneNumber\Models\PhoneNumber;
+use App\Domains\Core\Tenant\Models\Tenant;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+
+class ContactService
+{
+    public function load(Tenant $tenant): Tenant
+    {
+        return $tenant->load([
+            'socialMedia',
+            'addresses' => fn ($query) => $query->reorder()->orderByPivot('is_main', 'desc')->orderByPivot('id'),
+            'phoneNumbers',
+        ]);
+    }
+
+    public function update(Tenant $tenant, array $data): Tenant
+    {
+        return DB::transaction(function () use ($tenant, $data): Tenant {
+            // Serialize contact writes, including changes to the principal links.
+            Tenant::query()->whereKey($tenant->id)->lockForUpdate()->firstOrFail();
+            $social = [];
+            foreach ($data['social_media'] as $index => $item) {
+                $social[$item['code']] = ['url' => $item['url'], 'orden' => $index];
+            }
+            $tenant->socialMedia()->sync($social);
+
+            foreach (['addresses', 'phone_numbers'] as $collection) {
+                $relation = $collection === 'addresses' ? $tenant->addresses() : $tenant->phoneNumbers();
+                $existing = $relation->get()->keyBy('id');
+                $links = [];
+                foreach (array_values($data[$collection]) as $index => $item) {
+                    $id = $item['id'] ?? null;
+                    if ($id !== null && ! $existing->has($id)) {
+                        throw ValidationException::withMessages(["{$collection}.{$index}.id" => 'El contacto no pertenece al comercio.']);
+                    }
+                    $record = $id === null
+                        ? ($collection === 'addresses' ? new Address : new PhoneNumber)
+                        : $existing->get($id);
+                    $attributes = collect($item)->except(['id', 'is_main'])->all();
+                    $record->fill($attributes);
+                    if (! $record->exists) {
+                        $record->label = $collection === 'addresses' ? 'Dirección' : 'Teléfono';
+                    }
+                    if ($record->exists && $record->isDirty()) {
+                        $shared = $record->tenants()->where('tenants.codigo', '!=', $tenant->codigo)->exists()
+                            || ($record instanceof Address && $record->events()->exists());
+                        if ($shared) {
+                            $record = $record->replicate();
+                        }
+                        // An edited street address must not retain coordinates for the old location.
+                        if ($record instanceof Address && $record->isDirty('address_text')) {
+                            $record->latitude = null;
+                            $record->longitude = null;
+                        }
+                    }
+                    $record->save();
+                    $links[$record->id] = ['is_main' => $index === 0];
+                }
+                // Clear the previous principal before sync to respect the unique index.
+                $relation->newPivotStatement()->where('tenant_codigo', $tenant->codigo)->update(['is_main' => false]);
+                $relation->sync($links);
+            }
+
+            return $this->load($tenant);
+        });
+    }
+}

app/Domains/Core/Tenant/Services/TenantAddressService.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Core\Tenant\Services;
+
+use App\Domains\Core\Address\Models\Address;
+use App\Domains\Core\Tenant\Models\Tenant;
+use Illuminate\Support\Facades\DB;
+
+class TenantAddressService
+{
+    public function setMainAddress(Tenant $tenant, Address $address): void
+    {
+        DB::transaction(function () use ($tenant, $address): void {
+            // Serialize changes for this tenant, including when it has no principal address yet.
+            Tenant::query()->where('codigo', $tenant->codigo)->lockForUpdate()->firstOrFail();
+            $tenant->addresses()->where('addresses.id', $address->id)->firstOrFail();
+
+            DB::table('tenant_addresses')->where('tenant_codigo', $tenant->codigo)
+                ->where('is_main', true)->update(['is_main' => false, 'updated_at' => now()]);
+            $tenant->addresses()->updateExistingPivot($address->id, ['is_main' => true]);
+        });
+
+        $tenant->unsetRelation('addresses');
+        $tenant->unsetRelation('mainAddress');
+    }
+}

app/Domains/Core/Tenant/Services/TenantInformationService.php

@@ -18,9 +18,14 @@ class TenantInformationService
         'footerBackgroundImage',
         'storefrontWebsiteType',
         'socialMedia',
+        'addresses',
+        'mainAddress',
+        'phoneNumbers',
+        'mainPhoneNumber',
         'websiteExtras.websiteTypeExtra',
         'activeEvent.dates',
         'activeEvent.socialMedia',
+        'activeEvent.address',
     ];
 
     /**

app/Domains/Core/Tenant/documentacion/README.md

@@ -12,6 +12,7 @@ Es la raíz del modelo multi-tenant. Gestiona organizaciones/sitios, tipos de we
 - `StorefrontWebsiteTypeExtra`: definición de un extra y su configuración admitida.
 - `WebsiteExtra`: valor resuelto y estado del extra para un tenant.
 - `SocialMedia`: catálogo de redes sociales asociables.
+- `phoneNumbers` y `mainPhoneNumber`: teléfonos públicos del tenant, definidos en el dominio `Core/PhoneNumber` y vinculados por `tenant_phone_numbers`. Solo un vínculo por tenant puede ser principal.
 
 ## Servicios
 
@@ -27,7 +28,16 @@ El par `(dominio, base_path)` es único. Un mismo dominio puede alojar el tenant
 - `GET /tenants`, `GET /tenants/{codigo}` y `DELETE /tenants/{codigo}`.
 - La creación y actualización general de tenants se administran mediante seeders o base de datos; no se exponen por API.
 - Bajo `/v1/adminapp/tenant/website-extras`, con autenticación y contexto de tenant: consulta general, detalle, actualización y activación/desactivación.
+- `GET /v1/adminapp/tenant/contact` y `PUT /v1/adminapp/tenant/contact`, con `auth:sanctum` y `adminapp.tenant`: consulta y reemplazo completo del contacto del comercio autenticado.
+
+El PUT de contacto recibe `social_media` (`code`, `url`), `addresses` (`id` opcional para existentes, `address_text`) y `phone_numbers` (`id` opcional, `country_code`, `mobile_prefix`, `area_code`, `local_number`). Las tres colecciones son obligatorias; un array vacío elimina sus vínculos. El primer elemento enviado en cada lista de direcciones o teléfonos es siempre el principal: el backend calcula `is_main` por posición e ignora las marcas enviadas por clientes anteriores. GET y PUT devuelven el principal primero para conservarlo en el siguiente guardado. Los IDs existentes deben estar vinculados al comercio autenticado. Todos los cambios se realizan en una transacción, serializada por tenant, y la respuesta devuelve los registros persistidos y sus IDs.
+
+Se conservan etiquetas y coordenadas de direcciones sin modificar; al cambiar el texto se limpian las coordenadas para evitar mostrar el mapa de una ubicación anterior. Las ediciones de registros compartidos crean una copia para el comercio, preservando otros comercios y eventos. Las bajas desvinculan registros sin borrar datos compartidos.
+
+Contacto administra exclusivamente las redes del comercio. `TenantResource.tenant_social_media` siempre expone esas redes y alimenta Contacto y el footer públicos. `social_media` mantiene la selección histórica del evento activo; `event.social_media` sigue disponible para las vistas de evento. Guardar Contacto no modifica redes del evento.
 
 ## Dependencias y reglas
 
 Usa `Attachable` para logos y archivos. Es referenciado por casi todos los dominios para aislamiento. El `codigo` es clave de ruta y clave foránea heredada; no debe sustituirse por `id` sin una migración integral.
+
+Los resources exponen `phone_numbers` (incluye `is_main`) y `main_phone_number`, con `id`, `label`, `number` y `tel_url`. Contacto muestra la colección y el footer usa el principal. La migración copia primero `tenants.phone` como principal y luego el teléfono de `help.contact`, si es distinto; si no existe teléfono del tenant, el del menú pasa a ser principal. Los duplicados por formato se comparan dentro de cada tenant sin inferir país ni código de área. Los campos anteriores se conservan como datos legacy, pero la tienda consume las relaciones nuevas y el adminapp las edita mediante el endpoint de contacto.

app/Domains/Core/Tenant/routes/adminapp.php

@@ -1,11 +1,21 @@
 <?php
 
+use App\Domains\Core\Tenant\Controllers\AdminApp\BrandController;
+use App\Domains\Core\Tenant\Controllers\AdminApp\ContactController;
+use App\Domains\Core\Tenant\Controllers\AdminApp\HelpMenuController;
 use App\Domains\Core\Tenant\Controllers\AdminApp\WebsiteExtraController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('v1/adminapp/tenant')
     ->middleware(['auth:sanctum', 'adminapp.tenant'])
     ->group(function (): void {
+        Route::get('contact', [ContactController::class, 'show']);
+        Route::put('contact', [ContactController::class, 'update']);
+        Route::get('brand', [BrandController::class, 'show']);
+        Route::put('brand', [BrandController::class, 'update']);
+        Route::get('help-menus', [HelpMenuController::class, 'index']);
+        Route::patch('help-menus/{menuCode}/toggle', [HelpMenuController::class, 'toggle']);
+        Route::put('help-menus/{menuCode}/content', [HelpMenuController::class, 'updateContent']);
         Route::get('website-extras', [WebsiteExtraController::class, 'show']);
         Route::get('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'showExtra']);
         Route::put('website-extras/{websiteExtraCode}', [WebsiteExtraController::class, 'update']);

app/Domains/Ticketing/Desfile/routes/api.php

@@ -5,28 +5,28 @@ use App\Domains\Ticketing\Desfile\Controllers\EntryReservationController;
 use Illuminate\Support\Facades\Route;
 
 Route::get('v1/adminapp/tenant/desfile/entry-reservations', [EntryReservationController::class, 'index'])
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.index');
 Route::get('v1/adminapp/tenant/desfile/entry-reservations/pdf', [EntryReservationController::class, 'downloadPdf'])
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.pdf');
 Route::get('v1/adminapp/tenant/desfile/entry-reservations/excel', [EntryReservationController::class, 'downloadExcel'])
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.excel');
 Route::get('v1/adminapp/tenant/desfile/entry-reservations/{reservation}/ticket/pdf', [EntryReservationController::class, 'downloadTicketPdf'])
     ->whereNumber('reservation')
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.ticket.pdf');
 Route::post('v1/adminapp/tenant/desfile/entry-reservations', [EntryReservationController::class, 'store'])
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.store');
 Route::delete('v1/adminapp/tenant/desfile/entry-reservations/{reservation}', [EntryReservationController::class, 'destroy'])
     ->whereNumber('reservation')
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.reservas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.reservas'])
     ->name('adminapp.desfile.entry-reservations.destroy');
 
 Route::prefix('v1/adminapp/tenant/desfile')
-    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.entradas'])
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:onticket.adminapp.desfile.entradas'])
     ->group(function (): void {
         Route::get('entries', [EntryController::class, 'show'])
             ->name('adminapp.desfile.entries.show');

app/Domains/Ticketing/Event/Models/Event.php

@@ -3,6 +3,7 @@
 namespace App\Domains\Ticketing\Event\Models;
 
 use App\Domains\Commerce\Catalog\Models\CatalogItem;
+use App\Domains\Core\Address\Models\Address;
 use App\Domains\Core\Client\Models\Client;
 use App\Domains\Core\Tenant\Models\SocialMedia;
 use App\Domains\Core\Tenant\Models\Tenant;
@@ -15,14 +16,14 @@ use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 
-#[Fillable(['client_id', 'tenant_code', 'slug', 'event_category_id', 'title', 'subtitle', 'description', 'location', 'exact_location', 'date_text', 'published_at', 'attachment_id'])]
+#[Fillable(['client_id', 'tenant_code', 'slug', 'event_category_id', 'title', 'subtitle', 'description', 'address_id', 'location', 'exact_location', 'date_text', 'published_at', 'attachment_id'])]
 class Event extends Model
 {
     use HasFactory;
 
     protected function casts(): array
     {
-        return ['client_id' => 'integer', 'published_at' => 'datetime', 'exact_location' => 'array'];
+        return ['client_id' => 'integer', 'address_id' => 'integer', 'published_at' => 'datetime', 'exact_location' => 'array'];
     }
 
     /** @return BelongsTo<Tenant, $this> */
@@ -37,6 +38,12 @@ class Event extends Model
         return $this->belongsTo(Client::class);
     }
 
+    /** @return BelongsTo<Address, $this> */
+    public function address(): BelongsTo
+    {
+        return $this->belongsTo(Address::class);
+    }
+
     public function effectiveClient(): Client
     {
         return $this->client ?? $this->tenant->client;

app/Domains/Ticketing/Event/Resources/EventResource.php

@@ -2,6 +2,7 @@
 
 namespace App\Domains\Ticketing\Event\Resources;
 
+use App\Domains\Core\Address\Resources\AddressResource;
 use App\Domains\Ticketing\Event\Models\Event;
 use App\Domains\Ticketing\Event\Services\EventDateGroupingService;
 use Illuminate\Http\Request;
@@ -21,6 +22,7 @@ class EventResource extends JsonResource
             'title' => $this->title,
             'subtitle' => $this->subtitle,
             'description' => $this->description,
+            'address' => AddressResource::make($this->address),
             'location' => $this->location,
             'exact_location' => $this->exact_location,
             'date_text' => $this->date_text,

app/Domains/Ticketing/Event/Resources/PublicEventResource.php

@@ -5,6 +5,7 @@ namespace App\Domains\Ticketing\Event\Resources;
 use App\Domains\Commerce\Catalog\Enums\InventoryPolicy;
 use App\Domains\Commerce\Catalog\Models\CatalogItem;
 use App\Domains\Commerce\Catalog\Models\Variant;
+use App\Domains\Core\Address\Resources\AddressResource;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -19,6 +20,7 @@ class PublicEventResource extends JsonResource
             'title' => $this->title,
             'subtitle' => $this->subtitle,
             'description' => $this->description,
+            'address' => AddressResource::make($this->address),
             'location' => $this->location,
             'exact_location' => $this->exact_location,
             'date_text' => $this->date_text,

app/Domains/Ticketing/Event/Services/EventAddressService.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Domains\Ticketing\Event\Services;
+
+use App\Domains\Core\Address\Models\Address;
+use App\Domains\Ticketing\Event\Models\Event;
+
+class EventAddressService
+{
+    /** Called inside the event update transaction, after validating the legacy location fields. */
+    public function syncLocation(Event $event, bool $coordinatesProvided = false): void
+    {
+        $address = $event->address;
+        $coordinates = $coordinatesProvided || $address === null ? $event->exact_location : $address->coordinates();
+        $values = [
+            'address_text' => $event->location,
+            'latitude' => $coordinates['latitude'] ?? null,
+            'longitude' => $coordinates['longitude'] ?? null,
+        ];
+
+        if ($address !== null && ! (clone $address)->fill($values)->isDirty()) {
+            return;
+        }
+
+        // Editing one event must not change the location of another event or a tenant.
+        if ($address === null || $address->tenants()->exists()
+            || $address->events()->where('events.id', '!=', $event->id)->exists()) {
+            $address = Address::create(['label' => $address?->label ?? 'Ubicación del evento', ...$values]);
+            $event->address()->associate($address);
+            $event->save();
+        } else {
+            $address->update($values);
+        }
+
+        $event->setRelation('address', $address);
+    }
+}

app/Domains/Ticketing/Event/Services/EventService.php

@@ -2,18 +2,18 @@
 
 namespace App\Domains\Ticketing\Event\Services;
 
-use App\Domains\Core\Auth\Models\User;
 use App\Domains\Commerce\Cart\Services\InvalidateEventDateCartsService;
 use App\Domains\Commerce\Catalog\Models\Variant;
 use App\Domains\Commerce\Catalog\Services\StockReservationService;
 use App\Domains\Commerce\Catalog\Services\VariantReplacementService;
+use App\Domains\Core\Auth\Models\User;
+use App\Domains\Core\Tenant\Models\Tenant;
 use App\Domains\Ticketing\Event\Enums\EventDateChangeType;
 use App\Domains\Ticketing\Event\Events\EventDateRescheduled;
 use App\Domains\Ticketing\Event\Events\EventDateSuspended;
+use App\Domains\Ticketing\Event\Models\Event;
 use App\Domains\Ticketing\Event\Models\EventDate;
 use App\Domains\Ticketing\Event\Models\EventDateChange;
-use App\Domains\Ticketing\Event\Models\Event;
-use App\Domains\Core\Tenant\Models\Tenant;
 use App\Domains\Ticketing\Ticket\Models\Ticket;
 use Illuminate\Support\Collection;
 use Illuminate\Support\Facades\DB;
@@ -32,11 +32,12 @@ class EventService
         private readonly AffectedEventDatePurchaseResolver $affectedPurchaseResolver,
         private readonly VariantReplacementService $variantReplacementService,
         private readonly InvalidateEventDateCartsService $invalidateEventDateCarts,
+        private readonly EventAddressService $eventAddressService,
     ) {}
 
     public function forTenant(Tenant $tenant): Event
     {
-        return $tenant->activeEvent->load(['dates.validityTime', 'socialMedia']);
+        return $tenant->activeEvent->load(['dates.validityTime', 'socialMedia', 'address']);
     }
 
     /** @param array<string, mixed> $data */
@@ -49,6 +50,7 @@ class EventService
                 'location' => $data['location'],
                 ...array_intersect_key($data, ['attachment_id' => true, 'exact_location' => true]),
             ]);
+            $this->eventAddressService->syncLocation($event, array_key_exists('exact_location', $data));
             $tenant->update([
                 ...array_intersect_key($data, array_flip([
                     'allow_ticket_refund',
@@ -64,7 +66,7 @@ class EventService
                 $this->syncLegacyContact($event, $data['contact']);
             }
 
-            return $event->load(['dates.validityTime', 'socialMedia']);
+            return $event->load(['dates.validityTime', 'socialMedia', 'address']);
         });
     }
 

app/Domains/Ticketing/Event/Services/PublicEventService.php

@@ -23,11 +23,12 @@ class PublicEventService
             $query->where(function ($query) use ($term): void {
                 $query->where('title', 'like', '%'.$term.'%')
                     ->orWhere('subtitle', 'like', '%'.$term.'%')
-                    ->orWhere('location', 'like', '%'.$term.'%');
+                    ->orWhereHas('address', fn ($query) => $query->where('address_text', 'like', '%'.$term.'%'))
+                    ->orWhere(fn ($query) => $query->whereNull('address_id')->where('location', 'like', '%'.$term.'%'));
             });
         }
 
-        return $query->with('attachment')->orderByDesc('published_at')->orderByDesc('id')->paginate(15, ['*'], 'page', $page);
+        return $query->with(['attachment', 'address'])->orderByDesc('published_at')->orderByDesc('id')->paginate(15, ['*'], 'page', $page);
     }
 
     public function find(Tenant $tenant, Event $event): Event
@@ -38,6 +39,7 @@ class PublicEventService
 
         return $event->load([
             'attachment',
+            'address',
             'dates' => fn ($query) => $query->whereNull('rescheduled_to_event_date_id')->whereNull('suspended_at'),
             'socialMedia',
             'catalogItems.attachments',

app/Domains/Ticketing/Event/documentacion/README.md

@@ -13,6 +13,32 @@ mediante `event_id`. El catálogo `social_media` define las plataformas;
 `exact_location` guarda opcionalmente un objeto JSON con `latitude` (-90 a 90)
 y `longitude` (-180 a 180). `location` sigue siendo la dirección legible.
 
+`events.address_id` es una referencia opcional a `addresses.id`: `Event::address()`
+obtiene su dirección y `Address::events()` permite reutilizar una dirección en varios
+eventos. Al borrar una dirección, el vínculo queda en `NULL` y se conserva el evento.
+
+La migración `2026_09_30_000200_add_address_id_to_events` agrega el vínculo.
+`2026_09_30_000300_copy_event_locations_to_addresses` copia `location` a
+`address_text` y las coordenadas de `exact_location` a `latitude` y `longitude`, con
+el label `Ubicación del evento`. Solo copia eventos sin `address_id` y con texto de
+ubicación; no modifica los campos ni los timestamps originales, ni vincula la
+dirección al tenant. Si faltan texto y coordenadas, el vínculo queda en `NULL`.
+Los datos inválidos, incluidas coordenadas sin texto de dirección, detienen la
+copia y revierten las inserciones para evitar una migración parcial. Las migraciones
+deben ejecutarse explícitamente por quien administra la base.
+
+Las respuestas públicas, administrativas y el evento del bootstrap incluyen
+`address` con `id`, `label`, `address_text`, `latitude` y `longitude`. Las coordenadas
+se serializan como números o `null`. Los campos anteriores de la respuesta conservan
+sus valores originales; el frontend lee la ubicación y coordenadas desde `address`.
+El guardado administrativo de
+`location` y `exact_location` también actualiza `addresses`; si una dirección está
+compartida con otro evento o con un tenant, se crea una copia para el evento editado.
+El tenant devuelve `addresses` con `is_main` y `main_address`. El storefront usa
+todas las direcciones en contacto, la principal en el footer y la propia del evento
+en sus tarjetas, cabecera y mapa. Solo se agregan al mapa las direcciones con ambas
+coordenadas.
+
 La migración `2026_09_18_000500_restore_events` crea un evento por cada tenant que
 tenía datos de evento o fechas, y migra las fechas y redes correspondientes.
 `2026_09_18_000600_associate_active_event_social_media` copia al evento activo las

app/Domains/Ticketing/FiestaFutbolInfantil/routes/api.php

@@ -19,48 +19,48 @@ Route::prefix('v1/adminapp/tenant')
                 ->middleware("tenant.menu:{$menuCode}");
         };
 
-        $visibilityRoutes('entries', 'entries', 'adminapp.fiesta-futbol-infantil.entradas');
-        $visibilityRoutes('foods', 'foods', 'adminapp.fiesta-futbol-infantil.comida');
-        $visibilityRoutes('accommodations', 'accommodations', 'adminapp.fiesta-futbol-infantil.alojamientos');
-        $visibilityRoutes('merchandise', 'merchandise', 'adminapp.fiesta-futbol-infantil.merchandising');
+        $visibilityRoutes('entries', 'entries', 'onticket.adminapp.fiesta-futbol-infantil.entradas');
+        $visibilityRoutes('foods', 'foods', 'onticket.adminapp.fiesta-futbol-infantil.comida');
+        $visibilityRoutes('accommodations', 'accommodations', 'onticket.adminapp.fiesta-futbol-infantil.alojamientos');
+        $visibilityRoutes('merchandise', 'merchandise', 'onticket.adminapp.fiesta-futbol-infantil.merchandising');
 
         Route::get('entries', [EntryController::class, 'index'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.entradas')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.entradas')
             ->name('adminapp.fiesta-futbol-infantil.entries.index');
         Route::post('entries', [EntryController::class, 'store'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.entradas')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.entradas')
             ->name('adminapp.fiesta-futbol-infantil.entries.store');
         Route::delete('entries/{entry}', [EntryController::class, 'destroy'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.entradas')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.entradas')
             ->name('adminapp.fiesta-futbol-infantil.entries.destroy');
         Route::get('foods', [FoodController::class, 'index'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.comida')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.comida')
             ->name('adminapp.fiesta-futbol-infantil.foods.index');
         Route::post('foods', [FoodController::class, 'store'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.comida')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.comida')
             ->name('adminapp.fiesta-futbol-infantil.foods.store');
         Route::patch('foods/history-stock', [FoodController::class, 'updateHistoricalStock'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.comida')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.comida')
             ->name('adminapp.fiesta-futbol-infantil.foods.history-stock.update');
         Route::delete('foods/{food}', [FoodController::class, 'destroy'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.comida')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.comida')
             ->name('adminapp.fiesta-futbol-infantil.foods.destroy');
         Route::get('accommodations', [AccommodationController::class, 'index'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.alojamientos')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.alojamientos')
             ->name('adminapp.fiesta-futbol-infantil.accommodations.index');
         Route::post('accommodations', [AccommodationController::class, 'store'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.alojamientos')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.alojamientos')
             ->name('adminapp.fiesta-futbol-infantil.accommodations.store');
         Route::delete('accommodations/{accommodation}', [AccommodationController::class, 'destroy'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.alojamientos')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.alojamientos')
             ->name('adminapp.fiesta-futbol-infantil.accommodations.destroy');
         Route::get('merchandise', [MerchandiseController::class, 'index'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.merchandising')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.merchandising')
             ->name('adminapp.fiesta-futbol-infantil.merchandise.index');
         Route::post('merchandise', [MerchandiseController::class, 'store'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.merchandising')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.merchandising')
             ->name('adminapp.fiesta-futbol-infantil.merchandise.store');
         Route::delete('merchandise/{merchandise}', [MerchandiseController::class, 'destroy'])
-            ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.merchandising')
+            ->middleware('tenant.menu:onticket.adminapp.fiesta-futbol-infantil.merchandising')
             ->name('adminapp.fiesta-futbol-infantil.merchandise.destroy');
     });

app/Domains/Ticketing/Ticket/Controllers/AdminApp/TicketController.php

@@ -29,7 +29,7 @@ class TicketController extends Controller
         $tenant = $request->user()->tenant()->firstOrFail();
 
         return new AdminAppTicketCollection(
-            $this->ticketService->search($tenant, $request->validated())
+            $this->ticketService->search($tenant, $request->validated(), $request->user()->event_id)
         );
     }
 
@@ -37,7 +37,7 @@ class TicketController extends Controller
     {
         $tenant = $request->user()->tenant()->firstOrFail();
 
-        return new AdminAppTicketResource($this->ticketService->cancel($tenant, $ticket));
+        return new AdminAppTicketResource($this->ticketService->cancel($tenant, $ticket, $request->user()->event_id));
     }
 
     public function calculateRefund(Request $request, int $ticket): AdminAppTicketRefundCalculationResource
@@ -45,7 +45,7 @@ class TicketController extends Controller
         $tenant = $request->user()->tenant()->firstOrFail();
 
         return new AdminAppTicketRefundCalculationResource(
-            $this->ticketService->calculateRefund($tenant, $ticket)
+            $this->ticketService->calculateRefund($tenant, $ticket, $request->user()->event_id)
         );
     }
 
@@ -69,7 +69,7 @@ class TicketController extends Controller
 
         return $this->ticketPdfService->download(
             $tenant,
-            $this->ticketService->ticketsForExport($tenant, $request->validated()),
+            $this->ticketService->ticketsForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }
@@ -80,7 +80,7 @@ class TicketController extends Controller
 
         return $this->ticketExcelService->download(
             $tenant,
-            $this->ticketService->ticketsForExport($tenant, $request->validated()),
+            $this->ticketService->ticketsForExport($tenant, $request->validated(), $request->user()->event_id),
             $request->validated('timezone'),
         );
     }

app/Domains/Ticketing/Ticket/Services/AdminAppTicketService.php

@@ -41,9 +41,9 @@ class AdminAppTicketService
     /**
      * @param  array{q?: string|null, category?: string|null, product?: string|null, type?: string|null, date?: string|null, size?: string|null, status?: string|null, page?: int, per_page?: int, sort_by?: string|null, sort_direction?: string|null}  $filters
      */
-    public function search(Tenant $tenant, array $filters = []): AdminAppTicketResult
+    public function search(Tenant $tenant, array $filters = [], ?int $eventId = null): AdminAppTicketResult
     {
-        $query = $this->baseQuery($tenant, $filters);
+        $query = $this->baseQuery($tenant, $filters, $eventId);
         $countQuery = clone $query;
 
         $databaseSorted = $this->applyDatabaseSort($query, $tenant, $filters);
@@ -77,7 +77,7 @@ class AdminAppTicketService
             tickets: $tickets,
             scannedTickets: $scannedTickets,
             totalTickets: $totalTickets,
-            refundedTotal: $this->refundSummaryService->totalForTenant($tenant),
+            refundedTotal: $this->refundSummaryService->totalForTenant($tenant, $eventId),
         );
     }
 
@@ -85,9 +85,9 @@ class AdminAppTicketService
      * @param  array{q?: string|null, category?: string|null, product?: string|null, type?: string|null, date?: string|null, size?: string|null, status?: string|null, sort_by?: string|null, sort_direction?: string|null}  $filters
      * @return Collection<int, Ticket>
      */
-    public function ticketsForExport(Tenant $tenant, array $filters = []): Collection
+    public function ticketsForExport(Tenant $tenant, array $filters = [], ?int $eventId = null): Collection
     {
-        $query = $this->baseQuery($tenant, $filters);
+        $query = $this->baseQuery($tenant, $filters, $eventId);
         $databaseSorted = $this->applyDatabaseSort($query, $tenant, $filters);
         $tickets = $query
             ->with(self::RELATIONS)
@@ -97,11 +97,10 @@ class AdminAppTicketService
         return $databaseSorted ? $tickets : $this->sortTickets($tickets, $tenant, $filters);
     }
 
-    public function cancel(Tenant $tenant, int $ticketId): Ticket
+    public function cancel(Tenant $tenant, int $ticketId, ?int $eventId = null): Ticket
     {
-        return DB::transaction(function () use ($tenant, $ticketId): Ticket {
-            $ticket = Ticket::query()
-                ->where('tenant_code', $tenant->codigo)
+        return DB::transaction(function () use ($tenant, $ticketId, $eventId): Ticket {
+            $ticket = $this->ticketsQuery($tenant, $eventId)
                 ->lockForUpdate()
                 ->findOrFail($ticketId);
 
@@ -124,10 +123,9 @@ class AdminAppTicketService
      *     partial: string|null,
      * }
      */
-    public function calculateRefund(Tenant $tenant, int $ticketId): array
+    public function calculateRefund(Tenant $tenant, int $ticketId, ?int $eventId = null): array
     {
-        $ticket = Ticket::query()
-            ->where('tenant_code', $tenant->codigo)
+        $ticket = $this->ticketsQuery($tenant, $eventId)
             ->findOrFail($ticketId);
 
         if (! $ticket->can_refund()) {
@@ -175,14 +173,13 @@ class AdminAppTicketService
         string $refundType,
         ?User $createdBy = null,
     ): Ticket {
-        $this->ensureRefundIsAllowed($tenant, $refundType);
-
         return DB::transaction(function () use ($tenant, $ticketId, $refundType, $createdBy): Ticket {
-            $ticket = Ticket::query()
-                ->where('tenant_code', $tenant->codigo)
+            $ticket = $this->ticketsQuery($tenant, $createdBy?->event_id)
                 ->lockForUpdate()
                 ->findOrFail($ticketId);
 
+            $this->ensureRefundIsAllowed($tenant, $refundType);
+
             if (! $ticket->can_refund()) {
                 if ($ticket->status !== Ticket::STATUS_ACTIVE) {
                     throw ValidationException::withMessages([
@@ -310,12 +307,11 @@ class AdminAppTicketService
      * @param  array{q?: string|null, category?: string|null, product?: string|null, type?: string|null, date?: string|null, size?: string|null, status?: string|null, page?: int, per_page?: int}  $filters
      * @return Builder<Ticket>
      */
-    private function baseQuery(Tenant $tenant, array $filters): Builder
+    private function baseQuery(Tenant $tenant, array $filters, ?int $eventId = null): Builder
     {
         $search = trim((string) ($filters['q'] ?? ''));
 
-        $query = Ticket::query()
-            ->where('tenant_code', $tenant->codigo)
+        $query = $this->ticketsQuery($tenant, $eventId)
             ->when($search !== '', function (Builder $query) use ($search): void {
                 $this->applySearchFilter($query, $search);
             })
@@ -355,6 +351,14 @@ class AdminAppTicketService
         return $query;
     }
 
+    /** @return Builder<Ticket> */
+    private function ticketsQuery(Tenant $tenant, ?int $eventId): Builder
+    {
+        return Ticket::query()
+            ->where('tenant_code', $tenant->codigo)
+            ->when($eventId !== null, fn (Builder $query): Builder => $query->where('tickets.event_id', $eventId));
+    }
+
     /** @param Builder<Ticket> $query */
     private function applySearchFilter(Builder $query, string $search): void
     {

app/Domains/Ticketing/Ticket/documentacion/README.md

@@ -82,13 +82,17 @@ Bajo `/tenants/{tenant:codigo}`, protegidos por `auth:sanctum`:
 - `POST /tickets/pdf`.
 
 Bajo `/v1/adminapp/tenant`, protegido por `auth:sanctum`, `adminapp.tenant` y el menú
-`adminapp.tickets`:
+`onticket.adminapp.tickets`:
 
 - `GET /tickets`, paginado y con búsqueda opcional mediante `q`. La respuesta incluye
   `scanned_tickets` y `total_tickets` para el tenant autenticado.
 
 `TicketPdfService` genera la descarga y `TicketResource`/`ValidityTimeResource` definen las respuestas.
 
+Si el administrador autenticado tiene `event_id`, las consultas de Tickets y sus exportaciones se limitan a `tickets.event_id` dentro del tenant. Los contadores usan el mismo alcance y el total reembolsado se limita a las compras del evento. Sin `event_id`, se conserva el alcance por tenant.
+
+La cancelación, el cálculo de reembolso y el reembolso buscan el ticket dentro de ese alcance antes de validar o ejecutar la operación. Un ticket de otro evento o sin evento devuelve 404 para un administrador con evento asignado. El alcance se obtiene del usuario autenticado, no de los parámetros del cliente.
+
 ## Dependencias y reglas
 
 Depende de `Purchase`, `Catalog`, `Tenant` y `Auth`. La generación debe ser idempotente ante reintentos del evento. `TicketNotAvailableException` y `TicketGenerationException` separan indisponibilidad de errores de generación.

app/Domains/Ticketing/Ticket/routes/adminapp.php

@@ -7,24 +7,24 @@ Route::prefix('v1/adminapp/tenant')
     ->middleware(['auth:sanctum', 'adminapp.tenant'])
     ->group(function (): void {
         Route::get('tickets', [TicketController::class, 'index'])
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.index');
         Route::post('tickets/{ticket}/cancel', [TicketController::class, 'cancel'])
             ->whereNumber('ticket')
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.cancel');
         Route::get('tickets/{ticket}/refund', [TicketController::class, 'calculateRefund'])
             ->whereNumber('ticket')
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.calculate-refund');
         Route::post('tickets/{ticket}/refund', [TicketController::class, 'refund'])
             ->whereNumber('ticket')
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.refund');
         Route::get('tickets/pdf', [TicketController::class, 'downloadPdf'])
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.pdf');
         Route::get('tickets/excel', [TicketController::class, 'downloadExcel'])
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.tickets.excel');
     });

app/Http/Middleware/EnsureTenantHasMenu.php

@@ -13,6 +13,9 @@ class EnsureTenantHasMenu
         $tenant = $request->user()?->tenant()->first();
         $hasMenu = $tenant?->menues()
             ->where('menues.code', $menuCode)
+            ->where(fn ($query) => $query
+                ->where('menues.code', 'help.contact')
+                ->orWhere('tenants_menues.is_enabled', true))
             ->exists() ?? false;
 
         abort_unless($hasMenu, 404);

app/Shared/Forms/routes/adminapp.php

@@ -18,12 +18,12 @@ Route::prefix('v1/adminapp/forms')
         Route::get(
             'desfile/entry-reservation',
             DesfileEntryReservationFormController::class
-        )->middleware('tenant.menu:adminapp.desfile.reservas')
+        )->middleware('tenant.menu:onticket.adminapp.desfile.reservas')
             ->name('adminapp.forms.desfile.entry-reservation');
         Route::get('sale', SaleFormController::class);
         Route::get('staff', StaffFormController::class);
         Route::get('tickets-filter', TicketFilterFormController::class)
-            ->middleware('tenant.menu:adminapp.tickets')
+            ->middleware('tenant.menu:onticket.adminapp.tickets')
             ->name('adminapp.forms.tickets-filter');
         Route::get(
             'fiesta-futbol-infantil/ticket',

database/migrations/2026_08_26_000000_set_website_type_favicon.php

@@ -41,7 +41,7 @@ return new class extends Migration
             return;
         }
 
-        $sourcePath = public_path('images/website_types/'.self::FILENAME);
+        $sourcePath = public_path('images/website_types/onticket/'.self::FILENAME);
 
         if (! is_file($sourcePath)) {
             throw new RuntimeException("Favicon not found at path: {$sourcePath}");

database/migrations/2026_09_28_000000_update_shopit_admin_assets.php

@@ -0,0 +1,47 @@
+<?php
+
+use App\Domains\Core\Tenant\Models\AdminWebsiteType;
+use App\Domains\Core\Tenant\Services\AdminWebsiteTypeService;
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\Storage;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        if (app()->environment('testing')) {
+            Storage::fake('s3');
+        }
+
+        if (! AdminWebsiteType::query()->where('codigo', 'shopit')->exists()) {
+            return;
+        }
+
+        app(AdminWebsiteTypeService::class)->updateOrCreate(
+            ['codigo' => 'shopit'],
+            [
+                'primary_color' => '#2FD3AC',
+                'site_logo' => $this->uploadedImage('shopit_logo.png', 'image/png'),
+                'footer_logo' => $this->uploadedImage('shopit_footer_logo.png', 'image/png'),
+                'favicon' => $this->uploadedImage('shopit-favicon.svg', 'image/svg+xml'),
+            ],
+        );
+    }
+
+    public function down(): void
+    {
+        // Brand assets are operational data and are intentionally preserved.
+    }
+
+    private function uploadedImage(string $filename, string $mimeType): UploadedFile
+    {
+        $path = public_path("images/website_types/shopit/{$filename}");
+
+        if (! is_file($path)) {
+            throw new RuntimeException("ShopIt image not found at path: {$path}");
+        }
+
+        return new UploadedFile($path, $filename, $mimeType, null, true);
+    }
+};

database/migrations/2026_09_29_000000_separate_adminapp_menus_by_website_type.php

@@ -0,0 +1,236 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    private const ONTICKET_MENUS = [
+        'adminapp.event' => ['onticket.adminapp.event', 'Eventos', '/admin/event'],
+        'adminapp.inicio' => ['onticket.adminapp.inicio', 'Inicio', '/admin/inicio'],
+        'adminapp.catalog' => ['onticket.adminapp.catalog', 'Catálogo', '/admin/catalog'],
+        'adminapp.combos' => ['onticket.adminapp.combos', 'Combos', '/admin/combos'],
+        'adminapp.categories' => ['onticket.adminapp.categories', 'Categorías', '/admin/categories'],
+        'adminapp.ventas' => ['onticket.adminapp.ventas', 'Ventas', '/admin/ventas'],
+        'adminapp.staff' => ['onticket.adminapp.staff', 'Usuarios', '/admin/staff'],
+        'adminapp.tickets' => ['onticket.adminapp.tickets', 'Tickets', '/admin/tickets'],
+        'adminapp.fiesta-futbol-infantil.entradas' => [
+            'onticket.adminapp.fiesta-futbol-infantil.entradas',
+            'Entradas',
+            '/admin/entradas',
+        ],
+        'adminapp.fiesta-futbol-infantil.alojamientos' => [
+            'onticket.adminapp.fiesta-futbol-infantil.alojamientos',
+            'Alojamientos',
+            '/admin/alojamientos',
+        ],
+        'adminapp.fiesta-futbol-infantil.merchandising' => [
+            'onticket.adminapp.fiesta-futbol-infantil.merchandising',
+            'Merchandising',
+            '/admin/merchandising',
+        ],
+        'adminapp.fiesta-futbol-infantil.comida' => [
+            'onticket.adminapp.fiesta-futbol-infantil.comida',
+            'Comida',
+            '/admin/comidas',
+        ],
+        'adminapp.desfile.entradas' => [
+            'onticket.adminapp.desfile.entradas',
+            'Entradas',
+            '/admin/desfile/entradas',
+        ],
+        'adminapp.desfile.reservas' => [
+            'onticket.adminapp.desfile.reservas',
+            'Reserva de Tickets',
+            '/admin/desfile/reservas',
+        ],
+    ];
+
+    private const SHOPIT_MENUS = [
+        'shopit.adminapp.marca' => ['Marca', '/admin/marca'],
+        'shopit.adminapp.contacto' => ['Contacto', '/admin/contacto'],
+        'shopit.adminapp.productos' => ['Productos', '/admin/productos'],
+        'shopit.adminapp.categorias' => ['Categorías', '/admin/categorias'],
+        'shopit.adminapp.transacciones' => ['Transacciones', '/admin/transacciones'],
+        'shopit.adminapp.reportes' => ['Reportes', '/admin/reportes'],
+        'shopit.adminapp.usuarios_roles' => ['Usuarios y roles', '/admin/usuarios-roles'],
+    ];
+
+    private const LEGACY_SHOPIT_ADMIN_MENUS = [
+        'adminapp.event',
+        'adminapp.inicio',
+        'adminapp.catalog',
+        'adminapp.combos',
+        'adminapp.categories',
+        'adminapp.ventas',
+        'adminapp.staff',
+    ];
+
+    public function up(): void
+    {
+        DB::transaction(function (): void {
+            if (! DB::table('menues')->where('code', 'main.adminapp')->exists()) {
+                return;
+            }
+
+            foreach (self::ONTICKET_MENUS as $legacyCode => [$code, $label, $route]) {
+                $this->replaceMenuCode($legacyCode, $code, $label, $route);
+                $this->assignMenuToAdminRoles($code);
+            }
+
+            foreach (self::SHOPIT_MENUS as $code => [$label, $route]) {
+                $this->upsertMenu($code, $label, $route);
+                $this->assignMenuToAdminRoles($code);
+            }
+
+            $shopItTenantCodes = DB::table('tenants')
+                ->where('admin_website_type_code', 'shopit')
+                ->pluck('codigo');
+
+            if ($shopItTenantCodes->isEmpty()) {
+                return;
+            }
+
+            $adminMenuCodes = DB::table('menues')
+                ->where('parent_menu_code', 'main.adminapp')
+                ->pluck('code');
+
+            DB::table('tenants_menues')
+                ->whereIn('tenant_code', $shopItTenantCodes)
+                ->whereIn('menu_code', $adminMenuCodes)
+                ->delete();
+
+            foreach ($shopItTenantCodes as $tenantCode) {
+                $this->assignMenuToTenant($tenantCode, 'main.adminapp');
+
+                foreach (array_keys(self::SHOPIT_MENUS) as $menuCode) {
+                    $this->assignMenuToTenant($tenantCode, $menuCode);
+                }
+            }
+        });
+    }
+
+    public function down(): void
+    {
+        DB::transaction(function (): void {
+            if (! DB::table('menues')->where('code', 'main.adminapp')->exists()) {
+                return;
+            }
+
+            $shopItTenantCodes = DB::table('tenants')
+                ->where('admin_website_type_code', 'shopit')
+                ->pluck('codigo');
+
+            DB::table('tenants_menues')
+                ->whereIn('tenant_code', $shopItTenantCodes)
+                ->whereIn('menu_code', array_keys(self::SHOPIT_MENUS))
+                ->delete();
+            DB::table('roles_menues')
+                ->whereIn('menu_codigo', array_keys(self::SHOPIT_MENUS))
+                ->delete();
+            DB::table('menues')
+                ->whereIn('code', array_keys(self::SHOPIT_MENUS))
+                ->delete();
+
+            foreach (self::ONTICKET_MENUS as $legacyCode => [$code, $label, $route]) {
+                $this->replaceMenuCode($code, $legacyCode, $label, $route);
+            }
+
+            foreach ($shopItTenantCodes as $tenantCode) {
+                foreach (self::LEGACY_SHOPIT_ADMIN_MENUS as $menuCode) {
+                    $this->assignMenuToTenant($tenantCode, $menuCode);
+                }
+            }
+        });
+    }
+
+    private function replaceMenuCode(
+        string $sourceCode,
+        string $targetCode,
+        string $label,
+        string $route,
+    ): void {
+        $source = DB::table('menues')->where('code', $sourceCode)->first();
+
+        $this->upsertMenu($targetCode, $label, $route, $source);
+
+        if ($source === null) {
+            return;
+        }
+
+        DB::table('tenants_menues')
+            ->where('menu_code', $sourceCode)
+            ->get()
+            ->each(function (object $assignment) use ($targetCode): void {
+                DB::table('tenants_menues')->updateOrInsert(
+                    [
+                        'tenant_code' => $assignment->tenant_code,
+                        'menu_code' => $targetCode,
+                    ],
+                    [
+                        'static_content' => $assignment->static_content,
+                        'created_at' => $assignment->created_at ?? now(),
+                        'updated_at' => now(),
+                    ],
+                );
+            });
+
+        DB::table('roles_menues')
+            ->where('menu_codigo', $sourceCode)
+            ->pluck('rol_codigo')
+            ->each(fn (string $roleCode) => DB::table('roles_menues')->updateOrInsert([
+                'rol_codigo' => $roleCode,
+                'menu_codigo' => $targetCode,
+            ]));
+
+        DB::table('tenants_menues')->where('menu_code', $sourceCode)->delete();
+        DB::table('roles_menues')->where('menu_codigo', $sourceCode)->delete();
+        DB::table('menues')->where('code', $sourceCode)->delete();
+    }
+
+    private function upsertMenu(
+        string $code,
+        string $label,
+        string $route,
+        ?object $source = null,
+    ): void {
+        DB::table('menues')->updateOrInsert(
+            ['code' => $code],
+            [
+                'label' => $source->label ?? $label,
+                'parent_menu_code' => 'main.adminapp',
+                'content_type' => $source->content_type ?? 'dynamic',
+                'static_content_schema' => $source->static_content_schema ?? null,
+                'route' => $source->route ?? $route,
+                'created_at' => $source->created_at ?? now(),
+                'updated_at' => now(),
+            ],
+        );
+    }
+
+    private function assignMenuToAdminRoles(string $menuCode): void
+    {
+        DB::table('roles')
+            ->whereIn('codigo', ['admin', 'adminapp'])
+            ->pluck('codigo')
+            ->each(fn (string $roleCode) => DB::table('roles_menues')->updateOrInsert([
+                'rol_codigo' => $roleCode,
+                'menu_codigo' => $menuCode,
+            ]));
+    }
+
+    private function assignMenuToTenant(string $tenantCode, string $menuCode): void
+    {
+        DB::table('tenants_menues')->updateOrInsert(
+            [
+                'tenant_code' => $tenantCode,
+                'menu_code' => $menuCode,
+            ],
+            [
+                'static_content' => null,
+                'created_at' => now(),
+                'updated_at' => now(),
+            ],
+        );
+    }
+};

database/migrations/2026_09_29_010000_add_is_enabled_to_tenants_menues_table.php

@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('tenants_menues', function (Blueprint $table): void {
+            $table->boolean('is_enabled')->default(true);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('tenants_menues', function (Blueprint $table): void {
+            $table->dropColumn('is_enabled');
+        });
+    }
+};

database/migrations/2026_09_29_020000_make_help_terms_content_static.php

@@ -0,0 +1,29 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::table('menues')
+            ->where('code', 'help.terms-and-conditions')
+            ->update([
+                'content_type' => 'static',
+                'static_content_schema' => json_encode([
+                    'html' => 'present|nullable|string',
+                ], JSON_THROW_ON_ERROR),
+            ]);
+    }
+
+    public function down(): void
+    {
+        DB::table('menues')
+            ->where('code', 'help.terms-and-conditions')
+            ->update([
+                'content_type' => 'dynamic',
+                'static_content_schema' => null,
+            ]);
+    }
+};

database/migrations/2026_09_30_000000_create_addresses_and_tenant_addresses_tables.php

@@ -0,0 +1,57 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        $driver = DB::connection()->getDriverName();
+
+        if (! in_array($driver, ['mysql', 'mariadb', 'sqlite', 'pgsql', 'sqlsrv'], true)) {
+            throw new RuntimeException("Unsupported address database driver: {$driver}");
+        }
+
+        Schema::create('addresses', function (Blueprint $table): void {
+            $table->id();
+            $table->string('label');
+            $table->text('address_text');
+            $table->decimal('latitude', 10, 7)->nullable();
+            $table->decimal('longitude', 10, 7)->nullable();
+            $table->timestamps();
+        });
+
+        Schema::create('tenant_addresses', function (Blueprint $table) use ($driver): void {
+            $table->id();
+            $table->string('tenant_codigo');
+            $table->foreignId('address_id')->constrained('addresses')->cascadeOnDelete();
+            $table->boolean('is_main')->default(false);
+            $table->timestamps();
+
+            $table->foreign('tenant_codigo')->references('codigo')->on('tenants')->cascadeOnDelete();
+            $table->unique(['tenant_codigo', 'address_id']);
+
+            if (in_array($driver, ['mysql', 'mariadb'], true)) {
+                // NULL allows many secondary addresses, while a tenant code can occur only once.
+                $table->string('main_tenant_codigo')->nullable()
+                    ->virtualAs('CASE WHEN is_main = 1 THEN tenant_codigo ELSE NULL END');
+                $table->unique('main_tenant_codigo', 'tenant_addresses_one_main_per_tenant');
+            }
+        });
+
+        if (! in_array($driver, ['mysql', 'mariadb'], true)) {
+            $condition = $driver === 'pgsql' ? 'is_main = true' : 'is_main = 1';
+            DB::statement('CREATE UNIQUE INDEX tenant_addresses_one_main_per_tenant '
+                ."ON tenant_addresses (tenant_codigo) WHERE {$condition}");
+        }
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('tenant_addresses');
+        Schema::dropIfExists('addresses');
+    }
+};

database/migrations/2026_09_30_000100_copy_contact_menu_addresses.php

@@ -0,0 +1,108 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::transaction(function (): void {
+            DB::table('tenants_menues')
+                ->where('menu_code', 'help.contact')
+                ->whereNotNull('static_content')
+                ->orderBy('id')
+                ->chunkById(100, function ($menus): void {
+                    foreach ($menus as $menu) {
+                        $content = json_decode($menu->static_content, true, flags: JSON_THROW_ON_ERROR);
+
+                        if ($content === null) {
+                            continue;
+                        }
+
+                        if (! is_array($content) || ! is_array($content['locations'] ?? [])) {
+                            throw new RuntimeException("Invalid contact locations for tenant {$menu->tenant_code}");
+                        }
+
+                        foreach ($content['locations'] ?? [] as $location) {
+                            if (! is_array($location) || ! is_array($location['addresses'] ?? [])) {
+                                throw new RuntimeException("Invalid contact addresses for tenant {$menu->tenant_code}");
+                            }
+
+                            foreach ($location['addresses'] ?? [] as $address) {
+                                $this->copyAddress($menu->tenant_code, $location, $address);
+                            }
+                        }
+                    }
+                });
+        });
+    }
+
+    private function copyAddress(string $tenantCode, array $location, mixed $address): void
+    {
+        if (! is_array($address) || ! is_string($address['address'] ?? null)
+            || trim($address['address']) === '') {
+            throw new RuntimeException("Invalid contact address text for tenant {$tenantCode}");
+        }
+
+        $coordinates = $address['coordinates'] ?? null;
+
+        if ($coordinates !== null && (! is_array($coordinates) || count($coordinates) !== 2
+            || ! is_numeric($coordinates[0] ?? null) || ! is_numeric($coordinates[1] ?? null)
+            || ! is_finite((float) $coordinates[0]) || ! is_finite((float) $coordinates[1])
+            || abs((float) $coordinates[0]) > 90 || abs((float) $coordinates[1]) > 180)) {
+            throw new RuntimeException("Invalid contact coordinates for tenant {$tenantCode}");
+        }
+
+        $label = $address['label'] ?? $location['label'] ?? 'Dirección';
+
+        if (! is_string($label) || trim($label) === '' || mb_strlen($label) > 255) {
+            throw new RuntimeException("Invalid contact address label for tenant {$tenantCode}");
+        }
+
+        $values = [
+            'label' => $label,
+            'address_text' => $address['address'],
+            'latitude' => $coordinates === null ? null : number_format((float) $coordinates[0], 7, '.', ''),
+            'longitude' => $coordinates === null ? null : number_format((float) $coordinates[1], 7, '.', ''),
+        ];
+
+        // Reuse only within this tenant; equal legacy addresses in different tenants stay independent.
+        $existing = DB::table('addresses')
+            ->join('tenant_addresses', 'tenant_addresses.address_id', '=', 'addresses.id')
+            ->where('tenant_addresses.tenant_codigo', $tenantCode)
+            ->where(array_combine(
+                array_map(fn (string $field): string => 'addresses.'.$field, array_keys($values)),
+                array_values($values),
+            ))
+            ->first(['addresses.id', 'tenant_addresses.id as link_id']);
+
+        if ($existing !== null) {
+            return;
+        }
+
+        $now = now();
+        $isMain = ! DB::table('tenant_addresses')
+            ->where('tenant_codigo', $tenantCode)
+            ->where('is_main', true)
+            ->exists();
+        $addressId = DB::table('addresses')->insertGetId([
+            ...$values,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+
+        DB::table('tenant_addresses')->insert([
+            'tenant_codigo' => $tenantCode,
+            'address_id' => $addressId,
+            'is_main' => $isMain,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+    }
+
+    public function down(): void
+    {
+        // Keep copies: they may already have been edited or reused. Legacy menus were never changed.
+    }
+};

database/migrations/2026_09_30_000200_add_address_id_to_events.php

@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('events', function (Blueprint $table): void {
+            $table->foreignId('address_id')->nullable()->constrained('addresses')->nullOnDelete();
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('events', function (Blueprint $table): void {
+            $table->dropConstrainedForeignId('address_id');
+        });
+    }
+};

database/migrations/2026_09_30_000300_copy_event_locations_to_addresses.php

@@ -0,0 +1,57 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::transaction(function (): void {
+            DB::table('events')->whereNull('address_id')->orderBy('id')->lockForUpdate()
+                ->chunkById(100, function ($events): void {
+                    foreach ($events as $event) {
+                        $coordinates = $event->exact_location === null
+                            ? null
+                            : json_decode($event->exact_location, true, flags: JSON_THROW_ON_ERROR);
+
+                        if ($coordinates !== null && (! is_array($coordinates)
+                            || ! is_numeric($coordinates['latitude'] ?? null)
+                            || ! is_numeric($coordinates['longitude'] ?? null)
+                            || ! is_finite((float) $coordinates['latitude'])
+                            || ! is_finite((float) $coordinates['longitude'])
+                            || abs((float) $coordinates['latitude']) > 90
+                            || abs((float) $coordinates['longitude']) > 180)) {
+                            throw new RuntimeException("Invalid location coordinates for event {$event->id}");
+                        }
+
+                        if ($event->location === null || trim($event->location) === '') {
+                            if ($coordinates !== null) {
+                                throw new RuntimeException("Missing address text for event {$event->id}");
+                            }
+
+                            continue;
+                        }
+
+                        $now = now();
+                        $addressId = DB::table('addresses')->insertGetId([
+                            'label' => 'Ubicación del evento',
+                            'address_text' => $event->location,
+                            'latitude' => $coordinates === null ? null : $coordinates['latitude'],
+                            'longitude' => $coordinates === null ? null : $coordinates['longitude'],
+                            'created_at' => $now,
+                            'updated_at' => $now,
+                        ]);
+
+                        // Update only the new link, preserving the original fields and timestamps.
+                        DB::table('events')->where('id', $event->id)->update(['address_id' => $addressId]);
+                    }
+                });
+        });
+    }
+
+    public function down(): void
+    {
+        // Copies may already have been edited or shared; keep them and the legacy data.
+    }
+};

database/migrations/2026_09_30_000400_create_phone_numbers_and_tenant_phone_numbers_tables.php

@@ -0,0 +1,48 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        $driver = DB::connection()->getDriverName();
+        if (! in_array($driver, ['mysql', 'mariadb', 'sqlite', 'pgsql', 'sqlsrv'], true)) {
+            throw new RuntimeException("Unsupported phone number database driver: {$driver}");
+        }
+
+        Schema::create('phone_numbers', function (Blueprint $table): void {
+            $table->id();
+            $table->string('label');
+            $table->string('number');
+            $table->timestamps();
+        });
+        Schema::create('tenant_phone_numbers', function (Blueprint $table) use ($driver): void {
+            $table->id();
+            $table->string('tenant_codigo');
+            $table->foreignId('phone_number_id')->constrained('phone_numbers')->cascadeOnDelete();
+            $table->boolean('is_main')->default(false);
+            $table->timestamps();
+            $table->foreign('tenant_codigo')->references('codigo')->on('tenants')->cascadeOnDelete();
+            $table->unique(['tenant_codigo', 'phone_number_id']);
+            if (in_array($driver, ['mysql', 'mariadb'], true)) {
+                $table->string('main_tenant_codigo')->nullable()
+                    ->virtualAs('CASE WHEN is_main = 1 THEN tenant_codigo ELSE NULL END');
+                $table->unique('main_tenant_codigo', 'tenant_phones_one_main');
+            }
+        });
+        if (! in_array($driver, ['mysql', 'mariadb'], true)) {
+            $condition = $driver === 'pgsql' ? 'is_main = true' : 'is_main = 1';
+            DB::statement("CREATE UNIQUE INDEX tenant_phones_one_main ON tenant_phone_numbers (tenant_codigo) WHERE {$condition}");
+        }
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('tenant_phone_numbers');
+        Schema::dropIfExists('phone_numbers');
+    }
+};

database/migrations/2026_09_30_000500_copy_tenant_and_contact_phone_numbers.php

@@ -0,0 +1,65 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::transaction(function (): void {
+            DB::table('tenants')->orderBy('id')->chunkById(100, function ($tenants): void {
+                foreach ($tenants as $tenant) {
+                    $this->copyPhone($tenant->codigo, $tenant->phone, true);
+                }
+            });
+            DB::table('tenants_menues')->where('menu_code', 'help.contact')
+                ->whereNotNull('static_content')->orderBy('id')->chunkById(100, function ($menus): void {
+                    foreach ($menus as $menu) {
+                        $content = json_decode($menu->static_content, true, flags: JSON_THROW_ON_ERROR);
+                        if ($content === null) {
+                            continue;
+                        }
+                        if (! is_array($content)) {
+                            throw new RuntimeException("Invalid contact content for tenant {$menu->tenant_code}");
+                        }
+                        $this->copyPhone($menu->tenant_code, $content['phone'] ?? null, false);
+                    }
+                });
+        });
+    }
+
+    private function copyPhone(string $tenantCode, mixed $number, bool $fromTenant): void
+    {
+        if ($number === null || (is_string($number) && trim($number) === '')) {
+            return;
+        }
+        if (! is_string($number) || mb_strlen($number) > 255 || ! preg_match('/[0-9]/', $number)) {
+            throw new RuntimeException("Invalid phone number for tenant {$tenantCode}");
+        }
+        $numbers = DB::table('phone_numbers')
+            ->join('tenant_phone_numbers', 'phone_numbers.id', '=', 'tenant_phone_numbers.phone_number_id')
+            ->where('tenant_codigo', $tenantCode)->get(['phone_numbers.number']);
+        $dialable = preg_replace('/[^0-9]/', '', $number);
+        foreach ($numbers as $existing) {
+            if (preg_replace('/[^0-9]/', '', $existing->number) === $dialable) {
+                return;
+            }
+        }
+        $isMain = ! DB::table('tenant_phone_numbers')->where('tenant_codigo', $tenantCode)->where('is_main', true)->exists();
+        $now = now();
+        $id = DB::table('phone_numbers')->insertGetId([
+            'label' => $fromTenant ? 'Principal' : 'Contacto',
+            'number' => trim($number), 'created_at' => $now, 'updated_at' => $now,
+        ]);
+        DB::table('tenant_phone_numbers')->insert([
+            'tenant_codigo' => $tenantCode, 'phone_number_id' => $id, 'is_main' => $isMain,
+            'created_at' => $now, 'updated_at' => $now,
+        ]);
+    }
+
+    public function down(): void
+    {
+        // Preserve copies that may have been edited. The legacy sources were not changed.
+    }
+};

database/migrations/2026_09_30_000600_make_contact_menu_dynamic.php

@@ -0,0 +1,39 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::table('menues')->where('code', 'help.contact')->update([
+            'content_type' => 'dynamic',
+            'static_content_schema' => null,
+        ]);
+        // Preserve legacy pivot content for rollback; dynamic menus do not expose it.
+    }
+
+    public function down(): void
+    {
+        DB::table('menues')->where('code', 'help.contact')->update([
+            'content_type' => 'static',
+            'static_content_schema' => json_encode([
+                'whatsapp' => 'required|array',
+                'whatsapp.whatsapp_url' => 'required|url',
+                'whatsapp.whatsapp_label' => 'required|string',
+                'phone' => 'required|string',
+                'locations' => 'required|array|min:1',
+                'locations.*.label' => 'required|string',
+                'locations.*.addresses' => 'required|array|min:1',
+                'locations.*.addresses.*' => 'required|array:label,address,coordinates',
+                'locations.*.addresses.*.label' => 'required|string',
+                'locations.*.addresses.*.address' => 'required|string',
+                'locations.*.addresses.*.coordinates' => 'required|array|size:2',
+                'locations.*.addresses.*.coordinates.0' => 'required|numeric|between:-90,90',
+                'locations.*.addresses.*.coordinates.1' => 'required|numeric|between:-180,180',
+                'map_locations' => 'prohibited',
+            ], JSON_THROW_ON_ERROR),
+        ]);
+    }
+};

database/migrations/2026_09_30_000700_split_phone_number_components.php

@@ -0,0 +1,94 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('phone_numbers', function (Blueprint $table): void {
+            $table->string('country_code', 8)->nullable()->default('+54');
+            $table->string('mobile_prefix', 4)->nullable()->default('9');
+            $table->string('area_code', 8)->nullable();
+            $table->string('local_number')->nullable();
+        });
+
+        DB::table('phone_numbers')->orderBy('id')->chunkById(100, function ($numbers): void {
+            foreach ($numbers as $phone) {
+                DB::table('phone_numbers')->where('id', $phone->id)
+                    ->update($this->components($phone->number));
+            }
+        });
+
+        Schema::table('phone_numbers', function (Blueprint $table): void {
+            $table->dropColumn('number');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('phone_numbers', function (Blueprint $table): void {
+            $table->string('number')->nullable();
+        });
+
+        DB::table('phone_numbers')->orderBy('id')->chunkById(100, function ($numbers): void {
+            foreach ($numbers as $phone) {
+                $parts = array_filter([
+                    $phone->country_code,
+                    $phone->mobile_prefix,
+                    $phone->area_code,
+                    $phone->local_number,
+                ], fn ($part): bool => $part !== null && $part !== '');
+                DB::table('phone_numbers')->where('id', $phone->id)
+                    ->update(['number' => implode(' ', $parts)]);
+            }
+        });
+
+        Schema::table('phone_numbers', function (Blueprint $table): void {
+            $table->dropColumn(['country_code', 'mobile_prefix', 'area_code', 'local_number']);
+        });
+    }
+
+    /** @return array{country_code: ?string, mobile_prefix: ?string, area_code: ?string, local_number: string} */
+    private function components(string $number): array
+    {
+        $number = trim($number);
+
+        if (preg_match('/^(\+?\d{1,3})\s+(?:(9)\s+)?\(?(\d{2,5})\)?[\s-]+([\d\s-]+)$/', $number, $match)) {
+            return [
+                'country_code' => '+'.ltrim($match[1], '+'),
+                'mobile_prefix' => ($match[2] ?? '') ?: null,
+                'area_code' => $match[3],
+                'local_number' => preg_replace('/\D/', '', $match[4]),
+            ];
+        }
+
+        if (preg_match('/^\(?(0\d{2,5})\)?[\s-]+([\d\s-]+)$/', $number, $match)) {
+            return [
+                'country_code' => null,
+                'mobile_prefix' => null,
+                'area_code' => $match[1],
+                'local_number' => preg_replace('/\D/', '', $match[2]),
+            ];
+        }
+
+        if (preg_match('/^\+54(9?)(\d+)$/', $number, $match)) {
+            return [
+                'country_code' => '+54',
+                'mobile_prefix' => $match[1] === '9' ? '9' : null,
+                'area_code' => null,
+                'local_number' => $match[2],
+            ];
+        }
+
+        return [
+            'country_code' => null,
+            'mobile_prefix' => null,
+            'area_code' => null,
+            'local_number' => $number,
+        ];
+    }
+};

database/migrations/2026_10_01_000000_add_banner_to_categorias_table.php

@@ -0,0 +1,27 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('categorias', function (Blueprint $table): void {
+            $table->foreignId('banner_id')
+                ->nullable()
+                ->constrained('attachments')
+                ->nullOnDelete();
+            $table->boolean('banner_enabled')->default(false);
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('categorias', function (Blueprint $table): void {
+            $table->dropConstrainedForeignId('banner_id');
+            $table->dropColumn('banner_enabled');
+        });
+    }
+};

database/migrations/2026_10_01_000000_add_event_id_to_users_table.php

@@ -0,0 +1,28 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->foreignId('event_id')
+                ->nullable()
+                ->after('tenant_codigo')
+                ->constrained('events')
+                ->cascadeOnUpdate()
+                ->restrictOnDelete();
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('users', function (Blueprint $table): void {
+            $table->dropForeign(['event_id']);
+            $table->dropColumn('event_id');
+        });
+    }
+};

database/migrations/2026_10_01_000100_update_shopit_admin_secondary_and_danger_colors.php

@@ -0,0 +1,24 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::table('admin_website_types')
+            ->where('codigo', 'shopit')
+            ->update([
+                'secondary_color' => '#ADADAD',
+                'danger_color' => '#FF8888',
+                'success_color' => '#58B341',
+                'updated_at' => now(),
+            ]);
+    }
+
+    public function down(): void
+    {
+        // Presentation settings are operational data; preserve them on rollback.
+    }
+};

database/migrations/2026_10_01_000200_add_sort_order_to_categorias_table.php

@@ -0,0 +1,34 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('categorias', function (Blueprint $table): void {
+            $table->unsignedInteger('sort_order')->default(0);
+            $table->index(['tenant_code', 'categoria_id', 'sort_order']);
+        });
+
+        // Preserve the alphabetical navigation order until an administrator reorders it.
+        $orders = [];
+        foreach (DB::table('categorias')->orderBy('nombre')->orderBy('id')->get() as $category) {
+            $group = json_encode([$category->tenant_code, $category->categoria_id]);
+            $order = $orders[$group] ?? 0;
+            DB::table('categorias')->where('id', $category->id)->update(['sort_order' => $order]);
+            $orders[$group] = $order + 1;
+        }
+    }
+
+    public function down(): void
+    {
+        Schema::table('categorias', function (Blueprint $table): void {
+            $table->dropIndex(['tenant_code', 'categoria_id', 'sort_order']);
+            $table->dropColumn('sort_order');
+        });
+    }
+};

database/seeders/FiestaTradicionArrufoSeeder.php

@@ -14,6 +14,7 @@ use App\Shared\Enums\FieldType;
 use Illuminate\Database\Seeder;
 use Illuminate\Http\UploadedFile;
 use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Schema;
 use Illuminate\Support\Facades\Storage;
 use RuntimeException;
 
@@ -51,14 +52,19 @@ class FiestaTradicionArrufoSeeder extends Seeder
             ['tenant_code' => $tenant->codigo, 'title' => self::TITLE],
             ['published_at' => now()],
         );
-        $event->update([
-            'client_id' => $client->id,
+        $eventData = [
             'subtitle' => 'Una noche para celebrar nuestras raíces y mantener viva la tradición gaucha.',
             'description' => 'La 26.º Fiesta de la Tradición y 4.º Encuentro de Agrupaciones Gauchas reunirá a agrupaciones, artesanos, pilcheros y público en general para compartir una jornada dedicada a nuestras costumbres y cultura.'
                 ."\n\n".'Un encuentro para disfrutar de la tradición, la identidad gaucha y el espíritu de camaradería, en el Predio de Doma del Club Unión Deportiva Arrufó.'
                 ."\n\n".'Organiza: Biblioteca Popular Miguel Ángel Sosa.',
             'location' => 'Predio de Doma del Club Unión Deportiva Arrufó',
-        ]);
+        ];
+
+        if (Schema::hasColumn('events', 'client_id')) {
+            $eventData['client_id'] = $client->id;
+        }
+
+        $event->update($eventData);
 
         $eventImage = $event->attachment;
         if ($eventImage === null || ! Storage::disk('s3')->exists($eventImage->path)) {

database/seeders/MenuSeeder.php

@@ -53,89 +53,131 @@ class MenuSeeder extends Seeder
                 'route' => '/scanner/detail/:id',
             ],
             [
-                'code' => 'adminapp.event',
+                'code' => 'onticket.adminapp.event',
                 'label' => 'Eventos',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/event',
             ],
             [
-                'code' => 'adminapp.inicio',
+                'code' => 'onticket.adminapp.inicio',
                 'label' => 'Inicio',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/inicio',
             ],
             [
-                'code' => 'adminapp.catalog',
+                'code' => 'onticket.adminapp.catalog',
                 'label' => 'Catálogo',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/catalog',
             ],
             [
-                'code' => 'adminapp.combos',
+                'code' => 'onticket.adminapp.combos',
                 'label' => 'Combos',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/combos',
             ],
             [
-                'code' => 'adminapp.categories',
+                'code' => 'onticket.adminapp.categories',
                 'label' => 'Categorías',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/categories',
             ],
             [
-                'code' => 'adminapp.ventas',
+                'code' => 'onticket.adminapp.ventas',
                 'label' => 'Ventas',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/ventas',
             ],
             [
-                'code' => 'adminapp.staff',
+                'code' => 'onticket.adminapp.staff',
                 'label' => 'Usuarios',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/staff',
             ],
             [
-                'code' => 'adminapp.tickets',
+                'code' => 'onticket.adminapp.tickets',
                 'label' => 'Tickets',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/tickets',
             ],
             [
-                'code' => 'adminapp.fiesta-futbol-infantil.entradas',
+                'code' => 'onticket.adminapp.fiesta-futbol-infantil.entradas',
                 'label' => 'Entradas',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/entradas',
             ],
             [
-                'code' => 'adminapp.fiesta-futbol-infantil.alojamientos',
+                'code' => 'onticket.adminapp.fiesta-futbol-infantil.alojamientos',
                 'label' => 'Alojamientos',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/alojamientos',
             ],
             [
-                'code' => 'adminapp.fiesta-futbol-infantil.merchandising',
+                'code' => 'onticket.adminapp.fiesta-futbol-infantil.merchandising',
                 'label' => 'Merchandising',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/merchandising',
             ],
             [
-                'code' => 'adminapp.fiesta-futbol-infantil.comida',
+                'code' => 'onticket.adminapp.fiesta-futbol-infantil.comida',
                 'label' => 'Comida',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/comidas',
             ],
             [
-                'code' => 'adminapp.desfile.entradas',
+                'code' => 'onticket.adminapp.desfile.entradas',
                 'label' => 'Entradas',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/desfile/entradas',
             ],
             [
-                'code' => 'adminapp.desfile.reservas',
+                'code' => 'onticket.adminapp.desfile.reservas',
                 'label' => 'Reserva de Tickets',
                 'parent_menu_code' => 'main.adminapp',
                 'route' => '/admin/desfile/reservas',
             ],
+            [
+                'code' => 'shopit.adminapp.marca',
+                'label' => 'Marca',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/marca',
+            ],
+            [
+                'code' => 'shopit.adminapp.contacto',
+                'label' => 'Contacto',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/contacto',
+            ],
+            [
+                'code' => 'shopit.adminapp.productos',
+                'label' => 'Productos',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/productos',
+            ],
+            [
+                'code' => 'shopit.adminapp.categorias',
+                'label' => 'Categorías',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/categorias',
+            ],
+            [
+                'code' => 'shopit.adminapp.transacciones',
+                'label' => 'Transacciones',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/transacciones',
+            ],
+            [
+                'code' => 'shopit.adminapp.reportes',
+                'label' => 'Reportes',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/reportes',
+            ],
+            [
+                'code' => 'shopit.adminapp.usuarios_roles',
+                'label' => 'Usuarios y roles',
+                'parent_menu_code' => 'main.adminapp',
+                'route' => '/admin/usuarios-roles',
+            ],
             [
                 'code' => 'account',
                 'label' => 'Mi cuenta',
@@ -182,23 +224,8 @@ class MenuSeeder extends Seeder
                 'code' => 'help.contact',
                 'label' => 'Contacto',
                 'parent_menu_code' => 'help',
-                'content_type' => Menu::CONTENT_TYPE_STATIC,
-                'static_content_schema' => [
-                    'whatsapp' => 'required|array',
-                    'whatsapp.whatsapp_url' => 'required|url',
-                    'whatsapp.whatsapp_label' => 'required|string',
-                    'phone' => 'required|string',
-                    'locations' => 'required|array|min:1',
-                    'locations.*.label' => 'required|string',
-                    'locations.*.addresses' => 'required|array|min:1',
-                    'locations.*.addresses.*' => 'required|array:label,address,coordinates',
-                    'locations.*.addresses.*.label' => 'required|string',
-                    'locations.*.addresses.*.address' => 'required|string',
-                    'locations.*.addresses.*.coordinates' => 'required|array|size:2',
-                    'locations.*.addresses.*.coordinates.0' => 'required|numeric|between:-90,90',
-                    'locations.*.addresses.*.coordinates.1' => 'required|numeric|between:-180,180',
-                    'map_locations' => 'prohibited',
-                ],
+                'content_type' => Menu::CONTENT_TYPE_DYNAMIC,
+                'static_content_schema' => null,
                 'route' => '/ayuda/contacto',
             ],
             [
@@ -219,7 +246,10 @@ class MenuSeeder extends Seeder
                 'code' => 'help.terms-and-conditions',
                 'label' => 'Términos y condiciones',
                 'parent_menu_code' => 'help',
-                'content_type' => Menu::CONTENT_TYPE_DYNAMIC,
+                'content_type' => Menu::CONTENT_TYPE_STATIC,
+                'static_content_schema' => [
+                    'html' => 'present|nullable|string',
+                ],
                 'route' => '/ayuda/terminos-y-condiciones',
             ],
         ];
@@ -255,6 +285,10 @@ class MenuSeeder extends Seeder
             ])
             ->delete();
 
+        Menu::query()
+            ->where('code', 'like', 'adminapp.%')
+            ->delete();
+
         $allRoleMenuCodes = Menu::query()->pluck('code');
         $adminAppMenuCodes = Menu::query()
             ->where('code', 'main.adminapp')
@@ -299,24 +333,32 @@ class MenuSeeder extends Seeder
             'mutual_smep',
         ];
         $ticketAdminMenuCodes = [
-            'adminapp.tickets',
+            'onticket.adminapp.tickets',
         ];
         $fiestaCategoryMenuCodes = [
-            'adminapp.fiesta-futbol-infantil.entradas',
-            'adminapp.fiesta-futbol-infantil.alojamientos',
-            'adminapp.fiesta-futbol-infantil.merchandising',
-            'adminapp.fiesta-futbol-infantil.comida',
+            'onticket.adminapp.fiesta-futbol-infantil.entradas',
+            'onticket.adminapp.fiesta-futbol-infantil.alojamientos',
+            'onticket.adminapp.fiesta-futbol-infantil.merchandising',
+            'onticket.adminapp.fiesta-futbol-infantil.comida',
         ];
         $fiestaExcludedAdminMenuCodes = [
-            'adminapp.inicio',
-            'adminapp.catalog',
-            'adminapp.categories',
-            'adminapp.combos',
+            'onticket.adminapp.inicio',
+            'onticket.adminapp.catalog',
+            'onticket.adminapp.categories',
+            'onticket.adminapp.combos',
         ];
         $desfileMenuCodes = [
-            'adminapp.desfile.entradas',
-            'adminapp.desfile.reservas',
+            'onticket.adminapp.desfile.entradas',
+            'onticket.adminapp.desfile.reservas',
         ];
+        $shopItAdminMenuCodes = Menu::query()
+            ->where('code', 'like', 'shopit.adminapp.%')
+            ->pluck('code')
+            ->all();
+        $onTicketAdminMenuCodes = Menu::query()
+            ->where('code', 'like', 'onticket.adminapp.%')
+            ->pluck('code')
+            ->all();
         $onTicketMenuCodes = [
             'event.index',
             'event.category',
@@ -342,30 +384,6 @@ class MenuSeeder extends Seeder
                 'is_active' => false,
             ],
         ];
-        $contactContent = [
-            'whatsapp' => [
-                'whatsapp_url' => 'https://wa.me/543412602222',
-                'whatsapp_label' => 'Chatea con nosotros',
-            ],
-            'phone' => '+54 9 (0341) 6658247',
-            'locations' => [
-                'rosario' => [
-                    'label' => 'Rosario',
-                    'addresses' => [
-                        [
-                            'label' => 'Gigante de Arroyito',
-                            'address' => 'Av. Génova 640, Rosario',
-                            'coordinates' => [-32.913997, -60.674567],
-                        ],
-                        [
-                            'label' => 'Telepagos',
-                            'address' => 'Rioja 1150, piso 12, dpto. 3, Rosario',
-                            'coordinates' => [-32.946820, -60.639320],
-                        ],
-                    ],
-                ],
-            ],
-        ];
         $mutualSmepFrequentlyAskedQuestions = [
             [
                 'pregunta' => '¿Hay algún límite de compra?',
@@ -383,29 +401,17 @@ class MenuSeeder extends Seeder
                 'is_active' => false,
             ],
         ];
-        $mutualSmepContactContent = [
-            'whatsapp' => [
-                'whatsapp_url' => 'https://wa.me/5493412474530',
-                'whatsapp_label' => 'Chateá con Mutual SMEP',
-            ],
-            'phone' => '+54 9 341 247-4530',
-            'locations' => [
-                'rosario' => [
-                    'label' => 'Rosario',
-                    'addresses' => [
-                        [
-                            'label' => 'Mutual SMEP',
-                            'address' => 'San Lorenzo 1543, Rosario, Santa Fe',
-                            'coordinates' => [-32.9431184, -60.6437991],
-                        ],
-                    ],
-                ],
-            ],
-        ];
 
         foreach ($tenants as $tenant) {
             $menuCodes = $allMenus;
 
+            $menuCodes = array_diff(
+                $menuCodes,
+                $tenant->admin_website_type_code === 'shopit'
+                    ? $onTicketAdminMenuCodes
+                    : $shopItAdminMenuCodes,
+            );
+
             if ($tenant->codigo === 'sonder') {
                 // Sonder NO tiene tickets
                 $menuCodes = array_diff($menuCodes, ['account.tickets']);
@@ -447,11 +453,6 @@ class MenuSeeder extends Seeder
                         ? $mutualSmepFrequentlyAskedQuestions
                         : $frequentlyAskedQuestions,
                 ]);
-                $tenant->menues()->updateExistingPivot('help.contact', [
-                    'static_content' => $tenant->codigo === 'mutual_smep'
-                        ? $mutualSmepContactContent
-                        : $contactContent,
-                ]);
             }
         }
     }

database/seeders/WebsiteTypeSeeder.php

@@ -40,7 +40,7 @@ class WebsiteTypeSeeder extends Seeder
 
     public function run(): void
     {
-        $shopIt = $this->websiteTypeService->updateOrCreate(
+        $this->websiteTypeService->updateOrCreate(
             ['codigo' => 'shopit'],
             [
                 'nombre' => 'ShopIt',
@@ -48,9 +48,13 @@ class WebsiteTypeSeeder extends Seeder
                 'scanner_domain' => 'scanner.localhost',
                 'site_title' => 'ShopIt',
                 ...self::PRESENTATION,
-                'site_logo' => $this->onTicketLogo(),
-                'footer_logo' => $this->onTicketFooterLogo(),
-                'favicon' => $this->onTicketFavicon(),
+                'primary_color' => '#2FD3AC',
+                'secondary_color' => '#ADADAD',
+                'danger_color' => '#FF8888',
+                'success_color' => '#58B341',
+                'site_logo' => $this->shopItLogo(),
+                'footer_logo' => $this->shopItFooterLogo(),
+                'favicon' => $this->shopItFavicon(),
             ],
         );
 
@@ -83,7 +87,7 @@ class WebsiteTypeSeeder extends Seeder
                 ...self::PRESENTATION,
                 'site_logo' => $this->onTicketLogo(),
                 'footer_logo' => $this->onTicketFooterLogo(),
-                'favicon' => $shopIt->favicon()->firstOrFail()->key,
+                'favicon' => $this->onTicketFavicon(),
             ],
         );
 
@@ -204,7 +208,7 @@ class WebsiteTypeSeeder extends Seeder
 
     private function onTicketLogo(): UploadedFile
     {
-        $path = public_path('images/website_types/onticket_logo.png');
+        $path = public_path('images/website_types/onticket/onticket_logo.png');
 
         if (! file_exists($path)) {
             throw new RuntimeException("OnTicket logo not found at path: {$path}");
@@ -221,7 +225,7 @@ class WebsiteTypeSeeder extends Seeder
 
     private function onTicketFooterLogo(): UploadedFile
     {
-        $path = public_path('images/website_types/onticket_footer_logo.png');
+        $path = public_path('images/website_types/onticket/onticket_footer_logo.png');
 
         if (! file_exists($path)) {
             throw new RuntimeException("OnTicket footer logo not found at path: {$path}");
@@ -238,7 +242,7 @@ class WebsiteTypeSeeder extends Seeder
 
     private function onTicketFavicon(): UploadedFile
     {
-        $path = public_path('images/website_types/onticket_favicon.svg');
+        $path = public_path('images/website_types/onticket/onticket_favicon.svg');
 
         if (! file_exists($path)) {
             throw new RuntimeException("OnTicket favicon not found at path: {$path}");
@@ -252,4 +256,30 @@ class WebsiteTypeSeeder extends Seeder
             true,
         );
     }
+
+    private function shopItLogo(): UploadedFile
+    {
+        return $this->uploadedImage('shopit', 'shopit_logo.png', 'image/png');
+    }
+
+    private function shopItFooterLogo(): UploadedFile
+    {
+        return $this->uploadedImage('shopit', 'shopit_footer_logo.png', 'image/png');
+    }
+
+    private function shopItFavicon(): UploadedFile
+    {
+        return $this->uploadedImage('shopit', 'shopit-favicon.svg', 'image/svg+xml');
+    }
+
+    private function uploadedImage(string $websiteType, string $filename, string $mimeType): UploadedFile
+    {
+        $path = public_path("images/website_types/{$websiteType}/{$filename}");
+
+        if (! file_exists($path)) {
+            throw new RuntimeException("Website type image not found at path: {$path}");
+        }
+
+        return new UploadedFile($path, $filename, $mimeType, null, true);
+    }
 }

public/images/website_types/shopit/shopit-favicon.svg

@@ -0,0 +1,10 @@
+<svg width="41" height="41" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:se="http://svg-edit.googlecode.com" se:swatches="W3siaWQiOiJCMDBEREFFMy0zMjUwLTRERDgtOEU0RS0zMDYxREJGNUE3QTMiLCJuYW1lIjoiIzVCNUI1QiIsImhleCI6IiM1QjVCNUIifSx7ImlkIjoiRjI4QjU4NTYtNUM2OC00QkY4LTk3MDMtOTk5NDJCOTgzNTVBIiwibmFtZSI6IiMyRkQzQUMiLCJoZXgiOiIjMkZEM0FDIn1d">
+
+
+
+
+
+
+
+
+<g><se:title>Layer 1</se:title><path d="m16.32,27.13c2.29,0 3.13,-0.37 3.73,-0.76c0.65,-0.42 1.17,-1.06 1.24,-1.97c0.06,-0.76 -0.29,-1.4 -0.81,-1.78c-0.7,-0.5 -2.05,-0.81 -3.21,-1.05c-1.13,-0.24 -2.14,-0.6 -3.03,-1.22c-1.06,-0.73 -1.61,-1.47 -1.96,-2.52c-0.45,-1.32 -0.36,-3.12 -0.11,-4.02c0.43,-1.54 1.35,-2.86 2.59,-3.84001c1.6,-1.26 3.58,-2.01999 6.46,-2.17999c0.3,-0.02 0.71,-0.04 1.21,-0.04c0,0 0.16,0 0.21,0h13.3c-3.68,-4.71 -9.41,-7.75 -15.85,-7.75c-11.1,0 -20.09,9 -20.09,20.09c0,2.47 0.45,4.84 1.27,7.03h15.06l-0.01,0.01z" fill="#2FD3AC" id="svg_7"/><path d="m23.11,12.59c-0.65,0 -1.64,0.03 -1.95,0.07c-1.3,0.17 -2.25,0.55 -2.82,1.31c-0.3199,0.43 -0.48,0.99 -0.29,1.66c0.31,1.07 2.1501,1.44 3.4001,1.7c1.49,0.31 2.5599,0.57 3.5899,1.08c1.06,0.53 2.03,1.41 2.51,2.43c0.46,0.98 0.6001,1.96 0.5201,3.08c-0.11,1.56 -0.4701,2.72 -0.9901,3.69c-0.49,0.91 -1.32,1.87 -2.03,2.44c-0.74,0.59 -1.81,1.38 -3.15,1.83c-1.35,0.45 -3.1399,0.63 -5.2999,0.63h-12.30005c3.68,4.68 9.39005,7.68 15.80005,7.68c11.1,0 20.0899,-9 20.0899,-20.09c0,-2.65 -0.5199,-5.18 -1.4499,-7.5h-15.6201l-0.01,-0.01z" fill="#5B5B5B" id="svg_8"/></g></svg>

tests/Feature/Address/AddressPresentationTest.php

@@ -0,0 +1,163 @@
+<?php
+
+namespace Tests\Feature\Address;
+
+use App\Domains\Core\Address\Models\Address;
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Domains\Core\Tenant\Resources\TenantResource;
+use App\Domains\Ticketing\Event\Models\Event;
+use App\Domains\Ticketing\Event\Resources\EventResource;
+use App\Domains\Ticketing\Event\Resources\PublicEventResource;
+use App\Domains\Ticketing\Event\Services\EventAddressService;
+use App\Domains\Ticketing\Event\Services\PublicEventService;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+use Tests\TestCase;
+
+class AddressPresentationTest extends TestCase
+{
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Schema::create('tenants', function (Blueprint $table): void {
+            $table->id();
+            $table->string('codigo')->unique();
+        });
+        Schema::create('events', function (Blueprint $table): void {
+            $table->id();
+            $table->string('tenant_code')->nullable();
+            $table->string('title')->nullable();
+            $table->string('subtitle')->nullable();
+            $table->timestamp('published_at')->nullable();
+            $table->foreignId('attachment_id')->nullable();
+            $table->string('location')->nullable();
+            $table->json('exact_location')->nullable();
+            $table->timestamps();
+        });
+        (require database_path('migrations/2026_09_30_000000_create_addresses_and_tenant_addresses_tables.php'))->up();
+        (require database_path('migrations/2026_09_30_000200_add_address_id_to_events.php'))->up();
+    }
+
+    public function test_tenant_response_exposes_all_addresses_main_address_and_a_separate_event_address(): void
+    {
+        DB::table('tenants')->insert(['codigo' => 'acme']);
+        $tenant = Tenant::where('codigo', 'acme')->firstOrFail();
+        $tenant->forceFill((new Tenant)->getAttributes());
+        $principal = Address::create(['label' => 'Principal', 'address_text' => 'Sede 123', 'latitude' => 0, 'longitude' => 0]);
+        $secondary = Address::create(['label' => 'Sucursal', 'address_text' => 'Otra calle 456']);
+        $venue = Address::create(['label' => 'Predio', 'address_text' => 'Evento 789', 'latitude' => -32.9431184, 'longitude' => -60.6437991]);
+        $tenant->addresses()->attach($principal->id, ['is_main' => true]);
+        $tenant->addresses()->attach($secondary->id);
+        $tenant->load(['addresses', 'mainAddress']);
+        foreach (['headerLogo', 'footerLogo', 'favicon', 'headerBackgroundImage', 'footerBackgroundImage', 'storefrontWebsiteType'] as $relation) {
+            $tenant->setRelation($relation, null);
+        }
+        $event = $this->presentedEvent($venue, $tenant);
+        $tenant->setRelation('activeEvent', $event);
+        $data = (new TenantResource($tenant))->response()->getData(true)['data'];
+
+        $this->assertCount(2, $data['addresses']);
+        $this->assertTrue($data['addresses'][0]['is_main']);
+        $this->assertFalse($data['addresses'][1]['is_main']);
+        $this->assertSame(0, $data['main_address']['latitude']);
+        $this->assertNull($data['addresses'][1]['latitude']);
+        $this->assertSame($venue->id, $data['event']['address']['id']);
+        $this->assertSame(-32.9431184, $data['event']['address']['latitude']);
+        $this->assertSame('Evento 789', $data['event']['address']['address_text']);
+        $this->assertSame('Anterior', $data['event']['location']);
+        $this->assertArrayNotHasKey('is_main', $data['event']['address']);
+    }
+
+    public function test_public_and_admin_event_responses_use_the_same_canonical_address(): void
+    {
+        $address = Address::create(['label' => 'Predio', 'address_text' => 'Nueva 123', 'latitude' => 0, 'longitude' => -60.6437991]);
+        $event = $this->presentedEvent($address, new Tenant);
+        foreach ([EventResource::class, PublicEventResource::class] as $resource) {
+            $data = (new $resource($event))->response()->getData(true)['data'];
+            $this->assertSame('Nueva 123', $data['address']['address_text']);
+            $this->assertSame(0, $data['address']['latitude']);
+            $this->assertSame(-60.6437991, $data['address']['longitude']);
+            $this->assertSame('Anterior', $data['location']);
+            $this->assertSame(20, $data['exact_location']['longitude']);
+        }
+
+        $event->setRelation('address', null);
+        $data = (new PublicEventResource($event))->response()->getData(true)['data'];
+        $this->assertNull($data['address']);
+        $this->assertSame('Anterior', $data['location']);
+        $address->update(['latitude' => null, 'longitude' => null]);
+        $event->setRelation('address', $address);
+        $data = (new PublicEventResource($event))->response()->getData(true)['data'];
+        $this->assertNull($data['address']['latitude']);
+        $this->assertSame(20, $data['exact_location']['longitude']);
+    }
+
+    public function test_editing_event_location_preserves_canonical_coordinates_unless_explicitly_changed(): void
+    {
+        $address = Address::create(['label' => 'Predio', 'address_text' => 'Anterior', 'latitude' => 0, 'longitude' => -60]);
+        $event = Event::create(['address_id' => $address->id, 'location' => 'Nueva', 'exact_location' => ['latitude' => 10, 'longitude' => 20]]);
+        DB::transaction(fn () => app(EventAddressService::class)->syncLocation($event));
+        $this->assertSame('Nueva', $address->fresh()->address_text);
+        $this->assertSame('0.0000000', $address->fresh()->latitude);
+        $this->assertDatabaseCount('addresses', 1);
+
+        $event->exact_location = null;
+        DB::transaction(fn () => app(EventAddressService::class)->syncLocation($event, true));
+        $this->assertNull($address->fresh()->latitude);
+        $this->assertNull($address->fresh()->longitude);
+    }
+
+    public function test_editing_a_shared_event_address_does_not_change_tenant_or_other_event_addresses(): void
+    {
+        DB::table('tenants')->insert(['codigo' => 'acme']);
+        $tenant = Tenant::where('codigo', 'acme')->firstOrFail();
+        $address = Address::create(['label' => 'Compartida', 'address_text' => 'Original', 'latitude' => -32, 'longitude' => -60]);
+        $tenant->addresses()->attach($address->id, ['is_main' => true]);
+        $event = Event::create(['address_id' => $address->id, 'location' => 'Nueva ubicación']);
+        $other = Event::create(['address_id' => $address->id, 'location' => 'Original']);
+
+        DB::transaction(fn () => app(EventAddressService::class)->syncLocation($event));
+
+        $this->assertSame('Original', $address->fresh()->address_text);
+        $this->assertSame($address->id, $other->fresh()->address_id);
+        $this->assertSame($address->id, $tenant->mainAddress->id);
+        $this->assertNotSame($address->id, $event->fresh()->address_id);
+        $this->assertSame('Nueva ubicación', $event->fresh()->address->address_text);
+        $this->assertSame('-32.0000000', $event->fresh()->address->latitude);
+    }
+
+    public function test_public_event_search_uses_its_address_and_loads_it_for_the_response(): void
+    {
+        DB::table('tenants')->insert(['codigo' => 'acme']);
+        $tenant = Tenant::where('codigo', 'acme')->firstOrFail();
+        $address = Address::create(['label' => 'Predio', 'address_text' => 'Dirección nueva']);
+        $event = Event::create([
+            'tenant_code' => 'acme', 'title' => 'Festival', 'location' => 'Dirección anterior',
+            'address_id' => $address->id, 'published_at' => now()->subMinute(),
+        ]);
+        $service = app(PublicEventService::class);
+        $page = $service->list($tenant, 'nueva', 1);
+        $this->assertSame($event->id, $page->items()[0]->id);
+        $this->assertTrue($page->items()[0]->relationLoaded('address'));
+        $this->assertSame(0, $service->list($tenant, 'anterior', 1)->total());
+    }
+
+    public function test_editing_an_unlinked_event_creates_its_address(): void
+    {
+        $event = Event::create(['location' => 'Predio 123', 'exact_location' => ['latitude' => -32, 'longitude' => -60]]);
+        DB::transaction(fn () => app(EventAddressService::class)->syncLocation($event));
+        $this->assertSame('Predio 123', $event->fresh()->address->address_text);
+        $this->assertSame('-60.0000000', $event->fresh()->address->longitude);
+        $this->assertDatabaseCount('tenant_addresses', 0);
+    }
+
+    private function presentedEvent(?Address $address, Tenant $tenant): Event
+    {
+        $event = new Event(['location' => 'Anterior', 'exact_location' => ['latitude' => 10, 'longitude' => 20]]);
+        $event->setRelation('address', $address)->setRelation('tenant', $tenant)
+            ->setRelation('socialMedia', collect())->setRelation('dates', collect())->setRelation('attachment', null);
+
+        return $event;
+    }
+}

tests/Feature/Auth/AdminAppMeControllerTest.php

@@ -2,10 +2,13 @@
 
 namespace Tests\Feature\Auth;
 
+use App\Domains\Core\Address\Models\Address;
 use App\Domains\Core\Auth\Models\User;
 use App\Domains\Core\Authorization\Enums\RoleCode;
 use App\Domains\Core\Authorization\Models\Role;
 use App\Domains\Core\Menu\Models\Menu;
+use App\Domains\Core\PhoneNumber\Models\PhoneNumber;
+use App\Domains\Core\Tenant\Models\SocialMedia;
 use App\Domains\Core\Tenant\Models\Tenant;
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Laravel\Sanctum\Sanctum;
@@ -46,6 +49,21 @@ class AdminAppMeControllerTest extends TestCase
         $tenant->menues()->sync([$catalog->code, $staff->code, $storefront->code]);
         $otherTenant->menues()->sync([$staff->code]);
 
+        $instagram = SocialMedia::query()->create([
+            'code' => 'instagram', 'name' => 'Instagram', 'icon' => 'fa-brands fa-instagram',
+        ]);
+        $tenant->socialMedia()->attach($instagram->code, ['url' => 'https://instagram.com/acme', 'orden' => 0]);
+        $address = Address::query()->create(['label' => 'Principal', 'address_text' => 'San Martín 123']);
+        $tenant->addresses()->attach($address->id, ['is_main' => true]);
+        $phone = PhoneNumber::query()->create([
+            'label' => 'Principal',
+            'country_code' => '+54',
+            'mobile_prefix' => '9',
+            'area_code' => '0341',
+            'local_number' => '6658247',
+        ]);
+        $tenant->phoneNumbers()->attach($phone->id, ['is_main' => true]);
+
         $user = User::factory()->create([
             'nombre_apellido' => 'Admin Acme',
             'email' => 'admin@acme.test',
@@ -59,6 +77,11 @@ class AdminAppMeControllerTest extends TestCase
             ->assertJsonPath('data.user.id', $user->id)
             ->assertJsonPath('data.user.email', 'admin@acme.test')
             ->assertJsonPath('data.tenant.codigo', 'acme')
+            ->assertJsonPath('data.tenant.social_media.0.url', 'https://instagram.com/acme')
+            ->assertJsonPath('data.tenant.addresses.0.address_text', 'San Martín 123')
+            ->assertJsonPath('data.tenant.phone_numbers.0.number', '+54 9 (0341) 6658247')
+            ->assertJsonPath('data.tenant.phone_numbers.0.area_code', '0341')
+            ->assertJsonPath('data.tenant.phone_numbers.0.local_number', '6658247')
             ->assertJsonCount(1, 'data.tenant.menues')
             ->assertJsonPath('data.tenant.menues.0.code', 'admin.catalog')
             ->assertJsonPath('data.tenant.menues.0.label', 'Catálogo')

tests/Feature/Auth/ScannerMeControllerTest.php

@@ -43,7 +43,7 @@ class ScannerMeControllerTest extends TestCase
             'route' => '/scanner/scan',
         ]);
         $foreign = Menu::query()->create([
-            'code' => 'adminapp.inicio',
+            'code' => 'onticket.adminapp.inicio',
             'label' => 'Administración',
             'route' => '/admin/inicio',
         ]);

tests/Feature/Auth/UserAuthorizationRelationsTest.php

@@ -17,6 +17,7 @@ class UserAuthorizationRelationsTest extends TestCase
         $this->assertTrue(Schema::hasColumns('users', [
             'rol_codigo',
             'tenant_codigo',
+            'event_id',
         ]));
     }
 
@@ -28,5 +29,7 @@ class UserAuthorizationRelationsTest extends TestCase
         $this->assertNull($user->tenant_codigo);
         $this->assertSame(RoleCode::User->value, $user->role->codigo);
         $this->assertNull($user->tenant);
+        $this->assertNull($user->event_id);
+        $this->assertNull($user->event);
     }
 }

tests/Feature/Catalog/CategoryConfigurationTest.php

@@ -0,0 +1,271 @@
+<?php
+
+namespace Tests\Feature\Catalog;
+
+use App\Domains\Commerce\Catalog\Models\Category;
+use App\Domains\Core\Auth\Models\User;
+use App\Domains\Core\Authorization\Enums\RoleCode;
+use App\Domains\Core\Bootstrap\Services\TenantBootstrapService;
+use App\Domains\Core\Tenant\Models\Tenant;
+use App\Domains\Core\Tenant\Resources\TenantResource;
+use App\Domains\Core\Tenant\Services\TenantInformationService;
+use App\Shared\Attachable\Models\Attachment;
+use App\Shared\Attachable\Services\AttachmentService;
+use App\Shared\Storage\Services\TemporaryUrlService;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\Storage;
+use Laravel\Sanctum\Sanctum;
+use Tests\TestCase;
+
+class CategoryConfigurationTest extends TestCase
+{
+    private const URL = '/api/v1/adminapp/tenant/categories';
+
+    private Tenant $tenant;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        Schema::create('tenants', function (Blueprint $table): void {
+            $table->id();
+            $table->string('codigo')->unique();
+            $table->string('dominio')->nullable();
+            $table->string('base_path')->default('/');
+            $table->string('storefront_website_type_code')->default('shopit');
+        });
+        Schema::create('attachments', function (Blueprint $table): void {
+            $table->id();
+            $table->string('key')->unique();
+            $table->string('path');
+            $table->string('filename');
+            $table->string('type');
+            $table->string('mime_type')->nullable();
+            $table->string('extension')->nullable();
+            $table->integer('size')->default(0);
+            $table->timestamps();
+        });
+        (require database_path('migrations/2026_06_24_000000_create_categorias_table.php'))->up();
+        (require database_path('migrations/2026_08_24_000000_add_is_enabled_to_categorias_table.php'))->up();
+        (require database_path('migrations/2026_10_01_000000_add_banner_to_categorias_table.php'))->up();
+        Schema::create('catalog_items', function (Blueprint $table): void {
+            $table->id();
+            $table->foreignId('category_id')->nullable()->constrained('categorias')->restrictOnDelete();
+            $table->softDeletes();
+        });
+        Schema::create('featured_groups', function (Blueprint $table): void {
+            $table->id();
+            $table->foreignId('category_id')->nullable()->constrained('categorias')->restrictOnDelete();
+        });
+        DB::table('tenants')->insert([['codigo' => 'shop'], ['codigo' => 'other']]);
+        DB::table('categorias')->insert([
+            ['tenant_code' => 'shop', 'nombre' => 'Zeta'],
+            ['tenant_code' => 'shop', 'nombre' => 'Alfa'],
+        ]);
+        (require database_path('migrations/2026_10_01_000200_add_sort_order_to_categorias_table.php'))->up();
+        $this->tenant = Tenant::query()->where('codigo', 'shop')->firstOrFail();
+        $user = new User;
+        $user->forceFill(['id' => 1, 'tenant_codigo' => 'shop', 'rol_codigo' => RoleCode::AdminApp->value]);
+        Sanctum::actingAs($user);
+        $this->mock(TemporaryUrlService::class, function ($mock): void {
+            $mock->shouldReceive('generate')->andReturnUsing(fn ($path) => [
+                'temporary_url' => 'https://example.com/'.$path,
+                'temporary_url_expires_at' => now()->addDay()->toIso8601String(),
+            ]);
+        });
+    }
+
+    public function test_get_returns_sorted_tree_including_hidden_categories_and_disabled_banners(): void
+    {
+        $parent = Category::where('nombre', 'Alfa')->firstOrFail();
+        $banner = $this->banner();
+        $parent->update(['is_enabled' => false, 'banner_id' => $banner->id]);
+        $child = Category::create(['tenant_code' => 'shop', 'categoria_id' => $parent->id, 'nombre' => 'Hija']);
+        Category::create(['tenant_code' => 'other', 'nombre' => 'Ajena']);
+
+        $response = $this->getJson(self::URL)->assertOk()
+            ->assertJsonCount(2, 'data')
+            ->assertJsonPath('data.0.nombre', 'Alfa')
+            ->assertJsonPath('data.0.is_enabled', false)
+            ->assertJsonPath('data.0.banner_enabled', false)
+            ->assertJsonPath('data.0.banner_key', $banner->key)
+            ->assertJsonPath('data.0.banner_url', 'https://example.com/banner.jpg')
+            ->assertJsonPath('data.0.subcategories.0.id', $child->id);
+        $this->assertArrayNotHasKey('sort_order', $response->json('data.0'));
+    }
+
+    public function test_put_creates_edits_reorders_and_removes_only_explicitly_deleted_nodes(): void
+    {
+        $alfa = Category::where('nombre', 'Alfa')->firstOrFail();
+        $zeta = Category::where('nombre', 'Zeta')->firstOrFail();
+        $child = Category::create(['tenant_code' => 'shop', 'categoria_id' => $alfa->id, 'nombre' => 'Eliminar']);
+        $this->putJson(self::URL, [
+            'categories' => [
+                $this->node($zeta, ['nombre' => 'Primera', 'is_enabled' => false]),
+                $this->node($alfa, ['subcategories' => [$this->node(null, ['nombre' => 'Nueva hija'])]]),
+                $this->node(null, ['nombre' => 'Nueva raíz']),
+            ],
+            'deleted_ids' => [$child->id],
+        ])->assertOk()->assertJsonPath('data.0.nombre', 'Primera')
+            ->assertJsonPath('data.1.subcategories.0.nombre', 'Nueva hija')
+            ->assertJsonPath('data.2.nombre', 'Nueva raíz');
+        $this->assertSame(0, $zeta->fresh()->sort_order);
+        $this->assertSame(1, $alfa->fresh()->sort_order);
+        $this->assertDatabaseMissing('categorias', ['id' => $child->id]);
+
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => []])->assertOk();
+        $this->assertDatabaseCount('categorias', 4);
+    }
+
+    public function test_it_preserves_existing_banners_and_supports_replacement_and_removal(): void
+    {
+        $category = Category::where('nombre', 'Alfa')->firstOrFail();
+        $banner = $this->banner();
+        $category->update(['banner_id' => $banner->id]);
+        $this->putJson(self::URL, ['categories' => [$this->node($category, ['banner' => $banner->key, 'banner_enabled' => true])], 'deleted_ids' => []])
+            ->assertOk()->assertJsonPath('data.0.banner_key', $banner->key);
+
+        $replacement = $this->banner('replacement.jpg');
+        $this->mock(AttachmentService::class, function ($mock) use ($replacement): void {
+            $mock->shouldReceive('store')->once()->withArgs(fn ($image, $path) => str_starts_with($image, 'data:image/png;base64,') && $path === 'tenants/shop/categories')->andReturn($replacement);
+        });
+        $image = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+j2ioAAAAASUVORK5CYII=';
+        $this->putJson(self::URL, ['categories' => [$this->node($category, ['banner' => $image])], 'deleted_ids' => []])
+            ->assertOk()->assertJsonPath('data.0.banner_key', $replacement->key);
+        $this->putJson(self::URL, ['categories' => [$this->node($category)], 'deleted_ids' => []])
+            ->assertOk()->assertJsonPath('data.0.banner_key', null);
+        $this->assertDatabaseHas('attachments', ['id' => $banner->id]);
+    }
+
+    public function test_it_rejects_foreign_ids_duplicate_ids_and_foreign_banners_atomically(): void
+    {
+        $local = Category::where('nombre', 'Alfa')->firstOrFail();
+        $foreign = Category::create(['tenant_code' => 'other', 'nombre' => 'Ajena']);
+        foreach ([
+            [$this->node($local, ['nombre' => 'Cambio']), $this->node($foreign)],
+            [$this->node($local), $this->node($local)],
+            [$this->node($local, ['banner' => $this->banner()->key])],
+        ] as $nodes) {
+            $this->putJson(self::URL, ['categories' => $nodes, 'deleted_ids' => []])->assertUnprocessable();
+            $this->assertSame('Alfa', $local->fresh()->nombre);
+        }
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => [$foreign->id]])->assertUnprocessable();
+    }
+
+    public function test_it_rejects_deleting_categories_with_products_or_featured_groups(): void
+    {
+        $category = Category::where('nombre', 'Alfa')->firstOrFail();
+        foreach (['catalog_items', 'featured_groups'] as $table) {
+            DB::table($table)->insert(['category_id' => $category->id]);
+            $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => [$category->id]])
+                ->assertUnprocessable()->assertJsonValidationErrors('deleted_ids');
+            $this->assertDatabaseHas('categorias', ['id' => $category->id]);
+            DB::table($table)->delete();
+        }
+        DB::table('catalog_items')->insert(['category_id' => $category->id, 'deleted_at' => now()]);
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => [$category->id]])
+            ->assertUnprocessable()->assertJsonValidationErrors('deleted_ids');
+    }
+
+    public function test_it_stores_new_banner_uploads_and_cleans_up_files_when_a_save_rolls_back(): void
+    {
+        Storage::fake('s3');
+        $image = 'data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+j2ioAAAAASUVORK5CYII=';
+        $parent = Category::where('nombre', 'Alfa')->firstOrFail();
+        $this->putJson(self::URL, ['categories' => [$this->node($parent, ['banner' => $image])], 'deleted_ids' => []])->assertOk();
+        $banner = $parent->fresh()->banner;
+        Storage::disk('s3')->assertExists($banner->path);
+        Category::create(['tenant_code' => 'shop', 'categoria_id' => $parent->id, 'nombre' => 'Hija']);
+        $this->putJson(self::URL, ['categories' => [$this->node(null, ['banner' => $image])], 'deleted_ids' => [$parent->id]])->assertUnprocessable();
+        $this->assertDatabaseCount('attachments', 1);
+        $this->assertCount(1, Storage::disk('s3')->allFiles());
+        $this->assertDatabaseHas('categorias', ['id' => $parent->id]);
+    }
+
+    public function test_it_rejects_orphaning_children_and_cycles_but_can_delete_a_whole_tree(): void
+    {
+        $parent = Category::where('nombre', 'Alfa')->firstOrFail();
+        $child = Category::create(['tenant_code' => 'shop', 'categoria_id' => $parent->id, 'nombre' => 'Hija']);
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => [$parent->id]])->assertUnprocessable();
+        $this->putJson(self::URL, ['categories' => [$this->node($child, ['subcategories' => [$this->node($parent)]])], 'deleted_ids' => []])->assertOk();
+        $this->assertSame($child->id, $parent->fresh()->categoria_id);
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => [$parent->id, $child->id]])->assertOk();
+        $this->assertDatabaseMissing('categorias', ['id' => $parent->id]);
+    }
+
+    public function test_it_validates_nested_names_images_and_required_fields(): void
+    {
+        foreach ([['nombre' => ' '], ['banner' => 'not-an-image'], ['is_enabled' => 'invalid']] as $patch) {
+            $this->putJson(self::URL, [
+                'categories' => [$this->node(null, ['subcategories' => [$this->node(null, $patch)]])],
+                'deleted_ids' => [],
+            ])->assertUnprocessable();
+        }
+        $this->putJson(self::URL, ['categories' => []])->assertUnprocessable()->assertJsonValidationErrors('deleted_ids');
+        $this->assertDatabaseCount('categorias', 2);
+    }
+
+    public function test_non_adminapp_users_cannot_change_categories(): void
+    {
+        $user = new User;
+        $user->forceFill(['id' => 2, 'tenant_codigo' => 'shop', 'rol_codigo' => RoleCode::User->value]);
+        Sanctum::actingAs($user);
+        $this->getJson(self::URL)->assertForbidden();
+        $this->putJson(self::URL, ['categories' => [], 'deleted_ids' => []])->assertForbidden();
+    }
+
+    public function test_sort_order_migration_can_be_rolled_back(): void
+    {
+        (require database_path('migrations/2026_10_01_000200_add_sort_order_to_categorias_table.php'))->down();
+        $this->assertFalse(Schema::hasColumn('categorias', 'sort_order'));
+        $this->assertDatabaseCount('categorias', 2);
+    }
+
+    public function test_public_bootstrap_uses_saved_order_without_exposing_it_and_hides_disabled_branches(): void
+    {
+        DB::table('tenants')->where('codigo', 'shop')->update(['dominio' => 'shop.test']);
+        $alfa = Category::where('nombre', 'Alfa')->firstOrFail();
+        $zeta = Category::where('nombre', 'Zeta')->firstOrFail();
+        $alfa->update(['is_enabled' => false]);
+        $first = Category::create(['tenant_code' => 'shop', 'nombre' => 'Z hija', 'categoria_id' => $zeta->id, 'sort_order' => 0]);
+        Category::create(['tenant_code' => 'shop', 'nombre' => 'A hija', 'categoria_id' => $zeta->id, 'sort_order' => 1]);
+        Category::create(['tenant_code' => 'shop', 'nombre' => 'Oculta', 'categoria_id' => $zeta->id, 'is_enabled' => false]);
+        Category::create(['tenant_code' => 'shop', 'nombre' => 'Hija de padre oculto', 'categoria_id' => $alfa->id]);
+        $this->mock(TenantInformationService::class, function ($mock): void {
+            $mock->shouldReceive('load')->once()->andReturnUsing(function ($tenant, $relations) {
+                return $tenant->load(['categories' => $relations['categories']]);
+            });
+        });
+        $loaded = app(TenantBootstrapService::class)->get('shop.test');
+        $this->assertSame($alfa->id, $loaded->categories->first()->id);
+        $resourceTenant = new Tenant(['codigo' => 'shop', 'storefront_website_type_code' => 'shopit']);
+        foreach (['favicon', 'headerLogo', 'footerLogo', 'headerBackgroundImage', 'footerBackgroundImage', 'storefrontWebsiteType'] as $relation) {
+            $resourceTenant->setRelation($relation, null);
+        }
+        $resourceTenant->setRelation('categories', $loaded->categories);
+        $data = TenantResource::make($resourceTenant)->resolve(request());
+        $this->assertCount(1, $data['categories']);
+        $this->assertSame('Zeta', $data['categories'][0]['nombre']);
+        $this->assertSame(['Z hija', 'A hija'], $data['categories'][0]['subcategories']->pluck('nombre')->all());
+        $this->assertSame($first->id, $data['categories'][0]['subcategories'][0]['id']);
+        $this->assertArrayNotHasKey('sort_order', $data['categories'][0]);
+    }
+
+    private function node(?Category $category, array $patch = []): array
+    {
+        return array_replace([
+            'id' => $category?->id,
+            'nombre' => $category?->nombre ?? 'Nueva',
+            'is_enabled' => true,
+            'banner_enabled' => false,
+            'banner' => null,
+            'subcategories' => [],
+        ], $patch);
+    }
+
+    private function banner(string $path = 'banner.jpg'): Attachment
+    {
+        return Attachment::create(['path' => $path, 'filename' => $path, 'type' => 'image']);
+    }
+}

tests/Feature/Catalog/CategoryDetailTest.php

@@ -8,6 +8,8 @@ use App\Domains\Commerce\Catalog\Models\CatalogItem;
 use App\Domains\Commerce\Catalog\Models\Category;
 use App\Domains\Commerce\Catalog\Models\Inventory;
 use App\Domains\Core\Tenant\Models\Tenant;
+use App\Shared\Attachable\Models\Attachment;
+use App\Shared\Storage\Services\TemporaryUrlService;
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Tests\TestCase;
 
@@ -72,6 +74,39 @@ class CategoryDetailTest extends TestCase
             ->assertJsonCount(0, 'data');
     }
 
+    public function test_it_returns_the_banner_url_only_when_a_banner_exists_and_is_enabled(): void
+    {
+        $tenant = $this->createTenant('category-banner');
+        $category = $this->createCategory($tenant, 'Remeras');
+        $banner = Attachment::query()->create([
+            'path' => 'categories/banner.jpg',
+            'filename' => 'banner.jpg',
+            'type' => 'image',
+            'mime_type' => 'image/jpeg',
+            'extension' => 'jpg',
+            'size' => 100,
+        ]);
+        $this->mock(TemporaryUrlService::class, function ($mock): void {
+            $mock->shouldReceive('generate')->once()
+                ->with('categories/banner.jpg', 1440)
+                ->andReturn([
+                    'temporary_url' => 'https://example.com/banner.jpg',
+                    'temporary_url_expires_at' => now()->addDay()->toIso8601String(),
+                ]);
+        });
+        $url = "/api/tenants/{$tenant->codigo}/categories/{$category->id}";
+
+        $category->update(['banner_enabled' => true]);
+        $this->getJson($url)->assertOk()->assertJsonPath('category.banner_url', null);
+
+        $category->update(['banner_id' => $banner->id, 'banner_enabled' => false]);
+        $this->getJson($url)->assertOk()->assertJsonPath('category.banner_url', null);
+
+        $category->update(['banner_enabled' => true]);
+        $this->getJson($url)->assertOk()
+            ->assertJsonPath('category.banner_url', 'https://example.com/banner.jpg');
+    }
+
     public function test_it_includes_products_from_all_descendant_categories(): void
     {
         $tenant = $this->createTenant('category-descendants');

tests/Feature/Desfile/EntryControllerTest.php

@@ -186,7 +186,7 @@ class EntryControllerTest extends TestCase
             'admin_website_type_code' => 'onticket',
         ]);
         $menu = Menu::query()->firstOrCreate(
-            ['code' => 'adminapp.desfile.entradas'],
+            ['code' => 'onticket.adminapp.desfile.entradas'],
             ['label' => 'Entradas', 'route' => '/admin/desfile/entradas'],
         );
         $tenant->menues()->attach($menu->code);

tests/Feature/FiestaFutbolInfantil/AccommodationControllerTest.php

@@ -236,7 +236,7 @@ class AccommodationControllerTest extends TestCase
 
         if ($withMenu) {
             $menu = Menu::query()->firstOrCreate(
-                ['code' => 'adminapp.fiesta-futbol-infantil.alojamientos'],
+                ['code' => 'onticket.adminapp.fiesta-futbol-infantil.alojamientos'],
                 ['label' => 'Alojamientos', 'route' => '/admin/alojamientos'],
             );
             $tenant->menues()->syncWithoutDetaching([$menu->code]);

tests/Feature/FiestaFutbolInfantil/EntryControllerTest.php

@@ -43,10 +43,10 @@ class EntryControllerTest extends TestCase
     {
         $tenant = $this->createFiestaTenant();
         $categories = [
-            'entries' => ['Entradas', 'adminapp.fiesta-futbol-infantil.entradas'],
-            'foods' => ['Comidas', 'adminapp.fiesta-futbol-infantil.comida'],
-            'accommodations' => ['Alojamientos', 'adminapp.fiesta-futbol-infantil.alojamientos'],
-            'merchandise' => ['Merchandising', 'adminapp.fiesta-futbol-infantil.merchandising'],
+            'entries' => ['Entradas', 'onticket.adminapp.fiesta-futbol-infantil.entradas'],
+            'foods' => ['Comidas', 'onticket.adminapp.fiesta-futbol-infantil.comida'],
+            'accommodations' => ['Alojamientos', 'onticket.adminapp.fiesta-futbol-infantil.alojamientos'],
+            'merchandise' => ['Merchandising', 'onticket.adminapp.fiesta-futbol-infantil.merchandising'],
         ];
 
         foreach ($categories as [$label, $menuCode]) {
@@ -405,7 +405,7 @@ class EntryControllerTest extends TestCase
     {
         $tenant = $this->createTenant('fiesta_futbol_infantil');
         $menu = Menu::query()->create([
-            'code' => 'adminapp.fiesta-futbol-infantil.entradas',
+            'code' => 'onticket.adminapp.fiesta-futbol-infantil.entradas',
             'label' => 'Entradas',
             'route' => '/admin/entradas',
         ]);