Merge branch 'feature/candidate_payments' into homo_experimental

feat(payments): rename match reason from 'exact_amount_different_dni' to 'exact_amount_near_dni'
feat(payments): filter candidates by DNI distance
2026-08-27 16:52:08 -03:00 · 2026-08-27 16:40:32 -03:00 · 2026-08-27 16:04:12 -03:00 · 2026-08-27 15:38:24 -03:00 · 2026-08-27 15:21:28 -03:00 · 2026-08-27 15:21:16 -03:00
67 changed files with 1361 additions and 254 deletions
--- a/.env.example
+++ b/.env.example
@@ -8,6 +8,7 @@ PURCHASE_CHECKOUT_EXPIRATION_MINUTES=30
 PURCHASE_QR_EXPIRATION_MINUTES=15
 PURCHASE_TELEPAGOS_EXPIRATION_MINUTES=30
 PURCHASE_TRANSFER_EXPIRATION_MINUTES=1440
+PURCHASE_TRANSFER_CANDIDATE_AMOUNT_TOLERANCE_PERCENTAGE=5
 STOCK_RESERVATION_EXPIRATION_MINUTES=30
 FRONTEND_URLS=http://localhost:4200

@@ -31,6 +32,7 @@ AUTH_LOGIN_ATTEMPT_WINDOW_MINUTES=30
 AUTH_LOGIN_LOCK_MINUTES=15
 AUTH_LOGIN_RATE_LIMIT_PER_MINUTE=10
 AUTH_LOGIN_IP_RATE_LIMIT_PER_MINUTE=30
+AUTH_PASSWORD_RESET_EXPIRATION_MINUTES=60

 LOG_CHANNEL=daily
 LOG_STACK=single
--- a/app/Domains/Auth/Controllers/ValidateResetPasswordAttemptController.php
+++ b/app/Domains/Auth/Controllers/ValidateResetPasswordAttemptController.php
@@ -22,10 +22,18 @@ class ValidateResetPasswordAttemptController extends Controller
    {
        $data = $request->validated();

-        if (! $this->resetPasswordAttemptService->validateCode(
+        $result = $this->resetPasswordAttemptService->validateCode(
            $data['email'],
            $data['codigo'],
-        )) {
+        );
+
+        if ($result === ResetPasswordAttemptService::CODE_EXPIRED) {
+            throw ValidationException::withMessages([
+                'codigo' => __('api.auth.reset_code_expired'),
+            ]);
+        }
+
+        if ($result !== ResetPasswordAttemptService::CODE_VALID) {
            throw ValidationException::withMessages([
                'codigo' => __('api.auth.reset_code_invalid'),
            ]);
--- a/app/Domains/Auth/Models/ResetPasswordAttempt.php
+++ b/app/Domains/Auth/Models/ResetPasswordAttempt.php
@@ -7,7 +7,7 @@ use Illuminate\Database\Eloquent\Attributes\Hidden;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;

-#[Fillable(['user_id', 'codigo', 'reason', 'status'])]
+#[Fillable(['user_id', 'codigo', 'reason', 'status', 'expires_at'])]
 #[Hidden(['codigo'])]
 class ResetPasswordAttempt extends Model
 {
@@ -31,6 +31,7 @@ class ResetPasswordAttempt extends Model
    {
        return [
            'user_id' => 'integer',
+            'expires_at' => 'datetime',
        ];
    }

--- a/app/Domains/Auth/Services/ResetPasswordAttemptService.php
+++ b/app/Domains/Auth/Services/ResetPasswordAttemptService.php
@@ -12,6 +12,12 @@ use Throwable;

 class ResetPasswordAttemptService
 {
+    public const CODE_VALID = 'valid';
+
+    public const CODE_INVALID = 'invalid';
+
+    public const CODE_EXPIRED = 'expired';
+
    public function createForEmail(
        string $email,
        string $tenantCode,
@@ -146,12 +152,12 @@ class ResetPasswordAttemptService
        );
    }

-    public function validateCode(string $email, string $code): bool
+    public function validateCode(string $email, string $code): string
    {
        $emailFingerprint = $this->emailFingerprint($email);

        try {
-            return DB::transaction(function () use ($email, $code, $emailFingerprint): bool {
+            return DB::transaction(function () use ($email, $code, $emailFingerprint): string {
                $user = User::query()
                    ->where('email', $email)
                    ->lockForUpdate()
@@ -169,14 +175,27 @@ class ResetPasswordAttemptService
                        'email_fingerprint' => $emailFingerprint,
                    ]);

-                    return false;
+                    return self::CODE_INVALID;
+                }
+
+                if ($attempt->expires_at?->isPast()) {
+                    $attempt->update([
+                        'status' => ResetPasswordAttempt::STATUS_EXPIRED,
+                    ]);
+
+                    Log::info('Password reset code validation failed: attempt expired.', [
+                        'email_fingerprint' => $emailFingerprint,
+                        'attempt_id' => $attempt->getKey(),
+                    ]);
+
+                    return self::CODE_EXPIRED;
                }

                $attempt->update([
                    'status' => ResetPasswordAttempt::STATUS_VALIDATED,
                ]);

-                return true;
+                return self::CODE_VALID;
            });
        } catch (Throwable $exception) {
            Log::error('Failed to validate password reset code.', [
@@ -214,6 +233,19 @@ class ResetPasswordAttemptService
                    return false;
                }

+                if ($attempt->expires_at?->isPast()) {
+                    $attempt->update([
+                        'status' => ResetPasswordAttempt::STATUS_EXPIRED,
+                    ]);
+
+                    Log::info('Password reset failed: attempt expired.', [
+                        'email_fingerprint' => $emailFingerprint,
+                        'attempt_id' => $attempt->getKey(),
+                    ]);
+
+                    return false;
+                }
+
                $user->password = $password;
                $user->failed_login_attempts = 0;
                $user->last_failed_login_at = null;
@@ -270,6 +302,7 @@ class ResetPasswordAttemptService
            'codigo' => $this->generateCode(),
            'reason' => $reason,
            'status' => ResetPasswordAttempt::STATUS_PENDING,
+            'expires_at' => now()->addMinutes((int) config('auth.passwords.users.expire')),
        ]);

        return $attempt->getKey();
--- a/app/Domains/Bootstrap/Resources/AdminAppBootstrapResource.php
+++ b/app/Domains/Bootstrap/Resources/AdminAppBootstrapResource.php
@@ -30,6 +30,7 @@ class AdminAppBootstrapResource extends JsonResource
            'login_header_footer_color' => $websiteType->login_header_footer_color,
            'site_logo' => $websiteType->siteLogo?->getTemporaryUrl(1440),
            'footer_logo' => $websiteType->footerLogo?->getTemporaryUrl(1440),
+            'favicon' => $websiteType->favicon?->getTemporaryUrl(1440),
        ];
    }
 }
--- a/app/Domains/Bootstrap/Services/AdminAppBootstrapService.php
+++ b/app/Domains/Bootstrap/Services/AdminAppBootstrapService.php
@@ -11,7 +11,7 @@ class AdminAppBootstrapService
    {
        return [
            'website_type' => WebsiteType::query()
-                ->with(['siteLogo', 'footerLogo'])
+                ->with(['siteLogo', 'footerLogo', 'favicon'])
                ->where('dominio', $domain)
                ->firstOrFail(),
        ];
--- a/app/Domains/Bootstrap/Services/ScannerBootstrapService.php
+++ b/app/Domains/Bootstrap/Services/ScannerBootstrapService.php
@@ -11,7 +11,7 @@ class ScannerBootstrapService
    {
        return [
            'website_type' => WebsiteType::query()
-                ->with(['siteLogo', 'footerLogo'])
+                ->with(['siteLogo', 'footerLogo', 'favicon'])
                ->where('scanner_domain', $domain)
                ->firstOrFail(),
        ];
--- a/app/Domains/Catalog/Services/StockReservationService.php
+++ b/app/Domains/Catalog/Services/StockReservationService.php
@@ -343,9 +343,9 @@ class StockReservationService
        });
    }

-    public function refreshForPurchase(Purchase $purchase, ?Carbon $expiresAt): void
+    public function clearExpirationForReview(Purchase $purchase): void
    {
-        DB::transaction(function () use ($purchase, $expiresAt): void {
+        DB::transaction(function () use ($purchase): void {
            /** @var Purchase $purchase */
            $purchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
            if ($purchase->stock_reservation_id === null) {
@@ -363,7 +363,7 @@ class StockReservationService
                throw new StockReservationExpiredException;
            }

-            $reservation->update(['expires_at' => $expiresAt]);
+            $reservation->update(['expires_at' => null]);
        });
    }

--- a/app/Domains/Integration/Services/TelepagosWebhookService.php
+++ b/app/Domains/Integration/Services/TelepagosWebhookService.php
@@ -7,7 +7,10 @@ use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Purchase\Models\TelepagosPayment;
 use App\Domains\Purchase\Models\TelepagosQr;
 use App\Domains\Purchase\Services\CheckoutService;
+use App\Domains\Purchase\Services\DniDistanceService;
 use Exception;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\Collection;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Log;

@@ -15,6 +18,7 @@ class TelepagosWebhookService
 {
    public function __construct(
        private readonly CheckoutService $checkoutService,
+        private readonly DniDistanceService $dniDistance,
    ) {}

    /**
@@ -41,7 +45,6 @@ class TelepagosWebhookService

            $paymentData = [
                'compra_id' => null,
-                'matched_purchase_ids' => null,
                'cuit_buyer' => $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null,
                'cvu_buyer' => $details['data']['buyer']['cvu'] ?? $details['buyer']['cvu'] ?? null,
                'amount' => $amount,
@@ -73,24 +76,55 @@ class TelepagosWebhookService
                $dni = substr($cuit, 2, -1);

                $tenantCodes = $client->tenants()->pluck('codigo');
-                $purchases = Purchase::whereIn('tenant_codigo', $tenantCodes)
-                    ->where('transfer_payer_dni', $dni)
+                $eligiblePurchases = Purchase::query()
+                    ->whereIn('tenant_codigo', $tenantCodes)
                    ->whereIn('status', [
                        Purchase::STATUS_CREATED,
                        Purchase::STATUS_PENDING_PAYMENT,
                        Purchase::STATUS_IN_REVIEW,
                    ])
-                    ->where('payment_method', 'transfer')
+                    ->where('payment_method', 'transfer');
+
+                $purchases = (clone $eligiblePurchases)
                    ->where('total', $amount)
                    ->latest()
-                    ->get();
+                    ->get()
+                    ->filter(fn (Purchase $purchase): bool => $purchase->transfer_payer_dni !== null
+                        && $this->dniDistance->distance($dni, $purchase->transfer_payer_dni) === 0)
+                    ->values();

-                $paymentData['matched_purchase_ids'] = $purchases->pluck('id')->all();
                $compra = $purchases->count() === 1 ? $purchases->first() : null;

                if (! $compra) {
-                    if ($purchases->count() > 1) {
-                        TelepagosPayment::create($paymentData);
+                    $candidatePurchases = $this->findTransferCandidates(
+                        $eligiblePurchases,
+                        $dni,
+                        $amount,
+                    );
+                    if ($candidatePurchases->isNotEmpty()) {
+                        $payment = $this->storeTransferCandidates(
+                            $paymentData,
+                            $candidatePurchases,
+                            $dni,
+                            $amount,
+                        );
+
+                        Log::channel('telepagos')->info('Telepagos webhook: Transfer payment candidates found.', [
+                            'client_code' => $client->code,
+                            'cashin_id' => $cashinId,
+                            'telepagos_payment_id' => $payment->id,
+                            'amount' => $amount,
+                            'candidate_count' => $payment->candidates->count(),
+                            'candidates' => $payment->candidates
+                                ->map(fn ($candidate): array => [
+                                    'purchase_id' => $candidate->compra_id,
+                                    'match_reason' => $candidate->match_reason,
+                                    'dni_distance' => $candidate->dni_distance,
+                                    'amount_difference' => $candidate->amount_difference,
+                                    'confidence' => $candidate->confidence,
+                                ])
+                                ->all(),
+                        ]);
                    }

                    Log::channel('telepagos')->warning('Telepagos webhook: Expected exactly one matching purchase.', [
@@ -209,4 +243,91 @@ class TelepagosWebhookService
    {
        return number_format((float) $amount, 2, '.', '');
    }
+
+    /**
+     * @param  Builder<Purchase>  $eligiblePurchases
+     * @return Collection<int, Purchase>
+     */
+    private function findTransferCandidates(Builder $eligiblePurchases, string $dni, string $amount): Collection
+    {
+        $tolerancePercentage = max(
+            0,
+            (float) config('purchase.transfer_candidate_amount_tolerance_percentage', 5),
+        );
+        $numericAmount = (float) $amount;
+        $tolerance = $numericAmount * ($tolerancePercentage / 100);
+        $minimumAmount = $this->normalizeAmount(max(0, $numericAmount - $tolerance));
+        $maximumAmount = $this->normalizeAmount($numericAmount + $tolerance);
+
+        return (clone $eligiblePurchases)
+            ->whereBetween('total', [$minimumAmount, $maximumAmount])
+            ->latest()
+            ->get()
+            ->filter(function (Purchase $purchase) use ($dni, $amount): bool {
+                if ($purchase->transfer_payer_dni === null) {
+                    return false;
+                }
+
+                $purchaseAmount = $this->normalizeAmount($purchase->total);
+                $distance = $this->dniDistance->distance(
+                    $dni,
+                    (string) $purchase->transfer_payer_dni,
+                );
+
+                return $distance === 0
+                    || ($purchaseAmount === $amount && $distance <= 2);
+            })
+            ->values();
+    }
+
+    /**
+     * @param  array<string, mixed>  $paymentData
+     * @param  Collection<int, Purchase>  $candidatePurchases
+     */
+    private function storeTransferCandidates(
+        array $paymentData,
+        Collection $candidatePurchases,
+        string $dni,
+        string $amount,
+    ): TelepagosPayment {
+        return DB::transaction(function () use ($paymentData, $candidatePurchases, $dni, $amount): TelepagosPayment {
+            $payment = TelepagosPayment::create($paymentData);
+
+            $payment->candidates()->createMany(
+                $candidatePurchases
+                    ->map(function (Purchase $purchase) use ($dni, $amount): array {
+                        $purchaseAmount = $this->normalizeAmount($purchase->total);
+                        $dniDistance = $this->dniDistance->distance(
+                            $dni,
+                            (string) $purchase->transfer_payer_dni,
+                        );
+                        $dniMatches = $dniDistance === 0;
+                        $amountMatches = $purchaseAmount === $amount;
+
+                        return [
+                            'compra_id' => $purchase->id,
+                            'dni_matches' => $dniMatches,
+                            'dni_distance' => $dniDistance,
+                            'payment_dni' => $dni,
+                            'purchase_dni' => $purchase->transfer_payer_dni,
+                            'amount_matches' => $amountMatches,
+                            'payment_amount' => $amount,
+                            'purchase_amount' => $purchaseAmount,
+                            'amount_difference' => $this->normalizeAmount(
+                                abs((float) $purchaseAmount - (float) $amount),
+                            ),
+                            'match_reason' => $amountMatches
+                                ? ($dniMatches ? 'ambiguous_exact_match' : 'exact_amount_near_dni')
+                                : 'exact_dni_near_amount',
+                            'confidence' => $amountMatches
+                                ? ($dniMatches ? 'exact' : 'medium')
+                                : 'high',
+                        ];
+                    })
+                    ->all(),
+            );
+
+            return $payment->load('candidates');
+        });
+    }
 }
--- a/app/Domains/Notification/Events/TicketsAvailable.php
+++ b/app/Domains/Notification/Events/TicketsAvailable.php
@@ -1,19 +0,0 @@
-<?php
-
-namespace App\Domains\Notification\Events;
-
-use Illuminate\Foundation\Events\Dispatchable;
-use Illuminate\Queue\SerializesModels;
-
-class TicketsAvailable
-{
-    use Dispatchable, SerializesModels;
-
-    /**
-     * @param  array<int, int>  $ticketIds
-     */
-    public function __construct(
-        public readonly int $purchaseId,
-        public readonly array $ticketIds,
-    ) {}
-}
--- a/app/Domains/Notification/Listeners/SendPurchaseConfirmedEmail.php
+++ b/app/Domains/Notification/Listeners/SendPurchaseConfirmedEmail.php
@@ -7,7 +7,7 @@ use App\Domains\Purchase\Events\PurchasePaid;
 use Illuminate\Contracts\Queue\ShouldQueueAfterCommit;
 use Illuminate\Queue\InteractsWithQueue;

-class SendPurchasePaidEmail implements ShouldQueueAfterCommit
+class SendPurchaseConfirmedEmail implements ShouldQueueAfterCommit
 {
    use InteractsWithQueue;

@@ -20,6 +20,6 @@ class SendPurchasePaidEmail implements ShouldQueueAfterCommit

    public function handle(PurchasePaid $event): void
    {
-        app(NotificationMailService::class)->sendPurchasePaid($event->purchaseId);
+        app(NotificationMailService::class)->sendPurchaseConfirmed($event->purchaseId);
    }
 }
--- a/app/Domains/Notification/Listeners/SendTicketsAvailableEmail.php
+++ b/app/Domains/Notification/Listeners/SendTicketsAvailableEmail.php
@@ -1,25 +0,0 @@
-<?php
-
-namespace App\Domains\Notification\Listeners;
-
-use App\Domains\Notification\Events\TicketsAvailable;
-use App\Domains\Notification\Services\NotificationMailService;
-use Illuminate\Contracts\Queue\ShouldQueueAfterCommit;
-use Illuminate\Queue\InteractsWithQueue;
-
-class SendTicketsAvailableEmail implements ShouldQueueAfterCommit
-{
-    use InteractsWithQueue;
-
-    public string $queue = 'emails';
-
-    public int $tries = 3;
-
-    /** @var array<int, int> */
-    public array $backoff = [30, 120, 300];
-
-    public function handle(TicketsAvailable $event): void
-    {
-        app(NotificationMailService::class)->sendTicketsAvailable($event->purchaseId, $event->ticketIds);
-    }
-}
--- a/app/Domains/Notification/Services/NotificationMailService.php
+++ b/app/Domains/Notification/Services/NotificationMailService.php
@@ -119,55 +119,17 @@ class NotificationMailService
        });
    }

-    public function sendPurchasePaid(int $purchaseId): void
+    public function sendPurchaseConfirmed(int $purchaseId): void
    {
        $context = ['purchase_id' => $purchaseId];

-        $this->sendLogged('purchase_paid', $context, function () use ($purchaseId, $context): ?array {
+        $this->sendLogged('purchase_confirmed', $context, function () use ($purchaseId, $context): ?array {
            $purchase = Purchase::query()
                ->with(['tenant', 'user', 'items'])
                ->find($purchaseId);

            if ($purchase === null) {
-                $this->logSkipped('purchase_paid', array_merge($context, [
-                    'reason' => 'purchase_not_found',
-                    'missing_model' => Purchase::class,
-                ]));
-
-                return null;
-            }
-
-            $this->mailService
-                ->forTenant($purchase->tenant_codigo)
-                ->send(
-                    $this->recipientFor($purchase),
-                    "Pago confirmado - Compra #{$purchase->getKey()}",
-                    view('mail.notifications.purchase-paid', compact('purchase'))->render(),
-                );
-
-            return [
-                'tenant_code' => $purchase->tenant_codigo,
-                'user_id' => $purchase->user_id,
-                'purchase_status' => $purchase->status,
-                'purchase_item_count' => $purchase->items->count(),
-            ];
-        });
-    }
-
-    /** @param array<int, int> $ticketIds */
-    public function sendTicketsAvailable(int $purchaseId, array $ticketIds): void
-    {
-        $context = [
-            'purchase_id' => $purchaseId,
-            'requested_ticket_count' => count($ticketIds),
-            'requested_ticket_ids' => $ticketIds,
-        ];
-
-        $this->sendLogged('tickets_available', $context, function () use ($purchaseId, $ticketIds, $context): ?array {
-            $purchase = Purchase::query()->with(['tenant', 'user'])->find($purchaseId);
-
-            if ($purchase === null) {
-                $this->logSkipped('tickets_available', array_merge($context, [
+                $this->logSkipped('purchase_confirmed', array_merge($context, [
                    'reason' => 'purchase_not_found',
                    'missing_model' => Purchase::class,
                ]));
@@ -177,41 +139,34 @@ class NotificationMailService

            /** @var Collection<int, Ticket> $tickets */
            $tickets = Ticket::query()
+                ->where('source_purchase_id', $purchase->getKey())
                ->where('tenant_code', $purchase->tenant_codigo)
-                ->where('user_id', $purchase->user_id)
-                ->whereKey($ticketIds)
                ->with(TicketPresentationResolver::RELATIONS)
                ->get();
-
-            if ($tickets->isEmpty()) {
-                $this->logSkipped('tickets_available', array_merge($context, [
-                    'reason' => 'tickets_not_found',
-                    'missing_model' => Ticket::class,
-                    'tenant_code' => $purchase->tenant_codigo,
-                    'user_id' => $purchase->user_id,
-                ]));
-
-                return null;
-            }
+            $attachments = $tickets->isEmpty()
+                ? []
+                : [[
+                    'data' => $this->ticketPdfService->contents($purchase->tenant, $tickets),
+                    'name' => $this->ticketPdfService->filename($tickets),
+                    'mime' => 'application/pdf',
+                ]];

            $this->mailService
                ->forTenant($purchase->tenant_codigo)
                ->send(
                    $this->recipientFor($purchase),
-                    'Tus tickets ya están disponibles',
-                    view('mail.notifications.tickets-available', compact('purchase', 'tickets'))->render(),
-                    attachments: [[
-                        'data' => $this->ticketPdfService->contents($purchase->tenant, $tickets),
-                        'name' => $this->ticketPdfService->filename($tickets),
-                        'mime' => 'application/pdf',
-                    ]],
+                    "Compra confirmada - Compra #{$purchase->getKey()}",
+                    view('mail.notifications.purchase-confirmed', compact('purchase', 'tickets'))->render(),
+                    attachments: $attachments,
                );

            return [
                'tenant_code' => $purchase->tenant_codigo,
                'user_id' => $purchase->user_id,
-                'sent_ticket_count' => $tickets->count(),
-                'sent_ticket_ids' => $tickets->modelKeys(),
+                'purchase_status' => $purchase->status,
+                'purchase_item_count' => $purchase->items->count(),
+                'ticket_count' => $tickets->count(),
+                'ticket_ids' => $tickets->modelKeys(),
            ];
        });
    }
--- a/app/Domains/Notification/documentacion/README.md
+++ b/app/Domains/Notification/documentacion/README.md
@@ -8,12 +8,11 @@ Orquesta notificaciones de negocio por correo a partir de eventos de otros domin

 - `UserRegistered`: dispara el correo de bienvenida.
 - `PasswordResetRequested`: envía el código de recuperación si el intento sigue pendiente.
- `PurchasePaid`: envía la confirmación de pago.
- `TicketsAvailable`: informa y entrega la disponibilidad de tickets.
+- `PurchasePaid`: envía la confirmación de compra y adjunta los tickets generados, cuando corresponde.

 ## Componentes

-Los listeners `SendWelcomeEmail`, `SendPasswordResetEmail`, `SendPurchasePaidEmail` y `SendTicketsAvailableEmail` delegan en `NotificationMailService`. Este servicio carga el contexto necesario, renderiza las vistas y envía mediante `Integration/MailService`.
+Los listeners `SendWelcomeEmail`, `SendPasswordResetEmail` y `SendPurchaseConfirmedEmail` delegan en `NotificationMailService`. Este servicio carga el contexto necesario, renderiza las vistas y envía mediante `Integration/MailService`.

 ## API y dependencias

@@ -24,5 +23,5 @@ No expone rutas HTTP. Consume datos de `Auth`, `Tenant`, `Purchase` y `Ticket`,
 - Los listeners reciben identificadores y vuelven a cargar los modelos, evitando transportar entidades obsoletas.
 - La recuperación no se envía si el intento dejó de estar pendiente.
 - Los correos de cuenta (bienvenida y recuperación de contraseña) usan la identidad visual del `WebsiteType` asociado al tenant, con fallback al tenant si no tiene uno configurado.
- Los correos transaccionales (pago confirmado y tickets disponibles) usan la identidad visual del tenant/evento de la compra.
+- El correo transaccional de compra confirmada usa la identidad visual del tenant y adjunta un único PDF cuando la compra generó tickets.
 - Los handlers deben permanecer idempotentes o tolerantes a reintentos de cola.
--- a/app/Domains/Purchase/Controllers/PurchaseController.php
+++ b/app/Domains/Purchase/Controllers/PurchaseController.php
@@ -93,7 +93,6 @@ class PurchaseController extends Controller
        PaymentIntentRequest $request,
        Tenant $tenant,
        Purchase $compra,
-        CheckoutService $checkoutService,
        PurchaseStateGuard $purchaseState,
    ): JsonResponse {
        $compra = $this->resolveScopedPurchase($tenant, $request->user()->id, $compra);
@@ -103,7 +102,6 @@ class PurchaseController extends Controller
            : null;

        $updated = DB::transaction(function () use (
-            $checkoutService,
            $compra,
            $method,
            $purchaseState,
@@ -142,12 +140,6 @@ class PurchaseController extends Controller
                $purchaseUpdate['transfer_payer_dni'] = $transferPayerDni;
            }
            $purchase->update($purchaseUpdate);
-            $checkoutService->refreshReservationExpiration(
-                $purchase,
-                now()->addMinutes(
-                    max(1, (int) config("purchase.payment_expiration_minutes.{$method}", 30)),
-                ),
-            );

            return true;
        });
--- a/app/Domains/Purchase/Models/Purchase.php
+++ b/app/Domains/Purchase/Models/Purchase.php
@@ -145,6 +145,12 @@ class Purchase extends Model
        return $this->hasMany(TelepagosPayment::class, 'compra_id');
    }

+    /** @return HasMany<TelepagosPaymentCandidate, $this> */
+    public function telepagosPaymentCandidates(): HasMany
+    {
+        return $this->hasMany(TelepagosPaymentCandidate::class, 'compra_id');
+    }
+
    public function getTotalAmount(): float
    {
        if ($this->total !== null) {
--- a/app/Domains/Purchase/Models/TelepagosPayment.php
+++ b/app/Domains/Purchase/Models/TelepagosPayment.php
@@ -6,10 +6,10 @@ use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;

 #[Fillable([
    'compra_id',
-    'matched_purchase_ids',
    'cuit_buyer',
    'cvu_buyer',
    'amount',
@@ -30,7 +30,6 @@ class TelepagosPayment extends Model
    {
        return [
            'compra_id' => 'integer',
-            'matched_purchase_ids' => 'array',
            'amount' => 'decimal:2',
        ];
    }
@@ -42,4 +41,10 @@ class TelepagosPayment extends Model
    {
        return $this->belongsTo(Purchase::class, 'compra_id');
    }
+
+    /** @return HasMany<TelepagosPaymentCandidate, $this> */
+    public function candidates(): HasMany
+    {
+        return $this->hasMany(TelepagosPaymentCandidate::class, 'telepagos_payment_id');
+    }
 }
--- a/app/Domains/Purchase/Models/TelepagosPaymentCandidate.php
+++ b/app/Domains/Purchase/Models/TelepagosPaymentCandidate.php
@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'telepagos_payment_id',
+    'compra_id',
+    'dni_matches',
+    'dni_distance',
+    'payment_dni',
+    'purchase_dni',
+    'amount_matches',
+    'payment_amount',
+    'purchase_amount',
+    'amount_difference',
+    'match_reason',
+    'confidence',
+])]
+class TelepagosPaymentCandidate extends Model
+{
+    protected $table = 'telepagos_payment_candidates';
+
+    protected function casts(): array
+    {
+        return [
+            'telepagos_payment_id' => 'integer',
+            'compra_id' => 'integer',
+            'dni_matches' => 'boolean',
+            'dni_distance' => 'integer',
+            'amount_matches' => 'boolean',
+            'payment_amount' => 'decimal:2',
+            'purchase_amount' => 'decimal:2',
+            'amount_difference' => 'decimal:2',
+        ];
+    }
+
+    public function payment(): BelongsTo
+    {
+        return $this->belongsTo(TelepagosPayment::class, 'telepagos_payment_id');
+    }
+
+    public function purchase(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'compra_id');
+    }
+}
--- a/app/Domains/Purchase/Resources/PurchaseResource.php
+++ b/app/Domains/Purchase/Resources/PurchaseResource.php
@@ -4,6 +4,7 @@ namespace App\Domains\Purchase\Resources;

 use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Purchase\Models\PurchaseItem;
+use App\Domains\Purchase\Models\TelepagosPaymentCandidate;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;

@@ -17,12 +18,15 @@ class PurchaseResource extends JsonResource
     */
    public function toArray(Request $request): array
    {
+        $serverTime = now();
+        $expiresAt = $this->stockReservation?->expires_at;
        $items = $this->resource->relationLoaded('items')
            ? $this->resource->getRelation('items')
            : collect();
        $ticketsCount = array_key_exists('tickets_count', $this->resource->getAttributes())
            ? (int) $this->resource->getAttribute('tickets_count')
            : null;
+        $paymentVerification = $this->resolvePaymentVerification();

        $subtotal = $items->isNotEmpty()
            ? $items->reduce(
@@ -48,7 +52,11 @@ class PurchaseResource extends JsonResource
            'created_at' => $this->created_at,
            'status' => $this->status,
            'payment_method' => $this->payment_method,
-            'expires_at' => $this->stockReservation?->expires_at,
+            'expires_at' => $expiresAt,
+            'expires_in_seconds' => $expiresAt === null
+                ? null
+                : max(0, $expiresAt->getTimestamp() - $serverTime->getTimestamp()),
+            'server_time' => $serverTime,
            'dni' => $this->dni,
            'transfer_payer_dni' => $this->transfer_payer_dni,
            'telefono' => $this->telefono,
@@ -58,6 +66,7 @@ class PurchaseResource extends JsonResource
            'items' => PurchaseItemResource::collection($items),
            'tickets_count' => $this->when($ticketsCount !== null, $ticketsCount),
            'has_generated_tickets' => $this->when($ticketsCount !== null, $ticketsCount > 0),
+            'payment_verification' => $this->when($paymentVerification !== null, $paymentVerification),
            'subtotal' => $this->formatMoney($subtotal),
            'total' => $this->formatMoney($total),
        ];
@@ -77,4 +86,75 @@ class PurchaseResource extends JsonResource
    {
        return number_format((float) ($amount ?? 0), 2, '.', '');
    }
+
+    /** @return array<string, mixed>|null */
+    private function resolvePaymentVerification(): ?array
+    {
+        if (
+            $this->status !== Purchase::STATUS_IN_REVIEW
+            || $this->payment_method !== 'transfer'
+            || ! $this->resource->relationLoaded('telepagosPaymentCandidates')
+        ) {
+            return null;
+        }
+
+        $candidates = $this->resource
+            ->getRelation('telepagosPaymentCandidates')
+            ->sort(fn (TelepagosPaymentCandidate $left, TelepagosPaymentCandidate $right): int => $this->comparePaymentCandidates($left, $right))
+            ->values();
+        /** @var TelepagosPaymentCandidate|null $primary */
+        $primary = $candidates->first();
+
+        return [
+            'status' => $primary === null ? 'pending' : 'candidate',
+            'candidate_count' => $candidates->count(),
+            'primary' => $primary === null ? null : [
+                'reason' => $primary->match_reason,
+                'dni_distance' => $primary->dni_distance,
+                'payment_amount' => $this->formatMoney($primary->payment_amount),
+                'purchase_amount' => $this->formatMoney($primary->purchase_amount),
+                'amount_difference' => $this->formatMoney($primary->amount_difference),
+                'confidence' => $primary->confidence,
+                'detected_at' => $primary->payment?->created_at?->toIso8601String(),
+            ],
+            'reasons' => $candidates
+                ->pluck('match_reason')
+                ->unique()
+                ->values()
+                ->all(),
+        ];
+    }
+
+    private function comparePaymentCandidates(
+        TelepagosPaymentCandidate $left,
+        TelepagosPaymentCandidate $right,
+    ): int {
+        $reasonComparison = $this->paymentCandidateRank($left->match_reason)
+            <=> $this->paymentCandidateRank($right->match_reason);
+
+        if ($reasonComparison !== 0) {
+            return $reasonComparison;
+        }
+
+        $differenceComparison = (float) $left->amount_difference <=> (float) $right->amount_difference;
+
+        if ($differenceComparison !== 0) {
+            return $differenceComparison;
+        }
+
+        $leftTimestamp = $left->payment?->created_at?->getTimestamp() ?? 0;
+        $rightTimestamp = $right->payment?->created_at?->getTimestamp() ?? 0;
+
+        return ($rightTimestamp <=> $leftTimestamp) ?: ($right->id <=> $left->id);
+    }
+
+    private function paymentCandidateRank(string $reason): int
+    {
+        return match ($reason) {
+            'ambiguous_exact_match' => 0,
+            'exact_dni_near_amount' => 1,
+            'exact_amount_near_dni' => 2,
+            default => 3,
+        };
+    }
 }
--- a/app/Domains/Purchase/Services/Checkout/CompleteCheckoutService.php
+++ b/app/Domains/Purchase/Services/Checkout/CompleteCheckoutService.php
@@ -70,7 +70,7 @@ class CompleteCheckoutService
            $purchase->update([
                'status' => Purchase::STATUS_IN_REVIEW,
            ]);
-            $this->reservations->refreshForPurchase($purchase, null);
+            $this->reservations->clearExpirationForReview($purchase);

            return $this->loadPurchase($purchase);
        });
--- a/app/Domains/Purchase/Services/Checkout/PurchaseResponseLoader.php
+++ b/app/Domains/Purchase/Services/Checkout/PurchaseResponseLoader.php
@@ -8,6 +8,15 @@ class PurchaseResponseLoader
 {
    public function load(Purchase $purchase): Purchase
    {
-        return $purchase->load(['tenant', 'items.imageAttachment', 'stockReservation']);
+        $relations = ['tenant', 'items.imageAttachment', 'stockReservation'];
+
+        if (
+            $purchase->status === Purchase::STATUS_IN_REVIEW
+            && $purchase->payment_method === 'transfer'
+        ) {
+            $relations[] = 'telepagosPaymentCandidates.payment';
+        }
+
+        return $purchase->load($relations);
    }
 }
--- a/app/Domains/Purchase/Services/CheckoutService.php
+++ b/app/Domains/Purchase/Services/CheckoutService.php
@@ -2,14 +2,12 @@

 namespace App\Domains\Purchase\Services;

-use App\Domains\Catalog\Services\StockReservationService;
 use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Purchase\Services\Checkout\CompleteCheckoutService;
 use App\Domains\Purchase\Services\Checkout\EditCheckoutService;
 use App\Domains\Purchase\Services\Checkout\ReleaseCheckoutService;
 use App\Domains\Purchase\Services\Checkout\StartCheckoutService;
 use App\Domains\Tenant\Models\Tenant;
-use Illuminate\Support\Carbon;
 use Illuminate\Support\Facades\DB;

 /**
@@ -24,7 +22,6 @@ class CheckoutService
        private readonly EditCheckoutService $editor,
        private readonly CompleteCheckoutService $completer,
        private readonly ReleaseCheckoutService $releaser,
-        private readonly StockReservationService $reservations,
    ) {}

    /** @param array<string, mixed> $purchaseData */
@@ -78,9 +75,4 @@ class CheckoutService
    {
        return $this->releaser->expire($purchase);
    }
-
-    public function refreshReservationExpiration(Purchase $purchase, ?Carbon $expiresAt): void
-    {
-        $this->reservations->refreshForPurchase($purchase, $expiresAt);
-    }
 }
--- a/app/Domains/Purchase/Services/DniDistanceService.php
+++ b/app/Domains/Purchase/Services/DniDistanceService.php
@@ -0,0 +1,82 @@
+<?php
+
+namespace App\Domains\Purchase\Services;
+
+/**
+ * Measures likely DNI typing errors using the optimal-string-alignment
+ * variant of the Damerau-Levenshtein distance.
+ *
+ * The returned value is the minimum number of single-character edits needed
+ * to transform one DNI into the other. Supported edits are insertion,
+ * deletion, substitution and transposition of two adjacent digits.
+ */
+class DniDistanceService
+{
+    /**
+     * Calculate the edit distance between two normalized DNI strings.
+     *
+     * Each matrix cell [row][column] stores the minimum edits required to
+     * transform the first $row digits of $left into the first $column digits
+     * of $right. The bottom-right cell therefore contains the final distance.
+     */
+    public function distance(string $left, string $right): int
+    {
+        $left = $this->normalize($left);
+        $right = $this->normalize($right);
+        $leftLength = strlen($left);
+        $rightLength = strlen($right);
+        $matrix = [];
+
+        // Transforming a prefix into an empty string requires deleting every digit.
+        for ($row = 0; $row <= $leftLength; $row++) {
+            $matrix[$row] = [$row];
+        }
+
+        // Transforming an empty string into a prefix requires inserting every digit.
+        for ($column = 0; $column <= $rightLength; $column++) {
+            $matrix[0][$column] = $column;
+        }
+
+        for ($row = 1; $row <= $leftLength; $row++) {
+            for ($column = 1; $column <= $rightLength; $column++) {
+                $substitutionCost = $left[$row - 1] === $right[$column - 1] ? 0 : 1;
+                $deletionDistance = $matrix[$row - 1][$column] + 1;
+                $insertionDistance = $matrix[$row][$column - 1] + 1;
+                $substitutionDistance = $matrix[$row - 1][$column - 1] + $substitutionCost;
+
+                // Keep the cheapest way to align the two prefixes at this position.
+                $matrix[$row][$column] = min(
+                    $deletionDistance,
+                    $insertionDistance,
+                    $substitutionDistance,
+                );
+
+                // Count two adjacent inverted digits as one edit instead of two substitutions.
+                if (
+                    $row > 1
+                    && $column > 1
+                    && $left[$row - 1] === $right[$column - 2]
+                    && $left[$row - 2] === $right[$column - 1]
+                ) {
+                    $matrix[$row][$column] = min(
+                        $matrix[$row][$column],
+                        $matrix[$row - 2][$column - 2] + 1,
+                    );
+                }
+            }
+        }
+
+        return $matrix[$leftLength][$rightLength];
+    }
+
+    /**
+     * Keep only digits and left-pad seven-digit DNIs so comparisons preserve
+     * the leading zero that is present when the DNI is extracted from a CUIT.
+     */
+    public function normalize(string $dni): string
+    {
+        $digits = preg_replace('/\D+/', '', $dni) ?? '';
+
+        return str_pad($digits, 8, '0', STR_PAD_LEFT);
+    }
+}
--- a/app/Domains/Tenant/Services/WebsiteTypeService.php
+++ b/app/Domains/Tenant/Services/WebsiteTypeService.php
@@ -82,6 +82,7 @@ class WebsiteTypeService
                    && $previousLogo->id !== $websiteType->site_logo
                    && $previousLogo->id !== $websiteType->footer_logo
                    && $previousLogo->id !== $websiteType->favicon_id
+                    && ! $this->isReferencedByWebsiteType($previousLogo)
                ) {
                    $this->attachmentService->delete($previousLogo);
                }
@@ -90,4 +91,16 @@ class WebsiteTypeService
            return $websiteType;
        });
    }
+
+    private function isReferencedByWebsiteType(Attachment $attachment): bool
+    {
+        return WebsiteType::query()
+            ->where(function ($query) use ($attachment): void {
+                $query
+                    ->where('site_logo', $attachment->id)
+                    ->orWhere('footer_logo', $attachment->id)
+                    ->orWhere('favicon_id', $attachment->id);
+            })
+            ->exists();
+    }
 }
--- a/app/Domains/Ticket/Listeners/GenerateTicketsForPaidPurchase.php
+++ b/app/Domains/Ticket/Listeners/GenerateTicketsForPaidPurchase.php
@@ -3,7 +3,6 @@
 namespace App\Domains\Ticket\Listeners;

 use App\Domains\Catalog\Models\CatalogItem;
-use App\Domains\Notification\Events\TicketsAvailable;
 use App\Domains\Purchase\Events\PurchasePaid;
 use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Ticket\Exceptions\TicketGenerationException;
@@ -21,8 +20,6 @@ class GenerateTicketsForPaidPurchase
            ->with(['user', 'items'])
            ->findOrFail($event->purchaseId);
        $user = $purchase->user;
-        $ticketIds = [];
-
        foreach ($purchase->items as $purchaseItem) {
            $catalogItem = CatalogItem::query()
                ->where('tenant_code', $purchase->tenant_codigo)
@@ -40,19 +37,13 @@ class GenerateTicketsForPaidPurchase
                throw TicketGenerationException::purchaseWithoutUser($purchase);
            }

-            $generatedTickets = $this->ticketGenerator->generate(
+            $this->ticketGenerator->generate(
                $catalogItem,
                $user,
                $purchaseItem->cantidad,
                $purchaseItem->source_variant_id,
                $purchase->getKey(),
            );
-
-            array_push($ticketIds, ...$generatedTickets->pluck('id')->all());
-        }
-
-        if ($ticketIds !== []) {
-            TicketsAvailable::dispatch($purchase->getKey(), $ticketIds);
        }
    }

--- a/app/Domains/Ticket/documentacion/README.md
+++ b/app/Domains/Ticket/documentacion/README.md
@@ -21,7 +21,7 @@ vigente, vencido o usado, y resuelve sus fechas efectivas de inicio y fin sin pe
 1. `Purchase` emite `PurchasePaid` al confirmarse el pago.
 2. `GenerateTicketsForPaidPurchase` atiende el evento.
 3. `TicketGeneratorService` crea los tickets requeridos según ítems, cantidades y vigencia.
-4. El flujo puede emitir disponibilidad para que `Notification` informe al comprador.
+4. `Notification` envía la confirmación de compra después de la generación y adjunta los tickets cuando existen.

 ## Endpoints

--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -3,11 +3,9 @@
 namespace App\Providers;

 use App\Domains\Notification\Events\PasswordResetRequested;
-use App\Domains\Notification\Events\TicketsAvailable;
 use App\Domains\Notification\Events\UserRegistered;
 use App\Domains\Notification\Listeners\SendPasswordResetEmail;
-use App\Domains\Notification\Listeners\SendPurchasePaidEmail;
-use App\Domains\Notification\Listeners\SendTicketsAvailableEmail;
+use App\Domains\Notification\Listeners\SendPurchaseConfirmedEmail;
 use App\Domains\Notification\Listeners\SendWelcomeEmail;
 use App\Domains\Purchase\Events\PurchasePaid;
 use App\Domains\Ticket\Listeners\GenerateTicketsForPaidPurchase;
@@ -33,9 +31,8 @@ class AppServiceProvider extends ServiceProvider
     */
    public function boot(): void
    {
-        Event::listen(PurchasePaid::class, SendPurchasePaidEmail::class);
        Event::listen(PurchasePaid::class, GenerateTicketsForPaidPurchase::class);
-        Event::listen(TicketsAvailable::class, SendTicketsAvailableEmail::class);
+        Event::listen(PurchasePaid::class, SendPurchaseConfirmedEmail::class);
        Event::listen(UserRegistered::class, SendWelcomeEmail::class);
        Event::listen(PasswordResetRequested::class, SendPasswordResetEmail::class);

--- a/config/auth.php
+++ b/config/auth.php
@@ -96,7 +96,7 @@ return [
        'users' => [
            'provider' => 'users',
            'table' => env('AUTH_PASSWORD_RESET_TOKEN_TABLE', 'password_reset_tokens'),
-            'expire' => 60,
+            'expire' => (int) env('AUTH_PASSWORD_RESET_EXPIRATION_MINUTES', 60),
            'throttle' => 60,
        ],
    ],
--- a/config/purchase.php
+++ b/config/purchase.php
@@ -8,4 +8,9 @@ return [
        'telepagos' => (int) env('PURCHASE_TELEPAGOS_EXPIRATION_MINUTES', 30),
        'transfer' => (int) env('PURCHASE_TRANSFER_EXPIRATION_MINUTES', 1440),
    ],
+
+    'transfer_candidate_amount_tolerance_percentage' => (float) env(
+        'PURCHASE_TRANSFER_CANDIDATE_AMOUNT_TOLERANCE_PERCENTAGE',
+        5,
+    ),
 ];
--- a/database/migrations/2026_08_25_010000_add_expires_at_to_reset_password_attempts_table.php
+++ b/database/migrations/2026_08_25_010000_add_expires_at_to_reset_password_attempts_table.php
@@ -0,0 +1,32 @@
+<?php
+
+use App\Domains\Auth\Models\ResetPasswordAttempt;
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('reset_password_attempts', function (Blueprint $table): void {
+            $table->timestamp('expires_at')->nullable()->after('status');
+        });
+
+        // Attempts created before this migration did not have an expiration instant.
+        DB::table('reset_password_attempts')
+            ->whereIn('status', [
+                ResetPasswordAttempt::STATUS_PENDING,
+                ResetPasswordAttempt::STATUS_VALIDATED,
+            ])
+            ->update(['status' => ResetPasswordAttempt::STATUS_EXPIRED]);
+    }
+
+    public function down(): void
+    {
+        Schema::table('reset_password_attempts', function (Blueprint $table): void {
+            $table->dropColumn('expires_at');
+        });
+    }
+};
--- a/database/migrations/2026_08_26_000000_set_website_type_favicon.php
+++ b/database/migrations/2026_08_26_000000_set_website_type_favicon.php
@@ -0,0 +1,96 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+return new class extends Migration
+{
+    private const FILENAME = 'onticket_favicon.svg';
+
+    /** @var list<string> */
+    private const WEBSITE_TYPE_CODES = ['shopit', 'onticket'];
+
+    public function up(): void
+    {
+        $websiteTypes = DB::table('website_type')
+            ->whereIn('codigo', self::WEBSITE_TYPE_CODES)
+            ->get(['codigo', 'favicon_id']);
+
+        if ($websiteTypes->isEmpty()) {
+            return;
+        }
+
+        $faviconIds = $websiteTypes
+            ->pluck('favicon_id')
+            ->filter()
+            ->unique()
+            ->values();
+
+        if (
+            $faviconIds->count() === 1
+            && DB::table('attachments')
+                ->where('id', $faviconIds->first())
+                ->where('filename', self::FILENAME)
+                ->exists()
+            && $websiteTypes->every(
+                fn (object $websiteType): bool => $websiteType->favicon_id === $faviconIds->first()
+            )
+        ) {
+            return;
+        }
+
+        $sourcePath = public_path('images/website_types/'.self::FILENAME);
+
+        if (! is_file($sourcePath)) {
+            throw new RuntimeException("Favicon not found at path: {$sourcePath}");
+        }
+
+        $contents = file_get_contents($sourcePath);
+
+        if ($contents === false) {
+            throw new RuntimeException("Could not read favicon at path: {$sourcePath}");
+        }
+
+        $key = (string) Str::uuid();
+        $storedPath = "website-types/{$key}.svg";
+
+        if (! Storage::disk('s3')->put($storedPath, $contents)) {
+            throw new RuntimeException("Could not store favicon at path: {$storedPath}");
+        }
+
+        try {
+            DB::transaction(function () use ($contents, $key, $storedPath): void {
+                $attachmentId = DB::table('attachments')->insertGetId([
+                    'key' => $key,
+                    'path' => $storedPath,
+                    'filename' => self::FILENAME,
+                    'type' => 'image',
+                    'mime_type' => 'image/svg+xml',
+                    'extension' => 'svg',
+                    'size' => strlen($contents),
+                    'created_at' => now(),
+                    'updated_at' => now(),
+                ]);
+
+                DB::table('website_type')
+                    ->whereIn('codigo', self::WEBSITE_TYPE_CODES)
+                    ->update([
+                        'favicon_id' => $attachmentId,
+                        'updated_at' => now(),
+                    ]);
+            });
+        } catch (Throwable $throwable) {
+            Storage::disk('s3')->delete($storedPath);
+
+            throw $throwable;
+        }
+    }
+
+    public function down(): void
+    {
+        // The shared attachment may be in use outside these website types.
+        // Keep this data migration irreversible to avoid deleting an active asset.
+    }
+};
--- a/database/migrations/2026_08_27_000000_create_telepagos_payment_candidates_table.php
+++ b/database/migrations/2026_08_27_000000_create_telepagos_payment_candidates_table.php
@@ -0,0 +1,141 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::create('telepagos_payment_candidates', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('telepagos_payment_id')
+                ->constrained('telepagos_payments')
+                ->cascadeOnDelete();
+            $table->foreignId('compra_id')->constrained('compras')->cascadeOnDelete();
+            $table->boolean('dni_matches');
+            $table->boolean('amount_matches');
+            $table->decimal('payment_amount', 10, 2);
+            $table->decimal('purchase_amount', 10, 2);
+            $table->decimal('amount_difference', 10, 2);
+            $table->string('match_reason');
+            $table->string('confidence');
+            $table->timestamps();
+
+            $table->unique(
+                ['telepagos_payment_id', 'compra_id'],
+                'telepagos_payment_candidate_unique',
+            );
+        });
+
+        $this->migrateExistingCandidates();
+
+        Schema::table('telepagos_payments', function (Blueprint $table) {
+            $table->dropColumn('matched_purchase_ids');
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('telepagos_payments', function (Blueprint $table) {
+            $table->json('matched_purchase_ids')->nullable()->after('compra_id');
+        });
+
+        DB::table('telepagos_payments')
+            ->whereNull('compra_id')
+            ->orderBy('id')
+            ->each(function (object $payment): void {
+                $candidateIds = DB::table('telepagos_payment_candidates')
+                    ->where('telepagos_payment_id', $payment->id)
+                    ->pluck('compra_id')
+                    ->all();
+
+                if ($candidateIds !== []) {
+                    DB::table('telepagos_payments')
+                        ->where('id', $payment->id)
+                        ->update(['matched_purchase_ids' => json_encode($candidateIds)]);
+                }
+            });
+
+        Schema::dropIfExists('telepagos_payment_candidates');
+    }
+
+    private function migrateExistingCandidates(): void
+    {
+        DB::table('telepagos_payments')
+            ->whereNull('compra_id')
+            ->whereNotNull('matched_purchase_ids')
+            ->orderBy('id')
+            ->each(function (object $payment): void {
+                $candidateIds = json_decode((string) $payment->matched_purchase_ids, true);
+
+                if (! is_array($candidateIds)) {
+                    return;
+                }
+
+                $paymentAmount = number_format((float) $payment->amount, 2, '.', '');
+                $payerDni = $payment->cuit_buyer
+                    ? substr((string) $payment->cuit_buyer, 2, -1)
+                    : null;
+
+                foreach ($candidateIds as $candidateId) {
+                    $purchase = DB::table('compras')->find($candidateId);
+
+                    if ($purchase === null) {
+                        continue;
+                    }
+
+                    $purchaseAmount = number_format((float) $purchase->total, 2, '.', '');
+                    $dniMatches = $payerDni !== null && $purchase->transfer_payer_dni === $payerDni;
+                    $amountMatches = $purchaseAmount === $paymentAmount;
+
+                    DB::table('telepagos_payment_candidates')->insertOrIgnore([
+                        'telepagos_payment_id' => $payment->id,
+                        'compra_id' => $purchase->id,
+                        'dni_matches' => $dniMatches,
+                        'amount_matches' => $amountMatches,
+                        'payment_amount' => $paymentAmount,
+                        'purchase_amount' => $purchaseAmount,
+                        'amount_difference' => number_format(
+                            abs((float) $purchaseAmount - (float) $paymentAmount),
+                            2,
+                            '.',
+                            '',
+                        ),
+                        'match_reason' => $this->matchReason($dniMatches, $amountMatches),
+                        'confidence' => $this->confidence($dniMatches, $amountMatches),
+                        'created_at' => $payment->created_at,
+                        'updated_at' => $payment->updated_at,
+                    ]);
+                }
+            });
+    }
+
+    private function matchReason(bool $dniMatches, bool $amountMatches): string
+    {
+        if ($dniMatches && $amountMatches) {
+            return 'ambiguous_exact_match';
+        }
+
+        if ($dniMatches) {
+            return 'exact_dni_near_amount';
+        }
+
+        if ($amountMatches) {
+            return 'exact_amount_different_dni';
+        }
+
+        return 'legacy_candidate';
+    }
+
+    private function confidence(bool $dniMatches, bool $amountMatches): string
+    {
+        if ($dniMatches && $amountMatches) {
+            return 'exact';
+        }
+
+        return $dniMatches ? 'high' : 'medium';
+    }
+};
--- a/database/migrations/2026_08_27_010000_add_dni_distance_to_telepagos_payment_candidates.php
+++ b/database/migrations/2026_08_27_010000_add_dni_distance_to_telepagos_payment_candidates.php
@@ -0,0 +1,61 @@
+<?php
+
+use App\Domains\Purchase\Services\DniDistanceService;
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        Schema::table('telepagos_payment_candidates', function (Blueprint $table) {
+            $table->unsignedTinyInteger('dni_distance')->nullable()->after('dni_matches');
+            $table->string('payment_dni', 8)->nullable()->after('dni_distance');
+            $table->string('purchase_dni', 8)->nullable()->after('payment_dni');
+        });
+
+        $dniDistance = new DniDistanceService;
+
+        DB::table('telepagos_payment_candidates as candidate')
+            ->join('telepagos_payments as payment', 'payment.id', '=', 'candidate.telepagos_payment_id')
+            ->join('compras as purchase', 'purchase.id', '=', 'candidate.compra_id')
+            ->select([
+                'candidate.id',
+                'candidate.match_reason',
+                'payment.cuit_buyer',
+                'purchase.transfer_payer_dni',
+            ])
+            ->orderBy('candidate.id')
+            ->each(function (object $candidate) use ($dniDistance): void {
+                if ($candidate->cuit_buyer === null || $candidate->transfer_payer_dni === null) {
+                    return;
+                }
+
+                $payerDni = substr((string) $candidate->cuit_buyer, 2, -1);
+                $distance = $dniDistance->distance($payerDni, (string) $candidate->transfer_payer_dni);
+
+                if ($candidate->match_reason === 'exact_amount_different_dni' && $distance > 2) {
+                    DB::table('telepagos_payment_candidates')->where('id', $candidate->id)->delete();
+
+                    return;
+                }
+
+                DB::table('telepagos_payment_candidates')
+                    ->where('id', $candidate->id)
+                    ->update([
+                        'dni_distance' => $distance,
+                        'payment_dni' => $payerDni,
+                        'purchase_dni' => $candidate->transfer_payer_dni,
+                    ]);
+            });
+    }
+
+    public function down(): void
+    {
+        Schema::table('telepagos_payment_candidates', function (Blueprint $table) {
+            $table->dropColumn(['dni_distance', 'payment_dni', 'purchase_dni']);
+        });
+    }
+};
--- a/database/migrations/2026_08_27_020000_rename_near_dni_candidate_reason.php
+++ b/database/migrations/2026_08_27_020000_rename_near_dni_candidate_reason.php
@@ -0,0 +1,21 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    public function up(): void
+    {
+        DB::table('telepagos_payment_candidates')
+            ->where('match_reason', 'exact_amount_different_dni')
+            ->update(['match_reason' => 'exact_amount_near_dni']);
+    }
+
+    public function down(): void
+    {
+        DB::table('telepagos_payment_candidates')
+            ->where('match_reason', 'exact_amount_near_dni')
+            ->update(['match_reason' => 'exact_amount_different_dni']);
+    }
+};
--- a/database/seeders/DesfilePuraTendenciaSeeder.php
+++ b/database/seeders/DesfilePuraTendenciaSeeder.php
@@ -191,6 +191,7 @@ class DesfilePuraTendenciaSeeder extends Seeder

        FeaturedGroup::query()->create([
            'tenant_code' => self::TENANT_CODE,
+            'code' => 'entradas',
            'source_type' => FeaturedGroupSource::All,
            'category_id' => null,
            'product_layout' => ProductLayout::TicketSelector,
--- a/database/seeders/FiestaFutbolInfantilProductSeeder.php
+++ b/database/seeders/FiestaFutbolInfantilProductSeeder.php
@@ -144,6 +144,7 @@ class FiestaFutbolInfantilProductSeeder extends Seeder

        FeaturedGroup::query()->create([
            'tenant_code' => $tenant->codigo,
+            'code' => 'productos',
            'source_type' => FeaturedGroupSource::All,
            'category_id' => null,
            'product_layout' => ProductLayout::Row,
--- a/database/seeders/ProductCatalogFromImagesSeeder.php
+++ b/database/seeders/ProductCatalogFromImagesSeeder.php
@@ -171,6 +171,7 @@ class ProductCatalogFromImagesSeeder extends Seeder

        FeaturedGroup::query()->create([
            'tenant_code' => $tenant->codigo,
+            'code' => 'productos',
            'source_type' => FeaturedGroupSource::All,
            'product_layout' => ProductLayout::ColumnWithImage,
            'group_layout' => GroupLayout::Paginated,
@@ -180,6 +181,7 @@ class ProductCatalogFromImagesSeeder extends Seeder

        $carouselGroup = FeaturedGroup::query()->create([
            'tenant_code' => $tenant->codigo,
+            'code' => 'productos-destacados',
            'source_type' => FeaturedGroupSource::Manual,
            'product_layout' => ProductLayout::ColumnWithImage,
            'group_layout' => GroupLayout::Carousel,
--- a/database/seeders/WebsiteTypeSeeder.php
+++ b/database/seeders/WebsiteTypeSeeder.php
@@ -36,6 +36,7 @@ class WebsiteTypeSeeder extends Seeder
                ...self::PRESENTATION,
                'site_logo' => $this->onTicketLogo(),
                'footer_logo' => $this->onTicketFooterLogo(),
+                'favicon' => $this->onTicketFavicon(),
            ],
        );

@@ -70,6 +71,7 @@ class WebsiteTypeSeeder extends Seeder
                ...self::PRESENTATION,
                'site_logo' => $this->onTicketLogo(),
                'footer_logo' => $this->onTicketFooterLogo(),
+                'favicon' => $shopIt->favicon()->firstOrFail()->key,
            ],
        );

@@ -175,4 +177,21 @@ class WebsiteTypeSeeder extends Seeder
            true,
        );
    }
+
+    private function onTicketFavicon(): UploadedFile
+    {
+        $path = public_path('images/website_types/onticket_favicon.svg');
+
+        if (! file_exists($path)) {
+            throw new RuntimeException("OnTicket favicon not found at path: {$path}");
+        }
+
+        return new UploadedFile(
+            $path,
+            'onticket_favicon.svg',
+            'image/svg+xml',
+            null,
+            true,
+        );
+    }
 }
--- a/lang/en/api.php
+++ b/lang/en/api.php
@@ -12,6 +12,7 @@ return [
        'password_reset_invalid' => 'The password recovery request is invalid or has already been used.',
        'password_updated' => 'Password updated successfully.',
        'reset_code_invalid' => 'The code you entered is invalid.',
+        'reset_code_expired' => 'The password recovery code expired. Request a new one.',
        'reset_code_valid' => 'Code validated successfully.',
        'invalid_tenant_or_return_url' => 'The tenant or return URL is invalid.',
        'request_expired' => 'The authentication request expired. Please try again.',
--- a/lang/es/api.php
+++ b/lang/es/api.php
@@ -12,6 +12,7 @@ return [
        'password_reset_invalid' => 'La solicitud de recuperación es inválida o ya fue utilizada.',
        'password_updated' => 'Contraseña modificada correctamente.',
        'reset_code_invalid' => 'El código ingresado es inválido.',
+        'reset_code_expired' => 'El código de recuperación expiró. Solicitá uno nuevo.',
        'reset_code_valid' => 'Código validado correctamente.',
        'invalid_tenant_or_return_url' => 'El tenant o la URL de retorno no son válidos.',
        'request_expired' => 'La solicitud de autenticación expiró. Intenta nuevamente.',
--- a/phpunit.xml
+++ b/phpunit.xml
@@ -19,6 +19,7 @@
    </source>
    <php>
        <env name="APP_ENV" value="testing"/>
+        <env name="DB_DATABASE" value="shopit_test" force="true"/>
        <env name="APP_MAINTENANCE_DRIVER" value="file"/>
        <env name="APP_CONFIG_CACHE" value="bootstrap/cache/phpunit-config.php"/>
        <env name="APP_EVENTS_CACHE" value="bootstrap/cache/phpunit-events.php"/>
--- a/public/images/website_types/onticket_favicon.svg
+++ b/public/images/website_types/onticket_favicon.svg
@@ -0,0 +1,3 @@
+<svg width="63" height="36" viewBox="0 0 63 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+<path d="M44.64 0H17.94C8.05 0 0 8.05 0 17.94C0 27.83 8.05 35.88 17.94 35.88H44.64C54.53 35.88 62.58 27.83 62.58 17.94C62.58 8.05 54.53 0 44.64 0ZM44.62 31.78C36.98 31.78 30.79 25.59 30.79 17.95C30.79 10.31 36.98 4.12 44.62 4.12C52.26 4.12 58.45 10.31 58.45 17.95C58.45 25.59 52.26 31.78 44.62 31.78Z" fill="#FF7006"/>
+</svg>
--- a/resources/views/mail/notifications/purchase-confirmed.blade.php
+++ b/resources/views/mail/notifications/purchase-confirmed.blade.php
@@ -1,4 +1,4 @@
-<h1 style="margin: 0 0 20px;">¡Recibimos tu pago!</h1>
+<h1 style="margin: 0 0 20px;">¡Compra realizada con éxito!</h1>
 <p>La compra <strong>#{{ $purchase->id }}</strong> fue confirmada correctamente.</p>
 <table role="presentation" style="width: 100%; border-collapse: collapse; margin: 20px 0;">
    @foreach ($purchase->items as $item)
@@ -10,3 +10,6 @@
    @endforeach
 </table>
 <p style="font-size: 18px;"><strong>Total pagado: ${{ number_format((float) $purchase->total, 2, ',', '.') }}</strong></p>
+@if ($tickets->isNotEmpty())
+    <p><strong>Tus tickets ya están disponibles</strong></p>
+@endif
--- a/resources/views/mail/notifications/tickets-available.blade.php
+++ b/resources/views/mail/notifications/tickets-available.blade.php
@@ -1,8 +0,0 @@
-<h1 style="margin: 0 0 20px;">Tus tickets ya están disponibles</h1>
-<p>Generamos {{ $tickets->count() }} {{ $tickets->count() === 1 ? 'ticket' : 'tickets' }} para la compra <strong>#{{ $purchase->id }}</strong>.</p>
-<p>{{ $tickets->count() === 1 ? 'El ticket está adjunto' : 'Los tickets están adjuntos' }} a este correo en formato PDF.</p>
-<ul style="padding-left: 20px;">
-    @foreach ($tickets as $ticket)
-        <li style="margin-bottom: 8px;">{{ $ticket->name }}</li>
-    @endforeach
-</ul>
--- a/tests/Feature/Auth/CreateResetPasswordAttemptControllerTest.php
+++ b/tests/Feature/Auth/CreateResetPasswordAttemptControllerTest.php
@@ -69,6 +69,10 @@ class CreateResetPasswordAttemptControllerTest extends TestCase
        $this->assertTrue($attempt->user->is($user));
        $this->assertMatchesRegularExpression('/^\d{4}$/', $attempt->codigo);
        $this->assertSame(ResetPasswordAttempt::STATUS_PENDING, $attempt->status);
+        $this->assertTrue($attempt->expires_at->between(
+            now()->addMinutes(59),
+            now()->addMinutes(60),
+        ));
        Event::assertDispatched(
            PasswordResetRequested::class,
            fn (PasswordResetRequested $event): bool => $event->attemptId === $attempt->id
--- a/tests/Feature/Auth/ResetPasswordAttemptTest.php
+++ b/tests/Feature/Auth/ResetPasswordAttemptTest.php
@@ -18,7 +18,9 @@ class ResetPasswordAttemptTest extends TestCase
            'id',
            'user_id',
            'codigo',
+            'reason',
            'status',
+            'expires_at',
        ], Schema::getColumnListing('reset_password_attempts'));
    }

@@ -28,12 +30,14 @@ class ResetPasswordAttemptTest extends TestCase

        $attempt = $user->resetPasswordAttempts()->create([
            'codigo' => '123456',
+            'expires_at' => now()->addHour(),
        ]);

        $this->assertSame(ResetPasswordAttempt::STATUS_PENDING, $attempt->status);
        $this->assertTrue($attempt->user->is($user));
        $this->assertTrue($user->resetPasswordAttempts->contains($attempt));
        $this->assertFalse($attempt->usesTimestamps());
+        $this->assertTrue($attempt->expires_at->isFuture());
        $this->assertArrayNotHasKey('codigo', $attempt->toArray());
    }

--- a/tests/Feature/Auth/ResetPasswordControllerTest.php
+++ b/tests/Feature/Auth/ResetPasswordControllerTest.php
@@ -99,6 +99,30 @@ class ResetPasswordControllerTest extends TestCase
        $this->assertSame(ResetPasswordAttempt::STATUS_USED, $attempt->fresh()->status);
    }

+    public function test_an_expired_validated_attempt_cannot_reset_the_password(): void
+    {
+        $user = User::factory()->create([
+            'email' => 'ada@example.com',
+            'password' => 'OldSecret!123',
+        ]);
+        $attempt = $user->resetPasswordAttempts()->create([
+            'codigo' => '1234',
+            'status' => ResetPasswordAttempt::STATUS_VALIDATED,
+            'expires_at' => now()->subSecond(),
+        ]);
+
+        $this->postJson('/api/password/reset', [
+            'email' => 'ada@example.com',
+            'codigo' => '1234',
+            'password' => 'NewSecret!456',
+            'password_confirmation' => 'NewSecret!456',
+        ])->assertUnprocessable()
+            ->assertJsonValidationErrors('codigo');
+
+        $this->assertTrue(Hash::check('OldSecret!123', $user->fresh()->password));
+        $this->assertSame(ResetPasswordAttempt::STATUS_EXPIRED, $attempt->fresh()->status);
+    }
+
    public function test_it_validates_password_confirmation_and_strength(): void
    {
        $this->postJson('/api/password/reset', [
--- a/tests/Feature/Auth/ValidateResetPasswordAttemptControllerTest.php
+++ b/tests/Feature/Auth/ValidateResetPasswordAttemptControllerTest.php
@@ -49,6 +49,27 @@ class ValidateResetPasswordAttemptControllerTest extends TestCase
        );
    }

+    public function test_it_expires_an_attempt_and_returns_the_expired_code_message(): void
+    {
+        $user = User::factory()->create(['email' => 'ada@example.com']);
+        $attempt = $user->resetPasswordAttempts()->create([
+            'codigo' => '1234',
+            'expires_at' => now()->subSecond(),
+        ]);
+
+        $this->postJson('/api/password/reset-attempts/validate', [
+            'email' => 'ada@example.com',
+            'codigo' => '1234',
+        ])->assertUnprocessable()
+            ->assertJsonValidationErrors('codigo')
+            ->assertJsonPath('errors.codigo.0', __('api.auth.reset_code_expired'));
+
+        $this->assertSame(
+            ResetPasswordAttempt::STATUS_EXPIRED,
+            $attempt->fresh()->status,
+        );
+    }
+
    public function test_it_rejects_an_expired_or_already_validated_attempt(): void
    {
        $user = User::factory()->create(['email' => 'ada@example.com']);
--- a/tests/Feature/Catalog/CatalogSchemaTest.php
+++ b/tests/Feature/Catalog/CatalogSchemaTest.php
@@ -96,6 +96,7 @@ class CatalogSchemaTest extends TestCase
        $this->assertEqualsCanonicalizing([
            'id',
            'tenant_code',
+            'code',
            'source_type',
            'category_id',
            'product_layout',
--- a/tests/Feature/Integration/TelepagosWebhookTest.php
+++ b/tests/Feature/Integration/TelepagosWebhookTest.php
@@ -60,9 +60,9 @@ class TelepagosWebhookTest extends TestCase
            ->assertJsonValidationErrors(['transfer_payer_dni']);
    }

-    public function test_transfer_payment_intent_persists_transfer_payer_dni_without_replacing_customer_dni(): void
+    public function test_transfer_payment_intent_persists_data_without_extending_checkout_expiration(): void
    {
-        config()->set('purchase.payment_expiration_minutes.transfer', 60);
+        config()->set('purchase.checkout_expiration_minutes', 30);
        $now = now()->startOfSecond();
        $this->travelTo($now);

@@ -106,7 +106,7 @@ class TelepagosWebhookTest extends TestCase
        $this->assertDatabaseHas('stock_reservations', [
            'id' => $purchase->stock_reservation_id,
            'status' => 'active',
-            'expires_at' => $now->copy()->addMinutes(60)->toDateTimeString(),
+            'expires_at' => $now->copy()->addMinutes(30)->toDateTimeString(),
        ]);

        $this->travelBack();
@@ -341,8 +341,9 @@ class TelepagosWebhookTest extends TestCase
            ->firstOrFail();
        $this->assertEqualsCanonicalizing(
            [$firstPurchase->id, $secondPurchase->id, $thirdPurchase->id],
-            $payment->matched_purchase_ids,
+            $payment->candidates()->pluck('compra_id')->all(),
        );
+        $this->assertSame(3, $payment->candidates()->where('match_reason', 'ambiguous_exact_match')->count());
        $this->assertDatabaseHas('compras', [
            'id' => $firstPurchase->id,
            'status' => Purchase::STATUS_PENDING_PAYMENT,
@@ -357,6 +358,183 @@ class TelepagosWebhookTest extends TestCase
        ]);
    }

+    public function test_transfer_webhook_records_near_amount_only_with_exact_dni_or_exact_amount_with_different_dni(): void
+    {
+        config(['purchase.transfer_candidate_amount_tolerance_percentage' => 5]);
+
+        $tenant = $this->createTenant('candidates', 'Candidates', 'candidates.com.ar');
+        $this->configureTelepagosIntegration($tenant);
+
+        $nearAmountVariant = $this->createVariantForTenant('candidates', 10, '52.00', 'near');
+        $exactAmountVariant = $this->createVariantForTenant('candidates', 10, '50.00', 'exact');
+        $distanceTwoExactAmountVariant = $this->createVariantForTenant('candidates', 10, '50.00', 'distance-two');
+        $farExactAmountVariant = $this->createVariantForTenant('candidates', 10, '50.00', 'far-exact');
+        $nearAmountDifferentDniVariant = $this->createVariantForTenant('candidates', 10, '51.00', 'near-other-dni');
+        $outsideRangeVariant = $this->createVariantForTenant('candidates', 10, '100.00', 'outside');
+
+        $nearAmountPurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $nearAmountVariant->id,
+            1,
+            '12345678',
+        );
+        $exactAmountDifferentDniPurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $exactAmountVariant->id,
+            1,
+            '12345687',
+        );
+        $farExactAmountDifferentDniPurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $farExactAmountVariant->id,
+            1,
+            '87654321',
+        );
+        $distanceTwoExactAmountPurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $distanceTwoExactAmountVariant->id,
+            1,
+            '12345087',
+        );
+        $nearAmountDifferentDniPurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $nearAmountDifferentDniVariant->id,
+            1,
+            '87654321',
+        );
+        $outsideRangePurchase = $this->createPendingTransferPurchase(
+            $tenant,
+            User::factory()->create()->id,
+            $outsideRangeVariant->id,
+            1,
+            '12345678',
+        );
+
+        Http::fake([
+            'https://api.telepagos.com.ar/v2/auth/token' => Http::response([
+                'status' => 'ok',
+                'token' => 'test-token',
+                'expires_at' => now()->addHour()->toIso8601String(),
+            ]),
+            'https://api.telepagos.com.ar/v2/payment/cashin/candidates' => Http::response([
+                'status' => 'ok',
+                'data' => [
+                    'amount' => 50,
+                    'operation_id' => 1,
+                    'transaction_id' => 'tx-candidates',
+                    'buyer' => ['cuit' => '20123456789'],
+                ],
+            ]),
+        ]);
+
+        $this->postJson('/api/webhooks/telepagos/candidates', ['id' => 'candidates'])
+            ->assertOk()
+            ->assertJsonPath('status', 'success');
+
+        $payment = TelepagosPayment::query()
+            ->where('transaction_id', 'tx-candidates')
+            ->firstOrFail();
+
+        $this->assertNull($payment->compra_id);
+        $this->assertEqualsCanonicalizing([
+            $nearAmountPurchase->id,
+            $exactAmountDifferentDniPurchase->id,
+            $distanceTwoExactAmountPurchase->id,
+        ], $payment->candidates()->pluck('compra_id')->all());
+        $this->assertDatabaseHas('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $nearAmountPurchase->id,
+            'dni_matches' => true,
+            'dni_distance' => 0,
+            'payment_dni' => '12345678',
+            'purchase_dni' => '12345678',
+            'amount_matches' => false,
+            'payment_amount' => 50,
+            'purchase_amount' => 52,
+            'amount_difference' => 2,
+            'match_reason' => 'exact_dni_near_amount',
+            'confidence' => 'high',
+        ]);
+        $this->assertDatabaseHas('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $exactAmountDifferentDniPurchase->id,
+            'dni_matches' => false,
+            'dni_distance' => 1,
+            'payment_dni' => '12345678',
+            'purchase_dni' => '12345687',
+            'amount_matches' => true,
+            'payment_amount' => 50,
+            'purchase_amount' => 50,
+            'amount_difference' => 0,
+            'match_reason' => 'exact_amount_near_dni',
+            'confidence' => 'medium',
+        ]);
+        $this->assertDatabaseHas('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $distanceTwoExactAmountPurchase->id,
+            'dni_matches' => false,
+            'dni_distance' => 2,
+            'payment_dni' => '12345678',
+            'purchase_dni' => '12345087',
+            'amount_matches' => true,
+            'match_reason' => 'exact_amount_near_dni',
+        ]);
+        $this->assertDatabaseMissing('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $farExactAmountDifferentDniPurchase->id,
+        ]);
+        $this->assertDatabaseMissing('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $nearAmountDifferentDniPurchase->id,
+        ]);
+        $this->assertDatabaseMissing('telepagos_payment_candidates', [
+            'telepagos_payment_id' => $payment->id,
+            'compra_id' => $outsideRangePurchase->id,
+        ]);
+        $this->assertSame(Purchase::STATUS_PENDING_PAYMENT, $nearAmountPurchase->fresh()->status);
+        $this->assertSame(Purchase::STATUS_PENDING_PAYMENT, $exactAmountDifferentDniPurchase->fresh()->status);
+
+        $higherPriorityPayment = TelepagosPayment::query()->create([
+            'cuit_buyer' => '20123456789',
+            'amount' => 52,
+            'operation_id' => 1,
+            'transaction_id' => 'tx-primary-candidate',
+        ]);
+        $higherPriorityPayment->candidates()->create([
+            'compra_id' => $nearAmountPurchase->id,
+            'dni_matches' => true,
+            'dni_distance' => 0,
+            'payment_dni' => '12345678',
+            'purchase_dni' => '12345678',
+            'amount_matches' => true,
+            'payment_amount' => 52,
+            'purchase_amount' => 52,
+            'amount_difference' => 0,
+            'match_reason' => 'ambiguous_exact_match',
+            'confidence' => 'exact',
+        ]);
+
+        app(CheckoutService::class)->submitForReview($nearAmountPurchase->fresh());
+        $buyer = User::query()->findOrFail($nearAmountPurchase->user_id);
+
+        $this->actingAs($buyer, 'sanctum')
+            ->getJson("/api/tenants/candidates/compras/{$nearAmountPurchase->id}")
+            ->assertOk()
+            ->assertJsonPath('data.status', Purchase::STATUS_IN_REVIEW)
+            ->assertJsonPath('data.payment_verification.status', 'candidate')
+            ->assertJsonPath('data.payment_verification.candidate_count', 2)
+            ->assertJsonPath('data.payment_verification.primary.reason', 'ambiguous_exact_match')
+            ->assertJsonPath('data.payment_verification.primary.amount_difference', '0.00')
+            ->assertJsonPath('data.payment_verification.primary.confidence', 'exact')
+            ->assertJsonPath('data.payment_verification.reasons.0', 'ambiguous_exact_match')
+            ->assertJsonPath('data.payment_verification.reasons.1', 'exact_dni_near_amount');
+    }
+
    public function test_webhook_confirms_a_purchase_with_tickets_enabled(): void
    {
        $tenant = $this->createTenant('expired-ticket', 'Expired Ticket', 'expired-ticket.com.ar');
--- a/tests/Feature/Migrations/SetWebsiteTypeFaviconTest.php
+++ b/tests/Feature/Migrations/SetWebsiteTypeFaviconTest.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace Tests\Feature\Migrations;
+
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+use Tests\TestCase;
+
+class SetWebsiteTypeFaviconTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_it_uploads_one_favicon_and_shares_the_attachment_between_website_types(): void
+    {
+        Storage::fake('s3');
+
+        DB::table('website_type')->insert([
+            [
+                'codigo' => 'shopit',
+                'nombre' => 'ShopIt',
+                'created_at' => now(),
+                'updated_at' => now(),
+            ],
+            [
+                'codigo' => 'onticket',
+                'nombre' => 'OnTicket',
+                'created_at' => now(),
+                'updated_at' => now(),
+            ],
+        ]);
+
+        $migration = require database_path(
+            'migrations/2026_08_26_000000_set_website_type_favicon.php'
+        );
+
+        $migration->up();
+        $migration->up();
+
+        $faviconIds = DB::table('website_type')
+            ->whereIn('codigo', ['shopit', 'onticket'])
+            ->pluck('favicon_id');
+
+        $this->assertCount(2, $faviconIds);
+        $this->assertNotNull($faviconIds->first());
+        $this->assertSame(1, $faviconIds->unique()->count());
+
+        $attachment = DB::table('attachments')->where('id', $faviconIds->first())->first();
+
+        $this->assertNotNull($attachment);
+        $this->assertSame('onticket_favicon.svg', $attachment->filename);
+        $this->assertSame('image/svg+xml', $attachment->mime_type);
+        $this->assertSame('svg', $attachment->extension);
+        $this->assertSame(1, DB::table('attachments')->where('filename', 'onticket_favicon.svg')->count());
+        Storage::disk('s3')->assertExists($attachment->path);
+        $this->assertSame(
+            file_get_contents(public_path('images/website_types/onticket_favicon.svg')),
+            Storage::disk('s3')->get($attachment->path),
+        );
+    }
+}
--- a/tests/Feature/Notification/NotificationMailServiceTest.php
+++ b/tests/Feature/Notification/NotificationMailServiceTest.php
@@ -142,7 +142,7 @@ class NotificationMailServiceTest extends TestCase
        });
    }

-    public function test_it_sends_purchase_and_ticket_emails_to_the_purchase_recipient(): void
+    public function test_it_sends_one_purchase_confirmation_with_generated_tickets_attached(): void
    {
        $this->useWebsiteTypeBranding();
        $purchase = Purchase::query()->create([
@@ -175,30 +175,23 @@ class NotificationMailServiceTest extends TestCase
        $ticket = Ticket::query()->create([
            'tenant_code' => $this->tenant->codigo,
            'ticket' => fake()->uuid(),
+            'source_purchase_id' => $purchase->id,
            'source_catalog_item_id' => $catalogItem->id,
            'user_id' => $this->user->id,
        ]);
        $service = app(NotificationMailService::class);

-        $service->sendPurchasePaid($purchase->id);
-        $service->sendTicketsAvailable($purchase->id, [$ticket->id]);
+        $service->sendPurchaseConfirmed($purchase->id);

-        Mail::assertSent(Mailable::class, 2);
-        Mail::assertSent(Mailable::class, function (Mailable $mail) use ($purchase): bool {
-            $mail->assertTo('checkout@example.com');
-
-            return $mail->subject === "Pago confirmado - Compra #{$purchase->id}"
-                && str_contains($mail->render(), 'Total pagado')
-                && str_contains($mail->render(), 'border-top: 4px solid #112233')
-                && ! str_contains($mail->render(), 'border-top: 4px solid #ff7006');
-        });
-        Mail::assertSent(Mailable::class, function (Mailable $mail) use ($ticket): bool {
+        Mail::assertSent(Mailable::class, 1);
+        Mail::assertSent(Mailable::class, function (Mailable $mail) use ($purchase, $ticket): bool {
            $mail->assertTo('checkout@example.com');
            $attachment = collect($mail->rawAttachments)->firstWhere('name', "tickets_{$ticket->id}.pdf");

-            return $mail->subject === 'Tus tickets ya están disponibles'
-                && str_contains($mail->render(), 'Entrada general')
-                && str_contains($mail->render(), 'El ticket está adjunto')
+            return $mail->subject === "Compra confirmada - Compra #{$purchase->id}"
+                && str_contains($mail->render(), '¡Compra realizada con éxito!')
+                && str_contains($mail->render(), 'Total pagado')
+                && str_contains($mail->render(), 'Tus tickets ya están disponibles')
                && $attachment !== null
                && $attachment['options'] === ['mime' => 'application/pdf']
                && str_starts_with($attachment['data'], '%PDF-')
@@ -207,6 +200,26 @@ class NotificationMailServiceTest extends TestCase
        });
    }

+    public function test_purchase_confirmation_omits_ticket_content_and_attachment_without_tickets(): void
+    {
+        $purchase = Purchase::query()->create([
+            'tenant_codigo' => $this->tenant->codigo,
+            'user_id' => $this->user->id,
+            'status' => Purchase::STATUS_PAID,
+            'payment_method' => 'transfer',
+            'total' => 25,
+        ]);
+
+        app(NotificationMailService::class)->sendPurchaseConfirmed($purchase->id);
+
+        Mail::assertSent(Mailable::class, function (Mailable $mail) use ($purchase): bool {
+            return $mail->subject === "Compra confirmada - Compra #{$purchase->id}"
+                && str_contains($mail->render(), '¡Compra realizada con éxito!')
+                && ! str_contains($mail->render(), 'Tus tickets ya están disponibles')
+                && $mail->rawAttachments === [];
+        });
+    }
+
    private function useWebsiteTypeBranding(): void
    {
        $websiteType = WebsiteType::query()->create([
--- a/tests/Feature/Notification/QueuedNotificationListenerTest.php
+++ b/tests/Feature/Notification/QueuedNotificationListenerTest.php
@@ -2,9 +2,7 @@

 namespace Tests\Feature\Notification;

-use App\Domains\Notification\Events\TicketsAvailable;
-use App\Domains\Notification\Listeners\SendPurchasePaidEmail;
-use App\Domains\Notification\Listeners\SendTicketsAvailableEmail;
+use App\Domains\Notification\Listeners\SendPurchaseConfirmedEmail;
 use App\Domains\Notification\Services\NotificationMailService;
 use App\Domains\Purchase\Events\PurchasePaid;
 use Mockery;
@@ -12,35 +10,21 @@ use Tests\TestCase;

 class QueuedNotificationListenerTest extends TestCase
 {
-    public function test_purchase_paid_email_delegates_with_the_purchase_id(): void
+    public function test_purchase_confirmed_email_delegates_with_the_purchase_id(): void
    {
        $mailService = Mockery::mock(NotificationMailService::class);
-        $mailService->shouldReceive('sendPurchasePaid')
+        $mailService->shouldReceive('sendPurchaseConfirmed')
            ->once()
            ->with(123);
        $this->app->instance(NotificationMailService::class, $mailService);

-        (new SendPurchasePaidEmail)->handle(new PurchasePaid(123));
+        (new SendPurchaseConfirmedEmail)->handle(new PurchasePaid(123));
    }

-    public function test_tickets_available_email_delegates_with_scalar_identifiers(): void
-    {
-        $mailService = Mockery::mock(NotificationMailService::class);
-        $mailService->shouldReceive('sendTicketsAvailable')
-            ->once()
-            ->with(123, [10, 11]);
-        $this->app->instance(NotificationMailService::class, $mailService);
-
-        (new SendTicketsAvailableEmail)->handle(new TicketsAvailable(123, [10, 11]));
-    }
-
-    public function test_email_events_only_serialize_scalar_identifiers(): void
+    public function test_purchase_paid_event_only_serializes_the_purchase_id(): void
    {
        $purchasePaid = unserialize(serialize(new PurchasePaid(123)));
-        $ticketsAvailable = unserialize(serialize(new TicketsAvailable(123, [10, 11])));

        $this->assertSame(123, $purchasePaid->purchaseId);
-        $this->assertSame(123, $ticketsAvailable->purchaseId);
-        $this->assertSame([10, 11], $ticketsAvailable->ticketIds);
    }
 }
--- a/tests/Feature/Purchase/StorePurchaseTest.php
+++ b/tests/Feature/Purchase/StorePurchaseTest.php
@@ -796,12 +796,18 @@ class StorePurchaseTest extends TestCase

    public function test_it_updates_customer_data_for_a_pending_payment_purchase(): void
    {
+        config()->set('purchase.checkout_expiration_minutes', 30);
+        $now = now()->startOfSecond();
+        $this->travelTo($now);
+
        $this->createTenant('sonder', 'Sonder', 'sonder.com.ar');
        $user = User::factory()->create();
        $variant = $this->createVariantForTenant('sonder', 10, '50.00');
        $purchase = $this->createCheckoutPurchase($user, 'sonder', $variant, 1);
        $purchase->update(['status' => Purchase::STATUS_PENDING_PAYMENT]);

+        $this->travel(10)->minutes();
+
        $this->actingAs($user, 'sanctum')
            ->patchJson("/api/tenants/sonder/compras/{$purchase->id}/customer-data", [
                'dni' => '987654321',
@@ -818,6 +824,12 @@ class StorePurchaseTest extends TestCase
            'status' => Purchase::STATUS_PENDING_PAYMENT,
            'dni' => '987654321',
        ]);
+        $this->assertDatabaseHas('stock_reservations', [
+            'id' => $purchase->stock_reservation_id,
+            'expires_at' => $now->copy()->addMinutes(30)->toDateTimeString(),
+        ]);
+
+        $this->travelBack();
    }

    public function test_checkout_items_are_immutable_and_editing_routes_are_unavailable(): void
--- a/tests/Feature/Seeders/DesfilePuraTendenciaSeederTest.php
+++ b/tests/Feature/Seeders/DesfilePuraTendenciaSeederTest.php
@@ -161,6 +161,7 @@ class DesfilePuraTendenciaSeederTest extends TestCase
        ]);
        $this->assertDatabaseHas('featured_groups', [
            'tenant_code' => 'desfile_pura_tendencia',
+            'code' => 'entradas',
            'source_type' => 'all',
            'product_layout' => 'ticket_selector',
            'group_layout' => 'single',
--- a/tests/Feature/Seeders/FiestaFutbolInfantilProductSeederTest.php
+++ b/tests/Feature/Seeders/FiestaFutbolInfantilProductSeederTest.php
@@ -151,6 +151,7 @@ class FiestaFutbolInfantilProductSeederTest extends TestCase
        ));

        $featuredGroup = FeaturedGroup::query()->where('tenant_code', $tenant->codigo)->sole();
+        $this->assertSame('productos', $featuredGroup->code);
        $this->assertSame(FeaturedGroupSource::All, $featuredGroup->source_type);
        $this->assertSame(ProductLayout::Row, $featuredGroup->product_layout);
        $this->assertSame(GroupLayout::SimpleVertical, $featuredGroup->group_layout);
--- a/tests/Feature/Seeders/ProductCatalogFromImagesSeederTest.php
+++ b/tests/Feature/Seeders/ProductCatalogFromImagesSeederTest.php
@@ -69,6 +69,7 @@ class ProductCatalogFromImagesSeederTest extends TestCase
            ->pluck('id');

        $this->assertNotNull($paginatedGroup);
+        $this->assertSame('productos', $paginatedGroup->code);
        $this->assertSame(ProductLayout::ColumnWithImage, $paginatedGroup->product_layout);
        $this->assertSame(GroupLayout::Paginated, $paginatedGroup->group_layout);
        $this->assertSame(FeaturedGroupSource::All, $paginatedGroup->source_type);
@@ -76,6 +77,7 @@ class ProductCatalogFromImagesSeederTest extends TestCase
        $this->assertCount(0, $paginatedGroup->featuredItems);

        $this->assertNotNull($carouselGroup);
+        $this->assertSame('productos-destacados', $carouselGroup->code);
        $this->assertSame(ProductLayout::ColumnWithImage, $carouselGroup->product_layout);
        $this->assertSame(GroupLayout::Carousel, $carouselGroup->group_layout);
        $this->assertSame(FeaturedGroupSource::Manual, $carouselGroup->source_type);
--- a/tests/Feature/Seeders/WebsiteTypeSeederTest.php
+++ b/tests/Feature/Seeders/WebsiteTypeSeederTest.php
@@ -21,7 +21,7 @@ class WebsiteTypeSeederTest extends TestCase
        $this->seed(WebsiteTypeSeeder::class);

        $this->assertSame(2, WebsiteType::query()->count());
-        $this->assertSame(4, Attachment::query()->count());
+        $this->assertSame(5, Attachment::query()->count());

        $expectedPresentation = [
            'primary_color' => '#FF7006',
@@ -49,6 +49,8 @@ class WebsiteTypeSeederTest extends TestCase
        Storage::disk('s3')->assertExists($shopIt->siteLogo->path);
        $this->assertSame('onticket_footer_logo.png', $shopIt->footerLogo->filename);
        Storage::disk('s3')->assertExists($shopIt->footerLogo->path);
+        $this->assertSame('onticket_favicon.svg', $shopIt->favicon->filename);
+        Storage::disk('s3')->assertExists($shopIt->favicon->path);
        $this->assertSame(['carousel'], $shopIt->extras->pluck('codigo')->all());
        $this->assertSame('Carrusel principal', $shopIt->extras->sole()->nombre);
        $this->assertSame([
@@ -79,6 +81,8 @@ class WebsiteTypeSeederTest extends TestCase
        Storage::disk('s3')->assertExists($onTicket->footerLogo->path);
        $this->assertNotSame($shopIt->site_logo, $onTicket->site_logo);
        $this->assertNotSame($shopIt->footer_logo, $onTicket->footer_logo);
+        $this->assertSame($shopIt->favicon_id, $onTicket->favicon_id);
+        $this->assertSame('onticket_favicon.svg', $onTicket->favicon->filename);
        $this->assertEqualsCanonicalizing(
            ['heroConfig', 'eventConfig', 'additionalInfoConfig'],
            $onTicket->extras->pluck('codigo')->all(),
--- a/tests/Feature/Tenant/BootstrapAdminAppControllerTest.php
+++ b/tests/Feature/Tenant/BootstrapAdminAppControllerTest.php
@@ -14,6 +14,7 @@ class BootstrapAdminAppControllerTest extends TestCase
    public function test_it_publicly_bootstraps_the_admin_app_by_domain(): void
    {
        $footerLogo = Attachment::factory()->create();
+        $favicon = Attachment::factory()->create();

        WebsiteType::query()->create([
            'codigo' => 'shopit',
@@ -31,6 +32,7 @@ class BootstrapAdminAppControllerTest extends TestCase
            'border_color' => '#eaeaea',
            'login_header_footer_color' => '#313131',
            'footer_logo' => $footerLogo->id,
+            'favicon_id' => $favicon->id,
        ]);

        $this->getJson('/api/v1/adminapp/bootstrap/ADMIN.SHOPIT.TEST')
@@ -41,6 +43,7 @@ class BootstrapAdminAppControllerTest extends TestCase
            ->assertJsonPath('data.login_header_footer_color', '#313131')
            ->assertJsonPath('data.site_logo', null)
            ->assertJsonPath('data.footer_logo', $footerLogo->getTemporaryUrl(1440))
+            ->assertJsonPath('data.favicon', $favicon->getTemporaryUrl(1440))
            ->assertJsonMissingPath('data.forms')
            ->assertJsonMissingPath('data.codigo')
            ->assertJsonMissingPath('data.nombre')
--- a/tests/Feature/Tenant/BootstrapScannerControllerTest.php
+++ b/tests/Feature/Tenant/BootstrapScannerControllerTest.php
@@ -14,6 +14,7 @@ class BootstrapScannerControllerTest extends TestCase
    public function test_it_publicly_bootstraps_the_scanner_by_scanner_domain(): void
    {
        $siteLogo = Attachment::factory()->create();
+        $favicon = Attachment::factory()->create();

        WebsiteType::query()->create([
            'codigo' => 'shopit',
@@ -32,6 +33,7 @@ class BootstrapScannerControllerTest extends TestCase
            'border_color' => '#eaeaea',
            'login_header_footer_color' => '#313131',
            'site_logo' => $siteLogo->id,
+            'favicon_id' => $favicon->id,
        ]);

        $this->getJson('/api/v1/scanner/bootstrap/SCANNER.SHOPIT.TEST')
@@ -40,6 +42,7 @@ class BootstrapScannerControllerTest extends TestCase
            ->assertJsonPath('data.primary_color', '#112233')
            ->assertJsonPath('data.site_logo', $siteLogo->getTemporaryUrl(1440))
            ->assertJsonPath('data.footer_logo', null)
+            ->assertJsonPath('data.favicon', $favicon->getTemporaryUrl(1440))
            ->assertJsonMissingPath('data.codigo')
            ->assertJsonMissingPath('data.nombre')
            ->assertJsonMissingPath('data.dominio')
--- a/tests/Feature/Tenant/WebsiteTypeServiceTest.php
+++ b/tests/Feature/Tenant/WebsiteTypeServiceTest.php
@@ -69,4 +69,31 @@ class WebsiteTypeServiceTest extends TestCase
            'favicon_id' => $favicon->id,
        ]);
    }
+
+    public function test_it_keeps_a_shared_favicon_when_one_website_type_replaces_it(): void
+    {
+        Storage::fake('s3');
+
+        $service = app(WebsiteTypeService::class);
+        $shopIt = $service->create([
+            'codigo' => 'shopit',
+            'nombre' => 'ShopIt',
+            'favicon' => UploadedFile::fake()->image('shared-favicon.png', 32, 32),
+        ]);
+        $sharedFavicon = $shopIt->favicon()->firstOrFail();
+        $onTicket = $service->create([
+            'codigo' => 'onticket',
+            'nombre' => 'OnTicket',
+            'favicon' => $sharedFavicon->key,
+        ]);
+
+        $service->updateOrCreate(
+            ['codigo' => 'shopit'],
+            ['favicon' => UploadedFile::fake()->image('shopit-favicon.png', 32, 32)],
+        );
+
+        $this->assertSame($sharedFavicon->id, $onTicket->fresh()->favicon_id);
+        $this->assertDatabaseHas('attachments', ['id' => $sharedFavicon->id]);
+        Storage::disk('s3')->assertExists($sharedFavicon->path);
+    }
 }
--- a/tests/Feature/Ticket/TicketGeneratorServiceTest.php
+++ b/tests/Feature/Ticket/TicketGeneratorServiceTest.php
@@ -11,7 +11,6 @@ use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\Inventory;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Event\Models\EventDate;
-use App\Domains\Notification\Events\TicketsAvailable;
 use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Shared\Enums\FieldType;
 use App\Domains\Tenant\Models\Tenant;
@@ -22,7 +21,6 @@ use App\Domains\Ticket\Services\TicketGeneratorService;
 use Illuminate\Database\Eloquent\Collection as EloquentCollection;
 use Illuminate\Foundation\Testing\RefreshDatabase;
 use Illuminate\Support\Carbon;
-use Illuminate\Support\Facades\Event;
 use Illuminate\Support\Facades\Queue;
 use Illuminate\Support\Str;
 use Tests\TestCase;
@@ -220,7 +218,6 @@ class TicketGeneratorServiceTest extends TestCase

    public function test_marking_a_purchase_as_paid_generates_its_tickets_once(): void
    {
-        Event::fake([TicketsAvailable::class]);
        $item = $this->createTicketableItem('paid-ticket');
        $purchase = $this->createPurchase($item, 2);
        $purchase->setRelation('items', new EloquentCollection);
@@ -229,7 +226,6 @@ class TicketGeneratorServiceTest extends TestCase

        $this->assertSame(Purchase::STATUS_PAID, $purchase->status);
        $this->assertDatabaseCount('tickets', 2);
-        Event::assertDispatchedTimes(TicketsAvailable::class, 1);

        $this->actingAs($this->user, 'sanctum')
            ->getJson("/api/tenants/{$this->tenant->codigo}/compras/{$purchase->id}")
@@ -240,7 +236,6 @@ class TicketGeneratorServiceTest extends TestCase
        $purchase->markAsPaid();

        $this->assertDatabaseCount('tickets', 2);
-        Event::assertDispatchedTimes(TicketsAvailable::class, 1);
    }

    public function test_a_ticket_generated_from_a_purchase_keeps_its_source_ids(): void
@@ -453,7 +448,6 @@ class TicketGeneratorServiceTest extends TestCase

    public function test_marking_a_purchase_as_paid_ignores_items_without_tickets(): void
    {
-        Event::fake([TicketsAvailable::class]);
        $item = $this->createTicketableItem('regular-product');
        $item->update(['has_tickets' => false]);
        $purchase = $this->createPurchase($item->fresh(), 1);
@@ -462,7 +456,6 @@ class TicketGeneratorServiceTest extends TestCase

        $this->assertSame(Purchase::STATUS_PAID, $purchase->status);
        $this->assertDatabaseCount('tickets', 0);
-        Event::assertNotDispatched(TicketsAvailable::class);

        $this->actingAs($this->user, 'sanctum')
            ->getJson("/api/tenants/{$this->tenant->codigo}/compras/{$purchase->id}")
--- a/tests/TestCase.php
+++ b/tests/TestCase.php
@@ -2,9 +2,25 @@

 namespace Tests;

+use Illuminate\Foundation\Application;
 use Illuminate\Foundation\Testing\TestCase as BaseTestCase;
+use RuntimeException;

 abstract class TestCase extends BaseTestCase
 {
-    //
+    public function createApplication(): Application
+    {
+        $app = parent::createApplication();
+        $connection = (string) $app['config']->get('database.default');
+        $database = (string) $app['config']->get("database.connections.{$connection}.database");
+        $usesInMemorySqlite = $connection === 'sqlite' && $database === ':memory:';
+
+        if (! $usesInMemorySqlite && ! str_ends_with(strtolower($database), '_test')) {
+            throw new RuntimeException(
+                "Unsafe test database [{$database}]. Tests may only use an in-memory SQLite database or a database ending in _test.",
+            );
+        }
+
+        return $app;
+    }
 }
--- a/tests/Unit/Bootstrap/AdminAppBootstrapResourceTest.php
+++ b/tests/Unit/Bootstrap/AdminAppBootstrapResourceTest.php
@@ -17,11 +17,13 @@ class AdminAppBootstrapResourceTest extends TestCase
        ]);
        $websiteType->setRelation('siteLogo', null);
        $websiteType->setRelation('footerLogo', null);
+        $websiteType->setRelation('favicon', null);
        $data = AdminAppBootstrapResource::make([
            'website_type' => $websiteType,
        ])->resolve(request());

        $this->assertSame('shopit', $data['website_type_code']);
+        $this->assertNull($data['favicon']);
        $this->assertArrayNotHasKey('forms', $data);
    }
 }
--- a/tests/Unit/Notification/NotificationMailServiceLoggingTest.php
+++ b/tests/Unit/Notification/NotificationMailServiceLoggingTest.php
@@ -42,31 +42,11 @@ class NotificationMailServiceLoggingTest extends TestCase
                'purchase_id' => 123,
                'reason' => 'purchase_not_found',
                'missing_model' => Purchase::class,
-                'email_type' => 'purchase_paid',
+                'email_type' => 'purchase_confirmed',
            ],
        );

-        $this->service->sendPurchasePaid(123);
-    }
-
-    public function test_missing_purchase_log_includes_the_requested_ticket_ids(): void
-    {
-        $this->createEmptyPurchasesTable();
-
-        Log::shouldReceive('channel')->once()->with('emails')->andReturnSelf();
-        Log::shouldReceive('warning')->once()->with(
-            'Notification email skipped.',
-            [
-                'purchase_id' => 123,
-                'requested_ticket_count' => 2,
-                'requested_ticket_ids' => [10, 11],
-                'reason' => 'purchase_not_found',
-                'missing_model' => Purchase::class,
-                'email_type' => 'tickets_available',
-            ],
-        );
-
-        $this->service->sendTicketsAvailable(123, [10, 11]);
+        $this->service->sendPurchaseConfirmed(123);
    }

    public function test_it_logs_successful_delivery_with_the_mailer(): void
@@ -97,13 +77,13 @@ class NotificationMailServiceLoggingTest extends TestCase
        Log::shouldReceive('error')->once()->with(
            'Notification email delivery failed.',
            Mockery::on(fn (array $context): bool => $context['purchase_id'] === 123
-                && $context['email_type'] === 'purchase_paid'
+                && $context['email_type'] === 'purchase_confirmed'
                && $context['exception'] === $exception),
        );

        $this->expectExceptionObject($exception);

-        $this->sendLogged('purchase_paid', ['purchase_id' => 123], function () use ($exception): array {
+        $this->sendLogged('purchase_confirmed', ['purchase_id' => 123], function () use ($exception): array {
            throw $exception;
        });
    }
--- a/tests/Unit/Purchase/DniDistanceServiceTest.php
+++ b/tests/Unit/Purchase/DniDistanceServiceTest.php
@@ -0,0 +1,31 @@
+<?php
+
+namespace Tests\Unit\Purchase;
+
+use App\Domains\Purchase\Services\DniDistanceService;
+use PHPUnit\Framework\Attributes\DataProvider;
+use PHPUnit\Framework\TestCase;
+
+class DniDistanceServiceTest extends TestCase
+{
+    /** @return iterable<string, array{string, string, int}> */
+    public static function distances(): iterable
+    {
+        yield 'exact' => ['40123456', '40123456', 0];
+        yield 'leading transposition' => ['40123456', '04123456', 1];
+        yield 'trailing transposition' => ['40123456', '40123465', 1];
+        yield 'single substitution' => ['40123456', '40123856', 1];
+        yield 'substitution and transposition' => ['12345678', '12345087', 2];
+        yield 'seven digits normalized with leading zero' => ['04123456', '4123456', 0];
+        yield 'more than two edits' => ['40123456', '87654321', 7];
+    }
+
+    #[DataProvider('distances')]
+    public function test_it_calculates_damerau_levenshtein_distance(
+        string $left,
+        string $right,
+        int $expected,
+    ): void {
+        $this->assertSame($expected, (new DniDistanceService)->distance($left, $right));
+    }
+}
--- a/tests/Unit/Purchase/PurchaseResourceTest.php
+++ b/tests/Unit/Purchase/PurchaseResourceTest.php
@@ -0,0 +1,69 @@
+<?php
+
+namespace Tests\Unit\Purchase;
+
+use App\Domains\Catalog\Models\StockReservation;
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Purchase\Resources\PurchaseResource;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Tests\TestCase;
+
+class PurchaseResourceTest extends TestCase
+{
+    public function test_it_exposes_the_remaining_checkout_time_using_the_server_clock(): void
+    {
+        $now = now()->startOfSecond();
+        $this->travelTo($now);
+        $expiresAt = $now->copy()->addMinutes(12);
+
+        $resource = $this->resourceFor(Purchase::STATUS_PENDING_PAYMENT, $expiresAt);
+
+        $this->assertTrue($expiresAt->equalTo($resource['expires_at']));
+        $this->assertSame(720, $resource['expires_in_seconds']);
+        $this->assertTrue($now->equalTo($resource['server_time']));
+
+        $this->travelBack();
+    }
+
+    public function test_it_clamps_an_overdue_checkout_to_zero_seconds(): void
+    {
+        $now = now()->startOfSecond();
+        $this->travelTo($now);
+
+        $resource = $this->resourceFor(
+            Purchase::STATUS_CREATED,
+            $now->copy()->subSecond(),
+        );
+
+        $this->assertSame(0, $resource['expires_in_seconds']);
+
+        $this->travelBack();
+    }
+
+    public function test_it_exposes_null_expiration_after_the_purchase_enters_review(): void
+    {
+        $resource = $this->resourceFor(
+            Purchase::STATUS_IN_REVIEW,
+            null,
+        );
+
+        $this->assertNull($resource['expires_at']);
+        $this->assertNull($resource['expires_in_seconds']);
+    }
+
+    /** @return array<string, mixed> */
+    private function resourceFor(string $status, ?Carbon $expiresAt): array
+    {
+        $purchase = (new Purchase)->forceFill([
+            'status' => $status,
+            'total' => '0.00',
+        ]);
+        $purchase->setRelation('stockReservation', (new StockReservation)->forceFill([
+            'status' => StockReservation::STATUS_ACTIVE,
+            'expires_at' => $expiresAt,
+        ]));
+
+        return (new PurchaseResource($purchase))->toArray(Request::create('/'));
+    }
+}