fix(cart): reconcile expired cart mutations

This reverts commit 5ad18694e1.

.env.example

@@ -8,6 +8,7 @@ PURCHASE_CHECKOUT_EXPIRATION_MINUTES=30
 PURCHASE_QR_EXPIRATION_MINUTES=15
 PURCHASE_TELEPAGOS_EXPIRATION_MINUTES=30
 PURCHASE_TRANSFER_EXPIRATION_MINUTES=1440
+STOCK_RESERVATION_EXPIRATION_MINUTES=30
 FRONTEND_URLS=http://localhost:4200
 
 APP_LOCALE=es
@@ -31,10 +32,15 @@ AUTH_LOGIN_LOCK_MINUTES=15
 AUTH_LOGIN_RATE_LIMIT_PER_MINUTE=10
 AUTH_LOGIN_IP_RATE_LIMIT_PER_MINUTE=30
 
-LOG_CHANNEL=stack
+LOG_CHANNEL=daily
 LOG_STACK=single
 LOG_DEPRECATIONS_CHANNEL=null
 LOG_LEVEL=debug
+LOG_DAILY_DAYS=14
+TELEPAGOS_LOG_LEVEL=info
+TELEPAGOS_LOG_DAYS=30
+COMMANDS_LOG_LEVEL=info
+COMMANDS_LOG_DAYS=30
 
 DB_CONNECTION=mysql
 DB_HOST=127.0.0.1

Tenant_CRUD_Postman_Collection.json

@@ -41,15 +41,18 @@
 					}
 				],
 				"url": {
-					"raw": "{{base_url}}/api/tenants/bootstrap/acme.com",
+					"raw": "{{base_url}}/api/tenants/bootstrap?dominio=acme.com&path=/",
 					"host": [
 						"{{base_url}}"
 					],
 					"path": [
 						"api",
 						"tenants",
-						"bootstrap",
-						"acme.com"
+						"bootstrap"
+					],
+					"query": [
+						{"key": "dominio", "value": "acme.com"},
+						{"key": "path", "value": "/"}
 					]
 				}
 			},

app/Domains/Attachable/Models/Attachment.php

@@ -6,6 +6,9 @@ use App\Domains\Attachable\Enums\AttachmentType;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\HasOne;
+use Illuminate\Support\Facades\Storage;
 use Illuminate\Support\Str;
 
 #[Fillable([
@@ -40,12 +43,34 @@ class Attachment extends Model
         ];
     }
 
+    public function cropVariants(): HasMany
+    {
+        return $this->hasMany(AttachmentCrop::class);
+    }
+
+    public function desktopCrop(): HasOne
+    {
+        return $this->hasOne(AttachmentCrop::class)
+            ->where('variant', AttachmentCrop::DESKTOP);
+    }
+
+    public function mobileCrop(): HasOne
+    {
+        return $this->hasOne(AttachmentCrop::class)
+            ->where('variant', AttachmentCrop::MOBILE);
+    }
+
+    public function cropSource(): HasOne
+    {
+        return $this->hasOne(AttachmentCrop::class, 'cropped_attachment_id');
+    }
+
     /**
      * Get the pre-signed temporary S3 URL for this attachment.
      */
     public function getTemporaryUrl(int $expiresInMinutes = 10): string
     {
-        return \Illuminate\Support\Facades\Storage::disk('s3')->temporaryUrl(
+        return Storage::disk('s3')->temporaryUrl(
             $this->path,
             now()->addMinutes($expiresInMinutes)
         );

app/Domains/Attachable/Models/AttachmentCrop.php

@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Domains\Attachable\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'attachment_id',
+    'variant',
+    'crop_horizontal',
+    'crop_vertical',
+    'cropped_attachment_id',
+])]
+class AttachmentCrop extends Model
+{
+    public const DESKTOP = 'desktop';
+
+    public const MOBILE = 'mobile';
+
+    public const VARIANTS = [self::DESKTOP, self::MOBILE];
+
+    protected function casts(): array
+    {
+        return [
+            'attachment_id' => 'integer',
+            'crop_horizontal' => 'array',
+            'crop_vertical' => 'array',
+            'cropped_attachment_id' => 'integer',
+        ];
+    }
+
+    public function attachment(): BelongsTo
+    {
+        return $this->belongsTo(Attachment::class);
+    }
+
+    public function croppedAttachment(): BelongsTo
+    {
+        return $this->belongsTo(Attachment::class, 'cropped_attachment_id');
+    }
+}

app/Domains/Attachable/Services/AttachmentService.php

@@ -5,7 +5,9 @@ namespace App\Domains\Attachable\Services;
 use App\Domains\Attachable\Enums\AttachmentType;
 use App\Domains\Attachable\Exceptions\AttachmentStorageException;
 use App\Domains\Attachable\Models\Attachment;
+use App\Domains\Attachable\Models\AttachmentCrop;
 use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Storage;
 use Illuminate\Support\Str;
 use Symfony\Component\Mime\MimeTypes;
@@ -13,6 +15,107 @@ use Throwable;
 
 class AttachmentService
 {
+    /**
+     * @param  array<string, array{crop_horizontal: array<string, mixed>, crop_vertical: array<string, mixed>}>  $crops
+     */
+    public function storeCroppedImageVariants(
+        UploadedFile|string $image,
+        string $path,
+        array $crops,
+    ): Attachment {
+        $crops = $this->validateCropVariants($crops);
+        $storedPaths = [];
+
+        try {
+            return DB::transaction(function () use (
+                $image,
+                $path,
+                $crops,
+                &$storedPaths,
+            ): Attachment {
+                $original = $this->store($image, $path);
+                $storedPaths[] = $original->path;
+                $contents = $this->imageContents($image);
+
+                foreach ($crops as $variant => $crop) {
+                    $cropped = $this->storeCropVariant($contents, $path, $crop);
+                    $storedPaths[] = $cropped->path;
+                    $original->cropVariants()->create([
+                        'variant' => $variant,
+                        'crop_horizontal' => $crop['crop_horizontal'],
+                        'crop_vertical' => $crop['crop_vertical'],
+                        'cropped_attachment_id' => $cropped->id,
+                    ]);
+                }
+
+                return $original->load('cropVariants.croppedAttachment');
+            });
+        } catch (Throwable $throwable) {
+            if ($storedPaths !== []) {
+                Storage::disk('s3')->delete(array_values(array_unique($storedPaths)));
+            }
+
+            throw $throwable;
+        }
+    }
+
+    /**
+     * @param  array<string, array{crop_horizontal: array<string, mixed>, crop_vertical: array<string, mixed>}>  $crops
+     */
+    public function updateImageCropVariants(
+        Attachment $original,
+        array $crops,
+    ): Attachment {
+        if ($original->type !== AttachmentType::Image) {
+            throw new AttachmentStorageException('Only image attachments can be cropped.');
+        }
+
+        $crops = $this->validateCropVariants($crops);
+        $contents = Storage::disk('s3')->get($original->path);
+
+        if (! is_string($contents) || $contents === '') {
+            throw new AttachmentStorageException('The original image could not be read from the s3 disk.');
+        }
+
+        $directory = trim(str_replace('\\', '/', dirname($original->path)), './');
+        $directory = $directory !== '' ? $directory : 'attachments';
+        $previousCrops = $original->cropVariants()->with('croppedAttachment')->get();
+        $storedCrops = [];
+
+        try {
+            foreach ($crops as $variant => $crop) {
+                $storedCrops[$variant] = $this->storeCropVariant($contents, $directory, $crop);
+            }
+
+            DB::transaction(function () use ($original, $crops, $storedCrops): void {
+                foreach ($crops as $variant => $crop) {
+                    $original->cropVariants()->updateOrCreate(
+                        ['variant' => $variant],
+                        [
+                            'crop_horizontal' => $crop['crop_horizontal'],
+                            'crop_vertical' => $crop['crop_vertical'],
+                            'cropped_attachment_id' => $storedCrops[$variant]->id,
+                        ]
+                    );
+                }
+            });
+        } catch (Throwable $throwable) {
+            foreach ($storedCrops as $storedCrop) {
+                $this->delete($storedCrop);
+            }
+
+            throw $throwable;
+        }
+
+        foreach ($previousCrops as $previousCrop) {
+            if ($previousCrop->croppedAttachment !== null) {
+                $this->delete($previousCrop->croppedAttachment);
+            }
+        }
+
+        return $original->refresh()->load('cropVariants.croppedAttachment');
+    }
+
     public function store(
         UploadedFile|string $file,
         string $path,
@@ -57,13 +160,30 @@ class AttachmentService
 
     public function delete(Attachment $attachment): void
     {
-        $deleted = Storage::disk('s3')->delete($attachment->path);
+        $croppedAttachments = $attachment->cropVariants()
+            ->with('croppedAttachment')
+            ->get()
+            ->pluck('croppedAttachment')
+            ->filter();
+        $paths = $croppedAttachments
+            ->pluck('path')
+            ->prepend($attachment->path)
+            ->filter()
+            ->unique()
+            ->values()
+            ->all();
+        $deleted = Storage::disk('s3')->delete(
+            count($paths) === 1 ? $paths[0] : $paths
+        );
 
         if (! $deleted) {
-            throw new AttachmentStorageException('No se pudo eliminar el archivo del disco s3.');
+            throw new AttachmentStorageException('No se pudieron eliminar los archivos del disco s3.');
         }
 
-        $attachment->delete();
+        DB::transaction(function () use ($attachment, $croppedAttachments): void {
+            $attachment->delete();
+            Attachment::query()->whereKey($croppedAttachments->pluck('id'))->delete();
+        });
     }
 
     public function copy(Attachment $source, string $path): Attachment
@@ -107,6 +227,171 @@ class AttachmentService
         return trim($path, '/');
     }
 
+    /**
+     * @param  array<string, array{crop_horizontal?: mixed, crop_vertical?: mixed}>  $crops
+     * @return array<string, array{crop_horizontal: array{start_percentage: float, end_percentage: float}, crop_vertical: array{start_percentage: float, end_percentage: float}}>
+     */
+    protected function validateCropVariants(array $crops): array
+    {
+        $validated = [];
+
+        foreach (AttachmentCrop::VARIANTS as $variant) {
+            $crop = $crops[$variant] ?? null;
+
+            if (! is_array($crop)) {
+                throw new AttachmentStorageException("The {$variant} crop is required.");
+            }
+
+            $horizontal = $crop['crop_horizontal'] ?? null;
+            $vertical = $crop['crop_vertical'] ?? null;
+
+            if (! is_array($horizontal) || ! is_array($vertical)) {
+                throw new AttachmentStorageException(
+                    "The {$variant} crop must contain crop_horizontal and crop_vertical ranges."
+                );
+            }
+
+            $validated[$variant] = [
+                'crop_horizontal' => $this->validateCropRange($horizontal, "{$variant} horizontal"),
+                'crop_vertical' => $this->validateCropRange($vertical, "{$variant} vertical"),
+            ];
+        }
+
+        return $validated;
+    }
+
+    /**
+     * @param  array{crop_horizontal: array<string, mixed>, crop_vertical: array<string, mixed>}  $crop
+     */
+    protected function storeCropVariant(string $contents, string $path, array $crop): Attachment
+    {
+        $croppedContents = $this->cropImage(
+            $contents,
+            $crop['crop_horizontal'],
+            $crop['crop_vertical'],
+        );
+
+        return $this->store(
+            'data:'.$croppedContents['mime_type'].';base64,'.base64_encode($croppedContents['contents']),
+            $path,
+        );
+    }
+
+    /**
+     * @param  array{start_percentage?: mixed, end_percentage?: mixed}  $range
+     * @return array{start_percentage: float, end_percentage: float}
+     */
+    protected function validateCropRange(array $range, string $axis): array
+    {
+        $start = $range['start_percentage'] ?? null;
+        $end = $range['end_percentage'] ?? null;
+
+        if (! is_numeric($start) || ! is_numeric($end)) {
+            throw new AttachmentStorageException(
+                "The {$axis} crop range must contain numeric start_percentage and end_percentage values."
+            );
+        }
+
+        $start = (float) $start;
+        $end = (float) $end;
+
+        if (! is_finite($start) || ! is_finite($end) || $start < 0 || $end > 100 || $start >= $end) {
+            throw new AttachmentStorageException(
+                "The {$axis} crop range must satisfy 0 <= start_percentage < end_percentage <= 100."
+            );
+        }
+
+        return [
+            'start_percentage' => $start,
+            'end_percentage' => $end,
+        ];
+    }
+
+    protected function imageContents(UploadedFile|string $image): string
+    {
+        if (is_string($image)) {
+            return $this->decodeBase64File($image)['data'];
+        }
+
+        $contents = file_get_contents($image->getRealPath());
+
+        if (! is_string($contents) || $contents === '') {
+            throw new AttachmentStorageException('The image content cannot be empty.');
+        }
+
+        return $contents;
+    }
+
+    /**
+     * @return array{contents: string, mime_type: string}
+     */
+    protected function cropImage(
+        string $contents,
+        array $cropHorizontal,
+        array $cropVertical,
+    ): array {
+        $source = @imagecreatefromstring($contents);
+
+        if ($source === false) {
+            throw new AttachmentStorageException('The attachment must contain a valid image.');
+        }
+
+        $width = imagesx($source);
+        $height = imagesy($source);
+        $x = min($width - 1, (int) floor($width * $cropHorizontal['start_percentage'] / 100));
+        $right = min($width, (int) ceil($width * $cropHorizontal['end_percentage'] / 100));
+        $y = min($height - 1, (int) floor($height * $cropVertical['start_percentage'] / 100));
+        $bottom = min($height, (int) ceil($height * $cropVertical['end_percentage'] / 100));
+        $cropped = imagecrop($source, [
+            'x' => $x,
+            'y' => $y,
+            'width' => $right - $x,
+            'height' => $bottom - $y,
+        ]);
+
+        if ($cropped === false) {
+            throw new AttachmentStorageException('The image could not be cropped.');
+        }
+
+        return $this->encodeImage($cropped, $contents);
+    }
+
+    /**
+     * @return array{contents: string, mime_type: string}
+     */
+    protected function encodeImage(\GdImage $image, string $originalContents): array
+    {
+        $mimeType = (new \finfo(FILEINFO_MIME_TYPE))->buffer($originalContents);
+        $mimeType = is_string($mimeType) ? strtolower($mimeType) : '';
+
+        ob_start();
+
+        try {
+            $encoded = match ($mimeType) {
+                'image/jpeg' => imagejpeg($image, null, 90),
+                'image/gif' => imagegif($image),
+                'image/webp' => imagewebp($image, null, 90),
+                'image/avif' => function_exists('imageavif') && imageavif($image, null, 90),
+                default => imagepng($image),
+            };
+            $output = ob_get_contents();
+        } finally {
+            ob_end_clean();
+        }
+
+        if (! $encoded || ! is_string($output) || $output === '') {
+            throw new AttachmentStorageException('The cropped image could not be encoded.');
+        }
+
+        return [
+            'contents' => $output,
+            'mime_type' => match ($mimeType) {
+                'image/jpeg', 'image/gif', 'image/webp', 'image/avif' => $mimeType,
+                default => 'image/png',
+            },
+        ];
+    }
+
     protected function resolveFilename(UploadedFile|string $file, string $key): string
     {
         if ($file instanceof UploadedFile) {

app/Domains/Attachable/documentacion/README.md

@@ -2,11 +2,12 @@
 
 ## Propósito
 
-Centraliza el almacenamiento y la metadata de archivos adjuntos. Acepta archivos subidos o contenido Base64, los persiste en S3 y registra su tipo, MIME, extensión, tamaño, nombre original y clave única.
+Centraliza el almacenamiento y la metadata de archivos adjuntos. Acepta archivos subidos o contenido Base64, los persiste en S3 y registra su tipo, MIME, extensión, tamaño, nombre original y clave única. Para imágenes también permite guardar un original junto con variantes recortadas para desktop y mobile.
 
 ## Componentes principales
 
 - `Models/Attachment.php`: representa un adjunto y genera URL temporales de acceso.
+- `Models/AttachmentCrop.php`: relaciona un original con su crop desktop o mobile y la imagen generada.
 - `Services/AttachmentService.php`: almacena, copia y elimina archivos, compensando en S3 si falla la escritura en base de datos.
 - `Enums/AttachmentType.php`: clasifica imágenes, videos, PDF, audio, documentos y otros archivos.
 - `Exceptions/AttachmentStorageException.php`: expresa fallos propios del almacenamiento.
@@ -25,5 +26,8 @@ No expone rutas HTTP propias. Lo consumen otros dominios, especialmente `Catalog
 ## Consideraciones
 
 - El directorio no puede quedar vacío después de normalizarlo.
+- Cada eje del crop guarda `start_percentage` y `end_percentage`, cumpliendo `0 <= start < end <= 100`.
+- `attachment_crops` guarda una fila por variante con los rangos horizontal/vertical y el attachment procesado.
+- Al eliminar el original mediante el servicio también se eliminan todas sus variantes recortadas.
 - La eliminación se considera fallida si S3 no confirma el borrado.
 - Las URL generadas son temporales; el vencimiento predeterminado es de 10 minutos.

app/Domains/Auth/Controllers/CreateAdminAppResetPasswordAttemptController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Domains\Auth\Models\ResetPasswordAttempt;
+use App\Domains\Auth\Requests\AdminAppCreateResetPasswordAttemptRequest;
+use App\Domains\Auth\Services\ResetPasswordAttemptService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+
+class CreateAdminAppResetPasswordAttemptController extends Controller
+{
+    public function __construct(
+        private readonly ResetPasswordAttemptService $resetPasswordAttemptService,
+    ) {}
+
+    public function __invoke(AdminAppCreateResetPasswordAttemptRequest $request): JsonResponse
+    {
+        $this->resetPasswordAttemptService->createForAdminAppEmail(
+            $request->validated('email'),
+        );
+
+        return response()->json([
+            'code' => 'auth.password_reset_requested',
+            'message' => __('api.auth.password_reset_requested'),
+            'status' => ResetPasswordAttempt::STATUS_PENDING,
+        ], 202);
+    }
+}

app/Domains/Auth/Controllers/CreateScannerResetPasswordAttemptController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Auth\Controllers;
+
+use App\Domains\Auth\Models\ResetPasswordAttempt;
+use App\Domains\Auth\Requests\ScannerCreateResetPasswordAttemptRequest;
+use App\Domains\Auth\Services\ResetPasswordAttemptService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+
+class CreateScannerResetPasswordAttemptController extends Controller
+{
+    public function __construct(
+        private readonly ResetPasswordAttemptService $resetPasswordAttemptService,
+    ) {}
+
+    public function __invoke(ScannerCreateResetPasswordAttemptRequest $request): JsonResponse
+    {
+        $this->resetPasswordAttemptService->createForScannerEmail(
+            $request->validated('email'),
+        );
+
+        return response()->json([
+            'code' => 'auth.password_reset_requested',
+            'message' => __('api.auth.password_reset_requested'),
+            'status' => ResetPasswordAttempt::STATUS_PENDING,
+        ], 202);
+    }
+}

app/Domains/Auth/Models/ResetPasswordAttempt.php

@@ -11,6 +11,12 @@ use Illuminate\Database\Eloquent\Relations\BelongsTo;
 #[Hidden(['codigo'])]
 class ResetPasswordAttempt extends Model
 {
+    public const REASON_MANUAL = 'manual';
+
+    public const REASON_ACCOUNT_LOCKED = 'account_locked';
+
+    public const REASON_STAFF_CREATED = 'staff_created';
+
     public const STATUS_PENDING = 'pending';
 
     public const STATUS_VALIDATED = 'validated';

app/Domains/Auth/Requests/AdminAppCreateResetPasswordAttemptRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Auth\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Str;
+
+class AdminAppCreateResetPasswordAttemptRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    protected function prepareForValidation(): void
+    {
+        $email = $this->input('email');
+
+        if (is_string($email)) {
+            $this->merge(['email' => Str::lower(trim($email))]);
+        }
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email', 'max:255'],
+        ];
+    }
+}

app/Domains/Auth/Requests/ScannerCreateResetPasswordAttemptRequest.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Auth\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Support\Str;
+
+class ScannerCreateResetPasswordAttemptRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    protected function prepareForValidation(): void
+    {
+        $email = $this->input('email');
+
+        if (is_string($email)) {
+            $this->merge(['email' => Str::lower(trim($email))]);
+        }
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'email' => ['required', 'string', 'email', 'max:255'],
+        ];
+    }
+}

app/Domains/Auth/Services/AdminCredentialVerifier.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Auth\Services;
+
+use App\Domains\Auth\Models\User;
+use App\Domains\Authorization\Enums\RoleCode;
+use Illuminate\Support\Facades\Hash;
+
+class AdminCredentialVerifier
+{
+    public function verify(string $email, string $password): bool
+    {
+        $admin = User::query()
+            ->where('email', mb_strtolower(trim($email)))
+            ->where('rol_codigo', RoleCode::Admin->value)
+            ->first();
+
+        return $admin !== null
+            && ! $admin->locked_until?->isFuture()
+            && Hash::check($password, $admin->getAuthPassword());
+    }
+}

app/Domains/Auth/Services/GoogleAuthService.php

@@ -155,16 +155,19 @@ class GoogleAuthService
         $parts = parse_url($returnUrl);
         if (! is_array($parts)
             || ! isset($parts['scheme'], $parts['host'])
-            || isset($parts['user'], $parts['pass'], $parts['query'], $parts['fragment'])
-            || ($parts['path'] ?? '') !== '') {
+            || isset($parts['user'], $parts['pass'], $parts['query'], $parts['fragment'])) {
             return false;
         }
 
         $scheme = strtolower($parts['scheme']);
         $host = TenantDomainNormalizer::normalize($parts['host']);
         $tenantDomain = TenantDomainNormalizer::normalize($tenant->dominio);
+        $returnPath = TenantDomainNormalizer::normalizePath($parts['path'] ?? '/');
 
-        if ($host === null || $tenantDomain === null || $host !== $tenantDomain) {
+        if ($host === null
+            || $tenantDomain === null
+            || $host !== $tenantDomain
+            || $returnPath !== $tenant->base_path) {
             return false;
         }
 

app/Domains/Auth/Services/PasswordLoginService.php

@@ -4,9 +4,11 @@ namespace App\Domains\Auth\Services;
 
 use App\Domains\Auth\Exceptions\AccountLockedException;
 use App\Domains\Auth\Models\LoginAttempt;
+use App\Domains\Auth\Models\ResetPasswordAttempt;
 use App\Domains\Auth\Models\User;
 use App\Domains\Authorization\Enums\PermissionCode;
 use App\Domains\Authorization\Enums\RoleCode;
+use App\Domains\Notification\Events\PasswordResetRequested;
 use Carbon\CarbonImmutable;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Hash;
@@ -60,6 +62,8 @@ class PasswordLoginService
             $userAgent,
             RoleCode::AdminApp,
             true,
+            null,
+            PasswordResetRequested::CHANNEL_ADMINAPP,
         );
     }
 
@@ -84,6 +88,7 @@ class PasswordLoginService
             null,
             true,
             PermissionCode::ScanTickets->value,
+            PasswordResetRequested::CHANNEL_SCANNER,
         );
     }
 
@@ -96,6 +101,7 @@ class PasswordLoginService
         ?RoleCode $requiredRole = RoleCode::User,
         bool $requiresTenant = false,
         ?string $requiredPermission = null,
+        string $passwordResetChannel = PasswordResetRequested::CHANNEL_STOREFRONT,
     ): User {
         $normalizedEmail = mb_strtolower(trim($email));
         $now = CarbonImmutable::now();
@@ -111,6 +117,7 @@ class PasswordLoginService
             $requiredRole,
             $requiresTenant,
             $requiredPermission,
+            $passwordResetChannel,
         ): array {
             $user = User::query()
                 ->where('email', $normalizedEmail)
@@ -160,7 +167,12 @@ class PasswordLoginService
 
             if ($user === null || ! Hash::check($password, $user->password)) {
                 if ($user !== null && $attemptTenantCode !== null) {
-                    $this->registerFailure($user, $now, $attemptTenantCode);
+                    $this->registerFailure(
+                        $user,
+                        $now,
+                        $attemptTenantCode,
+                        $passwordResetChannel,
+                    );
                 }
 
                 $outcome = $user?->locked_until?->isFuture()
@@ -219,8 +231,12 @@ class PasswordLoginService
         return $result['user'];
     }
 
-    private function registerFailure(User $user, CarbonImmutable $now, string $tenantCode): void
-    {
+    private function registerFailure(
+        User $user,
+        CarbonImmutable $now,
+        string $tenantCode,
+        string $passwordResetChannel,
+    ): void {
         $windowMinutes = max(1, (int) config('login-security.attempt_window_minutes'));
         $maxAttempts = max(1, (int) config('login-security.max_attempts'));
         $lockMinutes = max(1, (int) config('login-security.lock_minutes'));
@@ -243,7 +259,23 @@ class PasswordLoginService
 
         if ($attempts >= $maxAttempts && $previousAttempts < $maxAttempts) {
             try {
-                $this->resetPasswordAttemptService->createForEmail($user->email, $tenantCode, 'account_locked');
+                if ($passwordResetChannel === PasswordResetRequested::CHANNEL_ADMINAPP) {
+                    $this->resetPasswordAttemptService->createForAdminAppEmail(
+                        $user->email,
+                        ResetPasswordAttempt::REASON_ACCOUNT_LOCKED,
+                    );
+                } elseif ($passwordResetChannel === PasswordResetRequested::CHANNEL_SCANNER) {
+                    $this->resetPasswordAttemptService->createForScannerEmail(
+                        $user->email,
+                        ResetPasswordAttempt::REASON_ACCOUNT_LOCKED,
+                    );
+                } else {
+                    $this->resetPasswordAttemptService->createForEmail(
+                        $user->email,
+                        $tenantCode,
+                        ResetPasswordAttempt::REASON_ACCOUNT_LOCKED,
+                    );
+                }
             } catch (\Throwable $e) {
                 Log::error('Failed to trigger reset password on account lock', [
                     'user_id' => $user->id,

app/Domains/Auth/Services/ResetPasswordAttemptService.php

@@ -4,6 +4,7 @@ namespace App\Domains\Auth\Services;
 
 use App\Domains\Auth\Models\ResetPasswordAttempt;
 use App\Domains\Auth\Models\User;
+use App\Domains\Authorization\Enums\RoleCode;
 use App\Domains\Notification\Events\PasswordResetRequested;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Log;
@@ -11,8 +12,11 @@ use Throwable;
 
 class ResetPasswordAttemptService
 {
-    public function createForEmail(string $email, string $tenantCode, string $reason = 'manual'): void
-    {
+    public function createForEmail(
+        string $email,
+        string $tenantCode,
+        string $reason = ResetPasswordAttempt::REASON_MANUAL,
+    ): void {
         $emailFingerprint = $this->emailFingerprint($email);
 
         try {
@@ -22,28 +26,12 @@ class ResetPasswordAttemptService
                     ->lockForUpdate()
                     ->first();
 
-                if ($user === null) {
-                    Log::warning('Password reset attempt was not created because the user was not found.', [
-                        'email_fingerprint' => $emailFingerprint,
-                    ]);
-
-                    return null;
-                }
-
-                $user->resetPasswordAttempts()
-                    ->whereIn('status', [
-                        ResetPasswordAttempt::STATUS_PENDING,
-                        ResetPasswordAttempt::STATUS_VALIDATED,
-                    ])
-                    ->update(['status' => ResetPasswordAttempt::STATUS_EXPIRED]);
-
-                $attempt = $user->resetPasswordAttempts()->create([
-                    'codigo' => $this->generateCode(),
-                    'reason' => $reason,
-                    'status' => ResetPasswordAttempt::STATUS_PENDING,
-                ]);
-
-                return $attempt->getKey();
+                return $this->createAttemptForUser(
+                    $user,
+                    $reason,
+                    $emailFingerprint,
+                    'Password reset attempt was not created because the user was not found.',
+                );
             });
         } catch (Throwable $exception) {
             Log::error('Failed to create password reset attempt.', [
@@ -54,20 +42,108 @@ class ResetPasswordAttemptService
             throw $exception;
         }
 
-        if ($attemptId !== null) {
-            try {
-                PasswordResetRequested::dispatch($attemptId, $tenantCode);
-            } catch (Throwable $exception) {
-                Log::error('Failed to dispatch password reset email.', [
-                    'attempt_id' => $attemptId,
-                    'tenant_code' => $tenantCode,
-                    'email_fingerprint' => $emailFingerprint,
-                    'exception' => $exception,
-                ]);
+        $this->dispatchPasswordResetRequested(
+            $attemptId,
+            $tenantCode,
+            PasswordResetRequested::CHANNEL_STOREFRONT,
+            $emailFingerprint,
+        );
+    }
 
-                throw $exception;
-            }
+    public function createForAdminAppEmail(
+        string $email,
+        string $reason = ResetPasswordAttempt::REASON_MANUAL,
+    ): void {
+        $emailFingerprint = $this->emailFingerprint($email);
+
+        try {
+            $result = DB::transaction(function () use ($email, $emailFingerprint, $reason): ?array {
+                $user = User::query()
+                    ->where('email', $email)
+                    ->where('rol_codigo', RoleCode::AdminApp->value)
+                    ->whereNotNull('tenant_codigo')
+                    ->lockForUpdate()
+                    ->first();
+
+                $attemptId = $this->createAttemptForUser(
+                    $user,
+                    $reason,
+                    $emailFingerprint,
+                    'AdminApp password reset attempt was not created because the user was not found.',
+                );
+
+                if ($user === null || $attemptId === null) {
+                    return null;
+                }
+
+                return [
+                    'attempt_id' => $attemptId,
+                    'tenant_code' => $user->tenant_codigo,
+                ];
+            });
+        } catch (Throwable $exception) {
+            Log::error('Failed to create AdminApp password reset attempt.', [
+                'email_fingerprint' => $emailFingerprint,
+                'exception' => $exception,
+            ]);
+
+            throw $exception;
         }
+
+        $this->dispatchPasswordResetRequested(
+            $result['attempt_id'] ?? null,
+            $result['tenant_code'] ?? null,
+            PasswordResetRequested::CHANNEL_ADMINAPP,
+            $emailFingerprint,
+        );
+    }
+
+    public function createForScannerEmail(
+        string $email,
+        string $reason = ResetPasswordAttempt::REASON_MANUAL,
+    ): void {
+        $emailFingerprint = $this->emailFingerprint($email);
+
+        try {
+            $result = DB::transaction(function () use ($email, $emailFingerprint, $reason): ?array {
+                $user = User::query()
+                    ->where('email', $email)
+                    ->where('rol_codigo', RoleCode::Scanner->value)
+                    ->whereNotNull('tenant_codigo')
+                    ->lockForUpdate()
+                    ->first();
+
+                $attemptId = $this->createAttemptForUser(
+                    $user,
+                    $reason,
+                    $emailFingerprint,
+                    'Scanner password reset attempt was not created because the user was not found.',
+                );
+
+                if ($user === null || $attemptId === null) {
+                    return null;
+                }
+
+                return [
+                    'attempt_id' => $attemptId,
+                    'tenant_code' => $user->tenant_codigo,
+                ];
+            });
+        } catch (Throwable $exception) {
+            Log::error('Failed to create Scanner password reset attempt.', [
+                'email_fingerprint' => $emailFingerprint,
+                'exception' => $exception,
+            ]);
+
+            throw $exception;
+        }
+
+        $this->dispatchPasswordResetRequested(
+            $result['attempt_id'] ?? null,
+            $result['tenant_code'] ?? null,
+            PasswordResetRequested::CHANNEL_SCANNER,
+            $emailFingerprint,
+        );
     }
 
     public function validateCode(string $email, string $code): bool
@@ -169,6 +245,61 @@ class ResetPasswordAttemptService
         }
     }
 
+    private function createAttemptForUser(
+        ?User $user,
+        string $reason,
+        string $emailFingerprint,
+        string $userNotFoundMessage,
+    ): ?int {
+        if ($user === null) {
+            Log::warning($userNotFoundMessage, [
+                'email_fingerprint' => $emailFingerprint,
+            ]);
+
+            return null;
+        }
+
+        $user->resetPasswordAttempts()
+            ->whereIn('status', [
+                ResetPasswordAttempt::STATUS_PENDING,
+                ResetPasswordAttempt::STATUS_VALIDATED,
+            ])
+            ->update(['status' => ResetPasswordAttempt::STATUS_EXPIRED]);
+
+        $attempt = $user->resetPasswordAttempts()->create([
+            'codigo' => $this->generateCode(),
+            'reason' => $reason,
+            'status' => ResetPasswordAttempt::STATUS_PENDING,
+        ]);
+
+        return $attempt->getKey();
+    }
+
+    private function dispatchPasswordResetRequested(
+        ?int $attemptId,
+        ?string $tenantCode,
+        string $channel,
+        string $emailFingerprint,
+    ): void {
+        if ($attemptId === null || $tenantCode === null) {
+            return;
+        }
+
+        try {
+            PasswordResetRequested::dispatch($attemptId, $tenantCode, $channel);
+        } catch (Throwable $exception) {
+            Log::error('Failed to dispatch password reset email.', [
+                'attempt_id' => $attemptId,
+                'tenant_code' => $tenantCode,
+                'channel' => $channel,
+                'email_fingerprint' => $emailFingerprint,
+                'exception' => $exception,
+            ]);
+
+            throw $exception;
+        }
+    }
+
     private function generateCode(): string
     {
         return str_pad((string) random_int(0, 9999), 4, '0', STR_PAD_LEFT);

app/Domains/Auth/routes/adminapp.php

@@ -2,10 +2,19 @@
 
 use App\Domains\Auth\Controllers\AdminAppLoginController;
 use App\Domains\Auth\Controllers\AdminAppMeController;
+use App\Domains\Auth\Controllers\CreateAdminAppResetPasswordAttemptController;
+use App\Domains\Auth\Controllers\ResetPasswordController;
+use App\Domains\Auth\Controllers\ValidateResetPasswordAttemptController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('v1/adminapp')->group(function (): void {
     Route::post('login', AdminAppLoginController::class)->middleware('throttle:login');
+    Route::post('password/reset-attempts', CreateAdminAppResetPasswordAttemptController::class)
+        ->middleware('throttle:5,1');
+    Route::post('password/reset-attempts/validate', ValidateResetPasswordAttemptController::class)
+        ->middleware('throttle:10,1');
+    Route::post('password/reset', ResetPasswordController::class)
+        ->middleware('throttle:5,1');
     Route::middleware(['auth:sanctum', 'adminapp.tenant'])
         ->get('me', AdminAppMeController::class);
 });

app/Domains/Auth/routes/scanner.php

@@ -1,11 +1,20 @@
 <?php
 
+use App\Domains\Auth\Controllers\CreateScannerResetPasswordAttemptController;
+use App\Domains\Auth\Controllers\ResetPasswordController;
 use App\Domains\Auth\Controllers\ScannerLoginController;
 use App\Domains\Auth\Controllers\ScannerMeController;
+use App\Domains\Auth\Controllers\ValidateResetPasswordAttemptController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('v1/scanner')->group(function (): void {
     Route::post('login', ScannerLoginController::class)->middleware('throttle:login');
+    Route::post('password/reset-attempts', CreateScannerResetPasswordAttemptController::class)
+        ->middleware('throttle:5,1');
+    Route::post('password/reset-attempts/validate', ValidateResetPasswordAttemptController::class)
+        ->middleware('throttle:10,1');
+    Route::post('password/reset', ResetPasswordController::class)
+        ->middleware('throttle:5,1');
     Route::middleware(['auth:sanctum', 'scanner.tenant'])
         ->get('me', ScannerMeController::class);
 });

app/Domains/Bootstrap/Controllers/TenantBootstrapController.php

@@ -14,7 +14,10 @@ class TenantBootstrapController extends Controller
     public function __invoke(TenantBootstrapRequest $request): TenantResource
     {
         return TenantResource::make(
-            $this->bootstrapService->get((string) $request->validated('dominio'))
+            $this->bootstrapService->get(
+                (string) $request->validated('dominio'),
+                (string) $request->validated('path'),
+            )
         );
     }
 }

app/Domains/Bootstrap/Requests/TenantBootstrapRequest.php

@@ -10,6 +10,8 @@ class TenantBootstrapRequest extends FormRequest
 {
     protected bool $hasInvalidDomain = false;
 
+    protected bool $hasInvalidPath = false;
+
     public function authorize(): bool
     {
         return true;
@@ -17,13 +19,20 @@ class TenantBootstrapRequest extends FormRequest
 
     protected function prepareForValidation(): void
     {
-        $rawDomain = $this->route('dominio');
+        $rawDomain = $this->query('dominio', $this->route('dominio'));
+        $rawPath = $this->query('path', '/');
         $normalizedDomain = TenantDomainNormalizer::normalize($rawDomain);
+        $normalizedPath = TenantDomainNormalizer::normalizePath($rawPath);
 
         $this->hasInvalidDomain = TenantDomainNormalizer::hasValue($rawDomain)
             && $normalizedDomain === null;
 
-        $this->merge(['dominio' => $normalizedDomain]);
+        $this->hasInvalidPath = ! is_string($rawPath) || $normalizedPath === null;
+
+        $this->merge([
+            'dominio' => $normalizedDomain,
+            'path' => $normalizedPath,
+        ]);
     }
 
     /** @return array<string, mixed> */
@@ -41,6 +50,17 @@ class TenantBootstrapRequest extends FormRequest
                 'string',
                 'max:255',
             ],
+            'path' => [
+                'bail',
+                function (string $attribute, mixed $value, Closure $fail): void {
+                    if ($this->hasInvalidPath) {
+                        $fail("The {$attribute} field must contain a valid URL path.");
+                    }
+                },
+                'required',
+                'string',
+                'max:2048',
+            ],
         ];
     }
 }

app/Domains/Bootstrap/Services/TenantBootstrapService.php

@@ -5,15 +5,32 @@ namespace App\Domains\Bootstrap\Services;
 use App\Domains\Authorization\Enums\RoleCode;
 use App\Domains\Tenant\Models\Tenant;
 use App\Domains\Tenant\Services\TenantInformationService;
+use App\Domains\Tenant\Support\TenantDomainNormalizer;
+use Illuminate\Database\Eloquent\ModelNotFoundException;
 
 class TenantBootstrapService
 {
     public function __construct(protected TenantInformationService $tenantInformationService) {}
 
-    public function get(string $domain): Tenant
+    public function get(string $domain, string $path = '/'): Tenant
     {
+        $candidateBasePaths = TenantDomainNormalizer::basePathCandidates($path);
+        $tenantsByBasePath = Tenant::query()
+            ->where('dominio', $domain)
+            ->whereIn('base_path', $candidateBasePaths)
+            ->get()
+            ->keyBy('base_path');
+
+        $tenant = collect($candidateBasePaths)
+            ->map(fn (string $candidate): ?Tenant => $tenantsByBasePath->get($candidate))
+            ->first(fn (?Tenant $candidate): bool => $candidate !== null);
+
+        if (! $tenant instanceof Tenant) {
+            throw (new ModelNotFoundException)->setModel(Tenant::class);
+        }
+
         return $this->tenantInformationService->load(
-            Tenant::query()->where('dominio', $domain)->firstOrFail(),
+            $tenant,
             [
                 'menues' => fn ($query) => $query->whereHas(
                     'roles',

app/Domains/Bootstrap/documentacion/README.md

@@ -12,12 +12,12 @@ Entrega la configuración inicial que necesitan la tienda y el panel administrat
 
 ## Endpoints
 
-- `GET /tenants/bootstrap/{dominio}`: bootstrap público de la tienda.
+- `GET /tenants/bootstrap?dominio={hostname}&path={path}`: bootstrap público de la tienda. Resuelve la clave de tenant más específica que sea prefijo completo del path y usa el dominio raíz como fallback.
 - Endpoint de bootstrap bajo `/v1/adminapp`, protegido por `auth:sanctum` y `adminapp.tenant`.
 
 ## Validación
 
-`TenantBootstrapRequest` valida el dominio recibido. `AdminAppBootstrapRequest` reutiliza ese contrato para el panel.
+`TenantBootstrapRequest` valida y normaliza por separado el hostname y el path recibidos. `AdminAppBootstrapRequest` reutiliza ese contrato para el panel.
 
 ## Dependencias
 

app/Domains/Bootstrap/routes/api.php

@@ -3,8 +3,7 @@
 use App\Domains\Bootstrap\Controllers\TenantBootstrapController;
 use Illuminate\Support\Facades\Route;
 
-Route::get('tenants/bootstrap/{dominio}', TenantBootstrapController::class)
-    ->where('dominio', '.*');
+Route::get('tenants/bootstrap', TenantBootstrapController::class);
 
 require __DIR__.'/adminapp.php';
 require __DIR__.'/scanner.php';

app/Domains/Cart/Models/Cart.php

@@ -5,8 +5,11 @@ namespace App\Domains\Cart\Models;
 use App\Domains\Auth\Models\User;
 use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\Inventory;
+use App\Domains\Catalog\Models\StockReservation;
 use App\Domains\Catalog\Models\Variant;
 use App\Domains\Catalog\Services\CatalogInventoryService;
+use App\Domains\Catalog\Services\StockReservationService;
+use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Purchase\Services\UserPurchaseLimitService;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
@@ -24,6 +27,9 @@ use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
     'user_id',
     'guest_token',
     'status',
+    'origin',
+    'current_purchase_id',
+    'current_stock_reservation_id',
 ])]
 class Cart extends Model
 {
@@ -32,10 +38,26 @@ class Cart extends Model
 
     protected $table = 'carritos';
 
+    public const STATUS_ACTIVE = 'active';
+
+    public const STATUS_CHECKOUT = 'checkout';
+
+    public const STATUS_CONVERTED = 'converted';
+
+    public const STATUS_EXPIRED = 'expired';
+
+    public const STATUS_ABANDONED = 'abandoned';
+
+    public const ORIGIN_USER = 'user';
+
+    public const ORIGIN_DIRECT_CHECKOUT = 'direct_checkout';
+
     protected function casts(): array
     {
         return [
             'user_id' => 'integer',
+            'current_purchase_id' => 'integer',
+            'current_stock_reservation_id' => 'integer',
         ];
     }
 
@@ -63,6 +85,27 @@ class Cart extends Model
         return $this->hasMany(CartItem::class, 'cart_id');
     }
 
+    /** @return HasMany<Purchase, $this> */
+    public function purchases(): HasMany
+    {
+        return $this->hasMany(Purchase::class, 'cart_id');
+    }
+
+    /** @return BelongsTo<Purchase, $this> */
+    public function currentPurchase(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'current_purchase_id');
+    }
+
+    /** @return BelongsTo<StockReservation, $this> */
+    public function currentStockReservation(): BelongsTo
+    {
+        return $this->belongsTo(
+            StockReservation::class,
+            'current_stock_reservation_id',
+        );
+    }
+
     public function getTotalAmount(): float
     {
         $items = $this->relationLoaded('items')
@@ -85,14 +128,20 @@ class Cart extends Model
         }
 
         return DB::transaction(function () use ($catalogItemId, $variantId, $quantity): CartItem {
-            self::query()->whereKey($this->getKey())->lockForUpdate()->firstOrFail();
+            $this->invalidateCurrentCheckout();
+            app(StockReservationService::class)->assertCartReservationUsable($this);
             $selectedItem = $this->resolveScopedItem($catalogItemId, $variantId, true);
             $cartQuantity = (int) $this->items()
                 ->where('catalog_item_id', $catalogItemId)
                 ->sum('cantidad');
-            $this->assertUserPurchaseLimit($selectedItem, $cartQuantity + $quantity);
             $inventoryService = app(CatalogInventoryService::class);
             $availableQuantity = $inventoryService->availableQuantity($selectedItem);
+            $this->assertUserPurchaseLimit(
+                $selectedItem,
+                $cartQuantity + $quantity,
+                heldQuantity: $cartQuantity,
+                maximumAddableCeiling: $availableQuantity,
+            );
 
             if ($availableQuantity !== null && $availableQuantity < $quantity) {
                 throw ValidationException::withMessages([
@@ -118,7 +167,7 @@ class Cart extends Model
                 $item->save();
             }
 
-            $inventoryService->reserve($selectedItem, $quantity);
+            app(StockReservationService::class)->syncCart($this);
 
             return $item->fresh();
         });
@@ -129,6 +178,7 @@ class Cart extends Model
         int $quantity,
         ?int $variantId = null,
         bool $updateVariant = false,
+        ?int $excludedPurchaseId = null,
     ): CartItem {
         if ($quantity <= 0) {
             throw ValidationException::withMessages([
@@ -141,7 +191,11 @@ class Cart extends Model
             $quantity,
             $variantId,
             $updateVariant,
+            $excludedPurchaseId,
         ): CartItem {
+            $this->invalidateCurrentCheckout();
+            app(StockReservationService::class)->assertCartReservationUsable($this);
+
             /** @var CartItem $item */
             $item = $this->items()
                 ->where('id', $cartItemId)
@@ -165,12 +219,15 @@ class Cart extends Model
                     ->where('catalog_item_id', $item->catalog_item_id)
                     ->whereKeyNot($item->getKey())
                     ->sum('cantidad');
+                $nextAvailableQuantity = $inventoryService->availableQuantity($nextSelection);
                 $this->assertUserPurchaseLimit(
                     $nextSelection,
                     $otherVariantsQuantity + $quantity,
+                    $excludedPurchaseId,
+                    $otherVariantsQuantity + $item->cantidad,
+                    $nextAvailableQuantity,
                 );
 
-                $inventoryService->release($currentSelection, $item->cantidad);
                 $availableQuantity = $inventoryService->availableQuantity($nextSelection);
 
                 if ($availableQuantity !== null && $availableQuantity < $quantity) {
@@ -186,12 +243,11 @@ class Cart extends Model
                     ->lockForUpdate()
                     ->first();
 
-                $inventoryService->reserve($nextSelection, $quantity);
-
                 if ($targetItem !== null) {
                     $targetItem->cantidad += $quantity;
                     $targetItem->save();
                     $item->delete();
+                    app(StockReservationService::class)->syncCart($this);
 
                     return $targetItem->fresh();
                 }
@@ -199,11 +255,13 @@ class Cart extends Model
                 $item->variant_id = $variantId;
                 $item->cantidad = $quantity;
                 $item->save();
+                app(StockReservationService::class)->syncCart($this);
 
                 return $item->fresh();
             }
 
             $delta = $quantity - $item->cantidad;
+            $availableQuantity = $inventoryService->availableQuantity($currentSelection);
 
             if ($delta > 0) {
                 $otherVariantsQuantity = (int) $this->items()
@@ -213,11 +271,12 @@ class Cart extends Model
                 $this->assertUserPurchaseLimit(
                     $currentSelection,
                     $otherVariantsQuantity + $quantity,
+                    $excludedPurchaseId,
+                    $otherVariantsQuantity + $item->cantidad,
+                    $availableQuantity,
                 );
             }
 
-            $availableQuantity = $inventoryService->availableQuantity($currentSelection);
-
             if ($delta > 0 && $availableQuantity !== null && $availableQuantity < $delta) {
                 $maxAvailable = $availableQuantity + $item->cantidad;
                 throw ValidationException::withMessages([
@@ -227,14 +286,7 @@ class Cart extends Model
 
             $item->cantidad = $quantity;
             $item->save();
-
-            if ($delta > 0) {
-                $inventoryService->reserve($currentSelection, $delta);
-            }
-
-            if ($delta < 0) {
-                $inventoryService->release($currentSelection, abs($delta));
-            }
+            app(StockReservationService::class)->syncCart($this);
 
             return $item->fresh();
         });
@@ -243,25 +295,79 @@ class Cart extends Model
     public function removeItem(int $cartItemId): void
     {
         DB::transaction(function () use ($cartItemId): void {
+            $this->invalidateCurrentCheckout();
+            app(StockReservationService::class)->assertCartReservationUsable($this);
+
             /** @var CartItem $item */
             $item = $this->items()
                 ->where('id', $cartItemId)
                 ->lockForUpdate()
                 ->firstOrFail();
 
-            $selectedItem = $this->resolveScopedItem(
-                $item->catalog_item_id,
-                $item->variant_id,
-                true,
-            );
-            app(CatalogInventoryService::class)->release(
-                $selectedItem,
-                $item->cantidad,
-            );
             $item->delete();
+            app(StockReservationService::class)->syncCart($this);
         });
     }
 
+    private function invalidateCurrentCheckout(): void
+    {
+        $candidatePurchaseId = self::query()
+            ->whereKey($this->getKey())
+            ->value('current_purchase_id');
+        $currentPurchase = $candidatePurchaseId === null
+            ? null
+            : Purchase::query()->lockForUpdate()->find($candidatePurchaseId);
+
+        /** @var self $cart */
+        $cart = self::query()->lockForUpdate()->findOrFail($this->getKey());
+
+        if ($cart->current_purchase_id !== $candidatePurchaseId) {
+            if ($cart->current_purchase_id !== null) {
+                throw ValidationException::withMessages([
+                    'cart' => __('api.purchase.checkout_in_progress'),
+                ]);
+            }
+
+            $this->current_purchase_id = null;
+
+            return;
+        }
+
+        if ($currentPurchase === null) {
+            return;
+        }
+
+        if ($currentPurchase->status === Purchase::STATUS_PAID) {
+            throw ValidationException::withMessages([
+                'cart' => __('api.cart.editing_disabled'),
+            ]);
+        }
+
+        if (in_array($currentPurchase->status, [
+            Purchase::STATUS_CREATED,
+            Purchase::STATUS_PENDING_PAYMENT,
+        ], true)) {
+            app(StockReservationService::class)->returnToCart($currentPurchase, $cart);
+            $currentPurchase->update([
+                'status' => Purchase::STATUS_SUPERSEDED,
+            ]);
+
+            $this->current_purchase_id = null;
+
+            return;
+        }
+
+        app(StockReservationService::class)->releaseForPurchase(
+            $currentPurchase,
+            reason: StockReservationService::REASON_PURCHASE_SUPERSEDED,
+        );
+        self::query()
+            ->whereKey($cart->getKey())
+            ->where('current_purchase_id', $currentPurchase->getKey())
+            ->update(['current_purchase_id' => null]);
+        $this->current_purchase_id = null;
+    }
+
     protected function resolveScopedItem(
         int $catalogItemId,
         ?int $variantId,
@@ -334,6 +440,9 @@ class Cart extends Model
     private function assertUserPurchaseLimit(
         CatalogItem|Variant $selectedItem,
         int $cartQuantity,
+        ?int $excludedPurchaseId = null,
+        int $heldQuantity = 0,
+        ?int $maximumAddableCeiling = null,
     ): void {
         if ($this->user_id === null) {
             return;
@@ -347,6 +456,10 @@ class Cart extends Model
             $catalogItem,
             $this->user_id,
             $cartQuantity,
+            $excludedPurchaseId,
+            $this->getKey(),
+            $heldQuantity,
+            $maximumAddableCeiling,
             field: 'cantidad',
         );
     }

app/Domains/Cart/Resources/CartItemResource.php

@@ -5,6 +5,7 @@ namespace App\Domains\Cart\Resources;
 use App\Domains\Cart\Models\CartItem;
 use App\Domains\Catalog\Enums\InventoryPolicy;
 use App\Domains\Catalog\Models\Variant;
+use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -20,12 +21,16 @@ class CartItemResource extends JsonResource
     {
         $selectedItem = $this->selectedItem();
         $imageUrl = null;
+        $tenant = $request->route('tenant');
+        $displayImage = ! $tenant instanceof Tenant || $tenant->display_cart_item_images;
+        $includeVariants = $tenant instanceof Tenant
+            && $tenant->cart_editing_policy->allowsVariantChanges();
 
-        if ($selectedItem?->relationLoaded('attachments')) {
+        if ($displayImage && $selectedItem?->relationLoaded('attachments')) {
             $imageUrl = $selectedItem->attachments->first()?->getTemporaryUrl(1440);
         }
 
-        if ($imageUrl === null && $this->catalogItem?->relationLoaded('attachments')) {
+        if ($displayImage && $imageUrl === null && $this->catalogItem?->relationLoaded('attachments')) {
             $imageUrl = $this->catalogItem->attachments->first()?->getTemporaryUrl(1440);
         }
 
@@ -35,20 +40,29 @@ class CartItemResource extends JsonResource
             'precio_unitario' => $this->formatMoney($selectedItem?->getPrice()),
             'catalog_item_id' => $this->catalog_item_id,
             'variant_id' => $this->variant_id,
-            'product' => $selectedItem === null ? null : [
-                'nombre' => $selectedItem->getName(),
-                'imagen' => $imageUrl,
-                'variants' => $this->catalogItem->visibleVariants($this->variant_id)
-                    ->map(fn (Variant $variant): array => [
-                        'id' => $variant->id,
-                        'precio' => $this->formatMoney($variant->getPrice()),
-                        'stock_tecnico' => $this->catalogItem->inventory_policy === InventoryPolicy::Unlimited
-                            ? null
-                            : $variant->inventory->availableStock(),
-                        'values' => $variant->selectionOptions($this->catalogItem->itemAttributes),
-                    ])
+            'nombre' => $selectedItem?->getName(),
+            'imagen' => $imageUrl,
+            'variant' => $this->variant === null ? null : $this->variantData($this->variant),
+            'variants' => $this->when(
+                $includeVariants,
+                fn () => $this->catalogItem
+                    ->visibleVariants($this->variant_id)
+                    ->map(fn (Variant $variant): array => $this->variantData($variant))
                     ->values(),
-            ],
+            ),
+        ];
+    }
+
+    /** @return array<string, mixed> */
+    protected function variantData(Variant $variant): array
+    {
+        return [
+            'id' => $variant->id,
+            'precio' => $this->formatMoney($variant->precio ?? $this->catalogItem->precio),
+            'stock_tecnico' => $this->catalogItem->inventory_policy === InventoryPolicy::Unlimited
+                ? null
+                : $variant->inventory->availableStock(),
+            'values' => $variant->selectorOptions($this->catalogItem->itemAttributes),
         ];
     }
 

app/Domains/Cart/Services/CartService.php

@@ -4,10 +4,14 @@ namespace App\Domains\Cart\Services;
 
 use App\Domains\Auth\Models\User;
 use App\Domains\Cart\Models\Cart;
+use App\Domains\Catalog\Exceptions\StockReservationExpiredException;
+use App\Domains\Catalog\Services\ExpireStockReservationsService;
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
 use Symfony\Component\HttpFoundation\Cookie;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 
@@ -21,13 +25,13 @@ class CartService
             return $this->makeEmptyCart($tenant);
         }
 
-        $cart = $this->findCart($tenant, $resolvedIdentity['identity']);
+        $cart = $this->resolveCart($tenant, $resolvedIdentity['identity']);
 
         if ($cart === null) {
             return $this->makeEmptyCart($tenant);
         }
 
-        return $this->loadCart($cart);
+        return $this->loadCart($cart, $tenant);
     }
 
     /**
@@ -46,7 +50,7 @@ class CartService
         $cart->addItem($catalogItemId, $variantId, $quantity);
 
         return [
-            'cart' => $this->loadCart($cart),
+            'cart' => $this->loadCart($cart, $tenant),
             'guest_token' => $resolvedIdentity['generated_guest_token'],
         ];
     }
@@ -59,34 +63,58 @@ class CartService
         ?int $variantId,
         bool $updateVariant,
     ): Cart {
+        if ($updateVariant && ! $tenant->cart_editing_policy->allowsVariantChanges()) {
+            throw ValidationException::withMessages([
+                'variant_id' => __('api.cart.variant_change_disabled'),
+            ]);
+        }
+
+        if (! $updateVariant && ! $tenant->cart_editing_policy->allowsQuantityChanges()) {
+            throw ValidationException::withMessages([
+                'cantidad' => __('api.cart.editing_disabled'),
+            ]);
+        }
+
         $identity = $this->requireIdentity($request);
         $cart = $this->findCartOrFail($tenant, $identity);
         $cart->updateItem($cartItemId, $quantity, $variantId, $updateVariant);
 
-        return $this->loadCart($cart);
+        return $this->loadCart($cart, $tenant);
     }
 
     public function removeItem(Tenant $tenant, Request $request, int $cartItemId): Cart
     {
+        if (! $tenant->cart_editing_policy->allowsRemoval()) {
+            throw ValidationException::withMessages([
+                'cart_item' => __('api.cart.editing_disabled'),
+            ]);
+        }
+
         $identity = $this->requireIdentity($request);
         $cart = $this->findCartOrFail($tenant, $identity);
         $cart->removeItem($cartItemId);
 
-        return $this->loadCart($cart);
+        return $this->loadCart($cart, $tenant);
     }
 
     public function makeGuestTokenCookie(string $guestToken): Cookie
     {
-        return cookie(
-            'guest_token',
-            $guestToken,
-            60 * 24 * 180,
-            '/',
-            null,
-            false,
-            true,
-            false,
-            'lax',
+        $secure = (bool) config('session.secure');
+        $sameSite = config('session.same_site');
+        $partitioned = (bool) config('session.partitioned')
+            || ($secure && strtolower((string) $sameSite) === 'none');
+
+        return Cookie::create(
+            name: 'guest_token',
+            value: $guestToken,
+            expire: now()->addDays(180),
+            path: '/',
+            domain: config('session.domain'),
+            secure: $secure,
+            httpOnly: true,
+            raw: false,
+            sameSite: $sameSite,
+            partitioned: $partitioned,
         );
     }
 
@@ -94,7 +122,7 @@ class CartService
     {
         $cart = new Cart([
             'tenant_codigo' => $tenant->codigo,
-            'status' => 'active',
+            'status' => Cart::STATUS_ACTIVE,
         ]);
 
         $cart->setRelation('items', collect());
@@ -102,22 +130,32 @@ class CartService
         return $cart;
     }
 
-    protected function loadCart(Cart $cart): Cart
+    protected function loadCart(Cart $cart, Tenant $tenant): Cart
     {
-        return $cart->fresh()->load([
+        $relations = [
             'items.catalogItem.attachments',
             'items.catalogItem.inventory',
             'items.catalogItem.itemAttributes.attribute',
-            'items.catalogItem.variants.inventory',
-            'items.catalogItem.variants.definitions.itemAttribute.attribute.options',
-            'items.catalogItem.variants.eventDates',
-            'items.catalogItem.variants.eventDate',
             'items.variant.attachments',
             'items.variant.inventory',
             'items.variant.definitions.itemAttribute.attribute.options',
             'items.variant.eventDates',
             'items.variant.eventDate',
-        ]);
+        ];
+
+        if ($tenant->cart_editing_policy->allowsVariantChanges()) {
+            $relations = [
+                ...$relations,
+                'items.catalogItem.variants' => fn ($query) => $query->orderBy('id'),
+                'items.catalogItem.variants.inventory',
+                'items.catalogItem.variants.definitions' => fn ($query) => $query->orderBy('id'),
+                'items.catalogItem.variants.definitions.itemAttribute.attribute.options',
+                'items.catalogItem.variants.eventDates',
+                'items.catalogItem.variants.eventDate',
+            ];
+        }
+
+        return $cart->fresh()->load($relations);
     }
 
     /**
@@ -185,12 +223,14 @@ class CartService
     {
         return Cart::query()
             ->where('tenant_codigo', $tenant->codigo)
-            ->where('status', 'active')
+            ->where('origin', Cart::ORIGIN_USER)
+            ->whereIn('status', [Cart::STATUS_ACTIVE, Cart::STATUS_EXPIRED])
             ->when(
                 $identity['user_id'] !== null,
                 fn ($query) => $query->where('user_id', $identity['user_id']),
                 fn ($query) => $query->where('guest_token', $identity['guest_token']),
             )
+            ->orderByRaw('CASE WHEN status = ? THEN 0 ELSE 1 END', [Cart::STATUS_ACTIVE])
             ->first();
     }
 
@@ -199,7 +239,7 @@ class CartService
      */
     protected function findCartOrFail(Tenant $tenant, array $identity): Cart
     {
-        $cart = $this->findCart($tenant, $identity);
+        $cart = $this->resolveCart($tenant, $identity, replaceExpired: false);
 
         if ($cart === null) {
             throw new NotFoundHttpException('Cart not found.');
@@ -212,10 +252,73 @@ class CartService
      * @param  array{user_id: ?int, guest_token: ?string}  $identity
      */
     protected function findOrCreateCart(Tenant $tenant, array $identity): Cart
+    {
+        return $this->resolveCart($tenant, $identity)
+            ?? $this->createCart($tenant, $identity);
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function resolveCart(
+        Tenant $tenant,
+        array $identity,
+        bool $replaceExpired = true,
+    ): ?Cart {
+        $cart = $this->findCart($tenant, $identity);
+
+        if ($cart?->status === Cart::STATUS_ACTIVE
+            && $cart->current_stock_reservation_id !== null
+            && app(ExpireStockReservationsService::class)
+                ->expireIfOverdue($cart->current_stock_reservation_id)) {
+            $cart = $this->findCart($tenant, $identity);
+        }
+
+        if ($cart?->status === Cart::STATUS_EXPIRED) {
+            if (! $replaceExpired) {
+                throw new StockReservationExpiredException;
+            }
+
+            return $this->replaceExpiredCart($cart, $tenant, $identity);
+        }
+
+        if ($cart !== null) {
+            return $cart;
+        }
+
+        return null;
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function replaceExpiredCart(Cart $expiredCart, Tenant $tenant, array $identity): Cart
+    {
+        return DB::transaction(function () use ($expiredCart, $tenant, $identity): Cart {
+            /** @var Cart|null $lockedCart */
+            $lockedCart = Cart::query()->lockForUpdate()->find($expiredCart->getKey());
+
+            if ($lockedCart?->status === Cart::STATUS_EXPIRED) {
+                $lockedCart->update([
+                    'status' => Cart::STATUS_ABANDONED,
+                    'current_purchase_id' => null,
+                ]);
+            }
+
+            return $this->findCart($tenant, $identity)
+                ?? $this->createCart($tenant, $identity);
+        });
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function createCart(Tenant $tenant, array $identity): Cart
     {
         $attributes = [
             'tenant_codigo' => $tenant->codigo,
-            'status' => 'active',
+            'status' => Cart::STATUS_ACTIVE,
+            'origin' => Cart::ORIGIN_USER,
         ];
 
         if ($identity['user_id'] !== null) {

app/Domains/Cart/Services/GuestCartMergeService.php

@@ -34,6 +34,10 @@ class GuestCartMergeService
                 ->first();
 
             if ($userCart !== null) {
+                $userCart->items()
+                    ->orderBy('id')
+                    ->pluck('id')
+                    ->each(fn (int $itemId) => $userCart->removeItem($itemId));
                 $userCart->update([
                     'status' => 'converted',
                 ]);

app/Domains/Cart/documentacion/README.md

@@ -6,8 +6,8 @@ Gestiona el carrito activo de un tenant tanto para visitantes como para usuarios
 
 ## Modelo
 
-- `Cart`: pertenece a un tenant y opcionalmente a un usuario; calcula el total y permite agregar, actualizar o quitar ítems.
-- `CartItem`: referencia un `CatalogItem` y, opcionalmente, una `Variant`; expone la selección efectiva.
+- `Cart`: pertenece a un tenant y opcionalmente a un usuario; calcula el total, permite agregar, actualizar o quitar ítems y apunta a su reserva de stock vigente mediante `current_stock_reservation_id`.
+- `CartItem`: referencia un `CatalogItem` y, opcionalmente, una `Variant`; sólo persiste la selección y cantidad, y expone siempre los datos vigentes del catálogo.
 
 ## Servicios
 
@@ -25,8 +25,14 @@ Bajo `/tenants/{tenant:codigo}`:
 
 ## Contratos
 
-`AddCartItemRequest` y `UpdateCartItemQuantityRequest` validan selección y cantidad. `CartResource` y `CartItemResource` estabilizan la respuesta pública.
+`AddCartItemRequest` y `UpdateCartItemQuantityRequest` validan selección y cantidad. `CartResource` y `CartItemResource` estabilizan la respuesta pública. Cada ítem expone `nombre`, `imagen` y `precio_unitario` en la raíz, priorizando la variante seleccionada y usando el catálogo base como respaldo. La variante seleccionada se serializa en `variant`; las variantes alternativas no forman parte de la respuesta del carrito.
 
 ## Dependencias y reglas
 
 Depende de `Catalog` para productos y variantes, de `Tenant` para aislar datos y de `Auth` cuando existe usuario. Toda operación debe comprobar que carrito e ítem pertenecen al tenant actual.
+
+Un carrito puede pasar a `checkout`. Las compras directas usan un carrito técnico con `origin=direct_checkout`; los carritos normales conservan `origin=user` y pueden restaurarse al cancelar o vencer la compra.
+
+Cada edición sincroniza una única reserva para el carrito completo. Si varios ítems o bundles consumen el mismo inventario, se persiste una sola línea con la cantidad agregada. Al editar durante checkout, la compra anterior queda `superseded`, se desvincula y el carrito conserva la misma reserva activa con sus líneas actualizadas.
+
+El comando unificado `php artisan reservations:expire` recorre una sola vez las reservas activas cuyo `expires_at` haya vencido. Cuando pertenecen a un carrito, conserva la reserva y sus líneas como historial, libera el stock como conjunto y cambia el carrito asociado a `expired` sin eliminar sus ítems. Al volver a resolver ese carrito desde la API, el anterior pasa automáticamente a `abandoned` y se crea uno activo y vacío para la misma identidad. El cliente nunca necesita reiniciarlo explícitamente. La API también materializa este vencimiento al acceder al carrito aunque el comando programado todavía no haya corrido.

app/Domains/Catalog/Controllers/CatalogController.php

@@ -2,10 +2,12 @@
 
 namespace App\Domains\Catalog\Controllers;
 
+use App\Domains\Cart\Services\CartService;
 use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\Category;
 use App\Domains\Catalog\Models\FeaturedGroup;
 use App\Domains\Catalog\Requests\CatalogItemDetailRequest;
+use App\Domains\Catalog\Requests\CatalogVariantOptionsRequest;
 use App\Domains\Catalog\Requests\CategoryPageRequest;
 use App\Domains\Catalog\Requests\FeaturedGroupPageRequest;
 use App\Domains\Catalog\Requests\SearchCatalogItemsRequest;
@@ -14,16 +16,21 @@ use App\Domains\Catalog\Resources\CatalogFeaturedGroupResource;
 use App\Domains\Catalog\Resources\CatalogItemDetailResource;
 use App\Domains\Catalog\Resources\CatalogItemResource;
 use App\Domains\Catalog\Resources\CatalogSearchItemResource;
+use App\Domains\Catalog\Resources\CatalogVariantOptionsResource;
+use App\Domains\Catalog\Services\CatalogItemAllowanceService;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Catalog\Services\FeaturedGroupService;
+use App\Domains\Catalog\Services\VariantSelectionService;
 use App\Domains\Tenant\Models\Tenant;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\AnonymousResourceCollection;
+use Illuminate\Support\Facades\Auth;
 
 class CatalogController extends Controller
 {
-    public function index(Tenant $tenant, FeaturedGroupService $featuredGroupService): JsonResponse
+    public function index(Request $request, Tenant $tenant, FeaturedGroupService $featuredGroupService): JsonResponse
     {
         $featuredGroups = FeaturedGroup::query()
             ->where('tenant_code', $tenant->codigo)
@@ -33,7 +40,7 @@ class CatalogController extends Controller
         return response()->json($featuredGroups->map(
             fn (FeaturedGroup $featuredGroup): array => (new CatalogFeaturedGroupResource(
                 $featuredGroup,
-                $featuredGroupService->itemsResponse($featuredGroup, 1),
+                $featuredGroupService->itemsResponse($featuredGroup, 1, $this->userId($request)),
             ))->resolve()
         ));
     }
@@ -42,15 +49,17 @@ class CatalogController extends Controller
         SearchCatalogItemsRequest $request,
         Tenant $tenant,
         CatalogService $catalogService,
+        CatalogItemAllowanceService $allowances,
     ): AnonymousResourceCollection {
-        return CatalogSearchItemResource::collection(
-            $catalogService->search(
-                $tenant,
-                $request->validated('q'),
-                $tenant->search_items_per_page,
-                (int) $request->validated('page', 1),
-            )
+        $items = $catalogService->search(
+            $tenant,
+            $request->validated('q'),
+            $tenant->search_items_per_page,
+            (int) $request->validated('page', 1),
         );
+        $allowances->attach($items->getCollection(), $this->userId($request));
+
+        return CatalogSearchItemResource::collection($items);
     }
 
     public function category(
@@ -58,17 +67,19 @@ class CatalogController extends Controller
         Tenant $tenant,
         Category $category,
         CatalogService $catalogService,
+        CatalogItemAllowanceService $allowances,
     ): AnonymousResourceCollection {
         abort_unless($category->tenant_code === $tenant->codigo, 404);
 
-        return CatalogSearchItemResource::collection(
-            $catalogService->categoryItems(
-                $tenant,
-                $category,
-                $tenant->search_items_per_page,
-                (int) $request->validated('page', 1),
-            )
-        )->additional([
+        $items = $catalogService->categoryItems(
+            $tenant,
+            $category,
+            $tenant->search_items_per_page,
+            (int) $request->validated('page', 1),
+        );
+        $allowances->attach($items->getCollection(), $this->userId($request));
+
+        return CatalogSearchItemResource::collection($items)->additional([
             'category' => [
                 'id' => $category->id,
                 'nombre' => $category->nombre,
@@ -89,7 +100,11 @@ class CatalogController extends Controller
 
         $page = (int) $request->validated('page', 1);
 
-        return response()->json($featuredGroupService->itemsResponse($featuredGroup, $page));
+        return response()->json($featuredGroupService->itemsResponse(
+            $featuredGroup,
+            $page,
+            $this->userId($request),
+        ));
     }
 
     public function show(
@@ -97,15 +112,53 @@ class CatalogController extends Controller
         Tenant $tenant,
         CatalogItem $catalogItem,
         CatalogService $catalogService,
+        CatalogItemAllowanceService $allowances,
     ): CatalogItemDetailResource {
         abort_unless($catalogItem->tenant_code === $tenant->codigo, 404);
 
         $variantId = $request->validated('variant_id');
 
-        return CatalogItemDetailResource::make(
-            $catalogService->getDetail(
+        $item = $catalogService->getDetail(
+            $catalogItem,
+            $variantId === null ? null : (int) $variantId,
+        );
+        $allowances->attach(collect([$item]), $this->userId($request));
+
+        return CatalogItemDetailResource::make($item);
+    }
+
+    public function variantOptions(
+        CatalogVariantOptionsRequest $request,
+        Tenant $tenant,
+        CatalogItem $catalogItem,
+        VariantSelectionService $variantSelectionService,
+        CartService $cartService,
+    ): CatalogVariantOptionsResource {
+        abort_unless($catalogItem->tenant_code === $tenant->codigo, 404);
+
+        $includedVariantId = null;
+        $cartItemId = $request->validated('cart_item_id');
+        $selectedValues = $request->validated('selected_values', []);
+
+        if ($cartItemId !== null) {
+            $cartItem = $cartService->show($tenant, $request)
+                ->items
+                ->firstWhere('id', (int) $cartItemId);
+            abort_unless($cartItem?->catalog_item_id === $catalogItem->id, 404);
+            $includedVariantId = $cartItem->variant_id;
+
+            if ($selectedValues === [] && $cartItem->variant !== null) {
+                $selectedValues = $cartItem->variant
+                    ->selectorOptions($catalogItem->itemAttributes)
+                    ->all();
+            }
+        }
+
+        return CatalogVariantOptionsResource::make(
+            $variantSelectionService->options(
                 $catalogItem,
-                $variantId === null ? null : (int) $variantId,
+                $selectedValues,
+                $includedVariantId,
             )
         );
     }
@@ -124,4 +177,11 @@ class CatalogController extends Controller
             ->response()
             ->setStatusCode(201);
     }
+
+    private function userId(Request $request): ?int
+    {
+        $userId = $request->user()?->getAuthIdentifier() ?? Auth::guard('sanctum')->id();
+
+        return $userId === null ? null : (int) $userId;
+    }
 }

app/Domains/Catalog/Enums/GroupLayout.php

@@ -8,6 +8,7 @@ enum GroupLayout: string
     case Simple = 'simple';
     case SimpleVertical = 'simple_vertical';
     case Carousel = 'carousel';
+    case Single = 'single';
 
     /**
      * @return list<string>

app/Domains/Catalog/Enums/InventorySubject.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Catalog\Enums;
+
+enum InventorySubject: string
+{
+    case Product = 'product';
+    case Seat = 'seat';
+    case Ticket = 'ticket';
+
+    /** @return array<int, string> */
+    public static function values(): array
+    {
+        return array_column(self::cases(), 'value');
+    }
+}

app/Domains/Catalog/Enums/ProductLayout.php

@@ -7,6 +7,7 @@ enum ProductLayout: string
     case Row = 'row';
     case ColumnWithImage = 'column_with_image';
     case ColumnWithCart = 'column_with_cart';
+    case TicketSelector = 'ticket_selector';
 
     /**
      * @return list<string>

app/Domains/Catalog/Exceptions/StockReservationExpiredException.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Domains\Catalog\Exceptions;
+
+use RuntimeException;
+
+class StockReservationExpiredException extends RuntimeException
+{
+    public function __construct()
+    {
+        parent::__construct(__('api.cart.reservation_expired'));
+    }
+}

app/Domains/Catalog/Models/CatalogItem.php

@@ -5,11 +5,10 @@ namespace App\Domains\Catalog\Models;
 use App\Domains\Attachable\Models\Attachment;
 use App\Domains\Catalog\Enums\CatalogItemType;
 use App\Domains\Catalog\Enums\InventoryPolicy;
+use App\Domains\Catalog\Enums\InventorySubject;
 use App\Domains\Catalog\Services\CatalogInventoryService;
 use App\Domains\Tenant\Models\Tenant;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use App\Domains\Ticket\Models\Ticket;
-use App\Domains\Ticket\Models\ValidityTime;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Builder;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -17,6 +16,7 @@ use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\SoftDeletes;
 use Illuminate\Support\Collection;
 
 #[Fillable([
@@ -27,17 +27,17 @@ use Illuminate\Support\Collection;
     'type',
     'slug',
     'nombre',
+    'group_order',
     'descripcion',
     'precio',
     'inventory_policy',
+    'inventory_subject',
     'max_units_per_user',
     'has_tickets',
-    'ticket_generation_policy',
-    'validity_time_id',
 ])]
 class CatalogItem extends Model
 {
-    use HasFactory;
+    use HasFactory, SoftDeletes;
 
     public $timestamps = false;
 
@@ -46,8 +46,9 @@ class CatalogItem extends Model
     protected $attributes = [
         'type' => CatalogItemType::Standard->value,
         'inventory_policy' => InventoryPolicy::Tracked->value,
+        'inventory_subject' => InventorySubject::Product->value,
         'has_tickets' => false,
-        'ticket_generation_policy' => TicketGenerationPolicy::PerEventDate->value,
+        'group_order' => 0,
     ];
 
     protected function casts(): array
@@ -57,12 +58,12 @@ class CatalogItem extends Model
             'brand_id' => 'integer',
             'inventory_id' => 'integer',
             'type' => CatalogItemType::class,
+            'group_order' => 'integer',
             'precio' => 'decimal:2',
             'inventory_policy' => InventoryPolicy::class,
+            'inventory_subject' => InventorySubject::class,
             'max_units_per_user' => 'integer',
             'has_tickets' => 'boolean',
-            'ticket_generation_policy' => TicketGenerationPolicy::class,
-            'validity_time_id' => 'integer',
         ];
     }
 
@@ -114,12 +115,6 @@ class CatalogItem extends Model
         return $this->hasMany(Ticket::class, 'source_catalog_item_id');
     }
 
-    /** @return BelongsTo<ValidityTime, $this> */
-    public function validityTime(): BelongsTo
-    {
-        return $this->belongsTo(ValidityTime::class);
-    }
-
     /** @return BelongsToMany<Attribute, $this> */
     public function attributes(): BelongsToMany
     {
@@ -141,6 +136,12 @@ class CatalogItem extends Model
 
     /** @return BelongsToMany<Attachment, $this> */
     public function attachments(): BelongsToMany
+    {
+        return $this->allAttachments()->wherePivot('is_enabled', true);
+    }
+
+    /** @return BelongsToMany<Attachment, $this> */
+    public function allAttachments(): BelongsToMany
     {
         return $this->belongsToMany(
             Attachment::class,
@@ -148,7 +149,7 @@ class CatalogItem extends Model
             'catalog_item_id',
             'attachment_id'
         )
-            ->withPivot('orden')
+            ->withPivot(['orden', 'is_enabled'])
             ->wherePivotNull('variant_id')
             ->orderByPivot('orden');
     }
@@ -174,17 +175,29 @@ class CatalogItem extends Model
     }
 
     /** @param Builder<CatalogItem> $query */
-    public function scopeWhereVariantsAvailable(Builder $query): Builder
+    public function scopeWhereAvailable(Builder $query): Builder
     {
         return $query->where(function (Builder $query): void {
             $query
-                ->whereDoesntHave('variants')
-                ->orWhere('catalog_items.inventory_policy', InventoryPolicy::Unlimited->value)
+                ->where('catalog_items.inventory_policy', InventoryPolicy::Unlimited->value)
                 ->orWhereHas(
                     'variants.inventory',
                     fn (Builder $inventoryQuery): Builder => $inventoryQuery
                         ->whereColumn('inventories.real_stock', '>', 'inventories.reserved_stock')
-                );
+                )
+                ->orWhere(function (Builder $directItemQuery): void {
+                    $directItemQuery
+                        ->whereDoesntHave('variants')
+                        ->where(function (Builder $inventoryQuery): void {
+                            $inventoryQuery
+                                ->whereNull('catalog_items.inventory_id')
+                                ->orWhereHas(
+                                    'inventory',
+                                    fn (Builder $availableInventoryQuery): Builder => $availableInventoryQuery
+                                        ->whereColumn('inventories.real_stock', '>', 'inventories.reserved_stock')
+                                );
+                        });
+                });
         });
     }
 
@@ -208,6 +221,11 @@ class CatalogItem extends Model
         return $this->nombre;
     }
 
+    public function getSelectionLabel(): string
+    {
+        return $this->getName();
+    }
+
     public function getDescription(): ?string
     {
         return $this->descripcion;

app/Domains/Catalog/Models/Category.php

@@ -15,6 +15,7 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
     'tenant_code',
     'categoria_id',
     'nombre',
+    'is_enabled',
 ])]
 class Category extends Model
 {
@@ -22,6 +23,10 @@ class Category extends Model
 
     protected $table = 'categorias';
 
+    protected $attributes = [
+        'is_enabled' => true,
+    ];
+
     /**
      * @return array<string, string>
      */
@@ -29,6 +34,7 @@ class Category extends Model
     {
         return [
             'categoria_id' => 'integer',
+            'is_enabled' => 'boolean',
         ];
     }
 

app/Domains/Catalog/Models/FeaturedGroup.php

@@ -11,9 +11,11 @@ use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Support\Str;
 
 #[Fillable([
     'tenant_code',
+    'code',
     'source_type',
     'category_id',
     'product_layout',
@@ -33,6 +35,29 @@ class FeaturedGroup extends Model
         'source_type' => FeaturedGroupSource::Manual->value,
     ];
 
+    protected static function booted(): void
+    {
+        static::creating(function (FeaturedGroup $featuredGroup): void {
+            if (filled($featuredGroup->code)) {
+                return;
+            }
+
+            $baseCode = Str::slug($featuredGroup->group_name) ?: 'group';
+            $code = $baseCode;
+            $suffix = 2;
+
+            while (static::query()
+                ->where('tenant_code', $featuredGroup->tenant_code)
+                ->where('code', $code)
+                ->exists()) {
+                $code = "{$baseCode}-{$suffix}";
+                $suffix++;
+            }
+
+            $featuredGroup->code = $code;
+        });
+    }
+
     protected function casts(): array
     {
         return [

app/Domains/Catalog/Models/Inventory.php

@@ -5,6 +5,7 @@ namespace App\Domains\Catalog\Models;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\HasMany;
 use Illuminate\Database\Eloquent\Relations\HasOne;
 
 #[Fillable([
@@ -47,6 +48,12 @@ class Inventory extends Model
         return $this->hasOne(Variant::class);
     }
 
+    /** @return HasMany<StockReservationLine, $this> */
+    public function stockReservationLines(): HasMany
+    {
+        return $this->hasMany(StockReservationLine::class);
+    }
+
     public function availableStock(): int
     {
         return max(0, $this->real_stock - $this->reserved_stock);

app/Domains/Catalog/Models/ItemAttribute.php

@@ -13,6 +13,8 @@ use Illuminate\Database\Eloquent\Relations\HasMany;
     'attribute_id',
     'allow_multi_select',
     'sort_order',
+    'show_in_selector',
+    'ticket_label',
 ])]
 class ItemAttribute extends Model
 {
@@ -20,6 +22,10 @@ class ItemAttribute extends Model
 
     protected $table = 'item_attributes';
 
+    protected $attributes = [
+        'show_in_selector' => true,
+    ];
+
     protected function casts(): array
     {
         return [
@@ -27,6 +33,7 @@ class ItemAttribute extends Model
             'attribute_id' => 'integer',
             'allow_multi_select' => 'boolean',
             'sort_order' => 'integer',
+            'show_in_selector' => 'boolean',
         ];
     }
 

app/Domains/Catalog/Models/StockReservation.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Purchase\Models\Purchase;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\HasOne;
+
+#[Fillable([
+    'status',
+    'expires_at',
+    'committed_at',
+    'released_at',
+    'expired_at',
+    'release_reason',
+])]
+class StockReservation extends Model
+{
+    public const STATUS_ACTIVE = 'active';
+
+    public const STATUS_COMMITTED = 'committed';
+
+    public const STATUS_RELEASED = 'released';
+
+    public const STATUS_EXPIRED = 'expired';
+
+    protected function casts(): array
+    {
+        return [
+            'expires_at' => 'datetime',
+            'committed_at' => 'datetime',
+            'released_at' => 'datetime',
+            'expired_at' => 'datetime',
+        ];
+    }
+
+    /** @return HasMany<StockReservationLine, $this> */
+    public function lines(): HasMany
+    {
+        return $this->hasMany(StockReservationLine::class);
+    }
+
+    /** @return HasOne<Cart, $this> */
+    public function currentCart(): HasOne
+    {
+        return $this->hasOne(Cart::class, 'current_stock_reservation_id');
+    }
+
+    /** @return HasOne<Purchase, $this> */
+    public function purchase(): HasOne
+    {
+        return $this->hasOne(Purchase::class);
+    }
+}

app/Domains/Catalog/Models/StockReservationLine.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Domains\Catalog\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'stock_reservation_id',
+    'inventory_id',
+    'quantity',
+    'tracks_inventory',
+])]
+class StockReservationLine extends Model
+{
+    protected function casts(): array
+    {
+        return [
+            'stock_reservation_id' => 'integer',
+            'inventory_id' => 'integer',
+            'quantity' => 'integer',
+            'tracks_inventory' => 'boolean',
+        ];
+    }
+
+    /** @return BelongsTo<StockReservation, $this> */
+    public function reservation(): BelongsTo
+    {
+        return $this->belongsTo(StockReservation::class, 'stock_reservation_id');
+    }
+
+    /** @return BelongsTo<Inventory, $this> */
+    public function inventory(): BelongsTo
+    {
+        return $this->belongsTo(Inventory::class);
+    }
+}

app/Domains/Catalog/Models/Variant.php

@@ -11,7 +11,10 @@ use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\SoftDeletes;
 use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\Lang;
+use Illuminate\Support\Str;
 
 #[Fillable([
     'catalog_item_id',
@@ -22,7 +25,7 @@ use Illuminate\Support\Collection;
 ])]
 class Variant extends Model
 {
-    use HasFactory;
+    use HasFactory, SoftDeletes;
 
     public $timestamps = false;
 
@@ -41,7 +44,7 @@ class Variant extends Model
     /** @return BelongsTo<CatalogItem, $this> */
     public function catalogItem(): BelongsTo
     {
-        return $this->belongsTo(CatalogItem::class);
+        return $this->belongsTo(CatalogItem::class)->withTrashed();
     }
 
     /** @return BelongsTo<EventDate, $this> */
@@ -81,6 +84,12 @@ class Variant extends Model
 
     /** @return BelongsToMany<Attachment, $this> */
     public function attachments(): BelongsToMany
+    {
+        return $this->allAttachments()->wherePivot('is_enabled', true);
+    }
+
+    /** @return BelongsToMany<Attachment, $this> */
+    public function allAttachments(): BelongsToMany
     {
         $relation = $this->belongsToMany(
             Attachment::class,
@@ -88,7 +97,7 @@ class Variant extends Model
             'variant_id',
             'attachment_id'
         )
-            ->withPivot('orden')
+            ->withPivot(['orden', 'is_enabled'])
             ->orderByPivot('orden');
 
         if ($this->catalog_item_id !== null) {
@@ -113,6 +122,42 @@ class Variant extends Model
         return $this->catalogItem->nombre;
     }
 
+    public function getSelectionLabel(): string
+    {
+        $this->loadMissing([
+            'catalogItem.itemAttributes.attribute.options',
+            'definitions.itemAttribute.attribute.options',
+            'eventDates',
+            'eventDate',
+        ]);
+
+        $itemAttributes = $this->catalogItem->itemAttributes;
+
+        $label = $this->selectionOptions($itemAttributes)
+            ->map(function (array $option, string $attributeCode) use ($itemAttributes): ?string {
+                $itemAttribute = $itemAttributes->first(
+                    fn (ItemAttribute $candidate): bool => $candidate->attribute?->codigo === $attributeCode,
+                );
+                $translationKey = "api.catalog.attribute_labels.{$attributeCode}";
+                $attributeName = Lang::has($translationKey)
+                    ? __($translationKey)
+                    : ($itemAttribute?->attribute?->nombre ?? Str::headline($attributeCode));
+                $selectedOptions = array_is_list($option) ? $option : [$option];
+                $selectedLabels = collect($selectedOptions)
+                    ->pluck('label')
+                    ->filter()
+                    ->implode(', ');
+
+                return $selectedLabels === ''
+                    ? null
+                    : "{$attributeName} {$selectedLabels}";
+            })
+            ->filter()
+            ->implode(' · ');
+
+        return $label !== '' ? $label : $this->getName();
+    }
+
     /** @return Collection<string, string|array<int, string>> */
     public function selectionValues(): Collection
     {
@@ -230,6 +275,25 @@ class Variant extends Model
         });
     }
 
+    /**
+     * @param  Collection<int, ItemAttribute>  $itemAttributes
+     * @return Collection<string, array{value: string, label: string}|array<int, array{value: string, label: string}>>
+     */
+    public function selectorOptions(Collection $itemAttributes): Collection
+    {
+        $visibleAttributeCodes = $itemAttributes
+            ->filter(fn (ItemAttribute $itemAttribute): bool => $itemAttribute->show_in_selector)
+            ->map(fn (ItemAttribute $itemAttribute): ?string => $itemAttribute->attribute?->codigo)
+            ->filter()
+            ->values();
+
+        return $this->selectionOptions($itemAttributes)
+            ->filter(
+                fn (array $option, string $attributeCode): bool => $visibleAttributeCodes
+                    ->contains($attributeCode)
+            );
+    }
+
     /** @return Collection<int, EventDate> */
     public function selectedEventDates(): Collection
     {

app/Domains/Catalog/Requests/CatalogVariantOptionsRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Catalog\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class CatalogVariantOptionsRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, list<string>> */
+    public function rules(): array
+    {
+        return [
+            'selected_values' => ['sometimes', 'array'],
+            'selected_values.*' => ['nullable'],
+            'cart_item_id' => ['sometimes', 'nullable', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Catalog/Requests/StoreCatalogItemRequest.php

@@ -4,8 +4,8 @@ namespace App\Domains\Catalog\Requests;
 
 use App\Domains\Catalog\Enums\CatalogItemType;
 use App\Domains\Catalog\Enums\InventoryPolicy;
+use App\Domains\Catalog\Enums\InventorySubject;
 use App\Domains\Shared\Rules\ImageOrBase64Rule;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
 
@@ -51,13 +51,13 @@ class StoreCatalogItemRequest extends FormRequest
                 ),
             ],
             'nombre' => ['required', 'string', 'max:255'],
+            'group_order' => ['sometimes', 'integer', 'min:0'],
             'descripcion' => ['sometimes', 'nullable', 'string'],
             'precio' => ['required', 'numeric', 'min:0'],
             'inventory_policy' => [Rule::prohibitedIf($isBundle), 'sometimes', Rule::enum(InventoryPolicy::class)],
+            'inventory_subject' => ['sometimes', Rule::enum(InventorySubject::class)],
             'max_units_per_user' => ['sometimes', 'nullable', 'integer', 'min:1'],
             'has_tickets' => [Rule::prohibitedIf($isBundle), 'sometimes', 'boolean'],
-            'ticket_generation_policy' => [Rule::prohibitedIf($isBundle), 'sometimes', Rule::enum(TicketGenerationPolicy::class)],
-            'validity_time_id' => [Rule::prohibitedIf($isBundle), 'sometimes', 'nullable', 'integer', Rule::exists('validity_times', 'id')],
             'real_stock' => [Rule::prohibitedIf($isBundle), 'sometimes', 'integer', 'min:0'],
             'inventory_id' => ['prohibited'],
             'reserved_stock' => ['prohibited'],
@@ -80,6 +80,15 @@ class StoreCatalogItemRequest extends FormRequest
                     fn ($query) => $query->where('tenant_codigo', $tenantCode)
                 ),
             ],
+            'hidden_attribute_codes' => [Rule::prohibitedIf($isBundle), 'sometimes', 'array'],
+            'hidden_attribute_codes.*' => [
+                'required',
+                'string',
+                'distinct',
+                Rule::exists('attribute', 'codigo')->where(
+                    fn ($query) => $query->where('tenant_codigo', $tenantCode)
+                ),
+            ],
             'images' => ['sometimes', 'array'],
             'images.*' => ['required', new ImageOrBase64Rule],
             'variants' => [Rule::prohibitedIf($isBundle), 'sometimes', 'array'],

app/Domains/Catalog/Resources/AdminApp/OnTicketFeaturedGroupResource.php

@@ -15,6 +15,7 @@ class OnTicketFeaturedGroupResource extends JsonResource
     {
         return [
             'id' => $this->id,
+            'code' => $this->code,
             'category_id' => $this->category_id,
             'category_name' => $this->category->nombre,
             'group_name' => $this->group_name,

app/Domains/Catalog/Resources/CatalogFeaturedGroupResource.php

@@ -20,6 +20,7 @@ class CatalogFeaturedGroupResource extends JsonResource
     {
         return [
             'id' => $this->id,
+            'code' => $this->code,
             'title' => $this->group_name,
             'layout' => $this->product_layout->value,
             'group_layout' => $this->group_layout->value,

app/Domains/Catalog/Resources/CatalogFeaturedItemResource.php

@@ -7,7 +7,7 @@ use App\Domains\Catalog\Enums\ProductLayout;
 use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\FeaturedGroup;
 use App\Domains\Catalog\Models\Variant;
-use App\Domains\Ticket\Resources\ValidityTimeResource;
+use App\Domains\Catalog\Services\CatalogItemAllowanceService;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -25,51 +25,112 @@ class CatalogFeaturedItemResource extends JsonResource
             return $this->columnWithImageData($catalogItem);
         }
 
+        if ($featuredGroup->product_layout === ProductLayout::TicketSelector) {
+            return $this->ticketSelectorData($catalogItem);
+        }
+
+        $remainingUserQuota = $catalogItem->getAttribute('remaining_user_quota');
+        $availableStock = $catalogItem->availableStock();
+
+        $data = [
+            'id' => $catalogItem->id,
+            'type' => $catalogItem->type->value,
+            'nombre' => $catalogItem->nombre,
+            'descripcion' => $catalogItem->descripcion,
+            'precio' => $catalogItem->precio,
+            'maximum_addable_quantity' => $this->maximumAddable(
+                $availableStock,
+                $remainingUserQuota,
+            ),
+            'unavailable_message' => $this->unavailableMessage(
+                $availableStock,
+                $remainingUserQuota,
+            ),
+            'variants' => $catalogItem->visibleVariants()
+                ->map(function (Variant $variant) use ($catalogItem, $remainingUserQuota): array {
+                    $variantStock = $catalogItem->inventory_policy === InventoryPolicy::Unlimited
+                        ? null
+                        : $variant->inventory->availableStock();
+
+                    return [
+                        'id' => $variant->id,
+                        'event_date_id' => $variant->event_date_id,
+                        'event_date' => $variant->eventDate?->date?->format('Y-m-d'),
+                        'event_date_ids' => $variant->selectedEventDates()->pluck('id')->values(),
+                        'event_dates' => $variant->selectedEventDates()->map(fn ($eventDate): string => $eventDate->date->format('Y-m-d'))->values(),
+                        'descripcion' => $variant->getDescription(),
+                        'precio' => number_format($variant->getPrice(), 2, '.', ''),
+                        'maximum_addable_quantity' => $this->maximumAddable(
+                            $variantStock,
+                            $remainingUserQuota,
+                        ),
+                        'unavailable_message' => $this->unavailableMessage(
+                            $variantStock,
+                            $remainingUserQuota,
+                        ),
+                        'values' => $variant->selectorOptions($catalogItem->itemAttributes),
+                    ];
+                })
+                ->values(),
+        ];
+
+        return $data;
+    }
+
+    /** @return array<string, mixed> */
+    private function ticketSelectorData(CatalogItem $catalogItem): array
+    {
+        $availableStock = $catalogItem->availableStock();
+        $remainingUserQuota = $catalogItem->getAttribute('remaining_user_quota');
+
         return [
             'id' => $catalogItem->id,
             'type' => $catalogItem->type->value,
             'nombre' => $catalogItem->nombre,
             'descripcion' => $catalogItem->descripcion,
             'precio' => $catalogItem->precio,
-            'ticket_generation_policy' => $catalogItem->ticket_generation_policy->value,
-            'validity_time_id' => $catalogItem->validity_time_id,
-            'validity_time' => ValidityTimeResource::make($catalogItem->validityTime),
-            'stock_tecnico' => $catalogItem->availableStock(),
-            'variants' => $catalogItem->visibleVariants()
-                ->map(fn (Variant $variant): array => [
-                    'id' => $variant->id,
-                    'event_date_id' => $variant->event_date_id,
-                    'event_date' => $variant->eventDate?->date?->format('Y-m-d'),
-                    'event_date_ids' => $variant->selectedEventDates()->pluck('id')->values(),
-                    'event_dates' => $variant->selectedEventDates()->map(fn ($eventDate): string => $eventDate->date->format('Y-m-d'))->values(),
-                    'descripcion' => $variant->getDescription(),
-                    'precio' => number_format($variant->getPrice(), 2, '.', ''),
-                    'stock_tecnico' => $catalogItem->inventory_policy === InventoryPolicy::Unlimited
-                        ? null
-                        : $variant->inventory->availableStock(),
-                    'values' => $variant->selectionOptions($catalogItem->itemAttributes),
-                ])
-                ->values(),
+            'image' => $this->firstImageUrl($catalogItem),
+            'maximum_addable_quantity' => $this->maximumAddable($availableStock, $remainingUserQuota),
+            'unavailable_message' => $this->unavailableMessage($availableStock, $remainingUserQuota),
         ];
     }
 
     /** @return array<string, mixed> */
     private function columnWithImageData(CatalogItem $catalogItem): array
     {
-        $attachment = $catalogItem->attachments->first()
-            ?? $catalogItem->variants
-                ->flatMap(fn (Variant $variant) => $variant->attachments)
-                ->first();
+        $availableStock = $catalogItem->availableStock();
+        $remainingUserQuota = $catalogItem->getAttribute('remaining_user_quota');
 
         return [
             'id' => $catalogItem->id,
             'type' => $catalogItem->type->value,
             'nombre' => $catalogItem->nombre,
             'precio' => $catalogItem->precio,
-            'ticket_generation_policy' => $catalogItem->ticket_generation_policy->value,
-            'validity_time_id' => $catalogItem->validity_time_id,
-            'validity_time' => ValidityTimeResource::make($catalogItem->validityTime),
-            'image' => $attachment?->getTemporaryUrl(1440),
+            'image' => $this->firstImageUrl($catalogItem),
+            'maximum_addable_quantity' => $this->maximumAddable($availableStock, $remainingUserQuota),
+            'unavailable_message' => $this->unavailableMessage($availableStock, $remainingUserQuota),
         ];
     }
+
+    private function firstImageUrl(CatalogItem $catalogItem): ?string
+    {
+        $attachment = $catalogItem->attachments->first()
+            ?? $catalogItem->visibleVariants()
+                ->flatMap(fn (Variant $variant) => $variant->attachments)
+                ->first();
+
+        return $attachment?->getTemporaryUrl(1440);
+    }
+
+    private function maximumAddable(?int $stock, ?int $remainingUserQuota): ?int
+    {
+        return app(CatalogItemAllowanceService::class)
+            ->maximumAddableQuantity($stock, $remainingUserQuota);
+    }
+
+    private function unavailableMessage(?int $stock, ?int $remainingUserQuota): ?string
+    {
+        return app(CatalogItemAllowanceService::class)
+            ->unavailableMessage($stock, $remainingUserQuota);
+    }
 }

app/Domains/Catalog/Resources/CatalogItemDetailResource.php

@@ -6,6 +6,7 @@ use App\Domains\Catalog\Enums\InventoryPolicy;
 use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\ItemAttribute;
 use App\Domains\Catalog\Models\Variant;
+use App\Domains\Catalog\Services\CatalogItemAllowanceService;
 use App\Domains\Shared\Enums\FieldType;
 use App\Domains\Ticket\Resources\ValidityTimeResource;
 use Illuminate\Http\Request;
@@ -33,23 +34,23 @@ class CatalogItemDetailResource extends JsonResource
             'category' => $this->category?->nombre,
             'brand' => $this->brand?->nombre,
             'inventory_policy' => $this->inventory_policy?->value,
+            'inventory_subject' => $this->inventory_subject->value,
             'max_units_per_user' => $this->max_units_per_user,
             'has_tickets' => $this->has_tickets,
-            'ticket_generation_policy' => $this->ticket_generation_policy->value,
-            'validity_time_id' => $this->validity_time_id,
-            'validity_time' => $this->validityTime === null
-                ? null
-                : ValidityTimeResource::make($this->validityTime),
             'attributes' => $this->attributesData(),
-            'stock_tecnico' => $this->when(
+            'maximum_addable_quantity' => $this->when(
                 $selectedVariant === null,
-                fn () => $this->availableStock(),
+                fn () => $this->maximumAddable($this->availableStock()),
+            ),
+            'unavailable_message' => $this->when(
+                $selectedVariant === null,
+                fn () => $this->unavailableMessage($this->availableStock()),
             ),
             'images' => $this->when(
                 $selectedVariant === null,
                 fn () => $this->imageUrls($this->attachments),
             ),
-            'variants' => $this->visibleVariants()
+            'variants' => $this->variants
                 ->map(fn (Variant $variant): array => $this->variantData($variant))
                 ->values(),
             'selected_variant' => $this->when(
@@ -88,6 +89,8 @@ class CatalogItemDetailResource extends JsonResource
             'codigo' => $attribute->codigo,
             'nombre' => $attribute->nombre,
             'sort_order' => $itemAttribute->sort_order,
+            'show_in_selector' => $itemAttribute->show_in_selector,
+            'ticket_label' => $itemAttribute->ticket_label,
             'is_required' => $attribute->is_required,
             'allow_multi_select' => $itemAttribute->allow_multi_select,
             'metadata_schema' => $attribute->metadata_schema,
@@ -160,6 +163,7 @@ class CatalogItemDetailResource extends JsonResource
     {
         $values = $variant->selectionOptions($this->itemAttributes);
         $eventDates = $variant->selectedEventDates();
+        $variantStock = $this->variantStock($variant);
 
         return [
             'id' => $variant->id,
@@ -169,7 +173,8 @@ class CatalogItemDetailResource extends JsonResource
             'event_dates' => $eventDates->map(fn ($eventDate): string => $eventDate->date->format('Y-m-d'))->values(),
             'descripcion' => $variant->getDescription(),
             'precio' => number_format($variant->getPrice(), 2, '.', ''),
-            'stock_tecnico' => $this->variantStock($variant),
+            'maximum_addable_quantity' => $this->maximumAddable($variantStock),
+            'unavailable_message' => $this->unavailableMessage($variantStock),
             'values' => $values,
         ];
     }
@@ -188,4 +193,20 @@ class CatalogItemDetailResource extends JsonResource
             ? null
             : $variant->inventory->availableStock();
     }
+
+    private function maximumAddable(?int $stock): ?int
+    {
+        return app(CatalogItemAllowanceService::class)->maximumAddableQuantity(
+            $stock,
+            $this->getAttribute('remaining_user_quota'),
+        );
+    }
+
+    private function unavailableMessage(?int $stock): ?string
+    {
+        return app(CatalogItemAllowanceService::class)->unavailableMessage(
+            $stock,
+            $this->getAttribute('remaining_user_quota'),
+        );
+    }
 }

app/Domains/Catalog/Resources/CatalogItemResource.php

@@ -3,7 +3,6 @@
 namespace App\Domains\Catalog\Resources;
 
 use App\Domains\Catalog\Models\CatalogItem;
-use App\Domains\Ticket\Resources\ValidityTimeResource;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -23,14 +22,9 @@ class CatalogItemResource extends JsonResource
             'descripcion' => $this->descripcion,
             'precio' => $this->precio,
             'inventory_policy' => $this->inventory_policy?->value,
+            'inventory_subject' => $this->inventory_subject->value,
             'max_units_per_user' => $this->max_units_per_user,
             'has_tickets' => $this->has_tickets,
-            'ticket_generation_policy' => $this->ticket_generation_policy->value,
-            'validity_time_id' => $this->validity_time_id,
-            'validity_time' => $this->whenLoaded(
-                'validityTime',
-                fn () => ValidityTimeResource::make($this->validityTime),
-            ),
             'real_stock' => $this->whenLoaded('inventory', fn () => $this->inventory?->real_stock),
             'images' => $this->whenLoaded('attachments', fn () => $this->attachments
                 ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
@@ -45,7 +39,7 @@ class CatalogItemResource extends JsonResource
                     'descripcion' => $variant->getDescription(),
                     'precio' => number_format($variant->getPrice(), 2, '.', ''),
                     'real_stock' => $variant->inventory?->real_stock,
-                    'values' => $variant->selectionOptions($this->itemAttributes),
+                    'values' => $variant->selectorOptions($this->itemAttributes),
                     'images' => $variant->attachments
                         ->map(fn ($attachment) => $attachment->getTemporaryUrl(1440))
                         ->values(),

app/Domains/Catalog/Resources/CatalogSearchItemResource.php

@@ -5,7 +5,7 @@ namespace App\Domains\Catalog\Resources;
 use App\Domains\Catalog\Enums\InventoryPolicy;
 use App\Domains\Catalog\Models\CatalogItem;
 use App\Domains\Catalog\Models\Variant;
-use App\Domains\Ticket\Resources\ValidityTimeResource;
+use App\Domains\Catalog\Services\CatalogItemAllowanceService;
 use Illuminate\Http\Request;
 use Illuminate\Http\Resources\Json\JsonResource;
 
@@ -15,8 +15,10 @@ class CatalogSearchItemResource extends JsonResource
     /** @return array<string, mixed> */
     public function toArray(Request $request): array
     {
+        $availableStock = $this->availableStock();
+        $visibleVariants = $this->visibleVariants();
         $attachment = $this->attachments->first()
-            ?? $this->variants
+            ?? $visibleVariants
                 ->flatMap(fn (Variant $variant) => $variant->attachments)
                 ->first();
 
@@ -26,26 +28,45 @@ class CatalogSearchItemResource extends JsonResource
             'nombre' => $this->nombre,
             'descripcion' => $this->descripcion,
             'precio' => $this->precio,
-            'ticket_generation_policy' => $this->ticket_generation_policy->value,
-            'validity_time_id' => $this->validity_time_id,
-            'validity_time' => ValidityTimeResource::make($this->validityTime),
             'image' => $attachment?->getTemporaryUrl(1440),
-            'stock_tecnico' => $this->availableStock(),
-            'variants' => $this->visibleVariants()
-                ->map(fn (Variant $variant): array => [
-                    'id' => $variant->id,
-                    'event_date_id' => $variant->event_date_id,
-                    'event_date' => $variant->eventDate?->date?->format('Y-m-d'),
-                    'event_date_ids' => $variant->selectedEventDates()->pluck('id')->values(),
-                    'event_dates' => $variant->selectedEventDates()->map(fn ($eventDate): string => $eventDate->date->format('Y-m-d'))->values(),
-                    'descripcion' => $variant->getDescription(),
-                    'precio' => number_format($variant->getPrice(), 2, '.', ''),
-                    'stock_tecnico' => $this->inventory_policy === InventoryPolicy::Unlimited
+            'maximum_addable_quantity' => $this->maximumAddable($availableStock),
+            'unavailable_message' => $this->unavailableMessage($availableStock),
+            'variants' => $visibleVariants
+                ->map(function (Variant $variant): array {
+                    $variantStock = $this->inventory_policy === InventoryPolicy::Unlimited
                         ? null
-                        : $variant->inventory?->availableStock(),
-                    'values' => $variant->selectionOptions($this->itemAttributes),
-                ])
+                        : $variant->inventory?->availableStock();
+
+                    return [
+                        'id' => $variant->id,
+                        'event_date_id' => $variant->event_date_id,
+                        'event_date' => $variant->eventDate?->date?->format('Y-m-d'),
+                        'event_date_ids' => $variant->selectedEventDates()->pluck('id')->values(),
+                        'event_dates' => $variant->selectedEventDates()->map(fn ($eventDate): string => $eventDate->date->format('Y-m-d'))->values(),
+                        'descripcion' => $variant->getDescription(),
+                        'precio' => number_format($variant->getPrice(), 2, '.', ''),
+                        'maximum_addable_quantity' => $this->maximumAddable($variantStock),
+                        'unavailable_message' => $this->unavailableMessage($variantStock),
+                        'values' => $variant->selectorOptions($this->itemAttributes),
+                    ];
+                })
                 ->values(),
         ];
     }
+
+    private function maximumAddable(?int $stock): ?int
+    {
+        return app(CatalogItemAllowanceService::class)->maximumAddableQuantity(
+            $stock,
+            $this->getAttribute('remaining_user_quota'),
+        );
+    }
+
+    private function unavailableMessage(?int $stock): ?string
+    {
+        return app(CatalogItemAllowanceService::class)->unavailableMessage(
+            $stock,
+            $this->getAttribute('remaining_user_quota'),
+        );
+    }
 }

app/Domains/Catalog/Resources/CatalogVariantOptionsResource.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace App\Domains\Catalog\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class CatalogVariantOptionsResource extends JsonResource
+{
+    /** @return array<string, mixed> */
+    public function toArray(Request $request): array
+    {
+        return $this->resource;
+    }
+}

app/Domains/Catalog/Services/CatalogInventoryService.php

@@ -12,6 +12,37 @@ use Illuminate\Support\Facades\DB;
 
 class CatalogInventoryService
 {
+    /** @return array<int, int> */
+    public function requirementsFor(CatalogItem|Variant $selection, int $quantity = 1): array
+    {
+        if ($quantity <= 0) {
+            throw new \InvalidArgumentException('La cantidad debe ser mayor a cero.');
+        }
+
+        return array_map(
+            fn (array $requirement): int => $requirement['quantity'] * $quantity,
+            $this->inventoryRequirements($selection),
+        );
+    }
+
+    /**
+     * @return array<int, array{quantity: int, tracks_inventory: bool}>
+     */
+    public function detailedRequirementsFor(CatalogItem|Variant $selection, int $quantity = 1): array
+    {
+        if ($quantity <= 0) {
+            throw new \InvalidArgumentException('La cantidad debe ser mayor a cero.');
+        }
+
+        return array_map(
+            fn (array $requirement): array => [
+                ...$requirement,
+                'quantity' => $requirement['quantity'] * $quantity,
+            ],
+            $this->inventoryRequirements($selection),
+        );
+    }
+
     public function availableQuantity(CatalogItem|Variant $selection): ?int
     {
         if ($selection instanceof CatalogItem

app/Domains/Catalog/Services/CatalogItemAllowanceService.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Domains\Catalog\Services;
+
+use App\Domains\Catalog\Models\CatalogItem;
+use App\Domains\Purchase\Services\UserPurchaseLimitService;
+use Illuminate\Support\Collection;
+
+class CatalogItemAllowanceService
+{
+    private const USER_QUOTA_REACHED_MESSAGE = 'Alcanzaste el cupo máximo permitido para este producto.';
+
+    private const OUT_OF_STOCK_MESSAGE = 'Este producto no tiene stock disponible.';
+
+    public function __construct(
+        private readonly UserPurchaseLimitService $purchaseLimits,
+    ) {}
+
+    /** @param Collection<int, CatalogItem> $catalogItems */
+    public function attach(Collection $catalogItems, ?int $userId): void
+    {
+        $remaining = $this->purchaseLimits->remainingByCatalogItem($catalogItems, $userId);
+
+        foreach ($catalogItems as $catalogItem) {
+            $catalogItem->setAttribute(
+                'remaining_user_quota',
+                $remaining->get($catalogItem->getKey()),
+            );
+        }
+    }
+
+    public function maximumAddableQuantity(?int $availableStock, ?int $remainingUserQuota): ?int
+    {
+        if ($availableStock === null) {
+            return $remainingUserQuota;
+        }
+
+        if ($remainingUserQuota === null) {
+            return $availableStock;
+        }
+
+        return min($availableStock, $remainingUserQuota);
+    }
+
+    public function unavailableMessage(?int $availableStock, ?int $remainingUserQuota): ?string
+    {
+        if ($remainingUserQuota !== null && $remainingUserQuota <= 0) {
+            return self::USER_QUOTA_REACHED_MESSAGE;
+        }
+
+        if ($availableStock !== null && $availableStock <= 0) {
+            return self::OUT_OF_STOCK_MESSAGE;
+        }
+
+        return null;
+    }
+}

app/Domains/Catalog/Services/CatalogService.php

@@ -37,6 +37,8 @@ class CatalogService
             $images = $data['images'] ?? [];
             $attributeCodes = $data['attribute_codes'] ?? [];
             $multiSelectAttributeCodes = $data['multi_select_attribute_codes'] ?? [];
+            $hiddenAttributeCodes = $data['hidden_attribute_codes'] ?? [];
+            $ticketAttributeLabels = $data['ticket_attribute_labels'] ?? [];
             $components = $data['components'] ?? [];
             $hasDirectStock = array_key_exists('real_stock', $data);
             $realStock = (int) ($data['real_stock'] ?? 0);
@@ -64,6 +66,22 @@ class CatalogService
                 ]);
             }
 
+            if (array_diff($hiddenAttributeCodes, $attributeCodes) !== []) {
+                throw ValidationException::withMessages([
+                    'hidden_attribute_codes' => [
+                        __('api.catalog.hidden_attribute_not_on_item'),
+                    ],
+                ]);
+            }
+
+            if (array_diff(array_keys($ticketAttributeLabels), $attributeCodes) !== []) {
+                throw ValidationException::withMessages([
+                    'ticket_attribute_labels' => [
+                        __('api.catalog.ticket_label_attribute_not_on_item'),
+                    ],
+                ]);
+            }
+
             $this->validateUniqueVariantCombinations($variants, $attributeCodes);
 
             if ($type === CatalogItemType::Bundle) {
@@ -88,6 +106,8 @@ class CatalogService
                 $data['images'],
                 $data['attribute_codes'],
                 $data['multi_select_attribute_codes'],
+                $data['hidden_attribute_codes'],
+                $data['ticket_attribute_labels'],
                 $data['components'],
                 $data['real_stock'],
                 $data['reserved_stock'],
@@ -109,7 +129,13 @@ class CatalogService
 
             $catalogItem = CatalogItem::query()->create($data);
             $itemAttributes = $type === CatalogItemType::Standard
-                ? $this->createItemAttributes($catalogItem, $attributeCodes, $multiSelectAttributeCodes)
+                ? $this->createItemAttributes(
+                    $catalogItem,
+                    $attributeCodes,
+                    $multiSelectAttributeCodes,
+                    $hiddenAttributeCodes,
+                    $ticketAttributeLabels,
+                )
                 : [];
 
             if ($type === CatalogItemType::Bundle) {
@@ -145,7 +171,6 @@ class CatalogService
                 'inventory',
                 'category',
                 'brand',
-                'validityTime',
                 'itemAttributes.attribute',
                 'variants.inventory',
                 'variants.attachments',
@@ -165,7 +190,6 @@ class CatalogService
             'inventory',
             'category',
             'brand',
-            'validityTime',
             'itemAttributes.attribute.options.validityTime',
             'itemAttributes.attribute.eventDates.validityTime',
             'variants' => fn ($query) => $query->orderBy('id'),
@@ -181,6 +205,13 @@ class CatalogService
         ]);
 
         $visibleVariants = $catalogItem->visibleVariants();
+        if ($catalogItem->type === CatalogItemType::Standard
+            && ($catalogItem->inventory_id !== null || $catalogItem->variants->isNotEmpty())
+            && ! $catalogItem->isAvailable()) {
+            throw new NotFoundHttpException('Catalog item is out of stock.');
+        }
+
+        $catalogItem->setRelation('variants', $visibleVariants);
         $selectedVariant = $variantId === null
             ? $visibleVariants->first()
             : $visibleVariants->firstWhere('id', $variantId);
@@ -207,7 +238,7 @@ class CatalogService
 
         $paginator = CatalogItem::query()
             ->where('tenant_code', $tenant->codigo)
-            ->whereVariantsAvailable()
+            ->whereAvailable()
             ->where(function (Builder $query) use ($containsPattern): void {
                 $query
                     ->whereRaw('LOWER(nombre) LIKE ?', [$containsPattern])
@@ -226,7 +257,6 @@ class CatalogService
             ->with([
                 'attachments',
                 'inventory',
-                'validityTime',
                 'itemAttributes.attribute',
                 'variants.inventory',
                 'variants.attachments',
@@ -258,11 +288,10 @@ class CatalogService
         return CatalogItem::query()
             ->where('tenant_code', $tenant->codigo)
             ->where('category_id', $category->id)
-            ->whereVariantsAvailable()
+            ->whereAvailable()
             ->with([
                 'attachments',
                 'inventory',
-                'validityTime',
                 'itemAttributes.attribute',
                 'variants.inventory',
                 'variants.attachments',
@@ -279,32 +308,8 @@ class CatalogService
     public function delete(CatalogItem $catalogItem): void
     {
         DB::transaction(function () use ($catalogItem): void {
-            $catalogItem->load([
-                'attachments',
-                'variants.attachments',
-            ]);
-
-            $attachments = $catalogItem->attachments
-                ->merge($catalogItem->variants->flatMap->attachments)
-                ->unique('id');
-            $inventoryIds = collect([$catalogItem->inventory_id])
-                ->merge($catalogItem->variants->pluck('inventory_id'))
-                ->filter()
-                ->unique();
-
-            $catalogItem->attachments()->detach();
-            foreach ($catalogItem->variants as $variant) {
-                $variant->attachments()->detach();
-            }
-
+            $catalogItem->variants()->delete();
             $catalogItem->delete();
-            Inventory::query()->whereKey($inventoryIds)->delete();
-
-            foreach ($attachments as $attachment) {
-                if (! DB::table('catalog_items_attachments')->where('attachment_id', $attachment->id)->exists()) {
-                    $this->attachmentService->delete($attachment);
-                }
-            }
         });
     }
 
@@ -312,32 +317,19 @@ class CatalogService
     {
         DB::transaction(function () use ($variant): void {
             $variant = Variant::query()
-                ->with('attachments')
                 ->lockForUpdate()
                 ->findOrFail($variant->getKey());
             $catalogItem = CatalogItem::query()
                 ->lockForUpdate()
                 ->findOrFail($variant->catalog_item_id);
-            $attachments = $variant->attachments;
-            $inventoryId = $variant->inventory_id;
-
-            $variant->attachments()->detach();
             $variant->delete();
-            Inventory::query()->whereKey($inventoryId)->delete();
 
-            $minimumPrice = $catalogItem->variants()->min('precio');
-
-            if ($minimumPrice === null) {
+            if (! $catalogItem->variants()->exists()) {
                 $this->delete($catalogItem);
-            } else {
+            } elseif (($minimumPrice = $catalogItem->variants()->min('precio')) !== null) {
                 $catalogItem->update(['precio' => $minimumPrice]);
             }
 
-            foreach ($attachments as $attachment) {
-                if (! DB::table('catalog_items_attachments')->where('attachment_id', $attachment->id)->exists()) {
-                    $this->attachmentService->delete($attachment);
-                }
-            }
         });
     }
 
@@ -442,8 +434,6 @@ class CatalogService
             'attribute_codes',
             'variants',
             'has_tickets',
-            'ticket_generation_policy',
-            'validity_time_id',
         ] as $field) {
             if (array_key_exists($field, $data)) {
                 throw ValidationException::withMessages([
@@ -488,12 +478,16 @@ class CatalogService
     /**
      * @param  array<int, string>  $attributeCodes
      * @param  array<int, string>  $multiSelectAttributeCodes
+     * @param  array<int, string>  $hiddenAttributeCodes
+     * @param  array<string, string>  $ticketAttributeLabels
      * @return array<string, ItemAttribute>
      */
     private function createItemAttributes(
         CatalogItem $catalogItem,
         array $attributeCodes,
         array $multiSelectAttributeCodes = [],
+        array $hiddenAttributeCodes = [],
+        array $ticketAttributeLabels = [],
     ): array {
         $itemAttributes = [];
         $attributeCodes = array_values(array_unique($attributeCodes));
@@ -517,6 +511,8 @@ class CatalogService
             $itemAttribute = $catalogItem->itemAttributes()->create([
                 'attribute_id' => $attribute->id,
                 'allow_multi_select' => in_array($attributeCode, $multiSelectAttributeCodes, true),
+                'show_in_selector' => ! in_array($attributeCode, $hiddenAttributeCodes, true),
+                'ticket_label' => $ticketAttributeLabels[$attributeCode] ?? null,
             ]);
 
             $itemAttributes[$attributeCode] = $itemAttribute;
@@ -713,16 +709,6 @@ class CatalogService
                 ]);
             }
 
-            $validityTimeIds = $resolvedOptions
-                ->pluck('validity_time_id')
-                ->filter()
-                ->unique();
-            if ($validityTimeIds->count() > 1) {
-                throw ValidationException::withMessages([
-                    $validationKey => [__('api.catalog.incompatible_validity_windows')],
-                ]);
-            }
-
             return $resolvedOptions->pluck('value')->all();
         }
 

app/Domains/Catalog/Services/ExpireStockReservationsService.php

@@ -0,0 +1,185 @@
+<?php
+
+namespace App\Domains\Catalog\Services;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Catalog\Models\StockReservation;
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Purchase\Services\Checkout\ReleaseCheckoutService;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Log;
+use RuntimeException;
+use Throwable;
+
+class ExpireStockReservationsService
+{
+    private const BATCH_SIZE = 500;
+
+    public function __construct(
+        private readonly ReleaseCheckoutService $purchases,
+        private readonly StockReservationService $reservations,
+    ) {}
+
+    /**
+     * @return array{purchases: int, cart_reservations: int, orphan_reservations: int, failed: int}
+     */
+    public function expireOverdue(): array
+    {
+        $summary = [
+            'purchases' => 0,
+            'cart_reservations' => 0,
+            'orphan_reservations' => 0,
+            'failed' => 0,
+        ];
+        $lastReservationId = 0;
+
+        do {
+            $reservationIds = StockReservation::query()
+                ->where('status', StockReservation::STATUS_ACTIVE)
+                ->whereNotNull('expires_at')
+                ->where('expires_at', '<=', now())
+                ->where('id', '>', $lastReservationId)
+                ->orderBy('id')
+                ->limit(self::BATCH_SIZE)
+                ->pluck('id');
+
+            foreach ($reservationIds as $reservationId) {
+                $lastReservationId = (int) $reservationId;
+
+                try {
+                    $owner = $this->expireReservation($lastReservationId);
+                    if ($owner !== null) {
+                        $summary[$owner]++;
+                    }
+                } catch (Throwable $exception) {
+                    $summary['failed']++;
+                    Log::channel('commands')->error('Failed to expire overdue stock reservation.', [
+                        'command' => 'reservations:expire',
+                        'stock_reservation_id' => $lastReservationId,
+                        'exception' => $exception,
+                    ]);
+                }
+            }
+        } while ($reservationIds->count() === self::BATCH_SIZE);
+
+        Log::channel('commands')->info('Stock reservation cleanup completed.', [
+            'command' => 'reservations:expire',
+            'expired_purchases' => $summary['purchases'],
+            'expired_cart_reservations' => $summary['cart_reservations'],
+            'expired_orphan_reservations' => $summary['orphan_reservations'],
+            'failed_reservations' => $summary['failed'],
+            'total_expired' => $summary['purchases']
+                + $summary['cart_reservations']
+                + $summary['orphan_reservations'],
+        ]);
+
+        return $summary;
+    }
+
+    public function expireIfOverdue(int $reservationId): bool
+    {
+        /** @var StockReservation|null $reservation */
+        $reservation = StockReservation::query()->find($reservationId);
+        if ($reservation?->status === StockReservation::STATUS_EXPIRED) {
+            return true;
+        }
+        if (! $this->isOverdue($reservation)) {
+            return false;
+        }
+
+        return $this->expireReservation($reservationId) !== null;
+    }
+
+    /** @return 'purchases'|'cart_reservations'|'orphan_reservations'|null */
+    private function expireReservation(int $reservationId): ?string
+    {
+        $purchaseId = Purchase::query()
+            ->where('stock_reservation_id', $reservationId)
+            ->value('id');
+        if ($purchaseId !== null) {
+            return $this->expirePurchase((int) $purchaseId);
+        }
+
+        $cartId = Cart::query()
+            ->where('current_stock_reservation_id', $reservationId)
+            ->where('status', 'active')
+            ->value('id');
+        if ($cartId !== null) {
+            return $this->expireCart((int) $cartId, $reservationId);
+        }
+
+        return $this->expireOrphan($reservationId);
+    }
+
+    /** @return 'purchases'|null */
+    private function expirePurchase(int $purchaseId): ?string
+    {
+        /** @var Purchase|null $purchase */
+        $purchase = Purchase::query()->find($purchaseId);
+        if ($purchase === null) {
+            return null;
+        }
+
+        $purchase = $this->purchases->expire($purchase);
+        if ($purchase->status === Purchase::STATUS_EXPIRED) {
+            return 'purchases';
+        }
+
+        $reservation = $purchase->stockReservation;
+        if ($this->isOverdue($reservation)) {
+            throw new RuntimeException('An overdue active reservation belongs to a purchase that cannot expire.');
+        }
+
+        return null;
+    }
+
+    /** @return 'cart_reservations'|null */
+    private function expireCart(int $cartId, int $reservationId): ?string
+    {
+        return DB::transaction(function () use ($cartId, $reservationId): ?string {
+            /** @var Cart|null $cart */
+            $cart = Cart::query()
+                ->whereKey($cartId)
+                ->where('current_stock_reservation_id', $reservationId)
+                ->where('status', Cart::STATUS_ACTIVE)
+                ->lockForUpdate()
+                ->first();
+            if ($cart === null) {
+                return null;
+            }
+
+            /** @var StockReservation|null $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->find($reservationId);
+            if (! $this->isOverdue($reservation)) {
+                return null;
+            }
+
+            $this->reservations->expire($reservation);
+            $cart->update(['status' => Cart::STATUS_EXPIRED]);
+
+            return 'cart_reservations';
+        });
+    }
+
+    /** @return 'orphan_reservations'|null */
+    private function expireOrphan(int $reservationId): ?string
+    {
+        /** @var StockReservation|null $reservation */
+        $reservation = StockReservation::query()->find($reservationId);
+        if (! $this->isOverdue($reservation)) {
+            return null;
+        }
+
+        $this->reservations->expire($reservation);
+
+        return 'orphan_reservations';
+    }
+
+    private function isOverdue(?StockReservation $reservation): bool
+    {
+        return $reservation !== null
+            && $reservation->status === StockReservation::STATUS_ACTIVE
+            && $reservation->expires_at !== null
+            && ! $reservation->expires_at->isFuture();
+    }
+}

app/Domains/Catalog/Services/FeaturedGroupService.php

@@ -15,17 +15,29 @@ class FeaturedGroupService
     private const ITEMS_PER_PAGE = 12;
 
     /** @return array<array-key, mixed> */
-    public function itemsResponse(FeaturedGroup $featuredGroup, int $page): array
+    public function __construct(
+        private readonly CatalogItemAllowanceService $allowances,
+    ) {}
+
+    public function itemsResponse(FeaturedGroup $featuredGroup, int $page, ?int $userId = null): array
     {
         if ($featuredGroup->group_layout !== GroupLayout::Paginated) {
-            $items = $this->itemsQuery($featuredGroup)->get();
+            $query = $this->itemsQuery($featuredGroup);
+
+            if ($featuredGroup->group_layout === GroupLayout::Single) {
+                $query->limit(1);
+            }
+
+            $items = $query->get();
             $this->attachGroup($items, $featuredGroup);
+            $this->allowances->attach($items, $userId);
 
             return CatalogFeaturedItemResource::collection($items)->resolve();
         }
 
         $paginator = $this->paginateItems($featuredGroup, $page);
         $this->attachGroup($paginator->getCollection(), $featuredGroup);
+        $this->allowances->attach($paginator->getCollection(), $userId);
 
         return CatalogFeaturedItemResource::collection($paginator)
             ->response()
@@ -37,11 +49,19 @@ class FeaturedGroupService
     {
         $query = CatalogItem::query()
             ->where('catalog_items.tenant_code', $featuredGroup->tenant_code)
-            ->whereVariantsAvailable()
+            ->whereAvailable()
+            ->where(function (Builder $query): void {
+                $query
+                    ->whereDoesntHave('category')
+                    ->orWhereHas(
+                        'category',
+                        fn (Builder $categoryQuery): Builder => $categoryQuery
+                            ->where('is_enabled', true),
+                    );
+            })
             ->with([
                 'inventory',
                 'attachments',
-                'validityTime',
                 'itemAttributes.attribute',
                 'variants.inventory',
                 'variants.attachments',
@@ -62,7 +82,9 @@ class FeaturedGroupService
             FeaturedGroupSource::Category => $query
                 ->where('catalog_items.category_id', $featuredGroup->category_id)
                 ->orderBy('catalog_items.id'),
-            FeaturedGroupSource::All => $query->orderBy('catalog_items.id'),
+            FeaturedGroupSource::All => $query
+                ->orderBy('catalog_items.group_order')
+                ->orderBy('catalog_items.id'),
         };
     }
 

app/Domains/Catalog/Services/StockReservationService.php

@@ -0,0 +1,493 @@
+<?php
+
+namespace App\Domains\Catalog\Services;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Cart\Models\CartItem;
+use App\Domains\Catalog\Exceptions\StockReservationExpiredException;
+use App\Domains\Catalog\Models\Inventory;
+use App\Domains\Catalog\Models\StockReservation;
+use App\Domains\Catalog\Models\StockReservationLine;
+use App\Domains\Purchase\Models\Purchase;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\DB;
+
+class StockReservationService
+{
+    public const REASON_CART_EMPTY = 'cart_empty';
+
+    public const REASON_CART_CHANGED = 'cart_changed';
+
+    public const REASON_PURCHASE_SUPERSEDED = 'purchase_superseded';
+
+    public const REASON_PURCHASE_CANCELLED = 'purchase_cancelled';
+
+    public const REASON_PAYMENT_REJECTED = 'payment_rejected';
+
+    public const REASON_MANUAL_RELEASE = 'manual_release';
+
+    public function __construct(
+        private readonly CatalogInventoryService $inventory,
+    ) {}
+
+    public function syncCart(Cart $cart): ?StockReservation
+    {
+        return DB::transaction(function () use ($cart): ?StockReservation {
+            /** @var Cart $lockedCart */
+            $lockedCart = Cart::query()->lockForUpdate()->findOrFail($cart->getKey());
+            $items = $lockedCart->items()->orderBy('id')->lockForUpdate()->get();
+            $this->loadSelections($items);
+            $requirements = $this->requirementsForItems($items);
+
+            $reservation = $lockedCart->current_stock_reservation_id === null
+                ? null
+                : StockReservation::query()->lockForUpdate()->find($lockedCart->current_stock_reservation_id);
+
+            if ($reservation !== null) {
+                $this->assertUsableCartReservation($reservation);
+            }
+
+            if ($requirements === []) {
+                if ($reservation !== null && $reservation->status === StockReservation::STATUS_ACTIVE) {
+                    $this->finalizeLocked(
+                        $reservation,
+                        StockReservation::STATUS_RELEASED,
+                        self::REASON_CART_EMPTY,
+                    );
+                }
+
+                $lockedCart->update(['current_stock_reservation_id' => null]);
+                $cart->current_stock_reservation_id = null;
+
+                return null;
+            }
+
+            if ($reservation === null) {
+                $reservation = StockReservation::query()->create([
+                    'status' => StockReservation::STATUS_ACTIVE,
+                    'expires_at' => $this->expiration(),
+                ]);
+                $lockedCart->update(['current_stock_reservation_id' => $reservation->getKey()]);
+            }
+
+            if (Purchase::query()->where('stock_reservation_id', $reservation->getKey())->exists()) {
+                throw new \InvalidArgumentException('La reserva vinculada a una compra no se puede modificar.');
+            }
+
+            $currentLines = StockReservationLine::query()
+                ->where('stock_reservation_id', $reservation->getKey())
+                ->orderBy('inventory_id')
+                ->lockForUpdate()
+                ->get()
+                ->keyBy('inventory_id');
+            $inventoryIds = collect(array_keys($requirements))
+                ->merge($currentLines->keys())
+                ->map(fn ($id): int => (int) $id)
+                ->unique()
+                ->sort()
+                ->values();
+            $inventories = Inventory::query()
+                ->whereKey($inventoryIds)
+                ->orderBy('id')
+                ->lockForUpdate()
+                ->get()
+                ->keyBy('id');
+
+            foreach ($inventoryIds as $inventoryId) {
+                $inventory = $inventories->get($inventoryId)
+                    ?? throw new \InvalidArgumentException('No se encontró el inventario requerido.');
+                $previous = (int) ($currentLines->get($inventoryId)?->quantity ?? 0);
+                $required = (int) ($requirements[$inventoryId]['quantity'] ?? 0);
+                $delta = $required - $previous;
+
+                if ($delta > 0
+                    && $requirements[$inventoryId]['tracks_inventory']
+                    && $inventory->availableStock() < $delta) {
+                    throw new \InvalidArgumentException('No hay suficiente stock disponible para reservar el carrito.');
+                }
+
+                if ($delta < 0 && $inventory->reserved_stock < abs($delta)) {
+                    throw new \InvalidArgumentException('La reserva de stock del carrito es inconsistente.');
+                }
+            }
+
+            foreach ($inventoryIds as $inventoryId) {
+                /** @var Inventory $inventory */
+                $inventory = $inventories->get($inventoryId);
+                $line = $currentLines->get($inventoryId);
+                $previous = (int) ($line?->quantity ?? 0);
+                $required = (int) ($requirements[$inventoryId]['quantity'] ?? 0);
+                $delta = $required - $previous;
+
+                if ($delta > 0) {
+                    $inventory->reserve($delta, $requirements[$inventoryId]['tracks_inventory']);
+                } elseif ($delta < 0) {
+                    $inventory->release(abs($delta));
+                }
+
+                if ($required === 0) {
+                    $line?->delete();
+
+                    continue;
+                }
+
+                StockReservationLine::query()->updateOrCreate(
+                    [
+                        'stock_reservation_id' => $reservation->getKey(),
+                        'inventory_id' => $inventoryId,
+                    ],
+                    [
+                        'quantity' => $required,
+                        'tracks_inventory' => $requirements[$inventoryId]['tracks_inventory'],
+                    ],
+                );
+            }
+
+            $reservation->update([
+                'expires_at' => $this->expiration(),
+                'release_reason' => null,
+            ]);
+            $cart->current_stock_reservation_id = $reservation->getKey();
+
+            return $reservation->fresh('lines');
+        });
+    }
+
+    public function attachToPurchase(
+        Cart $cart,
+        Purchase $purchase,
+        Carbon $expiresAt,
+    ): StockReservation {
+        return DB::transaction(function () use ($cart, $purchase, $expiresAt): StockReservation {
+            /** @var Cart $lockedCart */
+            $lockedCart = Cart::query()->lockForUpdate()->findOrFail($cart->getKey());
+            /** @var Purchase $lockedPurchase */
+            $lockedPurchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
+
+            if ($lockedCart->current_stock_reservation_id === null) {
+                throw new \InvalidArgumentException('El carrito no tiene una reserva de stock activa.');
+            }
+
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->findOrFail($lockedCart->current_stock_reservation_id);
+            $this->assertUsableCartReservation($reservation);
+
+            $linkedPurchase = Purchase::query()
+                ->where('stock_reservation_id', $reservation->getKey())
+                ->whereKeyNot($lockedPurchase->getKey())
+                ->exists();
+            if ($linkedPurchase) {
+                throw new \InvalidArgumentException('La reserva de stock ya pertenece a otra compra.');
+            }
+
+            $lockedPurchase->update(['stock_reservation_id' => $reservation->getKey()]);
+            $reservation->update(['expires_at' => $expiresAt]);
+            $purchase->stock_reservation_id = $reservation->getKey();
+            $cart->current_stock_reservation_id = $reservation->getKey();
+
+            return $reservation->fresh('lines');
+        });
+    }
+
+    public function commit(Purchase $purchase): void
+    {
+        DB::transaction(function () use ($purchase): void {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
+            if ($purchase->stock_reservation_id === null) {
+                throw new \InvalidArgumentException('La compra no tiene una reserva de stock.');
+            }
+
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->findOrFail($purchase->stock_reservation_id);
+            if ($reservation->status === StockReservation::STATUS_COMMITTED) {
+                return;
+            }
+            if ($reservation->status !== StockReservation::STATUS_ACTIVE) {
+                throw new \InvalidArgumentException('La reserva de stock no está activa.');
+            }
+            if ($reservation->expires_at !== null && ! $reservation->expires_at->isFuture()) {
+                throw new StockReservationExpiredException;
+            }
+
+            $lines = $this->lockLines($reservation);
+            if ($lines->isEmpty()) {
+                throw new \InvalidArgumentException('La reserva de stock no tiene inventarios.');
+            }
+
+            $inventories = $this->lockInventories($lines);
+            foreach ($lines as $line) {
+                $inventory = $inventories->get($line->inventory_id)
+                    ?? throw new \InvalidArgumentException('No se encontró el inventario reservado.');
+                if ($inventory->reserved_stock < $line->quantity
+                    || ($line->tracks_inventory && $inventory->real_stock < $line->quantity)) {
+                    throw new \InvalidArgumentException('La reserva de stock no alcanza para confirmar la compra.');
+                }
+            }
+
+            foreach ($lines as $line) {
+                $inventories->get($line->inventory_id)->buy(
+                    (int) $line->quantity,
+                    (bool) $line->tracks_inventory,
+                );
+            }
+
+            $reservation->update([
+                'status' => StockReservation::STATUS_COMMITTED,
+                'expires_at' => null,
+                'committed_at' => now(),
+                'released_at' => null,
+                'expired_at' => null,
+                'release_reason' => null,
+            ]);
+        });
+    }
+
+    public function releaseForPurchase(
+        Purchase $purchase,
+        string $status = StockReservation::STATUS_RELEASED,
+        ?string $reason = null,
+    ): void {
+        DB::transaction(function () use ($purchase, $status, $reason): void {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
+            if ($purchase->stock_reservation_id === null) {
+                return;
+            }
+
+            /** @var StockReservation|null $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->find($purchase->stock_reservation_id);
+            if ($reservation !== null) {
+                $this->finalizeLocked($reservation, $status, $reason);
+            }
+        });
+    }
+
+    public function returnToCart(Purchase $purchase, Cart $cart): StockReservation
+    {
+        return DB::transaction(function () use ($purchase, $cart): StockReservation {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
+            /** @var Cart $cart */
+            $cart = Cart::query()->lockForUpdate()->findOrFail($cart->getKey());
+
+            if ($purchase->stock_reservation_id === null
+                || $cart->current_stock_reservation_id !== $purchase->stock_reservation_id) {
+                throw new \InvalidArgumentException('La compra y el carrito no comparten la reserva activa.');
+            }
+
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()
+                ->lockForUpdate()
+                ->findOrFail($purchase->stock_reservation_id);
+            $this->assertUsableCartReservation($reservation);
+
+            $purchase->update(['stock_reservation_id' => null]);
+            $cart->update(['current_purchase_id' => null]);
+            $reservation->update(['expires_at' => $this->expiration()]);
+
+            return $reservation->fresh('lines');
+        });
+    }
+
+    public function assertCartReservationUsable(Cart $cart): void
+    {
+        DB::transaction(function () use ($cart): void {
+            /** @var Cart $cart */
+            $cart = Cart::query()->lockForUpdate()->findOrFail($cart->getKey());
+            if ($cart->current_stock_reservation_id === null) {
+                return;
+            }
+
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()
+                ->lockForUpdate()
+                ->findOrFail($cart->current_stock_reservation_id);
+            $this->assertUsableCartReservation($reservation);
+        });
+    }
+
+    public function releaseCurrentCartReservation(
+        Cart $cart,
+        string $reason = self::REASON_CART_CHANGED,
+    ): void {
+        DB::transaction(function () use ($cart, $reason): void {
+            /** @var Cart $cart */
+            $cart = Cart::query()->lockForUpdate()->findOrFail($cart->getKey());
+            if ($cart->current_stock_reservation_id === null) {
+                return;
+            }
+
+            /** @var StockReservation|null $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->find($cart->current_stock_reservation_id);
+            if ($reservation !== null) {
+                $this->finalizeLocked($reservation, StockReservation::STATUS_RELEASED, $reason);
+            }
+            $cart->update(['current_stock_reservation_id' => null]);
+        });
+    }
+
+    public function expire(StockReservation $reservation): void
+    {
+        DB::transaction(function () use ($reservation): void {
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()->lockForUpdate()->findOrFail($reservation->getKey());
+            if ($reservation->status !== StockReservation::STATUS_ACTIVE
+                || $reservation->expires_at === null
+                || $reservation->expires_at->isFuture()) {
+                return;
+            }
+
+            $this->finalizeLocked($reservation, StockReservation::STATUS_EXPIRED, null);
+        });
+    }
+
+    public function refreshForPurchase(Purchase $purchase, ?Carbon $expiresAt): void
+    {
+        DB::transaction(function () use ($purchase, $expiresAt): void {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()->lockForUpdate()->findOrFail($purchase->getKey());
+            if ($purchase->stock_reservation_id === null) {
+                throw new \InvalidArgumentException('La compra no tiene una reserva de stock.');
+            }
+
+            /** @var StockReservation $reservation */
+            $reservation = StockReservation::query()
+                ->lockForUpdate()
+                ->findOrFail($purchase->stock_reservation_id);
+            if ($reservation->status !== StockReservation::STATUS_ACTIVE) {
+                throw new \InvalidArgumentException('La reserva de stock no está activa.');
+            }
+            if ($reservation->expires_at !== null && ! $reservation->expires_at->isFuture()) {
+                throw new StockReservationExpiredException;
+            }
+
+            $reservation->update(['expires_at' => $expiresAt]);
+        });
+    }
+
+    /**
+     * @param  Collection<int, CartItem>  $items
+     * @return array<int, array{quantity: int, tracks_inventory: bool}>
+     */
+    private function requirementsForItems(Collection $items): array
+    {
+        $requirements = [];
+        foreach ($items as $item) {
+            $selection = $item->selectedItem();
+            if ($selection === null) {
+                throw new \InvalidArgumentException('El carrito contiene un item de catálogo inexistente.');
+            }
+
+            foreach ($this->inventory->detailedRequirementsFor($selection, (int) $item->cantidad) as $inventoryId => $requirement) {
+                if (isset($requirements[$inventoryId])) {
+                    $requirements[$inventoryId]['quantity'] += $requirement['quantity'];
+                    $requirements[$inventoryId]['tracks_inventory'] =
+                        $requirements[$inventoryId]['tracks_inventory'] || $requirement['tracks_inventory'];
+
+                    continue;
+                }
+
+                $requirements[$inventoryId] = $requirement;
+            }
+        }
+
+        ksort($requirements);
+
+        return $requirements;
+    }
+
+    /** @param Collection<int, CartItem> $items */
+    private function loadSelections(Collection $items): void
+    {
+        $items->load([
+            'catalogItem.inventory',
+            'catalogItem.bundleComponents.catalogItem.inventory',
+            'catalogItem.bundleComponents.variant.inventory',
+            'catalogItem.bundleComponents.variant.catalogItem',
+            'variant.inventory',
+            'variant.catalogItem',
+        ]);
+    }
+
+    /** @return Collection<int, StockReservationLine> */
+    private function lockLines(StockReservation $reservation): Collection
+    {
+        return StockReservationLine::query()
+            ->where('stock_reservation_id', $reservation->getKey())
+            ->orderBy('inventory_id')
+            ->lockForUpdate()
+            ->get();
+    }
+
+    /**
+     * @param  Collection<int, StockReservationLine>  $lines
+     * @return Collection<int, Inventory>
+     */
+    private function lockInventories(Collection $lines): Collection
+    {
+        return Inventory::query()
+            ->whereKey($lines->pluck('inventory_id'))
+            ->orderBy('id')
+            ->lockForUpdate()
+            ->get()
+            ->keyBy('id');
+    }
+
+    private function finalizeLocked(
+        StockReservation $reservation,
+        string $status,
+        ?string $reason,
+    ): void {
+        if ($reservation->status !== StockReservation::STATUS_ACTIVE) {
+            return;
+        }
+        if (! in_array($status, [StockReservation::STATUS_RELEASED, StockReservation::STATUS_EXPIRED], true)) {
+            throw new \InvalidArgumentException('El estado final de la reserva no es válido.');
+        }
+
+        $lines = $this->lockLines($reservation);
+        $inventories = $this->lockInventories($lines);
+        foreach ($lines as $line) {
+            $inventory = $inventories->get($line->inventory_id)
+                ?? throw new \InvalidArgumentException('No se encontró el inventario reservado.');
+            $inventory->release((int) $line->quantity);
+        }
+
+        $now = now();
+        $reservation->update([
+            'status' => $status,
+            'expires_at' => null,
+            'released_at' => $status === StockReservation::STATUS_RELEASED ? $now : null,
+            'expired_at' => $status === StockReservation::STATUS_EXPIRED ? $now : null,
+            'release_reason' => $status === StockReservation::STATUS_RELEASED ? $reason : null,
+        ]);
+
+        if ($status === StockReservation::STATUS_RELEASED) {
+            Cart::query()
+                ->where('current_stock_reservation_id', $reservation->getKey())
+                ->update(['current_stock_reservation_id' => null]);
+        }
+    }
+
+    private function assertUsableCartReservation(StockReservation $reservation): void
+    {
+        if ($reservation->status === StockReservation::STATUS_EXPIRED
+            || ($reservation->expires_at !== null && ! $reservation->expires_at->isFuture())) {
+            throw new StockReservationExpiredException;
+        }
+
+        if ($reservation->status !== StockReservation::STATUS_ACTIVE
+            || $reservation->expires_at === null) {
+            throw new \InvalidArgumentException('La reserva de stock no está disponible para operar el carrito.');
+        }
+    }
+
+    private function expiration(): Carbon
+    {
+        return now()->addMinutes(
+            max(1, (int) config('catalog.stock_reservation_expiration_minutes', 30)),
+        );
+    }
+}

app/Domains/Catalog/Services/VariantSelectionService.php

@@ -0,0 +1,225 @@
+<?php
+
+namespace App\Domains\Catalog\Services;
+
+use App\Domains\Catalog\Enums\InventoryPolicy;
+use App\Domains\Catalog\Models\CatalogItem;
+use App\Domains\Catalog\Models\ItemAttribute;
+use App\Domains\Catalog\Models\Variant;
+use Illuminate\Support\Collection;
+
+class VariantSelectionService
+{
+    /**
+     * @param  array<string, mixed>  $selectedValues
+     * @return array<string, mixed>
+     */
+    public function options(
+        CatalogItem $catalogItem,
+        array $selectedValues,
+        ?int $includedVariantId = null,
+    ): array {
+        $catalogItem->load([
+            'itemAttributes.attribute',
+            'variants' => fn ($query) => $query->orderBy('id'),
+            'variants.inventory',
+            'variants.eventDate',
+            'variants.eventDates',
+            'variants.definitions' => fn ($query) => $query->orderBy('id'),
+            'variants.definitions.itemAttribute.attribute.options',
+        ]);
+
+        $variants = $catalogItem->visibleVariants($includedVariantId)
+            ->values();
+        $normalizedSelections = collect($selectedValues)
+            ->mapWithKeys(fn ($value, string $key): array => [$key => $this->normalizeValue($value)])
+            ->filter(fn ($value): bool => $value !== null && $value !== '' && $value !== [])
+            ->all();
+        $matchingVariants = $variants
+            ->filter(fn (Variant $variant): bool => $this->matches($variant, $normalizedSelections))
+            ->values();
+        $attributeKeys = $this->attributeKeys($catalogItem, $catalogItem->variants->values());
+        $isComplete = $attributeKeys->isNotEmpty()
+            && $attributeKeys->every(fn (string $key): bool => array_key_exists($key, $normalizedSelections));
+        $resolvedVariant = $isComplete && $matchingVariants->count() === 1
+            ? $matchingVariants->first()
+            : null;
+
+        return [
+            'variants' => $variants
+                ->map(fn (Variant $variant): array => $this->variantData($catalogItem, $variant))
+                ->values()
+                ->all(),
+            'selectors' => $this->selectors(
+                $catalogItem,
+                $variants,
+                $attributeKeys,
+                $matchingVariants->isEmpty() ? [] : $normalizedSelections,
+            ),
+            'selected_values' => (object) ($matchingVariants->isEmpty() ? [] : $normalizedSelections),
+            'resolved_variant' => $resolvedVariant === null
+                ? null
+                : $this->variantData($catalogItem, $resolvedVariant),
+            'valid' => $matchingVariants->isNotEmpty(),
+            'available_variant_count' => $variants->count(),
+            'matching_variant_count' => $matchingVariants->count(),
+            'price_range' => $this->priceRange($catalogItem, $variants),
+        ];
+    }
+
+    /** @param array<string, mixed> $selectedValues */
+    private function matches(Variant $variant, array $selectedValues): bool
+    {
+        $variantValues = $variant->selectionValues();
+
+        foreach ($selectedValues as $key => $selectedValue) {
+            if (! $variantValues->has($key)
+                || $this->valueKey($variantValues->get($key)) !== $this->valueKey($selectedValue)) {
+                return false;
+            }
+        }
+
+        return true;
+    }
+
+    /** @param Collection<int, Variant> $variants */
+    private function attributeKeys(CatalogItem $catalogItem, Collection $variants): Collection
+    {
+        return $variants
+            ->flatMap(fn (Variant $variant): array => $variant
+                ->selectorOptions($catalogItem->itemAttributes)
+                ->keys()
+                ->all())
+            ->unique()
+            ->values();
+    }
+
+    /**
+     * @param  Collection<int, Variant>  $variants
+     * @param  Collection<int, string>  $attributeKeys
+     * @param  array<string, mixed>  $selectedValues
+     * @return list<array<string, mixed>>
+     */
+    private function selectors(
+        CatalogItem $catalogItem,
+        Collection $variants,
+        Collection $attributeKeys,
+        array $selectedValues,
+    ): array {
+        return $attributeKeys
+            ->map(function (string $key, int $index) use (
+                $catalogItem,
+                $variants,
+                $attributeKeys,
+                $selectedValues,
+            ): array {
+                $previousKeys = $attributeKeys->take($index);
+                $previousSelections = collect($selectedValues)
+                    ->only($previousKeys->all())
+                    ->all();
+                $compatibleVariants = $variants
+                    ->filter(fn (Variant $variant): bool => $this->matches($variant, $previousSelections));
+
+                return [
+                    'key' => $key,
+                    'label' => $this->attributeLabel($catalogItem, $key),
+                    'options' => $this->optionsFor($catalogItem, $compatibleVariants, $key),
+                    'enabled' => $index === 0 || $previousKeys->every(
+                        fn (string $previousKey): bool => array_key_exists($previousKey, $selectedValues),
+                    ),
+                ];
+            })
+            ->values()
+            ->all();
+    }
+
+    /**
+     * @param  Collection<int, Variant>  $variants
+     * @return list<mixed>
+     */
+    private function optionsFor(CatalogItem $catalogItem, Collection $variants, string $key): array
+    {
+        $options = [];
+        $seen = [];
+
+        foreach ($variants as $variant) {
+            $option = $variant->selectorOptions($catalogItem->itemAttributes)->get($key);
+            if ($option === null || $option === '') {
+                continue;
+            }
+
+            $optionKey = $this->valueKey($option);
+            if (isset($seen[$optionKey])) {
+                continue;
+            }
+
+            $seen[$optionKey] = true;
+            $options[] = $option;
+        }
+
+        return $options;
+    }
+
+    private function attributeLabel(CatalogItem $catalogItem, string $key): string
+    {
+        if ($key === 'event_date') {
+            return 'Fecha';
+        }
+
+        return $catalogItem->itemAttributes
+            ->first(fn (ItemAttribute $itemAttribute): bool => $itemAttribute->attribute?->codigo === $key)
+            ?->attribute
+            ?->nombre ?? str($key)->headline()->toString();
+    }
+
+    /** @param Collection<int, Variant> $variants */
+    private function priceRange(CatalogItem $catalogItem, Collection $variants): array
+    {
+        $prices = $variants
+            ->map(fn (Variant $variant): float => $variant->getPrice())
+            ->whenEmpty(fn (Collection $prices): Collection => $prices->push($catalogItem->getPrice()));
+
+        return [
+            'minimum' => number_format((float) $prices->min(), 2, '.', ''),
+            'maximum' => number_format((float) $prices->max(), 2, '.', ''),
+        ];
+    }
+
+    /** @return array<string, mixed> */
+    private function variantData(CatalogItem $catalogItem, Variant $variant): array
+    {
+        return [
+            'id' => $variant->id,
+            'descripcion' => $variant->getDescription(),
+            'precio' => number_format($variant->getPrice(), 2, '.', ''),
+            'stock_tecnico' => $catalogItem->inventory_policy === InventoryPolicy::Unlimited
+                ? null
+                : $variant->inventory?->availableStock(),
+            'values' => $variant->selectorOptions($catalogItem->itemAttributes),
+        ];
+    }
+
+    private function normalizeValue(mixed $value): mixed
+    {
+        if (is_array($value) && array_key_exists('value', $value)) {
+            return (string) $value['value'];
+        }
+
+        if (is_array($value)) {
+            return array_map(fn ($item) => $this->normalizeValue($item), $value);
+        }
+
+        return is_scalar($value) ? (string) $value : null;
+    }
+
+    private function valueKey(mixed $value): string
+    {
+        $normalized = $this->normalizeValue($value);
+
+        if (is_array($normalized)) {
+            sort($normalized);
+        }
+
+        return json_encode($normalized, JSON_THROW_ON_ERROR);
+    }
+}

app/Domains/Catalog/documentacion/README.md

@@ -9,6 +9,7 @@ Modela y publica la oferta comercial del tenant: productos, variantes, categorí
 - `CatalogItem` es la raíz del producto y se relaciona con tenant, categoría, marca, inventario, variantes, atributos, adjuntos y grupos destacados.
 - `Variant`, `ItemAttribute`, `Attribute`, `AttributeOption` y `VariantDefinition` describen opciones comercializables.
 - `Inventory` administra stock disponible, reservado y comprado.
+- `StockReservation` representa la reserva completa de un carrito o checkout, con estados `active`, `committed`, `released` y `expired`. Su `expires_at` es el único reloj del bloqueo. Al expirar, también pasan a `expired` la compra pagable y el carrito asociados dentro de la misma transacción. Sus estados terminales nunca se reactivan ni se reemplazan implícitamente. Sus `StockReservationLine` agregan la cantidad requerida por inventario, incluso cuando varios ítems o bundles consumen el mismo stock.
 - `Category` soporta jerarquía y categorías globales o propias del tenant.
 - `FeaturedGroup` y `FeaturedItem` organizan secciones destacadas.
 - `BundleComponent` representa los componentes de un paquete.
@@ -17,6 +18,8 @@ Modela y publica la oferta comercial del tenant: productos, variantes, categorí
 
 - `CatalogService`: alta, búsqueda, detalle, listado por categoría y eliminación.
 - `CatalogInventoryService`: consulta, reserva, libera y confirma inventario.
+- `StockReservationService`: sincroniza el carrito como conjunto, bloquea todos sus inventarios en orden estable y mantiene el ledger agregado consistente con `Inventory.reserved_stock`.
+- `ExpireStockReservationsService`: detecta en un único recorrido reservas vencidas de compras, carritos y huérfanas, y delega los efectos comerciales sin mezclar esas reglas con la liberación física del inventario.
 - `FeaturedGroupService`: pagina los ítems destacados para la tienda.
 - `OnTicketFeaturedGroupService`: administra grupos destacados del panel para sitios de tickets.
 

app/Domains/Catalog/routes/api.php

@@ -12,6 +12,7 @@ Route::prefix('tenants/{tenant:codigo}')->group(function (): void {
     Route::get('categories/{category}', [CatalogController::class, 'category'])
         ->name('categories.show');
     Route::get('catalog-items/{catalogItem}', [CatalogController::class, 'show']);
+    Route::post('catalog-items/{catalogItem}/variant-options', [CatalogController::class, 'variantOptions']);
     Route::post('catalog-items', [CatalogController::class, 'store']);
 });
 

app/Domains/Client/Controllers/ClientController.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Domains\Client\Controllers;
+
+use App\Domains\Client\Models\Client;
+use App\Domains\Client\Requests\StoreClientRequest;
+use App\Domains\Client\Requests\UpdateClientRequest;
+use App\Domains\Client\Resources\ClientResource;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Response;
+
+class ClientController extends Controller
+{
+    public function index(): JsonResponse
+    {
+        return ClientResource::collection(
+            Client::query()->with('tenants')->latest()->paginateFromRequest()
+        )->response();
+    }
+
+    public function store(StoreClientRequest $request): JsonResponse
+    {
+        return ClientResource::make(
+            Client::query()->create($request->validated())->load('tenants')
+        )->response()->setStatusCode(201);
+    }
+
+    public function show(Client $client): ClientResource
+    {
+        return ClientResource::make($client->load('tenants'));
+    }
+
+    public function update(UpdateClientRequest $request, Client $client): ClientResource
+    {
+        $client->update($request->validated());
+
+        return ClientResource::make($client->fresh()->load('tenants'));
+    }
+
+    public function destroy(Client $client): Response
+    {
+        $client->delete();
+
+        return response()->noContent();
+    }
+}

app/Domains/Client/Models/Client.php

@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Client\Models;
+
+use App\Domains\Integration\Models\ClientIntegration;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+#[Fillable(['code', 'name'])]
+class Client extends Model
+{
+    public function getRouteKeyName(): string
+    {
+        return 'code';
+    }
+
+    /** @return HasMany<Tenant, $this> */
+    public function tenants(): HasMany
+    {
+        return $this->hasMany(Tenant::class);
+    }
+
+    /** @return HasMany<ClientIntegration, $this> */
+    public function integrations(): HasMany
+    {
+        return $this->hasMany(ClientIntegration::class);
+    }
+}

app/Domains/Client/Requests/StoreClientRequest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Client\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StoreClientRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'code' => ['required', 'string', 'max:255', Rule::unique('clients', 'code')],
+            'name' => ['required', 'string', 'max:255'],
+        ];
+    }
+}

app/Domains/Client/Requests/UpdateClientRequest.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Client\Requests;
+
+use App\Domains\Client\Models\Client;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class UpdateClientRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    public function rules(): array
+    {
+        /** @var Client|null $client */
+        $client = $this->route('client');
+
+        return [
+            'code' => ['sometimes', 'string', 'max:255', Rule::unique('clients', 'code')->ignore($client?->id)],
+            'name' => ['sometimes', 'string', 'max:255'],
+        ];
+    }
+}

app/Domains/Client/Resources/ClientResource.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Client\Resources;
+
+use App\Domains\Client\Models\Client;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin Client */
+class ClientResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'id' => $this->id,
+            'code' => $this->code,
+            'name' => $this->name,
+            'tenants' => $this->whenLoaded('tenants', fn () => $this->tenants->map(fn ($tenant): array => [
+                'id' => $tenant->id,
+                'codigo' => $tenant->codigo,
+                'nombre' => $tenant->nombre,
+                'dominio' => $tenant->dominio,
+            ])),
+        ];
+    }
+}

app/Domains/Client/routes/api.php

@@ -0,0 +1,6 @@
+<?php
+
+use App\Domains\Client\Controllers\ClientController;
+use Illuminate\Support\Facades\Route;
+
+Route::apiResource('clients', ClientController::class);

app/Domains/Desfile/Controllers/EntryController.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Domains\Desfile\Controllers;
+
+use App\Domains\Desfile\Requests\ReplaceEntryImageRequest;
+use App\Domains\Desfile\Requests\SyncEntryRowsRequest;
+use App\Domains\Desfile\Requests\UpdateEntryImageRequest;
+use App\Domains\Desfile\Resources\EntryResource;
+use App\Domains\Desfile\Services\EntryService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Http\Response;
+
+class EntryController extends Controller
+{
+    public function __construct(private readonly EntryService $entryService) {}
+
+    public function show(Request $request): EntryResource
+    {
+        return new EntryResource(
+            $this->entryService->current($request->user()->tenant()->firstOrFail()),
+        );
+    }
+
+    public function update(SyncEntryRowsRequest $request): EntryResource
+    {
+        return new EntryResource($this->entryService->syncRows(
+            $request->user()->tenant()->firstOrFail(),
+            $request->validated('rows'),
+        ));
+    }
+
+    public function replaceImage(ReplaceEntryImageRequest $request): JsonResponse
+    {
+        return (new EntryResource($this->entryService->replaceImage(
+            $request->user()->tenant()->firstOrFail(),
+            $request->file('image'),
+            $request->boolean('is_enabled', true),
+        )))->response();
+    }
+
+    public function updateImage(UpdateEntryImageRequest $request): EntryResource
+    {
+        return new EntryResource($this->entryService->updateImage(
+            $request->user()->tenant()->firstOrFail(),
+            $request->boolean('is_enabled'),
+        ));
+    }
+
+    public function destroyImage(Request $request): Response
+    {
+        $this->entryService->deleteImage($request->user()->tenant()->firstOrFail());
+
+        return response()->noContent();
+    }
+}

app/Domains/Desfile/Requests/ReplaceEntryImageRequest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Desfile\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class ReplaceEntryImageRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'image' => ['required', 'image', 'mimes:jpeg,jpg,png,webp', 'max:10240'],
+            'is_enabled' => ['sometimes', 'boolean'],
+        ];
+    }
+}

app/Domains/Desfile/Requests/SyncEntryRowsRequest.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Domains\Desfile\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Validator;
+
+class SyncEntryRowsRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'rows' => ['required', 'array', 'min:1', 'max:1000'],
+            'rows.*' => ['required', 'array:type,sector,row,max_seat,price'],
+            'rows.*.type' => ['required', 'string', 'max:100'],
+            'rows.*.sector' => ['required', 'string', 'max:100'],
+            'rows.*.row' => ['required', 'integer', 'between:1,5'],
+            'rows.*.max_seat' => ['required', 'integer', 'between:1,100'],
+            'rows.*.price' => ['required', 'numeric', 'min:0', 'max:99999999.99'],
+        ];
+    }
+
+    /** @return array<int, callable> */
+    public function after(): array
+    {
+        return [function (Validator $validator): void {
+            $combinations = [];
+
+            foreach ($this->input('rows', []) as $index => $row) {
+                if (! is_array($row)) {
+                    continue;
+                }
+
+                $combination = collect(['type', 'sector', 'row'])
+                    ->map(fn (string $field): string => mb_strtolower(trim((string) ($row[$field] ?? ''))))
+                    ->implode('|');
+
+                if (isset($combinations[$combination])) {
+                    $validator->errors()->add(
+                        "rows.{$index}",
+                        'La combinación de tipo, sector y fila no puede repetirse.',
+                    );
+                }
+
+                $combinations[$combination] = true;
+            }
+        }];
+    }
+}

app/Domains/Desfile/Requests/UpdateEntryImageRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Domains\Desfile\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateEntryImageRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'is_enabled' => ['required', 'boolean'],
+        ];
+    }
+}

app/Domains/Desfile/Resources/EntryResource.php

@@ -0,0 +1,56 @@
+<?php
+
+namespace App\Domains\Desfile\Resources;
+
+use App\Domains\Catalog\Models\CatalogItem;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/** @mixin CatalogItem */
+class EntryResource extends JsonResource
+{
+    /** @return array<string, mixed> */
+    public function toArray(Request $request): array
+    {
+        $image = $this->allAttachments->first();
+
+        return [
+            'id' => $this->id,
+            'rows' => $this->variants
+                ->map(function ($variant): array {
+                    $values = $variant->selectionValues();
+
+                    return [
+                        'type' => $values->get('tipo'),
+                        'sector' => $values->get('sector'),
+                        'row' => $values->get('fila'),
+                        'seat' => (int) $values->get('asiento'),
+                        'price' => $variant->getPrice(),
+                    ];
+                })
+                ->groupBy(fn (array $variant): string => implode('|', [
+                    mb_strtolower(trim((string) $variant['type'])),
+                    mb_strtolower(trim((string) $variant['sector'])),
+                    mb_strtolower(trim((string) $variant['row'])),
+                ]))
+                ->map(function ($variants): array {
+                    $first = $variants->first();
+
+                    return [
+                        'type' => $first['type'],
+                        'sector' => $first['sector'],
+                        'row' => $first['row'],
+                        'max_seat' => $variants->max('seat'),
+                        'price' => number_format($first['price'], 2, '.', ''),
+                    ];
+                })
+                ->values(),
+            'image' => $image === null ? null : [
+                'key' => $image->key,
+                'filename' => $image->filename,
+                'url' => $image->getTemporaryUrl(1440),
+                'is_enabled' => (bool) $image->pivot->is_enabled,
+            ],
+        ];
+    }
+}

app/Domains/Desfile/Services/EntryService.php

@@ -0,0 +1,302 @@
+<?php
+
+namespace App\Domains\Desfile\Services;
+
+use App\Domains\Attachable\Models\Attachment;
+use App\Domains\Attachable\Services\AttachmentService;
+use App\Domains\Catalog\Models\CatalogItem;
+use App\Domains\Catalog\Models\Inventory;
+use App\Domains\Catalog\Models\ItemAttribute;
+use App\Domains\Catalog\Models\Variant;
+use App\Domains\Tenant\Models\Tenant;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Collection;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Str;
+use Illuminate\Validation\ValidationException;
+use Throwable;
+
+class EntryService
+{
+    private const ATTRIBUTE_MAP = [
+        'type' => 'tipo',
+        'sector' => 'sector',
+        'row' => 'fila',
+        'seat' => 'asiento',
+    ];
+
+    private const ROW_ATTRIBUTE_MAP = [
+        'type' => 'tipo',
+        'sector' => 'sector',
+        'row' => 'fila',
+    ];
+
+    public function __construct(private readonly AttachmentService $attachmentService) {}
+
+    public function current(Tenant $tenant): CatalogItem
+    {
+        return $this->entryQuery($tenant)
+            ->with([
+                'allAttachments',
+                'itemAttributes.attribute.options',
+                'variants' => fn ($query) => $query->orderBy('id'),
+                'variants.inventory',
+                'variants.definitions.itemAttribute.attribute',
+            ])
+            ->firstOrFail();
+    }
+
+    /**
+     * @param  array<int, array<string, mixed>>  $rows
+     */
+    public function syncRows(Tenant $tenant, array $rows): CatalogItem
+    {
+        DB::transaction(function () use ($tenant, $rows): void {
+            $entry = $this->entryQuery($tenant)->lockForUpdate()->firstOrFail();
+            $itemAttributes = $this->itemAttributes($entry);
+            $existingVariants = $entry->variants()
+                ->with(['inventory', 'definitions.itemAttribute.attribute'])
+                ->lockForUpdate()
+                ->get();
+            $existingBySelection = $existingVariants->keyBy(
+                fn (Variant $variant): string => $this->selectionKey($variant->selectionValues()->all()),
+            );
+            $desiredSelections = collect();
+
+            foreach (array_values($rows) as $index => $data) {
+                $rowValues = $this->resolveRowValues($itemAttributes, $data, $index);
+
+                foreach (range(1, (int) $data['max_seat']) as $seat) {
+                    $values = [
+                        ...$rowValues,
+                        'asiento' => $this->resolveAttributeValue(
+                            $itemAttributes,
+                            'asiento',
+                            (string) $seat,
+                            "rows.{$index}.max_seat",
+                        ),
+                    ];
+                    $selectionKey = $this->selectionKey($values);
+                    $desiredSelections->put($selectionKey, true);
+                    $variant = $existingBySelection->get($selectionKey);
+
+                    if ($variant === null) {
+                        $variant = $entry->variants()->create([
+                            'inventory_id' => Inventory::query()->create(['real_stock' => 1])->id,
+                            'descripcion' => $this->description($values),
+                            'precio' => $data['price'],
+                        ]);
+                        $variant->definitions()->createMany(
+                            collect($values)->map(
+                                fn (string $value, string $code): array => [
+                                    'item_attribute_id' => $itemAttributes[$code]->id,
+                                    'value' => $value,
+                                ],
+                            )->values()->all(),
+                        );
+                    } else {
+                        $variant->update([
+                            'descripcion' => $this->description($values),
+                            'precio' => $data['price'],
+                        ]);
+                    }
+                }
+            }
+
+            foreach ($existingVariants as $variant) {
+                $selectionKey = $this->selectionKey($variant->selectionValues()->all());
+                if ($desiredSelections->has($selectionKey)) {
+                    continue;
+                }
+
+                $this->assertVariantCanChangeIdentity($variant, 'rows');
+                $variant->delete();
+            }
+
+            $minimumPrice = $entry->variants()->min('precio');
+            if ($minimumPrice !== null) {
+                $entry->update(['precio' => $minimumPrice]);
+            }
+        });
+
+        return $this->current($tenant);
+    }
+
+    public function replaceImage(
+        Tenant $tenant,
+        UploadedFile $image,
+        bool $isEnabled,
+    ): CatalogItem {
+        $attachment = $this->attachmentService->store($image, 'catalog-items');
+        $previousAttachments = collect();
+
+        try {
+            DB::transaction(function () use ($tenant, $attachment, $isEnabled, &$previousAttachments): void {
+                $entry = $this->entryQuery($tenant)->lockForUpdate()->firstOrFail();
+                $previousAttachments = $entry->allAttachments()->get();
+                $entry->allAttachments()->sync([
+                    $attachment->id => [
+                        'orden' => 0,
+                        'is_enabled' => $isEnabled,
+                    ],
+                ]);
+            });
+        } catch (Throwable $throwable) {
+            $this->deleteAttachmentQuietly($attachment);
+            throw $throwable;
+        }
+
+        $previousAttachments->each(fn (Attachment $previous) => $this->deleteIfUnused($previous));
+
+        return $this->current($tenant);
+    }
+
+    public function updateImage(Tenant $tenant, bool $isEnabled): CatalogItem
+    {
+        DB::transaction(function () use ($tenant, $isEnabled): void {
+            $entry = $this->entryQuery($tenant)->lockForUpdate()->firstOrFail();
+            $attachment = $entry->allAttachments()->lockForUpdate()->firstOrFail();
+
+            $entry->allAttachments()->updateExistingPivot($attachment->id, [
+                'is_enabled' => $isEnabled,
+            ]);
+        });
+
+        return $this->current($tenant);
+    }
+
+    public function deleteImage(Tenant $tenant): void
+    {
+        $attachment = DB::transaction(function () use ($tenant): Attachment {
+            $entry = $this->entryQuery($tenant)->lockForUpdate()->firstOrFail();
+            $attachment = $entry->allAttachments()->lockForUpdate()->firstOrFail();
+            $entry->allAttachments()->detach($attachment->id);
+
+            return $attachment;
+        });
+
+        $this->deleteIfUnused($attachment);
+    }
+
+    /** @return Collection<string, ItemAttribute> */
+    private function itemAttributes(CatalogItem $entry): Collection
+    {
+        $attributes = $entry->itemAttributes()
+            ->with('attribute.options')
+            ->get()
+            ->filter(fn (ItemAttribute $itemAttribute): bool => $itemAttribute->attribute !== null)
+            ->keyBy(fn (ItemAttribute $itemAttribute): string => $itemAttribute->attribute->codigo);
+        $missing = collect(self::ATTRIBUTE_MAP)->diff($attributes->keys());
+
+        if ($missing->isNotEmpty()) {
+            throw ValidationException::withMessages([
+                'rows' => [
+                    'Faltan atributos requeridos para las entradas del desfile: '.$missing->implode(', ').'.',
+                ],
+            ]);
+        }
+
+        return $attributes;
+    }
+
+    /**
+     * @param  Collection<string, ItemAttribute>  $itemAttributes
+     * @param  array<string, mixed>  $data
+     * @return array<string, string>
+     */
+    private function resolveRowValues(Collection $itemAttributes, array $data, int $index): array
+    {
+        $values = [];
+
+        foreach (self::ROW_ATTRIBUTE_MAP as $input => $code) {
+            $values[$code] = $this->resolveAttributeValue(
+                $itemAttributes,
+                $code,
+                (string) $data[$input],
+                "rows.{$index}.{$input}",
+            );
+        }
+
+        return $values;
+    }
+
+    /** @param Collection<string, ItemAttribute> $itemAttributes */
+    private function resolveAttributeValue(
+        Collection $itemAttributes,
+        string $code,
+        string $requestedValue,
+        string $errorKey,
+    ): string {
+        $requestedValue = trim($requestedValue);
+        $option = $itemAttributes[$code]->attribute->options->first(
+            fn ($candidate): bool => $this->normalize($candidate->value) === $this->normalize($requestedValue),
+        );
+
+        if ($option === null) {
+            throw ValidationException::withMessages([
+                $errorKey => ['La opción seleccionada no es válida.'],
+            ]);
+        }
+
+        return $option->value;
+    }
+
+    /** @param array<string, mixed> $values */
+    private function selectionKey(array $values): string
+    {
+        return collect(self::ATTRIBUTE_MAP)
+            ->map(fn (string $code): string => $this->normalize((string) ($values[$code] ?? '')))
+            ->implode('|');
+    }
+
+    private function assertVariantCanChangeIdentity(Variant $variant, string $key): void
+    {
+        $inventory = $variant->inventory;
+
+        if (($inventory?->reserved_stock ?? 0) > 0 || ($inventory?->sold_units ?? 0) > 0) {
+            throw ValidationException::withMessages([
+                $key => [
+                    'No se puede modificar ni eliminar un asiento con ventas o reservas.',
+                ],
+            ]);
+        }
+    }
+
+    /** @param array<string, string> $values */
+    private function description(array $values): string
+    {
+        return "Sector {$values['sector']} - Fila {$values['fila']} - Asiento {$values['asiento']} - {$values['tipo']}";
+    }
+
+    private function normalize(string $value): string
+    {
+        return Str::ascii(mb_strtolower(trim($value)));
+    }
+
+    /** @return Builder<CatalogItem> */
+    private function entryQuery(Tenant $tenant): Builder
+    {
+        return CatalogItem::query()
+            ->where('tenant_code', $tenant->codigo)
+            ->where('slug', 'entrada');
+    }
+
+    private function deleteIfUnused(Attachment $attachment): void
+    {
+        if (DB::table('catalog_items_attachments')->where('attachment_id', $attachment->id)->exists()) {
+            return;
+        }
+
+        $this->deleteAttachmentQuietly($attachment);
+    }
+
+    private function deleteAttachmentQuietly(Attachment $attachment): void
+    {
+        try {
+            $this->attachmentService->delete($attachment);
+        } catch (Throwable $throwable) {
+            report($throwable);
+        }
+    }
+}

app/Domains/Desfile/Services/InvitationPurchaseProvisioner.php

@@ -0,0 +1,431 @@
+<?php
+
+namespace App\Domains\Desfile\Services;
+
+use DateTimeInterface;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Str;
+use RuntimeException;
+
+class InvitationPurchaseProvisioner
+{
+    public const TENANT_CODE = 'desfile_pura_tendencia';
+
+    public const USER_EMAIL = 'invitados@puratendencia.com';
+
+    private const PAYMENT_METHOD = 'invitation';
+
+    /**
+     * @var list<array{sector: string, row: int, first_seat: int, last_seat: int, type: string}>
+     */
+    private const ALLOCATIONS = [
+        ['sector' => 'A', 'row' => 1, 'first_seat' => 1, 'last_seat' => 16, 'type' => 'NORMAL'],
+        ['sector' => 'A', 'row' => 3, 'first_seat' => 1, 'last_seat' => 14, 'type' => 'NORMAL'],
+        ['sector' => 'C', 'row' => 1, 'first_seat' => 1, 'last_seat' => 16, 'type' => 'VIP + LUNCH'],
+        ['sector' => 'C', 'row' => 3, 'first_seat' => 6, 'last_seat' => 7, 'type' => 'NORMAL'],
+    ];
+
+    /**
+     * @param  list<array{sector: string, row: int, first_seat: int, last_seat: int, type: string}>|null  $allocations
+     */
+    public function provision(?array $allocations = null): void
+    {
+        if (! $this->prerequisitesExist()) {
+            return;
+        }
+
+        DB::transaction(function () use ($allocations): void {
+            $now = now();
+            $userId = $this->userId($now);
+            $purchaseId = $this->purchaseId($userId, $now);
+            $catalogItem = DB::table('catalog_items')
+                ->where('tenant_code', self::TENANT_CODE)
+                ->where('slug', 'entrada')
+                ->first();
+
+            if ($catalogItem === null) {
+                throw new RuntimeException('No se encontró el catálogo de entradas del desfile.');
+            }
+
+            foreach ($allocations ?? self::ALLOCATIONS as $allocation) {
+                foreach (range($allocation['first_seat'], $allocation['last_seat']) as $seat) {
+                    $variant = $this->variant(
+                        (int) $catalogItem->id,
+                        $allocation['sector'],
+                        $allocation['row'],
+                        $seat,
+                        $allocation['type'],
+                    );
+
+                    $this->createPurchaseItem(
+                        $purchaseId,
+                        $catalogItem,
+                        $variant,
+                        $allocation['sector'],
+                        $allocation['row'],
+                        $seat,
+                        $allocation['type'],
+                        $now,
+                    );
+                    $this->createTicketAndCommitStock(
+                        $purchaseId,
+                        $userId,
+                        (int) $catalogItem->id,
+                        $variant,
+                        $now,
+                    );
+                }
+            }
+        });
+    }
+
+    private function prerequisitesExist(): bool
+    {
+        if (! DB::table('tenants')->where('codigo', self::TENANT_CODE)->exists()) {
+            return false;
+        }
+
+        if (! DB::table('roles')->where('codigo', 'user')->exists()) {
+            throw new RuntimeException('No se encontró el rol de usuario común.');
+        }
+
+        if (! DB::table('catalog_items')
+            ->where('tenant_code', self::TENANT_CODE)
+            ->where('slug', 'entrada')
+            ->exists()) {
+            throw new RuntimeException('No se encontró el catálogo de entradas del desfile.');
+        }
+
+        return true;
+    }
+
+    private function userId(DateTimeInterface $now): int
+    {
+        $user = DB::table('users')->where('email', self::USER_EMAIL)->first();
+
+        if ($user !== null) {
+            if ($user->tenant_codigo !== self::TENANT_CODE) {
+                throw new RuntimeException('El email de invitados ya pertenece a otro tenant.');
+            }
+
+            DB::table('users')->where('id', $user->id)->update([
+                'rol_codigo' => 'user',
+                'nombre_apellido' => 'Invitados Pura Tendencia',
+                'updated_at' => $now,
+            ]);
+
+            return (int) $user->id;
+        }
+
+        return DB::table('users')->insertGetId([
+            'rol_codigo' => 'user',
+            'tenant_codigo' => self::TENANT_CODE,
+            'nombre_apellido' => 'Invitados Pura Tendencia',
+            'email' => self::USER_EMAIL,
+            'email_verified_at' => $now,
+            'password' => Hash::make(Str::random(64)),
+            'dni' => null,
+            'telefono' => null,
+            'remember_token' => null,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+    }
+
+    private function purchaseId(int $userId, DateTimeInterface $now): int
+    {
+        $purchaseId = DB::table('compras')
+            ->where('tenant_codigo', self::TENANT_CODE)
+            ->where('user_id', $userId)
+            ->where('payment_method', self::PAYMENT_METHOD)
+            ->value('id');
+
+        if ($purchaseId !== null) {
+            DB::table('compras')->where('id', $purchaseId)->update([
+                'status' => 'paid',
+                'total' => 0,
+                'updated_at' => $now,
+            ]);
+
+            return (int) $purchaseId;
+        }
+
+        return DB::table('compras')->insertGetId([
+            'tenant_codigo' => self::TENANT_CODE,
+            'user_id' => $userId,
+            'cart_id' => null,
+            'status' => 'paid',
+            'payment_method' => self::PAYMENT_METHOD,
+            'total' => 0,
+            'dni' => null,
+            'transfer_payer_dni' => null,
+            'telefono' => null,
+            'nombre_apellido' => 'Invitados Pura Tendencia',
+            'email' => self::USER_EMAIL,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+    }
+
+    private function variant(
+        int $catalogItemId,
+        string $sector,
+        int $row,
+        int $seat,
+        string $type,
+    ): object {
+        $variant = $this->findVariant($catalogItemId, $sector, $row, $seat);
+
+        if ($variant === null) {
+            $variant = $this->createVariant($catalogItemId, $sector, $row, $seat, $type);
+        }
+
+        $this->ensureAttributeOptions($catalogItemId, [
+            'tipo' => $type,
+            'sector' => $sector,
+            'fila' => (string) $row,
+            'asiento' => (string) $seat,
+        ]);
+
+        $typeValueId = DB::table('variant_values as variant_value')
+            ->join('item_attributes as item_attribute', 'item_attribute.id', '=', 'variant_value.item_attribute_id')
+            ->join('attribute', 'attribute.id', '=', 'item_attribute.attribute_id')
+            ->where('variant_value.variant_id', $variant->id)
+            ->where('attribute.codigo', 'tipo')
+            ->value('variant_value.id');
+
+        if ($typeValueId === null) {
+            throw new RuntimeException("La variante {$variant->id} no tiene definido el tipo de entrada.");
+        }
+
+        DB::table('variant_values')->where('id', $typeValueId)->update(['value' => $type]);
+        DB::table('variantes')->where('id', $variant->id)->update([
+            'descripcion' => "Sector {$sector} - Fila {$row} - Asiento {$seat} - {$type}",
+        ]);
+
+        return DB::table('variantes')->where('id', $variant->id)->first();
+    }
+
+    /** @param array<string, string> $values */
+    private function ensureAttributeOptions(int $catalogItemId, array $values): void
+    {
+        $attributes = DB::table('item_attributes')
+            ->join('attribute', 'attribute.id', '=', 'item_attributes.attribute_id')
+            ->where('item_attributes.catalog_item_id', $catalogItemId)
+            ->pluck('attribute.id', 'attribute.codigo');
+
+        foreach ($values as $code => $value) {
+            $attributeId = $attributes[$code] ?? null;
+
+            if ($attributeId === null) {
+                throw new RuntimeException("Falta el atributo {$code} en el catálogo de entradas.");
+            }
+
+            if (DB::table('attribute_options')
+                ->where('attribute_id', $attributeId)
+                ->where('value', $value)
+                ->exists()) {
+                continue;
+            }
+
+            $lastSortOrder = (int) DB::table('attribute_options')
+                ->where('attribute_id', $attributeId)
+                ->max('sort_order');
+
+            DB::table('attribute_options')->insert([
+                'attribute_id' => $attributeId,
+                'validity_time_id' => null,
+                'value' => $value,
+                'label' => $value,
+                'sort_order' => $lastSortOrder + 1,
+                'metadata' => null,
+                'created_at' => now(),
+                'updated_at' => now(),
+            ]);
+        }
+    }
+
+    private function findVariant(int $catalogItemId, string $sector, int $row, int $seat): ?object
+    {
+        $query = DB::table('variantes')->where('catalog_item_id', $catalogItemId);
+
+        foreach (['sector' => $sector, 'fila' => (string) $row, 'asiento' => (string) $seat] as $code => $value) {
+            $query->whereExists(fn ($subquery) => $subquery
+                ->selectRaw('1')
+                ->from('variant_values as selected_value')
+                ->join('item_attributes as selected_item_attribute', 'selected_item_attribute.id', '=', 'selected_value.item_attribute_id')
+                ->join('attribute as selected_attribute', 'selected_attribute.id', '=', 'selected_item_attribute.attribute_id')
+                ->whereColumn('selected_value.variant_id', 'variantes.id')
+                ->where('selected_attribute.codigo', $code)
+                ->where('selected_value.value', $value));
+        }
+
+        return $query->first();
+    }
+
+    private function createVariant(
+        int $catalogItemId,
+        string $sector,
+        int $row,
+        int $seat,
+        string $type,
+    ): object {
+        $itemAttributes = DB::table('item_attributes')
+            ->join('attribute', 'attribute.id', '=', 'item_attributes.attribute_id')
+            ->where('item_attributes.catalog_item_id', $catalogItemId)
+            ->pluck('item_attributes.id', 'attribute.codigo');
+
+        foreach (['tipo', 'sector', 'fila', 'asiento'] as $requiredCode) {
+            if (! isset($itemAttributes[$requiredCode])) {
+                throw new RuntimeException("Falta el atributo {$requiredCode} en el catálogo de entradas.");
+            }
+        }
+
+        $inventoryId = DB::table('inventories')->insertGetId([
+            'sold_units' => 0,
+            'reserved_stock' => 0,
+            'real_stock' => 1,
+        ]);
+        $variantId = DB::table('variantes')->insertGetId([
+            'catalog_item_id' => $catalogItemId,
+            'event_date_id' => null,
+            'inventory_id' => $inventoryId,
+            'descripcion' => "Sector {$sector} - Fila {$row} - Asiento {$seat} - {$type}",
+            'precio' => $this->catalogPrice($sector, $row),
+        ]);
+
+        foreach (['tipo' => $type, 'sector' => $sector, 'fila' => (string) $row, 'asiento' => (string) $seat] as $code => $value) {
+            DB::table('variant_values')->insert([
+                'variant_id' => $variantId,
+                'item_attribute_id' => $itemAttributes[$code],
+                'value' => $value,
+                'created_at' => now(),
+                'updated_at' => now(),
+            ]);
+        }
+
+        return DB::table('variantes')->where('id', $variantId)->first();
+    }
+
+    private function catalogPrice(string $sector, int $row): int
+    {
+        $prices = in_array($sector, ['A', 'C'], true)
+            ? [1 => 250000, 2 => 200000, 3 => 100000, 4 => 75000, 5 => 50000]
+            : [1 => 240000, 2 => 190000, 3 => 90000, 4 => 65000, 5 => 40000];
+
+        return $prices[$row];
+    }
+
+    private function createPurchaseItem(
+        int $purchaseId,
+        object $catalogItem,
+        object $variant,
+        string $sector,
+        int $row,
+        int $seat,
+        string $type,
+        DateTimeInterface $now,
+    ): void {
+        if (DB::table('compra_items')
+            ->where('compra_id', $purchaseId)
+            ->where('source_variant_id', $variant->id)
+            ->exists()) {
+            return;
+        }
+
+        $attributes = [
+            ['name' => 'Tipo', 'value' => $type],
+            ['name' => 'Sector', 'value' => $sector],
+            ['name' => 'Fila', 'value' => (string) $row],
+            ['name' => 'Asiento', 'value' => (string) $seat],
+        ];
+
+        DB::table('compra_items')->insert([
+            'compra_id' => $purchaseId,
+            'source_catalog_item_id' => $catalogItem->id,
+            'source_variant_id' => $variant->id,
+            'image_attachment_id' => DB::table('catalog_items_attachments')
+                ->where('catalog_item_id', $catalogItem->id)
+                ->whereNull('variant_id')
+                ->orderBy('orden')
+                ->value('attachment_id'),
+            'nombre' => $catalogItem->nombre,
+            'descripcion' => $variant->descripcion,
+            'slug' => $catalogItem->slug,
+            'item_nombre' => "Entrada (Sector {$sector}, Fila {$row}, Asiento {$seat})",
+            'variant_attributes' => json_encode($attributes, JSON_UNESCAPED_UNICODE | JSON_THROW_ON_ERROR),
+            'cantidad' => 1,
+            'precio_unitario' => 0,
+            'discount_total' => 0,
+            'tax_total' => 0,
+            'total' => 0,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+    }
+
+    private function createTicketAndCommitStock(
+        int $purchaseId,
+        int $userId,
+        int $catalogItemId,
+        object $variant,
+        DateTimeInterface $now,
+    ): void {
+        if (DB::table('tickets')
+            ->where('source_purchase_id', $purchaseId)
+            ->where('source_variant_id', $variant->id)
+            ->exists()) {
+            return;
+        }
+
+        $inventory = DB::table('inventories')->where('id', $variant->inventory_id)->lockForUpdate()->first();
+
+        if ($inventory === null || $inventory->real_stock < 1 || $inventory->reserved_stock > 0) {
+            throw new RuntimeException("El asiento {$variant->descripcion} ya no está disponible.");
+        }
+
+        DB::table('inventories')->where('id', $inventory->id)->update([
+            'real_stock' => $inventory->real_stock - 1,
+            'sold_units' => $inventory->sold_units + 1,
+        ]);
+
+        $reservationId = DB::table('compras')->where('id', $purchaseId)->value('stock_reservation_id');
+        if ($reservationId === null) {
+            $reservationId = DB::table('stock_reservations')->insertGetId([
+                'status' => 'committed',
+                'committed_at' => $now,
+                'released_at' => null,
+                'expired_at' => null,
+                'release_reason' => null,
+                'created_at' => $now,
+                'updated_at' => $now,
+            ]);
+            DB::table('compras')->where('id', $purchaseId)->update([
+                'stock_reservation_id' => $reservationId,
+            ]);
+        }
+
+        DB::table('stock_reservation_lines')->insert([
+            'stock_reservation_id' => $reservationId,
+            'inventory_id' => $inventory->id,
+            'quantity' => 1,
+            'tracks_inventory' => true,
+            'created_at' => $now,
+            'updated_at' => $now,
+        ]);
+
+        DB::table('tickets')->insert([
+            'tenant_code' => self::TENANT_CODE,
+            'ticket' => (string) Str::uuid(),
+            'name' => null,
+            'description' => null,
+            'source_purchase_id' => $purchaseId,
+            'source_catalog_item_id' => $catalogItemId,
+            'source_variant_id' => $variant->id,
+            'used_at' => null,
+            'scanner_user_id' => null,
+            'user_id' => $userId,
+        ]);
+    }
+}

app/Domains/Desfile/routes/api.php

@@ -0,0 +1,19 @@
+<?php
+
+use App\Domains\Desfile\Controllers\EntryController;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('v1/adminapp/tenant/desfile')
+    ->middleware(['auth:sanctum', 'adminapp.tenant', 'tenant.menu:adminapp.desfile.entradas'])
+    ->group(function (): void {
+        Route::get('entries', [EntryController::class, 'show'])
+            ->name('adminapp.desfile.entries.show');
+        Route::put('entries', [EntryController::class, 'update'])
+            ->name('adminapp.desfile.entries.update');
+        Route::post('entries/image', [EntryController::class, 'replaceImage'])
+            ->name('adminapp.desfile.entries.image.replace');
+        Route::patch('entries/image', [EntryController::class, 'updateImage'])
+            ->name('adminapp.desfile.entries.image.update');
+        Route::delete('entries/image', [EntryController::class, 'destroyImage'])
+            ->name('adminapp.desfile.entries.image.destroy');
+    });

app/Domains/Event/Models/EventDate.php

@@ -43,7 +43,6 @@ class EventDate extends Model
             $eventDate->syncTenantDateText();
             ValidityTime::query()
                 ->whereKey($eventDate->validity_time_id)
-                ->whereDoesntHave('ticketValidityGroups')
                 ->delete();
         });
     }

app/Domains/Event/Services/EventService.php

@@ -4,6 +4,7 @@ namespace App\Domains\Event\Services;
 
 use App\Domains\Tenant\Models\Tenant;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
 
 class EventService
 {
@@ -60,7 +61,19 @@ class EventService
             }
         }
 
-        $existingDates->slice(count($dates))->each->delete();
+        $datesToDelete = $existingDates->slice(count($dates));
+
+        if ($datesToDelete->contains(fn ($eventDate): bool => $eventDate
+            ->selectedByVariants()
+            ->whereHas('sourceTickets')
+            ->exists()
+            || $eventDate->variants()->whereHas('sourceTickets')->exists())) {
+            throw ValidationException::withMessages([
+                'dates' => ['No se puede eliminar una fecha utilizada por tickets generados.'],
+            ]);
+        }
+
+        $datesToDelete->each->delete();
         $tenant->unsetRelation('eventDates');
     }
 

app/Domains/FiestaFutbolInfantil/Controllers/CategoryVisibilityController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Domains\FiestaFutbolInfantil\Controllers;
+
+use App\Domains\FiestaFutbolInfantil\Enums\FiestaCategory;
+use App\Domains\FiestaFutbolInfantil\Requests\UpdateCategoryVisibilityRequest;
+use App\Domains\FiestaFutbolInfantil\Services\CategoryVisibilityService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class CategoryVisibilityController extends Controller
+{
+    public function __construct(private readonly CategoryVisibilityService $visibilityService) {}
+
+    public function show(Request $request): JsonResponse
+    {
+        $category = $this->category($request);
+        $tenant = $request->user()->tenant()->firstOrFail();
+
+        return response()->json([
+            'data' => [
+                'is_enabled' => $this->visibilityService->isEnabled($tenant, $category),
+            ],
+        ]);
+    }
+
+    public function update(UpdateCategoryVisibilityRequest $request): JsonResponse
+    {
+        $category = $this->category($request);
+        $tenant = $request->user()->tenant()->firstOrFail();
+        $model = $this->visibilityService->update(
+            $tenant,
+            $category,
+            $request->boolean('is_enabled'),
+        );
+
+        return response()->json([
+            'data' => [
+                'is_enabled' => $model->is_enabled,
+            ],
+            'message' => $model->is_enabled
+                ? 'Mostrar en sitio web se activo correctamente'
+                : 'Mostrar en sitio web se desactivo correctamente',
+        ]);
+    }
+
+    private function category(Request $request): FiestaCategory
+    {
+        return FiestaCategory::from((string) $request->route('category'));
+    }
+}

app/Domains/FiestaFutbolInfantil/Enums/FiestaCategory.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Domains\FiestaFutbolInfantil\Enums;
+
+enum FiestaCategory: string
+{
+    case Entries = 'entries';
+    case Foods = 'foods';
+    case Accommodations = 'accommodations';
+    case Merchandise = 'merchandise';
+
+    public function categoryName(): string
+    {
+        return match ($this) {
+            self::Entries => 'Entradas',
+            self::Foods => 'Comidas',
+            self::Accommodations => 'Alojamientos',
+            self::Merchandise => 'Merchandising',
+        };
+    }
+}

app/Domains/FiestaFutbolInfantil/Requests/UpdateCategoryVisibilityRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\FiestaFutbolInfantil\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateCategoryVisibilityRequest extends FormRequest
+{
+    /** @return array<string, mixed> */
+    public function rules(): array
+    {
+        return [
+            'is_enabled' => ['required', 'boolean'],
+        ];
+    }
+}

app/Domains/FiestaFutbolInfantil/Services/AccommodationService.php

@@ -12,7 +12,6 @@ use App\Domains\Catalog\Models\ItemAttribute;
 use App\Domains\Catalog\Models\Variant;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Tenant\Models\Tenant;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use Illuminate\Support\Collection;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Validation\ValidationException;
@@ -126,18 +125,21 @@ class AccommodationService
             'tenant_code' => $tenant->codigo,
             'nombre' => 'Alojamientos',
         ]);
-        $accommodation = CatalogItem::query()
+        $accommodation = CatalogItem::withTrashed()
             ->where('tenant_code', $tenant->codigo)
             ->where('slug', 'alojamiento')
             ->lockForUpdate()
             ->first();
 
         if ($accommodation !== null) {
+            if ($accommodation->trashed()) {
+                $accommodation->restore();
+            }
+
             $accommodation->update([
                 'category_id' => $category->id,
                 'inventory_policy' => InventoryPolicy::Tracked->value,
                 'has_tickets' => true,
-                'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             ]);
 
             return $accommodation;
@@ -152,7 +154,6 @@ class AccommodationService
             'precio' => collect($variants)->min('price') ?? 0,
             'inventory_policy' => InventoryPolicy::Tracked->value,
             'has_tickets' => true,
-            'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             'inventory_id' => null,
         ]);
     }

app/Domains/FiestaFutbolInfantil/Services/CategoryVisibilityService.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\FiestaFutbolInfantil\Services;
+
+use App\Domains\Catalog\Models\Category;
+use App\Domains\FiestaFutbolInfantil\Enums\FiestaCategory;
+use App\Domains\Tenant\Models\Tenant;
+
+class CategoryVisibilityService
+{
+    public function isEnabled(Tenant $tenant, FiestaCategory $category): bool
+    {
+        return Category::query()
+            ->where('tenant_code', $tenant->codigo)
+            ->where('nombre', $category->categoryName())
+            ->value('is_enabled') ?? true;
+    }
+
+    public function update(Tenant $tenant, FiestaCategory $category, bool $isEnabled): Category
+    {
+        $model = Category::query()->firstOrCreate([
+            'tenant_code' => $tenant->codigo,
+            'nombre' => $category->categoryName(),
+        ]);
+        $model->update(['is_enabled' => $isEnabled]);
+
+        return $model;
+    }
+}

app/Domains/FiestaFutbolInfantil/Services/EntryService.php

@@ -9,7 +9,6 @@ use App\Domains\Catalog\Models\Inventory;
 use App\Domains\Catalog\Models\Variant;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Tenant\Models\Tenant;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use Illuminate\Support\Collection;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Str;
@@ -63,7 +62,6 @@ class EntryService
                     'category_id' => $category->id,
                     'precio' => $entry['price'],
                     'has_tickets' => true,
-                    'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
                     'inventory_policy' => InventoryPolicy::Tracked->value,
                     'attribute_codes' => ['event_date'],
                     'multi_select_attribute_codes' => ['event_date'],
@@ -135,7 +133,6 @@ class EntryService
             'category_id' => $category->id,
             'precio' => $entry['price'],
             'has_tickets' => true,
-            'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             'inventory_policy' => InventoryPolicy::Tracked->value,
         ]);
         $variant->update([
@@ -163,7 +160,7 @@ class EntryService
 
         while (
             in_array($slug, $reservedSlugs, true)
-            || CatalogItem::query()
+            || CatalogItem::withTrashed()
                 ->where('tenant_code', $tenant->codigo)
                 ->where('slug', $slug)
                 ->exists()

app/Domains/FiestaFutbolInfantil/Services/FoodService.php

@@ -12,7 +12,6 @@ use App\Domains\Catalog\Models\ItemAttribute;
 use App\Domains\Catalog\Models\Variant;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Tenant\Models\Tenant;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use Illuminate\Support\Collection;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Validation\ValidationException;
@@ -137,18 +136,21 @@ class FoodService
             'tenant_code' => $tenant->codigo,
             'nombre' => 'Comidas',
         ]);
-        $food = CatalogItem::query()
+        $food = CatalogItem::withTrashed()
             ->where('tenant_code', $tenant->codigo)
             ->where('slug', 'comida')
             ->lockForUpdate()
             ->first();
 
         if ($food !== null) {
+            if ($food->trashed()) {
+                $food->restore();
+            }
+
             $food->update([
                 'category_id' => $category->id,
                 'inventory_policy' => InventoryPolicy::Tracked->value,
                 'has_tickets' => true,
-                'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             ]);
 
             return $food;
@@ -163,7 +165,6 @@ class FoodService
             'precio' => collect($variants)->min('price') ?? 0,
             'inventory_policy' => InventoryPolicy::Tracked->value,
             'has_tickets' => true,
-            'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             'inventory_id' => null,
         ]);
     }

app/Domains/FiestaFutbolInfantil/Services/MerchandiseService.php

@@ -12,7 +12,6 @@ use App\Domains\Catalog\Models\ItemAttribute;
 use App\Domains\Catalog\Models\Variant;
 use App\Domains\Catalog\Services\CatalogService;
 use App\Domains\Tenant\Models\Tenant;
-use App\Domains\Ticket\Enums\TicketGenerationPolicy;
 use Illuminate\Support\Collection;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Str;
@@ -75,7 +74,6 @@ class MerchandiseService
                     'max_units_per_user' => (int) $data['max_units_per_user'],
                     'inventory_policy' => InventoryPolicy::Tracked->value,
                     'has_tickets' => true,
-                    'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
                 ]);
 
                 $itemAttributes = $this->itemAttributes($item, $attributes);
@@ -200,7 +198,6 @@ class MerchandiseService
             'max_units_per_user' => (int) $data['max_units_per_user'],
             'inventory_policy' => InventoryPolicy::Tracked->value,
             'has_tickets' => true,
-            'ticket_generation_policy' => TicketGenerationPolicy::OnePerUnit->value,
             'inventory_id' => null,
         ]);
     }
@@ -414,7 +411,7 @@ class MerchandiseService
 
         while (
             in_array($slug, $reservedSlugs, true)
-            || CatalogItem::query()
+            || CatalogItem::withTrashed()
                 ->where('tenant_code', $tenant->codigo)
                 ->where('slug', $slug)
                 ->exists()

app/Domains/FiestaFutbolInfantil/routes/api.php

@@ -1,6 +1,7 @@
 <?php
 
 use App\Domains\FiestaFutbolInfantil\Controllers\AccommodationController;
+use App\Domains\FiestaFutbolInfantil\Controllers\CategoryVisibilityController;
 use App\Domains\FiestaFutbolInfantil\Controllers\EntryController;
 use App\Domains\FiestaFutbolInfantil\Controllers\FoodController;
 use App\Domains\FiestaFutbolInfantil\Controllers\MerchandiseController;
@@ -9,6 +10,20 @@ use Illuminate\Support\Facades\Route;
 Route::prefix('v1/adminapp/tenant')
     ->middleware(['auth:sanctum', 'adminapp.tenant'])
     ->group(function (): void {
+        $visibilityRoutes = static function (string $endpoint, string $category, string $menuCode): void {
+            Route::get("{$endpoint}/visibility", [CategoryVisibilityController::class, 'show'])
+                ->defaults('category', $category)
+                ->middleware("tenant.menu:{$menuCode}");
+            Route::patch("{$endpoint}/visibility", [CategoryVisibilityController::class, 'update'])
+                ->defaults('category', $category)
+                ->middleware("tenant.menu:{$menuCode}");
+        };
+
+        $visibilityRoutes('entries', 'entries', 'adminapp.fiesta-futbol-infantil.entradas');
+        $visibilityRoutes('foods', 'foods', 'adminapp.fiesta-futbol-infantil.comida');
+        $visibilityRoutes('accommodations', 'accommodations', 'adminapp.fiesta-futbol-infantil.alojamientos');
+        $visibilityRoutes('merchandise', 'merchandise', 'adminapp.fiesta-futbol-infantil.merchandising');
+
         Route::get('entries', [EntryController::class, 'index'])
             ->middleware('tenant.menu:adminapp.fiesta-futbol-infantil.entradas')
             ->name('adminapp.fiesta-futbol-infantil.entries.index');

app/Domains/Forms/Services/SaleFormService.php

@@ -12,10 +12,12 @@ class SaleFormService
         $names = [
             Purchase::STATUS_CREATED => 'Creada',
             Purchase::STATUS_PENDING_PAYMENT => 'Esperando pago',
+            Purchase::STATUS_IN_REVIEW => 'En revisión',
             Purchase::STATUS_PAID => 'Confirmada',
             Purchase::STATUS_CANCELLED => 'Cancelada',
             Purchase::STATUS_REJECTED => 'Rechazada',
             Purchase::STATUS_EXPIRED => 'Vencida',
+            Purchase::STATUS_SUPERSEDED => 'Reemplazada',
         ];
 
         return [

app/Domains/Integration/Controllers/ClientIntegrationController.php

@@ -0,0 +1,64 @@
+<?php
+
+namespace App\Domains\Integration\Controllers;
+
+use App\Domains\Client\Models\Client;
+use App\Domains\Integration\Models\Integration;
+use App\Domains\Integration\Requests\StoreClientIntegrationRequest;
+use App\Domains\Integration\Services\ClientIntegrationService;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+
+class ClientIntegrationController extends Controller
+{
+    public function __construct(
+        private readonly ClientIntegrationService $clientIntegrationService,
+    ) {}
+
+    public function index(Client $client): JsonResponse
+    {
+        return response()->json($this->clientIntegrationService->getAllForClient($client));
+    }
+
+    public function show(Client $client, string $integrationCode): JsonResponse
+    {
+        $integration = $this->clientIntegrationService->getClientIntegration($client, $integrationCode);
+
+        if (! $integration) {
+            return response()->json([
+                'code' => 'integration.not_configured',
+                'message' => __('api.integration.not_configured'),
+            ], 404);
+        }
+
+        return response()->json($integration);
+    }
+
+    public function store(
+        StoreClientIntegrationRequest $request,
+        Client $client,
+        string $integrationCode,
+    ): JsonResponse {
+        $integration = Integration::query()
+            ->where('integration_code', $integrationCode)
+            ->firstOrFail();
+
+        try {
+            $this->clientIntegrationService->updateOrCreateIntegration(
+                $client,
+                $integration,
+                $request->input('integration_data', []),
+            );
+
+            return response()->json([
+                'code' => 'integration.configured',
+                'message' => __('api.integration.configured'),
+            ]);
+        } catch (\Exception $exception) {
+            return response()->json([
+                'code' => 'integration.validation_failed',
+                'message' => __('api.integration.validation_failed', ['error' => $exception->getMessage()]),
+            ], 400);
+        }
+    }
+}

app/Domains/Integration/Controllers/TelepagosWebhookController.php

@@ -2,6 +2,7 @@
 
 namespace App\Domains\Integration\Controllers;
 
+use App\Domains\Client\Models\Client;
 use App\Domains\Integration\Requests\TelepagosWebhookRequest;
 use App\Domains\Integration\Services\TelepagosWebhookService;
 use App\Http\Controllers\Controller;
@@ -12,12 +13,12 @@ class TelepagosWebhookController extends Controller
     /**
      * Handle the incoming Telepagos webhook.
      */
-    public function handle(TelepagosWebhookRequest $request, string $tenantCodigo, TelepagosWebhookService $service): JsonResponse
+    public function handle(TelepagosWebhookRequest $request, Client $client, TelepagosWebhookService $service): JsonResponse
     {
         try {
             $cashinId = $request->validated('id');
 
-            $service->handleWebhook($tenantCodigo, $cashinId);
+            $service->handleWebhook($client, $cashinId);
 
             return response()->json(['status' => 'success']);
         } catch (\Exception $e) {

app/Domains/Integration/Controllers/TenantIntegrationController.php

@@ -1,60 +0,0 @@
-<?php
-
-namespace App\Domains\Integration\Controllers;
-
-use App\Domains\Integration\Models\Integration;
-use App\Domains\Integration\Requests\StoreTenantIntegrationRequest;
-use App\Domains\Integration\Services\TenantIntegrationService;
-use Illuminate\Routing\Controller;
-
-class TenantIntegrationController extends Controller
-{
-    protected TenantIntegrationService $tenantIntegrationService;
-
-    public function __construct(TenantIntegrationService $tenantIntegrationService)
-    {
-        $this->tenantIntegrationService = $tenantIntegrationService;
-    }
-
-    public function index(string $tenantCode)
-    {
-        return response()->json($this->tenantIntegrationService->getAllForTenant($tenantCode));
-    }
-
-    public function show(string $tenantCode, string $integrationCode)
-    {
-        $integration = $this->tenantIntegrationService->getTenantIntegration($tenantCode, $integrationCode);
-
-        if (! $integration) {
-            return response()->json([
-                'code' => 'integration.not_configured',
-                'message' => __('api.integration.not_configured'),
-            ], 404);
-        }
-
-        return response()->json($integration);
-    }
-
-    public function store(StoreTenantIntegrationRequest $request, string $tenantCode, string $integrationCode)
-    {
-        $integration = Integration::where('integration_code', $integrationCode)->firstOrFail();
-
-        try {
-            $this->tenantIntegrationService->updateOrCreateIntegration(
-                $tenantCode,
-                $integration,
-                $request->input('integration_data', [])
-            );
-
-            return response()->json([
-                'code' => 'integration.configured',
-                'message' => __('api.integration.configured'),
-            ]);
-        } catch (\Exception $e) {
-            return response()->json([
-                'code' => 'integration.validation_failed',
-                'message' => __('api.integration.validation_failed', ['error' => $e->getMessage()]),
-            ], 400);
-        }
-    }
-}

app/Domains/Integration/Models/ClientIntegration.php

@@ -2,16 +2,18 @@
 
 namespace App\Domains\Integration\Models;
 
+use App\Domains\Client\Models\Client;
 use App\Domains\Integration\Casts\EncryptedIntegrationData;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
 
-class TenantIntegration extends Model
+class ClientIntegration extends Model
 {
-    protected $table = 'tenant_integration';
+    protected $hidden = ['integration_data'];
 
     protected $fillable = [
+        'client_id',
         'integration_code',
-        'tenant_code',
         'integration_data',
     ];
 
@@ -19,7 +21,14 @@ class TenantIntegration extends Model
         'integration_data' => EncryptedIntegrationData::class,
     ];
 
-    public function integration()
+    /** @return BelongsTo<Client, $this> */
+    public function client(): BelongsTo
+    {
+        return $this->belongsTo(Client::class);
+    }
+
+    /** @return BelongsTo<Integration, $this> */
+    public function integration(): BelongsTo
     {
         return $this->belongsTo(Integration::class, 'integration_code', 'integration_code');
     }

app/Domains/Integration/Models/Integration.php

@@ -13,16 +13,16 @@ class Integration extends Model
         'name',
         'url',
         'integration_data_schema',
-        'requires_tenant_configuration',
+        'requires_client_configuration',
     ];
 
     protected $casts = [
         'integration_data_schema' => 'array',
-        'requires_tenant_configuration' => 'boolean',
+        'requires_client_configuration' => 'boolean',
     ];
-    
-    public function tenantIntegrations()
+
+    public function clientIntegrations()
     {
-        return $this->hasMany(TenantIntegration::class, 'integration_code', 'integration_code');
+        return $this->hasMany(ClientIntegration::class, 'integration_code', 'integration_code');
     }
 }

app/Domains/Integration/Requests/StoreClientIntegrationRequest.php

@@ -6,7 +6,7 @@ use App\Domains\Integration\Models\Integration;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\ValidationException;
 
-class StoreTenantIntegrationRequest extends FormRequest
+class StoreClientIntegrationRequest extends FormRequest
 {
     protected ?Integration $integrationModel = null;
 
@@ -15,10 +15,12 @@ class StoreTenantIntegrationRequest extends FormRequest
         return true;
     }
 
-    protected function prepareForValidation()
+    protected function prepareForValidation(): void
     {
         $integrationCode = $this->route('integration_code');
-        $this->integrationModel = Integration::where('integration_code', $integrationCode)->first();
+        $this->integrationModel = Integration::query()
+            ->where('integration_code', $integrationCode)
+            ->first();
 
         if (! $this->integrationModel) {
             throw ValidationException::withMessages([
@@ -31,11 +33,8 @@ class StoreTenantIntegrationRequest extends FormRequest
     {
         $rules = [];
 
-        // Dynamic validation rules based on the integration data schema
-        if ($this->integrationModel && $this->integrationModel->integration_data_schema) {
-            foreach ($this->integrationModel->integration_data_schema as $field => $rule) {
-                $rules['integration_data.'.$field] = $rule;
-            }
+        foreach ($this->integrationModel?->integration_data_schema ?? [] as $field => $rule) {
+            $rules['integration_data.'.$field] = $rule;
         }
 
         return $rules;

app/Domains/Integration/Requests/StoreIntegrationRequest.php

@@ -18,7 +18,7 @@ class StoreIntegrationRequest extends FormRequest
             'name' => ['required', 'string', 'max:255'],
             'url' => ['nullable', 'url', 'max:255'],
             'integration_data_schema' => ['nullable', 'array'],
-            'requires_tenant_configuration' => ['sometimes', 'boolean'],
+            'requires_client_configuration' => ['sometimes', 'boolean'],
         ];
     }
 }

app/Domains/Integration/Requests/UpdateIntegrationRequest.php

@@ -14,14 +14,14 @@ class UpdateIntegrationRequest extends FormRequest
     public function rules(): array
     {
         $integration = $this->route('integration');
-        
+
         return [
             'name' => ['sometimes', 'required', 'string', 'max:255'],
             'url' => ['nullable', 'url', 'max:255'],
             'integration_data_schema' => ['nullable', 'array'],
-            'requires_tenant_configuration' => ['sometimes', 'boolean'],
+            'requires_client_configuration' => ['sometimes', 'boolean'],
             // the code shouldn't ideally be updatable, but if it is:
-            'integration_code' => ['sometimes', 'required', 'string', 'unique:integrations,integration_code,' . ($integration->id ?? '')],
+            'integration_code' => ['sometimes', 'required', 'string', 'unique:integrations,integration_code,'.($integration->id ?? '')],
         ];
     }
 }

app/Domains/Integration/Services/BaseIntegrationService.php

@@ -2,58 +2,54 @@
 
 namespace App\Domains\Integration\Services;
 
+use App\Domains\Client\Models\Client;
+use App\Domains\Integration\Models\ClientIntegration;
 use App\Domains\Integration\Models\Integration;
-use App\Domains\Integration\Models\TenantIntegration;
-use Illuminate\Support\Facades\Http;
-use Illuminate\Http\Client\PendingRequest;
+use App\Domains\Tenant\Models\Tenant;
 use Exception;
+use Illuminate\Http\Client\PendingRequest;
+use Illuminate\Support\Facades\Http;
 
 abstract class BaseIntegrationService
 {
     /**
      * The unique code of the integration.
-     *
-     * @var string
      */
     protected string $integrationCode;
 
     /**
      * The current tenant code.
-     *
-     * @var string
      */
     protected string $tenantCode;
 
+    protected ?Tenant $tenant = null;
+
+    protected ?Client $clientContext = null;
+
     /**
      * The integration model instance.
-     *
-     * @var Integration|null
      */
     protected ?Integration $integration = null;
 
     /**
-     * The tenant-specific integration model instance.
-     *
-     * @var TenantIntegration|null
+     * The client-owned integration configuration.
      */
-    protected ?TenantIntegration $tenantIntegration = null;
+    protected ?ClientIntegration $clientIntegration = null;
 
     /**
      * Set the integration code.
      *
-     * @param string $integrationCode
      * @return $this
      */
     public function setIntegrationCode(string $integrationCode): self
     {
         $this->integrationCode = $integrationCode;
+
         return $this;
     }
 
     /**
      * Get the integration code.
-     *
-     * @return string
      */
     public function getIntegrationCode(): string
     {
@@ -63,53 +59,69 @@ abstract class BaseIntegrationService
     /**
      * Set the tenant code and load the integration models.
      *
-     * @param string $tenantCode
      * @return $this
+     *
      * @throws Exception
      */
     public function forTenant(string $tenantCode): self
     {
         $this->tenantCode = $tenantCode;
+        $this->tenant = Tenant::query()->with('client')->where('codigo', $tenantCode)->firstOrFail();
+        $this->clientContext = $this->tenant->client;
         $this->loadIntegration();
+
+        return $this;
+    }
+
+    public function forClient(Client|string $client): self
+    {
+        $this->clientContext = $client instanceof Client
+            ? $client
+            : Client::query()->where('code', $client)->firstOrFail();
+        $this->tenant = null;
+        $this->loadIntegration();
+
         return $this;
     }
 
     /**
-     * Load the Integration and TenantIntegration models.
+     * Load the integration definition and its client-owned configuration.
      *
      * @throws Exception
      */
     protected function loadIntegration(): void
     {
         if (empty($this->integrationCode)) {
-            throw new Exception("Integration code is not set.");
+            throw new Exception('Integration code is not set.');
         }
 
         $this->integration = Integration::where('integration_code', $this->integrationCode)->first();
-        if (!$this->integration) {
+        if (! $this->integration) {
             throw new Exception("Integration with code '{$this->integrationCode}' not found.");
         }
 
-        $this->tenantIntegration = TenantIntegration::where('tenant_code', $this->tenantCode)
+        if (! $this->clientContext) {
+            throw new Exception('Client context is not set.');
+        }
+
+        $this->clientIntegration = ClientIntegration::where('client_id', $this->clientContext->id)
             ->where('integration_code', $this->integrationCode)
             ->first();
 
-        if (!$this->tenantIntegration && $this->integration->requires_tenant_configuration) {
-            throw new Exception("Tenant '{$this->tenantCode}' does not have integration '{$this->integrationCode}' configured.");
+        if (! $this->clientIntegration && $this->integration->requires_client_configuration) {
+            throw new Exception("Client '{$this->clientContext->code}' does not have integration '{$this->integrationCode}' configured.");
         }
     }
 
     /**
      * Build the request URL.
      *
-     * @param string $path
-     * @return string
      * @throws Exception
      */
     public function getUrl(string $path = ''): string
     {
-        if (!$this->integration) {
-            throw new Exception("Integration is not loaded. Call forTenant() first.");
+        if (! $this->integration) {
+            throw new Exception('Integration is not loaded. Call forTenant() or forClient() first.');
         }
 
         $baseUrl = rtrim($this->integration->url, '/');
@@ -119,25 +131,20 @@ abstract class BaseIntegrationService
     }
 
     /**
-     * Get integration setting by key from tenant's integration data.
-     *
-     * @param string $key
-     * @param mixed $default
-     * @return mixed
+     * Get an integration setting from the client-owned configuration.
      */
     protected function getIntegrationSetting(string $key, mixed $default = null): mixed
     {
-        if (!$this->tenantIntegration || !$this->tenantIntegration->integration_data) {
+        if (! $this->clientIntegration || ! $this->clientIntegration->integration_data) {
             return $default;
         }
 
-        return $this->tenantIntegration->integration_data[$key] ?? $default;
+        return $this->clientIntegration->integration_data[$key] ?? $default;
     }
 
     /**
      * Get a pre-configured HTTP client builder.
      *
-     * @return PendingRequest
      * @throws Exception
      */
     public function client(): PendingRequest
@@ -148,17 +155,13 @@ abstract class BaseIntegrationService
 
     /**
      * Get the headers for the integration.
-     *
-     * @return array
      */
     abstract public function getHeaders(): array;
 
     /**
-     * Hook called after the integration is configured for the tenant.
+     * Hook called after the integration is configured for the client.
      * Can be used to validate credentials or perform initial setups.
      * Throw an Exception on failure.
-     *
-     * @return void
      */
     public function onSetup(): void
     {

app/Domains/Integration/Services/ClientIntegrationService.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Domains\Integration\Services;
+
+use App\Domains\Client\Models\Client;
+use App\Domains\Integration\Models\ClientIntegration;
+use App\Domains\Integration\Models\Integration;
+use Illuminate\Database\Eloquent\Collection;
+use Illuminate\Support\Facades\DB;
+
+class ClientIntegrationService
+{
+    public function getClientIntegration(Client $client, string $integrationCode): ?ClientIntegration
+    {
+        return $client->integrations()
+            ->where('integration_code', $integrationCode)
+            ->first();
+    }
+
+    /** @return Collection<int, ClientIntegration> */
+    public function getAllForClient(Client $client): Collection
+    {
+        return $client->integrations()->with('integration')->get();
+    }
+
+    public function updateOrCreateIntegration(
+        Client $client,
+        Integration $integration,
+        array $data,
+    ): ClientIntegration {
+        return DB::transaction(function () use ($client, $integration, $data): ClientIntegration {
+            $clientIntegration = ClientIntegration::query()->updateOrCreate(
+                [
+                    'client_id' => $client->id,
+                    'integration_code' => $integration->integration_code,
+                ],
+                ['integration_data' => $data],
+            );
+
+            $service = $this->resolveService($integration->integration_code);
+            $service?->forClient($client)->onSetup();
+
+            return $clientIntegration;
+        });
+    }
+
+    protected function resolveService(string $integrationCode): ?BaseIntegrationService
+    {
+        return match ($integrationCode) {
+            'email' => new MailService,
+            'telepagos', 'telepagos_homo' => new TelepagosIntegrationService($integrationCode),
+            default => null,
+        };
+    }
+}

app/Domains/Integration/Services/MailService.php

@@ -2,7 +2,7 @@
 
 namespace App\Domains\Integration\Services;
 
-use App\Domains\Tenant\Models\Tenant;
+use App\Domains\Client\Models\Client;
 use Exception;
 use Illuminate\Contracts\Mail\Factory as MailFactory;
 use Illuminate\Contracts\Mail\Mailer;
@@ -27,9 +27,7 @@ class MailService extends BaseIntegrationService
 
     private ?Mailer $mailer = null;
 
-    private ?Tenant $tenant = null;
-
-    private bool $usesTenantMailer = false;
+    private bool $usesClientMailer = false;
 
     public function __construct(?MailFactory $mailFactory = null)
     {
@@ -40,16 +38,28 @@ class MailService extends BaseIntegrationService
     {
         parent::forTenant($tenantCode);
 
-        $this->tenant = Tenant::query()
-            ->where('codigo', $tenantCode)
-            ->firstOrFail();
-
-        if ($this->tenantIntegration) {
+        if ($this->clientIntegration) {
             $this->mailer = $this->resolveMailer();
-            $this->usesTenantMailer = true;
+            $this->usesClientMailer = true;
         } else {
             $this->mailer = $this->mailFactory->mailer();
-            $this->usesTenantMailer = false;
+            $this->usesClientMailer = false;
+        }
+
+        return $this;
+    }
+
+    public function forClient(Client|string $client): self
+    {
+        parent::forClient($client);
+        $this->tenant = $this->clientContext?->tenants()->first();
+
+        if ($this->clientIntegration) {
+            $this->mailer = $this->resolveMailer();
+            $this->usesClientMailer = true;
+        } else {
+            $this->mailer = $this->mailFactory->mailer();
+            $this->usesClientMailer = false;
         }
 
         return $this;
@@ -63,7 +73,7 @@ class MailService extends BaseIntegrationService
     public function send(string|array $recipient, string $subject, string $content): void
     {
         if (! $this->mailer || ! $this->tenant) {
-            throw new Exception('MailService no está configurado. Llamá a forTenant() primero.');
+            throw new Exception('MailService no está configurado. Llamá a forTenant() o forClient() primero.');
         }
 
         $this->tenant->loadMissing(['headerLogo', 'footerLogo']);
@@ -91,43 +101,50 @@ class MailService extends BaseIntegrationService
 
     public function mailerName(): string
     {
-        return $this->usesTenantMailer
-            ? 'tenant-smtp'
+        return $this->usesClientMailer
+            ? 'client-smtp'
             : (string) config('mail.default');
     }
 
     public function onSetup(): void
     {
-        if (! $this->tenant) {
-            throw new Exception('MailService no está configurado. Llamá a forTenant() primero.');
+        if (! $this->mailer || ! $this->clientContext) {
+            throw new Exception('MailService no está configurado. Llamá a forTenant() o forClient() primero.');
         }
 
         $recipient = $this->getIntegrationSetting('MAIL_FROM_ADDRESS');
 
         if (! is_string($recipient) || $recipient === '') {
-            throw new InvalidArgumentException('Falta MAIL_FROM_ADDRESS en la configuración SMTP del tenant.');
+            throw new InvalidArgumentException('Falta MAIL_FROM_ADDRESS en la configuración SMTP del cliente.');
         }
 
-        $this->send(
-            $recipient,
-            'Configuración de correo validada',
-            '<h1 style="margin: 0 0 20px;">Configuración de correo validada</h1>'
-                .'<p>La integración SMTP de '.e($this->tenant->nombre).' fue configurada correctamente.</p>'
-                .'<p style="color: #64748b; font-size: 13px;">Este mensaje fue enviado automáticamente para validar las credenciales de correo.</p>',
+        $subject = 'Configuración de correo validada';
+        $content = '<h1 style="margin: 0 0 20px;">Configuración de correo validada</h1>'
+            .'<p>La integración SMTP de '.e($this->clientContext->name).' fue configurada correctamente.</p>'
+            .'<p style="color: #64748b; font-size: 13px;">Este mensaje fue enviado automáticamente para validar las credenciales de correo.</p>';
+
+        if ($this->tenant) {
+            $this->send($recipient, $subject, $content);
+
+            return;
+        }
+
+        $this->mailer->to($recipient)->send(
+            (new Mailable)->subject($subject)->html($content)
         );
     }
 
     private function resolveMailer(): Mailer
     {
-        $data = $this->tenantIntegration?->integration_data;
+        $data = $this->clientIntegration?->integration_data;
 
         if (! is_array($data)) {
-            throw new InvalidArgumentException('La configuración SMTP del tenant no es válida.');
+            throw new InvalidArgumentException('La configuración SMTP del cliente no es válida.');
         }
 
         foreach (self::REQUIRED_SMTP_FIELDS as $field) {
             if (! array_key_exists($field, $data) || $data[$field] === null || $data[$field] === '') {
-                throw new InvalidArgumentException("Falta {$field} en la configuración SMTP del tenant.");
+                throw new InvalidArgumentException("Falta {$field} en la configuración SMTP del cliente.");
             }
         }
 
@@ -137,7 +154,7 @@ class MailService extends BaseIntegrationService
         }
 
         $mailer = $this->mailFactory->build([
-            'name' => "tenant-smtp-{$this->tenantCode}",
+            'name' => 'client-smtp-'.$this->clientContext?->id,
             'transport' => 'smtp',
             'scheme' => $data['MAIL_SCHEME'] ?? null,
             'host' => $data['MAIL_HOST'],
@@ -150,7 +167,7 @@ class MailService extends BaseIntegrationService
 
         $mailer->alwaysFrom(
             $data['MAIL_FROM_ADDRESS'],
-            $data['MAIL_FROM_NAME'] ?? $this->tenant?->nombre,
+            $data['MAIL_FROM_NAME'] ?? $this->clientContext?->name,
         );
 
         return $mailer;

app/Domains/Integration/Services/TelepagosIntegrationService.php

@@ -2,39 +2,37 @@
 
 namespace App\Domains\Integration\Services;
 
+use Carbon\Carbon;
 use Exception;
+use Illuminate\Http\Client\Response;
 use Illuminate\Support\Facades\Cache;
 use Illuminate\Support\Facades\Http;
 use Illuminate\Support\Facades\Log;
-use Carbon\Carbon;
 
 class TelepagosIntegrationService extends BaseIntegrationService
 {
     /**
      * TelepagosIntegrationService constructor.
-     *
-     * @param string $integrationCode
      */
     public function __construct(string $integrationCode = 'telepagos')
     {
         // Force homologation code if not in production and using default
-        if ($integrationCode === 'telepagos' && !app()->environment('production')) {
+        if ($integrationCode === 'telepagos' && ! app()->environment('production')) {
             $integrationCode = 'telepagos_homo';
         }
-        
+
         $this->integrationCode = $integrationCode;
     }
 
     /**
      * Get the headers for Telepagos integration.
      *
-     * @return array
      * @throws Exception
      */
     public function getHeaders(): array
     {
         return [
-            'Authorization' => 'Bearer ' . $this->getToken(),
+            'Authorization' => 'Bearer '.$this->getToken(),
             'Content-Type' => 'application/json',
             'Accept' => 'application/json',
         ];
@@ -43,16 +41,15 @@ class TelepagosIntegrationService extends BaseIntegrationService
     /**
      * Get a valid token, either from cache or by performing a login.
      *
-     * @return string
      * @throws Exception
      */
     public function getToken(): string
     {
-        if (!$this->tenantIntegration) {
-            throw new Exception("Tenant integration is not loaded. Call forTenant() first.");
+        if (! $this->clientIntegration || ! $this->clientContext) {
+            throw new Exception('Client integration is not loaded. Call forTenant() or forClient() first.');
         }
 
-        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+        $cacheKey = "integration_token:{$this->clientContext->id}:{$this->integrationCode}";
 
         $token = Cache::get($cacheKey);
 
@@ -66,7 +63,6 @@ class TelepagosIntegrationService extends BaseIntegrationService
     /**
      * Authenticate with Telepagos and cache the returned token.
      *
-     * @return string
      * @throws Exception
      */
     public function login(): string
@@ -75,7 +71,7 @@ class TelepagosIntegrationService extends BaseIntegrationService
         $password = $this->getIntegrationSetting('password');
 
         if (empty($username) || empty($password)) {
-            throw new Exception("Missing username or password in Telepagos integration settings.");
+            throw new Exception('Missing username or password in Telepagos integration settings.');
         }
 
         $url = $this->getUrl('/v2/auth/token');
@@ -85,22 +81,20 @@ class TelepagosIntegrationService extends BaseIntegrationService
             'password' => $password,
         ]);
 
-        $data = $this->handleResponse($response, 'authentication', [
-            'username' => $username,
-        ]);
+        $data = $this->handleResponse($response, 'authentication');
 
         $token = $data['token'] ?? null;
         $expiresAtStr = $data['expires_at'] ?? null;
 
-        if (!$token || !$expiresAtStr) {
-            throw new Exception("Telepagos authentication response is missing token or expires_at.");
+        if (! $token || ! $expiresAtStr) {
+            throw new Exception('Telepagos authentication response is missing token or expires_at.');
         }
 
         $expiresAt = Carbon::parse($expiresAtStr);
         // Calculate TTL and subtract a buffer of 60 seconds
         $ttlSeconds = max(1, $expiresAt->diffInSeconds(now()) - 60);
 
-        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+        $cacheKey = "integration_token:{$this->clientContext->id}:{$this->integrationCode}";
         Cache::put($cacheKey, $token, $ttlSeconds);
 
         return $token;
@@ -108,21 +102,21 @@ class TelepagosIntegrationService extends BaseIntegrationService
 
     /**
      * Send a request to Telepagos, handling 401 Unauthorized for token refresh.
-     *
-     * @param string $method
-     * @param string $endpoint
-     * @param array $data
-     * @return \Illuminate\Http\Client\Response
      */
-    protected function sendRequest(string $method, string $endpoint, array $data = []): \Illuminate\Http\Client\Response
+    protected function sendRequest(string $method, string $endpoint, array $data = []): Response
     {
         $response = $this->client()->$method($endpoint, $data);
 
         if ($response->status() === 401) {
-            Log::info("Telepagos 401 Unauthorized. Refreshing token and retrying...");
-            
+            Log::channel('telepagos')->info('Telepagos request returned 401; refreshing token and retrying.', [
+                'method' => strtoupper($method),
+                'endpoint' => $endpoint,
+                'client_id' => $this->clientContext?->id,
+                'integration_code' => $this->integrationCode,
+            ]);
+
             $this->clearToken();
-            
+
             $response = $this->client()->$method($endpoint, $data);
         }
 
@@ -132,10 +126,6 @@ class TelepagosIntegrationService extends BaseIntegrationService
     /**
      * Generate a QR code for cash-in.
      *
-     * @param float $amount
-     * @param string $concept
-     * @param string $description
-     * @return array
      * @throws Exception
      */
     public function generateQr(float $amount, string $concept, string $description): array
@@ -154,8 +144,8 @@ class TelepagosIntegrationService extends BaseIntegrationService
     /**
      * Get the details of a cash-in payment.
      *
-     * @param int $cashinId
-     * @return array
+     * @param  int  $cashinId
+     *
      * @throws Exception
      */
     public function getCashinDetails(string $cashinId): array
@@ -170,31 +160,29 @@ class TelepagosIntegrationService extends BaseIntegrationService
     /**
      * Get the account info.
      *
-     * @return array
      * @throws Exception
      */
     public function getAccountInfo(): array
     {
         $response = $this->sendRequest('get', '/v2/account/info');
+
         return $this->handleResponse($response, 'get account info');
     }
 
     /**
      * Handle the Telepagos API response, logging any failures and throwing Exceptions.
      *
-     * @param \Illuminate\Http\Client\Response $response
-     * @param string $actionDescription
-     * @param array $context
-     * @return array
      * @throws Exception
      */
-    protected function handleResponse(\Illuminate\Http\Client\Response $response, string $actionDescription, array $context = []): array
+    protected function handleResponse(Response $response, string $actionDescription, array $context = []): array
     {
         if ($response->failed() || $response->json('status') !== 'ok') {
             $errorMessage = $response->json('message') ?? $response->body();
-            Log::error("Telepagos {$actionDescription} failed: {$errorMessage}", array_merge([
+            Log::channel('telepagos')->error("Telepagos {$actionDescription} failed: {$errorMessage}", array_merge([
                 'response_status' => $response->status(),
-                'response_body' => $response->json() ?? $response->body(),
+                'response_body' => $this->sanitizeForLog($response->json() ?? $response->body()),
+                'client_id' => $this->clientContext?->id,
+                'integration_code' => $this->integrationCode,
             ], $context));
 
             throw new Exception("Telepagos {$actionDescription} failed: {$errorMessage}");
@@ -203,21 +191,46 @@ class TelepagosIntegrationService extends BaseIntegrationService
         return $response->json() ?? [];
     }
 
+    /**
+     * Remove credentials and tokens before serializing provider responses.
+     */
+    protected function sanitizeForLog(mixed $value): mixed
+    {
+        if (! is_array($value)) {
+            return $value;
+        }
+
+        $sensitiveKeys = ['authorization', 'password', 'token', 'access_token', 'refresh_token'];
+
+        foreach ($value as $key => $item) {
+            if (in_array(strtolower((string) $key), $sensitiveKeys, true)) {
+                $value[$key] = '[REDACTED]';
+
+                continue;
+            }
+
+            $value[$key] = $this->sanitizeForLog($item);
+        }
+
+        return $value;
+    }
+
     /**
      * Clear the cached token.
-     *
-     * @return void
      */
     public function clearToken(): void
     {
-        $cacheKey = "integration_token:{$this->tenantCode}:{$this->integrationCode}";
+        if (! $this->clientContext) {
+            return;
+        }
+
+        $cacheKey = "integration_token:{$this->clientContext->id}:{$this->integrationCode}";
         Cache::forget($cacheKey);
     }
 
     /**
      * Perform initial setup validation for Telepagos.
      *
-     * @return void
      * @throws Exception
      */
     public function onSetup(): void

app/Domains/Integration/Services/TelepagosWebhookService.php

@@ -2,11 +2,11 @@
 
 namespace App\Domains\Integration\Services;
 
+use App\Domains\Client\Models\Client;
 use App\Domains\Purchase\Models\Purchase;
 use App\Domains\Purchase\Models\TelepagosPayment;
 use App\Domains\Purchase\Models\TelepagosQr;
 use App\Domains\Purchase\Services\CheckoutService;
-use App\Domains\Tenant\Models\Tenant;
 use Exception;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Log;
@@ -22,12 +22,15 @@ class TelepagosWebhookService
      *
      * @throws Exception
      */
-    public function handleWebhook(string $tenantCodigo, string $cashinId): void
+    public function handleWebhook(Client $client, string $cashinId): void
     {
-        $tenant = Tenant::where('codigo', $tenantCodigo)->firstOrFail();
+        Log::channel('telepagos')->info('Telepagos webhook received.', [
+            'client_code' => $client->code,
+            'cashin_id' => $cashinId,
+        ]);
 
         $telepagosService = new TelepagosIntegrationService;
-        $telepagosService->forTenant($tenant->codigo);
+        $telepagosService->forClient($client);
 
         try {
             $details = $telepagosService->getCashinDetails($cashinId);
@@ -36,84 +39,9 @@ class TelepagosWebhookService
             $amount = $this->normalizeAmount($details['data']['amount'] ?? $details['amount'] ?? 0);
             $operationId = $details['data']['operation_id'] ?? $details['operation_id'] ?? null;
 
-            $transferenciaOperationIds = [1, 3, 11];
-            $qrOperationIds = [31, 37, 47];
-
-            $compra = null;
-
-            if (in_array((int) $operationId, $transferenciaOperationIds, true)) {
-                $cuit = $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null;
-
-                if (! $cuit) {
-                    Log::warning("Telepagos webhook: CUIT not found for Transferencia cashin {$cashinId}");
-
-                    return;
-                }
-
-                $dni = substr($cuit, 2, -1);
-
-                $compra = Purchase::where('tenant_codigo', $tenantCodigo)
-                    ->where('transfer_payer_dni', $dni)
-                    ->whereIn('status', [
-                        Purchase::STATUS_CREATED,
-                        Purchase::STATUS_PENDING_PAYMENT,
-                    ])
-                    ->where('payment_method', 'transfer')
-                    ->where('total', $amount)
-                    ->latest()
-                    ->first();
-
-                if (! $compra) {
-                    Log::warning("Telepagos webhook: No matching purchase found for DNI {$dni} and amount {$amount} for cashin {$cashinId}");
-
-                    return;
-                }
-            } elseif (in_array((int) $operationId, $qrOperationIds, true)) {
-                if (! $qrOrderId) {
-                    Log::warning("Telepagos webhook: qr_order_id not found for QR cashin {$cashinId}");
-
-                    return;
-                }
-
-                $telepagosQr = TelepagosQr::where('qr_order_id', $qrOrderId)->first();
-
-                if (! $telepagosQr) {
-                    Log::warning("Telepagos webhook: QR {$qrOrderId} not found in database for cashin {$cashinId}");
-
-                    return;
-                }
-
-                $compra = $telepagosQr->compra;
-
-                if (! $compra) {
-                    Log::warning("Telepagos webhook: Purchase not found for QR {$qrOrderId}");
-
-                    return;
-                }
-
-                if (! in_array($compra->status, [
-                    Purchase::STATUS_PENDING_PAYMENT,
-                ], true)) {
-                    Log::warning("Telepagos webhook: Purchase {$compra->id} is not awaiting payment confirmation");
-
-                    return;
-                }
-
-                $totalAmount = $this->normalizeAmount($compra->getTotalAmount());
-
-                if ($amount !== $totalAmount) {
-                    Log::warning("Telepagos webhook: Amount mismatch. Cashin amount: {$amount}, Purchase amount: {$totalAmount}");
-
-                    return;
-                }
-            } else {
-                Log::warning("Telepagos webhook: Unknown operation_id {$operationId} for cashin {$cashinId}");
-
-                return;
-            }
-
             $paymentData = [
-                'compra_id' => $compra->id,
+                'compra_id' => null,
+                'matched_purchase_ids' => null,
                 'cuit_buyer' => $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null,
                 'cvu_buyer' => $details['data']['buyer']['cvu'] ?? $details['buyer']['cvu'] ?? null,
                 'amount' => $amount,
@@ -125,14 +53,154 @@ class TelepagosWebhookService
                 'link_id' => $details['data']['link_id'] ?? $details['link_id'] ?? null,
             ];
 
+            $transferenciaOperationIds = [1, 3, 11];
+            $qrOperationIds = [31, 37, 47];
+
+            $compra = null;
+
+            if (in_array((int) $operationId, $transferenciaOperationIds, true)) {
+                $cuit = $details['data']['buyer']['cuit'] ?? $details['buyer']['cuit'] ?? null;
+
+                if (! $cuit) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: CUIT not found for transfer.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                    ]);
+
+                    return;
+                }
+
+                $dni = substr($cuit, 2, -1);
+
+                $tenantCodes = $client->tenants()->pluck('codigo');
+                $purchases = Purchase::whereIn('tenant_codigo', $tenantCodes)
+                    ->where('transfer_payer_dni', $dni)
+                    ->whereIn('status', [
+                        Purchase::STATUS_CREATED,
+                        Purchase::STATUS_PENDING_PAYMENT,
+                        Purchase::STATUS_IN_REVIEW,
+                    ])
+                    ->where('payment_method', 'transfer')
+                    ->where('total', $amount)
+                    ->latest()
+                    ->get();
+
+                $paymentData['matched_purchase_ids'] = $purchases->pluck('id')->all();
+                $compra = $purchases->count() === 1 ? $purchases->first() : null;
+
+                if (! $compra) {
+                    if ($purchases->count() > 1) {
+                        TelepagosPayment::create($paymentData);
+                    }
+
+                    Log::channel('telepagos')->warning('Telepagos webhook: Expected exactly one matching purchase.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'amount' => $amount,
+                        'matches' => $purchases->count(),
+                    ]);
+
+                    return;
+                }
+            } elseif (in_array((int) $operationId, $qrOperationIds, true)) {
+                if (! $qrOrderId) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: qr_order_id not present in provider response.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                    ]);
+
+                    return;
+                }
+
+                $telepagosQr = TelepagosQr::where('qr_order_id', $qrOrderId)->first();
+
+                if (! $telepagosQr) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: QR not found in database.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'qr_order_id' => $qrOrderId,
+                    ]);
+
+                    return;
+                }
+
+                $compra = $telepagosQr->compra;
+
+                if (! $compra) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: Purchase not found for QR.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'qr_order_id' => $qrOrderId,
+                    ]);
+
+                    return;
+                }
+
+                if (! $client->tenants()->where('codigo', $compra->tenant_codigo)->exists()) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: Purchase does not belong to client.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'purchase_id' => $compra->id,
+                    ]);
+
+                    return;
+                }
+
+                if (! in_array($compra->status, [
+                    Purchase::STATUS_PENDING_PAYMENT,
+                ], true)) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: Purchase is not awaiting payment confirmation.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'purchase_id' => $compra->id,
+                        'purchase_status' => $compra->status,
+                    ]);
+
+                    return;
+                }
+
+                $totalAmount = $this->normalizeAmount($compra->getTotalAmount());
+
+                if ($amount !== $totalAmount) {
+                    Log::channel('telepagos')->warning('Telepagos webhook: Amount mismatch.', [
+                        'client_code' => $client->code,
+                        'cashin_id' => $cashinId,
+                        'purchase_id' => $compra->id,
+                        'cashin_amount' => $amount,
+                        'purchase_amount' => $totalAmount,
+                    ]);
+
+                    return;
+                }
+            } else {
+                Log::channel('telepagos')->warning('Telepagos webhook: Unknown operation_id.', [
+                    'client_code' => $client->code,
+                    'cashin_id' => $cashinId,
+                    'operation_id' => $operationId,
+                ]);
+
+                return;
+            }
+
+            $paymentData['compra_id'] = $compra->id;
+
             DB::transaction(function () use ($compra, $paymentData) {
                 TelepagosPayment::create($paymentData);
                 $this->checkoutService->confirmPaidPurchase($compra);
             });
 
-            Log::info("Telepagos webhook: Successfully processed cashin {$cashinId} for purchase {$compra->id}");
+            Log::channel('telepagos')->info('Telepagos webhook processed successfully.', [
+                'client_code' => $client->code,
+                'cashin_id' => $cashinId,
+                'purchase_id' => $compra->id,
+                'transaction_id' => $paymentData['transaction_id'],
+            ]);
         } catch (Exception $e) {
-            Log::error('Telepagos webhook error: '.$e->getMessage());
+            Log::channel('telepagos')->error('Telepagos webhook processing failed.', [
+                'client_code' => $client->code,
+                'cashin_id' => $cashinId,
+                'error' => $e->getMessage(),
+            ]);
             throw $e;
         }
     }

app/Domains/Integration/Services/TenantIntegrationService.php

@@ -1,59 +0,0 @@
-<?php
-
-namespace App\Domains\Integration\Services;
-
-use App\Domains\Integration\Models\Integration;
-use App\Domains\Integration\Models\TenantIntegration;
-use Illuminate\Support\Facades\DB;
-
-class TenantIntegrationService
-{
-    public function getTenantIntegration(string $tenantCode, string $integrationCode): ?TenantIntegration
-    {
-        return TenantIntegration::where('tenant_code', $tenantCode)
-            ->where('integration_code', $integrationCode)
-            ->first();
-    }
-
-    public function getAllForTenant(string $tenantCode)
-    {
-        return TenantIntegration::with('integration')
-            ->where('tenant_code', $tenantCode)
-            ->get();
-    }
-
-    public function updateOrCreateIntegration(string $tenantCode, Integration $integration, array $data): TenantIntegration
-    {
-        return DB::transaction(function () use ($tenantCode, $integration, $data) {
-            $tenantIntegration = TenantIntegration::updateOrCreate(
-                [
-                    'tenant_code' => $tenantCode,
-                    'integration_code' => $integration->integration_code,
-                ],
-                [
-                    'integration_data' => $data,
-                ]
-            );
-
-            $service = $this->resolveService($integration->integration_code);
-            if ($service) {
-                $service->forTenant($tenantCode)->onSetup();
-            }
-
-            return $tenantIntegration;
-        });
-    }
-
-    protected function resolveService(string $integrationCode): ?BaseIntegrationService
-    {
-        switch ($integrationCode) {
-            case 'email':
-                return new MailService;
-            case 'telepagos':
-            case 'telepagos_homo':
-                return new TelepagosIntegrationService($integrationCode);
-            default:
-                return null;
-        }
-    }
-}

app/Domains/Integration/documentacion/README.md

@@ -2,18 +2,18 @@
 
 ## Propósito
 
-Gestiona integraciones externas disponibles y su configuración por tenant. Incluye correo y pagos mediante Telepagos.
+Gestiona integraciones externas disponibles y su configuración por cliente. Un cliente puede agrupar múltiples tenants que comparten las mismas credenciales. Incluye correo y pagos mediante Telepagos.
 
 ## Modelo y seguridad
 
 - `Integration`: definición global de una integración.
-- `TenantIntegration`: configuración y credenciales de una integración para un tenant.
+- `ClientIntegration`: configuración y credenciales de una integración para un cliente.
 - `EncryptedIntegrationData`: cast que protege los datos sensibles persistidos.
-- `TenantIntegrationService`: consulta y configura integraciones del tenant.
+- `ClientIntegrationService`: consulta y configura integraciones del cliente.
 
 ## Servicios externos
 
-- `BaseIntegrationService`: base para resolver configuración, URL y cliente del tenant.
+- `BaseIntegrationService`: resuelve el cliente desde el tenant operativo y carga exclusivamente la configuración del cliente.
 - `MailService`: envío de correo usando la integración configurada.
 - `TelepagosIntegrationService`: autenticación, caché de token, generación de QR y consulta de cobros.
 - `TelepagosWebhookService`: procesa notificaciones recibidas desde Telepagos.
@@ -21,9 +21,13 @@ Gestiona integraciones externas disponibles y su configuración por tenant. Incl
 ## Endpoints
 
 - CRUD global bajo `/integrations`.
-- Consulta y configuración por tenant bajo `/{tenant_code}/integrations`.
-- `POST /webhooks/telepagos/{tenant_codigo}` para notificaciones del proveedor.
+- Consulta y configuración por cliente bajo `/clients/{client}/integrations`.
+- `POST /webhooks/telepagos/{client}` para notificaciones del proveedor.
+
+## Logging de Telepagos
+
+Los eventos de autenticación, QR, consultas de cuenta y procesamiento de webhooks se escriben en el canal diario `telepagos`, separado del log general. Los archivos se generan en `storage/logs/telepagos/telepagos-YYYY-MM-DD.log`; el nivel y la retención se configuran con `TELEPAGOS_LOG_LEVEL` y `TELEPAGOS_LOG_DAYS`. Tokens y credenciales se eliminan del contexto antes de registrar respuestas del proveedor.
 
 ## Dependencias y reglas
 
-Se integra con `Tenant` y con el checkout de `Purchase`. `Notification` utiliza `MailService`. Las credenciales no deben exponerse en respuestas ni logs; los webhooks deben validar su contrato antes de alterar una compra.
+Se integra con `Client`, `Tenant` y con el checkout de `Purchase`. `Notification` utiliza `MailService`. El tenant conserva el contexto operativo y de branding, pero nunca es dueño de credenciales. Las credenciales no se exponen en respuestas ni logs; los webhooks deben validar su contrato antes de alterar una compra.