feat(purchase): implement PurchaseController with CRUD operations and request validation

app/Domains/Cart/Controllers/CartController.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Domains\Cart\Controllers;
+
+use App\Domains\Cart\Requests\AddCartItemRequest;
+use App\Domains\Cart\Requests\UpdateCartItemQuantityRequest;
+use App\Domains\Cart\Resources\CartResource;
+use App\Domains\Cart\Services\CartService;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class CartController extends Controller
+{
+    public function __construct(
+        protected CartService $cartService,
+    ) {
+    }
+
+    public function show(Request $request, Tenant $tenant): CartResource
+    {
+        return CartResource::make($this->cartService->show($tenant, $request));
+    }
+
+    public function addItem(AddCartItemRequest $request, Tenant $tenant): JsonResponse
+    {
+        $result = $this->cartService->addItem(
+            $tenant,
+            $request,
+            (int) $request->validated('product_variant_id'),
+            (int) $request->validated('cantidad'),
+        );
+
+        $response = CartResource::make($result['cart'])->response();
+
+        if ($result['guest_token'] !== null) {
+            $response->withCookie($this->cartService->makeGuestTokenCookie($result['guest_token']));
+        }
+
+        return $response;
+    }
+
+    public function updateItemQuantity(
+        UpdateCartItemQuantityRequest $request,
+        Tenant $tenant,
+        ProductVariant $productVariant,
+    ): CartResource {
+        return CartResource::make(
+            $this->cartService->updateItemQuantity(
+                $tenant,
+                $request,
+                $productVariant->getKey(),
+                (int) $request->validated('cantidad'),
+            )
+        );
+    }
+
+    public function removeItem(Request $request, Tenant $tenant, ProductVariant $productVariant): CartResource
+    {
+        return CartResource::make(
+            $this->cartService->removeItem($tenant, $request, $productVariant->getKey())
+        );
+    }
+}

app/Domains/Cart/Models/Cart.php

@@ -3,6 +3,7 @@
 namespace App\Domains\Cart\Models;
 
 use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Tenant\Models\Tenant;
 use App\Models\User;
 use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
@@ -11,8 +12,10 @@ use Illuminate\Database\Eloquent\Relations\BelongsTo;
 use Illuminate\Database\Eloquent\Relations\HasMany;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 
 #[Fillable([
+    'tenant_codigo',
     'user_id',
     'guest_token',
     'status',
@@ -30,6 +33,14 @@ class Cart extends Model
         ];
     }
 
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
     /**
      * @return BelongsTo<User, $this>
      */
@@ -54,11 +65,8 @@ class Cart extends Model
             ]);
         }
 
-        return DB::transaction(function () use ($productVariantId, $quantity) {
-            /** @var ProductVariant $variant */
-            $variant = ProductVariant::query()
-                ->lockForUpdate()
-                ->findOrFail($productVariantId);
+        return DB::transaction(function () use ($productVariantId, $quantity): CartItem {
+            $variant = $this->resolveScopedVariant($productVariantId, true);
 
             if ($variant->stock < $quantity) {
                 throw ValidationException::withMessages([
@@ -68,18 +76,18 @@ class Cart extends Model
 
             /** @var CartItem|null $item */
             $item = $this->items()
-                ->where('producto_variante_id', $productVariantId)
+                ->where('producto_variante_id', $variant->getKey())
                 ->lockForUpdate()
                 ->first();
 
-            if ($item) {
-                $item->cantidad += $quantity;
-                $item->save();
-            } else {
+            if ($item === null) {
                 $item = $this->items()->create([
-                    'producto_variante_id' => $productVariantId,
+                    'producto_variante_id' => $variant->getKey(),
                     'cantidad' => $quantity,
                 ]);
+            } else {
+                $item->cantidad += $quantity;
+                $item->save();
             }
 
             $variant->decrement('stock', $quantity);
@@ -96,18 +104,14 @@ class Cart extends Model
             ]);
         }
 
-        return DB::transaction(function () use ($productVariantId, $quantity) {
+        return DB::transaction(function () use ($productVariantId, $quantity): CartItem {
             /** @var CartItem $item */
             $item = $this->items()
                 ->where('producto_variante_id', $productVariantId)
                 ->lockForUpdate()
                 ->firstOrFail();
 
-            /** @var ProductVariant $variant */
-            $variant = ProductVariant::query()
-                ->lockForUpdate()
-                ->findOrFail($productVariantId);
-
+            $variant = $this->resolveScopedVariant($productVariantId, true);
             $delta = $quantity - $item->cantidad;
 
             if ($delta > 0 && $variant->stock < $delta) {
@@ -133,20 +137,36 @@ class Cart extends Model
 
     public function removeItem(int $productVariantId): void
     {
-        DB::transaction(function () use ($productVariantId) {
+        DB::transaction(function () use ($productVariantId): void {
             /** @var CartItem $item */
             $item = $this->items()
                 ->where('producto_variante_id', $productVariantId)
                 ->lockForUpdate()
                 ->firstOrFail();
 
-            /** @var ProductVariant $variant */
-            $variant = ProductVariant::query()
-                ->lockForUpdate()
-                ->findOrFail($productVariantId);
-
+            $variant = $this->resolveScopedVariant($productVariantId, true);
             $variant->increment('stock', $item->cantidad);
             $item->delete();
         });
     }
+
+    protected function resolveScopedVariant(int $productVariantId, bool $lockForUpdate = false): ProductVariant
+    {
+        $query = ProductVariant::query()
+            ->whereKey($productVariantId)
+            ->whereHas('product', fn ($query) => $query->where('tenant_codigo', $this->tenant_codigo));
+
+        if ($lockForUpdate) {
+            $query->lockForUpdate();
+        }
+
+        /** @var ProductVariant|null $variant */
+        $variant = $query->first();
+
+        if ($variant === null) {
+            throw new NotFoundHttpException('Product variant not found for tenant.');
+        }
+
+        return $variant;
+    }
 }

app/Domains/Cart/Requests/AddCartItemRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Cart\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class AddCartItemRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'product_variant_id' => ['required', 'integer'],
+            'cantidad' => ['required', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Cart/Requests/UpdateCartItemQuantityRequest.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Cart\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class UpdateCartItemQuantityRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return true;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'cantidad' => ['required', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Cart/Resources/CartItemResource.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace App\Domains\Cart\Resources;
+
+use App\Domains\Catalog\Resources\ProductVariantDefinitionResource;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Cart\Models\CartItem
+ */
+class CartItemResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $variant = $this->variant;
+        $product = $variant?->product;
+
+        return [
+            'id' => $this->id,
+            'cantidad' => $this->cantidad,
+            'precio_unitario' => $this->formatMoney($variant?->precio),
+            'subtotal' => $this->formatMoney(($variant?->precio ?? 0) * $this->cantidad),
+            'product' => $product === null ? null : [
+                'id' => $product->id,
+                'nombre' => $product->nombre,
+                'slug' => $product->slug,
+            ],
+            'variant' => $variant === null ? null : [
+                'id' => $variant->id,
+                'nombre' => $variant->nombre,
+                'slug' => $variant->slug,
+                'definitions' => ProductVariantDefinitionResource::collection($variant->definitions),
+            ],
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Cart/Resources/CartResource.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Domains\Cart\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Cart\Models\Cart
+ */
+class CartResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $items = $this->resource->relationLoaded('items')
+            ? $this->resource->getRelation('items')
+            : collect();
+
+        $subtotal = $items->reduce(
+            fn (float $carry, $item): float => $carry + ((float) ($item->variant?->precio ?? 0) * $item->cantidad),
+            0.0,
+        );
+
+        return [
+            'id' => $this->id,
+            'tenant_codigo' => $this->tenant_codigo,
+            'status' => $this->status ?? 'active',
+            'items' => CartItemResource::collection($items),
+            'subtotal' => $this->formatMoney($subtotal),
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Cart/Services/CartService.php

@@ -0,0 +1,204 @@
+<?php
+
+namespace App\Domains\Cart\Services;
+
+use App\Domains\Cart\Models\Cart;
+use App\Domains\Tenant\Models\Tenant;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Str;
+use Symfony\Component\HttpFoundation\Cookie;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class CartService
+{
+    public function show(Tenant $tenant, Request $request): Cart
+    {
+        $identity = $this->resolveIdentity($request);
+
+        if ($identity === null) {
+            return $this->makeEmptyCart($tenant);
+        }
+
+        $cart = $this->findCart($tenant, $identity);
+
+        if ($cart === null) {
+            return $this->makeEmptyCart($tenant);
+        }
+
+        return $this->loadCart($cart);
+    }
+
+    /**
+     * @return array{cart: Cart, guest_token: ?string}
+     */
+    public function addItem(Tenant $tenant, Request $request, int $productVariantId, int $quantity): array
+    {
+        $resolvedIdentity = $this->resolveIdentity($request, true);
+        $identity = $resolvedIdentity['identity'];
+        $cart = $this->findOrCreateCart($tenant, $identity);
+        $cart->addItem($productVariantId, $quantity);
+
+        return [
+            'cart' => $this->loadCart($cart),
+            'guest_token' => $resolvedIdentity['generated_guest_token'],
+        ];
+    }
+
+    public function updateItemQuantity(Tenant $tenant, Request $request, int $productVariantId, int $quantity): Cart
+    {
+        $identity = $this->requireIdentity($request);
+        $cart = $this->findCartOrFail($tenant, $identity);
+        $cart->updateItem($productVariantId, $quantity);
+
+        return $this->loadCart($cart);
+    }
+
+    public function removeItem(Tenant $tenant, Request $request, int $productVariantId): Cart
+    {
+        $identity = $this->requireIdentity($request);
+        $cart = $this->findCartOrFail($tenant, $identity);
+        $cart->removeItem($productVariantId);
+
+        return $this->loadCart($cart);
+    }
+
+    public function makeGuestTokenCookie(string $guestToken): Cookie
+    {
+        return cookie(
+            'guest_token',
+            $guestToken,
+            60 * 24 * 180,
+            '/',
+            null,
+            false,
+            true,
+            false,
+            'lax',
+        );
+    }
+
+    protected function makeEmptyCart(Tenant $tenant): Cart
+    {
+        $cart = new Cart([
+            'tenant_codigo' => $tenant->codigo,
+            'status' => 'active',
+        ]);
+
+        $cart->setRelation('items', collect());
+
+        return $cart;
+    }
+
+    protected function loadCart(Cart $cart): Cart
+    {
+        return $cart->fresh()->load([
+            'items.variant.product',
+            'items.variant.definitions.attribute',
+        ]);
+    }
+
+    /**
+     * @return array{identity: array{user_id: ?int, guest_token: ?string}, generated_guest_token: ?string}|null
+     */
+    protected function resolveIdentity(Request $request, bool $generateGuestToken = false): ?array
+    {
+        $user = $request->user();
+
+        if ($user instanceof User) {
+            return [
+                'identity' => [
+                    'user_id' => $user->getKey(),
+                    'guest_token' => null,
+                ],
+                'generated_guest_token' => null,
+            ];
+        }
+
+        $guestToken = $request->cookie('guest_token');
+
+        if (is_string($guestToken) && $guestToken !== '') {
+            return [
+                'identity' => [
+                    'user_id' => null,
+                    'guest_token' => $guestToken,
+                ],
+                'generated_guest_token' => null,
+            ];
+        }
+
+        if (! $generateGuestToken) {
+            return null;
+        }
+
+        $generatedGuestToken = (string) Str::uuid();
+
+        return [
+            'identity' => [
+                'user_id' => null,
+                'guest_token' => $generatedGuestToken,
+            ],
+            'generated_guest_token' => $generatedGuestToken,
+        ];
+    }
+
+    /**
+     * @return array{user_id: ?int, guest_token: ?string}
+     */
+    protected function requireIdentity(Request $request): array
+    {
+        $resolvedIdentity = $this->resolveIdentity($request);
+
+        if ($resolvedIdentity === null) {
+            throw new NotFoundHttpException('Cart not found.');
+        }
+
+        return $resolvedIdentity['identity'];
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findCart(Tenant $tenant, array $identity): ?Cart
+    {
+        return Cart::query()
+            ->where('tenant_codigo', $tenant->codigo)
+            ->when(
+                $identity['user_id'] !== null,
+                fn ($query) => $query->where('user_id', $identity['user_id']),
+                fn ($query) => $query->where('guest_token', $identity['guest_token']),
+            )
+            ->first();
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findCartOrFail(Tenant $tenant, array $identity): Cart
+    {
+        $cart = $this->findCart($tenant, $identity);
+
+        if ($cart === null) {
+            throw new NotFoundHttpException('Cart not found.');
+        }
+
+        return $cart;
+    }
+
+    /**
+     * @param  array{user_id: ?int, guest_token: ?string}  $identity
+     */
+    protected function findOrCreateCart(Tenant $tenant, array $identity): Cart
+    {
+        $attributes = ['tenant_codigo' => $tenant->codigo];
+
+        if ($identity['user_id'] !== null) {
+            $attributes['user_id'] = $identity['user_id'];
+        } else {
+            $attributes['guest_token'] = $identity['guest_token'];
+        }
+
+        return Cart::query()->firstOrCreate($attributes, ['status' => 'active']);
+    }
+
+}

app/Domains/Cart/routes/api.php

@@ -0,0 +1,11 @@
+<?php
+
+use App\Domains\Cart\Controllers\CartController;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('tenants/{tenant:codigo}')->group(function (): void {
+    Route::get('cart', [CartController::class, 'show']);
+    Route::post('cart/items', [CartController::class, 'addItem']);
+    Route::patch('cart/items/{productVariant}', [CartController::class, 'updateItemQuantity']);
+    Route::delete('cart/items/{productVariant}', [CartController::class, 'removeItem']);
+});

app/Domains/Purchase/Controllers/PurchaseController.php

@@ -0,0 +1,129 @@
+<?php
+
+namespace App\Domains\Purchase\Controllers;
+
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Purchase\Models\Purchase;
+use App\Domains\Purchase\Requests\StorePurchaseRequest;
+use App\Domains\Purchase\Resources\PurchaseResource;
+use App\Domains\Tenant\Models\Tenant;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Validation\ValidationException;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+class PurchaseController extends Controller
+{
+    public function index(Request $request, Tenant $tenant): JsonResponse
+    {
+        return PurchaseResource::collection(
+            Purchase::query()
+                ->with(['items.variant.product', 'items.variant.definitions'])
+                ->where('tenant_codigo', $tenant->codigo)
+                ->where('user_id', $request->user()->id)
+                ->latest()
+                ->get()
+        )->response();
+    }
+
+    public function store(StorePurchaseRequest $request, Tenant $tenant): JsonResponse
+    {
+        $data = $request->validated();
+        $items = $data['items'];
+
+        unset($data['items']);
+
+        $variants = $this->resolveTenantVariants($tenant, $items);
+        $purchaseItems = $this->buildPurchaseItemsPayload($items, $variants);
+
+        $purchase = DB::transaction(function () use ($request, $tenant, $data, $purchaseItems): Purchase {
+            /** @var Purchase $purchase */
+            $purchase = Purchase::query()->create([
+                ...$data,
+                'tenant_codigo' => $tenant->codigo,
+                'user_id' => $request->user()->id,
+            ]);
+
+            $purchase->items()->createMany($purchaseItems);
+
+            return $purchase->load(['items.variant.product', 'items.variant.definitions']);
+        });
+
+        return PurchaseResource::make($purchase)->response()->setStatusCode(201);
+    }
+
+    public function show(Request $request, Tenant $tenant, Purchase $compra): PurchaseResource
+    {
+        $compra = $this->resolveScopedPurchase($tenant, $request->user()->id, $compra);
+
+        return PurchaseResource::make(
+            $compra->loadMissing(['items.variant.product', 'items.variant.definitions'])
+        );
+    }
+
+    /**
+     * @param  array<int, array<string, mixed>>  $items
+     * @return \Illuminate\Support\Collection<int, ProductVariant>
+     */
+    protected function resolveTenantVariants(Tenant $tenant, array $items)
+    {
+        $variantIds = collect($items)
+            ->pluck('producto_variante_id')
+            ->filter()
+            ->map(static fn (mixed $id): int => (int) $id)
+            ->unique()
+            ->values();
+
+        $variants = ProductVariant::query()
+            ->with('product')
+            ->whereIn('id', $variantIds)
+            ->whereHas('product', fn ($query) => $query->where('tenant_codigo', $tenant->codigo))
+            ->get()
+            ->keyBy('id');
+
+        if ($variants->count() !== $variantIds->count()) {
+            throw ValidationException::withMessages([
+                'items' => 'One or more product variants do not belong to the tenant.',
+            ]);
+        }
+
+        return $variants;
+    }
+
+    /**
+     * @param  array<int, array<string, mixed>>  $items
+     * @param  \Illuminate\Support\Collection<int, ProductVariant>  $variants
+     * @return array<int, array<string, mixed>>
+     */
+    protected function buildPurchaseItemsPayload(array $items, $variants): array
+    {
+        return collect($items)
+            ->map(function (array $item) use ($variants): array {
+                /** @var ProductVariant $variant */
+                $variant = $variants->get((int) $item['producto_variante_id']);
+                $quantity = (int) $item['cantidad'];
+                $unitPrice = (float) $variant->precio;
+
+                return [
+                    'producto_variante_id' => $variant->getKey(),
+                    'cantidad' => $quantity,
+                    'precio_unitario' => $unitPrice,
+                    'discount_total' => null,
+                    'tax_total' => null,
+                    'total' => $unitPrice * $quantity,
+                ];
+            })
+            ->all();
+    }
+
+    protected function resolveScopedPurchase(Tenant $tenant, int $userId, Purchase $purchase): Purchase
+    {
+        if ($purchase->tenant_codigo !== $tenant->codigo || $purchase->user_id !== $userId) {
+            throw new NotFoundHttpException('Purchase not found for tenant.');
+        }
+
+        return $purchase;
+    }
+}

app/Domains/Purchase/Models/Purchase.php

@@ -0,0 +1,56 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use App\Domains\Tenant\Models\Tenant;
+use App\Models\User;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+#[Fillable([
+    'tenant_codigo',
+    'user_id',
+    'status',
+    'payment_status',
+    'payment_method',
+])]
+class Purchase extends Model
+{
+    use HasFactory;
+
+    protected $table = 'compras';
+
+    protected function casts(): array
+    {
+        return [
+            'user_id' => 'integer',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Tenant, $this>
+     */
+    public function tenant(): BelongsTo
+    {
+        return $this->belongsTo(Tenant::class, 'tenant_codigo', 'codigo');
+    }
+
+    /**
+     * @return BelongsTo<User, $this>
+     */
+    public function user(): BelongsTo
+    {
+        return $this->belongsTo(User::class);
+    }
+
+    /**
+     * @return HasMany<PurchaseItem, $this>
+     */
+    public function items(): HasMany
+    {
+        return $this->hasMany(PurchaseItem::class, 'compra_id');
+    }
+}

app/Domains/Purchase/Models/PurchaseItem.php

@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Domains\Purchase\Models;
+
+use App\Domains\Catalog\Models\ProductVariant;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+#[Fillable([
+    'compra_id',
+    'producto_variante_id',
+    'cantidad',
+    'precio_unitario',
+    'discount_total',
+    'tax_total',
+    'total',
+])]
+class PurchaseItem extends Model
+{
+    use HasFactory;
+
+    protected $table = 'compra_items';
+
+    protected function casts(): array
+    {
+        return [
+            'compra_id' => 'integer',
+            'producto_variante_id' => 'integer',
+            'cantidad' => 'integer',
+            'precio_unitario' => 'decimal:2',
+            'discount_total' => 'decimal:2',
+            'tax_total' => 'decimal:2',
+            'total' => 'decimal:2',
+        ];
+    }
+
+    /**
+     * @return BelongsTo<Purchase, $this>
+     */
+    public function purchase(): BelongsTo
+    {
+        return $this->belongsTo(Purchase::class, 'compra_id');
+    }
+
+    /**
+     * @return BelongsTo<ProductVariant, $this>
+     */
+    public function variant(): BelongsTo
+    {
+        return $this->belongsTo(ProductVariant::class, 'producto_variante_id');
+    }
+}

app/Domains/Purchase/Requests/StorePurchaseRequest.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Purchase\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class StorePurchaseRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        return $this->user() !== null;
+    }
+
+    /**
+     * @return array<string, mixed>
+     */
+    public function rules(): array
+    {
+        return [
+            'status' => ['sometimes', 'string', Rule::in(['pending', 'paid', 'cancelled'])],
+            'payment_status' => ['sometimes', 'string', Rule::in(['pending', 'approved', 'rejected'])],
+            'payment_method' => ['nullable', 'string', 'max:255'],
+            'items' => ['required', 'array', 'min:1'],
+            'items.*.producto_variante_id' => ['required', 'integer', 'exists:productos_variantes,id'],
+            'items.*.cantidad' => ['required', 'integer', 'min:1'],
+        ];
+    }
+}

app/Domains/Purchase/Resources/PurchaseItemResource.php

@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Domains\Purchase\Resources;
+
+use App\Domains\Catalog\Resources\ProductVariantDefinitionResource;
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Purchase\Models\PurchaseItem
+ */
+class PurchaseItemResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $variant = $this->variant;
+        $product = $variant?->product;
+
+        return [
+            'id' => $this->id,
+            'cantidad' => $this->cantidad,
+            'precio_unitario' => $this->formatMoney($this->precio_unitario),
+            'total' => $this->formatMoney($this->total),
+            'product' => $product === null ? null : [
+                'id' => $product->id,
+                'nombre' => $product->nombre,
+                'slug' => $product->slug,
+            ],
+            'variant' => $variant === null ? null : [
+                'id' => $variant->id,
+                'nombre' => $variant->nombre,
+                'slug' => $variant->slug,
+                'definitions' => ProductVariantDefinitionResource::collection($variant->definitions),
+            ],
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): ?string
+    {
+        if ($amount === null) {
+            return null;
+        }
+
+        return number_format((float) $amount, 2, '.', '');
+    }
+}

app/Domains/Purchase/Resources/PurchaseResource.php

@@ -0,0 +1,49 @@
+<?php
+
+namespace App\Domains\Purchase\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+/**
+ * @mixin \App\Domains\Purchase\Models\Purchase
+ */
+class PurchaseResource extends JsonResource
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function toArray(Request $request): array
+    {
+        $items = $this->resource->relationLoaded('items')
+            ? $this->resource->getRelation('items')
+            : collect();
+
+        $subtotal = $items->reduce(
+            fn (float $carry, $item): float => $carry + ((float) $item->precio_unitario * $item->cantidad),
+            0.0,
+        );
+
+        $total = $items->reduce(
+            fn (float $carry, $item): float => $carry + (float) $item->total,
+            0.0,
+        );
+
+        return [
+            'id' => $this->id,
+            'tenant_codigo' => $this->tenant_codigo,
+            'user_id' => $this->user_id,
+            'status' => $this->status,
+            'payment_status' => $this->payment_status,
+            'payment_method' => $this->payment_method,
+            'items' => PurchaseItemResource::collection($items),
+            'subtotal' => $this->formatMoney($subtotal),
+            'total' => $this->formatMoney($total),
+        ];
+    }
+
+    protected function formatMoney(float|int|string|null $amount): string
+    {
+        return number_format((float) ($amount ?? 0), 2, '.', '');
+    }
+}

app/Domains/Purchase/routes/api.php

@@ -0,0 +1,8 @@
+<?php
+
+use App\Domains\Purchase\Controllers\PurchaseController;
+use Illuminate\Support\Facades\Route;
+
+Route::prefix('tenants/{tenant:codigo}')->middleware('auth:sanctum')->group(function (): void {
+    Route::apiResource('compras', PurchaseController::class)->only(['index', 'store', 'show']);
+});

database/migrations/2026_06_25_000000_create_carritos_table.php

@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('carritos', function (Blueprint $table) {
+            $table->id();
+            $table->string('tenant_codigo');
+            $table->foreignId('user_id')->nullable()->constrained('users')->cascadeOnUpdate()->cascadeOnDelete();
+            $table->string('guest_token')->nullable();
+            $table->string('status')->default('active');
+            $table->timestamps();
+
+            $table->foreign('tenant_codigo')
+                ->references('codigo')
+                ->on('tenants')
+                ->cascadeOnUpdate()
+                ->cascadeOnDelete();
+
+            $table->unique(['tenant_codigo', 'user_id']);
+            $table->unique(['tenant_codigo', 'guest_token']);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('carritos');
+    }
+};

database/migrations/2026_06_25_000010_create_carrito_items_table.php

@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('carrito_items', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('cart_id')->constrained('carritos')->cascadeOnUpdate()->cascadeOnDelete();
+            $table->unsignedBigInteger('producto_variante_id');
+            $table->unsignedInteger('cantidad');
+            $table->timestamps();
+
+            $table->foreign('producto_variante_id')
+                ->references('id')
+                ->on('productos_variantes')
+                ->cascadeOnUpdate()
+                ->cascadeOnDelete();
+
+            $table->unique(['cart_id', 'producto_variante_id']);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('carrito_items');
+    }
+};

database/migrations/2026_06_25_000400_create_carritos_table.php

@@ -0,0 +1,30 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('carritos', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('user_id')->nullable()->constrained('users')->cascadeOnUpdate()->nullOnDelete();
+            $table->string('guest_token')->nullable()->index();
+            $table->enum('status', ['active', 'converted', 'abandoned'])->default('active');
+            $table->timestamps();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('carritos');
+    }
+};

database/migrations/2026_06_25_000410_create_carrito_items_table.php

@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('carrito_items', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('cart_id')->constrained('carritos')->cascadeOnUpdate()->cascadeOnDelete();
+            $table->unsignedBigInteger('producto_variante_id');
+            $table->unsignedInteger('cantidad');
+            $table->timestamps();
+
+            $table->foreign('producto_variante_id')
+                ->references('id')
+                ->on('productos_variantes')
+                ->cascadeOnUpdate()
+                ->cascadeOnDelete();
+
+            $table->unique(['cart_id', 'producto_variante_id'], 'cart_item_cart_variant_unique');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('carrito_items');
+    }
+};

database/migrations/2026_06_25_000420_create_compras_table.php

@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('compras', function (Blueprint $table) {
+            $table->id();
+            $table->string('tenant_codigo');
+            $table->foreignId('user_id')->nullable()->constrained('users')->cascadeOnUpdate()->nullOnDelete();
+            $table->enum('status', ['pending', 'paid', 'cancelled'])->default('pending');
+            $table->enum('payment_status', ['pending', 'approved', 'rejected'])->default('pending');
+            $table->string('payment_method')->nullable();
+            $table->timestamps();
+
+            $table->foreign('tenant_codigo')
+                ->references('codigo')
+                ->on('tenants')
+                ->cascadeOnUpdate()
+                ->restrictOnDelete();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('compras');
+    }
+};

database/migrations/2026_06_25_000430_create_compra_items_table.php

@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('compra_items', function (Blueprint $table) {
+            $table->id();
+            $table->foreignId('compra_id')->constrained('compras')->cascadeOnUpdate()->cascadeOnDelete();
+            $table->unsignedBigInteger('producto_variante_id');
+            $table->unsignedInteger('cantidad');
+            $table->decimal('precio_unitario', 10, 2);
+            $table->decimal('discount_total', 10, 2)->nullable();
+            $table->decimal('tax_total', 10, 2)->nullable();
+            $table->decimal('total', 10, 2);
+            $table->timestamps();
+
+            $table->foreign('producto_variante_id')
+                ->references('id')
+                ->on('productos_variantes')
+                ->cascadeOnUpdate()
+                ->restrictOnDelete();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('compra_items');
+    }
+};

routes/api.php

@@ -8,4 +8,6 @@ Route::get('/user', function (Request $request) {
 })->middleware('auth:sanctum');
 
 require __DIR__.'/../app/Domains/Catalog/routes/api.php';
+require __DIR__.'/../app/Domains/Cart/routes/api.php';
+require __DIR__.'/../app/Domains/Purchase/routes/api.php';
 require __DIR__.'/../app/Domains/Tenant/routes/api.php';

tests/Feature/Cart/CartControllerTest.php

@@ -0,0 +1,303 @@
+<?php
+
+namespace Tests\Feature\Cart;
+
+use App\Domains\Catalog\Models\Product;
+use App\Domains\Catalog\Models\ProductAttribute;
+use App\Domains\Catalog\Models\ProductVariant;
+use App\Domains\Catalog\Models\ProductVariantDefinition;
+use App\Domains\Tenant\Models\Tenant;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class CartControllerTest extends TestCase
+{
+    use RefreshDatabase;
+
+    public function test_it_returns_an_empty_guest_cart_when_cart_does_not_exist(): void
+    {
+        Tenant::create([
+            'codigo' => 'acme',
+            'nombre' => 'Acme',
+            'dominio' => 'acme.com',
+        ]);
+
+        $this->getJson('/api/tenants/acme/cart')
+            ->assertOk()
+            ->assertJson([
+                'id' => null,
+                'tenant_codigo' => 'acme',
+                'status' => 'active',
+                'items' => [],
+                'subtotal' => '0.00',
+            ]);
+    }
+
+    public function test_it_creates_a_guest_cart_and_returns_the_cart_snapshot(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 10, '49.90');
+        $attribute = ProductAttribute::query()->create([
+            'tenant_codigo' => 'acme',
+            'codigo' => 'color',
+            'nombre' => 'Color',
+            'type' => 'text',
+        ]);
+
+        ProductVariantDefinition::query()->create([
+            'producto_variante_id' => $variant->id,
+            'attribute_id' => $attribute->id,
+            'value' => 'Red',
+        ]);
+
+        $response = $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 2,
+        ]);
+
+        $response
+            ->assertOk()
+            ->assertCookie('guest_token')
+            ->assertJsonPath('tenant_codigo', 'acme')
+            ->assertJsonPath('items.0.cantidad', 2)
+            ->assertJsonPath('items.0.precio_unitario', '49.90')
+            ->assertJsonPath('items.0.subtotal', '99.80')
+            ->assertJsonPath('items.0.product.id', $variant->product->id)
+            ->assertJsonPath('items.0.variant.id', $variant->id)
+            ->assertJsonPath('items.0.variant.definitions.0.attribute.codigo', 'color')
+            ->assertJsonPath('subtotal', '99.80');
+
+        $this->assertDatabaseHas('carritos', [
+            'tenant_codigo' => 'acme',
+            'guest_token' => $response->getCookie('guest_token')?->getValue(),
+            'status' => 'active',
+        ]);
+
+        $this->assertDatabaseHas('carrito_items', [
+            'producto_variante_id' => $variant->id,
+            'cantidad' => 2,
+        ]);
+
+        $this->assertDatabaseHas('productos_variantes', [
+            'id' => $variant->id,
+            'stock' => 8,
+        ]);
+    }
+
+    public function test_it_merges_quantities_when_the_same_guest_adds_the_same_variant_twice(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 12, '25.00');
+
+        $firstResponse = $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 2,
+        ]);
+
+        $guestToken = $firstResponse->getCookie('guest_token')?->getValue();
+
+        $this->withCookie('guest_token', $guestToken)
+            ->postJson('/api/tenants/acme/cart/items', [
+                'product_variant_id' => $variant->id,
+                'cantidad' => 3,
+            ])
+            ->assertOk()
+            ->assertJsonPath('items.0.cantidad', 5)
+            ->assertJsonPath('items.0.subtotal', '125.00')
+            ->assertJsonPath('subtotal', '125.00');
+
+        $this->assertDatabaseCount('carritos', 1);
+        $this->assertDatabaseCount('carrito_items', 1);
+        $this->assertDatabaseHas('carrito_items', [
+            'producto_variante_id' => $variant->id,
+            'cantidad' => 5,
+        ]);
+        $this->assertDatabaseHas('productos_variantes', [
+            'id' => $variant->id,
+            'stock' => 7,
+        ]);
+    }
+
+    public function test_it_updates_item_quantity_and_adjusts_stock(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 10, '15.00');
+
+        $createResponse = $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 2,
+        ]);
+
+        $guestToken = $createResponse->getCookie('guest_token')?->getValue();
+
+        $this->withCookie('guest_token', $guestToken)
+            ->patchJson("/api/tenants/acme/cart/items/{$variant->id}", [
+                'cantidad' => 5,
+            ])
+            ->assertOk()
+            ->assertJsonPath('items.0.cantidad', 5)
+            ->assertJsonPath('items.0.subtotal', '75.00')
+            ->assertJsonPath('subtotal', '75.00');
+
+        $this->assertDatabaseHas('carrito_items', [
+            'producto_variante_id' => $variant->id,
+            'cantidad' => 5,
+        ]);
+        $this->assertDatabaseHas('productos_variantes', [
+            'id' => $variant->id,
+            'stock' => 5,
+        ]);
+    }
+
+    public function test_it_removes_an_item_and_restores_stock(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 10, '15.00');
+
+        $createResponse = $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 4,
+        ]);
+
+        $guestToken = $createResponse->getCookie('guest_token')?->getValue();
+
+        $this->withCookie('guest_token', $guestToken)
+            ->deleteJson("/api/tenants/acme/cart/items/{$variant->id}")
+            ->assertOk()
+            ->assertJsonPath('items', [])
+            ->assertJsonPath('subtotal', '0.00');
+
+        $this->assertDatabaseCount('carrito_items', 0);
+        $this->assertDatabaseHas('productos_variantes', [
+            'id' => $variant->id,
+            'stock' => 10,
+        ]);
+    }
+
+    public function test_authenticated_users_reuse_the_same_cart_per_tenant_and_get_a_new_one_for_another_tenant(): void
+    {
+        $user = User::factory()->create();
+        $acmeVariantA = $this->createVariantForTenant('acme', 10, '10.00');
+        $acmeVariantB = $this->createVariantForTenant('acme', 8, '20.00', 'hoodie');
+        $globexVariant = $this->createVariantForTenant('globex', 6, '30.00');
+
+        $this->actingAs($user)
+            ->postJson('/api/tenants/acme/cart/items', [
+                'product_variant_id' => $acmeVariantA->id,
+                'cantidad' => 1,
+            ])
+            ->assertOk();
+
+        $this->actingAs($user)
+            ->postJson('/api/tenants/acme/cart/items', [
+                'product_variant_id' => $acmeVariantB->id,
+                'cantidad' => 2,
+            ])
+            ->assertOk()
+            ->assertJsonPath('subtotal', '50.00');
+
+        $this->actingAs($user)
+            ->postJson('/api/tenants/globex/cart/items', [
+                'product_variant_id' => $globexVariant->id,
+                'cantidad' => 1,
+            ])
+            ->assertOk();
+
+        $this->assertDatabaseCount('carritos', 2);
+        $this->assertDatabaseHas('carritos', [
+            'tenant_codigo' => 'acme',
+            'user_id' => $user->id,
+        ]);
+        $this->assertDatabaseHas('carritos', [
+            'tenant_codigo' => 'globex',
+            'user_id' => $user->id,
+        ]);
+    }
+
+    public function test_it_rejects_variants_from_another_tenant(): void
+    {
+        $this->createVariantForTenant('acme', 10, '10.00');
+        $otherVariant = $this->createVariantForTenant('globex', 10, '20.00');
+
+        $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $otherVariant->id,
+            'cantidad' => 1,
+        ])->assertNotFound();
+    }
+
+    public function test_it_returns_not_found_when_the_cart_item_does_not_exist_for_update_or_delete(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 10, '10.00');
+
+        $this->patchJson("/api/tenants/acme/cart/items/{$variant->id}", [
+            'cantidad' => 2,
+        ])->assertNotFound();
+
+        $this->deleteJson("/api/tenants/acme/cart/items/{$variant->id}")
+            ->assertNotFound();
+    }
+
+    public function test_it_validates_quantity_and_stock_constraints(): void
+    {
+        $variant = $this->createVariantForTenant('acme', 2, '10.00');
+
+        $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 0,
+        ])->assertUnprocessable()->assertJsonValidationErrors(['cantidad']);
+
+        $response = $this->postJson('/api/tenants/acme/cart/items', [
+            'product_variant_id' => $variant->id,
+            'cantidad' => 2,
+        ]);
+
+        $guestToken = $response->getCookie('guest_token')?->getValue();
+
+        $this->withCookie('guest_token', $guestToken)
+            ->postJson('/api/tenants/acme/cart/items', [
+                'product_variant_id' => $variant->id,
+                'cantidad' => 1,
+            ])
+            ->assertUnprocessable()
+            ->assertJsonValidationErrors(['cantidad']);
+
+        $this->withCookie('guest_token', $guestToken)
+            ->patchJson("/api/tenants/acme/cart/items/{$variant->id}", [
+                'cantidad' => 3,
+            ])
+            ->assertUnprocessable()
+            ->assertJsonValidationErrors(['cantidad']);
+    }
+
+    protected function createVariantForTenant(
+        string $tenantCode,
+        int $stock,
+        string $price,
+        string $slugPrefix = 'shirt',
+    ): ProductVariant {
+        Tenant::query()->firstOrCreate(
+            ['codigo' => $tenantCode],
+            ['nombre' => ucfirst($tenantCode), 'dominio' => "{$tenantCode}.com"],
+        );
+
+        $category = \App\Domains\Catalog\Models\Category::query()->create([
+            'tenant_code' => $tenantCode,
+            'nombre' => "{$slugPrefix} category {$tenantCode}",
+        ]);
+
+        $product = Product::query()->create([
+            'tenant_codigo' => $tenantCode,
+            'categoria_id' => $category->id,
+            'slug' => "{$slugPrefix}-{$tenantCode}-".Product::query()->count(),
+            'nombre' => ucfirst($slugPrefix)." {$tenantCode}",
+            'descripcion' => 'Test product',
+            'precio' => $price,
+        ]);
+
+        return ProductVariant::query()->create([
+            'producto_id' => $product->id,
+            'slug' => "{$slugPrefix}-variant-".ProductVariant::query()->count(),
+            'nombre' => ucfirst($slugPrefix).' Variant',
+            'stock' => $stock,
+            'descripcion' => 'Test variant',
+            'precio' => $price,
+        ])->load('product');
+    }
+}