POS + Upsell + QR-Checkin + Marketing (PL-T200)

POS integrations push transactions into the booking platform from the bar's existing terminal — Square, Zettle/iZettle, and Stripe Terminal each have a dedicated provider with transaction push and signed webhooks (Square HMAC, Zettle JWS, Stripe Stripe-Signature with skew tolerance). A device health-check job pings each registered terminal every 15 minutes and fires an ops-alert if a device drops offline so operators learn about a dead card reader before customers do. Smart upsell uses rule-driven prompts evaluated at multiple touchpoints (wizard checkout, operator confirm, customer portal).

Rules combine color_type, party size, weekday, and season — for example, "on Friday evenings for parties of 4+, suggest the 4-person sharing platter" — and surface as preview prompts the customer can dismiss for the session. The smart upsell preview API returns the eligible prompts plus the rule-id so operators can attribute conversions per-rule in analytics. QR check-in issues signed JWTs (HS256 with per-tenant keys derived via HKDF, kid-rotation supported) embedded in booking confirmations.

The customer shows the QR at the door; the operator scans, the JWT verifies offline against a JWKS-cache (so a momentary network blip doesn't stop check-in), and the booking flips to CHECKED_IN instantly. Marketing automation runs four flows out of the box. Birthday: send an offer days_before_birthday via the configured channel.

Win-back: target customers with inactivity_days exceeded and historical_min visits to filter out one-time visitors. Gift-card-promo: an annual push around a chosen date for gift-card sales. Post-detractor recovery: triggered by NPS scores ≤ 6, opens a recovery message with a make-good offer.

Every flow is configurable per tenant, can be enabled/disabled independently, and respects the customer's per-channel opt-out from F22.14.