@12-apps/payments-e2e 1.3.0 → 1.5.0

package/README.md

@@ -4,9 +4,10 @@ The buyer journeys for the payments checkout, as Gherkin you run **against your
 own app**.
 
 Mounting `createPaymentFlows` gives you a checkout. This gives you its
-end-to-end coverage: twenty scenarios across seven features — PIX, card, hosted
-hand-off and return, provider failover, issuer declines, an unresolved charge, a
-store that cannot charge at all, and per-provider screens. You implement one
+end-to-end coverage: twenty-seven scenarios across ten features — PIX, card,
+digital wallets, hosted hand-off and return, provider failover, issuer
+declines, an unresolved charge, a store that cannot charge at all,
+per-provider screens, and saving a card outside checkout. You implement one
 port and add three lines of config. Nothing is copied, so a scenario added here
 later runs in your app on the next version bump.
 
@@ -84,12 +85,33 @@ files do not change either way.
 `pix-only` · `card` · `both-methods` · `hosted` · `awaiting` · `settles` ·
 `declined` · `unresolved` · `unavailable` · `no-provider` ·
 `no-provider-remedy` · `payments-off` · `two-mintable` · `redirect-head` ·
-`google-pay` · `screen-on-page` · `screen-handoff` · `screen-undeclared` ·
+`google-pay` · `apple-pay` · `apple-pay-unsupported` · `wallet` ·
+`activation` · `screen-on-page` · `screen-handoff` · `screen-undeclared` ·
 `screen-unknown`
 
 Adding a member is a breaking change for hosts, deliberately: a scenario needing
 a store nobody can build is a scenario that silently never runs.
 
+`wallet` (added for FUT-183/FUT-478) is one of two members that are **not a
+checkout**: `open(page, 'wallet')` must land the buyer on the package's
+manage-cards surface (`screens.ManageCards` from `createPaymentFlows`) at a
+store whose single provider can vault — the chain head declares the adapter
+`vault` seam, the connection runs in stub mode, and the wallet starts empty.
+The journey types the shared `DECLINE_PAN` for the refusal path, so no store
+flag decides the outcome; the card does. Hosts upgrading across this version
+must add the member to their `open` mapping or their world stops compiling —
+which is the point.
+
+`activation` (added for FUT-689) is the other, and the first **admin**-side
+shape: `open(page, 'activation')` must land the OWNER on the settings panel of
+one provider that declares `activationCharge`, connected in stub mode and
+never charged — the sales switch starts locked off. The host's
+`renderVerification` slot must render the shared card form plus the
+`activation-*` test ids `src/steps/activation.steps.ts` documents (pay button,
+outcome, refund line, and the raw enable-attempt probe pair). As in `wallet`,
+the typed card decides the outcome: `DECLINE_PAN` is refused with a named
+reason, anything else pays the cent and gets it refunded.
+
 ## Why this package ships compiled JavaScript
 
 Its siblings export raw `.ts` through their `exports` map, because an
@@ -103,6 +125,47 @@ does not rescue them either; it skips `node_modules` by design.
 Shipping source here would produce a package that type-checks, publishes,
 installs, and then throws on your first test run.
 
+## The platform-operations journeys (opt-in)
+
+The buyer journeys above run in any app that mounts the checkout. A second,
+**separate** set covers the app that operates the PLATFORM — the
+Connect-application consult screen and the platform homologação
+(`ConnectApplicationPanel` / `PlatformHomologacao` from
+`@12-apps/payments-frontend`). Most checkout consumers have no such surface,
+so these ship behind their own port and glob triple: nothing about them lands
+in `paymentsFeatures` or `paymentsSteps`, and a host that never lists them is
+untouched.
+
+```ts
+// tests/e2e/steps/platform-world.ts — inside your super-admin steps glob
+import { definePaymentsPlatformWorld } from '@12-apps/payments-e2e';
+
+definePaymentsPlatformWorld({
+  openConnectApplication: async (page, shape) => { /* sign in + route */ },
+  openHomologacao: async (page, shape) => { /* sign in + produce the shape */ },
+});
+```
+
+```ts
+import {
+  paymentsPlatformFeatures,
+  paymentsPlatformFeaturesRoot,
+  paymentsPlatformSteps,
+} from '@12-apps/payments-e2e';
+
+defineBddConfig({
+  features: [paymentsPlatformFeatures],
+  featuresRoot: paymentsPlatformFeaturesRoot,
+  steps: [paymentsPlatformSteps, 'tests/e2e/steps/**/*.ts'],
+  outputDir: '.features-gen/platform',
+});
+```
+
+The same three silent failures apply verbatim — use the exported globs, set
+`featuresRoot`, assert your scenario count. And `openHomologacao` must
+PRODUCE its shape, not just navigate: one scenario records an outcome, so a
+later `unrequested` opening has to clear it again.
+
 ## Writing your own specs in the same vocabulary
 
 The buyer gestures are exported too, so hand-written specs beside the journeys

package/dist/globs.d.ts

@@ -40,4 +40,30 @@ export declare const paymentsFeaturesRoot: string;
  * in every worker.
  */
 export declare const paymentsSteps: string;
+/**
+ * The PLATFORM-OPERATIONS journeys (FUT-479 / FUT-483, packaged by FUT-573),
+ * as a SEPARATE opt-in glob triple.
+ *
+ * Separate on purpose, twice over. The buyer journeys above run in any app
+ * that mounts the checkout; these run in the app that operates the PLATFORM
+ * (typically a super-admin SPA), and most checkout consumers have none.
+ * Folding them into `paymentsFeatures` would hand every existing host
+ * scenarios whose steps it never registered — bddgen fails on the undefined
+ * steps — and folding the steps into `paymentsSteps` would hand it orphan
+ * definitions instead, which is what a strict bdd gate fails on. A host that
+ * wants these lists all three, next to `definePaymentsPlatformWorld`:
+ *
+ * ```ts
+ * defineBddConfig({
+ *   features: [paymentsPlatformFeatures],
+ *   featuresRoot: paymentsPlatformFeaturesRoot,
+ *   steps: [paymentsPlatformSteps, 'tests/e2e/steps/**\/*.ts'],
+ * });
+ * ```
+ */
+export declare const paymentsPlatformFeatures: string;
+/** Same trap as {@link paymentsFeaturesRoot} — unset, the specs land under a path Playwright ignores. */
+export declare const paymentsPlatformFeaturesRoot: string;
+/** Compiled for Node, like {@link paymentsSteps} and for the same reason. */
+export declare const paymentsPlatformSteps: string;
 //# sourceMappingURL=globs.d.ts.map

package/dist/globs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"globs.d.ts","sourceRoot":"","sources":["../src/globs.ts"],"names":[],"mappings":"AA8BA,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,EAAE,MAAqD,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAwC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,aAAa,EAAE,MAAkD,CAAC"}
+{"version":3,"file":"globs.d.ts","sourceRoot":"","sources":["../src/globs.ts"],"names":[],"mappings":"AA8BA,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,EAAE,MAAqD,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAwC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,aAAa,EAAE,MAAkD,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,wBAAwB,EAAE,MAGtC,CAAC;AAEF,yGAAyG;AACzG,eAAO,MAAM,4BAA4B,EAAE,MAAiD,CAAC;AAE7F,6EAA6E;AAC7E,eAAO,MAAM,qBAAqB,EAAE,MAA2D,CAAC"}

package/dist/globs.js

@@ -67,4 +67,30 @@ export const paymentsFeaturesRoot = join(packageRoot(), 'features');
  * in every worker.
  */
 export const paymentsSteps = join(packageRoot(), 'dist/steps/**/*.js');
+/**
+ * The PLATFORM-OPERATIONS journeys (FUT-479 / FUT-483, packaged by FUT-573),
+ * as a SEPARATE opt-in glob triple.
+ *
+ * Separate on purpose, twice over. The buyer journeys above run in any app
+ * that mounts the checkout; these run in the app that operates the PLATFORM
+ * (typically a super-admin SPA), and most checkout consumers have none.
+ * Folding them into `paymentsFeatures` would hand every existing host
+ * scenarios whose steps it never registered — bddgen fails on the undefined
+ * steps — and folding the steps into `paymentsSteps` would hand it orphan
+ * definitions instead, which is what a strict bdd gate fails on. A host that
+ * wants these lists all three, next to `definePaymentsPlatformWorld`:
+ *
+ * ```ts
+ * defineBddConfig({
+ *   features: [paymentsPlatformFeatures],
+ *   featuresRoot: paymentsPlatformFeaturesRoot,
+ *   steps: [paymentsPlatformSteps, 'tests/e2e/steps/**\/*.ts'],
+ * });
+ * ```
+ */
+export const paymentsPlatformFeatures = join(packageRoot(), 'features-platform/**/*.feature');
+/** Same trap as {@link paymentsFeaturesRoot} — unset, the specs land under a path Playwright ignores. */
+export const paymentsPlatformFeaturesRoot = join(packageRoot(), 'features-platform');
+/** Compiled for Node, like {@link paymentsSteps} and for the same reason. */
+export const paymentsPlatformSteps = join(packageRoot(), 'dist/steps-platform/**/*.js');
 //# sourceMappingURL=globs.js.map

package/dist/globs.js.map

@@ -1 +1 @@
-{"version":3,"file":"globs.js","sourceRoot":"","sources":["../src/globs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"globs.js","sourceRoot":"","sources":["../src/globs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAErF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,oBAAoB,CAAC,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAW,IAAI,CAClD,WAAW,EAAE,EACb,gCAAgC,CACjC,CAAC;AAEF,yGAAyG;AACzG,MAAM,CAAC,MAAM,4BAA4B,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAE7F,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,6BAA6B,CAAC,CAAC"}

package/dist/index.d.ts

@@ -33,6 +33,15 @@
  */
 export { definePaymentsWorld, paymentsWorld, type PaymentsFixtures, type PaymentsStore, type PaymentsWireProbe, type PaymentsWorld, } from './world.js';
 export { paymentsFeatures, paymentsFeaturesRoot, paymentsSteps } from './globs.js';
+/**
+ * The PLATFORM-OPERATIONS journeys (FUT-479 / FUT-483, packaged by FUT-573):
+ * the Connect-application consult and the platform homologação, for the app
+ * that operates the platform. A separate OPT-IN port and glob triple — see
+ * `platform-world.ts` for why folding them into `PaymentsWorld` would have
+ * broken every checkout-only consumer.
+ */
+export { definePaymentsPlatformWorld, paymentsPlatformWorld, type ConnectApplicationShape, type PaymentsPlatformWorld, type PlatformHomologacaoShape, } from './platform-world.js';
+export { paymentsPlatformFeatures, paymentsPlatformFeaturesRoot, paymentsPlatformSteps, } from './globs.js';
 /**
  * The buyer gestures the packaged steps are built from, exported so a host can
  * write its OWN specs in the same vocabulary. Every one drives a test id the

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;GAIG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,SAAS,GACV,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;;;GAMG;AACH,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,SAAS,GACV,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -33,6 +33,15 @@
  */
 export { definePaymentsWorld, paymentsWorld, } from './world.js';
 export { paymentsFeatures, paymentsFeaturesRoot, paymentsSteps } from './globs.js';
+/**
+ * The PLATFORM-OPERATIONS journeys (FUT-479 / FUT-483, packaged by FUT-573):
+ * the Connect-application consult and the platform homologação, for the app
+ * that operates the platform. A separate OPT-IN port and glob triple — see
+ * `platform-world.ts` for why folding them into `PaymentsWorld` would have
+ * broken every checkout-only consumer.
+ */
+export { definePaymentsPlatformWorld, paymentsPlatformWorld, } from './platform-world.js';
+export { paymentsPlatformFeatures, paymentsPlatformFeaturesRoot, paymentsPlatformSteps, } from './globs.js';
 /**
  * The buyer gestures the packaged steps are built from, exported so a host can
  * write its OWN specs in the same vocabulary. Every one drives a test id the

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,GAKd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;GAIG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,SAAS,GACV,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,GAKd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;;;GAMG;AACH,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,SAAS,GACV,MAAM,uBAAuB,CAAC"}

package/dist/platform-world.d.ts

@@ -0,0 +1,78 @@
+import type { Page } from '@playwright/test';
+/**
+ * The port a HOST implements to run the packaged PLATFORM-OPERATIONS journeys
+ * (FUT-479 / FUT-483, packaged by FUT-573) — the Connect-application consult
+ * screen and the platform homologação.
+ *
+ * A SEPARATE port from {@link import('./world.js').PaymentsWorld}, on purpose.
+ * The buyer journeys are for any app that mounts the checkout; these are for
+ * the app that operates the PLATFORM (typically a super-admin SPA), and most
+ * consumers of the checkout have no such surface. Folding these into
+ * `PaymentsWorld` would have broken every existing host on the next version
+ * bump; a second opt-in port breaks nobody. The features live under their own
+ * globs (`paymentsPlatformFeatures` / `paymentsPlatformSteps`) for the same
+ * reason — a host that never lists them never compiles them.
+ *
+ * Every assertion in the journeys reads a test id the payments package's own
+ * platform components render (`connect-env-SANDBOX`, `homologacao-status-chip`,
+ * …), so they hold in any app that mounts `ConnectApplicationPanel` /
+ * `PlatformHomologacao` from `@12-apps/payments-frontend`.
+ */
+/**
+ * The SHAPE of the deployment a Connect-application scenario is set in.
+ *
+ * `unconfigured` — no OAuth application credentials for either environment,
+ * which is what a fresh e2e stack honestly is. The consult then renders both
+ * cards in their "nenhuma aplicação configurada" state with no network call —
+ * the screen's baseline value, reachable without stubbing PagBank.
+ *
+ * Adding a member is a breaking change for hosts, deliberately — same
+ * argument as `PaymentsStore`: a shape nobody can build is a scenario that
+ * silently never runs.
+ */
+export type ConnectApplicationShape = 'unconfigured';
+/**
+ * The SHAPE of the platform a homologação scenario is set in.
+ *
+ * `unrequested` — no outcome recorded for the provider AND no platform
+ * SANDBOX token stored, which again is what a fresh e2e stack is: the screen
+ * shows the honest "não solicitada", the outcome form performs the first real
+ * write, and the anexo generator refuses with its reason instead of calling
+ * the provider.
+ *
+ * PRODUCING the shape is the host's job, not just navigating to the screen:
+ * one scenario records an outcome, so a later `unrequested` opening must
+ * clear it again (the same way `PaymentsWorld.open` seeds a store).
+ */
+export type PlatformHomologacaoShape = 'unrequested';
+/** Everything a host supplies to run the packaged platform journeys. */
+export interface PaymentsPlatformWorld {
+    /**
+     * Put a signed-in PLATFORM OPERATOR on the Connect-application screen of a
+     * deployment of this shape. Auth is the host's own business — these
+     * journeys never see a login form.
+     */
+    openConnectApplication(page: Page, shape: ConnectApplicationShape): Promise<void>;
+    /**
+     * Put a signed-in platform operator on the homologação screen of a platform
+     * of this shape. The host must wire the screen so a recorded outcome
+     * refreshes the `record` the component renders — the journey asserts the
+     * status chip flips without a reload.
+     */
+    openHomologacao(page: Page, shape: PlatformHomologacaoShape): Promise<void>;
+}
+/**
+ * Install the host's implementation. Call this from a module inside the
+ * host's OWN steps glob — playwright-bdd imports every step file before any
+ * scenario runs, so a top-level call there is registered in time, in every
+ * worker. Independent of `definePaymentsWorld`: a host may implement either
+ * port, or both.
+ */
+export declare function definePaymentsPlatformWorld(world: PaymentsPlatformWorld): void;
+/**
+ * The installed world. Throws rather than degrading, for the same reason as
+ * `paymentsWorld()`: a journey against a half-configured world fails deep
+ * inside a step, several layers from the actual cause.
+ */
+export declare function paymentsPlatformWorld(): PaymentsPlatformWorld;
+//# sourceMappingURL=platform-world.d.ts.map

package/dist/platform-world.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-world.d.ts","sourceRoot":"","sources":["../src/platform-world.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAErD,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E;AAID;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI,qBAAqB,CAQ7D"}

package/dist/platform-world.js

@@ -0,0 +1,24 @@
+let installed = null;
+/**
+ * Install the host's implementation. Call this from a module inside the
+ * host's OWN steps glob — playwright-bdd imports every step file before any
+ * scenario runs, so a top-level call there is registered in time, in every
+ * worker. Independent of `definePaymentsWorld`: a host may implement either
+ * port, or both.
+ */
+export function definePaymentsPlatformWorld(world) {
+    installed = world;
+}
+/**
+ * The installed world. Throws rather than degrading, for the same reason as
+ * `paymentsWorld()`: a journey against a half-configured world fails deep
+ * inside a step, several layers from the actual cause.
+ */
+export function paymentsPlatformWorld() {
+    if (!installed) {
+        throw new Error('No PaymentsPlatformWorld installed. Call definePaymentsPlatformWorld(...) from a ' +
+            "module inside this app's bdd `steps` glob — see @12-apps/payments-e2e's README.");
+    }
+    return installed;
+}
+//# sourceMappingURL=platform-world.js.map

package/dist/platform-world.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-world.js","sourceRoot":"","sources":["../src/platform-world.ts"],"names":[],"mappings":"AAoEA,IAAI,SAAS,GAAiC,IAAI,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAA4B;IACtE,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,mFAAmF;YACjF,iFAAiF,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/steps/activation.steps.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=activation.steps.d.ts.map

package/dist/steps/activation.steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.steps.d.ts","sourceRoot":"","sources":["../../src/steps/activation.steps.ts"],"names":[],"mappings":""}

package/dist/steps/activation.steps.js

@@ -0,0 +1,74 @@
+import { expect } from '@playwright/test';
+import { DECLINE_PAN, fillCard, fillCpf } from '../helpers/checkout.js';
+import { paymentsWorld } from '../world.js';
+import { Given, Then, When } from './fixtures.js';
+/**
+ * ACTIVATING A PROVIDER (FUT-463, made real for every SDK provider by
+ * FUT-689) — the merchant admin's side of the till.
+ *
+ * The package renders the switch and its lock (`payments-enabled-toggle`,
+ * `payments-enable-hint`, `payments-status`); the activation step itself is
+ * HOST-owned, rendered into the `renderVerification` slot. So these steps
+ * read two vocabularies:
+ *
+ *   - the package's own test ids, which mean the same thing in any host;
+ *   - the activation-step contract a host's slot must render — the shared
+ *     card form (`card-number`…, `buyer-cpf`) plus `activation-pay`,
+ *     `activation-result`, `activation-refunded`, `activation-error`, and the
+ *     fixture probe pair `activation-enable-attempt` /
+ *     `activation-enable-refusal` (a raw enable request and the refusal it
+ *     gets, the same affordance the wire probe is).
+ *
+ * The card the owner types decides the outcome, exactly as in the wallet
+ * journey: the shared `DECLINE_PAN` is refused with a named reason, any other
+ * valid card pays the cent and gets it back.
+ */
+/** The "Recebendo vendas" switch — MUI puts the state on the inner checkbox. */
+function salesSwitch(page) {
+    return page.getByTestId('payments-enabled-toggle').getByRole('checkbox');
+}
+Given('the owner opens the settings of a connected but unproven provider', async ({ page }) => {
+    await paymentsWorld().open(page, 'activation');
+});
+Then('the sales switch is locked off until a real charge lands', async ({ page }) => {
+    await expect(salesSwitch(page)).toBeDisabled();
+    // The package's own lock hint — the quoted words are its pt-BR product copy.
+    await expect(page.getByTestId('payments-enable-hint')).toContainText('depois dos 3 passos');
+});
+When('the owner tries to force the provider on anyway', async ({ page }) => {
+    await page.getByTestId('activation-enable-attempt').click();
+});
+Then('the enable request is refused as unproven', async ({ page }) => {
+    // The package's own refusal, by name: the server said no, not the screen.
+    await expect(page.getByTestId('activation-enable-refusal')).toContainText('409');
+    await expect(page.getByTestId('activation-enable-refusal')).toContainText('UnprovenProviderError');
+});
+When('the owner pays the verification charge with their card', async ({ page }) => {
+    await fillCard(page);
+    await fillCpf(page);
+    await page.getByTestId('activation-pay').click();
+});
+When('the owner pays the verification charge with a refused card', async ({ page }) => {
+    await fillCard(page, DECLINE_PAN);
+    await fillCpf(page);
+    await page.getByTestId('activation-pay').click();
+});
+Then('the provider is proven and receiving sales', async ({ page }) => {
+    // VERIFICADO is reserved for a landed charge — the chip's one green word.
+    await expect(page.getByTestId('payments-status')).toHaveText('VERIFICADO');
+    await expect(salesSwitch(page)).toBeChecked();
+});
+Then('the screen says the cent came back', async ({ page }) => {
+    // The refund fact, in the screen's own pt-BR copy.
+    await expect(page.getByTestId('activation-refunded')).toContainText('estornado');
+});
+Then("the refusal names the provider's reason", async ({ page }) => {
+    await expect(page.getByTestId('activation-error')).toContainText('recusada');
+    await expect(page.getByTestId('activation-error')).toContainText('CARD_DECLINED');
+});
+Then('the provider received each attempt as its own charge', async ({ page }) => {
+    // Two charges REACHED the provider: a retry that replayed the first
+    // refusal would have left this at one.
+    await expect(paymentsWorld().wire.providerChargeCount(page)).toHaveText('2');
+});
+//# sourceMappingURL=activation.steps.js.map

package/dist/steps/activation.steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.steps.js","sourceRoot":"","sources":["../../src/steps/activation.steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gFAAgF;AAChF,SAAS,WAAW,CAAC,IAAU;IAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,CAAC,mEAAmE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC5F,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAClF,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IAC/C,6EAA6E;IAC7E,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACzE,MAAM,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2CAA2C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnE,0EAA0E;IAC1E,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAChF,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpF,MAAM,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,0EAA0E;IAC1E,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC5D,mDAAmD;IACnD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7E,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC9E,oEAAoE;IACpE,uCAAuC;IACvC,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC"}

package/dist/steps/carteira.steps.js

@@ -18,15 +18,31 @@ import { Given, Then, When } from './fixtures.js';
 Given('a compradora abre o checkout de uma loja com Google Pay', async ({ page }) => {
     await paymentsWorld().open(page, 'google-pay');
 });
+Given('a compradora abre o checkout de uma loja com Apple Pay', async ({ page }) => {
+    await paymentsWorld().open(page, 'apple-pay');
+});
+/** The SAME store shape, on a device without Apple Pay (any non-Safari). */
+Given('a compradora abre o checkout da loja com Apple Pay num aparelho sem Apple Pay', async ({ page }) => {
+    await paymentsWorld().open(page, 'apple-pay-unsupported');
+});
 When('ela paga com o Google Pay', async ({ page }) => {
     await page.getByTestId('google-pay-button').click();
 });
+When('ela paga com o Apple Pay', async ({ page }) => {
+    await page.getByTestId('apple-pay-button').click();
+});
 Then('ela vê o botão do Google Pay', async ({ page }) => {
     await expect(page.getByTestId('google-pay-button')).toBeVisible();
 });
 Then('nenhum botão do Google Pay é mostrado', async ({ page }) => {
     await expect(page.getByTestId('google-pay-button')).toHaveCount(0);
 });
+Then('ela vê o botão do Apple Pay', async ({ page }) => {
+    await expect(page.getByTestId('apple-pay-button')).toBeVisible();
+});
+Then('nenhum botão do Apple Pay é mostrado', async ({ page }) => {
+    await expect(page.getByTestId('apple-pay-button')).toHaveCount(0);
+});
 Then('a cobrança enviada ao provedor carrega a carteira do Google', async ({ page }) => {
     // What the PROVIDER received, not what the client recorded sending: hosts
     // tag a provider-charge line with `wallet:<TYPE>` when the charge's card
@@ -35,4 +51,7 @@ Then('a cobrança enviada ao provedor carrega a carteira do Google', async ({ pa
     // wallet body — the sheet then produced a token the charge never carried.
     await expect(paymentsWorld().wire.providerCharges(page)).toContainText('wallet:GOOGLE_PAY');
 });
+Then('a cobrança enviada ao provedor carrega a carteira da Apple', async ({ page }) => {
+    await expect(paymentsWorld().wire.providerCharges(page)).toContainText('wallet:APPLE_PAY');
+});
 //# sourceMappingURL=carteira.steps.js.map

package/dist/steps/carteira.steps.js.map

@@ -1 +1 @@
-{"version":3,"file":"carteira.steps.js","sourceRoot":"","sources":["../../src/steps/carteira.steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;;GAaG;AAEH,KAAK,CAAC,yDAAyD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAClF,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnD,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACtD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACrF,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC"}
+{"version":3,"file":"carteira.steps.js","sourceRoot":"","sources":["../../src/steps/carteira.steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;;GAaG;AAEH,KAAK,CAAC,yDAAyD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAClF,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,wDAAwD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjF,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,KAAK,CACH,+EAA+E,EAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;AAC5D,CAAC,CACF,CAAC;AAEF,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnD,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAClD,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACtD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACrD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC9D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACrF,0EAA0E;IAC1E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpF,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC"}

package/dist/steps/saved-card-wallet.steps.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=saved-card-wallet.steps.d.ts.map

package/dist/steps/saved-card-wallet.steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-card-wallet.steps.d.ts","sourceRoot":"","sources":["../../src/steps/saved-card-wallet.steps.ts"],"names":[],"mappings":""}

package/dist/steps/saved-card-wallet.steps.js

@@ -0,0 +1,65 @@
+import { expect } from '@playwright/test';
+import { DECLINE_PAN, fillCard } from '../helpers/checkout.js';
+import { paymentsWorld } from '../world.js';
+import { Given, Then, When } from './fixtures.js';
+/**
+ * SAVING A CARD WITHOUT BUYING (FUT-183, over FUT-478's buyer vault rows).
+ *
+ * A separate file from `carteira.steps.ts` on purpose: that one is the DIGITAL
+ * wallets (Google Pay / Apple Pay) — a faster way to pay inside checkout.
+ * These steps are the SAVED-CARD wallet: the package's manage-cards surface,
+ * reached outside any purchase, where nothing is charged at all.
+ *
+ * Every Then reads a test id the package's own vault screens render
+ * (`manage-cards*`, `add-card*`), plus the shared card form ids — so the
+ * journey means the same thing in any host that mounts `screens.ManageCards`.
+ * The card the buyer types decides the outcome: the shared `DECLINE_PAN` is
+ * the one the stub refuses at validation.
+ */
+Given("the shopper opens the store's card wallet", async ({ page }) => {
+    await paymentsWorld().open(page, 'wallet');
+});
+When('she decides to add a card', async ({ page }) => {
+    await page.getByTestId('manage-cards-add').click();
+    // Wait for the FORM, not merely the click: `/cards/begin` runs in between,
+    // and typing into a form that has not mounted is the flake this avoids.
+    await expect(page.getByTestId('add-card')).toBeVisible();
+});
+When('she fills in the card and saves it', async ({ page }) => {
+    await fillCard(page);
+    await page.getByTestId('add-card-save').click();
+});
+When('she tries to save a refused card', async ({ page }) => {
+    await fillCard(page, DECLINE_PAN);
+    await page.getByTestId('add-card-save').click();
+});
+Then('the card is stored and appears in the list', async ({ page }) => {
+    await expect(page.getByTestId('add-card-saved')).toBeVisible();
+    await expect(page.getByTestId('manage-cards-list')).toBeVisible();
+    await expect(page.getByTestId('manage-cards-empty')).toHaveCount(0);
+});
+Then('the list shows only the brand and the last digits', async ({ page }) => {
+    // Display metadata ONLY. The vault token — the thing that can charge —
+    // never reaches this screen; what she reads back is brand + last4 + expiry.
+    // The quoted strings are the screen's pt-BR product copy, asserted as-is.
+    const list = page.getByTestId('manage-cards-list');
+    await expect(list).toContainText('••••');
+    await expect(list).toContainText('Validade');
+});
+Then('the refusal explains why and the form stays on screen', async ({ page }) => {
+    // The endpoint's own reason, and the form kept editable under it — wiping
+    // her input to say the card was refused would be the screen working
+    // against her. The asserted word is the pt-BR product copy of the reason.
+    await expect(page.getByTestId('add-card-error')).toBeVisible();
+    await expect(page.getByTestId('add-card-error')).toContainText('cartão');
+    await expect(page.getByTestId('card-number')).toBeVisible();
+});
+Then('the wallet still holds no card', async ({ page }) => {
+    await expect(page.getByTestId('manage-cards-empty')).toBeVisible();
+    await expect(page.getByTestId('manage-cards-list')).toHaveCount(0);
+});
+Then('the empty wallet invites saving the first card', async ({ page }) => {
+    await expect(page.getByTestId('manage-cards-empty')).toBeVisible();
+    await expect(page.getByTestId('manage-cards-add')).toBeVisible();
+});
+//# sourceMappingURL=saved-card-wallet.steps.js.map

package/dist/steps/saved-card-wallet.steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-card-wallet.steps.js","sourceRoot":"","sources":["../../src/steps/saved-card-wallet.steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAElD;;;;;;;;;;;;;GAaG;AAEH,KAAK,CAAC,2CAA2C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,MAAM,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACnD,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IACnD,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC5D,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC1D,MAAM,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC3E,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/E,0EAA0E;IAC1E,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACxD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACxE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACnE,CAAC,CAAC,CAAC"}

package/dist/steps-platform/plataforma.steps.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plataforma.steps.d.ts.map

package/dist/steps-platform/plataforma.steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plataforma.steps.d.ts","sourceRoot":"","sources":["../../src/steps-platform/plataforma.steps.ts"],"names":[],"mappings":""}

package/dist/steps-platform/plataforma.steps.js

@@ -0,0 +1,78 @@
+import { expect } from '@playwright/test';
+import { paymentsPlatformWorld } from '../platform-world.js';
+import { Given, Then, When } from '../steps/fixtures.js';
+/**
+ * THE PLATFORM OPERATOR'S STEPS (FUT-479 / FUT-483, packaged by FUT-573).
+ *
+ * A separate file tree from `../steps/` on purpose: these register step
+ * definitions for the PLATFORM journeys, which a host opts into with the
+ * `paymentsPlatformSteps` glob. Compiling them into the buyer steps' glob
+ * would hand every checkout-only consumer a set of orphan definitions — and
+ * an orphan definition is exactly what a strict bdd gate fails on.
+ *
+ * Every Then reads a test id the payments package's own platform components
+ * render, so the assertions mean the same thing in any host that mounts
+ * `ConnectApplicationPanel` / `PlatformHomologacao`.
+ */
+// ---------------------------------------------------------------------------
+// The Connect application (FUT-479)
+// ---------------------------------------------------------------------------
+Given('a operadora abre a aplicação Connect de uma instalação sem aplicação registrada', async ({ page }) => {
+    await paymentsPlatformWorld().openConnectApplication(page, 'unconfigured');
+});
+Then('ela vê o callback desta instalação', async ({ page }) => {
+    const callback = page.getByTestId('connect-expected-redirect');
+    await expect(callback).toBeVisible();
+    // The exact URL is the host's own; what the journey pins is that SOMETHING
+    // is spelled out for the operator to compare against.
+    await expect(callback).not.toHaveText('');
+});
+Then('cada ambiente aparece em seu próprio cartão', async ({ page }) => {
+    await expect(page.getByTestId('connect-env-SANDBOX')).toBeVisible();
+    await expect(page.getByTestId('connect-env-PRODUCTION')).toBeVisible();
+});
+Then('os dois ambientes se declaram sem aplicação configurada', async ({ page }) => {
+    await expect(page.getByTestId('connect-env-SANDBOX')).toContainText('Nenhuma aplicação configurada neste ambiente.');
+    await expect(page.getByTestId('connect-env-PRODUCTION')).toContainText('Nenhuma aplicação configurada neste ambiente.');
+});
+// ---------------------------------------------------------------------------
+// The homologação (FUT-483)
+// ---------------------------------------------------------------------------
+Given('a operadora abre a homologação de uma plataforma que nunca a solicitou', async ({ page }) => {
+    await paymentsPlatformWorld().openHomologacao(page, 'unrequested');
+});
+Then('a situação é {string}', async ({ page }, label) => {
+    await expect(page.getByTestId('homologacao-status-chip')).toHaveText(label);
+});
+Then('o formulário oficial está a um clique', async ({ page }) => {
+    const link = page.getByTestId('homologacao-form-link');
+    await expect(link).toBeVisible();
+    await expect(link).toHaveAttribute('href', /pipefy/);
+});
+Then('as respostas prontas nomeiam a API de Pedidos e a API Connect', async ({ page }) => {
+    const services = page.getByTestId('homologacao-services');
+    await expect(services).toContainText('API de Pedidos e Pagamentos (Order)');
+    await expect(services).toContainText('API Connect');
+});
+When('ela registra o protocolo da solicitação', async ({ page }) => {
+    await page.getByTestId('homologacao-protocol').fill('PIPE-journey-001');
+    await page.getByTestId('homologacao-save').click();
+});
+Then('o registro é confirmado', async ({ page }) => {
+    await expect(page.getByTestId('homologacao-save-ok')).toBeVisible();
+});
+/**
+ * The chip flipping WITHOUT a reload is the point: the host's save must
+ * refresh the `record` the component renders — the wiring the port's
+ * docstring demands.
+ */
+Then('a situação passa a ser {string}', async ({ page }, label) => {
+    await expect(page.getByTestId('homologacao-status-chip')).toHaveText(label);
+});
+When('ela tenta gerar o anexo de evidências', async ({ page }) => {
+    await page.getByTestId('homologacao-anexo-button').click();
+});
+Then('ela vê o motivo pelo qual o anexo não saiu', async ({ page }) => {
+    await expect(page.getByTestId('homologacao-anexo-error')).not.toBeEmpty();
+});
+//# sourceMappingURL=plataforma.steps.js.map

package/dist/steps-platform/plataforma.steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plataforma.steps.js","sourceRoot":"","sources":["../../src/steps-platform/plataforma.steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEzD;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,KAAK,CACH,iFAAiF,EACjF,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,MAAM,qBAAqB,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AAC7E,CAAC,CACF,CAAC;AAEF,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC/D,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACrE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjF,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,aAAa,CACjE,+CAA+C,CAChD,CAAC;IACF,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,CACpE,+CAA+C,CAChD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,KAAK,CACH,wEAAwE,EACxE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjB,MAAM,qBAAqB,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACrE,CAAC,CACF,CAAC;AAEF,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAa,EAAE,EAAE;IAC9D,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACvD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC1D,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,qCAAqC,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjE,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxE,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACjD,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAa,EAAE,EAAE;IACxE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/D,MAAM,IAAI,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/world.d.ts

@@ -63,6 +63,39 @@ export type PaymentsStore =
  * uses an installed global without touching the network).
  */
  | 'google-pay'
+/**
+ * A store whose chain head declares Apple Pay (FUT-472), opened on a device
+ * that HAS it: the host provides a page where `window.ApplePaySession`
+ * exists and `canMakePayments()` answers true (a stub, outside Safari),
+ * plus a merchant-validation port that answers a session.
+ */
+ | 'apple-pay'
+/**
+ * The SAME Apple Pay store on a device WITHOUT Apple Pay (every non-Safari
+ * browser): no `ApplePaySession` global. The scenario this hosts is the
+ * fallback rule — no button, and the card form stays the way to pay.
+ */
+ | 'apple-pay-unsupported'
+/**
+ * The buyer's saved-card WALLET (FUT-183 over FUT-478), not a checkout: the
+ * host opens the package's manage-cards surface at a store whose provider
+ * can vault — one mintable chain entry with the vault seam, connected in
+ * stub mode — and the wallet starts EMPTY. The card the buyer types decides
+ * the outcome: the package's `DECLINE_PAN` is refused at validation, any
+ * other valid card is stored. (Not a digital wallet — those are the
+ * `google-pay` / `apple-pay` shapes above.)
+ */
+ | 'wallet'
+/**
+ * A merchant ADMIN surface, not a checkout (FUT-463/FUT-689): the settings
+ * screen of ONE provider that declares the activation charge, connected in
+ * stub mode and never charged — so the sales switch starts locked off. The
+ * host lands the owner on that provider's own panel, whose host-rendered
+ * activation step shows the shared card form (`card-number`…, `buyer-cpf`)
+ * plus the `activation-*` test ids the steps file documents. The card the
+ * owner types decides the outcome, exactly as in the `wallet` shape.
+ */
+ | 'activation'
 /** Declares the on-page screen (FUT-596). */
  | 'screen-on-page'
 /** Declares the hand-off screen (FUT-596). */

package/dist/world.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"world.d.ts","sourceRoot":"","sources":["../src/world.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa;AACvB,4DAA4D;AAC1D,UAAU;AACZ,+DAA+D;GAC7D,MAAM;AACR,0CAA0C;GACxC,cAAc;AAChB,qDAAqD;GACnD,QAAQ;AACV,iFAAiF;GAC/E,UAAU;AACZ,+CAA+C;GAC7C,SAAS;AACX,yDAAyD;GACvD,UAAU;AACZ,sEAAsE;GACpE,YAAY;AACd,iEAAiE;GAC/D,aAAa;AACf,oCAAoC;GAClC,aAAa;AACf,6DAA6D;GAC3D,oBAAoB;AACtB,yEAAyE;GACvE,cAAc;AAChB,mDAAmD;GACjD,cAAc;AAChB,gEAAgE;GAC9D,eAAe;AACjB;;;;;;GAMG;GACD,YAAY;AACd,6CAA6C;GAC3C,gBAAgB;AAClB,8CAA8C;GAC5C,gBAAgB;AAClB,2DAA2D;GACzD,mBAAmB;AACrB,0DAA0D;GACxD,gBAAgB,CAAC;AAErB;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACnD,4CAA4C;IAC5C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,iCAAiC;IACjC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,4DAA4D;IAC5D,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9D,8EAA8E;IAC9E,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7D,2CAA2C;IAC3C,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;CACxD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,iEAAiE;IACjE,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,qDAAqD;IACrD,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAQ7C"}
+{"version":3,"file":"world.d.ts","sourceRoot":"","sources":["../src/world.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa;AACvB,4DAA4D;AAC1D,UAAU;AACZ,+DAA+D;GAC7D,MAAM;AACR,0CAA0C;GACxC,cAAc;AAChB,qDAAqD;GACnD,QAAQ;AACV,iFAAiF;GAC/E,UAAU;AACZ,+CAA+C;GAC7C,SAAS;AACX,yDAAyD;GACvD,UAAU;AACZ,sEAAsE;GACpE,YAAY;AACd,iEAAiE;GAC/D,aAAa;AACf,oCAAoC;GAClC,aAAa;AACf,6DAA6D;GAC3D,oBAAoB;AACtB,yEAAyE;GACvE,cAAc;AAChB,mDAAmD;GACjD,cAAc;AAChB,gEAAgE;GAC9D,eAAe;AACjB;;;;;;GAMG;GACD,YAAY;AACd;;;;;GAKG;GACD,WAAW;AACb;;;;GAIG;GACD,uBAAuB;AACzB;;;;;;;;GAQG;GACD,QAAQ;AACV;;;;;;;;GAQG;GACD,YAAY;AACd,6CAA6C;GAC3C,gBAAgB;AAClB,8CAA8C;GAC5C,gBAAgB;AAClB,2DAA2D;GACzD,mBAAmB;AACrB,0DAA0D;GACxD,gBAAgB,CAAC;AAErB;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACnD,4CAA4C;IAC5C,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,iCAAiC;IACjC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,4DAA4D;IAC5D,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9D,8EAA8E;IAC9E,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7D,2CAA2C;IAC3C,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACjE,2DAA2D;IAC3D,SAAS,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;CACxD;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,iEAAiE;IACjE,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,qDAAqD;IACrD,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChE,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,aAAa,CAQ7C"}

package/dist/world.js.map

@@ -1 +1 @@
-{"version":3,"file":"world.js","sourceRoot":"","sources":["../src/world.ts"],"names":[],"mappings":"AAyIA,IAAI,SAAS,GAAyB,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACtD,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"world.js","sourceRoot":"","sources":["../src/world.ts"],"names":[],"mappings":"AA0KA,IAAI,SAAS,GAAyB,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAoB;IACtD,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/features/activating-a-provider.feature

@@ -0,0 +1,29 @@
+@journey @activation
+Feature: Activating a provider
+
+  "Connected" and "can charge" are different facts, and the gap between them
+  is where a store ships broken: credentials authenticate, the switch flips,
+  and the first real shopper is refused. So a provider that declares the
+  activation charge EARNS its switch — one cent through the owner's own card,
+  on the same rails a shopper's money takes, refunded on the spot — and stays
+  off until that cent has landed.
+
+  Background:
+    Given the owner opens the settings of a connected but unproven provider
+
+  Scenario: Enabling without proof is refused
+    Then the sales switch is locked off until a real charge lands
+    When the owner tries to force the provider on anyway
+    Then the enable request is refused as unproven
+
+  Scenario: Paying the one-cent verification enables the provider
+    When the owner pays the verification charge with their card
+    Then the provider is proven and receiving sales
+    And the screen says the cent came back
+
+  Scenario: A refused card names the reason and a retry is a fresh charge
+    When the owner pays the verification charge with a refused card
+    Then the refusal names the provider's reason
+    When the owner pays the verification charge with their card
+    Then the provider is proven and receiving sales
+    And the provider received each attempt as its own charge

package/features/comprando-com-apple-pay.feature

@@ -0,0 +1,25 @@
+@journey @apple-pay
+Feature: Comprando com Apple Pay
+
+  O provedor processa Apple Pay só para Visa e Mastercard, então a folha da
+  Apple oferece só essas bandeiras — um cartão que seria recusado nunca chega
+  a ser oferecido. E a carteira é um atalho, nunca o único caminho: num
+  aparelho sem Apple Pay o botão simplesmente não existe e o formulário de
+  cartão continua fazendo a venda.
+
+  Scenario: A compra inteira acontece pela carteira
+    Given a compradora abre o checkout de uma loja com Apple Pay
+    When ela informa o CPF e segue para o pagamento
+    Then ela vê o botão do Apple Pay
+    And ela vê o formulário de cartão
+    When ela paga com o Apple Pay
+    Then o pagamento é confirmado
+    And a cobrança enviada ao provedor carrega a carteira da Apple
+
+  Scenario: Sem Apple Pay no aparelho, o cartão continua fazendo a venda
+    Given a compradora abre o checkout da loja com Apple Pay num aparelho sem Apple Pay
+    When ela informa o CPF e segue para o pagamento
+    Then nenhum botão do Apple Pay é mostrado
+    And ela vê o formulário de cartão
+    When ela paga com um cartão novo
+    Then o pagamento é confirmado

package/features/saving-a-card.feature

@@ -0,0 +1,29 @@
+@journey @saved-cards
+Feature: Saving a card without buying
+
+  Saving a card is not buying: no order exists, nothing is charged, and the
+  card still travels its usual path — the browser mints the token and the
+  provider validates it. What the shopper reads back is only what is fit to
+  show: the brand and the last digits. The token that can charge stays on the
+  store's side and never reaches this screen.
+
+  There is deliberately no delete button here: taking a card off the list is
+  between the store and the provider, not a tap on this screen.
+
+  Background:
+    Given the shopper opens the store's card wallet
+
+  Scenario: Saving a card without buying anything
+    When she decides to add a card
+    And she fills in the card and saves it
+    Then the card is stored and appears in the list
+    And the list shows only the brand and the last digits
+
+  Scenario: A card refused at validation explains why and stays off the list
+    When she decides to add a card
+    And she tries to save a refused card
+    Then the refusal explains why and the form stays on screen
+    And the wallet still holds no card
+
+  Scenario: The empty wallet invites saving the first card
+    Then the empty wallet invites saving the first card

package/features-platform/a-aplicacao-que-as-lojas-autorizam.feature

@@ -0,0 +1,23 @@
+@journey @plataforma
+Feature: A aplicação que as lojas autorizam
+
+  A aplicação OAuth da plataforma — o que cada loja autoriza ao conectar a
+  própria conta PagBank — foi registrada à mão, e por muito tempo nada no
+  produto sabia dizer o que estava registrado, em qual ambiente, nem com qual
+  redirect_uri. O PagBank compara a redirect_uri byte a byte na troca do
+  token, então um cadastro diferente do callback desta instalação é uma falha
+  de OAuth silenciosa — e diagnosticar isso uma vez já custou tempo de gente.
+
+  Esta tela é a consulta feita permanente. Sandbox e produção são aplicações
+  SEPARADAS, com credenciais separadas, então cada ambiente responde por si; e
+  a tela existe justamente para os momentos em que algo está quebrado, então
+  uma instalação sem nada configurado também precisa se explicar.
+
+  Scenario: O callback que precisa estar registrado aparece por inteiro
+    Given a operadora abre a aplicação Connect de uma instalação sem aplicação registrada
+    Then ela vê o callback desta instalação
+    And cada ambiente aparece em seu próprio cartão
+
+  Scenario: Um ambiente sem aplicação diz isso com todas as letras
+    Given a operadora abre a aplicação Connect de uma instalação sem aplicação registrada
+    Then os dois ambientes se declaram sem aplicação configurada

package/features-platform/a-homologacao-e-da-plataforma.feature

@@ -0,0 +1,31 @@
+@journey @plataforma
+Feature: A homologação é da plataforma
+
+  Somos o integrador direto: a homologação do PagBank é da PLATAFORMA, uma
+  única vez — as lojas são usuárias da plataforma e estão isentas. Sem ela,
+  cobranças em produção respondem 403 ACCESS_DENIED mesmo com credenciais
+  válidas, então "a plataforma está homologada?" é uma pergunta que vale
+  dinheiro e não pode depender da memória de alguém.
+
+  A tela carrega as três metades: a situação registrada (a AUSÊNCIA do
+  registro é o quarto estado honesto, "não solicitada" — exibido, nunca
+  oferecido), as respostas prontas do formulário oficial, e o gerador do
+  anexo de evidências, que roda com as credenciais de sandbox da própria
+  plataforma e recusa com o motivo quando não pode rodar.
+
+  Scenario: As respostas prontas nomeiam os dois serviços integrados
+    Given a operadora abre a homologação de uma plataforma que nunca a solicitou
+    Then a situação é "Não solicitada"
+    And o formulário oficial está a um clique
+    And as respostas prontas nomeiam a API de Pedidos e a API Connect
+
+  Scenario: Registrar a solicitação muda a situação sem recarregar
+    Given a operadora abre a homologação de uma plataforma que nunca a solicitou
+    When ela registra o protocolo da solicitação
+    Then o registro é confirmado
+    And a situação passa a ser "Solicitada"
+
+  Scenario: Sem token de sandbox, o anexo recusa com o motivo
+    Given a operadora abre a homologação de uma plataforma que nunca a solicitou
+    When ela tenta gerar o anexo de evidências
+    Then ela vê o motivo pelo qual o anexo não saiu

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@12-apps/payments-e2e",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "type": "module",
   "description": "The payments buyer journeys, as Gherkin a host runs against its own app",
   "repository": {
@@ -11,6 +11,7 @@
   "files": [
     "dist",
     "features",
+    "features-platform",
     "*.md"
   ],
   "exports": {
@@ -32,8 +33,8 @@
     "playwright-bdd": ">=8.0.0"
   },
   "devDependencies": {
-    "@12-apps/eslint-config": "^1.19.0",
-    "@12-apps/typescript-config": "^1.19.0",
+    "@12-apps/eslint-config": "^1.20.0",
+    "@12-apps/typescript-config": "^1.20.0",
     "@playwright/test": "^1.56.1",
     "playwright-bdd": "^8.4.1",
     "typescript": "5.9.2"