npm - @archbase/security - Versions diffs - 4.0.38 → 4.0.40 - Mend

@archbase/security 4.0.38 → 4.0.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/archbase-security-4.0.40.tgz +0 -0
package/dist/index.js +1066 -887
package/dist/src/ArchbaseAuthenticator.d.ts +6 -0
package/dist/src/ArchbaseLogin.d.ts +11 -1
package/dist/src/ArchbaseMfaSetup.d.ts +24 -0
package/dist/src/hooks/useArchbaseAuthenticationManager.d.ts +3 -0
package/dist/src/index.d.ts +1 -0
package/package.json +5 -5
package/dist/archbase-security-4.0.38.tgz +0 -0

package/dist/index.js CHANGED Viewed

@@ -1,20 +1,20 @@
 import "reflect-metadata";
-import * as I from "inversify";
-import { decorate as xt, injectable as kt } from "inversify";
-import { compressString as St, decompressString as It, IOCContainer as Pt, ARCHBASE_IOC_API_TYPE as G, processErrorMessage as ee, IsNotEmpty as J, IsOptional as re, IsBoolean as q, IsEmail as Tt, getKeyByEnumValue as Ve, useArchbasePasswordRemember as Ct, getI18nextInstance as S, useArchbaseTheme as Ut, isEmailValidate as _t, useArchbaseAppContext as Dt } from "@archbase/core";
-import F from "crypto-js";
-import { jwtDecode as Rt } from "jwt-decode";
-import { jsx as d, jsxs as R, Fragment as te } from "react/jsx-runtime";
-import Ge, { useState as f, useEffect as z, createContext as Re, useMemo as Je, useRef as Ke, useCallback as pe, useContext as Ne } from "react";
-import { BehaviorSubject as ze } from "rxjs";
-import { ArchbaseRemoteApiService as ce, useArchbaseStore as qe } from "@archbase/data";
-import { v4 as K } from "uuid";
-import { Card as Ye, Text as se, Divider as ye, Group as we, Select as Nt, Tooltip as Bt, Button as ie, TextInput as Ce, Loader as Xe, PasswordInput as Ue, Checkbox as Mt, Anchor as Ot, useMantineColorScheme as Lt, Box as $t, Stack as jt, Skeleton as fe } from "@mantine/core";
-import { useFocusTrap as Qe } from "@mantine/hooks";
-import { IconCopy as Ft } from "@tabler/icons-react";
-import { ArchbaseDialog as We } from "@archbase/components";
-import { useContainer as ve } from "inversify-react";
-class Ze {
+import * as U from "inversify";
+import { decorate as Mt, injectable as Nt } from "inversify";
+import { compressString as Bt, decompressString as Ot, IOCContainer as Lt, ARCHBASE_IOC_API_TYPE as X, processErrorMessage as oe, IsNotEmpty as Q, IsOptional as de, IsBoolean as re, IsEmail as $t, getKeyByEnumValue as Ye, useArchbasePasswordRemember as zt, getI18nextInstance as x, useArchbaseTheme as jt, isEmailValidate as Ft, useArchbaseAppContext as Vt } from "@archbase/core";
+import G from "crypto-js";
+import { jwtDecode as Wt } from "jwt-decode";
+import { jsx as n, jsxs as P, Fragment as ne } from "react/jsx-runtime";
+import ot, { useState as h, useEffect as K, createContext as je, useMemo as nt, useRef as it, useCallback as Se, useContext as Fe } from "react";
+import { BehaviorSubject as Xe } from "rxjs";
+import { ArchbaseRemoteApiService as me, useArchbaseStore as at } from "@archbase/data";
+import { v4 as Z } from "uuid";
+import { Card as Ve, Text as j, Divider as Te, Stack as be, TextInput as Ae, Button as W, Anchor as Qe, Group as le, Select as Ht, Tooltip as Gt, Loader as ct, PasswordInput as Le, Checkbox as Jt, Alert as Ze, Code as et, CopyButton as tt, SimpleGrid as Kt, useMantineColorScheme as qt, Box as Yt, Skeleton as Ie } from "@mantine/core";
+import { useFocusTrap as lt } from "@mantine/hooks";
+import { IconCopy as Xt } from "@tabler/icons-react";
+import { ArchbaseQRCode as Qt, ArchbaseDialog as rt } from "@archbase/components";
+import { useContainer as Ue } from "inversify-react";
+class dt {
   id;
   displayName;
   email;
@@ -24,10 +24,10 @@ class Ze {
     this.id = e.id, this.displayName = e.displayName, this.email = e.email, this.photo = e.photo, this.isAdmin = e.isAdmin;
   }
   static newInstance() {
-    return new Ze({});
+    return new dt({});
   }
 }
-class et {
+class ut {
   username;
   password;
   remember;
@@ -35,16 +35,16 @@ class et {
     this.username = e.username, this.password = e.password, this.remember = e.remember;
   }
   static newInstance() {
-    return new et({});
+    return new ut({});
   }
 }
-const Q = "YngzI1guK3dGaElFcFY9MywqK3xgPzg/Ojg7eD8xRmg=", Se = "c1ab58e7-c113-4225-a190-a9e59d1207fc", Ie = "6faf6932-a0b5-457b-83b1-8d89ddbd91fd", Pe = "602b05c5-ec46-451e-aba6-187e463bc245", Te = "8b4a7c2d-9e5f-4163-b8a7-3f2c9d8e5a1b";
-class Vt {
+const ae = "YngzI1guK3dGaElFcFY9MywqK3xgPzg/Ojg7eD8xRmg=", Me = "c1ab58e7-c113-4225-a190-a9e59d1207fc", Ne = "6faf6932-a0b5-457b-83b1-8d89ddbd91fd", Be = "602b05c5-ec46-451e-aba6-187e463bc245", Oe = "8b4a7c2d-9e5f-4163-b8a7-3f2c9d8e5a1b";
+class Zt {
   getUsernameAndPassword() {
     try {
-      const e = localStorage.getItem(Ie);
+      const e = localStorage.getItem(Ne);
       if (e) {
-        const t = F.AES.decrypt(e, Q).toString(F.enc.Utf8), o = atob(t).split(":");
+        const t = G.AES.decrypt(e, ae).toString(G.enc.Utf8), o = atob(t).split(":");
         return { username: o[0], password: o[1], remember: !0 };
       } else
         return null;
@@ -53,14 +53,14 @@ class Vt {
     }
   }
   saveUsernameAndPassword(e, t) {
-    const s = btoa(`${e}:${t}`), o = F.AES.encrypt(s, Q).toString();
-    localStorage.setItem(Ie, o);
+    const s = btoa(`${e}:${t}`), o = G.AES.encrypt(s, ae).toString();
+    localStorage.setItem(Ne, o);
   }
   getUsername() {
     try {
-      const e = localStorage.getItem(Pe);
+      const e = localStorage.getItem(Be);
       if (e) {
-        const t = F.AES.decrypt(e, Q).toString(F.enc.Utf8);
+        const t = G.AES.decrypt(e, ae).toString(G.enc.Utf8);
         return atob(t);
       } else
         return null;
@@ -69,42 +69,42 @@ class Vt {
     }
   }
   saveUsername(e) {
-    const t = btoa(e), s = F.AES.encrypt(t, Q).toString();
-    localStorage.setItem(Pe, s);
+    const t = btoa(e), s = G.AES.encrypt(t, ae).toString();
+    localStorage.setItem(Be, s);
   }
   isTokenExpired(e, t = 300) {
     let s = e;
     if (!s && !this.getToken())
       return !0;
     try {
-      const o = Rt(s.access_token);
+      const o = Wt(s.access_token);
       if (!o)
         return !0;
-      const c = Math.floor(Date.now() / 1e3), l = o.exp;
-      return c > l - t;
+      const a = Math.floor(Date.now() / 1e3), c = o.exp;
+      return a > c - t;
     } catch {
       return !0;
     }
   }
   saveToken(e) {
     if (e) {
-      const t = JSON.stringify(e), s = F.AES.encrypt(t, Q).toString(), o = St(s);
-      localStorage.setItem(Se, o);
+      const t = JSON.stringify(e), s = G.AES.encrypt(t, ae).toString(), o = Bt(s);
+      localStorage.setItem(Me, o);
     } else
       this.clearToken();
   }
   clearUsernameAndPassword() {
-    localStorage.removeItem(Ie), localStorage.removeItem(Pe);
+    localStorage.removeItem(Ne), localStorage.removeItem(Be);
   }
   clearToken() {
-    localStorage.removeItem(Se);
+    localStorage.removeItem(Me);
   }
   getToken() {
     try {
-      const e = localStorage.getItem(Se);
+      const e = localStorage.getItem(Me);
       if (!e)
         return null;
-      const t = It(e), s = F.AES.decrypt(t, Q).toString(F.enc.Utf8);
+      const t = Ot(e), s = G.AES.decrypt(t, ae).toString(G.enc.Utf8);
       return JSON.parse(s);
     } catch {
       return null;
@@ -112,37 +112,37 @@ class Vt {
   }
   saveContext(e) {
     try {
-      const t = F.AES.encrypt(e, Q).toString();
-      localStorage.setItem(Te, t);
+      const t = G.AES.encrypt(e, ae).toString();
+      localStorage.setItem(Oe, t);
     } catch (t) {
       console.warn("Erro ao salvar contexto:", t);
     }
   }
   getContext() {
     try {
-      const e = localStorage.getItem(Te);
-      return e ? F.AES.decrypt(e, Q).toString(F.enc.Utf8) : null;
+      const e = localStorage.getItem(Oe);
+      return e ? G.AES.decrypt(e, ae).toString(G.enc.Utf8) : null;
     } catch {
       return null;
     }
   }
   clearContext() {
-    localStorage.removeItem(Te);
+    localStorage.removeItem(Oe);
   }
 }
-xt(kt(), Vt);
-function tt(r) {
+Mt(Nt(), Zt);
+function ht(r) {
   const t = new Uint8Array(1);
-  return window.crypto.getRandomValues(t), t[0] >= Math.floor(256 / r) * r ? tt(r) : t[0] % r;
+  return window.crypto.getRandomValues(t), t[0] >= Math.floor(256 / r) * r ? ht(r) : t[0] % r;
 }
-function zt(r) {
+function er(r) {
   let e = "";
   const t = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
   for (let s = 0; s < r; s++)
-    e += t.charAt(tt(t.length - 1));
+    e += t.charAt(ht(t.length - 1));
   return e;
 }
-async function Wt(r) {
+async function tr(r) {
   if (!window.crypto.subtle?.digest)
     throw new Error(
       "The context/environment is not secure, and does not support the 'crypto.subtle' module. See: https://developer.mozilla.org/en-US/docs/Web/API/Crypto/subtle for details"
@@ -150,36 +150,36 @@ async function Wt(r) {
   const t = new TextEncoder().encode(r), s = await window.crypto.subtle.digest("SHA-256", t), o = String.fromCharCode(...new Uint8Array(s));
   return btoa(o).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
 }
-class rt extends Error {
+class pt extends Error {
   status;
   statusText;
   constructor(e, t, s) {
     super(s), this.name = "FetchError", this.status = e, this.statusText = t;
   }
 }
-function Ht(r) {
+function rr(r) {
   let e = "";
   return Object.entries(r).forEach(([t, s]) => {
     e += (e ? "&" : "") + t + "=" + encodeURIComponent(s);
   }), e;
 }
-async function Gt(r, e) {
+async function sr(r, e) {
   return fetch(r, {
     method: "POST",
-    body: Ht(e),
+    body: rr(e),
     headers: { "Content-Type": "application/x-www-form-urlencoded" }
   }).then(async (t) => {
     if (!t.ok) {
       const s = await t.text();
-      throw new rt(t.status, t.statusText, s);
+      throw new pt(t.status, t.statusText, s);
     }
     return t;
   });
 }
-const st = "PKCE_code_verifier", _e = "ROCP_auth_state";
-async function Jt(r, e) {
-  const t = zt(96);
-  return sessionStorage.setItem(st, t), Wt(t).then((s) => {
+const ft = "PKCE_code_verifier", $e = "ROCP_auth_state";
+async function or(r, e) {
+  const t = er(96);
+  return sessionStorage.setItem(ft, t), tr(t).then((s) => {
     const o = new URLSearchParams({
       response_type: "code",
       client_id: r.clientId,
@@ -188,23 +188,23 @@ async function Jt(r, e) {
       code_challenge_method: "S256",
       ...r.extraAuthParameters
     });
-    r.scope !== void 0 && o.append("scope", r.scope), sessionStorage.removeItem(_e);
-    const c = e ?? r.state;
-    c && (sessionStorage.setItem(_e, c), o.append("state", c)), r?.preLogin && r.preLogin(), window.location.replace(`${r.authorizationEndpoint}?${o.toString()}`);
+    r.scope !== void 0 && o.append("scope", r.scope), sessionStorage.removeItem($e);
+    const a = e ?? r.state;
+    a && (sessionStorage.setItem($e, a), o.append("state", a)), r?.preLogin && r.preLogin(), window.location.replace(`${r.authorizationEndpoint}?${o.toString()}`);
   });
 }
-function Kt(r) {
+function nr(r) {
   return r.access_token !== void 0;
 }
-function ot(r, e) {
-  return Gt(r, e).then((t) => t.json().then((s) => {
-    if (Kt(s))
+function mt(r, e) {
+  return sr(r, e).then((t) => t.json().then((s) => {
+    if (nr(s))
       return s;
     throw Error(s);
   }));
 }
-const qt = (r) => {
-  const t = new URLSearchParams(window.location.search).get("code"), s = window.sessionStorage.getItem(st);
+const ir = (r) => {
+  const t = new URLSearchParams(window.location.search).get("code"), s = window.sessionStorage.getItem(ft);
   if (!t)
     throw Error(`Parâmetro 'código' não encontrado na URL.
 A autenticação ocorreu?`);
@@ -221,8 +221,8 @@ A autenticação ocorreu?`);
     ...r.extraTokenParameters,
     ...r.extraAuthParams
   };
-  return ot(r.tokenEndpoint, o);
-}, Yt = (r) => {
+  return mt(r.tokenEndpoint, o);
+}, ar = (r) => {
   const { config: e, refreshToken: t } = r, s = {
     grant_type: "refresh_token",
     refresh_token: t,
@@ -231,101 +231,101 @@ A autenticação ocorreu?`);
     redirect_uri: e.redirectUri,
     ...e.extraTokenParameters
   };
-  return ot(e.tokenEndpoint, s);
+  return mt(e.tokenEndpoint, s);
 };
-function Xt(r, e, t, s, o, c) {
-  const l = new URLSearchParams({
+function cr(r, e, t, s, o, a) {
+  const c = new URLSearchParams({
     token: t || e,
     token_type_hint: t ? "refresh_token" : "access_token",
     client_id: r.clientId,
     post_logout_redirect_uri: r.logoutRedirect ?? r.redirectUri,
-    ui_locales: window.navigator.languages.reduce((i, u) => i + " " + u),
+    ui_locales: window.navigator.languages.reduce((i, l) => i + " " + l),
     ...r.extraLogoutParameters
   });
-  s && l.append("id_token_hint", s), o && l.append("state", o), c && l.append("logout_hint", c), window.location.replace(`${r.logoutEndpoint}?${l.toString()}`);
+  s && c.append("id_token_hint", s), o && c.append("state", o), a && c.append("logout_hint", a), window.location.replace(`${r.logoutEndpoint}?${c.toString()}`);
 }
-function Qt(r) {
-  const e = r.get("state"), t = sessionStorage.getItem(_e);
+function lr(r) {
+  const e = r.get("state"), t = sessionStorage.getItem($e);
   if (e !== t)
     throw new Error(
       '"state" valor recebido do servidor de autenticação não corresponde à solicitação do cliente. Possível falsificação de solicitação entre sites'
     );
 }
-function Z(r, e, t) {
-  const s = t === "session" ? sessionStorage : localStorage, [o, c] = f(() => {
+function ce(r, e, t) {
+  const s = t === "session" ? sessionStorage : localStorage, [o, a] = h(() => {
     const i = s.getItem(r);
     try {
       return i ? JSON.parse(i) : e;
-    } catch (u) {
+    } catch (l) {
       return console.warn(
         `Falha ao analisar o valor armazenado para '${r}'.
 Continuando com o valor padrão.
-Error: ${u.message}`
+Error: ${l.message}`
       ), e;
     }
-  }), l = (i) => {
+  }), c = (i) => {
     if (i === void 0) {
-      c(i), s.removeItem(r);
+      a(i), s.removeItem(r);
       return;
     }
     try {
-      const u = i instanceof Function ? i(o) : i;
-      c(u), s.setItem(r, JSON.stringify(u));
+      const l = i instanceof Function ? i(o) : i;
+      a(l), s.setItem(r, JSON.stringify(l));
     } catch {
       console.log(`Falha ao armazenar valor '${i}' para chave '${r}'`);
     }
   };
-  return z(() => {
-    const i = (u) => {
-      u.storageArea === s && u.key === r && c(JSON.parse(u.newValue ?? ""));
+  return K(() => {
+    const i = (l) => {
+      l.storageArea === s && l.key === r && a(JSON.parse(l.newValue ?? ""));
     };
     return window.addEventListener("storage", i, !1), () => window.removeEventListener("storage", i, !1);
-  }), [o, l];
+  }), [o, c];
 }
-const Tr = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const $r = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  default: Z
+  default: ce
 }, Symbol.toStringTag, { value: "Module" }));
-function me(r) {
+function Ce(r) {
   return ["", void 0, null].includes(r);
 }
-function Zt(r) {
+function dr(r) {
   const {
     autoLogin: e = !0,
     clearURL: t = !0,
     decodeToken: s = !0,
     scope: o = void 0,
-    preLogin: c = () => null,
-    postLogin: l = () => null,
+    preLogin: a = () => null,
+    postLogin: c = () => null,
     onRefreshTokenExpire: i = void 0,
-    storage: u = "local"
-  } = r, m = {
+    storage: l = "local"
+  } = r, g = {
     ...r,
     autoLogin: e,
     clearURL: t,
     decodeToken: s,
     scope: o,
-    preLogin: c,
-    postLogin: l,
+    preLogin: a,
+    postLogin: c,
     onRefreshTokenExpire: i,
-    storage: u
+    storage: l
   };
-  return er(m), m;
+  return ur(g), g;
 }
-function er(r) {
-  if (me(r?.clientId))
+function ur(r) {
+  if (Ce(r?.clientId))
     throw Error(
       "'clientId' deve ser definido no objeto 'ArchbaseAuthConfig' passado para ArchbaseAuthProvider"
     );
-  if (me(r?.authorizationEndpoint))
+  if (Ce(r?.authorizationEndpoint))
     throw Error(
       "'authorizationEndpoint' deve ser definido no objeto 'ArchbaseAuthConfig' passado para ArchbaseAuthProvider"
     );
-  if (me(r?.tokenEndpoint))
+  if (Ce(r?.tokenEndpoint))
     throw Error(
       "'tokenEndpoint' deve ser definido no objeto 'ArchbaseAuthConfig' passado para ArchbaseAuthProvider"
     );
-  if (me(r?.redirectUri))
+  if (Ce(r?.redirectUri))
     throw Error(
       "'redirectUri' deve ser definido no objeto 'ArchbaseAuthConfig' passado para ArchbaseAuthProvider"
     );
@@ -337,23 +337,23 @@ function er(r) {
     "Usar 'extraAuthParams' e 'extraTokenParameters' não é recomendado. Eles fazem a mesma coisa e você deve usar apenas 'extraTokenParameters'"
   );
 }
-const ne = 600, oe = (r) => Math.round(Date.now() / 1e3 + r);
-function He(r) {
+const pe = 600, he = (r) => Math.round(Date.now() / 1e3 + r);
+function st(r) {
   return Math.round(Date.now()) / 1e3 + 30 >= r;
 }
-const tr = [
+const hr = [
   "refresh_expires_in",
   // KeyCloak
   "refresh_token_expires_in"
   // Azure AD
 ];
-function rr(r, e) {
-  for (const t of tr)
+function pr(r, e) {
+  for (const t of hr)
     if (t in e)
       return e[t];
-  return e.refresh_token ? r + ne : r;
+  return e.refresh_token ? r + pe : r;
 }
-const ge = (r) => {
+const Pe = (r) => {
   try {
     const t = r.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), s = decodeURIComponent(
       atob(t).split("").map(function(o) {
@@ -368,88 +368,88 @@ const ge = (r) => {
 	Você pode desativar a decodificação JWT definindo o valor 'decodeToken' como 'falso' na configuração.`
     );
   }
-}, sr = Re({
+}, fr = je({
   token: "",
   login: () => null,
   logOut: () => null,
   error: null,
   loginInProgress: !1
-}), Cr = ({ authConfig: r, children: e }) => {
-  const t = Je(() => Zt(r), [r]), [s, o] = Z(
+}), zr = ({ authConfig: r, children: e }) => {
+  const t = nt(() => dr(r), [r]), [s, o] = ce(
     "ROCP_refreshToken",
     void 0,
     t.storage
-  ), [c, l] = Z(
+  ), [a, c] = ce(
     "ROCP_refreshTokenExpire",
-    oe(2 * ne),
+    he(2 * pe),
     t.storage
-  ), [i, u] = Z("ROCP_token", "", t.storage), [m, b] = Z(
+  ), [i, l] = ce("ROCP_token", "", t.storage), [g, E] = ce(
     "ROCP_tokenExpire",
-    oe(ne),
+    he(pe),
     t.storage
-  ), [h, C] = Z(
+  ), [d, _] = ce(
     "ROCP_idToken",
     void 0,
     t.storage
-  ), [E, y] = Z(
+  ), [v, f] = ce(
     "ROCP_loginInProgress",
     !1,
     t.storage
-  ), [x, U] = Z(
+  ), [S, D] = ce(
     "ROCP_refreshInProgress",
     !1,
     t.storage
-  ), [_, O] = f(), [D, N] = f(), [k, A] = f(null);
-  let P;
-  function W() {
-    o(void 0), u(""), b(oe(ne)), l(oe(ne)), C(void 0), O(void 0), N(void 0), y(!1);
+  ), [B, O] = h(), [F, N] = h(), [w, m] = h(null);
+  let R;
+  function V() {
+    o(void 0), l(""), E(he(pe)), c(he(pe)), _(void 0), O(void 0), N(void 0), f(!1);
   }
-  function L(p, n) {
-    W(), A(null), t?.logoutEndpoint && Xt(t, i, s, h, p, n);
+  function C(p, y) {
+    V(), m(null), t?.logoutEndpoint && cr(t, i, s, d, p, y);
   }
-  function B(p) {
-    W(), y(!0);
-    let n = p;
+  function L(p) {
+    V(), f(!0);
+    let y = p;
     p && typeof p != "string" && (console.warn(
       `O estado de login aprovado deve ser do tipo 'string'. Recebido'${p}'. Ignorando o valor...`
-    ), n = void 0), Jt(t, n).catch((w) => {
-      console.error(w), A(w.message), y(!1);
+    ), y = void 0), or(t, y).catch((te) => {
+      console.error(te), m(te.message), f(!1);
     });
   }
-  function H(p) {
-    u(p.access_token), o(p.refresh_token);
-    const n = t.tokenExpiresIn ?? p.expires_in ?? ne;
-    b(oe(n));
-    const w = t.refreshTokenExpiresIn ?? rr(n, p);
-    l(oe(w)), C(p.id_token);
+  function q(p) {
+    l(p.access_token), o(p.refresh_token);
+    const y = t.tokenExpiresIn ?? p.expires_in ?? pe;
+    E(he(y));
+    const te = t.refreshTokenExpiresIn ?? pr(y, p);
+    c(he(te)), _(p.id_token);
     try {
-      p.id_token && N(ge(p.id_token));
-    } catch (a) {
-      console.warn(`Falha ao decodificar idToken: ${a.message}`);
+      p.id_token && N(Pe(p.id_token));
+    } catch (T) {
+      console.warn(`Falha ao decodificar idToken: ${T.message}`);
     }
     try {
-      t.decodeToken && O(ge(p.access_token));
-    } catch (a) {
-      console.warn(`Falha ao decodificar o token de acesso: ${a.message}`);
+      t.decodeToken && O(Pe(p.access_token));
+    } catch (T) {
+      console.warn(`Falha ao decodificar o token de acesso: ${T.message}`);
     }
   }
-  function Y(p = !1) {
-    return p || !t.onRefreshTokenExpire ? B() : t.onRefreshTokenExpire({ login: B });
+  function ee(p = !1) {
+    return p || !t.onRefreshTokenExpire ? L() : t.onRefreshTokenExpire({ login: L });
   }
-  function $(p = !1) {
-    if (i && He(m) && !(x && !p)) {
-      if (He(c))
-        return Y(p);
+  function Y(p = !1) {
+    if (i && st(g) && !(S && !p)) {
+      if (st(a))
+        return ee(p);
       if (s) {
-        U(!0), Yt({ config: t, refreshToken: s }).then((n) => H(n)).catch((n) => {
-          if (n instanceof rt) {
-            if (n.status === 400)
-              return Y(p);
-            console.error(n), A(n.message), p && B();
+        D(!0), ar({ config: t, refreshToken: s }).then((y) => q(y)).catch((y) => {
+          if (y instanceof pt) {
+            if (y.status === 400)
+              return ee(p);
+            console.error(y), m(y.message), p && L();
           } else
-            n instanceof Error && (console.error(n), A(n.message), p && B());
+            y instanceof Error && (console.error(y), m(y.message), p && L());
         }).finally(() => {
-          U(!1);
+          D(!1);
         });
         return;
       }
@@ -458,55 +458,55 @@ const ge = (r) => {
       );
     }
   }
-  z(() => (P = setInterval(() => $(), 1e4), () => clearInterval(P)), [i, s, c, m]);
-  const X = Ke(!1);
-  return z(() => {
-    if (E) {
+  K(() => (R = setInterval(() => Y(), 1e4), () => clearInterval(R)), [i, s, a, g]);
+  const ie = it(!1);
+  return K(() => {
+    if (v) {
       const p = new URLSearchParams(window.location.search);
       if (!p.get("code")) {
-        const n = p.get("error_description") || "Estado de autorização inválido. Atualizar a página pode resolver o problema.";
-        console.error(n), A(n), L();
+        const y = p.get("error_description") || "Estado de autorização inválido. Atualizar a página pode resolver o problema.";
+        console.error(y), m(y), C();
         return;
       }
-      if (!X.current) {
-        X.current = !0;
+      if (!ie.current) {
+        ie.current = !0;
         try {
-          Qt(p);
-        } catch (n) {
-          console.error(n), A(n.message);
+          lr(p);
+        } catch (y) {
+          console.error(y), m(y.message);
         }
-        qt(t).then((n) => {
-          H(n), t?.postLogin && t.postLogin();
-        }).catch((n) => {
-          console.error(n), A(n.message);
+        ir(t).then((y) => {
+          q(y), t?.postLogin && t.postLogin();
+        }).catch((y) => {
+          console.error(y), m(y.message);
         }).finally(() => {
-          t.clearURL && window.history.replaceState(null, "", window.location.pathname), y(!1);
+          t.clearURL && window.history.replaceState(null, "", window.location.pathname), f(!1);
         });
       }
       return;
     }
     if (!i && t.autoLogin)
-      return B();
+      return L();
     try {
-      h && N(ge(h));
+      d && N(Pe(d));
     } catch (p) {
       console.warn(`Falha ao decodificar idToken: ${p.message}`);
     }
     try {
-      t.decodeToken && O(ge(i));
+      t.decodeToken && O(Pe(i));
     } catch (p) {
       console.warn(`Falha ao decodificar o token de acesso: ${p.message}`);
     }
-    $(!0);
-  }, []), /* @__PURE__ */ d(
-    sr.Provider,
+    Y(!0);
+  }, []), /* @__PURE__ */ n(
+    fr.Provider,
     {
-      value: { token: i, tokenData: _, idToken: h, idTokenData: D, login: B, logOut: L, error: k, loginInProgress: E },
+      value: { token: i, tokenData: B, idToken: d, idTokenData: F, login: L, logOut: C, error: w, loginInProgress: v },
       children: e
     }
   );
 };
-class nt {
+class gt {
   resourceService;
   resource;
   actions;
@@ -515,7 +515,7 @@ class nt {
   error;
   isAdmin;
   constructor(e, t, s) {
-    this.resourceService = Pt.getContainer().get(G.Resource), this.resource = { resourceName: e, resourceDescription: t }, this.alreadyApplied = !1, this.actions = [], this.permissions = [], this.error = "", this.isAdmin = s;
+    this.resourceService = Lt.getContainer().get(X.Resource), this.resource = { resourceName: e, resourceDescription: t }, this.alreadyApplied = !1, this.actions = [], this.permissions = [], this.error = "", this.isAdmin = s;
   }
   registerAction(e, t) {
     !this.alreadyApplied && this.actions.findIndex((s) => s.actionName === e) < 0 && this.actions.push({ actionName: e, actionDescription: t });
@@ -524,7 +524,7 @@ class nt {
     this.alreadyApplied || (this.alreadyApplied = !0, this.resourceService.registerResource({ resource: this.resource, actions: this.actions }).then((t) => {
       this.permissions = t.permissions, this.error = "", e && e();
     }).catch((t) => {
-      this.alreadyApplied = !1, this.error = ee(t);
+      this.alreadyApplied = !1, this.error = oe(t);
     }));
   }
   hasPermission(e) {
@@ -586,10 +586,10 @@ class nt {
     return [...this.actions];
   }
 }
-class V {
+class J {
   static instance;
-  _currentTenant = new ze(null);
-  _availableTenants = new ze([]);
+  _currentTenant = new Xe(null);
+  _availableTenants = new Xe([]);
   constructor() {
     const e = localStorage.getItem("tenant_info");
     if (e)
@@ -600,7 +600,7 @@ class V {
       }
   }
   static getInstance() {
-    return V.instance || (V.instance = new V()), V.instance;
+    return J.instance || (J.instance = new J()), J.instance;
   }
   get currentTenant$() {
     return this._currentTenant.asObservable();
@@ -629,15 +629,15 @@ class V {
     return t && (e["X-TENANT-ID"] = t.id), e;
   }
 }
-function Ur() {
-  return V.getInstance();
+function jr() {
+  return J.getInstance();
 }
-var ae = /* @__PURE__ */ ((r) => (r.USER = "user", r.PROFILE = "profile", r.GROUP = "group", r))(ae || {}), or = Object.defineProperty, v = (r, e, t, s) => {
-  for (var o = void 0, c = r.length - 1, l; c >= 0; c--)
-    (l = r[c]) && (o = l(e, t, o) || o);
-  return o && or(e, t, o), o;
-}, nr = /* @__PURE__ */ ((r) => (r.VIEW = "VIEW", r.API = "API", r))(nr || {});
-const it = class at {
+var fe = /* @__PURE__ */ ((r) => (r.USER = "user", r.PROFILE = "profile", r.GROUP = "group", r))(fe || {}), mr = Object.defineProperty, k = (r, e, t, s) => {
+  for (var o = void 0, a = r.length - 1, c; a >= 0; a--)
+    (c = r[a]) && (o = c(e, t, o) || o);
+  return o && mr(e, t, o), o;
+}, gr = /* @__PURE__ */ ((r) => (r.VIEW = "VIEW", r.API = "API", r))(gr || {});
+const yt = class wt {
   id;
   code;
   version;
@@ -648,20 +648,20 @@ const it = class at {
   description;
   intervals;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.description = e.description || "", this.intervals = e.intervals ? e.intervals.map((t) => new ir(t)) : [];
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.description = e.description || "", this.intervals = e.intervals ? e.intervals.map((t) => new yr(t)) : [];
   }
-  static newInstance = () => new at({
-    id: K(),
+  static newInstance = () => new wt({
+    id: Z(),
     intervals: []
   });
 };
-v([
-  J({
+k([
+  Q({
     message: "archbase:Informe a descrição do cronograma de acesso"
   })
-], it.prototype, "description");
-let ct = it;
-const Ae = class lt {
+], yt.prototype, "description");
+let vt = yt;
+const De = class bt {
   id;
   code;
   version;
@@ -674,30 +674,30 @@ const Ae = class lt {
   startTime;
   endTime;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.accessSchedule = e.accessSchedule ? new ct(e.accessSchedule) : void 0, this.dayOfWeek = e.dayOfWeek || 0, this.startTime = e.startTime || "", this.endTime = e.endTime || "";
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.accessSchedule = e.accessSchedule ? new vt(e.accessSchedule) : void 0, this.dayOfWeek = e.dayOfWeek || 0, this.startTime = e.startTime || "", this.endTime = e.endTime || "";
   }
-  static newInstance = () => new lt({
-    id: K(),
+  static newInstance = () => new bt({
+    id: Z(),
     dayOfWeek: (/* @__PURE__ */ new Date()).getDay(),
     startTime: "08:00",
     endTime: "17:00"
   });
 };
-v([
-  re()
-], Ae.prototype, "accessSchedule");
-v([
-  J({
+k([
+  de()
+], De.prototype, "accessSchedule");
+k([
+  Q({
     message: "archbase:Informe a hora de início"
   })
-], Ae.prototype, "startTime");
-v([
-  J({
+], De.prototype, "startTime");
+k([
+  Q({
     message: "archbase:Informe a hora de término"
   })
-], Ae.prototype, "endTime");
-let ir = Ae;
-class le {
+], De.prototype, "endTime");
+let yr = De;
+class ge {
   id;
   code;
   version;
@@ -712,20 +712,20 @@ class le {
     this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.actions = e.actions || [];
   }
 }
-v([
-  J({
+k([
+  Q({
     message: "archbase:Informe o nome"
   })
-], le.prototype, "name");
-v([
-  J({
+], ge.prototype, "name");
+k([
+  Q({
     message: "archbase:Informe a descrição"
   })
-], le.prototype, "description");
-v([
-  re()
-], le.prototype, "actions");
-const de = class dt {
+], ge.prototype, "description");
+k([
+  de()
+], ge.prototype, "actions");
+const ye = class At {
   id;
   code;
   version;
@@ -741,48 +741,48 @@ const de = class dt {
   actionVersion;
   isNewAction;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.resource = e.resource ? new ht(e.resource) : void 0, this.category = e.category || "", this.active = e.active || !1, this.actionVersion = e.actionVersion || "", this.isNewAction = e.isNewAction || !1;
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.resource = e.resource ? new xt(e.resource) : void 0, this.category = e.category || "", this.active = e.active || !1, this.actionVersion = e.actionVersion || "", this.isNewAction = e.isNewAction || !1;
   }
-  static newInstance = () => new dt({
-    id: K(),
+  static newInstance = () => new At({
+    id: Z(),
     active: !0,
     isNewAction: !0
   });
 };
-v([
-  J({
+k([
+  Q({
     message: "archbase:Informe o nome para a ação"
   })
-], de.prototype, "name");
-v([
-  J({
+], ye.prototype, "name");
+k([
+  Q({
     message: "archbase:Informe a descrição para a ação"
   })
-], de.prototype, "description");
-v([
-  re()
-], de.prototype, "resource");
-v([
-  J({
+], ye.prototype, "description");
+k([
+  de()
+], ye.prototype, "resource");
+k([
+  Q({
     message: "archbase:Informe a categoria para a ação"
   })
-], de.prototype, "category");
-v([
-  q()
-], de.prototype, "active");
-let ar = de;
-class ue extends le {
+], ye.prototype, "category");
+k([
+  re()
+], ye.prototype, "active");
+let wr = ye;
+class Ee extends ge {
   type;
   isNewProfile;
   constructor(e) {
-    super(e), this.type = ae.PROFILE, this.isNewProfile = e.isNewProfile || !1;
+    super(e), this.type = fe.PROFILE, this.isNewProfile = e.isNewProfile || !1;
   }
-  static newInstance = () => new ue({
-    id: K(),
+  static newInstance = () => new Ee({
+    id: Z(),
     isNewProfile: !0
   });
 }
-class Be {
+class We {
   id;
   code;
   version;
@@ -792,25 +792,25 @@ class Be {
   lastModifiedByUser;
   group;
   constructor(e) {
-    this.id = e.id, this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.group = e.group ? new he(e.group) : void 0;
+    this.id = e.id, this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.group = e.group ? new xe(e.group) : void 0;
   }
-  static newInstance = (e) => new Be({
-    id: K(),
+  static newInstance = (e) => new We({
+    id: Z(),
     group: e
   });
 }
-class he extends le {
+class xe extends ge {
   type;
   isNewGroup;
   constructor(e) {
-    super(e), this.type = ae.GROUP, this.isNewGroup = e.isNewGroup || !1;
+    super(e), this.type = fe.GROUP, this.isNewGroup = e.isNewGroup || !1;
   }
-  static newInstance = () => new he({
-    id: K(),
+  static newInstance = () => new xe({
+    id: Z(),
     isNewGroup: !0
   });
 }
-const be = class ut {
+const _e = class Et {
   id;
   code;
   version;
@@ -827,28 +827,28 @@ const be = class ut {
   constructor(e) {
     this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.actions = e.actions || [], this.active = e.active || !1, this.type = e.type || "VIEW", this.isNewResource = e.isNewResource || !1;
   }
-  static newInstance = () => new ut({
-    id: K(),
+  static newInstance = () => new Et({
+    id: Z(),
     actions: [],
     active: !0,
     isNewResource: !0
   });
 };
-v([
-  J({
+k([
+  Q({
     message: "archbase:Informe o nome para o recurso"
   })
-], be.prototype, "name");
-v([
-  J({
+], _e.prototype, "name");
+k([
+  Q({
     message: "archbase:Informe a descrição para o recurso"
   })
-], be.prototype, "description");
-v([
-  q()
-], be.prototype, "active");
-let ht = be;
-const M = class pt extends le {
+], _e.prototype, "description");
+k([
+  re()
+], _e.prototype, "active");
+let xt = _e;
+const H = class kt extends ge {
   userName;
   password;
   changePasswordOnNextLogin;
@@ -868,10 +868,10 @@ const M = class pt extends le {
   type;
   isNewUser;
   constructor(e) {
-    super(e), this.type = ae.USER, this.userName = e.userName || "", this.password = e.password || "", this.changePasswordOnNextLogin = e.changePasswordOnNextLogin || !1, this.allowPasswordChange = e.allowPasswordChange || !1, this.allowMultipleLogins = e.allowMultipleLogins || !1, this.passwordNeverExpires = e.passwordNeverExpires || !1, this.accountDeactivated = e.accountDeactivated || !1, this.accountLocked = e.accountLocked || !1, this.unlimitedAccessHours = e.unlimitedAccessHours || !1, this.isAdministrator = e.isAdministrator || !1, this.accessSchedule = e.accessSchedule ? new ct(e.accessSchedule) : void 0, this.groups = e.groups ? e.groups.map((t) => new Be(t)) : [], this.profile = e.profile ? new ue(e.profile) : void 0, this.email = e.email || "", this.avatar = e.avatar || void 0, this.isNewUser = e.isNewUser || !1, this.nickname = e.nickname;
+    super(e), this.type = fe.USER, this.userName = e.userName || "", this.password = e.password || "", this.changePasswordOnNextLogin = e.changePasswordOnNextLogin || !1, this.allowPasswordChange = e.allowPasswordChange || !1, this.allowMultipleLogins = e.allowMultipleLogins || !1, this.passwordNeverExpires = e.passwordNeverExpires || !1, this.accountDeactivated = e.accountDeactivated || !1, this.accountLocked = e.accountLocked || !1, this.unlimitedAccessHours = e.unlimitedAccessHours || !1, this.isAdministrator = e.isAdministrator || !1, this.accessSchedule = e.accessSchedule ? new vt(e.accessSchedule) : void 0, this.groups = e.groups ? e.groups.map((t) => new We(t)) : [], this.profile = e.profile ? new Ee(e.profile) : void 0, this.email = e.email || "", this.avatar = e.avatar || void 0, this.isNewUser = e.isNewUser || !1, this.nickname = e.nickname;
   }
-  static newInstance = () => new pt({
-    id: K(),
+  static newInstance = () => new kt({
+    id: Z(),
     userName: "",
     password: "",
     groups: [],
@@ -882,54 +882,54 @@ const M = class pt extends le {
     isNewUser: !0
   });
 };
-v([
-  J({
+k([
+  Q({
     message: "archbase:Informe o nome de usuário"
   })
-], M.prototype, "userName");
-v([
-  q()
-], M.prototype, "changePasswordOnNextLogin");
-v([
-  q()
-], M.prototype, "allowPasswordChange");
-v([
-  q()
-], M.prototype, "allowMultipleLogins");
-v([
-  q()
-], M.prototype, "passwordNeverExpires");
-v([
-  q()
-], M.prototype, "accountDeactivated");
-v([
-  q()
-], M.prototype, "accountLocked");
-v([
-  q()
-], M.prototype, "unlimitedAccessHours");
-v([
-  q()
-], M.prototype, "isAdministrator");
-v([
+], H.prototype, "userName");
+k([
+  re()
+], H.prototype, "changePasswordOnNextLogin");
+k([
+  re()
+], H.prototype, "allowPasswordChange");
+k([
   re()
-], M.prototype, "accessSchedule");
-v([
+], H.prototype, "allowMultipleLogins");
+k([
   re()
-], M.prototype, "groups");
-v([
+], H.prototype, "passwordNeverExpires");
+k([
   re()
-], M.prototype, "profile");
-v([
-  Tt(
+], H.prototype, "accountDeactivated");
+k([
+  re()
+], H.prototype, "accountLocked");
+k([
+  re()
+], H.prototype, "unlimitedAccessHours");
+k([
+  re()
+], H.prototype, "isAdministrator");
+k([
+  de()
+], H.prototype, "accessSchedule");
+k([
+  de()
+], H.prototype, "groups");
+k([
+  de()
+], H.prototype, "profile");
+k([
+  $t(
     {},
     {
       message: "archbase:Informe um email válido"
     }
   )
-], M.prototype, "email");
-let Ee = M;
-const Me = class De {
+], H.prototype, "email");
+let Re = H;
+const He = class ze {
   id;
   code;
   version;
@@ -943,35 +943,35 @@ const Me = class De {
   companyId;
   projectId;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.security = e.security ? De.createDtoFromJson(e.security) : void 0, this.action = e.action ? new ar(e.action) : void 0, this.tenantId = e.tenantId || "", this.companyId = e.companyId || "", this.projectId = e.projectId || "";
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.security = e.security ? ze.createDtoFromJson(e.security) : void 0, this.action = e.action ? new wr(e.action) : void 0, this.tenantId = e.tenantId || "", this.companyId = e.companyId || "", this.projectId = e.projectId || "";
   }
   static createDtoFromJson(e) {
     switch (e.type) {
       case "profile":
-        return new ue(e);
+        return new Ee(e);
       case "group":
-        return new he(e);
+        return new xe(e);
       case "user":
-        return new Ee(e);
+        return new Re(e);
       default:
         throw new Error("Unknown DTO type");
     }
   }
-  static newInstance = () => new De({
-    id: K(),
+  static newInstance = () => new ze({
+    id: Z(),
     tenantId: "",
     companyId: "",
     projectId: ""
   });
 };
-v([
-  re()
-], Me.prototype, "security");
-v([
-  re()
-], Me.prototype, "action");
-let _r = Me;
-class Oe {
+k([
+  de()
+], He.prototype, "security");
+k([
+  de()
+], He.prototype, "action");
+let Fr = He;
+class Ge {
   id;
   code;
   version;
@@ -989,13 +989,13 @@ class Oe {
   activated;
   isNovoToken;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.tenantId = e.tenantId || "", this.user = e.user ? new Ee(e.user) : void 0, this.name = e.name || "", this.description = e.description || "", this.token = e.token || "", this.expirationDate = e.expirationDate, this.revoked = e.revoked, this.activated = e.activated || !1;
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.tenantId = e.tenantId || "", this.user = e.user ? new Re(e.user) : void 0, this.name = e.name || "", this.description = e.description || "", this.token = e.token || "", this.expirationDate = e.expirationDate, this.revoked = e.revoked, this.activated = e.activated || !1;
   }
-  static newInstance = () => new Oe({
-    id: K()
+  static newInstance = () => new Ge({
+    id: Z()
   });
 }
-class Le {
+class Je {
   id;
   code;
   version;
@@ -1012,23 +1012,23 @@ class Le {
   user;
   isNewAccessToken;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.token = e.token || "", this.tokenType = e.tokenType || void 0, this.user = e.user ? new Ee(e.user) : void 0, this.revoked = e.revoked || !1, this.expired = e.expired || !1, this.expirationTime = e.expirationTime || 0, this.expirationDate = e.expirationDate || "", this.isNewAccessToken = e.isNewAccessToken || !1;
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.token = e.token || "", this.tokenType = e.tokenType || void 0, this.user = e.user ? new Re(e.user) : void 0, this.revoked = e.revoked || !1, this.expired = e.expired || !1, this.expirationTime = e.expirationTime || 0, this.expirationDate = e.expirationDate || "", this.isNewAccessToken = e.isNewAccessToken || !1;
   }
-  static newInstance = () => new Le({
-    id: K(),
+  static newInstance = () => new Je({
+    id: Z(),
     active: !0,
     isNewAccessToken: !0
   });
 }
-class ft extends ce {
+class St extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new Ee(e);
+    return new Re(e);
   }
   getEndpoint() {
     return "/api/v1/user";
@@ -1047,17 +1047,17 @@ class ft extends ce {
     return this.transform(t);
   }
 }
-I.decorate(I.inject(G.ApiClient), ft, 0);
-I.decorate(I.injectable(), ft);
-class mt extends ce {
+U.decorate(U.inject(X.ApiClient), St, 0);
+U.decorate(U.injectable(), St);
+class It extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new he(e);
+    return new xe(e);
   }
   getEndpoint() {
     return "/api/v1/group";
@@ -1069,17 +1069,17 @@ class mt extends ce {
     return e.isNewGroup;
   }
 }
-I.decorate(I.inject(G.ApiClient), mt, 0);
-I.decorate(I.injectable(), mt);
-class gt extends ce {
+U.decorate(U.inject(X.ApiClient), It, 0);
+U.decorate(U.injectable(), It);
+class Ct extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new ue(e);
+    return new Ee(e);
   }
   getEndpoint() {
     return "/api/v1/userProfile";
@@ -1091,17 +1091,17 @@ class gt extends ce {
     return e.isNewProfile;
   }
 }
-I.decorate(I.inject(G.ApiClient), gt, 0);
-I.decorate(I.injectable(), gt);
-class yt extends ce {
+U.decorate(U.inject(X.ApiClient), Ct, 0);
+U.decorate(U.injectable(), Ct);
+class Pt extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new Oe(e);
+    return new Ge(e);
   }
   getEndpoint() {
     return "/api/v1/apiToken";
@@ -1113,12 +1113,12 @@ class yt extends ce {
     return e.isNovoToken;
   }
   async create(e, t, s, o) {
-    const c = await this.client.post(
+    const a = await this.client.post(
       `${this.getEndpoint()}/create?email=${e}&expirationDate=${t}&name=${s}&description=${o}`,
       void 0,
       this.configureHeaders()
     );
-    return this.transform(c);
+    return this.transform(a);
   }
   async revoke(e) {
     await this.client.post(
@@ -1128,17 +1128,17 @@ class yt extends ce {
     );
   }
 }
-I.decorate(I.inject(G.ApiClient), yt, 0);
-I.decorate(I.injectable(), yt);
-class wt extends ce {
+U.decorate(U.inject(X.ApiClient), Pt, 0);
+U.decorate(U.injectable(), Pt);
+class Tt extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new Le(e);
+    return new Je(e);
   }
   getEndpoint() {
     return "/api/v1/accessToken";
@@ -1157,17 +1157,17 @@ class wt extends ce {
     );
   }
 }
-I.decorate(I.inject(G.ApiClient), wt, 0);
-I.decorate(I.injectable(), wt);
-class vt extends ce {
+U.decorate(U.inject(X.ApiClient), Tt, 0);
+U.decorate(U.injectable(), Tt);
+class Ut extends me {
   constructor(e) {
     super(e);
   }
   configureHeaders() {
-    return V.getInstance().getHeaders();
+    return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new ht(e);
+    return new xt(e);
   }
   getEndpoint() {
     return "/api/v1/resource";
@@ -1191,7 +1191,7 @@ class vt extends ce {
       !1,
       {
         params: {
-          type: Ve(ae, t)
+          type: Ye(fe, t)
         }
       }
     );
@@ -1202,7 +1202,7 @@ class vt extends ce {
       {
         securityId: e,
         actionId: t,
-        type: Ve(ae, s)
+        type: Ye(fe, s)
       },
       this.configureHeaders()
     );
@@ -1221,537 +1221,715 @@ class vt extends ce {
     );
   }
 }
-I.decorate(I.inject(G.ApiClient), vt, 0);
-I.decorate(I.injectable(), vt);
-function Dr({
+U.decorate(U.inject(X.ApiClient), Ut, 0);
+U.decorate(U.injectable(), Ut);
+function Vr({
   onLogin: r,
   error: e,
   onClickForgotPassword: t,
   loginLabel: s = "Email",
   loginPlaceholder: o,
-  afterInputs: c,
-  showMockUsersSelector: l = !1,
+  afterInputs: a,
+  showMockUsersSelector: c = !1,
   mockUsers: i = [],
-  mockUsersGroupMap: u,
-  options: m = {},
-  onChangeUsername: b,
-  disabledLogin: h = !1,
-  isCheckingUsername: C = !1,
-  showSignIn: E = !0
+  mockUsersGroupMap: l,
+  options: g = {},
+  onChangeUsername: E,
+  disabledLogin: d = !1,
+  isCheckingUsername: _ = !1,
+  showSignIn: v = !0,
+  mfaRequired: f = !1,
+  onVerifyMfa: S,
+  mfaError: D,
+  onCancelMfa: B,
+  isVerifyingMfa: O = !1
 }) {
-  const y = Qe(), {
-    username: x,
-    password: U,
-    rememberMe: _,
-    clearRememberMe: O
-  } = Ct(), [D, N] = f(x), [k, A] = f(U), [P, W] = f(_), [L, B] = f(!1), [H, Y] = f(null);
-  z(() => {
-    B(!!e);
-  }, [e]), z(() => {
-    x !== D && (N(x), b?.(x)), U !== k && A(U), _ !== P && W(_);
-  }, [x, U, _]);
-  const $ = () => {
-    B(!1);
-  }, X = () => {
-    D && k && r(D, k, P).finally(() => B(!0));
-  }, p = () => {
-    if (!u)
-      return i.map((g) => ({
-        value: g.email,
-        label: g.email
+  const F = lt(), {
+    username: N,
+    password: w,
+    rememberMe: m,
+    clearRememberMe: R
+  } = zt(), [V, C] = h(N), [L, q] = h(w), [ee, Y] = h(m), [ie, p] = h(!1), [y, te] = h(null), [T, ue] = h("");
+  K(() => {
+    p(!!e);
+  }, [e]), K(() => {
+    N !== V && (C(N), E?.(N)), w !== L && q(w), m !== ee && Y(m);
+  }, [N, w, m]);
+  const se = () => {
+    p(!1);
+  }, we = () => {
+    V && L && r(V, L, ee).finally(() => p(!0));
+  }, u = () => {
+    const A = T.trim();
+    A && S && S(A);
+  }, b = () => {
+    if (!l)
+      return i.map((M) => ({
+        value: M.email,
+        label: M.email
       }));
-    const a = i.reduce((g, T) => {
-      const j = u[T.type];
-      return j && (g[j] || (g[j] = []), g[j].push({
-        value: T.email,
-        label: T.email
-      })), g;
+    const A = i.reduce((M, ve) => {
+      const ke = l[ve.type];
+      return ke && (M[ke] || (M[ke] = []), M[ke].push({
+        value: ve.email,
+        label: ve.email
+      })), M;
     }, {});
-    return Object.entries(a).map(([g, T]) => ({
-      group: g,
-      items: T
+    return Object.entries(A).map(([M, ve]) => ({
+      group: M,
+      items: ve
     }));
-  }, n = () => {
-    if (H) {
-      const a = i.find((g) => g.email === H);
-      a && (N(a.email), A(a.password), $());
+  }, I = () => {
+    if (y) {
+      const A = i.find((M) => M.email === y);
+      A && (C(A.email), q(A.password), se());
     }
-  }, w = {
+  }, $ = {
     withBorder: !0,
     shadow: "md",
     p: 30,
     mt: 30,
     radius: "md",
     w: 400,
-    ...m.cardProps
+    ...g.cardProps
   };
-  return /* @__PURE__ */ R(
-    Ye,
+  return /* @__PURE__ */ P(
+    Ve,
     {
-      ...w,
+      ...$,
       pos: "relative",
-      ref: y,
+      ref: F,
       children: [
-        E && /* @__PURE__ */ R(te, { children: [
-          /* @__PURE__ */ d(
-            se,
+        v && /* @__PURE__ */ P(ne, { children: [
+          /* @__PURE__ */ n(
+            j,
             {
               c: "light-dark(var(--mantine-color-black), var(--mantine-color-white))",
               fw: 800,
               fz: { base: "20px", md: "35px" },
               style: { textAlign: "center", letterSpacing: "-1px" },
               mt: "xs",
-              children: S().t("archbase:signIn")
+              children: x().t("archbase:signIn")
             }
           ),
-          /* @__PURE__ */ d(ye, { m: "md" })
+          /* @__PURE__ */ n(Te, { m: "md" })
         ] }),
-        m?.customContentBefore,
-        l && /* @__PURE__ */ R(te, { children: [
-          /* @__PURE__ */ R(we, { gap: "sm", mb: "md", children: [
-            /* @__PURE__ */ d(
-              Nt,
-              {
-                placeholder: "Selecione um usuário mock",
-                data: p(),
-                value: H,
-                onChange: (a) => Y(a ?? ""),
-                searchable: !0,
-                clearable: !0,
-                style: { flexGrow: 1 }
-              }
-            ),
-            /* @__PURE__ */ d(Bt, { label: "Aplicar", children: /* @__PURE__ */ d(
-              ie,
-              {
-                variant: "light",
-                size: "sm",
-                onClick: n,
-                disabled: !H,
-                "aria-label": "Aplicar usuário mock selecionado",
-                children: /* @__PURE__ */ d(Ft, { size: 16 })
-              }
+        g?.customContentBefore,
+        f && /* @__PURE__ */ P(be, { gap: "md", children: [
+          /* @__PURE__ */ P("div", { children: [
+            /* @__PURE__ */ n(j, { fw: 700, fz: "lg", children: x().t("archbase:mfa.title", "Verificação em duas etapas") }),
+            /* @__PURE__ */ n(j, { c: "dimmed", fz: "sm", children: x().t(
+              "archbase:mfa.subtitle",
+              "Digite o código do seu aplicativo autenticador (ou um código de recuperação)."
             ) })
           ] }),
-          /* @__PURE__ */ d(ye, { mb: "md" })
-        ] }),
-        /* @__PURE__ */ d(
-          Ce,
-          {
-            label: s,
-            placeholder: o ?? S().t("archbase:usuario@email.com"),
-            rightSection: C ? /* @__PURE__ */ d(Xe, { size: "xs" }) : null,
-            value: D || "",
-            required: !0,
-            onChange: (a) => {
-              N(a.currentTarget.value), b?.(a.currentTarget.value), $();
-            }
-          }
-        ),
-        /* @__PURE__ */ d(
-          Ue,
-          {
-            label: S().t("archbase:Password"),
-            placeholder: S().t("archbase:Sua senha"),
-            onChange: (a) => {
-              A(a.currentTarget.value), $();
-            },
-            value: k || "",
-            required: !0,
-            mt: "md"
-          }
-        ),
-        /* @__PURE__ */ R(we, { justify: "space-between", mt: "md", children: [
-          /* @__PURE__ */ d(
-            Mt,
+          /* @__PURE__ */ n(
+            Ae,
             {
-              label: S().t("archbase:Lembre-me"),
-              checked: P,
-              onChange: (a) => {
-                const g = a.currentTarget.checked;
-                W(g), g || O();
+              label: x().t("archbase:mfa.code", "Código de verificação"),
+              placeholder: "000000",
+              value: T,
+              autoFocus: !0,
+              onChange: (A) => ue(A.currentTarget.value),
+              onKeyDown: (A) => {
+                A.key === "Enter" && u();
               }
             }
           ),
-          t && /* @__PURE__ */ d(
-            Ot,
+          D && /* @__PURE__ */ n(j, { c: "red", fz: "sm", children: D }),
+          /* @__PURE__ */ n(
+            W,
+            {
+              fullWidth: !0,
+              disabled: !T.trim() || O,
+              loading: O,
+              onClick: u,
+              children: x().t("archbase:mfa.verify", "Verificar")
+            }
+          ),
+          B && /* @__PURE__ */ n(
+            Qe,
             {
               component: "button",
               c: "var(--mantine-text-color)",
               fz: 14,
-              lh: "20px",
+              ta: "center",
               styles: { root: { cursor: "pointer" } },
-              onClick: t,
-              children: S().t("archbase:Esqueci minha senha")
+              onClick: B,
+              children: x().t("archbase:mfa.back", "Voltar ao login")
             }
           )
         ] }),
-        m?.afterInputs || c,
-        /* @__PURE__ */ d(
-          ie,
-          {
-            disabled: !k || !D || h,
-            fullWidth: !0,
-            mt: "xl",
-            onClick: X,
-            children: S().t("archbase:signIn")
-          }
-        ),
-        m?.customContentAfter,
-        L && e && /* @__PURE__ */ d(se, { c: "red", mt: "sm", children: e })
+        !f && /* @__PURE__ */ P(ne, { children: [
+          c && /* @__PURE__ */ P(ne, { children: [
+            /* @__PURE__ */ P(le, { gap: "sm", mb: "md", children: [
+              /* @__PURE__ */ n(
+                Ht,
+                {
+                  placeholder: "Selecione um usuário mock",
+                  data: b(),
+                  value: y,
+                  onChange: (A) => te(A ?? ""),
+                  searchable: !0,
+                  clearable: !0,
+                  style: { flexGrow: 1 }
+                }
+              ),
+              /* @__PURE__ */ n(Gt, { label: "Aplicar", children: /* @__PURE__ */ n(
+                W,
+                {
+                  variant: "light",
+                  size: "sm",
+                  onClick: I,
+                  disabled: !y,
+                  "aria-label": "Aplicar usuário mock selecionado",
+                  children: /* @__PURE__ */ n(Xt, { size: 16 })
+                }
+              ) })
+            ] }),
+            /* @__PURE__ */ n(Te, { mb: "md" })
+          ] }),
+          /* @__PURE__ */ n(
+            Ae,
+            {
+              label: s,
+              placeholder: o ?? x().t("archbase:usuario@email.com"),
+              rightSection: _ ? /* @__PURE__ */ n(ct, { size: "xs" }) : null,
+              value: V || "",
+              required: !0,
+              onChange: (A) => {
+                C(A.currentTarget.value), E?.(A.currentTarget.value), se();
+              }
+            }
+          ),
+          /* @__PURE__ */ n(
+            Le,
+            {
+              label: x().t("archbase:Password"),
+              placeholder: x().t("archbase:Sua senha"),
+              onChange: (A) => {
+                q(A.currentTarget.value), se();
+              },
+              value: L || "",
+              required: !0,
+              mt: "md"
+            }
+          ),
+          /* @__PURE__ */ P(le, { justify: "space-between", mt: "md", children: [
+            /* @__PURE__ */ n(
+              Jt,
+              {
+                label: x().t("archbase:Lembre-me"),
+                checked: ee,
+                onChange: (A) => {
+                  const M = A.currentTarget.checked;
+                  Y(M), M || R();
+                }
+              }
+            ),
+            t && /* @__PURE__ */ n(
+              Qe,
+              {
+                component: "button",
+                c: "var(--mantine-text-color)",
+                fz: 14,
+                lh: "20px",
+                styles: { root: { cursor: "pointer" } },
+                onClick: t,
+                children: x().t("archbase:Esqueci minha senha")
+              }
+            )
+          ] }),
+          g?.afterInputs || a,
+          /* @__PURE__ */ n(
+            W,
+            {
+              disabled: !L || !V || d,
+              fullWidth: !0,
+              mt: "xl",
+              onClick: we,
+              children: x().t("archbase:signIn")
+            }
+          )
+        ] }),
+        g?.customContentAfter,
+        ie && e && /* @__PURE__ */ n(j, { c: "red", mt: "sm", children: e })
       ]
     }
   );
 }
-const cr = {
+const z = (r, e) => x().t(r, e);
+function Wr({
+  enabled: r,
+  onSetup: e,
+  onEnable: t,
+  onDisable: s,
+  onStatusChange: o
+}) {
+  const [a, c] = h("idle"), [i, l] = h(null), [g, E] = h(""), [d, _] = h([]), [v, f] = h(!1), [S, D] = h(null), B = async () => {
+    f(!0), D(null);
+    try {
+      const w = await e();
+      l(w), E(""), c("setup");
+    } catch (w) {
+      D(w?.message || String(w));
+    } finally {
+      f(!1);
+    }
+  }, O = async () => {
+    const w = g.trim();
+    if (w) {
+      f(!0), D(null);
+      try {
+        const m = await t(w);
+        _(m), c("recovery"), o?.(!0);
+      } catch (m) {
+        D(m?.message || String(m));
+      } finally {
+        f(!1);
+      }
+    }
+  }, F = async () => {
+    f(!0), D(null);
+    try {
+      await s(), l(null), _([]), c("idle"), o?.(!1);
+    } catch (w) {
+      D(w?.message || String(w));
+    } finally {
+      f(!1);
+    }
+  }, N = () => {
+    _([]), l(null), E(""), c("idle");
+  };
+  return /* @__PURE__ */ n(Ve, { withBorder: !0, radius: "md", p: "lg", children: /* @__PURE__ */ P(be, { gap: "md", children: [
+    /* @__PURE__ */ P("div", { children: [
+      /* @__PURE__ */ n(j, { fw: 700, fz: "lg", children: z("archbase:mfa.setup.title", "Autenticação em duas etapas (MFA)") }),
+      /* @__PURE__ */ n(j, { c: "dimmed", fz: "sm", children: z(
+        "archbase:mfa.setup.subtitle",
+        "Proteja o acesso exigindo um código do seu aplicativo autenticador no login."
+      ) })
+    ] }),
+    S && /* @__PURE__ */ n(Ze, { color: "red", children: S }),
+    r && a === "idle" && /* @__PURE__ */ P(le, { justify: "space-between", children: [
+      /* @__PURE__ */ n(j, { c: "teal", fw: 600, children: z("archbase:mfa.setup.active", "MFA ativo") }),
+      /* @__PURE__ */ n(W, { color: "red", variant: "light", loading: v, onClick: F, children: z("archbase:mfa.setup.disable", "Desativar") })
+    ] }),
+    !r && a === "idle" && /* @__PURE__ */ n(W, { loading: v, onClick: B, children: z("archbase:mfa.setup.enable", "Ativar MFA") }),
+    a === "setup" && i && /* @__PURE__ */ P(be, { gap: "sm", align: "center", children: [
+      /* @__PURE__ */ n(j, { fz: "sm", ta: "center", children: z(
+        "archbase:mfa.setup.scan",
+        "Escaneie o QR Code no seu app autenticador (Google Authenticator, Authy…):"
+      ) }),
+      /* @__PURE__ */ n(Qt, { value: i.provisioningUri, size: 180, level: "M" }),
+      /* @__PURE__ */ n(j, { fz: "xs", c: "dimmed", ta: "center", children: z("archbase:mfa.setup.manual", "Ou informe o código manualmente:") }),
+      /* @__PURE__ */ P(le, { gap: "xs", children: [
+        /* @__PURE__ */ n(et, { children: i.secret }),
+        /* @__PURE__ */ n(tt, { value: i.secret, children: ({ copied: w, copy: m }) => /* @__PURE__ */ n(W, { size: "xs", variant: "subtle", onClick: m, children: w ? z("archbase:mfa.setup.copied", "Copiado") : z("archbase:mfa.setup.copy", "Copiar") }) })
+      ] }),
+      /* @__PURE__ */ n(
+        Ae,
+        {
+          w: "100%",
+          label: z("archbase:mfa.setup.confirmCode", "Digite o código gerado para confirmar"),
+          placeholder: "000000",
+          value: g,
+          onChange: (w) => E(w.currentTarget.value),
+          onKeyDown: (w) => {
+            w.key === "Enter" && O();
+          }
+        }
+      ),
+      /* @__PURE__ */ P(le, { w: "100%", justify: "flex-end", children: [
+        /* @__PURE__ */ n(W, { variant: "default", onClick: N, disabled: v, children: z("archbase:mfa.setup.cancel", "Cancelar") }),
+        /* @__PURE__ */ n(W, { onClick: O, loading: v, disabled: !g.trim(), children: z("archbase:mfa.setup.confirm", "Confirmar e ativar") })
+      ] })
+    ] }),
+    a === "recovery" && /* @__PURE__ */ P(be, { gap: "sm", children: [
+      /* @__PURE__ */ n(Ze, { color: "yellow", children: z(
+        "archbase:mfa.setup.recoveryWarning",
+        "Guarde estes códigos de recuperação em local seguro. Cada um funciona uma única vez e permite entrar se você perder o acesso ao app autenticador. Eles não serão exibidos novamente."
+      ) }),
+      /* @__PURE__ */ n(Kt, { cols: 2, spacing: "xs", children: d.map((w) => /* @__PURE__ */ n(et, { fz: "sm", children: w }, w)) }),
+      /* @__PURE__ */ P(le, { justify: "space-between", children: [
+        /* @__PURE__ */ n(tt, { value: d.join(`
+`), children: ({ copied: w, copy: m }) => /* @__PURE__ */ n(W, { variant: "subtle", onClick: m, children: w ? z("archbase:mfa.setup.copied", "Copiado") : z("archbase:mfa.setup.copyAll", "Copiar todos") }) }),
+        /* @__PURE__ */ n(W, { onClick: N, children: z("archbase:mfa.setup.done", "Guardei os códigos") })
+      ] })
+    ] })
+  ] }) });
+}
+const vr = {
   position: "relative",
   width: "90%",
   maxWidth: 400,
   padding: 30,
   marginTop: 30
 };
-function Rr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClickBackToLogin: s, validatePassword: o, validateToken: c, initialEmail: l = "", description: i, style: u }) {
-  const m = Qe(), b = Ut(), { colorScheme: h } = Lt(), [C, E] = f(r ?? ""), [y, x] = f(l), [U, _] = f(""), [O, D] = f(""), [N, k] = f(""), [A, P] = f(!1), [W, L] = f(""), [B, H] = f(""), [Y, $] = f(""), [X, p] = f("");
-  async function n(a) {
-    a && (_t(a) ? await e(a).then(() => {
-      We.showSuccess(`${S().t("archbase:Um e-mail com instruções para redefinir sua senha foi enviado. Verifique sua caixa de entrada.")}`), P(!0);
+function Hr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClickBackToLogin: s, validatePassword: o, validateToken: a, initialEmail: c = "", description: i, style: l }) {
+  const g = lt(), E = jt(), { colorScheme: d } = qt(), [_, v] = h(r ?? ""), [f, S] = h(c), [D, B] = h(""), [O, F] = h(""), [N, w] = h(""), [m, R] = h(!1), [V, C] = h(""), [L, q] = h(""), [ee, Y] = h(""), [ie, p] = h("");
+  async function y(T) {
+    T && (Ft(T) ? await e(T).then(() => {
+      rt.showSuccess(`${x().t("archbase:Um e-mail com instruções para redefinir sua senha foi enviado. Verifique sua caixa de entrada.")}`), R(!0);
     }).catch(() => {
-    }) : L(`${S().t("archbase:Email inválido")}`));
+    }) : C(`${x().t("archbase:Email inválido")}`));
   }
-  async function w(a, g, T, j) {
-    if (a && g && T) {
-      let xe = "", ke = "", Fe = "";
-      c && (xe = c(), $(xe)), o && (ke = o(), $(ke)), T !== j && (Fe = `${S().t("archbase:A nova senha e a confirmação devem ser iguais.")}`, p(Fe)), !ke && !xe && await t(a, g, T).then(() => {
-        We.showSuccess(`${S().t("archbase:Senha redefinida com sucesso.")}`), s(), P(!1);
+  async function te(T, ue, se, we) {
+    if (T && ue && se) {
+      let u = "", b = "", I = "";
+      a && (u = a(), Y(u)), o && (b = o(), Y(b)), se !== we && (I = `${x().t("archbase:A nova senha e a confirmação devem ser iguais.")}`, p(I)), !b && !u && await t(T, ue, se).then(() => {
+        rt.showSuccess(`${x().t("archbase:Senha redefinida com sucesso.")}`), s(), R(!1);
       }).catch(() => {
-        E(r || `${S().t("archbase:Erro ao redefinir senha.")}`);
+        v(r || `${x().t("archbase:Erro ao redefinir senha.")}`);
       });
     }
   }
-  return z(() => {
-    r && E(r);
-  }, [r]), z(() => {
-    E("");
-  }, [y, U, O, N]), /* @__PURE__ */ R(
-    Ye,
+  return K(() => {
+    r && v(r);
+  }, [r]), K(() => {
+    v("");
+  }, [f, D, O, N]), /* @__PURE__ */ P(
+    Ve,
     {
       withBorder: !0,
       shadow: "md",
       radius: "md",
-      ref: m,
+      ref: g,
       style: {
-        ...cr,
-        ...u
+        ...vr,
+        ...l
       },
       children: [
-        A ? /* @__PURE__ */ R(te, { children: [
-          /* @__PURE__ */ d(
-            se,
+        m ? /* @__PURE__ */ P(ne, { children: [
+          /* @__PURE__ */ n(
+            j,
             {
               c: "light-dark(var(--mantine-color-black), var(--mantine-color-white))",
               fw: 800,
               fz: { base: "20px", md: "35px" },
               style: { textAlign: "center", letterSpacing: "-1px" },
               mt: "xs",
-              children: S().t("archbase:Redefinir senha")
+              children: x().t("archbase:Redefinir senha")
             }
           ),
-          /* @__PURE__ */ d(ye, { m: "xs" }),
-          /* @__PURE__ */ d(
-            Ce,
+          /* @__PURE__ */ n(Te, { m: "xs" }),
+          /* @__PURE__ */ n(
+            Ae,
             {
-              label: S().t("archbase:Código de segurança"),
-              placeholder: `${S().t("archbase:Código enviado no seu e-mail")}`,
-              value: U || "",
+              label: x().t("archbase:Código de segurança"),
+              placeholder: `${x().t("archbase:Código enviado no seu e-mail")}`,
+              value: D || "",
               required: !0,
-              onChange: (a) => {
-                _(a.currentTarget.value), H("");
+              onChange: (T) => {
+                B(T.currentTarget.value), q("");
               },
-              error: B
+              error: L
             }
           ),
-          /* @__PURE__ */ d(
-            Ue,
+          /* @__PURE__ */ n(
+            Le,
             {
-              label: S().t("archbase:Nova senha"),
-              placeholder: S().t("archbase:Nova senha"),
-              onChange: (a) => {
-                D(a.currentTarget.value), $(""), p("");
+              label: x().t("archbase:Nova senha"),
+              placeholder: x().t("archbase:Nova senha"),
+              onChange: (T) => {
+                F(T.currentTarget.value), Y(""), p("");
               },
               value: O,
               required: !0,
-              error: Y
+              error: ee
             }
           ),
-          /* @__PURE__ */ d(
-            Ue,
+          /* @__PURE__ */ n(
+            Le,
             {
-              label: S().t("archbase:Confirmar senha"),
-              placeholder: S().t("archbase:Confirmar senha"),
-              onChange: (a) => {
-                k(a.currentTarget.value), p("");
+              label: x().t("archbase:Confirmar senha"),
+              placeholder: x().t("archbase:Confirmar senha"),
+              onChange: (T) => {
+                w(T.currentTarget.value), p("");
               },
               value: N || "",
               required: !0,
-              error: X
+              error: ie
             }
           ),
-          /* @__PURE__ */ d(
-            ie,
+          /* @__PURE__ */ n(
+            W,
             {
-              disabled: !y || !U || !O || !N,
+              disabled: !f || !D || !O || !N,
               mt: "md",
               fullWidth: !0,
-              onClick: () => w(y, U, O, N),
-              children: `${S().t("archbase:Redefinir senha")}`
+              onClick: () => te(f, D, O, N),
+              children: `${x().t("archbase:Redefinir senha")}`
             }
           ),
-          /* @__PURE__ */ d(
-            ie,
+          /* @__PURE__ */ n(
+            W,
             {
               mt: "6px",
               fullWidth: !0,
-              color: h === "dark" ? b.colors.dark[4] : b.colors.gray[7],
+              color: d === "dark" ? E.colors.dark[4] : E.colors.gray[7],
               onClick: () => {
-                W || P(!1);
+                V || R(!1);
               },
-              children: `${S().t("archbase:Voltar")}`
+              children: `${x().t("archbase:Voltar")}`
             }
           )
-        ] }) : /* @__PURE__ */ R(te, { children: [
-          /* @__PURE__ */ d(
-            se,
+        ] }) : /* @__PURE__ */ P(ne, { children: [
+          /* @__PURE__ */ n(
+            j,
             {
               c: "light-dark(var(--mantine-color-black), var(--mantine-color-white))",
               fw: 800,
               fz: { base: "20px", md: "35px" },
               style: { textAlign: "center", letterSpacing: "-1px" },
               mt: "xs",
-              children: S().t("archbase:Redefinir senha")
+              children: x().t("archbase:Redefinir senha")
             }
           ),
-          /* @__PURE__ */ d(se, { c: "dimmed", fz: 14, style: { textAlign: "justify" }, children: i }),
-          /* @__PURE__ */ d(ye, { m: "md" }),
-          /* @__PURE__ */ d(
-            Ce,
+          /* @__PURE__ */ n(j, { c: "dimmed", fz: 14, style: { textAlign: "justify" }, children: i }),
+          /* @__PURE__ */ n(Te, { m: "md" }),
+          /* @__PURE__ */ n(
+            Ae,
             {
               label: "Email",
-              placeholder: `${S().t("archbase:usuario@email.com")}`,
-              value: y || "",
+              placeholder: `${x().t("archbase:usuario@email.com")}`,
+              value: f || "",
               required: !0,
-              onChange: (a) => {
-                x(a.currentTarget.value), L("");
+              onChange: (T) => {
+                S(T.currentTarget.value), C("");
               },
-              error: W
+              error: V
             }
           ),
-          /* @__PURE__ */ d(
-            ie,
+          /* @__PURE__ */ n(
+            W,
             {
-              disabled: !y,
+              disabled: !f,
               mt: "md",
               fullWidth: !0,
-              onClick: () => n(y),
-              children: `${S().t("archbase:Enviar")}`
+              onClick: () => y(f),
+              children: `${x().t("archbase:Enviar")}`
             }
           ),
-          /* @__PURE__ */ d(
-            ie,
+          /* @__PURE__ */ n(
+            W,
             {
               mt: "6px",
               fullWidth: !0,
-              color: h === "dark" ? b.colors.dark[4] : b.colors.gray[7],
+              color: d === "dark" ? E.colors.dark[4] : E.colors.gray[7],
               onClick: () => s && s(),
-              children: `${S().t("archbase:Voltar")}`
+              children: `${x().t("archbase:Voltar")}`
             }
           )
         ] }),
-        C ? /* @__PURE__ */ d(se, { c: "red", style: { textAlign: "justify" }, children: C }) : null
+        _ ? /* @__PURE__ */ n(j, { c: "red", style: { textAlign: "justify" }, children: _ }) : null
       ]
     }
   );
 }
-const lr = () => Dt().user, At = "archbaseSecurityManagerStore", Nr = ({ resourceName: r, resourceDescription: e, enableSecurity: t = !0 }) => {
-  const s = qe(At), o = lr(), c = o?.isAdmin ?? !1, l = o?.id, i = Ke(l), u = Je(() => {
+const br = () => Vt().user, Dt = "archbaseSecurityManagerStore", Gr = ({ resourceName: r, resourceDescription: e, enableSecurity: t = !0 }) => {
+  const s = at(Dt), o = br(), a = o?.isAdmin ?? !1, c = o?.id, i = it(c), l = nt(() => {
     if (!t)
       return null;
-    const m = l ? `${r}_${l}` : r;
-    if (s && s.existsValue(m)) {
-      const h = s.getValue(m);
-      if (h && h.isAdmin === c)
-        return h;
+    const g = c ? `${r}_${c}` : r;
+    if (s && s.existsValue(g)) {
+      const d = s.getValue(g);
+      if (d && d.isAdmin === a)
+        return d;
     }
-    const b = new nt(r, e, c);
-    return s && l && s.setValue(m, b), b;
-  }, [t, r, e, c, l]);
-  return z(() => {
-    i.current = l;
-  }, [l]), { securityManager: u };
-}, Br = ({
+    const E = new gt(r, e, a);
+    return s && c && s.setValue(g, E), E;
+  }, [t, r, e, a, c]);
+  return K(() => {
+    i.current = c;
+  }, [c]), { securityManager: l };
+}, Jr = ({
   checkIntervalTokenHasExpired: r = 3e4,
   // Verificar a 30 segundos
   expirationThresholdOfToken: e = 300
   // Antecipar em 5 minutos
 }) => {
-  const t = ve(
-    (n) => n.get(G.TokenManager)
-  ), s = ve(
-    (n) => n.get(G.Authenticator)
-  ), [o, c] = f(null), [l, i] = f(!1), [u, m] = f(!0), [b, h] = f(!1), [C, E] = f(!1), [y, x] = f(""), [U, _] = f(""), [O, D] = f(null), N = qe(At), k = {
+  const t = Ue(
+    (u) => u.get(X.TokenManager)
+  ), s = Ue(
+    (u) => u.get(X.Authenticator)
+  ), [o, a] = h(null), [c, i] = h(!1), [l, g] = h(!0), [E, d] = h(!1), [_, v] = h(!1), [f, S] = h(""), [D, B] = h(""), [O, F] = h(null), [N, w] = h(!1), [m, R] = h(null), V = at(Dt), C = {
     hasContextualLogin: typeof s.loginWithContext == "function",
     hasFlexibleLogin: typeof s.loginFlexible == "function",
     hasSocialLogin: typeof s.loginSocial == "function",
     hasRegistration: typeof s.register == "function",
     hasContextSupport: typeof t.saveContext == "function"
   };
-  z(() => {
-    const n = t.getUsername();
-    if (n && n != "" && _(n), k.hasContextSupport && t.getContext) {
-      const a = t.getContext();
-      if (a)
+  K(() => {
+    const u = t.getUsername();
+    if (u && u != "" && B(u), C.hasContextSupport && t.getContext) {
+      const I = t.getContext();
+      if (I)
         try {
-          const g = typeof a == "string" ? JSON.parse(a) : a;
-          D(g);
-        } catch (g) {
-          console.warn("Erro ao carregar contexto salvo:", g);
+          const $ = typeof I == "string" ? JSON.parse(I) : I;
+          F($);
+        } catch ($) {
+          console.warn("Erro ao carregar contexto salvo:", $);
         }
     }
-    const w = t.getToken();
-    w && (h(!0), x(""), E(!1), c(w)), m(!1);
+    const b = t.getToken();
+    b && (d(!0), S(""), v(!1), a(b)), g(!1);
   }, []);
-  const A = () => {
-    E(!1), x("");
-  }, P = (n) => {
-    i(!1), h(!1), t.clearToken(), n && t.clearUsernameAndPassword(), k.hasContextSupport && t.clearContext && t.clearContext(), _(""), D(null), x(""), E(!1), N.clearAllValues();
-  }, W = async (n, w, a) => {
+  const L = () => {
+    v(!1), S("");
+  }, q = (u) => {
+    i(!1), d(!1), t.clearToken(), u && t.clearUsernameAndPassword(), C.hasContextSupport && t.clearContext && t.clearContext(), B(""), F(null), S(""), v(!1), V.clearAllValues();
+  }, ee = async (u, b, I) => {
     try {
-      i(!0), h(!1);
-      const g = await s.login(n, w);
-      t.saveToken(g), a && t.saveUsernameAndPassword(n, w), t.saveUsername(n), _(n), c(g), i(!1), h(!0);
-    } catch (g) {
-      i(!1), h(!1), x(ee(g)), E(!0);
+      i(!0), d(!1);
+      const $ = await s.login(u, b);
+      t.saveToken($), I && t.saveUsernameAndPassword(u, b), t.saveUsername(u), B(u), a($), i(!1), d(!0);
+    } catch ($) {
+      i(!1), d(!1), S(oe($)), v(!0);
     }
-  }, L = async (n, w = !1) => {
-    if (!k.hasContextualLogin || !s.loginWithContext)
+  }, Y = async (u, b = !1) => {
+    if (!C.hasContextualLogin || !s.loginWithContext)
       throw new Error("Login contextual não suportado por esta implementação do ArchbaseAuthenticator");
     try {
-      i(!0), h(!1);
-      const { context: a, user: g, ...T } = await s.loginWithContext(n), j = {
+      i(!0), d(!1);
+      const { context: I, user: $, ...A } = await s.loginWithContext(u);
+      if (A.mfa_required) {
+        R(A.challenge_token ?? null), w(!0), B(u.email), i(!1);
+        return;
+      }
+      const M = {
         scope: "",
-        ext_expires_in: T.expires_in,
-        ...T
+        ext_expires_in: A.expires_in,
+        ...A
       };
-      t.saveToken(j), w ? t.saveUsernameAndPassword(n.email, n.password) : t.clearUsernameAndPassword(), t.saveUsername(n.email), k.hasContextSupport && t.saveContext && a && (t.saveContext(JSON.stringify(a)), D(a)), _(n.email), c(j), i(!1), h(!0);
-    } catch (a) {
-      throw i(!1), h(!1), x(ee(a)), E(!0), a;
+      t.saveToken(M), b ? t.saveUsernameAndPassword(u.email, u.password) : t.clearUsernameAndPassword(), t.saveUsername(u.email), C.hasContextSupport && t.saveContext && I && (t.saveContext(JSON.stringify(I)), F(I)), B(u.email), a(M), i(!1), d(!0);
+    } catch (I) {
+      throw i(!1), d(!1), S(oe(I)), v(!0), I;
+    }
+  }, ie = async (u) => {
+    if (!s.verifyMfa)
+      throw new Error("verifyMfa não suportado por esta implementação do ArchbaseAuthenticator");
+    if (!m)
+      throw new Error("Nenhum desafio de MFA pendente");
+    try {
+      i(!0), S(""), v(!1);
+      const b = await s.verifyMfa(m, u);
+      t.saveToken(b), t.saveUsername(D), a(b), w(!1), R(null), i(!1), d(!0);
+    } catch (b) {
+      throw i(!1), S(oe(b)), v(!0), b;
     }
-  }, B = async (n, w = !1) => {
-    if (!k.hasFlexibleLogin || !s.loginFlexible)
+  }, p = () => {
+    w(!1), R(null), S(""), v(!1);
+  }, y = async (u, b = !1) => {
+    if (!C.hasFlexibleLogin || !s.loginFlexible)
       throw new Error("Login flexível não suportado por esta implementação do ArchbaseAuthenticator");
     try {
-      i(!0), h(!1);
-      const { context: a, user: g, ...T } = await s.loginFlexible(n), j = {
+      i(!0), d(!1);
+      const { context: I, user: $, ...A } = await s.loginFlexible(u), M = {
         scope: "",
-        ext_expires_in: T.expires_in,
-        ...T
+        ext_expires_in: A.expires_in,
+        ...A
       };
-      t.saveToken(j), w && t.saveUsernameAndPassword(n.identifier, n.password), t.saveUsername(g.email || n.identifier), k.hasContextSupport && t.saveContext && a && (t.saveContext(JSON.stringify(a)), D(a)), _(g.email || n.identifier), c(j), i(!1), h(!0);
-    } catch (a) {
-      throw i(!1), h(!1), x(ee(a)), E(!0), a;
+      t.saveToken(M), b && t.saveUsernameAndPassword(u.identifier, u.password), t.saveUsername($.email || u.identifier), C.hasContextSupport && t.saveContext && I && (t.saveContext(JSON.stringify(I)), F(I)), B($.email || u.identifier), a(M), i(!1), d(!0);
+    } catch (I) {
+      throw i(!1), d(!1), S(oe(I)), v(!0), I;
     }
-  }, H = async (n) => {
-    if (!k.hasSocialLogin || !s.loginSocial)
+  }, te = async (u) => {
+    if (!C.hasSocialLogin || !s.loginSocial)
       throw new Error("Login social não suportado por esta implementação do ArchbaseAuthenticator");
     try {
-      i(!0), h(!1);
-      const { context: w, user: a, ...g } = await s.loginSocial(n), T = {
+      i(!0), d(!1);
+      const { context: b, user: I, ...$ } = await s.loginSocial(u), A = {
         scope: "",
-        ext_expires_in: g.expires_in,
-        ...g
+        ext_expires_in: $.expires_in,
+        ...$
       };
-      t.saveToken(T), t.saveUsername(a.email), k.hasContextSupport && t.saveContext && w && (t.saveContext(JSON.stringify(w)), D(w)), _(a.email), c(T), i(!1), h(!0);
-    } catch (w) {
-      throw i(!1), h(!1), x(ee(w)), E(!0), w;
+      t.saveToken(A), t.saveUsername(I.email), C.hasContextSupport && t.saveContext && b && (t.saveContext(JSON.stringify(b)), F(b)), B(I.email), a(A), i(!1), d(!0);
+    } catch (b) {
+      throw i(!1), d(!1), S(oe(b)), v(!0), b;
     }
-  }, Y = async (n) => {
-    if (!k.hasRegistration || !s.register)
+  }, T = async (u) => {
+    if (!C.hasRegistration || !s.register)
       throw new Error("Registro não suportado por esta implementação do ArchbaseAuthenticator");
     try {
       i(!0);
-      const w = await s.register(n);
-      return i(!1), w;
-    } catch (w) {
-      throw i(!1), x(ee(w)), E(!0), w;
+      const b = await s.register(u);
+      return i(!1), b;
+    } catch (b) {
+      throw i(!1), S(oe(b)), v(!0), b;
     }
-  }, $ = async () => s.getSupportedContexts ? await s.getSupportedContexts() : { supportedContexts: ["DEFAULT"], defaultContext: "DEFAULT" }, X = async (n) => s.validateContext ? await s.validateContext(n) : { context: n, supported: n === "DEFAULT" };
-  z(() => {
-    const n = setInterval(() => {
-      o && o.access_token && t.isTokenExpired(o, e) && p();
+  }, ue = async () => s.getSupportedContexts ? await s.getSupportedContexts() : { supportedContexts: ["DEFAULT"], defaultContext: "DEFAULT" }, se = async (u) => s.validateContext ? await s.validateContext(u) : { context: u, supported: u === "DEFAULT" };
+  K(() => {
+    const u = setInterval(() => {
+      o && o.access_token && t.isTokenExpired(o, e) && we();
     }, r);
     return () => {
-      clearInterval(n);
+      clearInterval(u);
     };
   }, [o]);
-  const p = async () => {
+  const we = async () => {
     if (o)
       try {
-        const n = await s.refreshToken(o?.refresh_token);
-        t.saveToken(n), c(n);
-      } catch (n) {
-        console.error("Erro ao renovar o token:", n), P();
+        const u = await s.refreshToken(o?.refresh_token);
+        t.saveToken(u), a(u);
+      } catch (u) {
+        console.error("Erro ao renovar o token:", u), q();
       }
   };
   return {
     // Métodos básicos (compatibilidade)
-    login: W,
-    logout: P,
-    username: U,
-    isAuthenticated: b,
-    isAuthenticating: l,
-    isInitializing: u,
-    isError: C,
-    error: y,
-    clearError: A,
+    login: ee,
+    logout: q,
+    username: D,
+    isAuthenticated: E,
+    isAuthenticating: c,
+    isInitializing: l,
+    isError: _,
+    error: f,
+    clearError: L,
     accessToken: o ? o.access_token : null,
     // Métodos opcionais para autenticação avançada
-    loginWithContext: k.hasContextualLogin ? L : void 0,
-    loginFlexible: k.hasFlexibleLogin ? B : void 0,
-    loginSocial: k.hasSocialLogin ? H : void 0,
-    register: k.hasRegistration ? Y : void 0,
-    getSupportedContexts: $,
-    validateContext: X,
+    loginWithContext: C.hasContextualLogin ? Y : void 0,
+    loginFlexible: C.hasFlexibleLogin ? y : void 0,
+    loginSocial: C.hasSocialLogin ? te : void 0,
+    register: C.hasRegistration ? T : void 0,
+    getSupportedContexts: ue,
+    validateContext: se,
+    // MFA / segundo fator (2 passos)
+    mfaRequired: N,
+    verifyMfa: typeof s.verifyMfa == "function" ? ie : void 0,
+    cancelMfa: p,
     // Informações de contexto
     context: O,
     // Detecção de capacidades
-    capabilities: k
+    capabilities: C
   };
-}, Mr = () => {
-  const r = ve(
-    (s) => s.get(G.TokenManager)
-  ), [e, t] = f(null);
-  return z(() => {
+}, Kr = () => {
+  const r = Ue(
+    (s) => s.get(X.TokenManager)
+  ), [e, t] = h(null);
+  return K(() => {
     const s = r.getToken();
     s && t(s.access_token);
   }, []), {
     token: e
   };
-}, Or = () => {
-  const r = ve(
-    (u) => u.get(G.Authenticator)
-  ), [e, t] = f(!1), [s, o] = f("");
+}, qr = () => {
+  const r = Ue(
+    (l) => l.get(X.Authenticator)
+  ), [e, t] = h(!1), [s, o] = h("");
   return {
-    sendResetPasswordEmail: async (u) => {
+    sendResetPasswordEmail: async (l) => {
       try {
-        return await r.sendResetPasswordEmail(u);
-      } catch (m) {
-        throw o(ee(m)), t(!0), m;
+        return await r.sendResetPasswordEmail(l);
+      } catch (g) {
+        throw o(oe(g)), t(!0), g;
       }
     },
-    resetPassword: async (u, m, b) => {
+    resetPassword: async (l, g, E) => {
       try {
-        return await r.resetPassword(u, m, b);
-      } catch (h) {
-        throw o(ee(h)), t(!0), h;
+        return await r.resetPassword(l, g, E);
+      } catch (d) {
+        throw o(oe(d)), t(!0), d;
       }
     },
     isError: e,
@@ -1760,169 +1938,169 @@ const lr = () => Dt().user, At = "archbaseSecurityManagerStore", Nr = ({ resourc
       t(!1), o("");
     }
   };
-}, dr = () => /* @__PURE__ */ d($t, { p: "xl", style: { width: "100%", height: "100%" }, children: /* @__PURE__ */ R(jt, { gap: "md", children: [
-  /* @__PURE__ */ R(we, { gap: "sm", children: [
-    /* @__PURE__ */ d(Xe, { size: "sm" }),
-    /* @__PURE__ */ d(se, { size: "sm", c: "dimmed", children: "Carregando permissões..." })
+}, Ar = () => /* @__PURE__ */ n(Yt, { p: "xl", style: { width: "100%", height: "100%" }, children: /* @__PURE__ */ P(be, { gap: "md", children: [
+  /* @__PURE__ */ P(le, { gap: "sm", children: [
+    /* @__PURE__ */ n(ct, { size: "sm" }),
+    /* @__PURE__ */ n(j, { size: "sm", c: "dimmed", children: "Carregando permissões..." })
   ] }),
-  /* @__PURE__ */ d(fe, { height: 40, radius: "sm" }),
-  /* @__PURE__ */ d(fe, { height: 200, radius: "sm" }),
-  /* @__PURE__ */ R(we, { gap: "md", children: [
-    /* @__PURE__ */ d(fe, { height: 36, width: 100, radius: "sm" }),
-    /* @__PURE__ */ d(fe, { height: 36, width: 100, radius: "sm" })
+  /* @__PURE__ */ n(Ie, { height: 40, radius: "sm" }),
+  /* @__PURE__ */ n(Ie, { height: 200, radius: "sm" }),
+  /* @__PURE__ */ P(le, { gap: "md", children: [
+    /* @__PURE__ */ n(Ie, { height: 36, width: 100, radius: "sm" }),
+    /* @__PURE__ */ n(Ie, { height: 36, width: 100, radius: "sm" })
   ] })
-] }) }), $e = Re(null), Lr = ({
+] }) }), Ke = je(null), Yr = ({
   children: r,
   user: e,
   onError: t
 }) => {
-  const [s, o] = f(!1), [c, l] = f(null), [i] = f([]), u = e?.isAdministrator || !1, m = pe((y) => u ? !0 : i.includes(y), [i, u]), b = pe((y) => u ? !0 : y.some((x) => i.includes(x)), [i, u]), h = pe((y) => u ? !0 : y.every((x) => i.includes(x)), [i, u]), C = pe((y) => {
-    l(y), y && t && t(y);
-  }, [t]), E = {
+  const [s, o] = h(!1), [a, c] = h(null), [i] = h([]), l = e?.isAdministrator || !1, g = Se((f) => l ? !0 : i.includes(f), [i, l]), E = Se((f) => l ? !0 : f.some((S) => i.includes(S)), [i, l]), d = Se((f) => l ? !0 : f.every((S) => i.includes(S)), [i, l]), _ = Se((f) => {
+    c(f), f && t && t(f);
+  }, [t]), v = {
     user: e,
     isLoading: s,
-    hasGlobalPermission: m,
-    hasAnyGlobalPermission: b,
-    hasAllGlobalPermissions: h,
-    isAdmin: u,
-    error: c,
-    setError: C
+    hasGlobalPermission: g,
+    hasAnyGlobalPermission: E,
+    hasAllGlobalPermissions: d,
+    isAdmin: l,
+    error: a,
+    setError: _
   };
-  return /* @__PURE__ */ d($e.Provider, { value: E, children: r });
-}, bt = Re(null), ur = ({
+  return /* @__PURE__ */ n(Ke.Provider, { value: v, children: r });
+}, _t = je(null), Er = ({
   children: r,
   resourceName: e,
   resourceDescription: t,
   requiredPermissions: s = [],
   fallbackComponent: o,
-  loadingComponent: c,
-  onSecurityReady: l,
+  loadingComponent: a,
+  onSecurityReady: c,
   onError: i
 }) => {
-  const u = Ne($e);
-  if (!u)
+  const l = Fe(Ke);
+  if (!l)
     throw new Error("ArchbaseViewSecurityProvider deve ser usado dentro de um ArchbaseSecurityProvider");
-  const { user: m, isAdmin: b } = u, [h, C] = f(null), [E, y] = f(!0), [x, U] = f(null);
-  if (Ge.useEffect(() => {
-    if (!m) {
-      y(!1);
+  const { user: g, isAdmin: E } = l, [d, _] = h(null), [v, f] = h(!0), [S, D] = h(null);
+  if (ot.useEffect(() => {
+    if (!g) {
+      f(!1);
       return;
     }
-    const A = new nt(e, t, b);
+    const m = new gt(e, t, E);
     (async () => {
-      y(!0);
+      f(!0);
       try {
-        await A.apply(() => {
-          C(A), y(!1), l && l(A);
+        await m.apply(() => {
+          _(m), f(!1), c && c(m);
         });
       } catch {
-        const L = A.getError() || "Erro ao carregar permissões";
-        U(L), y(!1), i && i(L);
+        const C = m.getError() || "Erro ao carregar permissões";
+        D(C), f(!1), i && i(C);
       }
     })();
-  }, [e, t, m, b, l, i]), E)
-    return c ? /* @__PURE__ */ d(te, { children: c }) : /* @__PURE__ */ d(dr, {});
-  if (x)
-    return /* @__PURE__ */ d("div", { className: "archbase-security-error", children: /* @__PURE__ */ R("div", { children: [
+  }, [e, t, g, E, c, i]), v)
+    return a ? /* @__PURE__ */ n(ne, { children: a }) : /* @__PURE__ */ n(Ar, {});
+  if (S)
+    return /* @__PURE__ */ n("div", { className: "archbase-security-error", children: /* @__PURE__ */ P("div", { children: [
       "Erro ao carregar permissões: ",
-      x
+      S
     ] }) });
-  if (!m)
-    return o || /* @__PURE__ */ d("div", { className: "archbase-security-no-user", children: /* @__PURE__ */ d("div", { children: "É necessário fazer login para acessar esta área" }) });
-  if (s.length > 0 && h && !s.every(
-    (P) => h.hasPermission(P)
+  if (!g)
+    return o || /* @__PURE__ */ n("div", { className: "archbase-security-no-user", children: /* @__PURE__ */ n("div", { children: "É necessário fazer login para acessar esta área" }) });
+  if (s.length > 0 && d && !s.every(
+    (R) => d.hasPermission(R)
   ))
-    return o || /* @__PURE__ */ R("div", { className: "archbase-security-access-denied", children: [
-      /* @__PURE__ */ d("div", { children: "Você não possui permissão para acessar esta área" }),
-      /* @__PURE__ */ R("small", { children: [
+    return o || /* @__PURE__ */ P("div", { className: "archbase-security-access-denied", children: [
+      /* @__PURE__ */ n("div", { children: "Você não possui permissão para acessar esta área" }),
+      /* @__PURE__ */ P("small", { children: [
         "Permissões necessárias: ",
         s.join(", ")
       ] })
     ] });
-  const k = {
-    securityManager: h,
-    hasPermission: (A) => h?.hasPermission(A) || !1,
-    hasAnyPermission: (A) => A.some((P) => h?.hasPermission(P) || !1),
-    hasAllPermissions: (A) => A.every((P) => h?.hasPermission(P) || !1),
-    registerAction: (A, P) => {
-      h?.registerAction(A, P);
+  const w = {
+    securityManager: d,
+    hasPermission: (m) => d?.hasPermission(m) || !1,
+    hasAnyPermission: (m) => m.some((R) => d?.hasPermission(R) || !1),
+    hasAllPermissions: (m) => m.every((R) => d?.hasPermission(R) || !1),
+    registerAction: (m, R) => {
+      d?.registerAction(m, R);
     },
-    isLoading: E,
-    error: x
+    isLoading: v,
+    error: S
   };
-  return /* @__PURE__ */ d(bt.Provider, { value: k, children: r });
-}, hr = () => {
-  const r = Ne($e);
+  return /* @__PURE__ */ n(_t.Provider, { value: w, children: r });
+}, xr = () => {
+  const r = Fe(Ke);
   if (!r)
     throw new Error("useArchbaseSecurity deve ser usado dentro de um ArchbaseSecurityProvider");
   return r;
-}, je = () => {
-  const r = Ne(bt);
+}, qe = () => {
+  const r = Fe(_t);
   if (!r)
     throw new Error("useArchbaseViewSecurity deve ser usado dentro de um ArchbaseViewSecurityProvider");
   return r;
-}, $r = (r, e) => {
-  const t = je(), { hasPermission: s, hasAnyPermission: o, hasAllPermissions: c, registerAction: l, securityManager: i, isLoading: u, error: m } = t;
-  return Ge.useEffect(() => {
-    r && e && (l("create", `Criar ${e}`), l("edit", `Editar ${e}`), l("delete", `Deletar ${e}`), l("view", `Visualizar ${e}`), l("list", `Listar ${e}`));
-  }, [r, e, l]), {
+}, Xr = (r, e) => {
+  const t = qe(), { hasPermission: s, hasAnyPermission: o, hasAllPermissions: a, registerAction: c, securityManager: i, isLoading: l, error: g } = t;
+  return ot.useEffect(() => {
+    r && e && (c("create", `Criar ${e}`), c("edit", `Editar ${e}`), c("delete", `Deletar ${e}`), c("view", `Visualizar ${e}`), c("list", `Listar ${e}`));
+  }, [r, e, c]), {
     hasPermission: s,
     hasAnyPermission: o,
-    hasAllPermissions: c,
-    registerAction: l,
+    hasAllPermissions: a,
+    registerAction: c,
     securityManager: i,
     canCreate: s("create"),
     canEdit: s("edit"),
     canDelete: s("delete"),
     canView: s("view"),
     canList: s("list"),
-    isLoading: u,
-    error: m
+    isLoading: l,
+    error: g
   };
-}, jr = () => {
-  const r = je();
+}, Qr = () => {
+  const r = qe();
   return {
     check: r.hasPermission,
     checkAny: r.hasAnyPermission,
     checkAll: r.hasAllPermissions,
-    isAdmin: hr().isAdmin
+    isAdmin: xr().isAdmin
   };
-}, Et = ({
+}, Rt = ({
   children: r,
   actionName: e,
   requiredPermissions: t = [],
   requireAll: s = !0,
   actionDescription: o,
-  fallback: c = null,
-  autoRegister: l = !0
+  fallback: a = null,
+  autoRegister: c = !0
 }) => {
-  const { hasPermission: i, hasAnyPermission: u, hasAllPermissions: m, registerAction: b } = je();
-  z(() => {
-    l && e && o && b(e, o);
-  }, [e, o, l, b]);
-  let h = !1;
-  return e ? h = i(e) : t.length > 0 ? h = s ? m(t) : u(t) : h = !0, h ? /* @__PURE__ */ d(te, { children: r }) : /* @__PURE__ */ d(te, { children: c });
-}, Fr = ({
+  const { hasPermission: i, hasAnyPermission: l, hasAllPermissions: g, registerAction: E } = qe();
+  K(() => {
+    c && e && o && E(e, o);
+  }, [e, o, c, E]);
+  let d = !1;
+  return e ? d = i(e) : t.length > 0 ? d = s ? g(t) : l(t) : d = !0, d ? /* @__PURE__ */ n(ne, { children: r }) : /* @__PURE__ */ n(ne, { children: a });
+}, Zr = ({
   actionName: r,
   actionDescription: e,
   children: t,
   onClick: s,
   disabled: o = !1,
-  className: c = "",
-  style: l = {},
+  className: a = "",
+  style: c = {},
   variant: i = "primary",
-  size: u = "medium",
-  type: m = "button"
+  size: l = "medium",
+  type: g = "button"
 }) => {
-  const b = () => {
-    const C = "archbase-secure-btn", E = `archbase-secure-btn--${i}`, y = `archbase-secure-btn--${u}`;
-    return `${C} ${E} ${y} ${c}`.trim();
-  }, h = () => {
-    const C = {
+  const E = () => {
+    const _ = "archbase-secure-btn", v = `archbase-secure-btn--${i}`, f = `archbase-secure-btn--${l}`;
+    return `${_} ${v} ${f} ${a}`.trim();
+  }, d = () => {
+    const _ = {
       small: { padding: "4px 8px", fontSize: "12px" },
       medium: { padding: "8px 16px", fontSize: "14px" },
       large: { padding: "12px 24px", fontSize: "16px" }
-    }, E = {
+    }, v = {
       primary: { backgroundColor: "#007bff", color: "white" },
       secondary: { backgroundColor: "#6c757d", color: "white" },
       danger: { backgroundColor: "#dc3545", color: "white" },
@@ -1935,44 +2113,44 @@ const lr = () => Dt().user, At = "archbaseSecurityManagerStore", Nr = ({ resourc
       cursor: o ? "not-allowed" : "pointer",
       fontWeight: "500",
       opacity: o ? 0.6 : 1,
-      ...C[u],
-      ...E[i],
-      ...l
+      ..._[l],
+      ...v[i],
+      ...c
     };
   };
-  return /* @__PURE__ */ d(
-    Et,
+  return /* @__PURE__ */ n(
+    Rt,
     {
       actionName: r,
       actionDescription: e,
       fallback: null,
-      children: /* @__PURE__ */ d(
+      children: /* @__PURE__ */ n(
         "button",
         {
-          type: m,
+          type: g,
           onClick: s,
           disabled: o,
-          className: b(),
-          style: h(),
+          className: E(),
+          style: d(),
           children: t
         }
       )
     }
   );
-}, Vr = ({
+}, es = ({
   children: r,
   actionName: e,
   actionDescription: t,
   showLabel: s = !0,
   label: o,
-  fallbackText: c = "Campo não disponível",
-  fallbackComponent: l
-}) => e ? /* @__PURE__ */ d(
-  Et,
+  fallbackText: a = "Campo não disponível",
+  fallbackComponent: c
+}) => e ? /* @__PURE__ */ n(
+  Rt,
   {
     actionName: e,
     actionDescription: t,
-    fallback: l || /* @__PURE__ */ R("div", { className: "archbase-secure-field-fallback", style: {
+    fallback: c || /* @__PURE__ */ P("div", { className: "archbase-secure-field-fallback", style: {
       padding: "8px",
       color: "#666",
       fontStyle: "italic",
@@ -1980,99 +2158,100 @@ const lr = () => Dt().user, At = "archbaseSecurityManagerStore", Nr = ({ resourc
       border: "1px dashed #dee2e6",
       borderRadius: "4px"
     }, children: [
-      s && o && /* @__PURE__ */ R("label", { style: { fontWeight: "bold" }, children: [
+      s && o && /* @__PURE__ */ P("label", { style: { fontWeight: "bold" }, children: [
         o,
         ": "
       ] }),
-      c
+      a
     ] }),
     children: r
   }
-) : /* @__PURE__ */ d(te, { children: r });
-function zr(r, e) {
+) : /* @__PURE__ */ n(ne, { children: r });
+function ts(r, e) {
   return function(s) {
-    const { resourceName: o, resourceDescription: c, requiredPermissions: l, fallbackComponent: i } = e;
-    return /* @__PURE__ */ d(
-      ur,
+    const { resourceName: o, resourceDescription: a, requiredPermissions: c, fallbackComponent: i } = e;
+    return /* @__PURE__ */ n(
+      Er,
       {
         resourceName: o,
-        resourceDescription: c,
-        requiredPermissions: l,
+        resourceDescription: a,
+        requiredPermissions: c,
         fallbackComponent: i,
-        children: /* @__PURE__ */ d(r, { ...s })
+        children: /* @__PURE__ */ n(r, { ...s })
       }
     );
   };
 }
 export {
-  At as ARCHBASE_SECURITY_MANAGER_STORE,
-  ir as AccessIntervalDto,
-  ct as AccessScheduleDto,
-  Le as AccessTokenDto,
-  ar as ActionDto,
-  Oe as ApiTokenDto,
-  wt as ArchbaseAccessTokenService,
-  yt as ArchbaseApiTokenService,
-  sr as ArchbaseAuthContext,
-  Cr as ArchbaseAuthProvider,
-  mt as ArchbaseGroupService,
-  Dr as ArchbaseLogin,
-  gt as ArchbaseProfileService,
-  Et as ArchbaseProtectedComponent,
-  Rr as ArchbaseResetPassword,
-  vt as ArchbaseResourceService,
-  Fr as ArchbaseSecureActionButton,
-  Vr as ArchbaseSecureFormField,
-  nt as ArchbaseSecurityManager,
-  Lr as ArchbaseSecurityProvider,
-  V as ArchbaseTenantManager,
-  Ze as ArchbaseUser,
-  ft as ArchbaseUserService,
-  et as ArchbaseUsernameAndPassword,
-  et as ArchbaseUsernameAndPasswordImpl,
-  ur as ArchbaseViewSecurityProvider,
-  Te as CONTEXT_STORAGE_KEY,
-  Vt as DefaultArchbaseTokenManager,
-  dr as DefaultSecurityLoading,
-  Q as ENCRYPTION_KEY,
-  rt as FetchError,
-  he as GroupDto,
-  _r as PermissionDto,
-  ue as ProfileDto,
-  ht as ResourceDto,
-  le as SecurityDto,
-  ae as SecurityType,
-  Se as TOKEN_COOKIE_NAME,
-  nr as TipoRecurso,
-  Pe as USER_NAME,
-  Ie as USER_NAME_AND_PASSWORD,
-  Ee as UserDto,
-  Be as UserGroupDto,
-  Zt as createInternalConfig,
-  ge as decodeJWT,
-  oe as epochAtSecondsFromNow,
-  He as epochTimeIsPast,
-  qt as fetchTokens,
-  Yt as fetchWithRefreshToken,
-  Wt as generateCodeChallenge,
-  zt as generateRandomString,
-  tt as getRandomInteger,
-  rr as getRefreshExpiresIn,
-  Gt as postWithXForm,
-  Jt as redirectToLogin,
-  Xt as redirectToLogout,
-  Br as useArchbaseAuthenticationManager,
-  Mr as useArchbaseGetCurrentToken,
-  lr as useArchbaseGetLoggedUser,
-  jr as useArchbasePermissionCheck,
-  Or as useArchbaseResetPassword,
-  $r as useArchbaseSecureForm,
-  hr as useArchbaseSecurity,
-  Nr as useArchbaseSecurityManager,
-  Ur as useArchbaseTenantManager,
-  je as useArchbaseViewSecurity,
-  Tr as useBrowserStorage,
-  er as validateConfig,
-  Qt as validateState,
-  zr as withArchbaseSecurity
+  Dt as ARCHBASE_SECURITY_MANAGER_STORE,
+  yr as AccessIntervalDto,
+  vt as AccessScheduleDto,
+  Je as AccessTokenDto,
+  wr as ActionDto,
+  Ge as ApiTokenDto,
+  Tt as ArchbaseAccessTokenService,
+  Pt as ArchbaseApiTokenService,
+  fr as ArchbaseAuthContext,
+  zr as ArchbaseAuthProvider,
+  It as ArchbaseGroupService,
+  Vr as ArchbaseLogin,
+  Wr as ArchbaseMfaSetup,
+  Ct as ArchbaseProfileService,
+  Rt as ArchbaseProtectedComponent,
+  Hr as ArchbaseResetPassword,
+  Ut as ArchbaseResourceService,
+  Zr as ArchbaseSecureActionButton,
+  es as ArchbaseSecureFormField,
+  gt as ArchbaseSecurityManager,
+  Yr as ArchbaseSecurityProvider,
+  J as ArchbaseTenantManager,
+  dt as ArchbaseUser,
+  St as ArchbaseUserService,
+  ut as ArchbaseUsernameAndPassword,
+  ut as ArchbaseUsernameAndPasswordImpl,
+  Er as ArchbaseViewSecurityProvider,
+  Oe as CONTEXT_STORAGE_KEY,
+  Zt as DefaultArchbaseTokenManager,
+  Ar as DefaultSecurityLoading,
+  ae as ENCRYPTION_KEY,
+  pt as FetchError,
+  xe as GroupDto,
+  Fr as PermissionDto,
+  Ee as ProfileDto,
+  xt as ResourceDto,
+  ge as SecurityDto,
+  fe as SecurityType,
+  Me as TOKEN_COOKIE_NAME,
+  gr as TipoRecurso,
+  Be as USER_NAME,
+  Ne as USER_NAME_AND_PASSWORD,
+  Re as UserDto,
+  We as UserGroupDto,
+  dr as createInternalConfig,
+  Pe as decodeJWT,
+  he as epochAtSecondsFromNow,
+  st as epochTimeIsPast,
+  ir as fetchTokens,
+  ar as fetchWithRefreshToken,
+  tr as generateCodeChallenge,
+  er as generateRandomString,
+  ht as getRandomInteger,
+  pr as getRefreshExpiresIn,
+  sr as postWithXForm,
+  or as redirectToLogin,
+  cr as redirectToLogout,
+  Jr as useArchbaseAuthenticationManager,
+  Kr as useArchbaseGetCurrentToken,
+  br as useArchbaseGetLoggedUser,
+  Qr as useArchbasePermissionCheck,
+  qr as useArchbaseResetPassword,
+  Xr as useArchbaseSecureForm,
+  xr as useArchbaseSecurity,
+  Gr as useArchbaseSecurityManager,
+  jr as useArchbaseTenantManager,
+  qe as useArchbaseViewSecurity,
+  $r as useBrowserStorage,
+  ur as validateConfig,
+  lr as validateState,
+  ts as withArchbaseSecurity
 };