@archbase/security 4.2.5 → 4.3.0

package/dist/index.js

@@ -1,11 +1,11 @@
 import "reflect-metadata";
 import * as I from "inversify";
-import { decorate as $t, injectable as Ot } from "inversify";
-import { compressString as Lt, decompressString as zt, IOCContainer as jt, ARCHBASE_IOC_API_TYPE as Y, processErrorMessage as oe, IsNotEmpty as Q, IsOptional as ae, IsBoolean as re, IsEmail as Ft, getKeyByEnumValue as Qe, useArchbasePasswordRemember as Vt, getI18nextInstance as x, useArchbaseTheme as Ht, resolveArchbasePasswordPolicy as Wt, isEmailValidate as Gt, validateArchbasePassword as Jt, useArchbaseAppContext as Kt } from "@archbase/core";
+import { decorate as Bt, injectable as Lt } from "inversify";
+import { compressString as Ot, decompressString as zt, IOCContainer as jt, ARCHBASE_IOC_API_TYPE as Y, processErrorMessage as oe, IsNotEmpty as Q, IsOptional as ae, IsBoolean as re, IsEmail as Ft, getKeyByEnumValue as Qe, useArchbasePasswordRemember as Ht, getI18nextInstance as x, useArchbaseTheme as Vt, resolveArchbasePasswordPolicy as Wt, isEmailValidate as Gt, validateArchbasePassword as Jt, useArchbaseAppContext as Kt } from "@archbase/core";
 import q from "crypto-js";
 import { jwtDecode as qt } from "jwt-decode";
 import { jsx as o, jsxs as C, Fragment as ie } from "react/jsx-runtime";
-import it, { useState as p, useEffect as X, createContext as Ve, useMemo as at, useRef as ct, useCallback as Ie, useContext as He } from "react";
+import it, { useState as p, useEffect as X, createContext as He, useMemo as at, useRef as ct, useCallback as Ie, useContext as Ve } from "react";
 import { BehaviorSubject as Ze } from "rxjs";
 import { ArchbaseRemoteApiService as ge, useArchbaseStore as lt } from "@archbase/data";
 import { v4 as Z } from "uuid";
@@ -38,11 +38,11 @@ class pt {
     return new pt({});
   }
 }
-const le = "YngzI1guK3dGaElFcFY9MywqK3xgPzg/Ojg7eD8xRmg=", Ne = "c1ab58e7-c113-4225-a190-a9e59d1207fc", Be = "6faf6932-a0b5-457b-83b1-8d89ddbd91fd", $e = "602b05c5-ec46-451e-aba6-187e463bc245", Oe = "8b4a7c2d-9e5f-4163-b8a7-3f2c9d8e5a1b";
+const le = "YngzI1guK3dGaElFcFY9MywqK3xgPzg/Ojg7eD8xRmg=", Ne = "c1ab58e7-c113-4225-a190-a9e59d1207fc", $e = "6faf6932-a0b5-457b-83b1-8d89ddbd91fd", Be = "602b05c5-ec46-451e-aba6-187e463bc245", Le = "8b4a7c2d-9e5f-4163-b8a7-3f2c9d8e5a1b";
 class or {
   getUsernameAndPassword() {
     try {
-      const e = localStorage.getItem(Be);
+      const e = localStorage.getItem($e);
       if (e) {
         const t = q.AES.decrypt(e, le).toString(q.enc.Utf8), n = atob(t).split(":");
         return { username: n[0], password: n[1], remember: !0 };
@@ -54,11 +54,11 @@ class or {
   }
   saveUsernameAndPassword(e, t) {
     const s = btoa(`${e}:${t}`), n = q.AES.encrypt(s, le).toString();
-    localStorage.setItem(Be, n);
+    localStorage.setItem($e, n);
   }
   getUsername() {
     try {
-      const e = localStorage.getItem($e);
+      const e = localStorage.getItem(Be);
       if (e) {
         const t = q.AES.decrypt(e, le).toString(q.enc.Utf8);
         return atob(t);
@@ -70,7 +70,7 @@ class or {
   }
   saveUsername(e) {
     const t = btoa(e), s = q.AES.encrypt(t, le).toString();
-    localStorage.setItem($e, s);
+    localStorage.setItem(Be, s);
   }
   isTokenExpired(e, t = 300) {
     let s = e;
@@ -88,13 +88,13 @@ class or {
   }
   saveToken(e) {
     if (e) {
-      const t = JSON.stringify(e), s = q.AES.encrypt(t, le).toString(), n = Lt(s);
+      const t = JSON.stringify(e), s = q.AES.encrypt(t, le).toString(), n = Ot(s);
       localStorage.setItem(Ne, n);
     } else
       this.clearToken();
   }
   clearUsernameAndPassword() {
-    localStorage.removeItem(Be), localStorage.removeItem($e);
+    localStorage.removeItem($e), localStorage.removeItem(Be);
   }
   clearToken() {
     localStorage.removeItem(Ne);
@@ -113,24 +113,24 @@ class or {
   saveContext(e) {
     try {
       const t = q.AES.encrypt(e, le).toString();
-      localStorage.setItem(Oe, t);
+      localStorage.setItem(Le, t);
     } catch (t) {
       console.warn("Erro ao salvar contexto:", t);
     }
   }
   getContext() {
     try {
-      const e = localStorage.getItem(Oe);
+      const e = localStorage.getItem(Le);
       return e ? q.AES.decrypt(e, le).toString(q.enc.Utf8) : null;
     } catch {
       return null;
     }
   }
   clearContext() {
-    localStorage.removeItem(Oe);
+    localStorage.removeItem(Le);
   }
 }
-$t(Ot(), or);
+Bt(Lt(), or);
 function ft(r) {
   const t = new Uint8Array(1);
   return window.crypto.getRandomValues(t), t[0] >= Math.floor(256 / r) * r ? ft(r) : t[0] % r;
@@ -368,7 +368,7 @@ const Te = (r) => {
 	Você pode desativar a decodificação JWT definindo o valor 'decodeToken' como 'falso' na configuração.`
     );
   }
-}, br = Ve({
+}, br = He({
   token: "",
   login: () => null,
   logOut: () => null,
@@ -383,7 +383,7 @@ const Te = (r) => {
     "ROCP_refreshTokenExpire",
     pe(2 * fe),
     t.storage
-  ), [i, d] = de("ROCP_token", "", t.storage), [y, S] = de(
+  ), [i, d] = de("ROCP_token", "", t.storage), [y, k] = de(
     "ROCP_tokenExpire",
     pe(fe),
     t.storage
@@ -399,16 +399,16 @@ const Te = (r) => {
     "ROCP_refreshInProgress",
     !1,
     t.storage
-  ), [M, $] = p(), [V, _] = p(), [b, m] = p(null);
+  ), [M, B] = p(), [H, _] = p(), [b, m] = p(null);
   let R;
-  function H() {
-    n(void 0), d(""), S(pe(fe)), c(pe(fe)), U(void 0), $(void 0), _(void 0), w(!1);
+  function V() {
+    n(void 0), d(""), k(pe(fe)), c(pe(fe)), U(void 0), B(void 0), _(void 0), w(!1);
   }
-  function O(g, v) {
-    H(), m(null), t?.logoutEndpoint && fr(t, i, s, h, g, v);
+  function L(g, v) {
+    V(), m(null), t?.logoutEndpoint && fr(t, i, s, h, g, v);
   }
   function N(g) {
-    H(), w(!0);
+    V(), w(!0);
     let v = g;
     g && typeof g != "string" && (console.warn(
       `O estado de login aprovado deve ser do tipo 'string'. Recebido'${g}'. Ignorando o valor...`
@@ -419,7 +419,7 @@ const Te = (r) => {
   function T(g) {
     d(g.access_token), n(g.refresh_token);
     const v = t.tokenExpiresIn ?? g.expires_in ?? fe;
-    S(pe(v));
+    k(pe(v));
     const K = t.refreshTokenExpiresIn ?? wr(v, g);
     c(pe(K)), U(g.id_token);
     try {
@@ -428,7 +428,7 @@ const Te = (r) => {
       console.warn(`Falha ao decodificar idToken: ${W.message}`);
     }
     try {
-      t.decodeToken && $(Te(g.access_token));
+      t.decodeToken && B(Te(g.access_token));
     } catch (W) {
       console.warn(`Falha ao decodificar o token de acesso: ${W.message}`);
     }
@@ -465,7 +465,7 @@ const Te = (r) => {
       const g = new URLSearchParams(window.location.search);
       if (!g.get("code")) {
         const v = g.get("error_description") || "Estado de autorização inválido. Atualizar a página pode resolver o problema.";
-        console.error(v), m(v), O();
+        console.error(v), m(v), L();
         return;
       }
       if (!se.current) {
@@ -493,7 +493,7 @@ const Te = (r) => {
       console.warn(`Falha ao decodificar idToken: ${g.message}`);
     }
     try {
-      t.decodeToken && $(Te(i));
+      t.decodeToken && B(Te(i));
     } catch (g) {
       console.warn(`Falha ao decodificar o token de acesso: ${g.message}`);
     }
@@ -501,7 +501,7 @@ const Te = (r) => {
   }, []), /* @__PURE__ */ o(
     br.Provider,
     {
-      value: { token: i, tokenData: M, idToken: h, idTokenData: V, login: N, logOut: O, error: b, loginInProgress: A },
+      value: { token: i, tokenData: M, idToken: h, idTokenData: H, login: N, logOut: L, error: b, loginInProgress: A },
       children: e
     }
   );
@@ -632,7 +632,7 @@ class J {
 function Jr() {
   return J.getInstance();
 }
-var me = /* @__PURE__ */ ((r) => (r.USER = "user", r.PROFILE = "profile", r.GROUP = "group", r))(me || {}), Ar = Object.defineProperty, k = (r, e, t, s) => {
+var me = /* @__PURE__ */ ((r) => (r.USER = "user", r.PROFILE = "profile", r.GROUP = "group", r))(me || {}), Ar = Object.defineProperty, S = (r, e, t, s) => {
   for (var n = void 0, a = r.length - 1, c; a >= 0; a--)
     (c = r[a]) && (n = c(e, t, n) || n);
   return n && Ar(e, t, n), n;
@@ -655,7 +655,7 @@ const wt = class bt {
     intervals: []
   });
 };
-k([
+S([
   Q({
     message: "archbase:Informe a descrição do cronograma de acesso"
   })
@@ -683,15 +683,15 @@ const _e = class Et {
     endTime: "17:00"
   });
 };
-k([
+S([
   ae()
 ], _e.prototype, "accessSchedule");
-k([
+S([
   Q({
     message: "archbase:Informe a hora de início"
   })
 ], _e.prototype, "startTime");
-k([
+S([
   Q({
     message: "archbase:Informe a hora de término"
   })
@@ -712,17 +712,17 @@ class ye {
     this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.actions = e.actions || [];
   }
 }
-k([
+S([
   Q({
     message: "archbase:Informe o nome"
   })
 ], ye.prototype, "name");
-k([
+S([
   Q({
     message: "archbase:Informe a descrição"
   })
 ], ye.prototype, "description");
-k([
+S([
   ae()
 ], ye.prototype, "actions");
 const ve = class xt {
@@ -741,7 +741,7 @@ const ve = class xt {
   actionVersion;
   isNewAction;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.resource = e.resource ? new St(e.resource) : void 0, this.category = e.category || "", this.active = e.active || !1, this.actionVersion = e.actionVersion || "", this.isNewAction = e.isNewAction || !1;
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.resource = e.resource ? new kt(e.resource) : void 0, this.category = e.category || "", this.active = e.active || !1, this.actionVersion = e.actionVersion || "", this.isNewAction = e.isNewAction || !1;
   }
   static newInstance = () => new xt({
     id: Z(),
@@ -749,35 +749,35 @@ const ve = class xt {
     isNewAction: !0
   });
 };
-k([
+S([
   Q({
     message: "archbase:Informe o nome para a ação"
   })
 ], ve.prototype, "name");
-k([
+S([
   Q({
     message: "archbase:Informe a descrição para a ação"
   })
 ], ve.prototype, "description");
-k([
+S([
   ae()
 ], ve.prototype, "resource");
-k([
+S([
   Q({
     message: "archbase:Informe a categoria para a ação"
   })
 ], ve.prototype, "category");
-k([
+S([
   re()
 ], ve.prototype, "active");
-let kr = ve;
-class ke extends ye {
+let Sr = ve;
+class Se extends ye {
   type;
   isNewProfile;
   constructor(e) {
     super(e), this.type = me.PROFILE, this.isNewProfile = e.isNewProfile || !1;
   }
-  static newInstance = () => new ke({
+  static newInstance = () => new Se({
     id: Z(),
     isNewProfile: !0
   });
@@ -792,25 +792,25 @@ class Ge {
   lastModifiedByUser;
   group;
   constructor(e) {
-    this.id = e.id, this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.group = e.group ? new Se(e.group) : void 0;
+    this.id = e.id, this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.updateEntityDate = e.updateEntityDate || (/* @__PURE__ */ new Date()).toISOString(), this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.group = e.group ? new ke(e.group) : void 0;
   }
   static newInstance = (e) => new Ge({
     id: Z(),
     group: e
   });
 }
-class Se extends ye {
+class ke extends ye {
   type;
   isNewGroup;
   constructor(e) {
     super(e), this.type = me.GROUP, this.isNewGroup = e.isNewGroup || !1;
   }
-  static newInstance = () => new Se({
+  static newInstance = () => new ke({
     id: Z(),
     isNewGroup: !0
   });
 }
-const Re = class kt {
+const Re = class St {
   id;
   code;
   version;
@@ -827,27 +827,27 @@ const Re = class kt {
   constructor(e) {
     this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.name = e.name || "", this.description = e.description || "", this.actions = e.actions || [], this.active = e.active || !1, this.type = e.type || "VIEW", this.isNewResource = e.isNewResource || !1;
   }
-  static newInstance = () => new kt({
+  static newInstance = () => new St({
     id: Z(),
     actions: [],
     active: !0,
     isNewResource: !0
   });
 };
-k([
+S([
   Q({
     message: "archbase:Informe o nome para o recurso"
   })
 ], Re.prototype, "name");
-k([
+S([
   Q({
     message: "archbase:Informe a descrição para o recurso"
   })
 ], Re.prototype, "description");
-k([
+S([
   re()
 ], Re.prototype, "active");
-let St = Re;
+let kt = Re;
 const F = class It extends ye {
   userName;
   password;
@@ -869,7 +869,7 @@ const F = class It extends ye {
   type;
   isNewUser;
   constructor(e) {
-    super(e), this.type = me.USER, this.userName = e.userName || "", this.password = e.password || "", this.changePasswordOnNextLogin = e.changePasswordOnNextLogin || !1, this.allowPasswordChange = e.allowPasswordChange || !1, this.allowMultipleLogins = e.allowMultipleLogins || !1, this.passwordNeverExpires = e.passwordNeverExpires || !1, this.passwordChangedAt = e.passwordChangedAt || void 0, this.accountDeactivated = e.accountDeactivated || !1, this.accountLocked = e.accountLocked || !1, this.unlimitedAccessHours = e.unlimitedAccessHours || !1, this.isAdministrator = e.isAdministrator || !1, this.accessSchedule = e.accessSchedule ? new At(e.accessSchedule) : void 0, this.groups = e.groups ? e.groups.map((t) => new Ge(t)) : [], this.profile = e.profile ? new ke(e.profile) : void 0, this.email = e.email || "", this.avatar = e.avatar || void 0, this.isNewUser = e.isNewUser || !1, this.nickname = e.nickname;
+    super(e), this.type = me.USER, this.userName = e.userName || "", this.password = e.password || "", this.changePasswordOnNextLogin = e.changePasswordOnNextLogin || !1, this.allowPasswordChange = e.allowPasswordChange || !1, this.allowMultipleLogins = e.allowMultipleLogins || !1, this.passwordNeverExpires = e.passwordNeverExpires || !1, this.passwordChangedAt = e.passwordChangedAt || void 0, this.accountDeactivated = e.accountDeactivated || !1, this.accountLocked = e.accountLocked || !1, this.unlimitedAccessHours = e.unlimitedAccessHours || !1, this.isAdministrator = e.isAdministrator || !1, this.accessSchedule = e.accessSchedule ? new At(e.accessSchedule) : void 0, this.groups = e.groups ? e.groups.map((t) => new Ge(t)) : [], this.profile = e.profile ? new Se(e.profile) : void 0, this.email = e.email || "", this.avatar = e.avatar || void 0, this.isNewUser = e.isNewUser || !1, this.nickname = e.nickname;
   }
   static newInstance = () => new It({
     id: Z(),
@@ -883,48 +883,48 @@ const F = class It extends ye {
     isNewUser: !0
   });
 };
-k([
+S([
   Q({
     message: "archbase:Informe o nome de usuário"
   })
 ], F.prototype, "userName");
-k([
+S([
   re()
 ], F.prototype, "changePasswordOnNextLogin");
-k([
+S([
   re()
 ], F.prototype, "allowPasswordChange");
-k([
+S([
   re()
 ], F.prototype, "allowMultipleLogins");
-k([
+S([
   re()
 ], F.prototype, "passwordNeverExpires");
-k([
+S([
   ae()
 ], F.prototype, "passwordChangedAt");
-k([
+S([
   re()
 ], F.prototype, "accountDeactivated");
-k([
+S([
   re()
 ], F.prototype, "accountLocked");
-k([
+S([
   re()
 ], F.prototype, "unlimitedAccessHours");
-k([
+S([
   re()
 ], F.prototype, "isAdministrator");
-k([
+S([
   ae()
 ], F.prototype, "accessSchedule");
-k([
+S([
   ae()
 ], F.prototype, "groups");
-k([
+S([
   ae()
 ], F.prototype, "profile");
-k([
+S([
   Ft(
     {},
     {
@@ -947,14 +947,14 @@ const Je = class Fe {
   companyId;
   projectId;
   constructor(e) {
-    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.security = e.security ? Fe.createDtoFromJson(e.security) : void 0, this.action = e.action ? new kr(e.action) : void 0, this.tenantId = e.tenantId || "", this.companyId = e.companyId || "", this.projectId = e.projectId || "";
+    this.id = e.id || "", this.code = e.code || "", this.version = e.version || 0, this.createEntityDate = e.createEntityDate || "", this.updateEntityDate = e.updateEntityDate || "", this.createdByUser = e.createdByUser || "", this.lastModifiedByUser = e.lastModifiedByUser || "", this.security = e.security ? Fe.createDtoFromJson(e.security) : void 0, this.action = e.action ? new Sr(e.action) : void 0, this.tenantId = e.tenantId || "", this.companyId = e.companyId || "", this.projectId = e.projectId || "";
   }
   static createDtoFromJson(e) {
     switch (e.type) {
       case "profile":
-        return new ke(e);
-      case "group":
         return new Se(e);
+      case "group":
+        return new ke(e);
       case "user":
         return new Me(e);
       default:
@@ -968,10 +968,10 @@ const Je = class Fe {
     projectId: ""
   });
 };
-k([
+S([
   ae()
 ], Je.prototype, "security");
-k([
+S([
   ae()
 ], Je.prototype, "action");
 let Kr = Je;
@@ -1061,7 +1061,7 @@ class Pt extends ge {
     return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new Se(e);
+    return new ke(e);
   }
   getEndpoint() {
     return "/api/v1/group";
@@ -1083,7 +1083,7 @@ class Tt extends ge {
     return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new ke(e);
+    return new Se(e);
   }
   getEndpoint() {
     return "/api/v1/userProfile";
@@ -1171,7 +1171,7 @@ class _t extends ge {
     return J.getInstance().getHeaders();
   }
   transform(e) {
-    return new St(e);
+    return new kt(e);
   }
   getEndpoint() {
     return "/api/v1/resource";
@@ -1238,6 +1238,13 @@ class Rt {
   getEndpoint() {
     return "/api/v1/security/diagnostics";
   }
+  /**
+   * Base própria: a trilha vive fora do diagnóstico porque tem chave própria no backend
+   * ({@code archbase.security.audit.enabled}) e some inteira quando ela está desligada.
+   */
+  getAuditEndpoint() {
+    return "/api/v1/security/audit";
+  }
   /** Retrato do tenant: contagens do catálogo e o estado das proteções configuráveis. */
   async getOverview() {
     return this.client.get(`${this.getEndpoint()}/overview`, this.configureHeaders());
@@ -1321,6 +1328,22 @@ class Rt {
       this.configureHeaders()
     );
   }
+  /**
+   * Os acontecimentos de segurança, do mais recente para o mais antigo.
+   *
+   * <p>Sem período informado o servidor assume os últimos trinta dias — a primeira consulta de
+   * quem abre a tela não deve varrer a tabela inteira.
+   *
+   * <p>Devolve 403 para quem não é administrador, e 404 quando a trilha está desligada: os dois
+   * casos precisam ser distinguidos na tela, porque significam coisas diferentes.
+   */
+  async getAuditEvents(e = {}) {
+    const t = new URLSearchParams();
+    return e.usuario && t.set("usuario", e.usuario), e.tipo && t.set("tipo", e.tipo), e.inicio && t.set("inicio", e.inicio), e.fim && t.set("fim", e.fim), t.set("page", String(e.page ?? 0)), t.set("size", String(e.size ?? 50)), this.client.get(
+      `${this.getAuditEndpoint()}/events?${t.toString()}`,
+      this.configureHeaders()
+    );
+  }
 }
 I.decorate(I.inject(Y.ApiClient), Rt, 0);
 I.decorate(I.injectable(), Rt);
@@ -1335,7 +1358,7 @@ function qr({
   mockUsers: i = [],
   mockUsersGroupMap: d,
   options: y = {},
-  onChangeUsername: S,
+  onChangeUsername: k,
   disabledLogin: h = !1,
   isCheckingUsername: U = !1,
   showSignIn: A = !0,
@@ -1343,23 +1366,23 @@ function qr({
   onVerifyMfa: E,
   mfaError: P,
   onCancelMfa: M,
-  isVerifyingMfa: $ = !1
+  isVerifyingMfa: B = !1
 }) {
-  const V = ut(), {
+  const H = ut(), {
     username: _,
     password: b,
     rememberMe: m,
     clearRememberMe: R
-  } = Vt(), [H, O] = p(_), [N, T] = p(b), [ee, te] = p(m), [se, g] = p(!1), [v, K] = p(null), [W, we] = p("");
+  } = Ht(), [V, L] = p(_), [N, T] = p(b), [ee, te] = p(m), [se, g] = p(!1), [v, K] = p(null), [W, we] = p("");
   X(() => {
     g(!!e);
   }, [e]), X(() => {
-    _ !== H && (O(_), S?.(_)), b !== N && T(b), m !== ee && te(m);
+    _ !== V && (L(_), k?.(_)), b !== N && T(b), m !== ee && te(m);
   }, [_, b, m]);
   const he = () => {
     g(!1);
-  }, B = () => {
-    H && N && r(H, N, ee).finally(() => g(!0));
+  }, $ = () => {
+    V && N && r(V, N, ee).finally(() => g(!0));
   }, ce = () => {
     const l = W.trim();
     l && E && E(l);
@@ -1383,7 +1406,7 @@ function qr({
   }, be = () => {
     if (v) {
       const l = i.find((f) => f.email === v);
-      l && (O(l.email), T(l.password), he());
+      l && (L(l.email), T(l.password), he());
     }
   }, u = {
     withBorder: !0,
@@ -1399,7 +1422,7 @@ function qr({
     {
       ...u,
       pos: "relative",
-      ref: V,
+      ref: H,
       children: [
         A && /* @__PURE__ */ C(ie, { children: [
           /* @__PURE__ */ o(
@@ -1442,8 +1465,8 @@ function qr({
             G,
             {
               fullWidth: !0,
-              disabled: !W.trim() || $,
-              loading: $,
+              disabled: !W.trim() || B,
+              loading: B,
               onClick: ce,
               children: x().t("archbase:mfa.verify", "Verificar")
             }
@@ -1496,10 +1519,10 @@ function qr({
               label: s,
               placeholder: n ?? x().t("archbase:usuario@email.com"),
               rightSection: U ? /* @__PURE__ */ o(dt, { size: "xs" }) : null,
-              value: H || "",
+              value: V || "",
               required: !0,
               onChange: (l) => {
-                O(l.currentTarget.value), S?.(l.currentTarget.value), he();
+                L(l.currentTarget.value), k?.(l.currentTarget.value), he();
               }
             }
           ),
@@ -1545,10 +1568,10 @@ function qr({
           /* @__PURE__ */ o(
             G,
             {
-              disabled: !N || !H || h,
+              disabled: !N || !V || h,
               fullWidth: !0,
               mt: "xl",
-              onClick: B,
+              onClick: $,
               children: x().t("archbase:signIn")
             }
           )
@@ -1559,7 +1582,7 @@ function qr({
     }
   );
 }
-const L = (r, e) => x().t(r, e);
+const O = (r, e) => x().t(r, e);
 function Yr({
   enabled: r,
   onSetup: e,
@@ -1567,17 +1590,17 @@ function Yr({
   onDisable: s,
   onStatusChange: n
 }) {
-  const [a, c] = p("idle"), [i, d] = p(null), [y, S] = p(""), [h, U] = p([]), [A, w] = p(!1), [E, P] = p(null), M = async () => {
+  const [a, c] = p("idle"), [i, d] = p(null), [y, k] = p(""), [h, U] = p([]), [A, w] = p(!1), [E, P] = p(null), M = async () => {
     w(!0), P(null);
     try {
       const b = await e();
-      d(b), S(""), c("setup");
+      d(b), k(""), c("setup");
     } catch (b) {
       P(b?.message || String(b));
     } finally {
       w(!1);
     }
-  }, $ = async () => {
+  }, B = async () => {
     const b = y.trim();
     if (b) {
       w(!0), P(null);
@@ -1590,7 +1613,7 @@ function Yr({
         w(!1);
       }
     }
-  }, V = async () => {
+  }, H = async () => {
     w(!0), P(null);
     try {
       await s(), d(null), U([]), c("idle"), n?.(!1);
@@ -1600,85 +1623,85 @@ function Yr({
       w(!1);
     }
   }, _ = () => {
-    U([]), d(null), S(""), c("idle");
+    U([]), d(null), k(""), c("idle");
   };
   return /* @__PURE__ */ o(We, { withBorder: !0, radius: "md", p: "lg", children: /* @__PURE__ */ C(Ee, { gap: "md", children: [
     /* @__PURE__ */ C("div", { children: [
-      /* @__PURE__ */ o(j, { fw: 700, fz: "lg", children: L("archbase:mfa.setup.title", "Autenticação em duas etapas (MFA)") }),
-      /* @__PURE__ */ o(j, { c: "dimmed", fz: "sm", children: L(
+      /* @__PURE__ */ o(j, { fw: 700, fz: "lg", children: O("archbase:mfa.setup.title", "Autenticação em duas etapas (MFA)") }),
+      /* @__PURE__ */ o(j, { c: "dimmed", fz: "sm", children: O(
         "archbase:mfa.setup.subtitle",
         "Proteja o acesso exigindo um código do seu aplicativo autenticador no login."
       ) })
     ] }),
     E && /* @__PURE__ */ o(tt, { color: "red", children: E }),
     r && a === "idle" && /* @__PURE__ */ C(ue, { justify: "space-between", children: [
-      /* @__PURE__ */ o(j, { c: "teal", fw: 600, children: L("archbase:mfa.setup.active", "MFA ativo") }),
-      /* @__PURE__ */ o(G, { color: "red", variant: "light", loading: A, onClick: V, children: L("archbase:mfa.setup.disable", "Desativar") })
+      /* @__PURE__ */ o(j, { c: "teal", fw: 600, children: O("archbase:mfa.setup.active", "MFA ativo") }),
+      /* @__PURE__ */ o(G, { color: "red", variant: "light", loading: A, onClick: H, children: O("archbase:mfa.setup.disable", "Desativar") })
     ] }),
-    !r && a === "idle" && /* @__PURE__ */ o(G, { loading: A, onClick: M, children: L("archbase:mfa.setup.enable", "Ativar MFA") }),
+    !r && a === "idle" && /* @__PURE__ */ o(G, { loading: A, onClick: M, children: O("archbase:mfa.setup.enable", "Ativar MFA") }),
     a === "setup" && i && /* @__PURE__ */ C(Ee, { gap: "sm", align: "center", children: [
-      /* @__PURE__ */ o(j, { fz: "sm", ta: "center", children: L(
+      /* @__PURE__ */ o(j, { fz: "sm", ta: "center", children: O(
         "archbase:mfa.setup.scan",
         "Escaneie o QR Code no seu app autenticador (Google Authenticator, Authy…):"
       ) }),
       /* @__PURE__ */ o(sr, { value: i.provisioningUri, size: 180, level: "M" }),
-      /* @__PURE__ */ o(j, { fz: "xs", c: "dimmed", ta: "center", children: L("archbase:mfa.setup.manual", "Ou informe o código manualmente:") }),
+      /* @__PURE__ */ o(j, { fz: "xs", c: "dimmed", ta: "center", children: O("archbase:mfa.setup.manual", "Ou informe o código manualmente:") }),
       /* @__PURE__ */ C(ue, { gap: "xs", children: [
         /* @__PURE__ */ o(rt, { children: i.secret }),
-        /* @__PURE__ */ o(st, { value: i.secret, children: ({ copied: b, copy: m }) => /* @__PURE__ */ o(G, { size: "xs", variant: "subtle", onClick: m, children: b ? L("archbase:mfa.setup.copied", "Copiado") : L("archbase:mfa.setup.copy", "Copiar") }) })
+        /* @__PURE__ */ o(st, { value: i.secret, children: ({ copied: b, copy: m }) => /* @__PURE__ */ o(G, { size: "xs", variant: "subtle", onClick: m, children: b ? O("archbase:mfa.setup.copied", "Copiado") : O("archbase:mfa.setup.copy", "Copiar") }) })
       ] }),
       /* @__PURE__ */ o(
         xe,
         {
           w: "100%",
-          label: L("archbase:mfa.setup.confirmCode", "Digite o código gerado para confirmar"),
+          label: O("archbase:mfa.setup.confirmCode", "Digite o código gerado para confirmar"),
           placeholder: "000000",
           value: y,
-          onChange: (b) => S(b.currentTarget.value),
+          onChange: (b) => k(b.currentTarget.value),
           onKeyDown: (b) => {
-            b.key === "Enter" && $();
+            b.key === "Enter" && B();
           }
         }
       ),
       /* @__PURE__ */ C(ue, { w: "100%", justify: "flex-end", children: [
-        /* @__PURE__ */ o(G, { variant: "default", onClick: _, disabled: A, children: L("archbase:mfa.setup.cancel", "Cancelar") }),
-        /* @__PURE__ */ o(G, { onClick: $, loading: A, disabled: !y.trim(), children: L("archbase:mfa.setup.confirm", "Confirmar e ativar") })
+        /* @__PURE__ */ o(G, { variant: "default", onClick: _, disabled: A, children: O("archbase:mfa.setup.cancel", "Cancelar") }),
+        /* @__PURE__ */ o(G, { onClick: B, loading: A, disabled: !y.trim(), children: O("archbase:mfa.setup.confirm", "Confirmar e ativar") })
       ] })
     ] }),
     a === "recovery" && /* @__PURE__ */ C(Ee, { gap: "sm", children: [
-      /* @__PURE__ */ o(tt, { color: "yellow", children: L(
+      /* @__PURE__ */ o(tt, { color: "yellow", children: O(
         "archbase:mfa.setup.recoveryWarning",
         "Guarde estes códigos de recuperação em local seguro. Cada um funciona uma única vez e permite entrar se você perder o acesso ao app autenticador. Eles não serão exibidos novamente."
       ) }),
       /* @__PURE__ */ o(Zt, { cols: 2, spacing: "xs", children: h.map((b) => /* @__PURE__ */ o(rt, { fz: "sm", children: b }, b)) }),
       /* @__PURE__ */ C(ue, { justify: "space-between", children: [
         /* @__PURE__ */ o(st, { value: h.join(`
-`), children: ({ copied: b, copy: m }) => /* @__PURE__ */ o(G, { variant: "subtle", onClick: m, children: b ? L("archbase:mfa.setup.copied", "Copiado") : L("archbase:mfa.setup.copyAll", "Copiar todos") }) }),
-        /* @__PURE__ */ o(G, { onClick: _, children: L("archbase:mfa.setup.done", "Guardei os códigos") })
+`), children: ({ copied: b, copy: m }) => /* @__PURE__ */ o(G, { variant: "subtle", onClick: m, children: b ? O("archbase:mfa.setup.copied", "Copiado") : O("archbase:mfa.setup.copyAll", "Copiar todos") }) }),
+        /* @__PURE__ */ o(G, { onClick: _, children: O("archbase:mfa.setup.done", "Guardei os códigos") })
       ] })
     ] })
   ] }) });
 }
-const Sr = {
+const kr = {
   position: "relative",
   width: "90%",
   maxWidth: 400,
   padding: 30,
   marginTop: 30
 };
-function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClickBackToLogin: s, validatePassword: n, validateToken: a, initialEmail: c = "", description: i, style: d, passwordPolicy: y, showPasswordRequirements: S = !0 }) {
-  const h = ut(), U = Ht(), { colorScheme: A } = er(), [w, E] = p(r ?? ""), [P, M] = p(c), [$, V] = p(""), [_, b] = p(""), [m, R] = p(""), [H, O] = p(!1), [N, T] = p(""), [ee, te] = p(""), [se, g] = p(""), [v, K] = p(""), W = Wt(y);
-  async function we(B) {
-    B && (Gt(B) ? await e(B).then(() => {
-      nt.showSuccess(`${x().t("archbase:Um e-mail com instruções para redefinir sua senha foi enviado. Verifique sua caixa de entrada.")}`), O(!0);
+function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClickBackToLogin: s, validatePassword: n, validateToken: a, initialEmail: c = "", description: i, style: d, passwordPolicy: y, showPasswordRequirements: k = !0 }) {
+  const h = ut(), U = Vt(), { colorScheme: A } = er(), [w, E] = p(r ?? ""), [P, M] = p(c), [B, H] = p(""), [_, b] = p(""), [m, R] = p(""), [V, L] = p(!1), [N, T] = p(""), [ee, te] = p(""), [se, g] = p(""), [v, K] = p(""), W = Wt(y);
+  async function we($) {
+    $ && (Gt($) ? await e($).then(() => {
+      nt.showSuccess(`${x().t("archbase:Um e-mail com instruções para redefinir sua senha foi enviado. Verifique sua caixa de entrada.")}`), L(!0);
     }).catch(() => {
     }) : T(`${x().t("archbase:Email inválido")}`));
   }
-  async function he(B, ce, ne, be) {
-    if (B && ce && ne) {
+  async function he($, ce, ne, be) {
+    if ($ && ce && ne) {
       let u = "", l = "", f = "";
-      a && (u = a(ce), te(u)), W && (l = Jt(ne, W).error ?? ""), !l && n && (l = n(ne)), g(l), ne !== be && (f = `${x().t("archbase:A nova senha e a confirmação devem ser iguais.")}`, K(f)), !l && !u && !f && await t(B, ce, ne).then(() => {
-        nt.showSuccess(`${x().t("archbase:Senha redefinida com sucesso.")}`), s(), O(!1);
+      a && (u = a(ce), te(u)), W && (l = Jt(ne, W).error ?? ""), !l && n && (l = n(ne)), g(l), ne !== be && (f = `${x().t("archbase:A nova senha e a confirmação devem ser iguais.")}`, K(f)), !l && !u && !f && await t($, ce, ne).then(() => {
+        nt.showSuccess(`${x().t("archbase:Senha redefinida com sucesso.")}`), s(), L(!1);
       }).catch(() => {
         E(r || `${x().t("archbase:Erro ao redefinir senha.")}`);
       });
@@ -1688,7 +1711,7 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
     r && E(r);
   }, [r]), X(() => {
     E("");
-  }, [P, $, _, m]), /* @__PURE__ */ C(
+  }, [P, B, _, m]), /* @__PURE__ */ C(
     We,
     {
       withBorder: !0,
@@ -1696,11 +1719,11 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
       radius: "md",
       ref: h,
       style: {
-        ...Sr,
+        ...kr,
         ...d
       },
       children: [
-        H ? /* @__PURE__ */ C(ie, { children: [
+        V ? /* @__PURE__ */ C(ie, { children: [
           /* @__PURE__ */ o(
             j,
             {
@@ -1718,10 +1741,10 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
             {
               label: x().t("archbase:Código de segurança"),
               placeholder: `${x().t("archbase:Código enviado no seu e-mail")}`,
-              value: $ || "",
+              value: B || "",
               required: !0,
-              onChange: (B) => {
-                V(B.currentTarget.value), te("");
+              onChange: ($) => {
+                H($.currentTarget.value), te("");
               },
               error: ee
             }
@@ -1731,8 +1754,8 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
             {
               label: x().t("archbase:Nova senha"),
               placeholder: x().t("archbase:Nova senha"),
-              onChange: (B) => {
-                b(B.currentTarget.value), g(""), K("");
+              onChange: ($) => {
+                b($.currentTarget.value), g(""), K("");
               },
               value: _,
               required: !0,
@@ -1744,7 +1767,7 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
             {
               value: _,
               policy: W,
-              showRequirements: S
+              showRequirements: k
             }
           ),
           /* @__PURE__ */ o(
@@ -1752,8 +1775,8 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
             {
               label: x().t("archbase:Confirmar senha"),
               placeholder: x().t("archbase:Confirmar senha"),
-              onChange: (B) => {
-                R(B.currentTarget.value), K("");
+              onChange: ($) => {
+                R($.currentTarget.value), K("");
               },
               value: m || "",
               required: !0,
@@ -1763,10 +1786,10 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
           /* @__PURE__ */ o(
             G,
             {
-              disabled: !P || !$ || !_ || !m,
+              disabled: !P || !B || !_ || !m,
               mt: "md",
               fullWidth: !0,
-              onClick: () => he(P, $, _, m),
+              onClick: () => he(P, B, _, m),
               children: `${x().t("archbase:Redefinir senha")}`
             }
           ),
@@ -1777,7 +1800,7 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
               fullWidth: !0,
               color: A === "dark" ? U.colors.dark[4] : U.colors.gray[7],
               onClick: () => {
-                N || O(!1);
+                N || L(!1);
               },
               children: `${x().t("archbase:Voltar")}`
             }
@@ -1803,8 +1826,8 @@ function Xr({ error: r, onSendResetPasswordEmail: e, onResetPassword: t, onClick
               placeholder: `${x().t("archbase:usuario@email.com")}`,
               value: P || "",
               required: !0,
-              onChange: (B) => {
-                M(B.currentTarget.value), T("");
+              onChange: ($) => {
+                M($.currentTarget.value), T("");
               },
               error: N
             }
@@ -1845,14 +1868,14 @@ const Ir = () => Kt().user, Mt = "archbaseSecurityManagerStore", Qr = ({ resourc
       if (h && h.isAdmin === a)
         return h;
     }
-    const S = new vt(r, e, a);
-    return s && c && s.setValue(y, S), S;
+    const k = new vt(r, e, a);
+    return s && c && s.setValue(y, k), k;
   }, [t, r, e, a, c]);
   return X(() => {
     i.current = c;
   }, [c]), { securityManager: d };
 };
-function Le(r) {
+function Oe(r) {
   const e = r?.response?.data ?? r?.data ?? r;
   return e?.error === "CREDENTIALS_EXPIRED" || e?.requirePasswordChange === !0;
 }
@@ -1866,7 +1889,7 @@ const Zr = ({
     (u) => u.get(Y.TokenManager)
   ), s = De(
     (u) => u.get(Y.Authenticator)
-  ), [n, a] = p(null), [c, i] = p(!1), [d, y] = p(!0), [S, h] = p(!1), [U, A] = p(!1), [w, E] = p(""), [P, M] = p(""), [$, V] = p(null), [_, b] = p(!1), [m, R] = p(!1), [H, O] = p(null), N = lt(Mt), T = {
+  ), [n, a] = p(null), [c, i] = p(!1), [d, y] = p(!0), [k, h] = p(!1), [U, A] = p(!1), [w, E] = p(""), [P, M] = p(""), [B, H] = p(null), [_, b] = p(!1), [m, R] = p(!1), [V, L] = p(null), N = lt(Mt), T = {
     hasContextualLogin: typeof s.loginWithContext == "function",
     hasFlexibleLogin: typeof s.loginFlexible == "function",
     hasSocialLogin: typeof s.loginSocial == "function",
@@ -1880,7 +1903,7 @@ const Zr = ({
       if (f)
         try {
           const D = typeof f == "string" ? JSON.parse(f) : f;
-          V(D);
+          H(D);
         } catch (D) {
           console.warn("Erro ao carregar contexto salvo:", D);
         }
@@ -1893,14 +1916,14 @@ const Zr = ({
   }, te = () => {
     R(!1);
   }, se = (u) => {
-    i(!1), h(!1), t.clearToken(), u && t.clearUsernameAndPassword(), T.hasContextSupport && t.clearContext && t.clearContext(), M(""), V(null), E(""), A(!1), R(!1), N.clearAllValues();
+    i(!1), h(!1), t.clearToken(), u && t.clearUsernameAndPassword(), T.hasContextSupport && t.clearContext && t.clearContext(), M(""), H(null), E(""), A(!1), R(!1), N.clearAllValues();
   }, g = async (u, l, f) => {
     try {
       i(!0), h(!1);
       const D = await s.login(u, l);
       t.saveToken(D), f && t.saveUsernameAndPassword(u, l), t.saveUsername(u), M(u), a(D), i(!1), h(!0);
     } catch (D) {
-      i(!1), h(!1), Le(D) && (M(u), R(!0)), E(oe(D)), A(!0);
+      i(!1), h(!1), Oe(D) && (M(u), R(!0)), E(oe(D)), A(!0);
     }
   }, v = async (u, l = !1) => {
     if (!T.hasContextualLogin || !s.loginWithContext)
@@ -1909,7 +1932,7 @@ const Zr = ({
       i(!0), h(!1);
       const { context: f, user: D, ...z } = await s.loginWithContext(u);
       if (z.mfa_required) {
-        O(z.challenge_token ?? null), b(!0), M(u.email), i(!1);
+        L(z.challenge_token ?? null), b(!0), M(u.email), i(!1);
         return;
       }
       const Ae = {
@@ -1917,24 +1940,24 @@ const Zr = ({
         ext_expires_in: z.expires_in,
         ...z
       };
-      t.saveToken(Ae), l ? t.saveUsernameAndPassword(u.email, u.password) : t.clearUsernameAndPassword(), t.saveUsername(u.email), T.hasContextSupport && t.saveContext && f && (t.saveContext(JSON.stringify(f)), V(f)), M(u.email), a(Ae), i(!1), h(!0);
+      t.saveToken(Ae), l ? t.saveUsernameAndPassword(u.email, u.password) : t.clearUsernameAndPassword(), t.saveUsername(u.email), T.hasContextSupport && t.saveContext && f && (t.saveContext(JSON.stringify(f)), H(f)), M(u.email), a(Ae), i(!1), h(!0);
     } catch (f) {
-      throw i(!1), h(!1), Le(f) && (M(u.email), R(!0)), E(oe(f)), A(!0), f;
+      throw i(!1), h(!1), Oe(f) && (M(u.email), R(!0)), E(oe(f)), A(!0), f;
     }
   }, K = async (u) => {
     if (!s.verifyMfa)
       throw new Error("verifyMfa não suportado por esta implementação do ArchbaseAuthenticator");
-    if (!H)
+    if (!V)
       throw new Error("Nenhum desafio de MFA pendente");
     try {
       i(!0), E(""), A(!1);
-      const l = await s.verifyMfa(H, u);
-      t.saveToken(l), t.saveUsername(P), a(l), b(!1), O(null), i(!1), h(!0);
+      const l = await s.verifyMfa(V, u);
+      t.saveToken(l), t.saveUsername(P), a(l), b(!1), L(null), i(!1), h(!0);
     } catch (l) {
       throw i(!1), E(oe(l)), A(!0), l;
     }
   }, W = () => {
-    b(!1), O(null), E(""), A(!1);
+    b(!1), L(null), E(""), A(!1);
   }, we = async (u, l = !1) => {
     if (!T.hasFlexibleLogin || !s.loginFlexible)
       throw new Error("Login flexível não suportado por esta implementação do ArchbaseAuthenticator");
@@ -1945,9 +1968,9 @@ const Zr = ({
         ext_expires_in: z.expires_in,
         ...z
       };
-      t.saveToken(Ae), l && t.saveUsernameAndPassword(u.identifier, u.password), t.saveUsername(D.email || u.identifier), T.hasContextSupport && t.saveContext && f && (t.saveContext(JSON.stringify(f)), V(f)), M(D.email || u.identifier), a(Ae), i(!1), h(!0);
+      t.saveToken(Ae), l && t.saveUsernameAndPassword(u.identifier, u.password), t.saveUsername(D.email || u.identifier), T.hasContextSupport && t.saveContext && f && (t.saveContext(JSON.stringify(f)), H(f)), M(D.email || u.identifier), a(Ae), i(!1), h(!0);
     } catch (f) {
-      throw i(!1), h(!1), Le(f) && (M(u.identifier), R(!0)), E(oe(f)), A(!0), f;
+      throw i(!1), h(!1), Oe(f) && (M(u.identifier), R(!0)), E(oe(f)), A(!0), f;
     }
   }, he = async (u) => {
     if (!T.hasSocialLogin || !s.loginSocial)
@@ -1959,11 +1982,11 @@ const Zr = ({
         ext_expires_in: D.expires_in,
         ...D
       };
-      t.saveToken(z), t.saveUsername(f.email), T.hasContextSupport && t.saveContext && l && (t.saveContext(JSON.stringify(l)), V(l)), M(f.email), a(z), i(!1), h(!0);
+      t.saveToken(z), t.saveUsername(f.email), T.hasContextSupport && t.saveContext && l && (t.saveContext(JSON.stringify(l)), H(l)), M(f.email), a(z), i(!1), h(!0);
     } catch (l) {
       throw i(!1), h(!1), E(oe(l)), A(!0), l;
     }
-  }, B = async (u) => {
+  }, $ = async (u) => {
     if (!T.hasRegistration || !s.register)
       throw new Error("Registro não suportado por esta implementação do ArchbaseAuthenticator");
     try {
@@ -1996,7 +2019,7 @@ const Zr = ({
     login: g,
     logout: se,
     username: P,
-    isAuthenticated: S,
+    isAuthenticated: k,
     isAuthenticating: c,
     isInitializing: d,
     isError: U,
@@ -2007,7 +2030,7 @@ const Zr = ({
     loginWithContext: T.hasContextualLogin ? v : void 0,
     loginFlexible: T.hasFlexibleLogin ? we : void 0,
     loginSocial: T.hasSocialLogin ? he : void 0,
-    register: T.hasRegistration ? B : void 0,
+    register: T.hasRegistration ? $ : void 0,
     getSupportedContexts: ce,
     validateContext: ne,
     // MFA / segundo fator (2 passos)
@@ -2018,7 +2041,7 @@ const Zr = ({
     passwordChangeRequired: m,
     clearPasswordChangeRequired: te,
     // Informações de contexto
-    context: $,
+    context: B,
     // Detecção de capacidades
     capabilities: T
   };
@@ -2044,9 +2067,9 @@ const Zr = ({
         throw n(oe(y)), t(!0), y;
       }
     },
-    resetPassword: async (d, y, S) => {
+    resetPassword: async (d, y, k) => {
       try {
-        return await r.resetPassword(d, y, S);
+        return await r.resetPassword(d, y, k);
       } catch (h) {
         throw n(oe(h)), t(!0), h;
       }
@@ -2068,25 +2091,25 @@ const Zr = ({
     /* @__PURE__ */ o(Ce, { height: 36, width: 100, radius: "sm" }),
     /* @__PURE__ */ o(Ce, { height: 36, width: 100, radius: "sm" })
   ] })
-] }) }), Ye = Ve(null), rs = ({
+] }) }), Ye = He(null), rs = ({
   children: r,
   user: e,
   onError: t
 }) => {
-  const [s, n] = p(!1), [a, c] = p(null), [i] = p([]), d = e?.isAdministrator || !1, y = Ie((w) => d ? !0 : i.includes(w), [i, d]), S = Ie((w) => d ? !0 : w.some((E) => i.includes(E)), [i, d]), h = Ie((w) => d ? !0 : w.every((E) => i.includes(E)), [i, d]), U = Ie((w) => {
+  const [s, n] = p(!1), [a, c] = p(null), [i] = p([]), d = e?.isAdministrator || !1, y = Ie((w) => d ? !0 : i.includes(w), [i, d]), k = Ie((w) => d ? !0 : w.some((E) => i.includes(E)), [i, d]), h = Ie((w) => d ? !0 : w.every((E) => i.includes(E)), [i, d]), U = Ie((w) => {
     c(w), w && t && t(w);
   }, [t]), A = {
     user: e,
     isLoading: s,
     hasGlobalPermission: y,
-    hasAnyGlobalPermission: S,
+    hasAnyGlobalPermission: k,
     hasAllGlobalPermissions: h,
     isAdmin: d,
     error: a,
     setError: U
   };
   return /* @__PURE__ */ o(Ye.Provider, { value: A, children: r });
-}, Nt = Ve(null), Pr = ({
+}, Nt = He(null), Pr = ({
   children: r,
   resourceName: e,
   resourceDescription: t,
@@ -2096,16 +2119,16 @@ const Zr = ({
   onSecurityReady: c,
   onError: i
 }) => {
-  const d = He(Ye);
+  const d = Ve(Ye);
   if (!d)
     throw new Error("ArchbaseViewSecurityProvider deve ser usado dentro de um ArchbaseSecurityProvider");
-  const { user: y, isAdmin: S } = d, [h, U] = p(null), [A, w] = p(!0), [E, P] = p(null);
+  const { user: y, isAdmin: k } = d, [h, U] = p(null), [A, w] = p(!0), [E, P] = p(null);
   if (it.useEffect(() => {
     if (!y) {
       w(!1);
       return;
     }
-    const m = new vt(e, t, S);
+    const m = new vt(e, t, k);
     (async () => {
       w(!0);
       try {
@@ -2113,11 +2136,11 @@ const Zr = ({
           U(m), w(!1), c && c(m);
         });
       } catch {
-        const O = m.getError() || "Erro ao carregar permissões";
-        P(O), w(!1), i && i(O);
+        const L = m.getError() || "Erro ao carregar permissões";
+        P(L), w(!1), i && i(L);
       }
     })();
-  }, [e, t, y, S, c, i]), A)
+  }, [e, t, y, k, c, i]), A)
     return a ? /* @__PURE__ */ o(ie, { children: a }) : /* @__PURE__ */ o(Cr, {});
   if (E)
     return /* @__PURE__ */ o("div", { className: "archbase-security-error", children: /* @__PURE__ */ C("div", { children: [
@@ -2149,12 +2172,12 @@ const Zr = ({
   };
   return /* @__PURE__ */ o(Nt.Provider, { value: b, children: r });
 }, Tr = () => {
-  const r = He(Ye);
+  const r = Ve(Ye);
   if (!r)
     throw new Error("useArchbaseSecurity deve ser usado dentro de um ArchbaseSecurityProvider");
   return r;
 }, Xe = () => {
-  const r = He(Nt);
+  const r = Ve(Nt);
   if (!r)
     throw new Error("useArchbaseViewSecurity deve ser usado dentro de um ArchbaseViewSecurityProvider");
   return r;
@@ -2184,7 +2207,7 @@ const Zr = ({
     checkAll: r.hasAllPermissions,
     isAdmin: Tr().isAdmin
   };
-}, Bt = ({
+}, $t = ({
   children: r,
   actionName: e,
   requiredPermissions: t = [],
@@ -2193,10 +2216,10 @@ const Zr = ({
   fallback: a = null,
   autoRegister: c = !0
 }) => {
-  const { hasPermission: i, hasAnyPermission: d, hasAllPermissions: y, registerAction: S } = Xe();
+  const { hasPermission: i, hasAnyPermission: d, hasAllPermissions: y, registerAction: k } = Xe();
   X(() => {
-    c && e && n && S(e, n);
-  }, [e, n, c, S]);
+    c && e && n && k(e, n);
+  }, [e, n, c, k]);
   let h = !1;
   return e ? h = i(e) : t.length > 0 ? h = s ? y(t) : d(t) : h = !0, h ? /* @__PURE__ */ o(ie, { children: r }) : /* @__PURE__ */ o(ie, { children: a });
 }, os = ({
@@ -2211,7 +2234,7 @@ const Zr = ({
   size: d = "medium",
   type: y = "button"
 }) => {
-  const S = () => {
+  const k = () => {
     const U = "archbase-secure-btn", A = `archbase-secure-btn--${i}`, w = `archbase-secure-btn--${d}`;
     return `${U} ${A} ${w} ${a}`.trim();
   }, h = () => {
@@ -2238,7 +2261,7 @@ const Zr = ({
     };
   };
   return /* @__PURE__ */ o(
-    Bt,
+    $t,
     {
       actionName: r,
       actionDescription: e,
@@ -2249,7 +2272,7 @@ const Zr = ({
           type: y,
           onClick: s,
           disabled: n,
-          className: S(),
+          className: k(),
           style: h(),
           children: t
         }
@@ -2265,7 +2288,7 @@ const Zr = ({
   fallbackText: a = "Campo não disponível",
   fallbackComponent: c
 }) => e ? /* @__PURE__ */ o(
-  Bt,
+  $t,
   {
     actionName: e,
     actionDescription: t,
@@ -2306,7 +2329,7 @@ export {
   xr as AccessIntervalDto,
   At as AccessScheduleDto,
   qe as AccessTokenDto,
-  kr as ActionDto,
+  Sr as ActionDto,
   Ke as ApiTokenDto,
   Dt as ArchbaseAccessTokenService,
   Ut as ArchbaseApiTokenService,
@@ -2316,7 +2339,7 @@ export {
   qr as ArchbaseLogin,
   Yr as ArchbaseMfaSetup,
   Tt as ArchbaseProfileService,
-  Bt as ArchbaseProtectedComponent,
+  $t as ArchbaseProtectedComponent,
   Xr as ArchbaseResetPassword,
   _t as ArchbaseResourceService,
   os as ArchbaseSecureActionButton,
@@ -2330,21 +2353,21 @@ export {
   pt as ArchbaseUsernameAndPassword,
   pt as ArchbaseUsernameAndPasswordImpl,
   Pr as ArchbaseViewSecurityProvider,
-  Oe as CONTEXT_STORAGE_KEY,
+  Le as CONTEXT_STORAGE_KEY,
   or as DefaultArchbaseTokenManager,
   Cr as DefaultSecurityLoading,
   le as ENCRYPTION_KEY,
   mt as FetchError,
-  Se as GroupDto,
+  ke as GroupDto,
   Kr as PermissionDto,
-  ke as ProfileDto,
-  St as ResourceDto,
+  Se as ProfileDto,
+  kt as ResourceDto,
   ye as SecurityDto,
   me as SecurityType,
   Ne as TOKEN_COOKIE_NAME,
   Er as TipoRecurso,
-  $e as USER_NAME,
-  Be as USER_NAME_AND_PASSWORD,
+  Be as USER_NAME,
+  $e as USER_NAME_AND_PASSWORD,
   Me as UserDto,
   Ge as UserGroupDto,
   gr as createInternalConfig,
@@ -2357,7 +2380,7 @@ export {
   ir as generateRandomString,
   ft as getRandomInteger,
   wr as getRefreshExpiresIn,
-  Le as isCredentialsExpiredError,
+  Oe as isCredentialsExpiredError,
   lr as postWithXForm,
   dr as redirectToLogin,
   fr as redirectToLogout,

package/dist/src/ArchbaseSecurityDiagnosticsService.d.ts

@@ -1,5 +1,5 @@
 import { ArchbaseRemoteApiClient } from '@archbase/data';
-import { ArchbaseAccessDecision, ArchbaseAccessOverview, ArchbaseOverviewItemPage, ArchbaseOverviewMetric, ArchbaseGroupReport, ArchbaseReachEntry, ArchbaseTreeBranch, ArchbaseTreeNodePage, ArchbaseEffectiveAccessReport, ArchbaseSimulationRequest } from './SecurityDiagnosticsDomain';
+import { ArchbaseSecurityEventPage, ArchbaseSecurityEventType, ArchbaseAccessDecision, ArchbaseAccessOverview, ArchbaseOverviewItemPage, ArchbaseOverviewMetric, ArchbaseGroupReport, ArchbaseReachEntry, ArchbaseTreeBranch, ArchbaseTreeNodePage, ArchbaseEffectiveAccessReport, ArchbaseSimulationRequest } from './SecurityDiagnosticsDomain';
 /**
  * Leitura do diagnóstico de acesso — `/api/v1/security/diagnostics/*`.
  *
@@ -17,6 +17,11 @@ export declare class ArchbaseSecurityDiagnosticsService {
     constructor(client: ArchbaseRemoteApiClient);
     protected configureHeaders(): Record<string, string>;
     protected getEndpoint(): string;
+    /**
+     * Base própria: a trilha vive fora do diagnóstico porque tem chave própria no backend
+     * ({@code archbase.security.audit.enabled}) e some inteira quando ela está desligada.
+     */
+    protected getAuditEndpoint(): string;
     /** Retrato do tenant: contagens do catálogo e o estado das proteções configuráveis. */
     getOverview(): Promise<ArchbaseAccessOverview>;
     /**
@@ -61,4 +66,21 @@ export declare class ArchbaseSecurityDiagnosticsService {
      * que precisa mudar para o acesso passar a existir.
      */
     simulate(request: ArchbaseSimulationRequest): Promise<ArchbaseAccessDecision>;
+    /**
+     * Os acontecimentos de segurança, do mais recente para o mais antigo.
+     *
+     * <p>Sem período informado o servidor assume os últimos trinta dias — a primeira consulta de
+     * quem abre a tela não deve varrer a tabela inteira.
+     *
+     * <p>Devolve 403 para quem não é administrador, e 404 quando a trilha está desligada: os dois
+     * casos precisam ser distinguidos na tela, porque significam coisas diferentes.
+     */
+    getAuditEvents(options?: {
+        usuario?: string;
+        tipo?: ArchbaseSecurityEventType;
+        inicio?: string;
+        fim?: string;
+        page?: number;
+        size?: number;
+    }): Promise<ArchbaseSecurityEventPage>;
 }

package/dist/src/SecurityDiagnosticsDomain.d.ts

@@ -219,3 +219,32 @@ export interface ArchbaseReachEntry {
     kind: string;
     situation: string;
 }
+/**
+ * O que a trilha registra além das alterações.
+ *
+ * <p>Entrar, errar a senha e ter acesso negado não mudam tabela nenhuma — a trilha de alterações,
+ * por construção, não os vê. São eles que respondem "quem tentou o quê", enquanto a outra metade
+ * responde "quem mudou o quê".
+ */
+export type ArchbaseSecurityEventType = 'LOGIN' | 'LOGIN_FALHOU' | 'LOGOUT' | 'ACESSO_NEGADO' | 'SIMULACAO';
+export interface ArchbaseSecurityEvent {
+    id: string;
+    tipo: ArchbaseSecurityEventType;
+    dataHora: string;
+    /** Pode não corresponder a ninguém: numa tentativa com e-mail inexistente é esse o dado útil. */
+    usuario?: string | null;
+    tenantId?: string | null;
+    origem?: string | null;
+    recurso?: string | null;
+    acao?: string | null;
+    /** O porquê: o portão que recusou, ou o tipo da falha de autenticação. */
+    detalhe?: string | null;
+    sucesso: boolean;
+}
+export interface ArchbaseSecurityEventPage {
+    content: ArchbaseSecurityEvent[];
+    totalElements: number;
+    totalPages: number;
+    number: number;
+    size: number;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archbase/security",
-  "version": "4.2.5",
+  "version": "4.3.0",
   "description": "Security and authentication components for Archbase React",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -37,10 +37,10 @@
     "reflect-metadata": "^0.1.13",
     "rxjs": "^7.8.2",
     "uuid": "^9.0.1",
-    "@archbase/components": "4.2.5",
-    "@archbase/core": "4.2.5",
-    "@archbase/data": "4.2.5",
-    "@archbase/layout": "4.2.5"
+    "@archbase/components": "4.3.0",
+    "@archbase/core": "4.3.0",
+    "@archbase/data": "4.3.0",
+    "@archbase/layout": "4.3.0"
   },
   "devDependencies": {
     "@types/crypto-js": "^4.1.1",