@oondemand/oon-core-front 0.7.6 → 0.7.9

package/dist/{chunk-XEIPX33G.js → chunk-3EZ6GRFQ.js}

@@ -8,7 +8,7 @@ import {
   CoreUsersAccess,
   MissingRenderer,
   resolveComponent
-} from "./chunk-A6FWKKZA.js";
+} from "./chunk-JXU6W3ZU.js";
 import {
   OON_RESERVED_ROUTES,
   defineOonNavigation,
@@ -29,7 +29,7 @@ import {
   useCoreMetadata,
   useOonApi,
   useOonAuth
-} from "./chunk-TTQQMP5K.js";
+} from "./chunk-3JBDEAKP.js";
 import {
   OonThemeProvider
 } from "./chunk-VC6NTMZS.js";
@@ -105,55 +105,89 @@ import { useEffect as useEffect2, useState as useState2 } from "react";
 import { Box as Box2, Text as Text2 } from "@chakra-ui/react";
 
 // src/security/AcceptInvitePage.tsx
-import { useEffect, useState } from "react";
+import { useEffect, useState, useRef } from "react";
 import { Box, Button, Flex, Heading, Input, Text, VStack } from "@chakra-ui/react";
-import { Link, useLocation } from "react-router-dom";
+import { useLocation } from "react-router-dom";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 function AcceptInvitePage() {
   const { http } = useOonApi();
   const location = useLocation();
-  const token = new URLSearchParams(location.search).get("token") || "";
+  const auth = useOonAuth();
+  const token = new URLSearchParams(location.hash.slice(1)).get("token") || new URLSearchParams(location.search).get("token") || "";
   const [invitation, setInvitation] = useState(null);
+  const [sessionEmail, setSessionEmail] = useState("");
+  const operationKey = useRef(crypto.randomUUID());
+  const [registration, setRegistration] = useState({ nome: "", userDocument: "", phone: "", termsAccepted: false });
   const [password, setPassword] = useState("");
   const [confirm, setConfirm] = useState("");
   const [message, setMessage] = useState(null);
+  const [inspectionAttempt, setInspectionAttempt] = useState(0);
+  const [submitting, setSubmitting] = useState(false);
   const [done, setDone] = useState(false);
   const [loading, setLoading] = useState(true);
   useEffect(() => {
     let active = true;
+    operationKey.current = crypto.randomUUID();
+    setLoading(true);
+    setInvitation(null);
+    setDone(false);
+    setMessage(null);
+    setPassword("");
+    setConfirm("");
     if (!token) {
       setMessage("Link de convite inv\xE1lido.");
       setLoading(false);
       return;
     }
-    http.get(`/core/invitations/${encodeURIComponent(token)}`).then((response) => {
-      if (active) setInvitation(response.data.invitation);
-    }).catch(() => {
-      if (active) setMessage("Este convite \xE9 inv\xE1lido, expirou ou j\xE1 foi utilizado.");
+    http.post("/core/invitations/inspect", { token }, { headers: { "x-oon-tenant-id": false } }).then((response) => {
+      if (active) {
+        setInvitation(response.data.invitation);
+        setSessionEmail(String(response.data.invitation.sessionUser?.email || "").trim().toLowerCase());
+      }
+    }).catch((error) => {
+      if (active) setMessage(error?.status === 410 ? "Este convite \xE9 inv\xE1lido, expirou, foi revogado ou j\xE1 foi utilizado. Convites anteriores ao corte tamb\xE9m podem ter sido invalidados. Solicite um novo convite ao administrador." : "N\xE3o foi poss\xEDvel validar o convite. Tente novamente.");
     }).finally(() => {
       if (active) setLoading(false);
     });
     return () => {
       active = false;
     };
-  }, [http, token]);
+  }, [http, token, inspectionAttempt]);
+  function clearSession() {
+    auth.clearSession();
+    setSessionEmail("");
+  }
+  const sameSession = Boolean(sessionEmail && sessionEmail === invitation?.email.toLowerCase());
+  const otherSession = Boolean(sessionEmail && !sameSession);
+  const register = invitation?.accountExists === false;
   async function submit(event) {
     event.preventDefault();
+    if (submitting || otherSession || auth.status === "loading") return;
     setMessage(null);
-    if (password.length < 8) {
+    if (!sameSession && register && password.length < 8) {
       setMessage("A senha deve possuir pelo menos 8 caracteres.");
       return;
     }
-    if (password !== confirm) {
+    if (!sameSession && register && password !== confirm) {
       setMessage("As senhas informadas n\xE3o conferem.");
       return;
     }
+    setSubmitting(true);
     try {
-      await http.post(`/core/invitations/${encodeURIComponent(token)}/accept`, { password });
+      await http.post("/core/invitations/accept", {
+        token,
+        ...invitation?.version !== void 0 ? { version: invitation.version } : {},
+        ...register && invitation?.registrationRequired ? { registration: { ...registration, termsVersion: "2026-08-18", privacyVersion: "2026-08-18" } } : {},
+        intent: sameSession ? "session" : register ? "register" : "authenticate",
+        ...sameSession ? {} : { password }
+      }, { headers: { "idempotency-key": operationKey.current, ...sameSession ? {} : { Authorization: false }, "x-oon-tenant-id": false } });
       setDone(true);
-      setMessage("Convite aceito e senha definida. Voc\xEA j\xE1 pode entrar na Central.");
+      setMessage("Convite aceito. Seu acesso est\xE1 dispon\xEDvel.");
     } catch (error) {
+      if (sameSession && error?.status === 401) clearSession();
       setMessage(error?.message || "N\xE3o foi poss\xEDvel concluir o convite.");
+    } finally {
+      setSubmitting(false);
     }
   }
   return /* @__PURE__ */ jsx(Flex, { minH: "100vh", align: "center", justify: "center", bg: "#F5F8FA", px: 4, children: /* @__PURE__ */ jsx(Box, { width: "100%", maxW: "480px", bg: "white", borderWidth: "1px", borderRadius: "18px", p: { base: 6, md: 9 }, children: /* @__PURE__ */ jsxs(VStack, { align: "stretch", gap: 5, children: [
@@ -171,20 +205,50 @@ function AcceptInvitePage() {
           invitation.roleName || invitation.roleCode
         ] })
       ] }),
-      /* @__PURE__ */ jsx("form", { onSubmit: (event) => void submit(event), children: /* @__PURE__ */ jsxs(VStack, { align: "stretch", gap: 4, children: [
-        /* @__PURE__ */ jsxs(Box, { children: [
-          /* @__PURE__ */ jsx(Text, { mb: 1, fontSize: "sm", fontWeight: "600", children: "Nova senha" }),
-          /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "new-password", value: password, onChange: (event) => setPassword(event.target.value), required: true })
+      otherSession ? /* @__PURE__ */ jsxs(Box, { children: [
+        /* @__PURE__ */ jsxs(Text, { children: [
+          "Voc\xEA est\xE1 conectado como ",
+          sessionEmail,
+          ". Este convite \xE9 para ",
+          invitation.email,
+          "."
         ] }),
-        /* @__PURE__ */ jsxs(Box, { children: [
-          /* @__PURE__ */ jsx(Text, { mb: 1, fontSize: "sm", fontWeight: "600", children: "Confirmar senha" }),
-          /* @__PURE__ */ jsx(Input, { type: "password", autoComplete: "new-password", value: confirm, onChange: (event) => setConfirm(event.target.value), required: true })
+        /* @__PURE__ */ jsx(Button, { onClick: clearSession, children: "Trocar de conta" })
+      ] }) : /* @__PURE__ */ jsx("form", { onSubmit: (event) => void submit(event), children: /* @__PURE__ */ jsxs(VStack, { align: "stretch", gap: 4, children: [
+        register && invitation.registrationRequired ? /* @__PURE__ */ jsxs(Box, { children: [
+          /* @__PURE__ */ jsx(Text, { children: "Complete seu cadastro para aceitar este convite. N\xE3o ser\xE1 criada outra organiza\xE7\xE3o." }),
+          /* @__PURE__ */ jsx(Input, { "aria-label": "Nome completo", placeholder: "Nome completo", required: true, value: registration.nome, onChange: (e) => setRegistration({ ...registration, nome: e.target.value }) }),
+          /* @__PURE__ */ jsx(Input, { "aria-label": "CPF", placeholder: "CPF", required: true, value: registration.userDocument, onChange: (e) => setRegistration({ ...registration, userDocument: e.target.value }) }),
+          /* @__PURE__ */ jsx(Input, { "aria-label": "Telefone", placeholder: "Telefone com DDD", required: true, value: registration.phone, onChange: (e) => setRegistration({ ...registration, phone: e.target.value }) }),
+          /* @__PURE__ */ jsxs("label", { children: [
+            /* @__PURE__ */ jsx("input", { type: "checkbox", required: true, checked: registration.termsAccepted, onChange: (e) => setRegistration({ ...registration, termsAccepted: e.target.checked }) }),
+            " Aceito os termos e a pol\xEDtica de privacidade da plataforma (2026-08-18)."
+          ] })
+        ] }) : null,
+        !sameSession ? /* @__PURE__ */ jsxs(Box, { children: [
+          /* @__PURE__ */ jsx(Text, { mb: 1, fontSize: "sm", fontWeight: "600", children: register ? "Nova senha" : "Senha atual" }),
+          /* @__PURE__ */ jsx(Input, { "aria-label": register ? "Nova senha" : "Senha atual", type: "password", autoComplete: register ? "new-password" : "current-password", value: password, onChange: (event) => setPassword(event.target.value), required: true })
+        ] }) : /* @__PURE__ */ jsxs(Text, { children: [
+          "Voc\xEA est\xE1 conectado como ",
+          sessionEmail,
+          ". Confirme o aceite para liberar este acesso."
         ] }),
-        /* @__PURE__ */ jsx(Button, { type: "submit", children: "Concluir primeiro acesso" })
+        !sameSession && register ? /* @__PURE__ */ jsxs(Box, { children: [
+          /* @__PURE__ */ jsx(Text, { mb: 1, fontSize: "sm", fontWeight: "600", children: "Confirmar senha" }),
+          /* @__PURE__ */ jsx(Input, { "aria-label": "Confirmar senha", type: "password", autoComplete: "new-password", value: confirm, onChange: (event) => setConfirm(event.target.value), required: true })
+        ] }) : null,
+        !register && !sameSession ? /* @__PURE__ */ jsx(Text, { fontSize: "sm", children: "Use a senha atual da sua conta Oon. Se esqueceu a senha, recupere-a pelo login da plataforma e depois reabra este convite." }) : null,
+        invitation.blockedReason ? /* @__PURE__ */ jsxs(Text, { role: "alert", children: [
+          "O aceite est\xE1 indispon\xEDvel (",
+          invitation.blockedReason,
+          "). Solicite regulariza\xE7\xE3o ao administrador."
+        ] }) : null,
+        /* @__PURE__ */ jsx(Button, { type: "submit", disabled: submitting || auth.status === "loading" || Boolean(invitation.allowedActions && !invitation.allowedActions.includes("accept")), children: submitting ? "Aceitando\u2026" : "Aceitar convite" })
       ] }) })
     ] }) : null,
     message ? /* @__PURE__ */ jsx(Box, { role: "status", bg: done ? "green.50" : "red.50", borderRadius: "md", p: 3, children: /* @__PURE__ */ jsx(Text, { fontSize: "sm", children: message }) }) : null,
-    done ? /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsx(Link, { to: "/login", children: "Ir para o login" }) }) : null
+    !loading && !invitation && token ? /* @__PURE__ */ jsx(Button, { onClick: () => setInspectionAttempt((value2) => value2 + 1), children: "Tentar novamente" }) : null,
+    done ? /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsx("a", { href: sameSession ? "/" : "/login", children: sameSession ? "Abrir aplicativo" : "Ir para o login" }) }) : null
   ] }) }) });
 }
 
@@ -212,9 +276,9 @@ function AcceptInviteCentralPage() {
 }
 
 // src/security/OnboardingPage.tsx
-import { useEffect as useEffect3, useRef, useState as useState3 } from "react";
+import { useEffect as useEffect3, useRef as useRef2, useState as useState3 } from "react";
 import { Box as Box3, Button as Button2, Flex as Flex2, Heading as Heading2, Input as Input2, Text as Text3, VStack as VStack2 } from "@chakra-ui/react";
-import { Link as Link2, useLocation as useLocation2 } from "react-router-dom";
+import { Link, useLocation as useLocation2 } from "react-router-dom";
 import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 var TERMS_VERSION = "2026-08-18";
 var PRIVACY_VERSION = "2026-08-18";
@@ -234,7 +298,7 @@ function OnboardingPage({ baseUrl, mode }) {
   const [accepted, setAccepted] = useState3(false);
   const [message, setMessage] = useState3("");
   const [busy, setBusy] = useState3(false);
-  const confirmationToken = useRef(null);
+  const confirmationToken = useRef2(null);
   useEffect3(() => {
     if (mode !== "confirm") return;
     const token = new URLSearchParams(location.search).get("token");
@@ -282,7 +346,7 @@ function OnboardingPage({ baseUrl, mode }) {
       /* @__PURE__ */ jsx3(Button2, { type: "submit", bg: "#07262E", color: "white", disabled: busy || !accepted, children: busy ? "Enviando..." : "Criar acesso" })
     ] }) }) : null,
     message ? /* @__PURE__ */ jsx3(Box3, { role: "status", bg: "blue.50", color: "blue.800", borderRadius: "10px", p: 4, children: message }) : null,
-    /* @__PURE__ */ jsx3(Text3, { fontSize: "sm", children: /* @__PURE__ */ jsx3(Link2, { to: "/login", children: "Voltar para o login" }) })
+    /* @__PURE__ */ jsx3(Text3, { fontSize: "sm", children: /* @__PURE__ */ jsx3(Link, { to: "/login", children: "Voltar para o login" }) })
   ] }) }) });
 }
 
@@ -710,7 +774,7 @@ function Sidebar({ app, menu, registry }) {
 // package.json
 var package_default = {
   name: "@oondemand/oon-core-front",
-  version: "0.7.6",
+  version: "0.7.9",
   repository: {
     type: "git",
     url: "git+https://github.com/oondemand/oon-platform.git",
@@ -1182,7 +1246,7 @@ function AppAccessGuard({ children }) {
 // src/security/LoginPage.tsx
 import { useState as useState6 } from "react";
 import { Box as Box7, Button as Button5, Flex as Flex6, Heading as Heading4, Input as Input3, SimpleGrid, Text as Text7, VStack as VStack4 } from "@chakra-ui/react";
-import { Link as Link3, Navigate as Navigate2, useLocation as useLocation4 } from "react-router-dom";
+import { Link as Link2, Navigate as Navigate2, useLocation as useLocation4 } from "react-router-dom";
 import { jsx as jsx12, jsxs as jsxs8 } from "react/jsx-runtime";
 function tenantOptions(error) {
   const details = error.details;
@@ -1299,7 +1363,7 @@ function LoginPage({ app, onboardingEnabled = false }) {
     tenants.length <= 1 ? /* @__PURE__ */ jsx12(Button5, { type: "submit", bg: "#07262E", color: "white", _hover: { bg: "#0B3843" }, disabled: submitting || !email.trim() || !password, children: submitting ? "Validando acesso..." : "Entrar" }) : null,
     app.kind === "portal-cockpit" && onboardingEnabled && tenants.length <= 1 ? /* @__PURE__ */ jsxs8(Text7, { textAlign: "center", fontSize: "sm", color: "gray.600", children: [
       "Ainda n\xE3o possui acesso? ",
-      /* @__PURE__ */ jsx12(Link3, { to: "/cadastro", children: "Criar conta" })
+      /* @__PURE__ */ jsx12(Link2, { to: "/cadastro", children: "Criar conta" })
     ] }) : null
   ] }) }) }) });
 }
@@ -1893,7 +1957,7 @@ function OonApp({ config }) {
       getTenantId: () => tenantStorage2.get(),
       onUnauthorized: () => {
         storage2.clear();
-        if (config.runtimeMode === "local") return;
+        if (config.runtimeMode === "local" || window.location.pathname === "/accept-invite") return;
         if (externalLoginUrl) {
           window.location.href = externalLoginUrl;
           return;
@@ -2103,4 +2167,4 @@ export {
   appDefinitionToConfig,
   startOonApp
 };
-//# sourceMappingURL=chunk-XEIPX33G.js.map
+//# sourceMappingURL=chunk-3EZ6GRFQ.js.map