@marinoscar/platform-web 0.1.0-next.3 → 0.1.0-next.4

package/dist/nodes/headless/use-visible-polling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-visible-polling.js","sourceRoot":"","sources":["../../../src/nodes/headless/use-visible-polling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAE1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAoB,EAAE,UAAkB;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,WAAW,CAAC,OAAO,GAAG,QAAQ,CAAC;IAE/B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO;QAE5B,IAAI,KAAK,GAA0C,IAAI,CAAC;QAExD,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,yDAAyD;YACzD,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;YAC3B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;YAC9B,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YACD,qEAAqE;YACrE,mEAAmE;YACnE,WAAW,CAAC,OAAO,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;QACV,CAAC,CAAC;QAEF,0DAA0D;QAC1D,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,KAAK,EAAE,CAAC;QAC9B,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QAElE,OAAO,GAAG,EAAE;YACV,IAAI,EAAE,CAAC;YACP,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;QACvE,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;AACnB,CAAC"}

package/dist/nodes/headless/use-worker-nodes.d.ts

@@ -0,0 +1,207 @@
+/**
+ * The worker fleet, its credentials, and the three writes (issue #271, epic #254;
+ * moved into `@marinoscar/platform-web/jobs` by #854, then into `@marinoscar/platform-web/nodes` by #881 from the reference app's
+ * `hooks/useWorkerNodes.ts`, behaviour unchanged; `useWorkerNode` is new).
+ *
+ * Three exports, one file, for the reason `useJobs.ts` gives for holding three:
+ * they are three views of ONE surface, and `WorkersPage` mounts all three
+ * together. What they genuinely share is the contract — every function resolves
+ * rather than throws, and a failure is a STRING the page renders — because every
+ * caller is a click handler that needs to branch, not a place to handle an
+ * exception that has already been captured for display.
+ *
+ * =============================================================================
+ * TWO READS, NOT ONE, AND THEY REFRESH TOGETHER BUT LOAD APART
+ * =============================================================================
+ *
+ * The fleet and the credential list are separate endpoints answering separate
+ * questions ("is every worker alive" / "which tokens exist"), and they are kept
+ * on separate hooks so that neither can gate the other. That matters in the
+ * exact situation this page exists for: if one combined hook loaded both and
+ * `GET /admin/nodes` were slow or failing, the credential list — and with it
+ * the revoke button, which is the incident-response action — would be behind
+ * that spinner or that error banner. An operator who has just been told a
+ * worker is compromised must not be waiting on a fleet query to cut its token
+ * off.
+ *
+ * The PAGE then refreshes both from one callback, so the two halves are never
+ * a poll apart.
+ *
+ * =============================================================================
+ * WHY THE FLEET POLLS AND THE CREDENTIALS DO NOT
+ * =============================================================================
+ *
+ * A node's health changes with nobody touching it — that is the entire content
+ * of a heartbeat — so the fleet is polled, through the shared
+ * `useVisiblePolling` (`use-visible-polling.ts`, exported by the headless
+ * entry). Credentials change only when a human creates or revokes one, and
+ * both of those go through `useNodeActions`, which refreshes on success. A
+ * timer over a list that cannot change on its own would be load with no
+ * information in it.
+ *
+ * The poll refreshes the credential list anyway when the page asks it to,
+ * because a SECOND administrator revoking a credential is a change this tab
+ * did not make — but the page, not this module, decides that.
+ */
+import type { NodesApi } from './api.js';
+import type { CreateNodeCredentialInput, NodeCredential, NodeCredentialCreated, WorkerNode } from './types.js';
+/**
+ * How often the fleet page re-asks, while its tab is in front.
+ *
+ * Ten seconds, matching `JOBS_POLL_INTERVAL_MS`, and chosen against what the
+ * data can actually do rather than by symmetry: `nodes.staleHeartbeatSeconds`
+ * is measured in tens of seconds at minimum, so a node cannot change health
+ * faster than that, and a shorter poll would re-derive the same verdict against
+ * a `groupBy` over the jobs table for nothing.
+ *
+ * @stability experimental
+ */
+export declare const WORKER_NODES_POLL_INTERVAL_MS = 10000;
+/**
+ * What {@link useWorkerNodes} returns.
+ *
+ * @stability experimental
+ */
+export interface UseWorkerNodesResult {
+    /** The whole fleet, ordered by name; emptied on an error. */
+    nodes: WorkerNode[];
+    /** The first read is in flight. */
+    isLoading: boolean;
+    /** The last failure as a sentence, or `null`. */
+    error: string | null;
+    /** Re-read WITHOUT raising the loading flag. What the poll calls. */
+    refresh: () => Promise<void>;
+}
+/**
+ * `GET /api/admin/nodes`.
+ *
+ * NO PARAMETERS, because the endpoint takes none: it returns the whole fleet
+ * ordered by name in one response. A filter argument here would be a promise
+ * this hook could only keep by filtering client-side, which the DataTable
+ * contract explicitly forbids a page from pretending to do.
+ *
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the fleet and its state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function useWorkerNodes(api?: NodesApi): UseWorkerNodesResult;
+/**
+ * What {@link useWorkerNode} returns.
+ *
+ * @stability experimental
+ */
+export interface UseWorkerNodeResult {
+    /** The node, or `null` before the first answer, on an error, or with no id. */
+    node: WorkerNode | null;
+    /** The first read is in flight. */
+    isLoading: boolean;
+    /** The last failure as a sentence, or `null`. */
+    error: string | null;
+    /** Re-read WITHOUT raising the loading flag. */
+    refresh: () => Promise<void>;
+}
+/**
+ * `GET /api/admin/nodes/:id`: one node, in the shape the list returns (#854).
+ *
+ * Health is computed by the same function against the same policy as the
+ * list, so this read and that one can never disagree about whether a node is
+ * stale. For a detail view of one machine (a fork's node page, a dashboard
+ * card); the Worker Nodes page reads the whole fleet instead. `null` asks for
+ * nothing. A 404 (the node was deleted) is an error string like any other,
+ * and the node is cleared, for the reason the fleet clears its rows.
+ *
+ * @param id - the node id, or `null` to ask for nothing.
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the node and its state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function useWorkerNode(id: string | null, api?: NodesApi): UseWorkerNodeResult;
+/**
+ * What {@link useNodeCredentials} returns.
+ *
+ * @stability experimental
+ */
+export interface UseNodeCredentialsResult {
+    /** Every credential, newest first, revoked ones included; emptied on an error. */
+    credentials: NodeCredential[];
+    /** The first read is in flight. */
+    isLoading: boolean;
+    /** The last failure as a sentence, or `null`. */
+    error: string | null;
+    /** Re-read without raising the loading flag. */
+    refresh: () => Promise<void>;
+}
+/**
+ * `GET /api/admin/nodes/credentials` — every credential in the deployment,
+ * newest first, including revoked ones.
+ *
+ * On its own hook and its own request, for the reason in the file header: the
+ * revoke button must not be gated behind the fleet query.
+ *
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the credentials and their state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function useNodeCredentials(api?: NodesApi): UseNodeCredentialsResult;
+/**
+ * What {@link useNodeActions} returns.
+ *
+ * @stability experimental
+ */
+export interface UseNodeActionsResult {
+    /** True while any one of the three writes is in flight. */
+    isWorking: boolean;
+    /** The last failure, or `null`. Cleared when a write starts. */
+    error: string | null;
+    /** Clears `error`. */
+    clearError: () => void;
+    /** `true` when the node was deleted. Never throws. */
+    removeNode: (id: string) => Promise<boolean>;
+    /**
+     * The created credential INCLUDING ITS RAW TOKEN, or `null` when the create
+     * failed. The caller must show that token immediately — see below.
+     */
+    createCredential: (input: CreateNodeCredentialInput) => Promise<NodeCredentialCreated | null>;
+    /** `true` when the credential was revoked. Never throws. */
+    revokeCredential: (id: string) => Promise<boolean>;
+}
+/**
+ * The three writes, sharing one in-flight flag and one error.
+ *
+ * ONE FLAG FOR ALL THREE, as `useJobActions` has one for its four: they all
+ * mutate the same fleet and the page re-reads it after any of them, so a second
+ * write started while the first is landing would be issued against state that
+ * is already wrong, and its result would be reported over the top of the first
+ * one's.
+ *
+ * =============================================================================
+ * `createCredential` RETURNS THE TOKEN. IT IS NOT STORED HERE.
+ * =============================================================================
+ *
+ * The raw `nod_…` token exists in exactly one response and can never be
+ * fetched again. This hook hands it straight back to the caller and keeps NO
+ * copy: holding it in state here would mean a secret living in a hook that
+ * outlives the dialog showing it, surviving every re-render and every
+ * subsequent action, for no benefit — the page needs it for exactly as long as
+ * the reveal dialog is open, and that dialog's own state is the shortest
+ * lifetime that works.
+ *
+ * `onChanged` fires AFTER the write resolves and never in parallel with it: a
+ * refresh racing its own mutation is how a revoked credential flickers back to
+ * "Active" for one frame.
+ *
+ * @param onChanged - called after a write lands (the page re-reads the fleet and the credentials).
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the three writes and their shared state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export declare function useNodeActions(onChanged?: () => void, api?: NodesApi): UseNodeActionsResult;
+//# sourceMappingURL=use-worker-nodes.d.ts.map

package/dist/nodes/headless/use-worker-nodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-worker-nodes.d.ts","sourceRoot":"","sources":["../../../src/nodes/headless/use-worker-nodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAOH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,cAAc,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE/G;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAwBpD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,mCAAmC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,qEAAqE;IACrE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,oBAAoB,CAiDnE;AAMD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,mCAAmC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,mBAAmB,CA2CpF;AAMD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,kFAAkF;IAClF,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,mCAAmC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gDAAgD;IAChD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,wBAAwB,CAyC3E;AAMD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;IACnB,gEAAgE;IAChE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sBAAsB;IACtB,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,sDAAsD;IACtD,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C;;;OAGG;IACH,gBAAgB,EAAE,CAChB,KAAK,EAAE,yBAAyB,KAC7B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC3C,4DAA4D;IAC5D,gBAAgB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,GAAG,oBAAoB,CA0D3F"}

package/dist/nodes/headless/use-worker-nodes.js

@@ -0,0 +1,324 @@
+/**
+ * The worker fleet, its credentials, and the three writes (issue #271, epic #254;
+ * moved into `@marinoscar/platform-web/jobs` by #854, then into `@marinoscar/platform-web/nodes` by #881 from the reference app's
+ * `hooks/useWorkerNodes.ts`, behaviour unchanged; `useWorkerNode` is new).
+ *
+ * Three exports, one file, for the reason `useJobs.ts` gives for holding three:
+ * they are three views of ONE surface, and `WorkersPage` mounts all three
+ * together. What they genuinely share is the contract — every function resolves
+ * rather than throws, and a failure is a STRING the page renders — because every
+ * caller is a click handler that needs to branch, not a place to handle an
+ * exception that has already been captured for display.
+ *
+ * =============================================================================
+ * TWO READS, NOT ONE, AND THEY REFRESH TOGETHER BUT LOAD APART
+ * =============================================================================
+ *
+ * The fleet and the credential list are separate endpoints answering separate
+ * questions ("is every worker alive" / "which tokens exist"), and they are kept
+ * on separate hooks so that neither can gate the other. That matters in the
+ * exact situation this page exists for: if one combined hook loaded both and
+ * `GET /admin/nodes` were slow or failing, the credential list — and with it
+ * the revoke button, which is the incident-response action — would be behind
+ * that spinner or that error banner. An operator who has just been told a
+ * worker is compromised must not be waiting on a fleet query to cut its token
+ * off.
+ *
+ * The PAGE then refreshes both from one callback, so the two halves are never
+ * a poll apart.
+ *
+ * =============================================================================
+ * WHY THE FLEET POLLS AND THE CREDENTIALS DO NOT
+ * =============================================================================
+ *
+ * A node's health changes with nobody touching it — that is the entire content
+ * of a heartbeat — so the fleet is polled, through the shared
+ * `useVisiblePolling` (`use-visible-polling.ts`, exported by the headless
+ * entry). Credentials change only when a human creates or revokes one, and
+ * both of those go through `useNodeActions`, which refreshes on success. A
+ * timer over a list that cannot change on its own would be load with no
+ * information in it.
+ *
+ * The poll refreshes the credential list anyway when the page asks it to,
+ * because a SECOND administrator revoking a credential is a change this tab
+ * did not make — but the page, not this module, decides that.
+ */
+import { useCallback, useEffect, useState } from 'react';
+import { isPlatformApiError } from '../../core/index.js';
+import { useIsMounted } from '../internal/use-is-mounted.js';
+import { useNodesApi } from './adapters.js';
+/**
+ * How often the fleet page re-asks, while its tab is in front.
+ *
+ * Ten seconds, matching `JOBS_POLL_INTERVAL_MS`, and chosen against what the
+ * data can actually do rather than by symmetry: `nodes.staleHeartbeatSeconds`
+ * is measured in tens of seconds at minimum, so a node cannot change health
+ * faster than that, and a shorter poll would re-derive the same verdict against
+ * a `groupBy` over the jobs table for nothing.
+ *
+ * @stability experimental
+ */
+export const WORKER_NODES_POLL_INTERVAL_MS = 10_000;
+/**
+ * Turn any thrown value into the sentence the page will render.
+ *
+ * 403 is named explicitly because its remedy is a permission rather than a
+ * retry — the treatment `useJobs`, `useMaintenance` and `useEmailSettings` all
+ * give it. The message says "worker nodes" and not "jobs", because the two are
+ * genuinely different permissions (`nodes:read`/`nodes:write` versus
+ * `jobs:read`/`jobs:write`) and telling an operator to ask for the wrong one is
+ * worse than telling them nothing.
+ */
+function messageFor(err, fallback) {
+    if (isPlatformApiError(err)) {
+        if (err.status === 403)
+            return 'You do not have permission to manage worker nodes';
+        return err.message;
+    }
+    return fallback;
+}
+/**
+ * `GET /api/admin/nodes`.
+ *
+ * NO PARAMETERS, because the endpoint takes none: it returns the whole fleet
+ * ordered by name in one response. A filter argument here would be a promise
+ * this hook could only keep by filtering client-side, which the DataTable
+ * contract explicitly forbids a page from pretending to do.
+ *
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the fleet and its state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export function useWorkerNodes(api) {
+    const client = useNodesApi(api);
+    const [nodes, setNodes] = useState([]);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(null);
+    // Every `setState` past an `await` is guarded: a request that settles after
+    // the component is gone must not schedule an update on it.
+    const isMounted = useIsMounted();
+    const load = useCallback(async (showLoading) => {
+        // A POLL DOES NOT RAISE THE LOADING FLAG. The rows stay on screen and the
+        // table keeps its scroll offset, its expansion and its focus; a spinner
+        // every ten seconds over data that is already correct is the fastest way
+        // to make a live table unusable.
+        if (showLoading)
+            setIsLoading(true);
+        try {
+            const data = await client.getWorkerNodes();
+            if (isMounted()) {
+                setNodes(data);
+                setError(null);
+            }
+        }
+        catch (err) {
+            if (isMounted()) {
+                setError(messageFor(err, 'Failed to load worker nodes'));
+                // CLEARED, not left standing. Unlike a stats strip, these rows carry
+                // a health verdict: leaving the last successful fleet on screen under
+                // an error banner would show "healthy" pills for nodes nobody has
+                // heard from since, which is the one wrong answer this page must
+                // never give.
+                setNodes([]);
+            }
+        }
+        finally {
+            if (isMounted() && showLoading)
+                setIsLoading(false);
+        }
+    }, [client, isMounted]);
+    useEffect(() => {
+        void load(true);
+    }, [load]);
+    const refresh = useCallback(async () => {
+        await load(false);
+    }, [load]);
+    return { nodes, isLoading, error, refresh };
+}
+/**
+ * `GET /api/admin/nodes/:id`: one node, in the shape the list returns (#854).
+ *
+ * Health is computed by the same function against the same policy as the
+ * list, so this read and that one can never disagree about whether a node is
+ * stale. For a detail view of one machine (a fork's node page, a dashboard
+ * card); the Worker Nodes page reads the whole fleet instead. `null` asks for
+ * nothing. A 404 (the node was deleted) is an error string like any other,
+ * and the node is cleared, for the reason the fleet clears its rows.
+ *
+ * @param id - the node id, or `null` to ask for nothing.
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the node and its state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export function useWorkerNode(id, api) {
+    const client = useNodesApi(api);
+    const [node, setNode] = useState(null);
+    const [isLoading, setIsLoading] = useState(id !== null);
+    const [error, setError] = useState(null);
+    const isMounted = useIsMounted();
+    const load = useCallback(async (showLoading) => {
+        if (id === null) {
+            setNode(null);
+            setError(null);
+            setIsLoading(false);
+            return;
+        }
+        if (showLoading)
+            setIsLoading(true);
+        try {
+            const data = await client.getWorkerNode(id);
+            if (isMounted()) {
+                setNode(data);
+                setError(null);
+            }
+        }
+        catch (err) {
+            if (isMounted()) {
+                setError(messageFor(err, 'Failed to load worker node'));
+                setNode(null);
+            }
+        }
+        finally {
+            if (isMounted() && showLoading)
+                setIsLoading(false);
+        }
+    }, [client, id, isMounted]);
+    useEffect(() => {
+        void load(true);
+    }, [load]);
+    const refresh = useCallback(async () => {
+        await load(false);
+    }, [load]);
+    return { node, isLoading, error, refresh };
+}
+/**
+ * `GET /api/admin/nodes/credentials` — every credential in the deployment,
+ * newest first, including revoked ones.
+ *
+ * On its own hook and its own request, for the reason in the file header: the
+ * revoke button must not be gated behind the fleet query.
+ *
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the credentials and their state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export function useNodeCredentials(api) {
+    const client = useNodesApi(api);
+    const [credentials, setCredentials] = useState([]);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(null);
+    const isMounted = useIsMounted();
+    const load = useCallback(async (showLoading) => {
+        if (showLoading)
+            setIsLoading(true);
+        try {
+            const data = await client.getNodeCredentials();
+            if (isMounted()) {
+                setCredentials(data);
+                setError(null);
+            }
+        }
+        catch (err) {
+            if (isMounted()) {
+                setError(messageFor(err, 'Failed to load node credentials'));
+                // Cleared for the same reason the fleet is: a stale list under an
+                // error banner would show a credential as active after somebody else
+                // revoked it, and this list's whole job is to answer "what can still
+                // authenticate right now".
+                setCredentials([]);
+            }
+        }
+        finally {
+            if (isMounted() && showLoading)
+                setIsLoading(false);
+        }
+    }, [client, isMounted]);
+    useEffect(() => {
+        void load(true);
+    }, [load]);
+    const refresh = useCallback(async () => {
+        await load(false);
+    }, [load]);
+    return { credentials, isLoading, error, refresh };
+}
+/**
+ * The three writes, sharing one in-flight flag and one error.
+ *
+ * ONE FLAG FOR ALL THREE, as `useJobActions` has one for its four: they all
+ * mutate the same fleet and the page re-reads it after any of them, so a second
+ * write started while the first is landing would be issued against state that
+ * is already wrong, and its result would be reported over the top of the first
+ * one's.
+ *
+ * =============================================================================
+ * `createCredential` RETURNS THE TOKEN. IT IS NOT STORED HERE.
+ * =============================================================================
+ *
+ * The raw `nod_…` token exists in exactly one response and can never be
+ * fetched again. This hook hands it straight back to the caller and keeps NO
+ * copy: holding it in state here would mean a secret living in a hook that
+ * outlives the dialog showing it, surviving every re-render and every
+ * subsequent action, for no benefit — the page needs it for exactly as long as
+ * the reveal dialog is open, and that dialog's own state is the shortest
+ * lifetime that works.
+ *
+ * `onChanged` fires AFTER the write resolves and never in parallel with it: a
+ * refresh racing its own mutation is how a revoked credential flickers back to
+ * "Active" for one frame.
+ *
+ * @param onChanged - called after a write lands (the page re-reads the fleet and the credentials).
+ * @param api - a client to use instead of the adapters' or the host's.
+ * @returns the three writes and their shared state.
+ *
+ * @extensionPoint hook
+ * @stability experimental
+ */
+export function useNodeActions(onChanged, api) {
+    const client = useNodesApi(api);
+    const [isWorking, setIsWorking] = useState(false);
+    const [error, setError] = useState(null);
+    const isMounted = useIsMounted();
+    // NOT held in a ref, unlike `useJobActions`'s equivalent. That hook's page
+    // passes a fresh closure over its current filters on every render; this page
+    // has no filters to close over and passes a `useCallback`, so depending on it
+    // directly is honest and one less indirection.
+    const run = useCallback(async (operation, fallback) => {
+        setIsWorking(true);
+        setError(null);
+        try {
+            const result = await operation();
+            onChanged?.();
+            return result;
+        }
+        catch (err) {
+            if (isMounted())
+                setError(messageFor(err, fallback));
+            return null;
+        }
+        finally {
+            if (isMounted())
+                setIsWorking(false);
+        }
+    }, [isMounted, onChanged]);
+    const removeNode = useCallback(async (id) => (await run(async () => {
+        await client.deleteWorkerNode(id);
+        // `deleteWorkerNode` resolves `undefined` (the endpoint answers 204)
+        // and `run` reports failure as `null`, so a literal is returned to keep
+        // "succeeded" distinguishable from "failed".
+        return true;
+    }, 'Failed to delete worker node')) !== null, [run, client]);
+    const createCredential = useCallback((input) => run(() => client.createNodeCredential(input), 'Failed to create node credential'), [run, client]);
+    const revokeCredential = useCallback(async (id) => (await run(async () => {
+        await client.revokeNodeCredential(id);
+        return true;
+    }, 'Failed to revoke node credential')) !== null, [run, client]);
+    const clearError = useCallback(() => setError(null), []);
+    return { isWorking, error, clearError, removeNode, createCredential, revokeCredential };
+}
+//# sourceMappingURL=use-worker-nodes.js.map

package/dist/nodes/headless/use-worker-nodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-worker-nodes.js","sourceRoot":"","sources":["../../../src/nodes/headless/use-worker-nodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAI5C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,GAAY,EAAE,QAAgB;IAChD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,mDAAmD,CAAC;QACnF,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAsBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,GAAc;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAe,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,WAAoB,EAAE,EAAE;QAC7B,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,iCAAiC;QACjC,IAAI,WAAW;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC,CAAC;gBACzD,qEAAqE;gBACrE,sEAAsE;gBACtE,kEAAkE;gBAClE,iEAAiE;gBACjE,cAAc;gBACd,QAAQ,CAAC,EAAE,CAAC,CAAC;YACf,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,EAAE,IAAI,WAAW;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,SAAS,CAAC,CACpB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAsBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,aAAa,CAAC,EAAiB,EAAE,GAAc;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,WAAoB,EAAE,EAAE;QAC7B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,WAAW;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,EAAE,IAAI,WAAW;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,CACxB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAsBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAc;IAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,EAAE,WAAoB,EAAE,EAAE;QAC7B,IAAI,WAAW;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/C,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;gBAC7D,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,2BAA2B;gBAC3B,cAAc,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,EAAE,IAAI,WAAW;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,SAAS,CAAC,CACpB,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AA+BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,GAAc;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,+CAA+C;IAC/C,MAAM,GAAG,GAAG,WAAW,CACrB,KAAK,EAAM,SAA2B,EAAE,QAAgB,EAAqB,EAAE;QAC7E,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,SAAS,EAAE,EAAE,CAAC;YACd,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,SAAS,EAAE;gBAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,EAAE;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,EACD,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAC5B,KAAK,EAAE,EAAU,EAAE,EAAE,CACnB,CAAC,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAClC,qEAAqE;QACrE,wEAAwE;QACxE,6CAA6C;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,8BAA8B,CAAC,CAAC,KAAK,IAAI,EAC9C,CAAC,GAAG,EAAE,MAAM,CAAC,CACd,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,CAAC,KAAgC,EAAE,EAAE,CACnC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,kCAAkC,CAAC,EACnF,CAAC,GAAG,EAAE,MAAM,CAAC,CACd,CAAC;IAEF,MAAM,gBAAgB,GAAG,WAAW,CAClC,KAAK,EAAE,EAAU,EAAE,EAAE,CACnB,CAAC,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC,EAAE,kCAAkC,CAAC,CAAC,KAAK,IAAI,EAClD,CAAC,GAAG,EAAE,MAAM,CAAC,CACd,CAAC;IAEF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;AAC1F,CAAC"}

package/dist/nodes/index.d.ts

@@ -0,0 +1,4 @@
+export * from './headless/index.js';
+export { WorkersPage, nodesAdminSections } from './ui/index.js';
+export type { NodeVitalsPanelSlotProps, NodesPageHeaderProps, NodesSettingsCard, WorkersPageProps, WorkersPageSlots, } from './ui/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/nodes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nodes/index.ts"],"names":[],"mappings":"AAQA,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAChE,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC"}

package/dist/nodes/index.js

@@ -0,0 +1,10 @@
+// The nodes slice's entry point for SIBLING SLICES of this package (issue
+// #881): the boundary lint lets one slice import another only through the
+// other's `index.ts`, and only when packages/platform-slices.json lists the
+// dependency (jobs -> nodes). Not a package subpath: apps import
+// `@marinoscar/platform-web/nodes/headless` and `/nodes/ui`. The jobs slice
+// re-exports all of it, so its own entry points keep every name they had
+// before the worker-node page moved here.
+export * from './headless/index.js';
+export { WorkersPage, nodesAdminSections } from './ui/index.js';
+//# sourceMappingURL=index.js.map

package/dist/nodes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nodes/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,iEAAiE;AACjE,4EAA4E;AAC5E,yEAAyE;AACzE,0CAA0C;AAE1C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/dist/nodes/internal/format-bytes.d.ts

@@ -0,0 +1,2 @@
+export declare function formatBytes(bytes: number): string;
+//# sourceMappingURL=format-bytes.d.ts.map

package/dist/nodes/internal/format-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-bytes.d.ts","sourceRoot":"","sources":["../../../src/nodes/internal/format-bytes.ts"],"names":[],"mappings":"AAQA,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASjD"}

package/dist/nodes/internal/format-bytes.js

@@ -0,0 +1,17 @@
+// A byte count in binary units (`512 B`, `1.5 KB`, `3.2 GB`) for the worker
+// vitals (issue #854). The same formatter as the telemetry slice's
+// `formatBytes` (`telemetry/headless/lib/format.ts`), copied rather than
+// imported because a slice may import only the slices
+// `packages/platform-slices.json` lists for it. Slice-private, not exported.
+const compact = (n, digits = 1) => n.toLocaleString(undefined, { maximumFractionDigits: digits });
+export function formatBytes(bytes) {
+    const units = ['B', 'KB', 'MB', 'GB', 'TB'];
+    let value = bytes;
+    let unit = 0;
+    while (Math.abs(value) >= 1024 && unit < units.length - 1) {
+        value /= 1024;
+        unit += 1;
+    }
+    return `${compact(value, unit === 0 ? 0 : 1)} ${units[unit]}`;
+}
+//# sourceMappingURL=format-bytes.js.map

package/dist/nodes/internal/format-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-bytes.js","sourceRoot":"","sources":["../../../src/nodes/internal/format-bytes.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,mEAAmE;AACnE,yEAAyE;AACzE,sDAAsD;AACtD,6EAA6E;AAE7E,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;AAE1G,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AAChE,CAAC"}

package/dist/nodes/internal/relative-time.d.ts

@@ -0,0 +1,2 @@
+export declare function formatRelativeTime(iso: string, now?: Date): string;
+//# sourceMappingURL=relative-time.d.ts.map

package/dist/nodes/internal/relative-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relative-time.d.ts","sourceRoot":"","sources":["../../../src/nodes/internal/relative-time.ts"],"names":[],"mappings":"AAmBA,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,CAY9E"}

package/dist/nodes/internal/relative-time.js

@@ -0,0 +1,31 @@
+// The "3 minutes ago" formatter of the worker-fleet tables (issue #854). Same
+// rules as the reference app's `utils/relativeTime.ts`, which it was copied
+// from: Intl.RelativeTimeFormat, "Just now" under 45 s (a clock-skew guard),
+// the ISO string on an unparseable input. Takes `now` (unlike the host's
+// `formatRelativeTime`) because the fleet page dates every row against ONE
+// instant per refresh. Slice-private, not exported.
+const UNITS = [
+    { limit: 60_000, ms: 1_000, unit: 'second' },
+    { limit: 3_600_000, ms: 60_000, unit: 'minute' },
+    { limit: 86_400_000, ms: 3_600_000, unit: 'hour' },
+    { limit: 604_800_000, ms: 86_400_000, unit: 'day' },
+    { limit: 2_629_800_000, ms: 604_800_000, unit: 'week' },
+    { limit: 31_557_600_000, ms: 2_629_800_000, unit: 'month' },
+    { limit: Infinity, ms: 31_557_600_000, unit: 'year' },
+];
+const JUST_NOW_MS = 45_000;
+export function formatRelativeTime(iso, now = new Date()) {
+    const time = new Date(iso).getTime();
+    if (Number.isNaN(time))
+        return iso;
+    const elapsed = now.getTime() - time;
+    if (elapsed < JUST_NOW_MS)
+        return 'Just now';
+    const formatter = new Intl.RelativeTimeFormat(undefined, { numeric: 'auto' });
+    for (const { limit, ms, unit } of UNITS) {
+        if (elapsed < limit)
+            return formatter.format(-Math.floor(elapsed / ms), unit);
+    }
+    return iso;
+}
+//# sourceMappingURL=relative-time.js.map

package/dist/nodes/internal/relative-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relative-time.js","sourceRoot":"","sources":["../../../src/nodes/internal/relative-time.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,oDAAoD;AAEpD,MAAM,KAAK,GAAuE;IAChF,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC5C,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChD,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;IAClD,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE;IACnD,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;IACvD,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3D,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE;CACtD,CAAC;AAEF,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAY,IAAI,IAAI,EAAE;IACpE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAEnC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,OAAO,GAAG,WAAW;QAAE,OAAO,UAAU,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QACxC,IAAI,OAAO,GAAG,KAAK;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}