@marinoscar/platform-web 0.1.0-next.3 → 0.1.0-next.4

package/dist/nodes/internal/use-is-mounted.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A stable getter for "is this component still mounted?", to guard `setState`
+ * in the tail of an async operation. A ref rather than state, and a getter
+ * rather than the ref, so callers can list it in a `useCallback` dependency
+ * array without invalidating on every render. Copied from the reference app's
+ * `hooks/useIsMounted.ts` (a slice-private helper, not exported).
+ */
+export declare function useIsMounted(): () => boolean;
+//# sourceMappingURL=use-is-mounted.d.ts.map

package/dist/nodes/internal/use-is-mounted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-is-mounted.d.ts","sourceRoot":"","sources":["../../../src/nodes/internal/use-is-mounted.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,OAAO,CAW5C"}

package/dist/nodes/internal/use-is-mounted.js

@@ -0,0 +1,19 @@
+import { useCallback, useEffect, useRef } from 'react';
+/**
+ * A stable getter for "is this component still mounted?", to guard `setState`
+ * in the tail of an async operation. A ref rather than state, and a getter
+ * rather than the ref, so callers can list it in a `useCallback` dependency
+ * array without invalidating on every render. Copied from the reference app's
+ * `hooks/useIsMounted.ts` (a slice-private helper, not exported).
+ */
+export function useIsMounted() {
+    const mounted = useRef(true);
+    useEffect(() => {
+        mounted.current = true;
+        return () => {
+            mounted.current = false;
+        };
+    }, []);
+    return useCallback(() => mounted.current, []);
+}
+//# sourceMappingURL=use-is-mounted.js.map

package/dist/nodes/internal/use-is-mounted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-is-mounted.js","sourceRoot":"","sources":["../../../src/nodes/internal/use-is-mounted.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7B,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,OAAO,GAAG,EAAE;YACV,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QAC1B,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/nodes/ui/CreateNodeCredentialDialog.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Admin → Worker Nodes → "New credential" (issue #271, epic #254).
+ *
+ * Modelled on `components/settings/CreatePatDialog.tsx` — same shape, same
+ * validate-then-submit flow, same "reset the form and hand the response
+ * upward" ending — because an operator who has created a personal access token
+ * should not have to learn a second dialog to create a node credential.
+ *
+ * =============================================================================
+ * WHY THIS IS NOT `CreatePatDialog` WITH DIFFERENT COPY
+ * =============================================================================
+ *
+ * Reusing that component was the first thing tried, and the request bodies make
+ * it impossible without lying to one of the two APIs. A PAT MUST expire —
+ * `PersonalAccessToken.expiresAt` is a required column — so `CreatePatDialog`
+ * collects a MANDATORY `{ durationValue, durationUnit }` pair and has no way to
+ * express "no expiry". A node credential's expiry is OPTIONAL, and its absence
+ * is the INTENDED DEFAULT: `create-node-credential.dto.ts` writes out why in
+ * full — a worker node runs unattended for months, and a mandatory expiry turns
+ * a fleet going dark at 3am into the default behaviour rather than an incident.
+ * Revocation, not a clock, is the control.
+ *
+ * So the two dialogs collect genuinely different things, and the difference is
+ * the most consequential decision on either form. Bending `CreatePatDialog` to
+ * carry an optional expiry would have meant a `neverExpires` prop that changes
+ * what its other three props mean — and a form where the PAT path and the node
+ * path can each be broken by a change made for the other.
+ *
+ * The unit is DAYS ONLY, not the PAT's minutes/days/months menu, and that is
+ * the API's shape rather than a simplification: `expiresInDays` is the only
+ * field the schema has. A credential measured in minutes is not a use case
+ * anybody has for an unattended machine, and offering a unit the endpoint
+ * cannot take would be a control that lies.
+ *
+ * =============================================================================
+ * "NEVER EXPIRES" IS THE DEFAULT, AND IT IS SPELLED OUT
+ * =============================================================================
+ *
+ * The radio pair states both options in full rather than making "never" the
+ * empty state of a days field. An operator must not be able to mint a
+ * permanent credential by leaving a box blank and not noticing: the choice is
+ * the one thing on this form worth being deliberate about, so it is asked as a
+ * question with two written answers, the default is the one the API documents
+ * as intended, and the consequence of each is printed underneath.
+ */
+import type { CreateNodeCredentialInput, NodeCredentialCreated } from '../headless/index.js';
+interface CreateNodeCredentialDialogProps {
+    open: boolean;
+    onClose: () => void;
+    /** Called with the response — INCLUDING the raw token — on success. */
+    onCreated: (response: NodeCredentialCreated) => void;
+    /**
+     * Resolves the created credential, or `null` when the create failed.
+     *
+     * `null` rather than a rejection, because that is the contract every hook in
+     * this app follows (`useNodeActions`): a failure is a value a click handler
+     * branches on, not an exception it has to catch.
+     */
+    onCreate: (input: CreateNodeCredentialInput) => Promise<NodeCredentialCreated | null>;
+}
+export declare function CreateNodeCredentialDialog({ open, onClose, onCreated, onCreate, }: CreateNodeCredentialDialogProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=CreateNodeCredentialDialog.d.ts.map

package/dist/nodes/ui/CreateNodeCredentialDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateNodeCredentialDialog.d.ts","sourceRoot":"","sources":["../../../src/nodes/ui/CreateNodeCredentialDialog.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAqBH,OAAO,KAAK,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7F,UAAU,+BAA+B;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,uEAAuE;IACvE,SAAS,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;IACrD;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CACvF;AAOD,wBAAgB,0BAA0B,CAAC,EACzC,IAAI,EACJ,OAAO,EACP,SAAS,EACT,QAAQ,GACT,EAAE,+BAA+B,+BAyJjC"}

package/dist/nodes/ui/CreateNodeCredentialDialog.js

@@ -0,0 +1,125 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Admin → Worker Nodes → "New credential" (issue #271, epic #254).
+ *
+ * Modelled on `components/settings/CreatePatDialog.tsx` — same shape, same
+ * validate-then-submit flow, same "reset the form and hand the response
+ * upward" ending — because an operator who has created a personal access token
+ * should not have to learn a second dialog to create a node credential.
+ *
+ * =============================================================================
+ * WHY THIS IS NOT `CreatePatDialog` WITH DIFFERENT COPY
+ * =============================================================================
+ *
+ * Reusing that component was the first thing tried, and the request bodies make
+ * it impossible without lying to one of the two APIs. A PAT MUST expire —
+ * `PersonalAccessToken.expiresAt` is a required column — so `CreatePatDialog`
+ * collects a MANDATORY `{ durationValue, durationUnit }` pair and has no way to
+ * express "no expiry". A node credential's expiry is OPTIONAL, and its absence
+ * is the INTENDED DEFAULT: `create-node-credential.dto.ts` writes out why in
+ * full — a worker node runs unattended for months, and a mandatory expiry turns
+ * a fleet going dark at 3am into the default behaviour rather than an incident.
+ * Revocation, not a clock, is the control.
+ *
+ * So the two dialogs collect genuinely different things, and the difference is
+ * the most consequential decision on either form. Bending `CreatePatDialog` to
+ * carry an optional expiry would have meant a `neverExpires` prop that changes
+ * what its other three props mean — and a form where the PAT path and the node
+ * path can each be broken by a change made for the other.
+ *
+ * The unit is DAYS ONLY, not the PAT's minutes/days/months menu, and that is
+ * the API's shape rather than a simplification: `expiresInDays` is the only
+ * field the schema has. A credential measured in minutes is not a use case
+ * anybody has for an unattended machine, and offering a unit the endpoint
+ * cannot take would be a control that lies.
+ *
+ * =============================================================================
+ * "NEVER EXPIRES" IS THE DEFAULT, AND IT IS SPELLED OUT
+ * =============================================================================
+ *
+ * The radio pair states both options in full rather than making "never" the
+ * empty state of a days field. An operator must not be able to mint a
+ * permanent credential by leaving a box blank and not noticing: the choice is
+ * the one thing on this form worth being deliberate about, so it is asked as a
+ * question with two written answers, the default is the one the API documents
+ * as intended, and the consequence of each is printed underneath.
+ */
+import { useState } from 'react';
+import { Alert, Box, Button, Dialog, DialogActions, DialogContent, DialogTitle, FormControl, FormControlLabel, FormLabel, Radio, RadioGroup, TextField, Typography, } from '@mui/material';
+import { MAX_NODE_CREDENTIAL_DAYS, MAX_NODE_CREDENTIAL_NAME_LENGTH } from '../headless/index.js';
+const DEFAULT_DAYS = '90';
+export function CreateNodeCredentialDialog({ open, onClose, onCreated, onCreate, }) {
+    const [name, setName] = useState('');
+    const [expiryMode, setExpiryMode] = useState('never');
+    const [days, setDays] = useState(DEFAULT_DAYS);
+    const [error, setError] = useState(null);
+    const [isSubmitting, setIsSubmitting] = useState(false);
+    const reset = () => {
+        setName('');
+        setExpiryMode('never');
+        setDays(DEFAULT_DAYS);
+        setError(null);
+    };
+    const handleSubmit = async (event) => {
+        event.preventDefault();
+        setError(null);
+        const trimmed = name.trim();
+        // Validated here as well as on the server, and the bounds are the SCHEMA'S
+        // — 1..100 characters, 1..3650 days — read from the constants this app
+        // mirrors rather than invented. A client-side rule stricter than the
+        // server's would forbid a credential the API would have accepted; a looser
+        // one just moves the error message somewhere less helpful.
+        if (!trimmed) {
+            setError('Name is required');
+            return;
+        }
+        if (trimmed.length > MAX_NODE_CREDENTIAL_NAME_LENGTH) {
+            setError(`Name must be at most ${MAX_NODE_CREDENTIAL_NAME_LENGTH} characters`);
+            return;
+        }
+        let expiresInDays;
+        if (expiryMode === 'days') {
+            const parsed = Number.parseInt(days, 10);
+            if (!Number.isInteger(parsed) || parsed < 1 || parsed > MAX_NODE_CREDENTIAL_DAYS) {
+                setError(`Expiry must be a whole number of days between 1 and ${MAX_NODE_CREDENTIAL_DAYS}`);
+                return;
+            }
+            expiresInDays = parsed;
+        }
+        setIsSubmitting(true);
+        try {
+            // `expiresInDays` is left OFF the object when the answer is "never",
+            // rather than sent as `undefined` or `null`. The schema's field is
+            // optional and its ABSENCE is what the server reads as "no expiry" — an
+            // explicit null would be a validation failure expressing the same intent.
+            const response = await onCreate(expiresInDays === undefined ? { name: trimmed } : { name: trimmed, expiresInDays });
+            if (!response) {
+                // The hook has already put the reason in the page's error banner. The
+                // dialog stays OPEN with the form intact so the operator can fix and
+                // retry rather than retyping.
+                return;
+            }
+            reset();
+            onCreated(response);
+            onClose();
+        }
+        finally {
+            setIsSubmitting(false);
+        }
+    };
+    const handleClose = () => {
+        if (isSubmitting)
+            return;
+        reset();
+        onClose();
+    };
+    return (_jsx(Dialog, { open: open, onClose: handleClose, maxWidth: "sm", fullWidth: true, children: _jsxs("form", { onSubmit: handleSubmit, children: [_jsx(DialogTitle, { children: "Create node credential" }), _jsx(DialogContent, { children: _jsxs(Box, { sx: { pt: 1 }, children: [error && (_jsx(Alert, { severity: "error", sx: { mb: 2 }, children: error })), _jsx(TextField, { label: "Credential name", fullWidth: true, required: true, autoFocus: true, value: name, onChange: (event) => setName(event.target.value), disabled: isSubmitting, slotProps: { htmlInput: { maxLength: MAX_NODE_CREDENTIAL_NAME_LENGTH } }, placeholder: "e.g. build-box-01, gpu-runner-eu", helperText: "Shown in the credential list. Name it after the machine it will run on.", sx: { mb: 2 } }), _jsxs(FormControl, { sx: { mb: 1 }, children: [_jsx(FormLabel, { id: "node-credential-expiry-label", children: "Expiry" }), _jsxs(RadioGroup, { "aria-labelledby": "node-credential-expiry-label", value: expiryMode, onChange: (event) => setExpiryMode(event.target.value), children: [_jsx(FormControlLabel, { value: "never", control: _jsx(Radio, { disabled: isSubmitting }), label: "Never expires (revoke it to cut the node off)" }), _jsx(FormControlLabel, { value: "days", control: _jsx(Radio, { disabled: isSubmitting }), label: "Expires after a number of days" })] })] }), expiryMode === 'days' && (_jsx(TextField, { label: "Days", type: "number", value: days, onChange: (event) => setDays(event.target.value), disabled: isSubmitting, slotProps: {
+                                    htmlInput: { min: 1, max: MAX_NODE_CREDENTIAL_DAYS, step: 1 },
+                                }, sx: { mb: 1 } })), _jsx(Typography, { variant: "body2", color: "text.secondary", children: expiryMode === 'never'
+                                    ? 'The intended default for an unattended worker: a credential that expires ' +
+                                        'at 3am takes the fleet down with it. Revoke it here when the machine is ' +
+                                        'retired or compromised.'
+                                    : 'The node stops authenticating the moment this elapses, with no warning and ' +
+                                        'no renewal. Only choose this for a machine you know is temporary.' })] }) }), _jsxs(DialogActions, { children: [_jsx(Button, { onClick: handleClose, disabled: isSubmitting, children: "Cancel" }), _jsx(Button, { type: "submit", variant: "contained", disabled: isSubmitting, children: isSubmitting ? 'Creating…' : 'Create credential' })] })] }) }));
+}
+//# sourceMappingURL=CreateNodeCredentialDialog.js.map

package/dist/nodes/ui/CreateNodeCredentialDialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateNodeCredentialDialog.js","sourceRoot":"","sources":["../../../src/nodes/ui/CreateNodeCredentialDialog.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EACL,KAAK,EACL,GAAG,EACH,MAAM,EACN,MAAM,EACN,aAAa,EACb,aAAa,EACb,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,KAAK,EACL,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAqBjG,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,UAAU,0BAA0B,CAAC,EACzC,IAAI,EACJ,OAAO,EACP,SAAS,EACT,QAAQ,GACwB;IAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAa,OAAO,CAAC,CAAC;IAClE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExD,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,CAAC,YAAY,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,KAAgB,EAAE,EAAE;QAC9C,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEf,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,uEAAuE;QACvE,qEAAqE;QACrE,2EAA2E;QAC3E,2DAA2D;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;YACrD,QAAQ,CAAC,wBAAwB,+BAA+B,aAAa,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,aAAiC,CAAC;QACtC,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,wBAAwB,EAAE,CAAC;gBACjF,QAAQ,CAAC,uDAAuD,wBAAwB,EAAE,CAAC,CAAC;gBAC5F,OAAO;YACT,CAAC;YACD,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,qEAAqE;YACrE,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CACnF,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,sEAAsE;gBACtE,qEAAqE;gBACrE,8BAA8B;gBAC9B,OAAO;YACT,CAAC;YACD,KAAK,EAAE,CAAC;YACR,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,YAAY;YAAE,OAAO;QACzB,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,MAAM,IAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAC,IAAI,EAAC,SAAS,kBAC/D,gBAAM,QAAQ,EAAE,YAAY,aAC1B,KAAC,WAAW,yCAAqC,EACjD,KAAC,aAAa,cACZ,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aACf,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAClC,KAAK,GACA,CACT,EAED,KAAC,SAAS,IACR,KAAK,EAAC,iBAAiB,EACvB,SAAS,QACT,QAAQ,QACR,SAAS,QACT,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAChD,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE,EAAE,EACxE,WAAW,EAAC,kCAAkC,EAC9C,UAAU,EAAC,yEAAyE,EACpF,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GACb,EAEF,MAAC,WAAW,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aACxB,KAAC,SAAS,IAAC,EAAE,EAAC,8BAA8B,uBAAmB,EAC/D,MAAC,UAAU,uBACO,8BAA8B,EAC9C,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAmB,CAAC,aAEpE,KAAC,gBAAgB,IACf,KAAK,EAAC,OAAO,EACb,OAAO,EAAE,KAAC,KAAK,IAAC,QAAQ,EAAE,YAAY,GAAI,EAC1C,KAAK,EAAC,+CAA+C,GACrD,EACF,KAAC,gBAAgB,IACf,KAAK,EAAC,MAAM,EACZ,OAAO,EAAE,KAAC,KAAK,IAAC,QAAQ,EAAE,YAAY,GAAI,EAC1C,KAAK,EAAC,gCAAgC,GACtC,IACS,IACD,EAEb,UAAU,KAAK,MAAM,IAAI,CACxB,KAAC,SAAS,IACR,KAAK,EAAC,MAAM,EACZ,IAAI,EAAC,QAAQ,EACb,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAChD,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE;oCACT,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,EAAE;iCAC9D,EACD,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GACb,CACH,EAED,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,YAC/C,UAAU,KAAK,OAAO;oCACrB,CAAC,CAAC,2EAA2E;wCAC3E,0EAA0E;wCAC1E,yBAAyB;oCAC3B,CAAC,CAAC,6EAA6E;wCAC7E,mEAAmE,GAC5D,IACT,GACQ,EAChB,MAAC,aAAa,eACZ,KAAC,MAAM,IAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,uBAE3C,EACT,KAAC,MAAM,IAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,QAAQ,EAAE,YAAY,YAC7D,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,GAC1C,IACK,IACX,GACA,CACV,CAAC;AACJ,CAAC"}

package/dist/nodes/ui/NodeCredentialRevealDialog.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Admin → Worker Nodes → the credential, shown once (issue #271, epic #254).
+ *
+ * Modelled on `components/settings/PatTokenRevealDialog.tsx`, deliberately down
+ * to the arrangement: a warning banner first, a read-only monospace field with
+ * a copy button in its end adornment, and a single "Done" action. That
+ * treatment is not decoration — it is the app's established shape for "this
+ * secret exists for the length of this dialog and then it is gone", and an
+ * operator who has seen it once for a personal access token recognises the
+ * stakes immediately.
+ *
+ * =============================================================================
+ * THE SHOW-ONCE CLAIM IS LITERAL, WHICH IS WHY THE COPY IS BLUNT
+ * =============================================================================
+ *
+ * `node-credential.service.ts` stores a sha256 hash of the token and nothing
+ * else. There is no "reveal again", no support path, and no admin override that
+ * recovers it: the `AdminNodeCredentialDto` the list renders has no `token`
+ * FIELD AT ALL, so nothing downstream of this dialog could display it even by
+ * mistake. The banner therefore states the consequence ("you will not be able
+ * to see it again") rather than hedging with "may not" — a hedge invites the
+ * reader to close the dialog and go looking.
+ *
+ * A COPY BUTTON, NOT ONLY SELECTABLE TEXT. Selecting a 40-character token by
+ * dragging is the step where half of one gets copied, pasted into a node's
+ * config, and produces a 401 an hour later that nobody connects to a mis-drag.
+ * The clipboard write is wrapped in try/catch and its failure is SILENT-ish by
+ * design: the field is still there, still complete, and still selectable, so a
+ * browser that denies clipboard access degrades to the manual path rather than
+ * to an error dialog stacked on top of the one secret the operator must not
+ * lose focus from.
+ *
+ * `expiresAt: null` IS RENDERED AS "Never expires", not omitted. It is the
+ * default and the intended answer for an unattended worker, and this is the
+ * last moment the operator sees the credential's terms next to its value.
+ */
+import type { NodeCredentialCreated } from '../headless/index.js';
+interface NodeCredentialRevealDialogProps {
+    open: boolean;
+    onClose: () => void;
+    /** The create response. `null` while no credential is being revealed. */
+    credential: NodeCredentialCreated | null;
+}
+export declare function NodeCredentialRevealDialog({ open, onClose, credential, }: NodeCredentialRevealDialogProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=NodeCredentialRevealDialog.d.ts.map

package/dist/nodes/ui/NodeCredentialRevealDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCredentialRevealDialog.d.ts","sourceRoot":"","sources":["../../../src/nodes/ui/NodeCredentialRevealDialog.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAmBH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,UAAU,+BAA+B;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,yEAAyE;IACzE,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CAAC,EACzC,IAAI,EACJ,OAAO,EACP,UAAU,GACX,EAAE,+BAA+B,+BAqFjC"}

package/dist/nodes/ui/NodeCredentialRevealDialog.js

@@ -0,0 +1,72 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Admin → Worker Nodes → the credential, shown once (issue #271, epic #254).
+ *
+ * Modelled on `components/settings/PatTokenRevealDialog.tsx`, deliberately down
+ * to the arrangement: a warning banner first, a read-only monospace field with
+ * a copy button in its end adornment, and a single "Done" action. That
+ * treatment is not decoration — it is the app's established shape for "this
+ * secret exists for the length of this dialog and then it is gone", and an
+ * operator who has seen it once for a personal access token recognises the
+ * stakes immediately.
+ *
+ * =============================================================================
+ * THE SHOW-ONCE CLAIM IS LITERAL, WHICH IS WHY THE COPY IS BLUNT
+ * =============================================================================
+ *
+ * `node-credential.service.ts` stores a sha256 hash of the token and nothing
+ * else. There is no "reveal again", no support path, and no admin override that
+ * recovers it: the `AdminNodeCredentialDto` the list renders has no `token`
+ * FIELD AT ALL, so nothing downstream of this dialog could display it even by
+ * mistake. The banner therefore states the consequence ("you will not be able
+ * to see it again") rather than hedging with "may not" — a hedge invites the
+ * reader to close the dialog and go looking.
+ *
+ * A COPY BUTTON, NOT ONLY SELECTABLE TEXT. Selecting a 40-character token by
+ * dragging is the step where half of one gets copied, pasted into a node's
+ * config, and produces a 401 an hour later that nobody connects to a mis-drag.
+ * The clipboard write is wrapped in try/catch and its failure is SILENT-ish by
+ * design: the field is still there, still complete, and still selectable, so a
+ * browser that denies clipboard access degrades to the manual path rather than
+ * to an error dialog stacked on top of the one secret the operator must not
+ * lose focus from.
+ *
+ * `expiresAt: null` IS RENDERED AS "Never expires", not omitted. It is the
+ * default and the intended answer for an unattended worker, and this is the
+ * last moment the operator sees the credential's terms next to its value.
+ */
+import { useState } from 'react';
+import { Alert, Box, Button, Dialog, DialogActions, DialogContent, DialogTitle, IconButton, InputAdornment, TextField, Tooltip, Typography, } from '@mui/material';
+import CheckIcon from '@mui/icons-material/Check';
+import ContentCopyIcon from '@mui/icons-material/ContentCopy';
+export function NodeCredentialRevealDialog({ open, onClose, credential, }) {
+    const [copied, setCopied] = useState(false);
+    const handleCopy = async () => {
+        if (!credential)
+            return;
+        try {
+            await navigator.clipboard.writeText(credential.token);
+            setCopied(true);
+            setTimeout(() => setCopied(false), 3000);
+        }
+        catch {
+            // Clipboard access denied or unavailable. The field beside this button is
+            // still complete and still selectable — see the file header on why that
+            // is the right fallback rather than an error on top of a secret.
+        }
+    };
+    const handleClose = () => {
+        setCopied(false);
+        onClose();
+    };
+    return (_jsxs(Dialog, { open: open, onClose: handleClose, maxWidth: "sm", fullWidth: true, children: [_jsx(DialogTitle, { children: "Node credential created" }), _jsx(DialogContent, { children: _jsxs(Box, { sx: { pt: 1 }, children: [_jsx(Alert, { severity: "warning", sx: { mb: 2 }, children: "Copy this credential now. It is shown once and cannot be retrieved again \u2014 if you lose it, revoke it and create another." }), _jsx(TextField, { label: "Node credential", value: credential?.token ?? '', fullWidth: true, slotProps: {
+                                input: {
+                                    readOnly: true,
+                                    sx: { fontFamily: 'monospace' },
+                                    endAdornment: (_jsx(InputAdornment, { position: "end", children: _jsx(Tooltip, { title: copied ? 'Copied' : 'Copy credential', children: _jsx(IconButton, { onClick: () => void handleCopy(), edge: "end", "aria-label": "copy node credential", children: copied ? _jsx(CheckIcon, { color: "success" }) : _jsx(ContentCopyIcon, {}) }) }) })),
+                                },
+                            } }), copied && (_jsx(Alert, { severity: "success", sx: { mt: 1 }, children: "Credential copied to clipboard" })), credential && (_jsxs(Typography, { variant: "body2", color: "text.secondary", sx: { mt: 2 }, children: [_jsx("strong", { children: credential.name }), " \u00B7", ' ', credential.expiresAt
+                                    ? `Expires ${new Date(credential.expiresAt).toLocaleString()}`
+                                    : 'Never expires — revoke it to cut the node off'] })), _jsx(Typography, { variant: "body2", color: "text.secondary", sx: { mt: 1 }, children: "Give it to the worker as its node credential. It can reach the worker API and nothing else, and it cannot create further credentials." })] }) }), _jsx(DialogActions, { children: _jsx(Button, { variant: "contained", onClick: handleClose, children: "Done" }) })] }));
+}
+//# sourceMappingURL=NodeCredentialRevealDialog.js.map

package/dist/nodes/ui/NodeCredentialRevealDialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCredentialRevealDialog.js","sourceRoot":"","sources":["../../../src/nodes/ui/NodeCredentialRevealDialog.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,EACL,KAAK,EACL,GAAG,EACH,MAAM,EACN,MAAM,EACN,aAAa,EACb,aAAa,EACb,WAAW,EACX,UAAU,EACV,cAAc,EACd,SAAS,EACT,OAAO,EACP,UAAU,GACX,MAAM,eAAe,CAAC;AACvB,OAAO,SAAS,MAAM,2BAA2B,CAAC;AAClD,OAAO,eAAe,MAAM,iCAAiC,CAAC;AAU9D,MAAM,UAAU,0BAA0B,CAAC,EACzC,IAAI,EACJ,OAAO,EACP,UAAU,GACsB;IAChC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACtD,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,wEAAwE;YACxE,iEAAiE;QACnE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,MAAM,IAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAC,IAAI,EAAC,SAAS,mBAC/D,KAAC,WAAW,0CAAsC,EAClD,KAAC,aAAa,cACZ,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aAChB,KAAC,KAAK,IAAC,QAAQ,EAAC,SAAS,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,8IAG/B,EAER,KAAC,SAAS,IACR,KAAK,EAAC,iBAAiB,EACvB,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,EAC9B,SAAS,QACT,SAAS,EAAE;gCACT,KAAK,EAAE;oCACL,QAAQ,EAAE,IAAI;oCACd,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;oCAC/B,YAAY,EAAE,CACZ,KAAC,cAAc,IAAC,QAAQ,EAAC,KAAK,YAC5B,KAAC,OAAO,IAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,YACnD,KAAC,UAAU,IACT,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,UAAU,EAAE,EAChC,IAAI,EAAC,KAAK,gBACC,sBAAsB,YAEhC,MAAM,CAAC,CAAC,CAAC,KAAC,SAAS,IAAC,KAAK,EAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAC,eAAe,KAAG,GAClD,GACL,GACK,CAClB;iCACF;6BACF,GACD,EAED,MAAM,IAAI,CACT,KAAC,KAAK,IAAC,QAAQ,EAAC,SAAS,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,+CAE/B,CACT,EAEA,UAAU,IAAI,CACb,MAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,aAE9D,2BAAS,UAAU,CAAC,IAAI,GAAU,aAAG,GAAG,EACvC,UAAU,CAAC,SAAS;oCACnB,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE;oCAC9D,CAAC,CAAC,+CAA+C,IACxC,CACd,EAED,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,sJAGnD,IACT,GACQ,EAChB,KAAC,aAAa,cACZ,KAAC,MAAM,IAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAE,WAAW,qBAEvC,GACK,IACT,CACV,CAAC;AACJ,CAAC"}

package/dist/nodes/ui/NodeCredentials.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Admin → Worker Nodes → Node Credentials (issue #271, epic #254).
+ *
+ * =============================================================================
+ * WHY THIS IS A SECTION AND NOT ITS OWN REGISTRY CARD
+ * =============================================================================
+ *
+ * CLAUDE.md's Settings UI Pattern draws one line and this component sits on the
+ * right side of it: a DESTINATION gate is about REACHABILITY, a gate inside a
+ * page is about CONTENT. Credentials are content of the Worker Nodes page.
+ * They are gated by the same permissions (`nodes:read` to see them,
+ * `nodes:write` to change them, the strings `nodes-admin.controller.ts` and
+ * `node-credential.controller.ts` actually enforce), they describe the same
+ * machines, and — the part that decides it — they are what an operator reaches
+ * for in the same minute as the fleet table.
+ *
+ * The rejected alternative was a second registry card,
+ * `/admin/settings/nodes/credentials`. It would have been tidy, it satisfies the letter of the
+ * registry rule, and it puts TWO CLICKS between "this worker is compromised"
+ * and revoking its token: read the fleet, notice the bad node, go back to the
+ * hub, find the credentials card, open it, find the credential. Revocation is
+ * an incident-response action; the whole point of it is that it is immediate,
+ * and a card is a page away by construction. `UsersPage`'s Allowlist half is
+ * the precedent — a second controller's data, gated on its own permission,
+ * living inside one destination because it answers one question with the other
+ * half.
+ *
+ * The other rejected alternative was reusing `/settings/tokens`
+ * (`PersonalAccessTokens`). Three reasons it is not the same surface:
+ * a different permission (`nodes:read` versus a bare authenticated user), a
+ * different audience (every user has personal access tokens; node credentials
+ * are fleet inventory an administrator audits), and a different THING — a
+ * `nod_` credential is confined by the auth guard to `/api/nodes/*` and cannot
+ * mint another credential, while a `pat_` token is the user's whole identity.
+ * Listing them together would invite revoking the wrong one.
+ *
+ * =============================================================================
+ * WHY THIS COMPONENT OWNS NO FETCHING
+ * =============================================================================
+ *
+ * Unlike `PersonalAccessTokens`, which calls its own hook, everything here
+ * arrives as props. The page holds ONE `useNodeActions`, so the fleet's delete
+ * and the credentials' create/revoke share one in-flight flag and one error
+ * banner — which is the honest reading of "these all mutate the same fleet and
+ * the page re-reads it after any of them". A second error surface inside this
+ * card would let a failed revoke be reported in one place while a failed node
+ * delete is reported in another, on a page where the two are steps of the same
+ * incident.
+ */
+import type { CreateNodeCredentialInput, NodeCredential, NodeCredentialCreated } from '../headless/index.js';
+/**
+ * What {@link NodeCredentials} takes: the rows and the two writes, all supplied
+ * by the caller (the page passes `useNodeCredentials` and `useNodeActions`).
+ *
+ * @stability experimental
+ */
+export interface NodeCredentialsProps {
+    /** Every credential, revoked ones included. */
+    credentials: NodeCredential[];
+    /** True while the first read is in flight. */
+    isLoading: boolean;
+    /** `nodes:write`. Gates the create button and the revoke action. */
+    canWrite: boolean;
+    /** True while any of the page's writes is in flight. */
+    isWorking: boolean;
+    /** Mints a credential; resolves the create response (the only holder of the raw token) or `null` on failure. */
+    onCreate: (input: CreateNodeCredentialInput) => Promise<NodeCredentialCreated | null>;
+    /** Revokes one credential; resolves whether it worked. */
+    onRevoke: (id: string) => Promise<boolean>;
+    /**
+     * The instant expiry is judged against — the page's single render clock, so
+     * the status chip and the row action's `disabled` predicate cannot disagree
+     * about a credential that expires mid-render.
+     */
+    now: Date;
+}
+/**
+ * The node-credential section: the credential table, the create dialog and the
+ * show-once reveal dialog. It is the Worker Nodes page's second half and is
+ * exported so another incident-response surface can embed the same section.
+ *
+ * @param props - see {@link NodeCredentialsProps}.
+ * @returns the section element.
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export declare function NodeCredentials({ credentials, isLoading, canWrite, isWorking, onCreate, onRevoke, now, }: NodeCredentialsProps): import("react").JSX.Element;
+//# sourceMappingURL=NodeCredentials.d.ts.map

package/dist/nodes/ui/NodeCredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCredentials.d.ts","sourceRoot":"","sources":["../../../src/nodes/ui/NodeCredentials.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAaH,OAAO,KAAK,EACV,yBAAyB,EACzB,cAAc,EACd,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAM9B;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,8CAA8C;IAC9C,SAAS,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,QAAQ,EAAE,OAAO,CAAC;IAClB,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;IACnB,gHAAgH;IAChH,QAAQ,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACtF,0DAA0D;IAC1D,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C;;;;OAIG;IACH,GAAG,EAAE,IAAI,CAAC;CACX;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,EAC9B,WAAW,EACX,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,GAAG,GACJ,EAAE,oBAAoB,+BAkItB"}

package/dist/nodes/ui/NodeCredentials.js

@@ -0,0 +1,125 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Admin → Worker Nodes → Node Credentials (issue #271, epic #254).
+ *
+ * =============================================================================
+ * WHY THIS IS A SECTION AND NOT ITS OWN REGISTRY CARD
+ * =============================================================================
+ *
+ * CLAUDE.md's Settings UI Pattern draws one line and this component sits on the
+ * right side of it: a DESTINATION gate is about REACHABILITY, a gate inside a
+ * page is about CONTENT. Credentials are content of the Worker Nodes page.
+ * They are gated by the same permissions (`nodes:read` to see them,
+ * `nodes:write` to change them, the strings `nodes-admin.controller.ts` and
+ * `node-credential.controller.ts` actually enforce), they describe the same
+ * machines, and — the part that decides it — they are what an operator reaches
+ * for in the same minute as the fleet table.
+ *
+ * The rejected alternative was a second registry card,
+ * `/admin/settings/nodes/credentials`. It would have been tidy, it satisfies the letter of the
+ * registry rule, and it puts TWO CLICKS between "this worker is compromised"
+ * and revoking its token: read the fleet, notice the bad node, go back to the
+ * hub, find the credentials card, open it, find the credential. Revocation is
+ * an incident-response action; the whole point of it is that it is immediate,
+ * and a card is a page away by construction. `UsersPage`'s Allowlist half is
+ * the precedent — a second controller's data, gated on its own permission,
+ * living inside one destination because it answers one question with the other
+ * half.
+ *
+ * The other rejected alternative was reusing `/settings/tokens`
+ * (`PersonalAccessTokens`). Three reasons it is not the same surface:
+ * a different permission (`nodes:read` versus a bare authenticated user), a
+ * different audience (every user has personal access tokens; node credentials
+ * are fleet inventory an administrator audits), and a different THING — a
+ * `nod_` credential is confined by the auth guard to `/api/nodes/*` and cannot
+ * mint another credential, while a `pat_` token is the user's whole identity.
+ * Listing them together would invite revoking the wrong one.
+ *
+ * =============================================================================
+ * WHY THIS COMPONENT OWNS NO FETCHING
+ * =============================================================================
+ *
+ * Unlike `PersonalAccessTokens`, which calls its own hook, everything here
+ * arrives as props. The page holds ONE `useNodeActions`, so the fleet's delete
+ * and the credentials' create/revoke share one in-flight flag and one error
+ * banner — which is the honest reading of "these all mutate the same fleet and
+ * the page re-reads it after any of them". A second error surface inside this
+ * card would let a failed revoke be reported in one place while a failed node
+ * delete is reported in another, on a page where the two are steps of the same
+ * incident.
+ */
+import { useMemo, useState } from 'react';
+import { Alert, Box, Button, Card, CardContent, Typography } from '@mui/material';
+import AddIcon from '@mui/icons-material/Add';
+import BlockIcon from '@mui/icons-material/Block';
+import { NodesTable as DataTable } from './table.js';
+import { NODE_CREDENTIALS_TABLE_ID, buildNodeCredentialColumns, } from './workersTable.js';
+import { nodeCredentialStatus } from '../headless/index.js';
+import { CreateNodeCredentialDialog } from './CreateNodeCredentialDialog.js';
+import { NodeCredentialRevealDialog } from './NodeCredentialRevealDialog.js';
+/**
+ * The node-credential section: the credential table, the create dialog and the
+ * show-once reveal dialog. It is the Worker Nodes page's second half and is
+ * exported so another incident-response surface can embed the same section.
+ *
+ * @param props - see {@link NodeCredentialsProps}.
+ * @returns the section element.
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export function NodeCredentials({ credentials, isLoading, canWrite, isWorking, onCreate, onRevoke, now, }) {
+    const [createOpen, setCreateOpen] = useState(false);
+    /**
+     * The created credential, INCLUDING ITS RAW TOKEN, held for exactly as long
+     * as the reveal dialog is open and cleared when it closes.
+     *
+     * This is the shortest lifetime that works, and it is the reason
+     * `useNodeActions` hands the response back instead of storing it: a secret
+     * that cannot be re-fetched should not outlive the one component that
+     * displays it.
+     */
+    const [revealed, setRevealed] = useState(null);
+    const columns = useMemo(() => buildNodeCredentialColumns(now), [now]);
+    const rowActions = useMemo(() => {
+        // The ARRAY is gated, never a rendered-then-hidden control: a reader
+        // without `nodes:write` gets an array that does not CONTAIN this action, so
+        // it is absent from the desktop grid, the tablet row expander and the phone
+        // card at once.
+        if (!canWrite)
+            return [];
+        return [
+            {
+                id: 'revoke',
+                label: 'Revoke credential',
+                icon: _jsx(BlockIcon, { fontSize: "small" }),
+                destructive: true,
+                // DISABLED, NOT ABSENT, for a credential that is already revoked or
+                // expired — the rule `UserList` states: the set of actions must not
+                // change shape row to row, or the operator has to hunt for a control
+                // that moved. The API answers 404 for an already-revoked credential
+                // rather than succeeding silently, so this mirrors a real refusal
+                // rather than inventing a policy.
+                disabled: (credential) => nodeCredentialStatus(credential, now) !== 'active' || isWorking,
+                confirm: {
+                    title: 'Revoke this credential?',
+                    description: (credential) => `"${credential.name}" stops working on the node's very next request — there is no ` +
+                        'cache and no delay. Any worker using it will fail to authenticate until it is ' +
+                        'given a new credential. This cannot be undone.',
+                    confirmLabel: 'Revoke',
+                },
+                onClick: (credential) => {
+                    void onRevoke(credential.id);
+                },
+            },
+        ];
+    }, [canWrite, isWorking, now, onRevoke]);
+    return (_jsxs(_Fragment, { children: [_jsx(Card, { sx: { mt: 3 }, children: _jsxs(CardContent, { children: [_jsxs(Box, { sx: {
+                                display: 'flex',
+                                justifyContent: 'space-between',
+                                alignItems: 'flex-start',
+                                gap: 2,
+                                mb: 1,
+                            }, children: [_jsxs(Box, { sx: { minWidth: 0 }, children: [_jsx(Typography, { variant: "h6", component: "h2", gutterBottom: true, children: "Node Credentials" }), _jsxs(Typography, { variant: "body2", color: "text.secondary", sx: { mb: 2 }, children: ["The ", _jsx("code", { children: "nod_" }), " tokens that let a machine attach to this deployment. They are shown once at creation and stored only as a hash, so revoking is the way to cut one off. Revoked credentials stay listed as part of the audit trail."] })] }), canWrite && (_jsx(Button, { variant: "outlined", size: "small", startIcon: _jsx(AddIcon, {}), onClick: () => setCreateOpen(true), sx: { flexShrink: 0 }, children: "New credential" }))] }), _jsx(Alert, { severity: "info", sx: { mb: 2 }, children: "Deleting a node does not revoke its credential: the same token can register a new node. Revoke it here too when a machine is gone for good." }), _jsx(DataTable, { tableId: NODE_CREDENTIALS_TABLE_ID, "data-testid": "admin-node-credentials-table", ariaLabel: "Node credentials", density: "compact", columns: columns, rows: credentials, rowId: (credential) => credential.id, loading: isLoading, emptyState: _jsx(Typography, { variant: "body2", color: "text.secondary", children: "No node credentials yet. Create one to attach a worker to this deployment." }), rowActions: rowActions, csvExport: { filename: 'node-credentials' } })] }) }), _jsx(CreateNodeCredentialDialog, { open: createOpen, onClose: () => setCreateOpen(false), onCreate: onCreate, onCreated: setRevealed }), _jsx(NodeCredentialRevealDialog, { open: revealed !== null, credential: revealed, onClose: () => setRevealed(null) })] }));
+}
+//# sourceMappingURL=NodeCredentials.js.map

package/dist/nodes/ui/NodeCredentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCredentials.js","sourceRoot":"","sources":["../../../src/nodes/ui/NodeCredentials.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,OAAO,MAAM,yBAAyB,CAAC;AAC9C,OAAO,SAAS,MAAM,2BAA2B,CAAC;AAElD,OAAO,EAAE,UAAU,IAAI,SAAS,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAM5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AA+B7E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,EAC9B,WAAW,EACX,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,GAAG,GACkB;IACrB,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD;;;;;;;;OAQG;IACH,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAA+B,IAAI,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEtE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE;QAC9B,qEAAqE;QACrE,4EAA4E;QAC5E,4EAA4E;QAC5E,gBAAgB;QAChB,IAAI,CAAC,QAAQ;YAAE,OAAO,EAA0C,CAAC;QAEjE,OAAO;YACL;gBACE,EAAE,EAAE,QAAQ;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,KAAC,SAAS,IAAC,QAAQ,EAAC,OAAO,GAAG;gBACpC,WAAW,EAAE,IAAI;gBACjB,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,kCAAkC;gBAClC,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,QAAQ,IAAI,SAAS;gBACzF,OAAO,EAAE;oBACP,KAAK,EAAE,yBAAyB;oBAChC,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE,CAC1B,IAAI,UAAU,CAAC,IAAI,gEAAgE;wBACnF,gFAAgF;wBAChF,gDAAgD;oBAClD,YAAY,EAAE,QAAQ;iBACvB;gBACD,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE;oBACtB,KAAK,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC/B,CAAC;aACF;SAC6C,CAAC;IACnD,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEzC,OAAO,CACL,8BACE,KAAC,IAAI,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YACjB,MAAC,WAAW,eACV,MAAC,GAAG,IACF,EAAE,EAAE;gCACF,OAAO,EAAE,MAAM;gCACf,cAAc,EAAE,eAAe;gCAC/B,UAAU,EAAE,YAAY;gCACxB,GAAG,EAAE,CAAC;gCACN,EAAE,EAAE,CAAC;6BACN,aAED,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aACtB,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,YAAY,uCAEvC,EACb,MAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,qBAC1D,kCAAiB,2NAGV,IACT,EACL,QAAQ,IAAI,CACX,KAAC,MAAM,IACL,OAAO,EAAC,UAAU,EAClB,IAAI,EAAC,OAAO,EACZ,SAAS,EAAE,KAAC,OAAO,KAAG,EACtB,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAClC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,+BAGd,CACV,IACG,EAON,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,4JAG5B,EAER,KAAC,SAAS,IACR,OAAO,EAAE,yBAAyB,iBACtB,8BAA8B,EAC1C,SAAS,EAAC,kBAAkB,EAC5B,OAAO,EAAC,SAAS,EACjB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EACpC,OAAO,EAAE,SAAS,EAClB,UAAU,EACR,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,2FAErC,EAEf,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,GAC3C,IACU,GACT,EAEP,KAAC,0BAA0B,IACzB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EACnC,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,WAAW,GACtB,EAEF,KAAC,0BAA0B,IACzB,IAAI,EAAE,QAAQ,KAAK,IAAI,EACvB,UAAU,EAAE,QAAQ,EACpB,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAChC,IACD,CACJ,CAAC;AACJ,CAAC"}