@cobaltcore-dev/aurora 1.2.0 → 2.0.0

package/dist/client/useSecurityGroupPermissions--hK4aR8Y.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useSecurityGroupPermissions--hK4aR8Y.mjs","names":["getSecurityGroupDeletedToast","name","message","description","getSecurityGroupDeleteErrorToast","errorMessage","getSecurityGroupUpdatedToast","getSecurityGroupUpdateErrorToast","getSecurityGroupRuleCreatedToast","getSecurityGroupRuleCreateErrorToast","getSecurityGroupRuleDeletedToast","getSecurityGroupRuleDeleteErrorToast","getRBACPolicyAddedToast","targetTenant","getRBACPolicyAddErrorToast","getRBACPolicyDeletedToast","getRBACPolicyDeleteErrorToast","React","useState","useEffect","Modal","Form","FormRow","FormSection","TextInput","Button","ButtonRow","Spinner","ModalFooter","Textarea","Message","Status","EditSecurityGroupModal","securityGroup","open","onClose","onUpdate","isLoading","error","useLingui","properties","setProperties","name","description","errors","setErrors","handleInputChange","e","value","type","target","checked","prev","newErrors","validateForm","trim","t","Object","keys","length","handleSubmit","preventDefault","updateData","undefined","id","handleClose","onCancel","size","title","modalFooter","className","variant","onClick","disabled","data-testid","dismissible","status","label","onChange","required","errortext","placeholder","rows","z","useForm","useStore","React","Modal","Stack","Message","Form","FormSection","TextInput","useModalTracking","DeleteSecurityGroupDialog","isOpen","onClose","securityGroup","onDelete","isDeleting","error","useLingui","trackClose","markSubmitted","resetTracking","actionPrefix","formSchema","object","confirm","string","refine","value","message","t","form","defaultValues","validators","onSubmit","id","canDelete","store","state","isSubmitting","values","securityGroupName","name","handleClose","reset","open","onCancel","size","title","confirmButtonLabel","confirmButtonVariant","onConfirm","handleSubmit","cancelButtonLabel","disableConfirmButton","disableCancelButton","disableCloseButton","direction","gap","variant","p","className","e","preventDefault","Field","children","field","label","onChange","handleChange","target","placeholder","disabled","autoComplete","autoFocus","data-testid","required","trpcReact","useSecurityGroupPermissions","projectId","data","permissions","canView","canCreate","canUpdate","canDelete","canCreateRule","canDeleteRule","canManageAccess","canViewRBAC","isLoading","isError","network","canUser","useQuery","project_id","permission","enabled","Boolean","select","canCreateRBAC","canDeleteRBAC","staleTime","Infinity","gcTime"],"sources":["../../src/client/routes/_auth/projects/$projectId/network/securitygroups/-components/SecurityGroupToastNotifications.tsx","../../src/client/routes/_auth/projects/$projectId/network/securitygroups/-components/-modals/EditSecurityGroupModal.tsx","../../src/client/routes/_auth/projects/$projectId/network/securitygroups/-components/-modals/DeleteSecurityGroupDialog.tsx","../../src/client/routes/_auth/projects/$projectId/network/securitygroups/-hooks/useSecurityGroupPermissions.ts"],"sourcesContent":["import { ReactNode } from \"react\"\nimport { NotificationOptions } from \"@cloudoperators/juno-ui-components\"\nimport { Trans } from \"@lingui/react/macro\"\n\ntype ToastReturnType = { message: ReactNode } & NotificationOptions\n\n// ── Security Group operations ──────────────────────────────────────────────\n\nexport const getSecurityGroupDeletedToast = (name: string): ToastReturnType => ({\n  message: <Trans>Security Group Deleted</Trans>,\n  description: <Trans>Security group \"{name}\" was successfully deleted.</Trans>,\n})\n\nexport const getSecurityGroupDeleteErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Delete Security Group</Trans>,\n  description: <Trans>Could not delete security group: {errorMessage}</Trans>,\n})\n\nexport const getSecurityGroupUpdatedToast = (name: string): ToastReturnType => ({\n  message: <Trans>Security Group Updated</Trans>,\n  description: <Trans>Security group \"{name}\" was successfully updated.</Trans>,\n})\n\nexport const getSecurityGroupUpdateErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Update Security Group</Trans>,\n  description: <Trans>Could not update security group: {errorMessage}</Trans>,\n})\n\n// ── Rule operations ────────────────────────────────────────────────────────\n\nexport const getSecurityGroupRuleCreatedToast = (): ToastReturnType => ({\n  message: <Trans>Rule Created</Trans>,\n  description: <Trans>Security group rule was successfully created.</Trans>,\n})\n\nexport const getSecurityGroupRuleCreateErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Create Rule</Trans>,\n  description: <Trans>Could not create security group rule: {errorMessage}</Trans>,\n})\n\nexport const getSecurityGroupRuleDeletedToast = (): ToastReturnType => ({\n  message: <Trans>Rule Deleted</Trans>,\n  description: <Trans>Security group rule was successfully deleted.</Trans>,\n})\n\nexport const getSecurityGroupRuleDeleteErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Delete Rule</Trans>,\n  description: <Trans>Could not delete security group rule: {errorMessage}</Trans>,\n})\n\n// ── RBAC Policy operations ─────────────────────────────────────────────────\n\nexport const getRBACPolicyAddedToast = (targetTenant: string): ToastReturnType => ({\n  message: <Trans>Security Group Shared</Trans>,\n  description: <Trans>Security group was successfully shared with project \"{targetTenant}\".</Trans>,\n})\n\nexport const getRBACPolicyAddErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Share Security Group</Trans>,\n  description: <Trans>Could not share security group: {errorMessage}</Trans>,\n})\n\nexport const getRBACPolicyDeletedToast = (targetTenant: string): ToastReturnType => ({\n  message: <Trans>Access Revoked</Trans>,\n  description: <Trans>Access for project \"{targetTenant}\" was successfully revoked.</Trans>,\n})\n\nexport const getRBACPolicyDeleteErrorToast = (errorMessage: string): ToastReturnType => ({\n  message: <Trans>Failed to Revoke Access</Trans>,\n  description: <Trans>Could not revoke access: {errorMessage}</Trans>,\n})\n","import React, { useState, useEffect } from \"react\"\nimport { Trans, useLingui } from \"@lingui/react/macro\"\nimport {\n  Modal,\n  Form,\n  FormRow,\n  FormSection,\n  TextInput,\n  Button,\n  ButtonRow,\n  Spinner,\n  ModalFooter,\n  Textarea,\n  Message,\n  Status,\n} from \"@cloudoperators/juno-ui-components\"\nimport type { SecurityGroup } from \"@/server/Network/types/securityGroup\"\nimport { UpdateSecurityGroupInput } from \"@/server/Network/types/securityGroup\"\n\ninterface EditSecurityGroupModalProps {\n  securityGroup: SecurityGroup\n  open: boolean\n  onClose: () => void\n  onUpdate?: (\n    securityGroupId: string,\n    data: Omit<UpdateSecurityGroupInput, \"securityGroupId\" | \"project_id\">\n  ) => Promise<void>\n  isLoading?: boolean\n  error?: string | null\n}\n\ninterface SecurityGroupProperties {\n  name: string\n  description: string\n}\n\nexport const EditSecurityGroupModal: React.FC<EditSecurityGroupModalProps> = ({\n  securityGroup,\n  open,\n  onClose,\n  onUpdate,\n  isLoading = false,\n  error = null,\n}) => {\n  const { t } = useLingui()\n\n  const [properties, setProperties] = useState<SecurityGroupProperties>({\n    name: securityGroup.name || \"\",\n    description: securityGroup.description || \"\",\n  })\n  const [errors, setErrors] = useState<{ [key: string]: string }>({})\n\n  // Update properties when securityGroup changes\n  useEffect(() => {\n    setProperties({\n      name: securityGroup.name || \"\",\n      description: securityGroup.description || \"\",\n    })\n  }, [securityGroup])\n\n  const handleInputChange = (e: React.ChangeEvent<HTMLInputElement | HTMLTextAreaElement>) => {\n    const { name, value, type } = e.target\n    const checked = (e.target as HTMLInputElement).checked\n\n    setProperties((prev) => ({\n      ...prev,\n      [name]: type === \"checkbox\" ? checked : value,\n    }))\n\n    if (errors[name]) {\n      setErrors((prev) => {\n        const newErrors = { ...prev }\n        delete newErrors[name]\n        return newErrors\n      })\n    }\n  }\n\n  const validateForm = (): boolean => {\n    const newErrors: { [key: string]: string } = {}\n\n    if (!properties.name || properties.name.trim() === \"\") {\n      newErrors.name = t`Security group name is required`\n    }\n\n    setErrors(newErrors)\n    return Object.keys(newErrors).length === 0\n  }\n\n  const handleSubmit = async (e: React.FormEvent) => {\n    e.preventDefault()\n\n    if (!validateForm()) {\n      return\n    }\n\n    if (onUpdate) {\n      // Prepare base update data without stateful\n      const updateData: Omit<UpdateSecurityGroupInput, \"securityGroupId\" | \"project_id\"> = {\n        name: properties.name.trim(),\n        description: properties.description.trim() || undefined,\n      }\n\n      // Note: We deliberately do NOT include 'stateful' field here\n      // because it requires special 'update_security_group:stateful' permission\n      // which needs cloud admin role. Regular users can only update name/description.\n\n      await onUpdate(securityGroup.id, updateData)\n    }\n  }\n\n  const handleClose = () => {\n    setErrors({})\n    onClose()\n  }\n\n  return (\n    <Modal\n      open={open}\n      onCancel={handleClose}\n      size=\"large\"\n      title={t`Edit Security Group`}\n      modalFooter={\n        <ModalFooter className=\"flex justify-end\">\n          <ButtonRow>\n            <Button variant=\"default\" onClick={handleClose} disabled={isLoading}>\n              <Trans>Cancel</Trans>\n            </Button>\n            <Button\n              variant=\"primary\"\n              onClick={(e) => {\n                handleSubmit(e)\n              }}\n              disabled={isLoading}\n              data-testid=\"update-security-group-button\"\n            >\n              {isLoading ? <Spinner size=\"small\" /> : <Trans>Update Security Group</Trans>}\n            </Button>\n          </ButtonRow>\n        </ModalFooter>\n      }\n    >\n      {/* Error Message */}\n      {error && (\n        <Message dismissible={false} variant=\"error\" className=\"mb-4\">\n          {error}\n        </Message>\n      )}\n\n      {isLoading && <Status status=\"progress\" title={t`Updating Security Group...`} className=\"mt-0\" />}\n\n      {!isLoading && (\n        <Form className=\"mb-6\">\n          <FormSection className=\"mb-6\">\n            <FormRow className=\"mb-6\">\n              <TextInput\n                id=\"name\"\n                name=\"name\"\n                label={t`Name`}\n                value={properties.name}\n                onChange={handleInputChange}\n                required\n                errortext={errors.name}\n                placeholder={t`Type name`}\n                disabled={isLoading}\n              />\n            </FormRow>\n\n            <FormRow className=\"mb-6\">\n              <Textarea\n                id=\"description\"\n                name=\"description\"\n                label={t`Description`}\n                value={properties.description}\n                onChange={handleInputChange}\n                placeholder={t`Description`}\n                disabled={isLoading}\n                rows={3}\n              />\n            </FormRow>\n            {/* Note: Stateful checkbox is not shown here because it requires 'update_security_group:stateful' permission (cloud admin only) */}\n          </FormSection>\n        </Form>\n      )}\n    </Modal>\n  )\n}\n","import { z } from \"zod\"\nimport { useForm, useStore } from \"@tanstack/react-form\"\nimport React from \"react\"\nimport { Modal, Stack, Message, Form, FormSection, TextInput } from \"@cloudoperators/juno-ui-components\"\nimport { Trans, useLingui } from \"@lingui/react/macro\"\nimport type { SecurityGroup } from \"@/server/Network/types/securityGroup\"\nimport { useModalTracking } from \"@/client/hooks/useModalTracking\"\n\ninterface DeleteSecurityGroupDialogProps {\n  isOpen: boolean\n  securityGroup: SecurityGroup\n  onClose: () => void\n  onDelete: (securityGroupId: string) => void\n  isDeleting?: boolean\n  error?: string | null\n}\n\nexport const DeleteSecurityGroupDialog: React.FC<DeleteSecurityGroupDialogProps> = ({\n  isOpen,\n  onClose,\n  securityGroup,\n  onDelete,\n  isDeleting = false,\n  error = null,\n}) => {\n  const { t } = useLingui()\n\n  const { trackClose, markSubmitted, resetTracking } = useModalTracking({\n    isOpen,\n    actionPrefix: \"network.securitygroup.delete\",\n  })\n\n  const formSchema = z.object({\n    confirm: z.string().refine((value) => value === \"delete\", {\n      message: t`Type \"delete\" to confirm`,\n    }),\n  })\n\n  const form = useForm({\n    defaultValues: {\n      confirm: \"\",\n    },\n    validators: {\n      onSubmit: formSchema,\n    },\n    onSubmit: async () => {\n      if (isDeleting) return\n\n      markSubmitted()\n      onDelete(securityGroup.id)\n    },\n  })\n\n  const canDelete = useStore(form.store, (state) => state.isSubmitting || state.values.confirm !== \"delete\")\n\n  const securityGroupName = securityGroup.name || securityGroup.id\n\n  const handleClose = () => {\n    trackClose()\n    form.reset()\n    resetTracking()\n    onClose()\n  }\n\n  return (\n    <Modal\n      open={isOpen}\n      onCancel={handleClose}\n      size=\"small\"\n      title={t`Delete Security Group \"${securityGroupName}\"`}\n      confirmButtonLabel={isDeleting ? t`Deleting...` : t`Delete Group`}\n      confirmButtonVariant=\"primary-danger\"\n      onConfirm={form.handleSubmit}\n      cancelButtonLabel={t`Cancel`}\n      disableConfirmButton={canDelete || isDeleting}\n      disableCancelButton={isDeleting}\n      disableCloseButton={isDeleting}\n    >\n      <Stack direction=\"vertical\" gap=\"4\">\n        {error && <Message variant=\"error\">{error}</Message>}\n\n        <p className=\"text-theme-default\">\n          <Trans>This action cannot be undone. The security group will be permanently deleted.</Trans>\n        </p>\n\n        <Form\n          className=\"mb-0\"\n          id=\"delete-security-group-form\"\n          onSubmit={(e) => {\n            e.preventDefault()\n            form.handleSubmit()\n          }}\n        >\n          <FormSection>\n            <form.Field\n              name=\"confirm\"\n              children={(field) => (\n                <TextInput\n                  label={t`Type \"delete\" to confirm`}\n                  id={field.name}\n                  name={field.name}\n                  value={field.state.value}\n                  onChange={(e) => field.handleChange(e.target.value)}\n                  placeholder=\"delete\"\n                  disabled={isDeleting}\n                  autoComplete=\"off\"\n                  autoFocus\n                  data-testid=\"delete-confirmation-input\"\n                  required\n                />\n              )}\n            />\n          </FormSection>\n        </Form>\n      </Stack>\n    </Modal>\n  )\n}\n","import { trpcReact } from \"@/client/trpcClient\"\n\nexport interface SecurityGroupPermissions {\n  canView: boolean\n  canCreate: boolean\n  canUpdate: boolean\n  canDelete: boolean\n  canCreateRule: boolean\n  canDeleteRule: boolean\n  canManageAccess: boolean\n  canViewRBAC: boolean\n}\n\n/**\n * Hook to fetch security group permissions for the current user\n * Uses React Query with infinite cache since permissions don't change during session\n */\nexport function useSecurityGroupPermissions(projectId: string) {\n  const {\n    data: permissions = {\n      canView: false,\n      canCreate: false,\n      canUpdate: false,\n      canDelete: false,\n      canCreateRule: false,\n      canDeleteRule: false,\n      canManageAccess: false,\n      canViewRBAC: false,\n    },\n    isLoading,\n    isError,\n  } = trpcReact.network.canUser.useQuery(\n    {\n      project_id: projectId || \"\",\n      permission: [\n        \"network:security_groups:read\",\n        \"network:security_groups:create\",\n        \"network:security_groups:update\",\n        \"network:security_groups:delete\",\n        \"network:security_group_rules:create\",\n        \"network:security_group_rules:delete\",\n        \"network:rbac_policies:create\",\n        \"network:rbac_policies:delete\",\n        \"network:rbac_policies:read\",\n      ],\n    },\n    {\n      enabled: Boolean(projectId), // Only fetch if we have a project ID\n      select: ([\n        canView,\n        canCreate,\n        canUpdate,\n        canDelete,\n        canCreateRule,\n        canDeleteRule,\n        canCreateRBAC,\n        canDeleteRBAC,\n        canViewRBAC,\n      ]) => ({\n        canView,\n        canCreate,\n        canUpdate,\n        canDelete,\n        canCreateRule,\n        canDeleteRule,\n        canManageAccess: canCreateRBAC && canDeleteRBAC,\n        canViewRBAC,\n      }),\n      staleTime: Infinity, // Permissions don't change during session\n      gcTime: Infinity, // Keep in cache forever (previously cacheTime)\n    }\n  )\n\n  return {\n    permissions,\n    isLoading,\n    isError,\n  }\n}\n"],"mappings":";;;;;;;;;AAQA,IAAaA,KAAgCC,OAAmC;CAC9EC,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAwBF,QAAAA,EAAAA,QAAAA;;AACvC,IAEaG,KAAoCC,OAA2C;CAC1FH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAyCE,QAAAA,EAAAA,gBAAAA;;AACxD,IAEaC,KAAgCL,OAAmC;CAC9EC,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAwBF,QAAAA,EAAAA,QAAAA;;AACvC,IAEaM,KAAoCF,OAA2C;CAC1FH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAyCE,QAAAA,EAAAA,gBAAAA;;AACxD,IAIaG,WAA2D;CACtEN,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;AACf,IAEaM,KAAwCJ,OAA2C;CAC9FH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAA8CE,QAAAA,EAAAA,gBAAAA;;AAC7D,IAEaK,WAA2D;CACtER,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;AACf,IAEaQ,KAAwCN,OAA2C;CAC9FH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAA8CE,QAAAA,EAAAA,gBAAAA;;AAC7D,IAIaO,KAA2BC,OAA2C;CACjFX,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAA6DU,QAAAA,EAAAA,gBAAAA;;AAC5E,IAEaC,KAA8BT,OAA2C;CACpFH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAwCE,QAAAA,EAAAA,gBAAAA;;AACvD,IAEaU,KAA6BF,OAA2C;CACnFX,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAA4BU,QAAAA,EAAAA,gBAAAA;;AAC3C,IAEaG,KAAiCX,OAA2C;CACvFH,SAAS,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;CACTC,aAAa,gBAAA,GAAA;;EAAiCE,QAAAA,EAAAA,gBAAAA;;AAChD,IClCa2B,KAAiE,EAC5EC,kBACAC,SACAC,YACAC,aACAC,eAAY,IACZC,WAAQ,WACT;CACC,IAAM,EAAA,MAAA,GAAA,GAAA,MAAQC,EAAAA,GAER,CAACC,GAAYC,KAAiBvB,EAAkC;EACpEwB,MAAMT,EAAcS,QAAQ;EAC5BC,aAAaV,EAAcU,eAAe;CAC5C,CAAA,GACM,CAACC,GAAQC,KAAa3B,EAAoC,CAAC,CAAA;CAGjEC,QAAU;EACRsB,EAAc;GACZC,MAAMT,EAAcS,QAAQ;GAC5BC,aAAaV,EAAcU,eAAe;EAC5C,CAAA;CACF,GAAG,CAACV,CAAc,CAAA;CAElB,IAAMa,KAAqBC,MAAAA;EACzB,IAAM,EAAEL,SAAMM,UAAOC,YAASF,EAAEG,QAC1BC,IAAU,EAAGD,OAA4BC;EAO/C,AALAV,GAAeW,OAAU;GACvB,GAAGA;IACFV,IAAOO,MAAS,aAAaE,IAAUH;EAC1C,EAAA,GAEIJ,EAAOF,MACTG,GAAWO,MAAAA;GACT,IAAMC,IAAY,EAAE,GAAGD,EAAK;GAE5B,OADA,OAAOC,EAAUX,IACVW;EACT,CAAA;CAEJ,GAEMC,UAAe;EACnB,IAAMD,IAAuC,CAAC;EAO9C,QALI,CAACb,EAAWE,QAAQF,EAAWE,KAAKa,KAAI,MAAO,QACjDF,EAAUX,OAAOc,EAAAA,EAAC,EAAA,IAAA,SAAgC,CAAA,IAGpDX,EAAUQ,CAAAA,GACHI,OAAOC,KAAKL,CAAAA,CAAAA,CAAWM,WAAW;CAC3C,GAEMC,IAAe,OAAOb,MAAAA;EAC1BA,MAAEc,eAAc,GAEXP,EAAAA,KAIDlB,GAAU;GAEZ,IAAM0B,IAA+E;IACnFpB,MAAMF,EAAWE,KAAKa,KAAI;IAC1BZ,aAAaH,EAAWG,YAAYY,KAAI,KAAMQ,KAAAA;GAChD;GAMA,MAAM3B,EAASH,EAAc+B,IAAIF,CAAAA;EACnC;CACF,GAEMG,UAAc;EAElB9B,AADAU,EAAU,CAAC,CAAA,GACXV,EAAAA;CACF;CAEA,OACE,gBAACf,GAAAA;EACOc;EACNgC,UAAUD;EACVE,MAAK;EACLC,OAAOZ,EAAAA,EAAC,EAAA,IAAA,SAAoB,CAAA;EAC5Ba,aACE,gBAACzC,GAAAA;GAAY0C,WAAU;GACrB,UAAA,gBAAC5C,GAAAA,EAAAA,UAAAA,CACC,gBAACD,GAAAA;IAAO8C,SAAQ;IAAUC,SAASP;IAAaQ,UAAUpC;IACxD,UAAA,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;GAEF,CAAA,GAAA,gBAACZ,GAAAA;IACC8C,SAAQ;IACRC,UAAUzB,MAAAA;KACRa,EAAab,CAAAA;IACf;IACA0B,UAAUpC;IACVqC,eAAY;IAEXrC,UAAAA,IAAY,gBAACV,GAAAA,EAAQwC,MAAK,QAAa,CAAA,IAAA,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;;;;GAO/C7B,KACC,gBAACR,GAAAA;IAAQ6C,aAAa;IAAOJ,SAAQ;IAAQD,WAAU;IACpDhC,UAAAA;;GAIJD,KAAa,gBAACN,GAAAA;IAAO6C,QAAO;IAAWR,OAAOZ,EAAAA,EAAC,EAAA,IAAA,SAA2B,CAAA;IAAGc,WAAU;;GAEvF,CAACjC,KACA,gBAAChB,GAAAA;IAAKiD,WAAU;IACd,UAAA,gBAAC/C,GAAAA;KAAY+C,WAAU;KACrB,UAAA,CAAA,gBAAChD,GAAAA;MAAQgD,WAAU;MACjB,UAAA,gBAAC9C,GAAAA;OACCwC,IAAG;OACHtB,MAAK;OACLmC,OAAOrB,EAAAA,EAAC,EAAA,IAAA,SAAK,CAAA;OACbR,OAAOR,EAAWE;OAClBoC,UAAUhC;OACViC,UAAQ;OACRC,WAAWpC,EAAOF;OAClBuC,aAAazB,EAAAA,EAAC,EAAA,IAAA,SAAU,CAAA;OACxBiB,UAAUpC;;KAId,CAAA,GAAA,gBAACf,GAAAA;MAAQgD,WAAU;MACjB,UAAA,gBAACzC,GAAAA;OACCmC,IAAG;OACHtB,MAAK;OACLmC,OAAOrB,EAAAA,EAAC,EAAA,IAAA,SAAY,CAAA;OACpBR,OAAOR,EAAWG;OAClBmC,UAAUhC;OACVmC,aAAazB,EAAAA,EAAC,EAAA,IAAA,SAAY,CAAA;OAC1BiB,UAAUpC;OACV6C,MAAM;;;;;;;AAStB,GCzKaY,KAAuE,EAClFC,WACAC,YACAC,kBACAC,aACAC,gBAAa,IACbC,WAAQ,WACT;CACC,IAAM,EAAA,MAAA,GAAA,GAAA,MAAQC,EAAAA,GAER,EAAEC,eAAYC,kBAAeC,qBAAkBX,EAAiB;EACpEE;EACAU,cAAc;CAChB,CAAA,GAEMC,IAAavB,EAAEwB,OAAO,EAC1BC,SAASzB,EAAE0B,OAAM,CAAA,CAAGC,QAAQC,MAAUA,MAAU,UAAU,EACxDC,SAASC,EAAAA,EAAC,EAAA,IAAA,SAAyB,CAAA,EACrC,CAAA,EACF,CAAA,GAEMC,IAAO9B,EAAQ;EACnB+B,eAAe,EACbP,SAAS,GACX;EACAQ,YAAY,EACVC,UAAUX,EACZ;EACAW,UAAU,YAAA;GACJlB,MAEJI,EAAAA,GACAL,EAASD,EAAcqB,EAAE;EAC3B;CACF,CAAA,GAEMC,IAAYlC,EAAS6B,EAAKM,QAAQC,MAAUA,EAAMC,gBAAgBD,EAAME,OAAOf,YAAY,QAAA,GAE3FgB,IAAoB3B,EAAc4B,QAAQ5B,EAAcqB;CAS9D,OACE,gBAAC/B,GAAAA;EACCyC,MAAMjC;EACNkC,gBAVgB;GAIlBjC,AAHAM,EAAAA,GACAY,EAAKa,MAAK,GACVvB,EAAAA,GACAR,EAAAA;EACF;EAMIkC,MAAK;EACLC,OAAOlB,EAAAA,EAAC;;GAA0BW,QAAAA,EAAAA,qBAAAA;EAAmB,CAAA;EACrDQ,oBAAoBjC,IAAac,EAAAA,EAAC,EAAA,IAAA,SAAY,CAAA,IAAIA,EAAAA,EAAC,EAAA,IAAA,SAAa,CAAA;EAChEoB,sBAAqB;EACrBC,WAAWpB,EAAKqB;EAChBC,mBAAmBvB,EAAAA,EAAC,EAAA,IAAA,SAAO,CAAA;EAC3BwB,sBAAsBlB,KAAapB;EACnCuC,qBAAqBvC;EACrBwC,oBAAoBxC;EAEpB,UAAA,gBAACX,GAAAA;GAAMoD,WAAU;GAAWC,KAAI;;IAC7BzC,KAAS,gBAACX,GAAAA;KAAQqD,SAAQ;KAAS1C,UAAAA;;IAEpC,gBAAC2C,KAAAA;KAAEC,WAAU;KACX,UAAA,gBAAA,GAAA,EAAA,IAAA,SAAA,CAAA;;IAGF,gBAACtD,GAAAA;KACCsD,WAAU;KACV1B,IAAG;KACHD,WAAW4B,MAAAA;MAET/B,AADA+B,EAAEC,eAAc,GAChBhC,EAAKqB,aAAY;KACnB;KAEA,UAAA,gBAAC5C,GAAAA,EACC,UAAA,gBAACuB,EAAKiC,OAAK;MACTtB,MAAK;MACLuB,WAAWC,MACT,gBAACzD,GAAAA;OACC0D,OAAOrC,EAAAA,EAAC,EAAA,IAAA,SAAyB,CAAA;OACjCK,IAAI+B,EAAMxB;OACVA,MAAMwB,EAAMxB;OACZd,OAAOsC,EAAM5B,MAAMV;OACnBwC,WAAWN,MAAMI,EAAMG,aAAaP,EAAEQ,OAAO1C,KAAK;OAClD2C,aAAY;OACZC,UAAUxD;OACVyD,cAAa;OACbC,WAAS;OACTC,eAAY;OACZC,UAAQ;;;;;;;AAS1B;;;ACpGA,SAAgBE,EAA4BC,GAAiB;CAC3D,IAAM,EACJC,MAAMC,IAAc;EAClBC,SAAS;EACTC,WAAW;EACXC,WAAW;EACXC,WAAW;EACXC,eAAe;EACfC,eAAe;EACfC,iBAAiB;EACjBC,aAAa;CACf,GACAC,cACAC,eACEd,EAAUe,QAAQC,QAAQC,SAC5B;EACEC,YAAYhB,KAAa;EACzBiB,YAAY;GACV;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD;CACH,GACA;EACEC,SAASC,EAAQnB;EACjBoB,SAAS,CACPjB,GACAC,GACAC,GACAC,GACAC,GACAC,GACAa,GACAC,GACAZ,QACK;GACLP;GACAC;GACAC;GACAC;GACAC;GACAC;GACAC,iBAAiBY,KAAiBC;GAClCZ;EACF;EACAa,WAAWC;EACXC,QAAQD;CACV,CAAA;CAGF,OAAO;EACLtB;EACAS;EACAC;CACF;AACF"}

package/dist/server/index.d.ts

@@ -965,6 +965,7 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     tags_any?: string | undefined;
                     not_tags?: string | undefined;
                     not_tags_any?: string | undefined;
+                    stateful?: boolean | undefined;
                     searchTerm?: string | undefined;
                 };
                 output: {
@@ -1515,7 +1516,11 @@ declare const buildBaseRouter: (policyDir: string) => _trpc_server.TRPCBuiltRout
                     tempUrlKey?: string | undefined;
                     tempUrlKey2?: string | undefined;
                 };
-                output: boolean;
+                output: {
+                    created: true;
+                    optionsApplied: boolean;
+                    optionsError?: string | undefined;
+                };
                 meta: object;
             }>;
             getContainerMetadata: _trpc_server.TRPCQueryProcedure<{

package/dist/server/index.js

@@ -7,7 +7,11 @@ var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -27306,7 +27310,7 @@ var require_pathHelpers = __commonJS({
     });
     exports2.encodeOpenstackPathSegment = encodeOpenstackPathSegment2;
     exports2.encodeOpenstackPath = encodeOpenstackPath;
-    exports2.validateAndEncodeResourceId = validateAndEncodeResourceId6;
+    exports2.validateAndEncodeResourceId = validateAndEncodeResourceId8;
     var error_1 = require_error();
     function encodeOpenstackPathSegment2(segment, label = "Path segment") {
       if (!segment || typeof segment !== "string") {
@@ -27328,10 +27332,10 @@ var require_pathHelpers = __commonJS({
       return segments.map((seg, idx) => encodeOpenstackPathSegment2(seg, `Path segment ${idx}`)).join("/");
     }
     __name(encodeOpenstackPath, "encodeOpenstackPath");
-    function validateAndEncodeResourceId6(id, resourceType = "Resource") {
+    function validateAndEncodeResourceId8(id, resourceType = "Resource") {
       return encodeOpenstackPathSegment2(id, `${resourceType} ID`);
     }
-    __name(validateAndEncodeResourceId6, "validateAndEncodeResourceId");
+    __name(validateAndEncodeResourceId8, "validateAndEncodeResourceId");
   }
 });
 
@@ -32490,7 +32494,7 @@ function buildObjectMetadataHeaders(options) {
 }
 __name(buildObjectMetadataHeaders, "buildObjectMetadataHeaders");
 function mapErrorResponseToTRPCError2(error, context) {
-  const { operation, container, object, additionalInfo } = context;
+  const { operation, container, object, additionalInfo, preconditionFailedMeansAlreadyExists } = context;
   const baseMessage = `Failed to ${operation}`;
   const containerInfo = container ? ` container: ${container}` : "";
   const objectInfo = object ? `, object: ${object}` : "";
@@ -32521,6 +32525,14 @@ function mapErrorResponseToTRPCError2(error, context) {
         code: "CONFLICT",
         message: `Conflict - ${operation}${containerInfo}${objectInfo}${extraInfo}`
       });
+    case 412:
+      return preconditionFailedMeansAlreadyExists ? new import_server10.TRPCError({
+        code: "CONFLICT",
+        message: `Conflict - ${operation}${containerInfo}${objectInfo} - already exists${extraInfo}`
+      }) : new import_server10.TRPCError({
+        code: "PRECONDITION_FAILED",
+        message: `Precondition failed - ${operation}${containerInfo}${objectInfo}${extraInfo}`
+      });
     case 413:
       return new import_server10.TRPCError({
         code: "PAYLOAD_TOO_LARGE",
@@ -32814,6 +32826,11 @@ var createContainerInputSchema = baseContainerInputSchema.extend({
   tempUrlKey: import_zod11.z.string().optional(),
   tempUrlKey2: import_zod11.z.string().optional()
 });
+var createContainerResultSchema = import_zod11.z.object({
+  created: import_zod11.z.literal(true),
+  optionsApplied: import_zod11.z.boolean(),
+  optionsError: import_zod11.z.string().optional()
+});
 var updateContainerMetadataInputSchema = baseContainerInputSchema.extend({
   metadata: import_zod11.z.record(import_zod11.z.string(), import_zod11.z.string()).optional(),
   removeMetadata: import_zod11.z.array(import_zod11.z.string()).optional(),
@@ -33151,21 +33168,54 @@ var swiftRouter = {
   createContainer: projectScopedProcedure.input(projectScopedInputSchema.extend(createContainerInputSchema.shape)).mutation(async ({ input, ctx }) => {
     return withErrorHandling2(async () => {
       const { account, container, ...options } = input;
+      const { storagePolicy, ...applyOptions } = options;
       const openstackSession = ctx.openstack;
       const swift = openstackSession?.service("swift");
       validateSwiftService(swift);
-      const headers = buildContainerMetadataHeaders(options);
       const accountPath = account || "";
       const url = accountPath ? `${accountPath}/${encodeURIComponent(container)}` : encodeURIComponent(container);
-      await swift.put(url, void 0, {
-        headers
+      const probeHeaders = buildContainerMetadataHeaders({
+        storagePolicy
+      });
+      const response = await swift.put(url, void 0, {
+        headers: probeHeaders
       }).catch((error) => {
         throw mapErrorResponseToTRPCError2(error, {
           operation: "create container",
           container
         });
       });
-      return true;
+      if (response.status === 202) {
+        throw new import_server11.TRPCError({
+          code: "CONFLICT",
+          message: `Conflict - create container - container already exists: ${container}`
+        });
+      }
+      const optionHeaders = buildContainerMetadataHeaders(applyOptions);
+      if (Object.keys(optionHeaders).length === 0) {
+        return {
+          created: true,
+          optionsApplied: true
+        };
+      }
+      let optionsError;
+      await swift.post(url, void 0, {
+        headers: optionHeaders
+      }).catch((error) => {
+        optionsError = mapErrorResponseToTRPCError2(error, {
+          operation: "apply container settings",
+          container,
+          additionalInfo: "container was created but its metadata/ACL/quota could not be applied"
+        }).message;
+      });
+      return optionsError === void 0 ? {
+        created: true,
+        optionsApplied: true
+      } : {
+        created: true,
+        optionsApplied: false,
+        optionsError
+      };
     }, "create container");
   }),
   /**
@@ -33591,7 +33641,8 @@ var swiftRouter = {
       const normalizedPath = normalizeFolderPath(folderPath);
       const headers = {
         "Content-Type": "application/directory",
-        "Content-Length": "0"
+        "Content-Length": "0",
+        "If-None-Match": "*"
       };
       if (metadata) {
         Object.entries(metadata).forEach(([key, value]) => {
@@ -33600,14 +33651,14 @@ var swiftRouter = {
       }
       const accountPath = account || "";
       const url = accountPath ? `${accountPath}/${encodeURIComponent(container)}/${encodeURIComponent(normalizedPath)}` : `${encodeURIComponent(container)}/${encodeURIComponent(normalizedPath)}`;
-      await swift.put(url, {
-        headers,
-        body: new ArrayBuffer(0)
+      await swift.put(url, new ArrayBuffer(0), {
+        headers
       }).catch((error) => {
         throw mapErrorResponseToTRPCError2(error, {
           operation: "create folder",
           container,
-          object: normalizedPath
+          object: normalizedPath,
+          preconditionFailedMeansAlreadyExists: true
         });
       });
       return true;
@@ -34506,6 +34557,7 @@ var S3_ERROR_MAP = {
   BucketAlreadyExists: "CONFLICT",
   BucketAlreadyOwnedByYou: "CONFLICT",
   BucketNotEmpty: "PRECONDITION_FAILED",
+  PreconditionFailed: "CONFLICT",
   InvalidBucketState: "BAD_REQUEST",
   VersioningNotEnabled: "PRECONDITION_FAILED",
   AccessDenied: "FORBIDDEN",
@@ -34530,7 +34582,7 @@ function mapS3ErrorToTRPCError(error, context) {
   }
   const s3Error = error;
   const errorCode = s3Error.Code ?? s3Error.name ?? "";
-  const trpcCode = S3_ERROR_MAP[errorCode] ?? "INTERNAL_SERVER_ERROR";
+  const trpcCode = errorCode === "PreconditionFailed" && !context.preconditionFailedMeansAlreadyExists ? "PRECONDITION_FAILED" : S3_ERROR_MAP[errorCode] ?? "INTERNAL_SERVER_ERROR";
   if (!S3_ERROR_MAP[errorCode] && errorCode) {
     import_signal_openstack4.logger.warn("Unmapped S3 error code", {
       errorCode,
@@ -34549,6 +34601,8 @@ function mapS3ErrorToTRPCError(error, context) {
     parts.push("Invalid access key \u2014 your credentials may be expired or incorrect");
   } else if (errorCode === "BucketNotEmpty") {
     parts.push("The bucket is not empty. Some objects or versions may still exist. Use 'Empty Bucket' first to delete all contents.");
+  } else if (errorCode === "PreconditionFailed") {
+    parts.push(context.preconditionFailedMeansAlreadyExists ? "The object already exists" : "Precondition failed");
   } else if (s3Error.message) {
     parts.push(s3Error.message);
   }
@@ -35869,8 +35923,10 @@ var objectRouter = {
   * Create a folder (zero-byte object with key ending in "/").
   *
   * In S3, folders are virtual - they're just zero-byte objects with keys ending in "/".
-  * This operation is idempotent - creating an existing folder succeeds.
+  * The write is conditional (IfNoneMatch: "*"), so creating a folder that
+  * already exists throws CONFLICT instead of silently overwriting it.
   *
+  * @throws TRPCError CONFLICT - a folder (or object) with this key already exists
   * @throws TRPCError NOT_FOUND - bucket does not exist
   * @throws TRPCError FORBIDDEN - no credentials or access denied
   */
@@ -35883,14 +35939,16 @@ var objectRouter = {
         Bucket: containerName,
         Key: normalizedPath,
         Body: Buffer.from(""),
-        ContentLength: 0
+        ContentLength: 0,
+        IfNoneMatch: "*"
       }));
       return true;
     } catch (error) {
       throw mapS3ErrorToTRPCError(error, {
         operation: "create folder",
         bucket: containerName,
-        key: normalizedPath
+        key: normalizedPath,
+        preconditionFailedMeansAlreadyExists: true
       });
     }
   }),
@@ -38706,6 +38764,8 @@ var listSecurityGroupsInputSchema = projectScopedInputSchema.extend({
   tags_any: import_zod23.z.string().optional(),
   not_tags: import_zod23.z.string().optional(),
   not_tags_any: import_zod23.z.string().optional(),
+  // Filtered in the BFF layer, not forwarded to Neutron
+  stateful: import_zod23.z.boolean().optional(),
   // BFF-side search (filtered in BFF layer, not sent to OpenStack)
   searchTerm: import_zod23.z.string().optional()
 });
@@ -39048,6 +39108,10 @@ var deduplicateSecurityGroupsById = /* @__PURE__ */ __name((items) => {
   }
   return Array.from(seen.values());
 }, "deduplicateSecurityGroupsById");
+var filterSecurityGroupsByStateful = /* @__PURE__ */ __name((items, stateful) => {
+  if (stateful === void 0) return items;
+  return items.filter((item) => (item.stateful ?? true) === stateful);
+}, "filterSecurityGroupsByStateful");
 var sortSecurityGroups = /* @__PURE__ */ __name((items, sortKey, sortDir = "asc") => {
   if (!sortKey) return items;
   return [
@@ -39099,7 +39163,7 @@ __name(fetchSecurityGroupsWithParams, "fetchSecurityGroupsWithParams");
 var securityGroupRouter = {
   list: projectScopedProcedure.input(listSecurityGroupsInputSchema).query(async ({ input, ctx }) => {
     return withErrorHandling3(async () => {
-      const { searchTerm, project_id, shared, sort_key, sort_dir, ...queryInput } = input;
+      const { searchTerm, project_id, shared, stateful, sort_key, sort_dir, ...queryInput } = input;
       const network = getNetworkService(ctx);
       if (shared !== void 0) {
         const securityGroups = await fetchSecurityGroupsWithParams(network, {
@@ -39108,7 +39172,7 @@ var securityGroupRouter = {
           sort_key,
           sort_dir
         });
-        return filterBySearchParams(securityGroups, searchTerm, [
+        return filterBySearchParams(filterSecurityGroupsByStateful(securityGroups, stateful), searchTerm, [
           "name",
           "description",
           "id"
@@ -39129,6 +39193,7 @@ var securityGroupRouter = {
         ...ownGroups,
         ...sharedGroups
       ]);
+      combined = filterSecurityGroupsByStateful(combined, stateful);
       combined = filterBySearchParams(combined, searchTerm, [
         "name",
         "description",
@@ -39214,13 +39279,15 @@ var securityGroupRouter = {
 };
 
 // src/server/Network/routers/securityGroupRuleRouter.ts
+var import_signal_openstack9 = __toESM(require_esm());
 var SECURITY_GROUP_RULES_BASE_URL = "v2.0/security-group-rules";
 var securityGroupRuleRouter = {
   delete: projectScopedProcedure.input(deleteSecurityGroupRuleInputSchema).mutation(async ({ input, ctx }) => {
     return withErrorHandling3(async () => {
       const { ruleId } = input;
       const network = getNetworkService(ctx);
-      const response = await network.del(`${SECURITY_GROUP_RULES_BASE_URL}/${ruleId}`);
+      const encodedRuleId = (0, import_signal_openstack9.validateAndEncodeResourceId)(ruleId, "Security group rule");
+      const response = await network.del(`${SECURITY_GROUP_RULES_BASE_URL}/${encodedRuleId}`);
       if (!response?.ok) {
         throw SecurityGroupRuleErrorHandlers.delete(response, ruleId);
       }
@@ -39461,6 +39528,7 @@ function parseRBACPoliciesListResponse(data, operation) {
 __name(parseRBACPoliciesListResponse, "parseRBACPoliciesListResponse");
 
 // src/server/Network/routers/rbacPolicyRouter.ts
+var import_signal_openstack10 = __toESM(require_esm());
 var RBAC_POLICIES_BASE_URL = "v2.0/rbac-policies";
 var rbacPolicyRouter = {
   list: projectScopedProcedure.input(listRBACPoliciesForSecurityGroupInputSchema).query(async ({ input, ctx }) => {
@@ -39509,7 +39577,8 @@ var rbacPolicyRouter = {
           target_tenant: targetTenant
         }
       };
-      const response = await network.put(`${RBAC_POLICIES_BASE_URL}/${policyId}`, requestBody);
+      const encodedPolicyId = (0, import_signal_openstack10.validateAndEncodeResourceId)(policyId, "RBAC policy");
+      const response = await network.put(`${RBAC_POLICIES_BASE_URL}/${encodedPolicyId}`, requestBody);
       if (!response.ok) {
         throw RBACPolicyErrorHandlers.update(response, policyId);
       }
@@ -39521,7 +39590,8 @@ var rbacPolicyRouter = {
     return withErrorHandling3(async () => {
       const { policyId } = input;
       const network = getNetworkService(ctx);
-      const response = await network.del(`${RBAC_POLICIES_BASE_URL}/${policyId}`);
+      const encodedPolicyId = (0, import_signal_openstack10.validateAndEncodeResourceId)(policyId, "RBAC policy");
+      const response = await network.del(`${RBAC_POLICIES_BASE_URL}/${encodedPolicyId}`);
       if (!response.ok) {
         throw RBACPolicyErrorHandlers.delete(response, policyId);
       }
@@ -39686,10 +39756,6 @@ var NETWORK_MAPPINGS = {
     engine: "network",
     rule: "create_security_group_rule"
   },
-  "network:security_group_rules:update": {
-    engine: "network",
-    rule: "update_security_group_rule"
-  },
   "network:security_group_rules:delete": {
     engine: "network",
     rule: "delete_security_group_rule"
@@ -39766,7 +39832,7 @@ var buildAppRouter = /* @__PURE__ */ __name((policyDir, extraRouters = []) => {
 }, "buildAppRouter");
 
 // src/server/context.ts
-var import_signal_openstack9 = __toESM(require_esm());
+var import_signal_openstack11 = __toESM(require_esm());
 
 // src/server/sessionCookie.ts
 var import_cookie = require("@fastify/cookie");
@@ -39854,7 +39920,7 @@ async function createContext(opts, config) {
     writable: false
   });
   if (currentAuthToken) {
-    openstackSession = await (0, import_signal_openstack9.SignalOpenstackSession)(normalizedEndpoint, {
+    openstackSession = await (0, import_signal_openstack11.SignalOpenstackSession)(normalizedEndpoint, {
       auth: {
         identity: {
           methods: [
@@ -39917,7 +39983,7 @@ async function createContext(opts, config) {
     }
   }, "getUserInfo");
   const createSession = /* @__PURE__ */ __name(async (params) => {
-    openstackSession = await (0, import_signal_openstack9.SignalOpenstackSession)(normalizedEndpoint, {
+    openstackSession = await (0, import_signal_openstack11.SignalOpenstackSession)(normalizedEndpoint, {
       auth: {
         identity: {
           methods: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cobaltcore-dev/aurora",
-  "version": "1.2.0",
+  "version": "2.0.0",
   "private": false,
   "description": "Aurora OpenStack dashboard — server and client library",
   "license": "Apache-2.0",
@@ -105,10 +105,10 @@
     "vite-plugin-dts": "^5.0.3",
     "vite-plugin-svgr": "^5.2.0",
     "vite-tsconfig-paths": "^6.1.1",
-    "vitest": "^4.1.10",
+    "vitest": "^4.1.11",
     "@cobaltcore-dev/aurora-config": "0.0.1",
-    "@cobaltcore-dev/policy-engine": "2.0.0",
-    "@cobaltcore-dev/signal-openstack": "1.0.1"
+    "@cobaltcore-dev/signal-openstack": "1.0.1",
+    "@cobaltcore-dev/policy-engine": "2.0.0"
   },
   "scripts": {
     "build": "pnpm build:server && pnpm build:client",