@open-mercato/core 0.6.8-develop.6924.1.a8d208fcdc → 0.6.8-develop.6930.1.1e5976efc3

package/dist/modules/eudr/api/risk-assessments/route.js

@@ -0,0 +1,300 @@
+import { z } from "zod";
+import { makeCrudRoute } from "@open-mercato/shared/lib/crud/factory";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { splitCustomFieldPayload } from "@open-mercato/shared/lib/crud/custom-fields";
+import { withScopedPayload } from "@open-mercato/shared/lib/api/scoped";
+import { buildIlikeTerm } from "@open-mercato/shared/lib/db/buildIlikeTerm";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { E } from "../../../../generated/entities.ids.generated.js";
+import { EudrDueDiligenceStatement, EudrRiskAssessment } from "../../data/entities.js";
+import { resolveDetailReadScope } from "../../lib/detail-read-scope.js";
+import {
+  EUDR_RISK_CONCLUSIONS,
+  EUDR_RISK_TIERS,
+  riskAssessmentCreateSchema,
+  riskAssessmentUpdateSchema
+} from "../../data/validators.js";
+import {
+  createEudrCrudOpenApi,
+  createPagedListResponseSchema,
+  defaultOkResponseSchema
+} from "../openapi.js";
+const rawBodySchema = z.object({}).passthrough();
+const listSchema = z.object({
+  page: z.coerce.number().min(1).default(1),
+  pageSize: z.coerce.number().min(1).max(100).default(50),
+  statementId: z.string().uuid().optional(),
+  conclusion: z.enum(EUDR_RISK_CONCLUSIONS).optional(),
+  overallTier: z.enum(EUDR_RISK_TIERS).optional(),
+  reviewDueBefore: z.coerce.date().optional(),
+  id: z.string().uuid().optional(),
+  ids: z.string().optional(),
+  search: z.string().optional(),
+  sortField: z.string().optional(),
+  sortDir: z.enum(["asc", "desc"]).optional()
+});
+const routeMetadata = {
+  GET: { requireAuth: true, requireFeatures: ["eudr.risk.view"] },
+  POST: { requireAuth: true, requireFeatures: ["eudr.risk.manage"] },
+  PUT: { requireAuth: true, requireFeatures: ["eudr.risk.manage"] },
+  DELETE: { requireAuth: true, requireFeatures: ["eudr.risk.manage"] }
+};
+const metadata = routeMetadata;
+function toIsoString(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value !== "string" || value.length === 0) return null;
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? value : date.toISOString();
+}
+function asStringOrNull(value) {
+  return typeof value === "string" ? value : null;
+}
+function asRecord(value) {
+  return value;
+}
+function resolveDeleteInput(parsed, ctx, translate) {
+  const record = parsed && typeof parsed === "object" ? asRecord(parsed) : {};
+  const body = record.body && typeof record.body === "object" ? asRecord(record.body) : null;
+  const query = record.query && typeof record.query === "object" ? asRecord(record.query) : null;
+  const requestId = ctx.request ? new URL(ctx.request.url).searchParams.get("id") : null;
+  const id = asStringOrNull(body?.id) ?? asStringOrNull(record.id) ?? asStringOrNull(query?.id) ?? requestId;
+  if (!id) {
+    throw new CrudHttpError(400, { error: translate("eudr.errors.risk_assessment_required", "Risk assessment id is required") });
+  }
+  return { id };
+}
+function buildFilters(query) {
+  const filters = {};
+  if (query.id) filters.id = { $eq: query.id };
+  if (query.statementId) filters.statement_id = { $eq: query.statementId };
+  if (query.conclusion) filters.conclusion = { $eq: query.conclusion };
+  if (query.overallTier) filters.overall_tier = { $eq: query.overallTier };
+  if (query.reviewDueBefore) filters.review_due_at = { $lte: query.reviewDueBefore };
+  const search = typeof query.search === "string" ? query.search.trim() : "";
+  if (search) {
+    filters.assessed_by_name = { $ilike: buildIlikeTerm(search) };
+  }
+  return filters;
+}
+function transformRiskAssessmentItem(item) {
+  if (!item || typeof item !== "object") return item;
+  const record = item;
+  return {
+    id: record.id,
+    statementId: record.statement_id ?? null,
+    statementTitle: null,
+    countryRisks: Array.isArray(record.country_risks) ? record.country_risks : [],
+    overallTier: record.overall_tier ?? null,
+    criteria: record.criteria ?? {},
+    conclusion: record.conclusion ?? null,
+    isSimplified: typeof record.is_simplified === "boolean" ? record.is_simplified : false,
+    assessedAt: toIsoString(record.assessed_at),
+    assessedByName: record.assessed_by_name ?? null,
+    reviewDueAt: toIsoString(record.review_due_at),
+    notes: record.notes ?? null,
+    createdAt: toIsoString(record.created_at),
+    updatedAt: toIsoString(record.updated_at)
+  };
+}
+async function attachStatementTitles(em, items, scope) {
+  const statementIds = [...new Set(
+    items.map((item) => item && typeof item === "object" ? asStringOrNull(item.statementId) : null).filter((id) => id !== null)
+  )];
+  if (!statementIds.length) return;
+  const where = {
+    id: { $in: statementIds },
+    deletedAt: null,
+    tenantId: scope.tenantId,
+    organizationId: { $in: scope.organizationIds }
+  };
+  const statements = await em.find(EudrDueDiligenceStatement, where, { fields: ["id", "title"] });
+  const titleById = new Map(statements.map((statement) => [statement.id, statement.title]));
+  for (const item of items) {
+    if (!item || typeof item !== "object") continue;
+    const record = item;
+    const statementId = asStringOrNull(record.statementId);
+    record.statementTitle = statementId ? titleById.get(statementId) ?? null : null;
+  }
+}
+const listFields = [
+  "id",
+  "statement_id",
+  "country_risks",
+  "overall_tier",
+  "criteria",
+  "conclusion",
+  "is_simplified",
+  "assessed_at",
+  "assessed_by_name",
+  "review_due_at",
+  "created_at",
+  "updated_at"
+];
+const crud = makeCrudRoute({
+  metadata: routeMetadata,
+  orm: {
+    entity: EudrRiskAssessment,
+    idField: "id",
+    orgField: "organizationId",
+    tenantField: "tenantId",
+    softDeleteField: "deletedAt"
+  },
+  indexer: { entityType: E.eudr.eudr_risk_assessment },
+  list: {
+    schema: listSchema,
+    entityId: E.eudr.eudr_risk_assessment,
+    fields: listFields,
+    sortFieldMap: {
+      created_at: "created_at",
+      createdAt: "created_at",
+      updated_at: "updated_at",
+      updatedAt: "updated_at",
+      assessed_at: "assessed_at",
+      assessedAt: "assessed_at",
+      review_due_at: "review_due_at",
+      reviewDueAt: "review_due_at",
+      overall_tier: "overall_tier",
+      overallTier: "overall_tier",
+      conclusion: "conclusion"
+    },
+    buildFilters,
+    transformItem: transformRiskAssessmentItem
+  },
+  actions: {
+    create: {
+      commandId: "eudr.risk_assessments.create",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        const { base, custom } = splitCustomFieldPayload(scoped);
+        const parsed = riskAssessmentCreateSchema.parse(base);
+        const input = { ...parsed, tenantId: scoped.tenantId, organizationId: scoped.organizationId };
+        return Object.keys(custom).length ? { ...input, customFields: custom } : input;
+      },
+      response: ({ result }) => ({ id: result?.entityId ?? result?.id ?? null }),
+      status: 201
+    },
+    update: {
+      commandId: "eudr.risk_assessments.update",
+      schema: rawBodySchema,
+      mapInput: async ({ raw, ctx }) => {
+        const { translate } = await resolveTranslations();
+        const scoped = withScopedPayload(raw ?? {}, ctx, translate);
+        const { base, custom } = splitCustomFieldPayload(scoped);
+        const parsed = riskAssessmentUpdateSchema.parse(base);
+        const input = { ...parsed, tenantId: scoped.tenantId, organizationId: scoped.organizationId };
+        return Object.keys(custom).length ? { ...input, customFields: custom } : input;
+      },
+      response: ({ result }) => {
+        const updatedAt = result?.updatedAt;
+        return {
+          ok: true,
+          updatedAt: updatedAt instanceof Date ? updatedAt.toISOString() : typeof updatedAt === "string" ? updatedAt : null
+        };
+      }
+    },
+    delete: {
+      commandId: "eudr.risk_assessments.delete",
+      schema: rawBodySchema,
+      mapInput: async ({ parsed, ctx }) => {
+        const { translate } = await resolveTranslations();
+        return resolveDeleteInput(parsed, ctx, translate);
+      },
+      response: () => ({ ok: true })
+    }
+  },
+  hooks: {
+    afterList: async (payload, ctx) => {
+      const items = Array.isArray(payload?.items) ? payload.items : [];
+      if (!items.length) return;
+      const tenantId = ctx.auth?.tenantId ?? null;
+      const organizationIds = ctx.organizationIds ?? (ctx.selectedOrganizationId ? [ctx.selectedOrganizationId] : ctx.auth?.orgId ? [ctx.auth.orgId] : null);
+      if (tenantId && organizationIds?.length) {
+        const em2 = ctx.container.resolve("em");
+        await attachStatementTitles(em2, items, { tenantId, organizationIds });
+      }
+      const detailRead = typeof ctx.query.id === "string" && ctx.query.id.length > 0 || typeof ctx.query.ids === "string" && ctx.query.ids.length > 0;
+      if (!detailRead) return;
+      const scope = resolveDetailReadScope(ctx);
+      if (!scope) return;
+      const ids = items.map((item) => item && typeof item === "object" ? asStringOrNull(item.id) : null).filter((id) => id !== null);
+      if (!ids.length) return;
+      const em = ctx.container.resolve("em");
+      const where = {
+        id: { $in: ids },
+        deletedAt: null,
+        tenantId: scope.tenantId,
+        organizationId: scope.organizationFilter
+      };
+      const decrypted = await findWithDecryption(
+        em,
+        EudrRiskAssessment,
+        where,
+        {},
+        { tenantId: scope.tenantId, organizationId: scope.decryptionOrganizationId }
+      );
+      const byId = new Map(decrypted.map((assessment) => [assessment.id, assessment]));
+      for (const item of items) {
+        if (!item || typeof item !== "object") continue;
+        const record = item;
+        const id = asStringOrNull(record.id);
+        const assessment = id ? byId.get(id) : null;
+        if (!assessment) continue;
+        record.notes = assessment.notes ?? null;
+      }
+    }
+  }
+});
+const GET = crud.GET;
+const POST = crud.POST;
+const PUT = crud.PUT;
+const DELETE = crud.DELETE;
+const riskAssessmentListItemSchema = z.object({
+  id: z.string().uuid(),
+  statementId: z.string().uuid().nullable().optional(),
+  statementTitle: z.string().nullable().optional(),
+  countryRisks: z.array(z.object({
+    country: z.string(),
+    tier: z.string()
+  })),
+  overallTier: z.enum(EUDR_RISK_TIERS).nullable().optional(),
+  criteria: z.record(z.string(), z.unknown()),
+  conclusion: z.enum(EUDR_RISK_CONCLUSIONS).nullable().optional(),
+  isSimplified: z.boolean(),
+  assessedAt: z.string().nullable().optional(),
+  assessedByName: z.string().nullable().optional(),
+  reviewDueAt: z.string().nullable().optional(),
+  notes: z.string().nullable().optional(),
+  createdAt: z.string().nullable().optional(),
+  updatedAt: z.string().nullable().optional()
+});
+const openApi = createEudrCrudOpenApi({
+  resourceName: "Risk assessment",
+  querySchema: listSchema,
+  listResponseSchema: createPagedListResponseSchema(riskAssessmentListItemSchema),
+  create: {
+    schema: riskAssessmentCreateSchema,
+    description: "Creates an EUDR risk assessment for the scoped organization."
+  },
+  update: {
+    schema: riskAssessmentUpdateSchema,
+    responseSchema: defaultOkResponseSchema,
+    description: "Updates an EUDR risk assessment."
+  },
+  del: {
+    schema: z.object({ id: z.string().uuid() }),
+    responseSchema: defaultOkResponseSchema,
+    description: "Deletes an EUDR risk assessment by id. Request body or query may provide the identifier."
+  }
+});
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/eudr/api/risk-assessments/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/eudr/api/risk-assessments/route.ts"],
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { makeCrudRoute } from '@open-mercato/shared/lib/crud/factory'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { splitCustomFieldPayload } from '@open-mercato/shared/lib/crud/custom-fields'\nimport { withScopedPayload } from '@open-mercato/shared/lib/api/scoped'\nimport { buildIlikeTerm } from '@open-mercato/shared/lib/db/buildIlikeTerm'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { E } from '#generated/entities.ids.generated'\nimport { EudrDueDiligenceStatement, EudrRiskAssessment } from '../../data/entities'\nimport { resolveDetailReadScope } from '../../lib/detail-read-scope'\nimport {\n  EUDR_RISK_CONCLUSIONS,\n  EUDR_RISK_TIERS,\n  riskAssessmentCreateSchema,\n  riskAssessmentUpdateSchema,\n} from '../../data/validators'\nimport {\n  createEudrCrudOpenApi,\n  createPagedListResponseSchema,\n  defaultOkResponseSchema,\n} from '../openapi'\n\ntype TranslateFn = (key: string, fallback?: string) => string\n\nconst rawBodySchema = z.object({}).passthrough()\n\nconst listSchema = z.object({\n  page: z.coerce.number().min(1).default(1),\n  pageSize: z.coerce.number().min(1).max(100).default(50),\n  statementId: z.string().uuid().optional(),\n  conclusion: z.enum(EUDR_RISK_CONCLUSIONS).optional(),\n  overallTier: z.enum(EUDR_RISK_TIERS).optional(),\n  reviewDueBefore: z.coerce.date().optional(),\n  id: z.string().uuid().optional(),\n  ids: z.string().optional(),\n  search: z.string().optional(),\n  sortField: z.string().optional(),\n  sortDir: z.enum(['asc', 'desc']).optional(),\n})\n\ntype RiskAssessmentListQuery = z.infer<typeof listSchema>\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.risk.view'] },\n  POST: { requireAuth: true, requireFeatures: ['eudr.risk.manage'] },\n  PUT: { requireAuth: true, requireFeatures: ['eudr.risk.manage'] },\n  DELETE: { requireAuth: true, requireFeatures: ['eudr.risk.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nfunction toIsoString(value: unknown): string | null {\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value !== 'string' || value.length === 0) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nfunction asStringOrNull(value: unknown): string | null {\n  return typeof value === 'string' ? value : null\n}\n\nfunction asRecord(value: object): Record<string, unknown> {\n  return value as Record<string, unknown>\n}\n\nfunction resolveDeleteInput(parsed: unknown, ctx: { request?: Request }, translate: TranslateFn) {\n  const record = parsed && typeof parsed === 'object' ? asRecord(parsed) : {}\n  const body = record.body && typeof record.body === 'object' ? asRecord(record.body) : null\n  const query = record.query && typeof record.query === 'object' ? asRecord(record.query) : null\n  const requestId = ctx.request ? new URL(ctx.request.url).searchParams.get('id') : null\n  const id = asStringOrNull(body?.id) ?? asStringOrNull(record.id) ?? asStringOrNull(query?.id) ?? requestId\n  if (!id) {\n    throw new CrudHttpError(400, { error: translate('eudr.errors.risk_assessment_required', 'Risk assessment id is required') })\n  }\n  return { id }\n}\n\nfunction buildFilters(query: RiskAssessmentListQuery): Record<string, unknown> {\n  const filters: Record<string, unknown> = {}\n  if (query.id) filters.id = { $eq: query.id }\n  if (query.statementId) filters.statement_id = { $eq: query.statementId }\n  if (query.conclusion) filters.conclusion = { $eq: query.conclusion }\n  if (query.overallTier) filters.overall_tier = { $eq: query.overallTier }\n  if (query.reviewDueBefore) filters.review_due_at = { $lte: query.reviewDueBefore }\n  const search = typeof query.search === 'string' ? query.search.trim() : ''\n  if (search) {\n    filters.assessed_by_name = { $ilike: buildIlikeTerm(search) }\n  }\n  return filters\n}\n\nfunction transformRiskAssessmentItem(item: unknown) {\n  if (!item || typeof item !== 'object') return item\n  const record = item as Record<string, unknown>\n  return {\n    id: record.id,\n    statementId: record.statement_id ?? null,\n    statementTitle: null,\n    countryRisks: Array.isArray(record.country_risks) ? record.country_risks : [],\n    overallTier: record.overall_tier ?? null,\n    criteria: record.criteria ?? {},\n    conclusion: record.conclusion ?? null,\n    isSimplified: typeof record.is_simplified === 'boolean' ? record.is_simplified : false,\n    assessedAt: toIsoString(record.assessed_at),\n    assessedByName: record.assessed_by_name ?? null,\n    reviewDueAt: toIsoString(record.review_due_at),\n    notes: record.notes ?? null,\n    createdAt: toIsoString(record.created_at),\n    updatedAt: toIsoString(record.updated_at),\n  }\n}\n\nasync function attachStatementTitles(\n  em: EntityManager,\n  items: unknown[],\n  scope: { tenantId: string; organizationIds: string[] },\n): Promise<void> {\n  const statementIds = [...new Set(\n    items\n      .map((item) => (item && typeof item === 'object' ? asStringOrNull((item as Record<string, unknown>).statementId) : null))\n      .filter((id): id is string => id !== null),\n  )]\n  if (!statementIds.length) return\n  const where: FilterQuery<EudrDueDiligenceStatement> = {\n    id: { $in: statementIds },\n    deletedAt: null,\n    tenantId: scope.tenantId,\n    organizationId: { $in: scope.organizationIds },\n  }\n  const statements = await em.find(EudrDueDiligenceStatement, where, { fields: ['id', 'title'] })\n  const titleById = new Map(statements.map((statement) => [statement.id, statement.title]))\n  for (const item of items) {\n    if (!item || typeof item !== 'object') continue\n    const record = item as Record<string, unknown>\n    const statementId = asStringOrNull(record.statementId)\n    record.statementTitle = statementId ? (titleById.get(statementId) ?? null) : null\n  }\n}\n\nconst listFields = [\n  'id',\n  'statement_id',\n  'country_risks',\n  'overall_tier',\n  'criteria',\n  'conclusion',\n  'is_simplified',\n  'assessed_at',\n  'assessed_by_name',\n  'review_due_at',\n  'created_at',\n  'updated_at',\n]\n\nconst crud = makeCrudRoute({\n  metadata: routeMetadata,\n  orm: {\n    entity: EudrRiskAssessment,\n    idField: 'id',\n    orgField: 'organizationId',\n    tenantField: 'tenantId',\n    softDeleteField: 'deletedAt',\n  },\n  indexer: { entityType: E.eudr.eudr_risk_assessment },\n  list: {\n    schema: listSchema,\n    entityId: E.eudr.eudr_risk_assessment,\n    fields: listFields,\n    sortFieldMap: {\n      created_at: 'created_at',\n      createdAt: 'created_at',\n      updated_at: 'updated_at',\n      updatedAt: 'updated_at',\n      assessed_at: 'assessed_at',\n      assessedAt: 'assessed_at',\n      review_due_at: 'review_due_at',\n      reviewDueAt: 'review_due_at',\n      overall_tier: 'overall_tier',\n      overallTier: 'overall_tier',\n      conclusion: 'conclusion',\n    },\n    buildFilters,\n    transformItem: transformRiskAssessmentItem,\n  },\n  actions: {\n    create: {\n      commandId: 'eudr.risk_assessments.create',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const { base, custom } = splitCustomFieldPayload(scoped)\n        const parsed = riskAssessmentCreateSchema.parse(base)\n        const input = { ...parsed, tenantId: scoped.tenantId, organizationId: scoped.organizationId }\n        return Object.keys(custom).length ? { ...input, customFields: custom } : input\n      },\n      response: ({ result }) => ({ id: result?.entityId ?? result?.id ?? null }),\n      status: 201,\n    },\n    update: {\n      commandId: 'eudr.risk_assessments.update',\n      schema: rawBodySchema,\n      mapInput: async ({ raw, ctx }) => {\n        const { translate } = await resolveTranslations()\n        const scoped = withScopedPayload(raw ?? {}, ctx, translate)\n        const { base, custom } = splitCustomFieldPayload(scoped)\n        const parsed = riskAssessmentUpdateSchema.parse(base)\n        const input = { ...parsed, tenantId: scoped.tenantId, organizationId: scoped.organizationId }\n        return Object.keys(custom).length ? { ...input, customFields: custom } : input\n      },\n      response: ({ result }) => {\n        const updatedAt = result?.updatedAt\n        return {\n          ok: true,\n          updatedAt: updatedAt instanceof Date ? updatedAt.toISOString() : (typeof updatedAt === 'string' ? updatedAt : null),\n        }\n      },\n    },\n    delete: {\n      commandId: 'eudr.risk_assessments.delete',\n      schema: rawBodySchema,\n      mapInput: async ({ parsed, ctx }) => {\n        const { translate } = await resolveTranslations()\n        return resolveDeleteInput(parsed, ctx, translate)\n      },\n      response: () => ({ ok: true }),\n    },\n  },\n  hooks: {\n    afterList: async (payload, ctx) => {\n      const items: unknown[] = Array.isArray(payload?.items) ? payload.items : []\n      if (!items.length) return\n      const tenantId = ctx.auth?.tenantId ?? null\n      const organizationIds = ctx.organizationIds ?? (ctx.selectedOrganizationId\n        ? [ctx.selectedOrganizationId]\n        : (ctx.auth?.orgId ? [ctx.auth.orgId] : null))\n      if (tenantId && organizationIds?.length) {\n        const em = ctx.container.resolve('em') as EntityManager\n        await attachStatementTitles(em, items, { tenantId, organizationIds })\n      }\n      const detailRead = (typeof ctx.query.id === 'string' && ctx.query.id.length > 0)\n        || (typeof ctx.query.ids === 'string' && ctx.query.ids.length > 0)\n      if (!detailRead) return\n      const scope = resolveDetailReadScope(ctx)\n      if (!scope) return\n      const ids = items\n        .map((item) => (item && typeof item === 'object' ? asStringOrNull((item as Record<string, unknown>).id) : null))\n        .filter((id): id is string => id !== null)\n      if (!ids.length) return\n      const em = ctx.container.resolve('em') as EntityManager\n      const where: FilterQuery<EudrRiskAssessment> = {\n        id: { $in: ids },\n        deletedAt: null,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationFilter,\n      }\n      const decrypted = await findWithDecryption(\n        em,\n        EudrRiskAssessment,\n        where,\n        {},\n        { tenantId: scope.tenantId, organizationId: scope.decryptionOrganizationId },\n      )\n      const byId = new Map(decrypted.map((assessment) => [assessment.id, assessment]))\n      for (const item of items) {\n        if (!item || typeof item !== 'object') continue\n        const record = item as Record<string, unknown>\n        const id = asStringOrNull(record.id)\n        const assessment = id ? byId.get(id) : null\n        if (!assessment) continue\n        record.notes = assessment.notes ?? null\n      }\n    },\n  },\n})\n\nexport const GET = crud.GET\nexport const POST = crud.POST\nexport const PUT = crud.PUT\nexport const DELETE = crud.DELETE\n\nconst riskAssessmentListItemSchema = z.object({\n  id: z.string().uuid(),\n  statementId: z.string().uuid().nullable().optional(),\n  statementTitle: z.string().nullable().optional(),\n  countryRisks: z.array(z.object({\n    country: z.string(),\n    tier: z.string(),\n  })),\n  overallTier: z.enum(EUDR_RISK_TIERS).nullable().optional(),\n  criteria: z.record(z.string(), z.unknown()),\n  conclusion: z.enum(EUDR_RISK_CONCLUSIONS).nullable().optional(),\n  isSimplified: z.boolean(),\n  assessedAt: z.string().nullable().optional(),\n  assessedByName: z.string().nullable().optional(),\n  reviewDueAt: z.string().nullable().optional(),\n  notes: z.string().nullable().optional(),\n  createdAt: z.string().nullable().optional(),\n  updatedAt: z.string().nullable().optional(),\n})\n\nexport const openApi = createEudrCrudOpenApi({\n  resourceName: 'Risk assessment',\n  querySchema: listSchema,\n  listResponseSchema: createPagedListResponseSchema(riskAssessmentListItemSchema),\n  create: {\n    schema: riskAssessmentCreateSchema,\n    description: 'Creates an EUDR risk assessment for the scoped organization.',\n  },\n  update: {\n    schema: riskAssessmentUpdateSchema,\n    responseSchema: defaultOkResponseSchema,\n    description: 'Updates an EUDR risk assessment.',\n  },\n  del: {\n    schema: z.object({ id: z.string().uuid() }),\n    responseSchema: defaultOkResponseSchema,\n    description: 'Deletes an EUDR risk assessment by id. Request body or query may provide the identifier.',\n  },\n})\n"],
+  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,+BAA+B;AACxC,SAAS,yBAAyB;AAClC,SAAS,sBAAsB;AAC/B,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,SAAS;AAClB,SAAS,2BAA2B,0BAA0B;AAC9D,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAIP,MAAM,gBAAgB,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAE/C,MAAM,aAAa,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EACtD,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,YAAY,EAAE,KAAK,qBAAqB,EAAE,SAAS;AAAA,EACnD,aAAa,EAAE,KAAK,eAAe,EAAE,SAAS;AAAA,EAC9C,iBAAiB,EAAE,OAAO,KAAK,EAAE,SAAS;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC/B,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,EAAE,SAAS;AAC5C,CAAC;AAID,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EACjE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACrE;AAEO,MAAM,WAAW;AAExB,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,SAAS,OAAwC;AACxD,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAiB,KAA4B,WAAwB;AAC/F,QAAM,SAAS,UAAU,OAAO,WAAW,WAAW,SAAS,MAAM,IAAI,CAAC;AAC1E,QAAM,OAAO,OAAO,QAAQ,OAAO,OAAO,SAAS,WAAW,SAAS,OAAO,IAAI,IAAI;AACtF,QAAM,QAAQ,OAAO,SAAS,OAAO,OAAO,UAAU,WAAW,SAAS,OAAO,KAAK,IAAI;AAC1F,QAAM,YAAY,IAAI,UAAU,IAAI,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,IAAI,IAAI,IAAI;AAClF,QAAM,KAAK,eAAe,MAAM,EAAE,KAAK,eAAe,OAAO,EAAE,KAAK,eAAe,OAAO,EAAE,KAAK;AACjG,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,wCAAwC,gCAAgC,EAAE,CAAC;AAAA,EAC7H;AACA,SAAO,EAAE,GAAG;AACd;AAEA,SAAS,aAAa,OAAyD;AAC7E,QAAM,UAAmC,CAAC;AAC1C,MAAI,MAAM,GAAI,SAAQ,KAAK,EAAE,KAAK,MAAM,GAAG;AAC3C,MAAI,MAAM,YAAa,SAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AACvE,MAAI,MAAM,WAAY,SAAQ,aAAa,EAAE,KAAK,MAAM,WAAW;AACnE,MAAI,MAAM,YAAa,SAAQ,eAAe,EAAE,KAAK,MAAM,YAAY;AACvE,MAAI,MAAM,gBAAiB,SAAQ,gBAAgB,EAAE,MAAM,MAAM,gBAAgB;AACjF,QAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,OAAO,KAAK,IAAI;AACxE,MAAI,QAAQ;AACV,YAAQ,mBAAmB,EAAE,QAAQ,eAAe,MAAM,EAAE;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,SAAS,4BAA4B,MAAe;AAClD,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,SAAS;AACf,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,aAAa,OAAO,gBAAgB;AAAA,IACpC,gBAAgB;AAAA,IAChB,cAAc,MAAM,QAAQ,OAAO,aAAa,IAAI,OAAO,gBAAgB,CAAC;AAAA,IAC5E,aAAa,OAAO,gBAAgB;AAAA,IACpC,UAAU,OAAO,YAAY,CAAC;AAAA,IAC9B,YAAY,OAAO,cAAc;AAAA,IACjC,cAAc,OAAO,OAAO,kBAAkB,YAAY,OAAO,gBAAgB;AAAA,IACjF,YAAY,YAAY,OAAO,WAAW;AAAA,IAC1C,gBAAgB,OAAO,oBAAoB;AAAA,IAC3C,aAAa,YAAY,OAAO,aAAa;AAAA,IAC7C,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,YAAY,OAAO,UAAU;AAAA,IACxC,WAAW,YAAY,OAAO,UAAU;AAAA,EAC1C;AACF;AAEA,eAAe,sBACb,IACA,OACA,OACe;AACf,QAAM,eAAe,CAAC,GAAG,IAAI;AAAA,IAC3B,MACG,IAAI,CAAC,SAAU,QAAQ,OAAO,SAAS,WAAW,eAAgB,KAAiC,WAAW,IAAI,IAAK,EACvH,OAAO,CAAC,OAAqB,OAAO,IAAI;AAAA,EAC7C,CAAC;AACD,MAAI,CAAC,aAAa,OAAQ;AAC1B,QAAM,QAAgD;AAAA,IACpD,IAAI,EAAE,KAAK,aAAa;AAAA,IACxB,WAAW;AAAA,IACX,UAAU,MAAM;AAAA,IAChB,gBAAgB,EAAE,KAAK,MAAM,gBAAgB;AAAA,EAC/C;AACA,QAAM,aAAa,MAAM,GAAG,KAAK,2BAA2B,OAAO,EAAE,QAAQ,CAAC,MAAM,OAAO,EAAE,CAAC;AAC9F,QAAM,YAAY,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC;AACxF,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,UAAM,SAAS;AACf,UAAM,cAAc,eAAe,OAAO,WAAW;AACrD,WAAO,iBAAiB,cAAe,UAAU,IAAI,WAAW,KAAK,OAAQ;AAAA,EAC/E;AACF;AAEA,MAAM,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,OAAO,cAAc;AAAA,EACzB,UAAU;AAAA,EACV,KAAK;AAAA,IACH,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,aAAa;AAAA,IACb,iBAAiB;AAAA,EACnB;AAAA,EACA,SAAS,EAAE,YAAY,EAAE,KAAK,qBAAqB;AAAA,EACnD,MAAM;AAAA,IACJ,QAAQ;AAAA,IACR,UAAU,EAAE,KAAK;AAAA,IACjB,QAAQ;AAAA,IACR,cAAc;AAAA,MACZ,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,aAAa;AAAA,MACb,cAAc;AAAA,MACd,aAAa;AAAA,MACb,YAAY;AAAA,IACd;AAAA,IACA;AAAA,IACA,eAAe;AAAA,EACjB;AAAA,EACA,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,cAAM,SAAS,2BAA2B,MAAM,IAAI;AACpD,cAAM,QAAQ,EAAE,GAAG,QAAQ,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAC5F,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,cAAc,OAAO,IAAI;AAAA,MAC3E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,QAAQ,YAAY,QAAQ,MAAM,KAAK;AAAA,MACxE,QAAQ;AAAA,IACV;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,KAAK,IAAI,MAAM;AAChC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,cAAM,SAAS,kBAAkB,OAAO,CAAC,GAAG,KAAK,SAAS;AAC1D,cAAM,EAAE,MAAM,OAAO,IAAI,wBAAwB,MAAM;AACvD,cAAM,SAAS,2BAA2B,MAAM,IAAI;AACpD,cAAM,QAAQ,EAAE,GAAG,QAAQ,UAAU,OAAO,UAAU,gBAAgB,OAAO,eAAe;AAC5F,eAAO,OAAO,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,cAAc,OAAO,IAAI;AAAA,MAC3E;AAAA,MACA,UAAU,CAAC,EAAE,OAAO,MAAM;AACxB,cAAM,YAAY,QAAQ;AAC1B,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,WAAW,qBAAqB,OAAO,UAAU,YAAY,IAAK,OAAO,cAAc,WAAW,YAAY;AAAA,QAChH;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,QAAQ;AAAA,MACR,UAAU,OAAO,EAAE,QAAQ,IAAI,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,eAAO,mBAAmB,QAAQ,KAAK,SAAS;AAAA,MAClD;AAAA,MACA,UAAU,OAAO,EAAE,IAAI,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,WAAW,OAAO,SAAS,QAAQ;AACjC,YAAM,QAAmB,MAAM,QAAQ,SAAS,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAC1E,UAAI,CAAC,MAAM,OAAQ;AACnB,YAAM,WAAW,IAAI,MAAM,YAAY;AACvC,YAAM,kBAAkB,IAAI,oBAAoB,IAAI,yBAChD,CAAC,IAAI,sBAAsB,IAC1B,IAAI,MAAM,QAAQ,CAAC,IAAI,KAAK,KAAK,IAAI;AAC1C,UAAI,YAAY,iBAAiB,QAAQ;AACvC,cAAMA,MAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,cAAM,sBAAsBA,KAAI,OAAO,EAAE,UAAU,gBAAgB,CAAC;AAAA,MACtE;AACA,YAAM,aAAc,OAAO,IAAI,MAAM,OAAO,YAAY,IAAI,MAAM,GAAG,SAAS,KACxE,OAAO,IAAI,MAAM,QAAQ,YAAY,IAAI,MAAM,IAAI,SAAS;AAClE,UAAI,CAAC,WAAY;AACjB,YAAM,QAAQ,uBAAuB,GAAG;AACxC,UAAI,CAAC,MAAO;AACZ,YAAM,MAAM,MACT,IAAI,CAAC,SAAU,QAAQ,OAAO,SAAS,WAAW,eAAgB,KAAiC,EAAE,IAAI,IAAK,EAC9G,OAAO,CAAC,OAAqB,OAAO,IAAI;AAC3C,UAAI,CAAC,IAAI,OAAQ;AACjB,YAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,YAAM,QAAyC;AAAA,QAC7C,IAAI,EAAE,KAAK,IAAI;AAAA,QACf,WAAW;AAAA,QACX,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB;AACA,YAAM,YAAY,MAAM;AAAA,QACtB;AAAA,QACA;AAAA,QACA;AAAA,QACA,CAAC;AAAA,QACD,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,yBAAyB;AAAA,MAC7E;AACA,YAAM,OAAO,IAAI,IAAI,UAAU,IAAI,CAAC,eAAe,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;AAC/E,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,QAAQ,OAAO,SAAS,SAAU;AACvC,cAAM,SAAS;AACf,cAAM,KAAK,eAAe,OAAO,EAAE;AACnC,cAAM,aAAa,KAAK,KAAK,IAAI,EAAE,IAAI;AACvC,YAAI,CAAC,WAAY;AACjB,eAAO,QAAQ,WAAW,SAAS;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAEM,MAAM,MAAM,KAAK;AACjB,MAAM,OAAO,KAAK;AAClB,MAAM,MAAM,KAAK;AACjB,MAAM,SAAS,KAAK;AAE3B,MAAM,+BAA+B,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,cAAc,EAAE,MAAM,EAAE,OAAO;AAAA,IAC7B,SAAS,EAAE,OAAO;AAAA,IAClB,MAAM,EAAE,OAAO;AAAA,EACjB,CAAC,CAAC;AAAA,EACF,aAAa,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC1C,YAAY,EAAE,KAAK,qBAAqB,EAAE,SAAS,EAAE,SAAS;AAAA,EAC9D,cAAc,EAAE,QAAQ;AAAA,EACxB,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC/C,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACtC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAC5C,CAAC;AAEM,MAAM,UAAU,sBAAsB;AAAA,EAC3C,cAAc;AAAA,EACd,aAAa;AAAA,EACb,oBAAoB,8BAA8B,4BAA4B;AAAA,EAC9E,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,QAAQ;AAAA,IACN,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AAAA,EACA,KAAK;AAAA,IACH,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IAC1C,gBAAgB;AAAA,IAChB,aAAa;AAAA,EACf;AACF,CAAC;",
+  "names": ["em"]
+}