npm - @open-mercato/core - Versions diffs - 0.7.1-develop.7130.1.fef2396fd8 → 0.7.1-develop.7135.1.19bf969756 - Mend

@open-mercato/core 0.7.1-develop.7130.1.fef2396fd8 → 0.7.1-develop.7135.1.19bf969756

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (242) hide show

package/dist/modules/dictionaries/api/[dictionaryId]/entries/set-default/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/dictionaries/api/%5BdictionaryId%5D/entries/set-default/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { Dictionary } from '@open-mercato/core/modules/dictionaries/data/entities'\nimport { resolveDictionariesRouteContext } from '@open-mercato/core/modules/dictionaries/api/context'\nimport {\n  setDefaultDictionaryEntryCommandSchema,\n  setDefaultDictionaryEntrySchema,\n  type SetDefaultDictionaryEntryCommandInput,\n} from '@open-mercato/core/modules/dictionaries/data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport {\n  dictionaryIdParamsSchema,\n  dictionariesErrorSchema,\n  dictionariesOkSchema,\n  dictionariesTag,\n  setDefaultEntryRequestSchema,\n} from '../../../openapi'\nimport { resolveDictionaryActorId } from '../../../context'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('dictionaries').child({ component: 'entries-api' })\n\nconst paramsSchema = z.object({ dictionaryId: z.string().uuid() })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['dictionaries.manage'] },\n}\n\nexport async function POST(req: Request, ctx: { params?: { dictionaryId?: string } }) {\n  try {\n    const context = await resolveDictionariesRouteContext(req)\n    if (!context.auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const { dictionaryId } = paramsSchema.parse({ dictionaryId: ctx.params?.dictionaryId })\n\n    if (!context.organizationId) {\n      throw new CrudHttpError(400, { error: context.translate('dictionaries.errors.organization_required', 'Organization context is required') })\n    }\n    const dictionaryEm = context.em.fork()\n    const dictionary = await findOneWithDecryption(\n      dictionaryEm,\n      Dictionary,\n      {\n        id: dictionaryId,\n        organizationId: context.organizationId,\n        tenantId: context.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n    )\n    if (!dictionary) {\n      throw new CrudHttpError(404, { error: context.translate('dictionaries.errors.not_found', 'Dictionary not found') })\n    }\n\n    const payload = setDefaultDictionaryEntrySchema.parse(await readJsonSafe(req, {}))\n    const guardUserId = resolveDictionaryActorId(context.auth)\n    const guardResult = await validateCrudMutationGuard(context.container, {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userId: guardUserId,\n      resourceKind: 'dictionaries.dictionary',\n      resourceId: dictionaryId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: payload,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandInput = setDefaultDictionaryEntryCommandSchema.parse({\n      dictionaryId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      entryId: payload.entryId,\n    } satisfies SetDefaultDictionaryEntryCommandInput)\n\n    const commandBus = context.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<SetDefaultDictionaryEntryCommandInput, { dictionaryId: string; entryId: string; clearedIds: string[] }>(\n      'dictionaries.entries.set_default',\n      {\n        input: commandInput,\n        ctx: context.ctx,\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(context.container, {\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n        userId: guardUserId,\n        resourceKind: 'dictionaries.dictionary',\n        resourceId: dictionaryId,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'dictionaries.dictionary',\n          resourceId: logEntry.resourceId ?? dictionaryId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Invalid input', details: err.issues }, { status: 400 })\n    }\n    logger.error('Failed to set default entry', { err })\n    return NextResponse.json({ error: 'Failed to set default entry' }, { status: 500 })\n  }\n}\n\nconst setDefaultPostDoc: OpenApiMethodDoc = {\n  summary: 'Set default dictionary entry',\n  description: 'Marks the specified entry as the default for this dictionary, clearing any previous default.',\n  tags: [dictionariesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: setDefaultEntryRequestSchema,\n    description: 'ID of the entry to set as default.',\n  },\n  responses: [\n    { status: 200, description: 'Default entry set.', schema: dictionariesOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: dictionariesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dictionariesErrorSchema },\n    { status: 404, description: 'Dictionary or entry not found', schema: dictionariesErrorSchema },\n    { status: 500, description: 'Failed to set default entry', schema: dictionariesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dictionariesTag,\n  summary: 'Set default dictionary entry',\n  pathParams: dictionaryIdParamsSchema,\n  methods: {\n    POST: setDefaultPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,eAAe,uBAAuB;AAG/C,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,cAAc,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAE9E,MAAM,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE1D,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEA,eAAsB,KAAK,KAAc,KAA6C;AACpF,MAAI;AACF,UAAM,UAAU,MAAM,gCAAgC,GAAG;AACzD,QAAI,CAAC,QAAQ,MAAM;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,EAAE,aAAa,IAAI,aAAa,MAAM,EAAE,cAAc,IAAI,QAAQ,aAAa,CAAC;AAEtF,QAAI,CAAC,QAAQ,gBAAgB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,6CAA6C,kCAAkC,EAAE,CAAC;AAAA,IAC5I;AACA,UAAM,eAAe,QAAQ,GAAG,KAAK;AACrC,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,IACvE;AACA,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,iCAAiC,sBAAsB,EAAE,CAAC;AAAA,IACpH;AAEA,UAAM,UAAU,gCAAgC,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACjF,UAAM,cAAc,yBAAyB,QAAQ,IAAI;AACzD,UAAM,cAAc,MAAM,0BAA0B,QAAQ,WAAW;AAAA,MACrE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,eAAe,uCAAuC,MAAM;AAAA,MAChE;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,SAAS,QAAQ;AAAA,IACnB,CAAiD;AAEjD,UAAM,aAAa,QAAQ,UAAU,QAAQ,YAAY;AACzD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,QAAQ;AAAA,MACf;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,QAAQ,WAAW;AAAA,QACxD,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3F;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,qBAAqB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wBAAwB;AAAA,IACjF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,wBAAwB;AAAA,IAC7F,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,wBAAwB;AAAA,EAC7F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { Dictionary } from '@open-mercato/core/modules/dictionaries/data/entities'\nimport { resolveDictionariesRouteContext } from '@open-mercato/core/modules/dictionaries/api/context'\nimport {\n  setDefaultDictionaryEntryCommandSchema,\n  setDefaultDictionaryEntrySchema,\n  type SetDefaultDictionaryEntryCommandInput,\n} from '@open-mercato/core/modules/dictionaries/data/validators'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { readJsonSafe } from '@open-mercato/shared/lib/http/readJsonSafe'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport {\n  dictionaryIdParamsSchema,\n  dictionariesErrorSchema,\n  dictionariesOkSchema,\n  dictionariesTag,\n  setDefaultEntryRequestSchema,\n} from '../../../openapi'\nimport { resolveDictionaryActorId } from '../../../context'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('dictionaries').child({ component: 'entries-api' })\n\nconst paramsSchema = z.object({ dictionaryId: z.string().uuid() })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['dictionaries.manage'] },\n}\n\nexport async function POST(req: Request, ctx: { params?: { dictionaryId?: string } }) {\n  try {\n    const context = await resolveDictionariesRouteContext(req)\n    if (!context.auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const { dictionaryId } = paramsSchema.parse({ dictionaryId: ctx.params?.dictionaryId })\n\n    if (!context.organizationId) {\n      throw new CrudHttpError(400, { error: context.translate('dictionaries.errors.organization_required', 'Organization context is required') })\n    }\n    const dictionaryEm = context.em.fork()\n    const dictionary = await findOneWithDecryption(\n      dictionaryEm,\n      Dictionary,\n      {\n        id: dictionaryId,\n        organizationId: context.organizationId,\n        tenantId: context.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      { tenantId: context.tenantId, organizationId: context.organizationId },\n    )\n    if (!dictionary) {\n      throw new CrudHttpError(404, { error: context.translate('dictionaries.errors.not_found', 'Dictionary not found') })\n    }\n\n    const payload = setDefaultDictionaryEntrySchema.parse(await readJsonSafe(req, {}))\n    const guardUserId = resolveDictionaryActorId(context.auth)\n    const guardResult = await validateCrudMutationGuard(context.container, {\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      userId: guardUserId,\n      resourceKind: 'dictionaries.dictionary',\n      resourceId: dictionaryId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: payload,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandInput = setDefaultDictionaryEntryCommandSchema.parse({\n      dictionaryId,\n      tenantId: context.tenantId,\n      organizationId: context.organizationId,\n      entryId: payload.entryId,\n    } satisfies SetDefaultDictionaryEntryCommandInput)\n\n    const commandBus = context.container.resolve('commandBus') as CommandBus\n    const { logEntry } = await commandBus.execute<SetDefaultDictionaryEntryCommandInput, { dictionaryId: string; entryId: string; clearedIds: string[] }>(\n      'dictionaries.entries.set_default',\n      {\n        input: commandInput,\n        ctx: context.ctx,\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(context.container, {\n        tenantId: context.tenantId,\n        organizationId: context.organizationId,\n        userId: guardUserId,\n        resourceKind: 'dictionaries.dictionary',\n        resourceId: dictionaryId,\n        operation: 'custom',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({ ok: true })\n    if (logEntry?.undoToken && logEntry.id && logEntry.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'dictionaries.dictionary',\n          resourceId: logEntry.resourceId ?? dictionaryId,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : new Date().toISOString(),\n        }),\n      )\n    }\n    return response\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Invalid input', details: err.issues }, { status: 400 })\n    }\n    logger.error('Failed to set default entry', { err })\n    return NextResponse.json({ error: 'Failed to set default entry' }, { status: 500 })\n  }\n}\n\nconst setDefaultPostDoc: OpenApiMethodDoc = {\n  summary: 'Set default dictionary entry',\n  description: 'Marks the specified entry as the default for this dictionary, clearing any previous default.',\n  tags: [dictionariesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: setDefaultEntryRequestSchema,\n    description: 'ID of the entry to set as default.',\n  },\n  responses: [\n    { status: 200, description: 'Default entry set.', schema: dictionariesOkSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: dictionariesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: dictionariesErrorSchema },\n    { status: 404, description: 'Dictionary or entry not found', schema: dictionariesErrorSchema },\n    { status: 500, description: 'Failed to set default entry', schema: dictionariesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: dictionariesTag,\n  summary: 'Set default dictionary entry',\n  pathParams: dictionaryIdParamsSchema,\n  methods: {\n    POST: setDefaultPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAC3B,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,SAAS,eAAe,uBAAuB;AAG/C,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,cAAc,EAAE,MAAM,EAAE,WAAW,cAAc,CAAC;AAE9E,MAAM,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAE1D,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,qBAAqB,EAAE;AACtE;AAEA,eAAsB,KAAK,KAAc,KAA6C;AACpF,MAAI;AACF,UAAM,UAAU,MAAM,gCAAgC,GAAG;AACzD,QAAI,CAAC,QAAQ,MAAM;AACjB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,EAAE,aAAa,IAAI,aAAa,MAAM,EAAE,cAAc,IAAI,QAAQ,aAAa,CAAC;AAEtF,QAAI,CAAC,QAAQ,gBAAgB;AAC3B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,6CAA6C,kCAAkC,EAAE,CAAC;AAAA,IAC5I;AACA,UAAM,eAAe,QAAQ,GAAG,KAAK;AACrC,UAAM,aAAa,MAAM;AAAA,MACvB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,QAAQ;AAAA,QACxB,UAAU,QAAQ;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,UAAU,QAAQ,UAAU,gBAAgB,QAAQ,eAAe;AAAA,IACvE;AACA,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,UAAU,iCAAiC,sBAAsB,EAAE,CAAC;AAAA,IACpH;AAEA,UAAM,UAAU,gCAAgC,MAAM,MAAM,aAAa,KAAK,CAAC,CAAC,CAAC;AACjF,UAAM,cAAc,yBAAyB,QAAQ,IAAI;AACzD,UAAM,cAAc,MAAM,0BAA0B,QAAQ,WAAW;AAAA,MACrE,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,eAAe,uCAAuC,MAAM;AAAA,MAChE;AAAA,MACA,UAAU,QAAQ;AAAA,MAClB,gBAAgB,QAAQ;AAAA,MACxB,SAAS,QAAQ;AAAA,IACnB,CAAiD;AAEjD,UAAM,aAAa,QAAQ,UAAU,QAAQ,YAAY;AACzD,UAAM,EAAE,SAAS,IAAI,MAAM,WAAW;AAAA,MACpC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,QACP,KAAK,QAAQ;AAAA,MACf;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,QAAQ,WAAW;AAAA,QACxD,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC;AAC/C,QAAI,UAAU,aAAa,SAAS,MAAM,SAAS,WAAW;AAC5D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc;AAAA,UACnC,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,KAAI,oBAAI,KAAK,GAAE,YAAY;AAAA,QAC7G,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3F;AACA,WAAO,MAAM,+BAA+B,EAAE,IAAI,CAAC;AACnD,WAAO,aAAa,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpF;AACF;AAEA,MAAM,oBAAsC;AAAA,EAC1C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,qBAAqB;AAAA,EACjF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wBAAwB;AAAA,IACjF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,wBAAwB;AAAA,IAC7F,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,wBAAwB;AAAA,EAC7F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/directory/api/organization-branding/route.js CHANGED Viewed

@@ -16,6 +16,7 @@ import { organizationUpdateSchema } from "@open-mercato/core/modules/directory/d
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import "@open-mercato/core/modules/directory/commands/organizations";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 const logger = createLogger("directory").child({ component: "organization-branding" });
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["directory.organizations.view"] },
@@ -224,6 +225,10 @@ async function PUT(req) {
     if (isCrudHttpError(err)) {
       return NextResponse.json(err.body, { status: err.status });
     }
+    const interceptorRejection = getCommandInterceptorHttpRejection(err);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     logger.error("Organization branding update failed", { err });
     return NextResponse.json(
       { error: resolved.translate("directory.branding.errors.save", "Failed to update organization branding.") },

package/dist/modules/directory/api/organization-branding/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/directory/api/organization-branding/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { Organization } from '@open-mercato/core/modules/directory/data/entities'\nimport { organizationUpdateSchema } from '@open-mercato/core/modules/directory/data/validators'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport '@open-mercato/core/modules/directory/commands/organizations'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('directory').child({ component: 'organization-branding' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['directory.organizations.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n}\n\nconst brandingResponseSchema = z.object({\n  organizationId: z.string().uuid(),\n  organizationName: z.string(),\n  tenantId: z.string().uuid(),\n  logoUrl: z.string().nullable(),\n  logoPreserveAspectRatio: z.boolean(),\n  updatedAt: z.string().nullable(),\n})\n\nconst brandingUpdateSchema = z.object({\n  logoUrl: organizationUpdateSchema.shape.logoUrl,\n  logoPreserveAspectRatio: organizationUpdateSchema.shape.logoPreserveAspectRatio,\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\ntype RequestContainer = Awaited<ReturnType<typeof createRequestContainer>>\n\nfunction buildCommandContext(\n  container: RequestContainer,\n  auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>,\n  req: Request,\n  organizationId: string,\n  tenantId: string,\n): CommandRuntimeContext {\n  return {\n    container,\n    auth,\n    organizationScope: {\n      selectedId: organizationId,\n      filterIds: [organizationId],\n      allowedIds: null,\n      tenantId,\n    },\n    selectedOrganizationId: organizationId,\n    organizationIds: [organizationId],\n    request: req,\n  }\n}\n\nasync function resolveCurrentOrganization(req: Request) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return {\n      response: NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 }),\n    }\n  }\n\n  const container = await createRequestContainer()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope.selectedId ?? auth.orgId ?? null\n  const tenantId = scope.tenantId ?? auth.tenantId ?? null\n  if (!organizationId || !tenantId) {\n    return {\n      response: NextResponse.json(\n        {\n          error: translate(\n            'directory.branding.errors.organizationRequired',\n            'Select a single organization before changing sidebar branding.',\n          ),\n        },\n        { status: 400 },\n      ),\n    }\n  }\n\n  const em = container.resolve('em') as EntityManager\n  const organization = await findOneWithDecryption(\n    em,\n    Organization,\n    { id: organizationId, tenant: tenantId, deletedAt: null },\n    { populate: ['tenant'] },\n    { tenantId, organizationId },\n  )\n  if (!organization) {\n    return {\n      response: NextResponse.json(\n        { error: translate('directory.branding.errors.notFound', 'Organization not found') },\n        { status: 404 },\n      ),\n    }\n  }\n\n  return { auth, container, organization, organizationId, tenantId, translate }\n}\n\nfunction toIsoOrNull(value: Date | string | null | undefined): string | null {\n  if (value == null) return null\n  if (value instanceof Date) {\n    const ms = value.getTime()\n    return Number.isFinite(ms) ? new Date(ms).toISOString() : null\n  }\n  const trimmed = String(value).trim()\n  if (!trimmed) return null\n  const parsed = new Date(trimmed)\n  return Number.isFinite(parsed.getTime()) ? parsed.toISOString() : null\n}\n\nfunction toResponsePayload(organization: Organization, tenantId: string) {\n  return {\n    organizationId: String(organization.id),\n    organizationName: organization.name,\n    tenantId,\n    logoUrl: organization.logoUrl ?? null,\n    logoPreserveAspectRatio: !!organization.logoPreserveAspectRatio,\n    updatedAt: toIsoOrNull(organization.updatedAt),\n  }\n}\n\nasync function invalidateSidebarBrandingCache(container: RequestContainer, organizationId: string, tenantId: string) {\n  try {\n    const cache = container.resolve('cache') as {\n      deleteByTags?: (tags: string[]) => Promise<unknown>\n    } | null\n    await runWithCacheTenant(tenantId, () =>\n      cache?.deleteByTags?.([\n        `nav:sidebar:organization:${organizationId}`,\n        `nav:sidebar:tenant:${tenantId}`,\n      ]),\n    )\n  } catch {\n    // Cache invalidation is best-effort; the persisted branding is the source of truth.\n  }\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveCurrentOrganization(req)\n  if ('response' in resolved) return resolved.response\n\n  return NextResponse.json(toResponsePayload(resolved.organization, resolved.tenantId))\n}\n\nexport async function PUT(req: Request) {\n  const resolved = await resolveCurrentOrganization(req)\n  if ('response' in resolved) return resolved.response\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.') },\n      { status: 422 },\n    )\n  }\n  if (!body || typeof body !== 'object' || !Object.prototype.hasOwnProperty.call(body, 'logoUrl')) {\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.') },\n      { status: 422 },\n    )\n  }\n\n  const parsed = brandingUpdateSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      {\n        error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.'),\n        issues: parsed.error.issues,\n      },\n      { status: 422 },\n    )\n  }\n\n  try {\n    // Refuse a stale overwrite when two tabs edit the same organization branding.\n    // Strictly additive \u2014 a no-op when the client omits the expected-version header.\n    enforceCommandOptimisticLock({\n      resourceKind: 'directory.organization',\n      resourceId: resolved.organizationId,\n      current: resolved.organization.updatedAt ?? null,\n      request: req,\n    })\n\n    // Mutation-guard contract for custom write routes: validate before the write,\n    // then run the after-success hook once the command persists.\n    const guardResult = await validateCrudMutationGuard(resolved.container, {\n      tenantId: resolved.tenantId,\n      organizationId: resolved.organizationId,\n      userId: resolved.auth.sub,\n      resourceKind: 'directory.organization',\n      resourceId: resolved.organizationId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        logoUrl: parsed.data.logoUrl ?? null,\n        ...(parsed.data.logoPreserveAspectRatio !== undefined\n          ? { logoPreserveAspectRatio: parsed.data.logoPreserveAspectRatio }\n          : {}),\n      },\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = resolved.container.resolve('commandBus') as CommandBus\n    const ctx = buildCommandContext(\n      resolved.container,\n      resolved.auth,\n      req,\n      resolved.organizationId,\n      resolved.tenantId,\n    )\n    const { result } = await commandBus.execute<Record<string, unknown>, Organization>(\n      'directory.organizations.update',\n      {\n        input: {\n          id: resolved.organizationId,\n          tenantId: resolved.tenantId,\n          logoUrl: parsed.data.logoUrl ?? null,\n          ...(parsed.data.logoPreserveAspectRatio !== undefined\n            ? { logoPreserveAspectRatio: parsed.data.logoPreserveAspectRatio }\n            : {}),\n        },\n        ctx,\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(resolved.container, {\n        tenantId: resolved.tenantId,\n        organizationId: resolved.organizationId,\n        userId: resolved.auth.sub,\n        resourceKind: 'directory.organization',\n        resourceId: resolved.organizationId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    await invalidateSidebarBrandingCache(resolved.container, resolved.organizationId, resolved.tenantId)\n    return NextResponse.json(toResponsePayload(result, resolved.tenantId))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    logger.error('Organization branding update failed', { err })\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.save', 'Failed to update organization branding.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Directory',\n  summary: 'Current organization branding',\n  methods: {\n    GET: {\n      summary: 'Read sidebar branding for the selected organization',\n      description: 'Returns the logo URL used by the backend sidebar for the currently selected organization.',\n      responses: [\n        { status: 200, description: 'Organization branding', schema: brandingResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'A concrete organization scope is required', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Organization not found', schema: errorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update sidebar branding for the selected organization',\n      description: 'Stores an external image URL or an internal attachment image URL as the selected organization logo.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: brandingUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Updated organization branding', schema: brandingResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Save failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 409, description: 'Organization branding changed since it was loaded', schema: errorSchema },\n        { status: 422, description: 'Invalid logo URL', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AAGnC,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,OAAO;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAE9E,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAChF;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,yBAAyB,EAAE,QAAQ;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,yBAAyB,MAAM;AAAA,EACxC,yBAAyB,yBAAyB,MAAM;AAC1D,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAID,SAAS,oBACP,WACA,MACA,KACA,gBACA,UACuB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,MACjB,YAAY;AAAA,MACZ,WAAW,CAAC,cAAc;AAAA,MAC1B,YAAY;AAAA,MACZ;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,IACxB,iBAAiB,CAAC,cAAc;AAAA,IAChC,SAAS;AAAA,EACX;AACF;AAEA,eAAe,2BAA2B,KAAc;AACtD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO;AAAA,MACL,UAAU,aAAa,KAAK,EAAE,OAAO,UAAU,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9G;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,MAAM,cAAc,KAAK,SAAS;AACzD,QAAM,WAAW,MAAM,YAAY,KAAK,YAAY;AACpD,MAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,WAAO;AAAA,MACL,UAAU,aAAa;AAAA,QACrB;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,gBAAgB,QAAQ,UAAU,WAAW,KAAK;AAAA,IACxD,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,IACvB,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,MACL,UAAU,aAAa;AAAA,QACrB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,QACnF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,WAAW,cAAc,gBAAgB,UAAU,UAAU;AAC9E;AAEA,SAAS,YAAY,OAAwD;AAC3E,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,iBAAiB,MAAM;AACzB,UAAM,KAAK,MAAM,QAAQ;AACzB,WAAO,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,YAAY,IAAI;AAAA,EAC5D;AACA,QAAM,UAAU,OAAO,KAAK,EAAE,KAAK;AACnC,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,SAAO,OAAO,SAAS,OAAO,QAAQ,CAAC,IAAI,OAAO,YAAY,IAAI;AACpE;AAEA,SAAS,kBAAkB,cAA4B,UAAkB;AACvE,SAAO;AAAA,IACL,gBAAgB,OAAO,aAAa,EAAE;AAAA,IACtC,kBAAkB,aAAa;AAAA,IAC/B;AAAA,IACA,SAAS,aAAa,WAAW;AAAA,IACjC,yBAAyB,CAAC,CAAC,aAAa;AAAA,IACxC,WAAW,YAAY,aAAa,SAAS;AAAA,EAC/C;AACF;AAEA,eAAe,+BAA+B,WAA6B,gBAAwB,UAAkB;AACnH,MAAI;AACF,UAAM,QAAQ,UAAU,QAAQ,OAAO;AAGvC,UAAM;AAAA,MAAmB;AAAA,MAAU,MACjC,OAAO,eAAe;AAAA,QACpB,4BAA4B,cAAc;AAAA,QAC1C,sBAAsB,QAAQ;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,MAAI,cAAc,SAAU,QAAO,SAAS;AAE5C,SAAO,aAAa,KAAK,kBAAkB,SAAS,cAAc,SAAS,QAAQ,CAAC;AACtF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,MAAI,cAAc,SAAU,QAAO,SAAS;AAE5C,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,SAAS,GAAG;AAC/F,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B;AAAA,QAChG,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI;AAGF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa,aAAa;AAAA,MAC5C,SAAS;AAAA,IACX,CAAC;AAID,UAAM,cAAc,MAAM,0BAA0B,SAAS,WAAW;AAAA,MACtE,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,QAAQ,SAAS,KAAK;AAAA,MACtB,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,SAAS,OAAO,KAAK,WAAW;AAAA,QAChC,GAAI,OAAO,KAAK,4BAA4B,SACxC,EAAE,yBAAyB,OAAO,KAAK,wBAAwB,IAC/D,CAAC;AAAA,MACP;AAAA,IACF,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,SAAS,UAAU,QAAQ,YAAY;AAC1D,UAAM,MAAM;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AACA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,UACL,IAAI,SAAS;AAAA,UACb,UAAU,SAAS;AAAA,UACnB,SAAS,OAAO,KAAK,WAAW;AAAA,UAChC,GAAI,OAAO,KAAK,4BAA4B,SACxC,EAAE,yBAAyB,OAAO,KAAK,wBAAwB,IAC/D,CAAC;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,SAAS,WAAW;AAAA,QACzD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB,QAAQ,SAAS,KAAK;AAAA,QACtB,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,+BAA+B,SAAS,WAAW,SAAS,gBAAgB,SAAS,QAAQ;AACnG,WAAO,aAAa,KAAK,kBAAkB,QAAQ,SAAS,QAAQ,CAAC;AAAA,EACvE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,WAAO,MAAM,uCAAuC,EAAE,IAAI,CAAC;AAC3D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,kCAAkC,yCAAyC,EAAE;AAAA,MACzG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,uBAAuB;AAAA,MACtF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,6CAA6C,QAAQ,YAAY;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,MAC5E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,uBAAuB;AAAA,MAC9F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,YAAY;AAAA,QAC/D,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,YAAY;AAAA,QACrG,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,YAAY;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { runWithCacheTenant } from '@open-mercato/cache'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { Organization } from '@open-mercato/core/modules/directory/data/entities'\nimport { organizationUpdateSchema } from '@open-mercato/core/modules/directory/data/validators'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport '@open-mercato/core/modules/directory/commands/organizations'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('directory').child({ component: 'organization-branding' })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['directory.organizations.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['directory.organizations.manage'] },\n}\n\nconst brandingResponseSchema = z.object({\n  organizationId: z.string().uuid(),\n  organizationName: z.string(),\n  tenantId: z.string().uuid(),\n  logoUrl: z.string().nullable(),\n  logoPreserveAspectRatio: z.boolean(),\n  updatedAt: z.string().nullable(),\n})\n\nconst brandingUpdateSchema = z.object({\n  logoUrl: organizationUpdateSchema.shape.logoUrl,\n  logoPreserveAspectRatio: organizationUpdateSchema.shape.logoPreserveAspectRatio,\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\ntype RequestContainer = Awaited<ReturnType<typeof createRequestContainer>>\n\nfunction buildCommandContext(\n  container: RequestContainer,\n  auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>,\n  req: Request,\n  organizationId: string,\n  tenantId: string,\n): CommandRuntimeContext {\n  return {\n    container,\n    auth,\n    organizationScope: {\n      selectedId: organizationId,\n      filterIds: [organizationId],\n      allowedIds: null,\n      tenantId,\n    },\n    selectedOrganizationId: organizationId,\n    organizationIds: [organizationId],\n    request: req,\n  }\n}\n\nasync function resolveCurrentOrganization(req: Request) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub) {\n    return {\n      response: NextResponse.json({ error: translate('api.errors.unauthorized', 'Unauthorized') }, { status: 401 }),\n    }\n  }\n\n  const container = await createRequestContainer()\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope.selectedId ?? auth.orgId ?? null\n  const tenantId = scope.tenantId ?? auth.tenantId ?? null\n  if (!organizationId || !tenantId) {\n    return {\n      response: NextResponse.json(\n        {\n          error: translate(\n            'directory.branding.errors.organizationRequired',\n            'Select a single organization before changing sidebar branding.',\n          ),\n        },\n        { status: 400 },\n      ),\n    }\n  }\n\n  const em = container.resolve('em') as EntityManager\n  const organization = await findOneWithDecryption(\n    em,\n    Organization,\n    { id: organizationId, tenant: tenantId, deletedAt: null },\n    { populate: ['tenant'] },\n    { tenantId, organizationId },\n  )\n  if (!organization) {\n    return {\n      response: NextResponse.json(\n        { error: translate('directory.branding.errors.notFound', 'Organization not found') },\n        { status: 404 },\n      ),\n    }\n  }\n\n  return { auth, container, organization, organizationId, tenantId, translate }\n}\n\nfunction toIsoOrNull(value: Date | string | null | undefined): string | null {\n  if (value == null) return null\n  if (value instanceof Date) {\n    const ms = value.getTime()\n    return Number.isFinite(ms) ? new Date(ms).toISOString() : null\n  }\n  const trimmed = String(value).trim()\n  if (!trimmed) return null\n  const parsed = new Date(trimmed)\n  return Number.isFinite(parsed.getTime()) ? parsed.toISOString() : null\n}\n\nfunction toResponsePayload(organization: Organization, tenantId: string) {\n  return {\n    organizationId: String(organization.id),\n    organizationName: organization.name,\n    tenantId,\n    logoUrl: organization.logoUrl ?? null,\n    logoPreserveAspectRatio: !!organization.logoPreserveAspectRatio,\n    updatedAt: toIsoOrNull(organization.updatedAt),\n  }\n}\n\nasync function invalidateSidebarBrandingCache(container: RequestContainer, organizationId: string, tenantId: string) {\n  try {\n    const cache = container.resolve('cache') as {\n      deleteByTags?: (tags: string[]) => Promise<unknown>\n    } | null\n    await runWithCacheTenant(tenantId, () =>\n      cache?.deleteByTags?.([\n        `nav:sidebar:organization:${organizationId}`,\n        `nav:sidebar:tenant:${tenantId}`,\n      ]),\n    )\n  } catch {\n    // Cache invalidation is best-effort; the persisted branding is the source of truth.\n  }\n}\n\nexport async function GET(req: Request) {\n  const resolved = await resolveCurrentOrganization(req)\n  if ('response' in resolved) return resolved.response\n\n  return NextResponse.json(toResponsePayload(resolved.organization, resolved.tenantId))\n}\n\nexport async function PUT(req: Request) {\n  const resolved = await resolveCurrentOrganization(req)\n  if ('response' in resolved) return resolved.response\n\n  let body: unknown\n  try {\n    body = await req.json()\n  } catch {\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.') },\n      { status: 422 },\n    )\n  }\n  if (!body || typeof body !== 'object' || !Object.prototype.hasOwnProperty.call(body, 'logoUrl')) {\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.') },\n      { status: 422 },\n    )\n  }\n\n  const parsed = brandingUpdateSchema.safeParse(body)\n  if (!parsed.success) {\n    return NextResponse.json(\n      {\n        error: resolved.translate('directory.branding.errors.invalidLogoUrl', 'Enter a valid image URL.'),\n        issues: parsed.error.issues,\n      },\n      { status: 422 },\n    )\n  }\n\n  try {\n    // Refuse a stale overwrite when two tabs edit the same organization branding.\n    // Strictly additive \u2014 a no-op when the client omits the expected-version header.\n    enforceCommandOptimisticLock({\n      resourceKind: 'directory.organization',\n      resourceId: resolved.organizationId,\n      current: resolved.organization.updatedAt ?? null,\n      request: req,\n    })\n\n    // Mutation-guard contract for custom write routes: validate before the write,\n    // then run the after-success hook once the command persists.\n    const guardResult = await validateCrudMutationGuard(resolved.container, {\n      tenantId: resolved.tenantId,\n      organizationId: resolved.organizationId,\n      userId: resolved.auth.sub,\n      resourceKind: 'directory.organization',\n      resourceId: resolved.organizationId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        logoUrl: parsed.data.logoUrl ?? null,\n        ...(parsed.data.logoPreserveAspectRatio !== undefined\n          ? { logoPreserveAspectRatio: parsed.data.logoPreserveAspectRatio }\n          : {}),\n      },\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = resolved.container.resolve('commandBus') as CommandBus\n    const ctx = buildCommandContext(\n      resolved.container,\n      resolved.auth,\n      req,\n      resolved.organizationId,\n      resolved.tenantId,\n    )\n    const { result } = await commandBus.execute<Record<string, unknown>, Organization>(\n      'directory.organizations.update',\n      {\n        input: {\n          id: resolved.organizationId,\n          tenantId: resolved.tenantId,\n          logoUrl: parsed.data.logoUrl ?? null,\n          ...(parsed.data.logoPreserveAspectRatio !== undefined\n            ? { logoPreserveAspectRatio: parsed.data.logoPreserveAspectRatio }\n            : {}),\n        },\n        ctx,\n      },\n    )\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(resolved.container, {\n        tenantId: resolved.tenantId,\n        organizationId: resolved.organizationId,\n        userId: resolved.auth.sub,\n        resourceKind: 'directory.organization',\n        resourceId: resolved.organizationId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    await invalidateSidebarBrandingCache(resolved.container, resolved.organizationId, resolved.tenantId)\n    return NextResponse.json(toResponsePayload(result, resolved.tenantId))\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(err)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    logger.error('Organization branding update failed', { err })\n    return NextResponse.json(\n      { error: resolved.translate('directory.branding.errors.save', 'Failed to update organization branding.') },\n      { status: 400 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Directory',\n  summary: 'Current organization branding',\n  methods: {\n    GET: {\n      summary: 'Read sidebar branding for the selected organization',\n      description: 'Returns the logo URL used by the backend sidebar for the currently selected organization.',\n      responses: [\n        { status: 200, description: 'Organization branding', schema: brandingResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'A concrete organization scope is required', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 404, description: 'Organization not found', schema: errorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update sidebar branding for the selected organization',\n      description: 'Stores an external image URL or an internal attachment image URL as the selected organization logo.',\n      requestBody: {\n        contentType: 'application/json',\n        schema: brandingUpdateSchema,\n      },\n      responses: [\n        { status: 200, description: 'Updated organization branding', schema: brandingResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Save failed', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 409, description: 'Organization branding changed since it was loaded', schema: errorSchema },\n        { status: 422, description: 'Invalid logo URL', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,0BAA0B;AAGnC,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC;AAC7C,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,gCAAgC;AACzC,SAAS,0CAA0C;AACnD,OAAO;AACP,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,WAAW,EAAE,MAAM,EAAE,WAAW,wBAAwB,CAAC;AAE9E,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,8BAA8B,EAAE;AAAA,EAC5E,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gCAAgC,EAAE;AAChF;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK;AAAA,EAChC,kBAAkB,EAAE,OAAO;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,yBAAyB,EAAE,QAAQ;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,yBAAyB,MAAM;AAAA,EACxC,yBAAyB,yBAAyB,MAAM;AAC1D,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAID,SAAS,oBACP,WACA,MACA,KACA,gBACA,UACuB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,MACjB,YAAY;AAAA,MACZ,WAAW,CAAC,cAAc;AAAA,MAC1B,YAAY;AAAA,MACZ;AAAA,IACF;AAAA,IACA,wBAAwB;AAAA,IACxB,iBAAiB,CAAC,cAAc;AAAA,IAChC,SAAS;AAAA,EACX;AACF;AAEA,eAAe,2BAA2B,KAAc;AACtD,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,KAAK;AACd,WAAO;AAAA,MACL,UAAU,aAAa,KAAK,EAAE,OAAO,UAAU,2BAA2B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9G;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,MAAM,cAAc,KAAK,SAAS;AACzD,QAAM,WAAW,MAAM,YAAY,KAAK,YAAY;AACpD,MAAI,CAAC,kBAAkB,CAAC,UAAU;AAChC,WAAO;AAAA,MACL,UAAU,aAAa;AAAA,QACrB;AAAA,UACE,OAAO;AAAA,YACL;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,EAAE,IAAI,gBAAgB,QAAQ,UAAU,WAAW,KAAK;AAAA,IACxD,EAAE,UAAU,CAAC,QAAQ,EAAE;AAAA,IACvB,EAAE,UAAU,eAAe;AAAA,EAC7B;AACA,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,MACL,UAAU,aAAa;AAAA,QACrB,EAAE,OAAO,UAAU,sCAAsC,wBAAwB,EAAE;AAAA,QACnF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,WAAW,cAAc,gBAAgB,UAAU,UAAU;AAC9E;AAEA,SAAS,YAAY,OAAwD;AAC3E,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,iBAAiB,MAAM;AACzB,UAAM,KAAK,MAAM,QAAQ;AACzB,WAAO,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,YAAY,IAAI;AAAA,EAC5D;AACA,QAAM,UAAU,OAAO,KAAK,EAAE,KAAK;AACnC,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,SAAO,OAAO,SAAS,OAAO,QAAQ,CAAC,IAAI,OAAO,YAAY,IAAI;AACpE;AAEA,SAAS,kBAAkB,cAA4B,UAAkB;AACvE,SAAO;AAAA,IACL,gBAAgB,OAAO,aAAa,EAAE;AAAA,IACtC,kBAAkB,aAAa;AAAA,IAC/B;AAAA,IACA,SAAS,aAAa,WAAW;AAAA,IACjC,yBAAyB,CAAC,CAAC,aAAa;AAAA,IACxC,WAAW,YAAY,aAAa,SAAS;AAAA,EAC/C;AACF;AAEA,eAAe,+BAA+B,WAA6B,gBAAwB,UAAkB;AACnH,MAAI;AACF,UAAM,QAAQ,UAAU,QAAQ,OAAO;AAGvC,UAAM;AAAA,MAAmB;AAAA,MAAU,MACjC,OAAO,eAAe;AAAA,QACpB,4BAA4B,cAAc;AAAA,QAC1C,sBAAsB,QAAQ;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,MAAI,cAAc,SAAU,QAAO,SAAS;AAE5C,SAAO,aAAa,KAAK,kBAAkB,SAAS,cAAc,SAAS,QAAQ,CAAC;AACtF;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,WAAW,MAAM,2BAA2B,GAAG;AACrD,MAAI,cAAc,SAAU,QAAO,SAAS;AAE5C,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,QAAQ;AACN,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,SAAS,GAAG;AAC/F,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B,EAAE;AAAA,MACpG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,SAAS,UAAU,4CAA4C,0BAA0B;AAAA,QAChG,QAAQ,OAAO,MAAM;AAAA,MACvB;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AAEA,MAAI;AAGF,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa,aAAa;AAAA,MAC5C,SAAS;AAAA,IACX,CAAC;AAID,UAAM,cAAc,MAAM,0BAA0B,SAAS,WAAW;AAAA,MACtE,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,MACzB,QAAQ,SAAS,KAAK;AAAA,MACtB,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,SAAS,OAAO,KAAK,WAAW;AAAA,QAChC,GAAI,OAAO,KAAK,4BAA4B,SACxC,EAAE,yBAAyB,OAAO,KAAK,wBAAwB,IAC/D,CAAC;AAAA,MACP;AAAA,IACF,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,SAAS,UAAU,QAAQ,YAAY;AAC1D,UAAM,MAAM;AAAA,MACV,SAAS;AAAA,MACT,SAAS;AAAA,MACT;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AACA,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA;AAAA,QACE,OAAO;AAAA,UACL,IAAI,SAAS;AAAA,UACb,UAAU,SAAS;AAAA,UACnB,SAAS,OAAO,KAAK,WAAW;AAAA,UAChC,GAAI,OAAO,KAAK,4BAA4B,SACxC,EAAE,yBAAyB,OAAO,KAAK,wBAAwB,IAC/D,CAAC;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,SAAS,WAAW;AAAA,QACzD,UAAU,SAAS;AAAA,QACnB,gBAAgB,SAAS;AAAA,QACzB,QAAQ,SAAS,KAAK;AAAA,QACtB,cAAc;AAAA,QACd,YAAY,SAAS;AAAA,QACrB,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,+BAA+B,SAAS,WAAW,SAAS,gBAAgB,SAAS,QAAQ;AACnG,WAAO,aAAa,KAAK,kBAAkB,QAAQ,SAAS,QAAQ,CAAC;AAAA,EACvE,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,GAAG;AACnE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,WAAO,MAAM,uCAAuC,EAAE,IAAI,CAAC;AAC3D,WAAO,aAAa;AAAA,MAClB,EAAE,OAAO,SAAS,UAAU,kCAAkC,yCAAyC,EAAE;AAAA,MACzG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,uBAAuB;AAAA,MACtF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,6CAA6C,QAAQ,YAAY;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,YAAY;AAAA,MAC5E;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,uBAAuB;AAAA,MAC9F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,YAAY;AAAA,QAC/D,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,qDAAqD,QAAQ,YAAY;AAAA,QACrG,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,YAAY;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/plots/import/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/eudr/api/plots/import/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { collectFeatures } from '../../../lib/geometry'\nimport { plotCreateSchema } from '../../../data/validators'\n\nconst logger = createLogger('eudr').child({ component: 'api/plots/import' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.plots.manage'] },\n}\n\nconst importSchema = z.object({\n  supplierEntityId: z.string().uuid(),\n  defaultCountry: z.string().regex(/^[A-Za-z]{2}$/).transform((value) => value.toUpperCase()).optional(),\n  featureCollection: z.unknown(),\n})\n\ntype PlotImportInput = z.infer<typeof importSchema>\ntype PlotImportFailure = { index: number; name: string; errorKey: string }\ntype RequestContext = { ctx: CommandRuntimeContext; organizationId: string; tenantId: string }\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction optionalString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction optionalNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isFinite(value) ? value : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nfunction featureProperties(feature: unknown): Record<string, unknown> {\n  if (!isRecord(feature)) return {}\n  const properties = feature.properties\n  return isRecord(properties) ? properties : {}\n}\n\nfunction featureGeometryType(feature: unknown): string | null {\n  if (!isRecord(feature)) return null\n  if (feature.type === 'Feature' && isRecord(feature.geometry) && typeof feature.geometry.type === 'string') {\n    return feature.geometry.type\n  }\n  return typeof feature.type === 'string' ? feature.type : null\n}\n\nfunction resolveFeatureName(properties: Record<string, unknown>, index: number): string {\n  return optionalString(properties.name)\n    ?? optionalString(properties.ProductionPlace)\n    ?? `Plot ${index + 1}`\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.plot_import_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.plot_import_failed'\n  }\n  return 'eudr.errors.plot_import_failed'\n}\n\nasync function loadSupplierDisplayName(\n  queryEngine: QueryEngine,\n  scope: { tenantId: string; organizationId: string },\n  supplierEntityId: string,\n): Promise<string | null> {\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to null when the peer is absent so the\n  // import still succeeds without a snapshot.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return null\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: [supplierEntityId] } },\n      page: { page: 1, pageSize: 1 },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n    const rawName = result.items[0]?.display_name ?? result.items[0]?.displayName\n    return typeof rawName === 'string' && rawName.length ? rawName : null\n  } catch {\n    return null\n  }\n}\n\nasync function createPlotFromFeature(args: {\n  commandBus: CommandBus\n  ctx: CommandRuntimeContext\n  scope: { tenantId: string; organizationId: string }\n  input: PlotImportInput\n  feature: unknown\n  index: number\n  supplierDisplayName: string | null\n}): Promise<{ id: string | null }> {\n  const properties = featureProperties(args.feature)\n  const name = resolveFeatureName(properties, args.index)\n  const originCountry = optionalString(properties.ProducerCountry) ?? args.input.defaultCountry ?? null\n  if (!originCountry) throw new CrudHttpError(400, { error: 'eudr.errors.importCountryMissing' })\n\n  const area = optionalNumber(properties.Area)\n  const base = {\n    supplierEntityId: args.input.supplierEntityId,\n    name,\n    originCountry,\n    geometry: args.feature,\n    producerName: optionalString(properties.ProducerName),\n    areaHa: featureGeometryType(args.feature) === 'Point' && area !== null ? area : undefined,\n    supplierSnapshot: args.supplierDisplayName ? { displayName: args.supplierDisplayName } : undefined,\n  }\n  const parsed = plotCreateSchema.parse(base)\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.plots.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n      },\n      ctx: args.ctx,\n      metadata: {\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n        resourceKind: 'eudr.plot',\n        context: { cacheAliases: ['eudr.plot'] },\n      },\n    },\n  )\n  return { id: result?.entityId ?? result?.id ?? null }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = importSchema.parse(payload)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.plot',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        supplierEntityId: input.supplierEntityId,\n        defaultCountry: input.defaultCountry ?? null,\n      },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n    const guardPatch = guardResult.modifiedPayload ?? null\n    const effectiveSupplierEntityId = typeof guardPatch?.supplierEntityId === 'string' && guardPatch.supplierEntityId.length\n      ? guardPatch.supplierEntityId\n      : input.supplierEntityId\n    const effectiveDefaultCountry = typeof guardPatch?.defaultCountry === 'string' && guardPatch.defaultCountry.length\n      ? guardPatch.defaultCountry\n      : input.defaultCountry\n\n    const featureResult = collectFeatures(input.featureCollection)\n    if (!featureResult.ok) {\n      return Response.json({ errorKey: featureResult.errorKey }, { status: 400 })\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: PlotImportFailure[] = []\n    const createdIds: string[] = []\n    const effectiveInput: PlotImportInput = {\n      ...input,\n      supplierEntityId: effectiveSupplierEntityId,\n      defaultCountry: effectiveDefaultCountry,\n    }\n\n    const importScope = { tenantId: requestContext.tenantId, organizationId: requestContext.organizationId }\n    const supplierDisplayName = await loadSupplierDisplayName(\n      requestContext.ctx.container.resolve('queryEngine') as QueryEngine,\n      importScope,\n      effectiveSupplierEntityId,\n    )\n\n    for (const [index, feature] of featureResult.features.entries()) {\n      const name = resolveFeatureName(featureProperties(feature), index)\n      try {\n        const created = await createPlotFromFeature({\n          commandBus,\n          ctx: requestContext.ctx,\n          scope: importScope,\n          input: effectiveInput,\n          feature,\n          index,\n          supplierDisplayName,\n        })\n        if (created.id) createdIds.push(created.id)\n      } catch (error) {\n        failed.push({ index, name, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.plot',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n        { status: 400 },\n      )\n    }\n    logger.error('Plot import failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n      { status: 500 },\n    )\n  }\n}\n\nconst importResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    index: z.number(),\n    name: z.string(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Import EUDR plots from GeoJSON',\n  methods: {\n    POST: {\n      summary: 'Import plots',\n      requestBody: {\n        contentType: 'application/json',\n        schema: importSchema,\n      },\n      responses: [\n        { status: 200, description: 'Import result', schema: importResponseSchema },\n        { status: 400, description: 'Invalid import payload', schema: z.object({ error: z.string().optional(), errorKey: z.string().optional() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Plot import failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AAEjC,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,MAAM,eAAe,EAAE,UAAU,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,SAAS;AAAA,EACrG,mBAAmB,EAAE,QAAQ;AAC/B,CAAC;AAOD,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA2C;AACpE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO,CAAC;AAChC,QAAM,aAAa,QAAQ;AAC3B,SAAO,SAAS,UAAU,IAAI,aAAa,CAAC;AAC9C;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,SAAS,aAAa,SAAS,QAAQ,QAAQ,KAAK,OAAO,QAAQ,SAAS,SAAS,UAAU;AACzG,WAAO,QAAQ,SAAS;AAAA,EAC1B;AACA,SAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC3D;AAEA,SAAS,mBAAmB,YAAqC,OAAuB;AACtF,SAAO,eAAe,WAAW,IAAI,KAChC,eAAe,WAAW,eAAe,KACzC,QAAQ,QAAQ,CAAC;AACxB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,wBACb,aACA,OACA,kBACwB;AAIxB,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO;AAC/B,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE;AAAA,MAC3C,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,UAAM,UAAU,OAAO,MAAM,CAAC,GAAG,gBAAgB,OAAO,MAAM,CAAC,GAAG;AAClE,WAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,sBAAsB,MAQF;AACjC,QAAM,aAAa,kBAAkB,KAAK,OAAO;AACjD,QAAM,OAAO,mBAAmB,YAAY,KAAK,KAAK;AACtD,QAAM,gBAAgB,eAAe,WAAW,eAAe,KAAK,KAAK,MAAM,kBAAkB;AACjG,MAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAE9F,QAAM,OAAO,eAAe,WAAW,IAAI;AAC3C,QAAM,OAAO;AAAA,IACX,kBAAkB,KAAK,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,UAAU,KAAK;AAAA,IACf,cAAc,eAAe,WAAW,YAAY;AAAA,IACpD,QAAQ,oBAAoB,KAAK,OAAO,MAAM,WAAW,SAAS,OAAO,OAAO;AAAA,IAChF,kBAAkB,KAAK,sBAAsB,EAAE,aAAa,KAAK,oBAAoB,IAAI;AAAA,EAC3F;AACA,QAAM,SAAS,iBAAiB,MAAM,IAAI;AAC1C,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,MAC7B;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,QACR,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,QAC3B,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,IAAI,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACtD;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,kBAAkB,MAAM;AAAA,QACxB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,aAAa,YAAY,mBAAmB;AAClD,UAAM,4BAA4B,OAAO,YAAY,qBAAqB,YAAY,WAAW,iBAAiB,SAC9G,WAAW,mBACX,MAAM;AACV,UAAM,0BAA0B,OAAO,YAAY,mBAAmB,YAAY,WAAW,eAAe,SACxG,WAAW,iBACX,MAAM;AAEV,UAAM,gBAAgB,gBAAgB,MAAM,iBAAiB;AAC7D,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO,SAAS,KAAK,EAAE,UAAU,cAAc,SAAS,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAA8B,CAAC;AACrC,UAAM,aAAuB,CAAC;AAC9B,UAAM,iBAAkC;AAAA,MACtC,GAAG;AAAA,MACH,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,IAClB;AAEA,UAAM,cAAc,EAAE,UAAU,eAAe,UAAU,gBAAgB,eAAe,eAAe;AACvG,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,IAAI,UAAU,QAAQ,aAAa;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAEA,eAAW,CAAC,OAAO,OAAO,KAAK,cAAc,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,mBAAmB,kBAAkB,OAAO,GAAG,KAAK;AACjE,UAAI;AACF,cAAM,UAAU,MAAM,sBAAsB;AAAA,UAC1C;AAAA,UACA,KAAK,eAAe;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,QAAQ,GAAI,YAAW,KAAK,QAAQ,EAAE;AAAA,MAC5C,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,OAAO,MAAM,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,QAC/E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,sBAAsB,EAAE,KAAK,MAAM,CAAC;AACjD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO;AAAA,IACf,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAC1I,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { collectFeatures } from '../../../lib/geometry'\nimport { plotCreateSchema } from '../../../data/validators'\n\nconst logger = createLogger('eudr').child({ component: 'api/plots/import' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.plots.manage'] },\n}\n\nconst importSchema = z.object({\n  supplierEntityId: z.string().uuid(),\n  defaultCountry: z.string().regex(/^[A-Za-z]{2}$/).transform((value) => value.toUpperCase()).optional(),\n  featureCollection: z.unknown(),\n})\n\ntype PlotImportInput = z.infer<typeof importSchema>\ntype PlotImportFailure = { index: number; name: string; errorKey: string }\ntype RequestContext = { ctx: CommandRuntimeContext; organizationId: string; tenantId: string }\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction optionalString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction optionalNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isFinite(value) ? value : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nfunction featureProperties(feature: unknown): Record<string, unknown> {\n  if (!isRecord(feature)) return {}\n  const properties = feature.properties\n  return isRecord(properties) ? properties : {}\n}\n\nfunction featureGeometryType(feature: unknown): string | null {\n  if (!isRecord(feature)) return null\n  if (feature.type === 'Feature' && isRecord(feature.geometry) && typeof feature.geometry.type === 'string') {\n    return feature.geometry.type\n  }\n  return typeof feature.type === 'string' ? feature.type : null\n}\n\nfunction resolveFeatureName(properties: Record<string, unknown>, index: number): string {\n  return optionalString(properties.name)\n    ?? optionalString(properties.ProductionPlace)\n    ?? `Plot ${index + 1}`\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.plot_import_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.plot_import_failed'\n  }\n  return 'eudr.errors.plot_import_failed'\n}\n\nasync function loadSupplierDisplayName(\n  queryEngine: QueryEngine,\n  scope: { tenantId: string; organizationId: string },\n  supplierEntityId: string,\n): Promise<string | null> {\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to null when the peer is absent so the\n  // import still succeeds without a snapshot.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return null\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: [supplierEntityId] } },\n      page: { page: 1, pageSize: 1 },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n    const rawName = result.items[0]?.display_name ?? result.items[0]?.displayName\n    return typeof rawName === 'string' && rawName.length ? rawName : null\n  } catch {\n    return null\n  }\n}\n\nasync function createPlotFromFeature(args: {\n  commandBus: CommandBus\n  ctx: CommandRuntimeContext\n  scope: { tenantId: string; organizationId: string }\n  input: PlotImportInput\n  feature: unknown\n  index: number\n  supplierDisplayName: string | null\n}): Promise<{ id: string | null }> {\n  const properties = featureProperties(args.feature)\n  const name = resolveFeatureName(properties, args.index)\n  const originCountry = optionalString(properties.ProducerCountry) ?? args.input.defaultCountry ?? null\n  if (!originCountry) throw new CrudHttpError(400, { error: 'eudr.errors.importCountryMissing' })\n\n  const area = optionalNumber(properties.Area)\n  const base = {\n    supplierEntityId: args.input.supplierEntityId,\n    name,\n    originCountry,\n    geometry: args.feature,\n    producerName: optionalString(properties.ProducerName),\n    areaHa: featureGeometryType(args.feature) === 'Point' && area !== null ? area : undefined,\n    supplierSnapshot: args.supplierDisplayName ? { displayName: args.supplierDisplayName } : undefined,\n  }\n  const parsed = plotCreateSchema.parse(base)\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.plots.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n      },\n      ctx: args.ctx,\n      metadata: {\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n        resourceKind: 'eudr.plot',\n        context: { cacheAliases: ['eudr.plot'] },\n      },\n    },\n  )\n  return { id: result?.entityId ?? result?.id ?? null }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = importSchema.parse(payload)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.plot',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        supplierEntityId: input.supplierEntityId,\n        defaultCountry: input.defaultCountry ?? null,\n      },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n    const guardPatch = guardResult.modifiedPayload ?? null\n    const effectiveSupplierEntityId = typeof guardPatch?.supplierEntityId === 'string' && guardPatch.supplierEntityId.length\n      ? guardPatch.supplierEntityId\n      : input.supplierEntityId\n    const effectiveDefaultCountry = typeof guardPatch?.defaultCountry === 'string' && guardPatch.defaultCountry.length\n      ? guardPatch.defaultCountry\n      : input.defaultCountry\n\n    const featureResult = collectFeatures(input.featureCollection)\n    if (!featureResult.ok) {\n      return Response.json({ errorKey: featureResult.errorKey }, { status: 400 })\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: PlotImportFailure[] = []\n    const createdIds: string[] = []\n    const effectiveInput: PlotImportInput = {\n      ...input,\n      supplierEntityId: effectiveSupplierEntityId,\n      defaultCountry: effectiveDefaultCountry,\n    }\n\n    const importScope = { tenantId: requestContext.tenantId, organizationId: requestContext.organizationId }\n    const supplierDisplayName = await loadSupplierDisplayName(\n      requestContext.ctx.container.resolve('queryEngine') as QueryEngine,\n      importScope,\n      effectiveSupplierEntityId,\n    )\n\n    for (const [index, feature] of featureResult.features.entries()) {\n      const name = resolveFeatureName(featureProperties(feature), index)\n      try {\n        const created = await createPlotFromFeature({\n          commandBus,\n          ctx: requestContext.ctx,\n          scope: importScope,\n          input: effectiveInput,\n          feature,\n          index,\n          supplierDisplayName,\n        })\n        if (created.id) createdIds.push(created.id)\n      } catch (error) {\n        failed.push({ index, name, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.plot',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n        { status: 400 },\n      )\n    }\n    logger.error('Plot import failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n      { status: 500 },\n    )\n  }\n}\n\nconst importResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    index: z.number(),\n    name: z.string(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Import EUDR plots from GeoJSON',\n  methods: {\n    POST: {\n      summary: 'Import plots',\n      requestBody: {\n        contentType: 'application/json',\n        schema: importSchema,\n      },\n      responses: [\n        { status: 200, description: 'Import result', schema: importResponseSchema },\n        { status: 400, description: 'Invalid import payload', schema: z.object({ error: z.string().optional(), errorKey: z.string().optional() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Plot import failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AAEjC,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,MAAM,eAAe,EAAE,UAAU,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,SAAS;AAAA,EACrG,mBAAmB,EAAE,QAAQ;AAC/B,CAAC;AAOD,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA2C;AACpE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO,CAAC;AAChC,QAAM,aAAa,QAAQ;AAC3B,SAAO,SAAS,UAAU,IAAI,aAAa,CAAC;AAC9C;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,SAAS,aAAa,SAAS,QAAQ,QAAQ,KAAK,OAAO,QAAQ,SAAS,SAAS,UAAU;AACzG,WAAO,QAAQ,SAAS;AAAA,EAC1B;AACA,SAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC3D;AAEA,SAAS,mBAAmB,YAAqC,OAAuB;AACtF,SAAO,eAAe,WAAW,IAAI,KAChC,eAAe,WAAW,eAAe,KACzC,QAAQ,QAAQ,CAAC;AACxB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,wBACb,aACA,OACA,kBACwB;AAIxB,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO;AAC/B,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE;AAAA,MAC3C,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,UAAM,UAAU,OAAO,MAAM,CAAC,GAAG,gBAAgB,OAAO,MAAM,CAAC,GAAG;AAClE,WAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,sBAAsB,MAQF;AACjC,QAAM,aAAa,kBAAkB,KAAK,OAAO;AACjD,QAAM,OAAO,mBAAmB,YAAY,KAAK,KAAK;AACtD,QAAM,gBAAgB,eAAe,WAAW,eAAe,KAAK,KAAK,MAAM,kBAAkB;AACjG,MAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAE9F,QAAM,OAAO,eAAe,WAAW,IAAI;AAC3C,QAAM,OAAO;AAAA,IACX,kBAAkB,KAAK,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,UAAU,KAAK;AAAA,IACf,cAAc,eAAe,WAAW,YAAY;AAAA,IACpD,QAAQ,oBAAoB,KAAK,OAAO,MAAM,WAAW,SAAS,OAAO,OAAO;AAAA,IAChF,kBAAkB,KAAK,sBAAsB,EAAE,aAAa,KAAK,oBAAoB,IAAI;AAAA,EAC3F;AACA,QAAM,SAAS,iBAAiB,MAAM,IAAI;AAC1C,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,MAC7B;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,QACR,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,QAC3B,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,IAAI,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACtD;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,kBAAkB,MAAM;AAAA,QACxB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,aAAa,YAAY,mBAAmB;AAClD,UAAM,4BAA4B,OAAO,YAAY,qBAAqB,YAAY,WAAW,iBAAiB,SAC9G,WAAW,mBACX,MAAM;AACV,UAAM,0BAA0B,OAAO,YAAY,mBAAmB,YAAY,WAAW,eAAe,SACxG,WAAW,iBACX,MAAM;AAEV,UAAM,gBAAgB,gBAAgB,MAAM,iBAAiB;AAC7D,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO,SAAS,KAAK,EAAE,UAAU,cAAc,SAAS,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAA8B,CAAC;AACrC,UAAM,aAAuB,CAAC;AAC9B,UAAM,iBAAkC;AAAA,MACtC,GAAG;AAAA,MACH,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,IAClB;AAEA,UAAM,cAAc,EAAE,UAAU,eAAe,UAAU,gBAAgB,eAAe,eAAe;AACvG,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,IAAI,UAAU,QAAQ,aAAa;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAEA,eAAW,CAAC,OAAO,OAAO,KAAK,cAAc,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,mBAAmB,kBAAkB,OAAO,GAAG,KAAK;AACjE,UAAI;AACF,cAAM,UAAU,MAAM,sBAAsB;AAAA,UAC1C;AAAA,UACA,KAAK,eAAe;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,QAAQ,GAAI,YAAW,KAAK,QAAQ,EAAE;AAAA,MAC5C,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,OAAO,MAAM,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,QAC/E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,sBAAsB,EAAE,KAAK,MAAM,CAAC;AACjD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO;AAAA,IACf,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAC1I,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/product-mappings/suggestions/apply/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/eudr/api/product-mappings/suggestions/apply/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport {\n  EUDR_COMMODITIES,\n  productMappingCreateSchema,\n} from '../../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../../lib/reference-data'\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions/apply' })\n\nconst CATALOG_LOOKUP_PAGE_SIZE = 100\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.mappings.manage'] },\n}\n\nconst applyItemSchema = z.object({\n  productId: z.string().uuid(),\n  commodity: z.enum(EUDR_COMMODITIES),\n  hsCode: z.string().max(20).optional().nullable(),\n})\n\nconst applySchema = z\n  .object({\n    items: z.array(applyItemSchema).max(100).optional(),\n    productIds: z.array(z.string().uuid()).max(100).optional(),\n  })\n  .superRefine((value, context) => {\n    if ((value.items?.length ?? 0) > 0 || (value.productIds?.length ?? 0) > 0) return\n    context.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: 'eudr.errors.mapping_suggestions_apply_failed',\n    })\n  })\n\ntype ApplyItem = z.infer<typeof applyItemSchema>\ntype ApplyFailure = { productId: string; errorKey: string }\ntype ProductSnapshot = { name?: string | null; sku?: string | null }\ntype CatalogProductInfo = { snapshot: ProductSnapshot | null; hsCode: string | null }\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n}\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nasync function loadCatalogProductInfo(ctx: RequestContext, productIds: string[]): Promise<Map<string, CatalogProductInfo>> {\n  const info = new Map<string, CatalogProductInfo>()\n  for (const productId of productIds) info.set(productId, { snapshot: null, hsCode: null })\n  if (!productIds.length) return info\n\n  try {\n    const queryEngine = ctx.ctx.container.resolve('queryEngine') as QueryEngine\n    // `items` and `productIds` are capped at 100 each, so their union can reach\n    // 200 \u2014 chunk the lookup to keep every page within the pageSize <= 100 rule.\n    const chunks: string[][] = []\n    for (let index = 0; index < productIds.length; index += CATALOG_LOOKUP_PAGE_SIZE) {\n      chunks.push(productIds.slice(index, index + CATALOG_LOOKUP_PAGE_SIZE))\n    }\n    const products: CatalogProductRecord[] = []\n    for (const chunk of chunks) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: { id: { $in: chunk } },\n        page: { page: 1, pageSize: chunk.length },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n    }\n    for (const product of products) {\n      const id = readString(product.id)\n      if (!id) continue\n      info.set(id, {\n        snapshot: {\n          name: readString(product.title) ?? readString(product.name),\n          sku: readString(product.sku),\n        },\n        hsCode: readString(product.hs_code),\n      })\n    }\n  } catch {\n    return info\n  }\n\n  return info\n}\n\nfunction resolveApplyItems(\n  input: z.infer<typeof applySchema>,\n  catalogInfo: Map<string, CatalogProductInfo>,\n): { items: ApplyItem[]; failed: ApplyFailure[] } {\n  const items: ApplyItem[] = [...(input.items ?? [])]\n  const failed: ApplyFailure[] = []\n  const explicitIds = new Set(items.map((item) => item.productId))\n\n  for (const productId of input.productIds ?? []) {\n    if (explicitIds.has(productId)) continue\n    explicitIds.add(productId)\n    const hsCode = catalogInfo.get(productId)?.hsCode ?? null\n    const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n    if (!hsCode || !suggestedCommodity) {\n      failed.push({ productId, errorKey: 'eudr.errors.mapping_suggestions_apply_failed' })\n      continue\n    }\n    items.push({ productId, commodity: suggestedCommodity, hsCode })\n  }\n\n  return { items, failed }\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  return 'eudr.errors.mapping_suggestions_apply_failed'\n}\n\nasync function createMapping(args: {\n  commandBus: CommandBus\n  ctx: RequestContext\n  item: ApplyItem\n  productSnapshot: ProductSnapshot | null\n}): Promise<string | null> {\n  const parsed = productMappingCreateSchema.parse({\n    productId: args.item.productId,\n    commodity: args.item.commodity,\n    hsCode: args.item.hsCode ?? null,\n    productSnapshot: args.productSnapshot,\n  })\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.product_mappings.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n      },\n      ctx: args.ctx.ctx,\n      metadata: {\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n        resourceKind: 'eudr.product_mapping',\n        context: { cacheAliases: ['eudr.product_mapping'] },\n      },\n    },\n  )\n  return result?.entityId ?? result?.id ?? null\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = applySchema.parse(payload)\n    const catalogInfo = await loadCatalogProductInfo(\n      requestContext,\n      Array.from(new Set([\n        ...(input.items ?? []).map((item) => item.productId),\n        ...(input.productIds ?? []),\n      ])),\n    )\n    const resolved = resolveApplyItems(input, catalogInfo)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.product_mapping',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { items: resolved.items },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: ApplyFailure[] = [...resolved.failed]\n    const createdIds: string[] = []\n\n    const guardItems = Array.isArray((guardResult.modifiedPayload as { items?: unknown } | undefined)?.items)\n      ? ((guardResult.modifiedPayload as { items: unknown[] }).items.filter((entry): entry is typeof resolved.items[number] => (\n          typeof (entry as { productId?: unknown })?.productId === 'string'\n          && typeof (entry as { commodity?: unknown })?.commodity === 'string'\n        )))\n      : resolved.items\n\n    for (const item of guardItems) {\n      try {\n        const id = await createMapping({\n          commandBus,\n          ctx: requestContext,\n          item,\n          productSnapshot: catalogInfo.get(item.productId)?.snapshot ?? null,\n        })\n        if (id) createdIds.push(id)\n      } catch (error) {\n        failed.push({ productId: item.productId, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.product_mapping',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n        { status: 400 },\n      )\n    }\n    logger.error('Product mapping suggestions apply failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst applyResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    productId: z.string().uuid(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Apply EUDR product mapping suggestions',\n  methods: {\n    POST: {\n      summary: 'Apply mapping suggestions',\n      requestBody: {\n        contentType: 'application/json',\n        schema: applySchema,\n      },\n      responses: [\n        { status: 200, description: 'Apply result', schema: applyResponseSchema },\n        { status: 400, description: 'Invalid apply payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Mapping suggestion apply failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAE1C,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,yCAAyC,CAAC;AAEjG,MAAM,2BAA2B;AAE1B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,WAAW,EAAE,KAAK,gBAAgB;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAED,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,eAAe,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY,CAAC,OAAO,YAAY;AAC/B,OAAK,MAAM,OAAO,UAAU,KAAK,MAAM,MAAM,YAAY,UAAU,KAAK,EAAG;AAC3E,UAAQ,SAAS;AAAA,IACf,MAAM,EAAE,aAAa;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH,CAAC;AAoBH,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAe,uBAAuB,KAAqB,YAAgE;AACzH,QAAM,OAAO,oBAAI,IAAgC;AACjD,aAAW,aAAa,WAAY,MAAK,IAAI,WAAW,EAAE,UAAU,MAAM,QAAQ,KAAK,CAAC;AACxF,MAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,UAAU,QAAQ,aAAa;AAG3D,UAAM,SAAqB,CAAC;AAC5B,aAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,0BAA0B;AAChF,aAAO,KAAK,WAAW,MAAM,OAAO,QAAQ,wBAAwB,CAAC;AAAA,IACvE;AACA,UAAM,WAAmC,CAAC;AAC1C,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,QAC9B,MAAM,EAAE,MAAM,GAAG,UAAU,MAAM,OAAO;AAAA,QACxC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAAA,IAC/B;AACA,eAAW,WAAW,UAAU;AAC9B,YAAM,KAAK,WAAW,QAAQ,EAAE;AAChC,UAAI,CAAC,GAAI;AACT,WAAK,IAAI,IAAI;AAAA,QACX,UAAU;AAAA,UACR,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI;AAAA,UAC1D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC7B;AAAA,QACA,QAAQ,WAAW,QAAQ,OAAO;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,kBACP,OACA,aACgD;AAChD,QAAM,QAAqB,CAAC,GAAI,MAAM,SAAS,CAAC,CAAE;AAClD,QAAM,SAAyB,CAAC;AAChC,QAAM,cAAc,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;AAE/D,aAAW,aAAa,MAAM,cAAc,CAAC,GAAG;AAC9C,QAAI,YAAY,IAAI,SAAS,EAAG;AAChC,gBAAY,IAAI,SAAS;AACzB,UAAM,SAAS,YAAY,IAAI,SAAS,GAAG,UAAU;AACrD,UAAM,qBAAqB,0BAA0B,MAAM;AAC3D,QAAI,CAAC,UAAU,CAAC,oBAAoB;AAClC,aAAO,KAAK,EAAE,WAAW,UAAU,+CAA+C,CAAC;AACnF;AAAA,IACF;AACA,UAAM,KAAK,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AAAA,EACjE;AAEA,SAAO,EAAE,OAAO,OAAO;AACzB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,MAKF;AACzB,QAAM,SAAS,2BAA2B,MAAM;AAAA,IAC9C,WAAW,KAAK,KAAK;AAAA,IACrB,WAAW,KAAK,KAAK;AAAA,IACrB,QAAQ,KAAK,KAAK,UAAU;AAAA,IAC5B,iBAAiB,KAAK;AAAA,EACxB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,KAAK,KAAK,IAAI;AAAA,MACd,UAAU;AAAA,QACR,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,QACzB,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,sBAAsB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACA,SAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,MAAM,KAAK,oBAAI,IAAI;AAAA,QACjB,IAAI,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS;AAAA,QACnD,GAAI,MAAM,cAAc,CAAC;AAAA,MAC3B,CAAC,CAAC;AAAA,IACJ;AACA,UAAM,WAAW,kBAAkB,OAAO,WAAW;AACrD,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,OAAO,SAAS,MAAM;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAAyB,CAAC,GAAG,SAAS,MAAM;AAClD,UAAM,aAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,QAAS,YAAY,iBAAqD,KAAK,IAClG,YAAY,gBAAyC,MAAM,OAAO,CAAC,UACnE,OAAQ,OAAmC,cAAc,YACtD,OAAQ,OAAmC,cAAc,QAC7D,IACD,SAAS;AAEb,eAAW,QAAQ,YAAY;AAC7B,UAAI;AACF,cAAM,KAAK,MAAM,cAAc;AAAA,UAC7B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,iBAAiB,YAAY,IAAI,KAAK,SAAS,GAAG,YAAY;AAAA,QAChE,CAAC;AACD,YAAI,GAAI,YAAW,KAAK,EAAE;AAAA,MAC5B,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,WAAW,KAAK,WAAW,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MAC/E;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,QAC/G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,MAC/G,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport {\n  EUDR_COMMODITIES,\n  productMappingCreateSchema,\n} from '../../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../../lib/reference-data'\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions/apply' })\n\nconst CATALOG_LOOKUP_PAGE_SIZE = 100\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.mappings.manage'] },\n}\n\nconst applyItemSchema = z.object({\n  productId: z.string().uuid(),\n  commodity: z.enum(EUDR_COMMODITIES),\n  hsCode: z.string().max(20).optional().nullable(),\n})\n\nconst applySchema = z\n  .object({\n    items: z.array(applyItemSchema).max(100).optional(),\n    productIds: z.array(z.string().uuid()).max(100).optional(),\n  })\n  .superRefine((value, context) => {\n    if ((value.items?.length ?? 0) > 0 || (value.productIds?.length ?? 0) > 0) return\n    context.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: 'eudr.errors.mapping_suggestions_apply_failed',\n    })\n  })\n\ntype ApplyItem = z.infer<typeof applyItemSchema>\ntype ApplyFailure = { productId: string; errorKey: string }\ntype ProductSnapshot = { name?: string | null; sku?: string | null }\ntype CatalogProductInfo = { snapshot: ProductSnapshot | null; hsCode: string | null }\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n}\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nasync function loadCatalogProductInfo(ctx: RequestContext, productIds: string[]): Promise<Map<string, CatalogProductInfo>> {\n  const info = new Map<string, CatalogProductInfo>()\n  for (const productId of productIds) info.set(productId, { snapshot: null, hsCode: null })\n  if (!productIds.length) return info\n\n  try {\n    const queryEngine = ctx.ctx.container.resolve('queryEngine') as QueryEngine\n    // `items` and `productIds` are capped at 100 each, so their union can reach\n    // 200 \u2014 chunk the lookup to keep every page within the pageSize <= 100 rule.\n    const chunks: string[][] = []\n    for (let index = 0; index < productIds.length; index += CATALOG_LOOKUP_PAGE_SIZE) {\n      chunks.push(productIds.slice(index, index + CATALOG_LOOKUP_PAGE_SIZE))\n    }\n    const products: CatalogProductRecord[] = []\n    for (const chunk of chunks) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: { id: { $in: chunk } },\n        page: { page: 1, pageSize: chunk.length },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n    }\n    for (const product of products) {\n      const id = readString(product.id)\n      if (!id) continue\n      info.set(id, {\n        snapshot: {\n          name: readString(product.title) ?? readString(product.name),\n          sku: readString(product.sku),\n        },\n        hsCode: readString(product.hs_code),\n      })\n    }\n  } catch {\n    return info\n  }\n\n  return info\n}\n\nfunction resolveApplyItems(\n  input: z.infer<typeof applySchema>,\n  catalogInfo: Map<string, CatalogProductInfo>,\n): { items: ApplyItem[]; failed: ApplyFailure[] } {\n  const items: ApplyItem[] = [...(input.items ?? [])]\n  const failed: ApplyFailure[] = []\n  const explicitIds = new Set(items.map((item) => item.productId))\n\n  for (const productId of input.productIds ?? []) {\n    if (explicitIds.has(productId)) continue\n    explicitIds.add(productId)\n    const hsCode = catalogInfo.get(productId)?.hsCode ?? null\n    const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n    if (!hsCode || !suggestedCommodity) {\n      failed.push({ productId, errorKey: 'eudr.errors.mapping_suggestions_apply_failed' })\n      continue\n    }\n    items.push({ productId, commodity: suggestedCommodity, hsCode })\n  }\n\n  return { items, failed }\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  return 'eudr.errors.mapping_suggestions_apply_failed'\n}\n\nasync function createMapping(args: {\n  commandBus: CommandBus\n  ctx: RequestContext\n  item: ApplyItem\n  productSnapshot: ProductSnapshot | null\n}): Promise<string | null> {\n  const parsed = productMappingCreateSchema.parse({\n    productId: args.item.productId,\n    commodity: args.item.commodity,\n    hsCode: args.item.hsCode ?? null,\n    productSnapshot: args.productSnapshot,\n  })\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.product_mappings.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n      },\n      ctx: args.ctx.ctx,\n      metadata: {\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n        resourceKind: 'eudr.product_mapping',\n        context: { cacheAliases: ['eudr.product_mapping'] },\n      },\n    },\n  )\n  return result?.entityId ?? result?.id ?? null\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = applySchema.parse(payload)\n    const catalogInfo = await loadCatalogProductInfo(\n      requestContext,\n      Array.from(new Set([\n        ...(input.items ?? []).map((item) => item.productId),\n        ...(input.productIds ?? []),\n      ])),\n    )\n    const resolved = resolveApplyItems(input, catalogInfo)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.product_mapping',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { items: resolved.items },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: ApplyFailure[] = [...resolved.failed]\n    const createdIds: string[] = []\n\n    const guardItems = Array.isArray((guardResult.modifiedPayload as { items?: unknown } | undefined)?.items)\n      ? ((guardResult.modifiedPayload as { items: unknown[] }).items.filter((entry): entry is typeof resolved.items[number] => (\n          typeof (entry as { productId?: unknown })?.productId === 'string'\n          && typeof (entry as { commodity?: unknown })?.commodity === 'string'\n        )))\n      : resolved.items\n\n    for (const item of guardItems) {\n      try {\n        const id = await createMapping({\n          commandBus,\n          ctx: requestContext,\n          item,\n          productSnapshot: catalogInfo.get(item.productId)?.snapshot ?? null,\n        })\n        if (id) createdIds.push(id)\n      } catch (error) {\n        failed.push({ productId: item.productId, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.product_mapping',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n        { status: 400 },\n      )\n    }\n    logger.error('Product mapping suggestions apply failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst applyResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    productId: z.string().uuid(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Apply EUDR product mapping suggestions',\n  methods: {\n    POST: {\n      summary: 'Apply mapping suggestions',\n      requestBody: {\n        contentType: 'application/json',\n        schema: applySchema,\n      },\n      responses: [\n        { status: 200, description: 'Apply result', schema: applyResponseSchema },\n        { status: 400, description: 'Invalid apply payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Mapping suggestion apply failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAE1C,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,yCAAyC,CAAC;AAEjG,MAAM,2BAA2B;AAE1B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,WAAW,EAAE,KAAK,gBAAgB;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAED,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,eAAe,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY,CAAC,OAAO,YAAY;AAC/B,OAAK,MAAM,OAAO,UAAU,KAAK,MAAM,MAAM,YAAY,UAAU,KAAK,EAAG;AAC3E,UAAQ,SAAS;AAAA,IACf,MAAM,EAAE,aAAa;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH,CAAC;AAoBH,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAe,uBAAuB,KAAqB,YAAgE;AACzH,QAAM,OAAO,oBAAI,IAAgC;AACjD,aAAW,aAAa,WAAY,MAAK,IAAI,WAAW,EAAE,UAAU,MAAM,QAAQ,KAAK,CAAC;AACxF,MAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,UAAU,QAAQ,aAAa;AAG3D,UAAM,SAAqB,CAAC;AAC5B,aAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,0BAA0B;AAChF,aAAO,KAAK,WAAW,MAAM,OAAO,QAAQ,wBAAwB,CAAC;AAAA,IACvE;AACA,UAAM,WAAmC,CAAC;AAC1C,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,QAC9B,MAAM,EAAE,MAAM,GAAG,UAAU,MAAM,OAAO;AAAA,QACxC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAAA,IAC/B;AACA,eAAW,WAAW,UAAU;AAC9B,YAAM,KAAK,WAAW,QAAQ,EAAE;AAChC,UAAI,CAAC,GAAI;AACT,WAAK,IAAI,IAAI;AAAA,QACX,UAAU;AAAA,UACR,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI;AAAA,UAC1D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC7B;AAAA,QACA,QAAQ,WAAW,QAAQ,OAAO;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,kBACP,OACA,aACgD;AAChD,QAAM,QAAqB,CAAC,GAAI,MAAM,SAAS,CAAC,CAAE;AAClD,QAAM,SAAyB,CAAC;AAChC,QAAM,cAAc,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;AAE/D,aAAW,aAAa,MAAM,cAAc,CAAC,GAAG;AAC9C,QAAI,YAAY,IAAI,SAAS,EAAG;AAChC,gBAAY,IAAI,SAAS;AACzB,UAAM,SAAS,YAAY,IAAI,SAAS,GAAG,UAAU;AACrD,UAAM,qBAAqB,0BAA0B,MAAM;AAC3D,QAAI,CAAC,UAAU,CAAC,oBAAoB;AAClC,aAAO,KAAK,EAAE,WAAW,UAAU,+CAA+C,CAAC;AACnF;AAAA,IACF;AACA,UAAM,KAAK,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AAAA,EACjE;AAEA,SAAO,EAAE,OAAO,OAAO;AACzB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,MAKF;AACzB,QAAM,SAAS,2BAA2B,MAAM;AAAA,IAC9C,WAAW,KAAK,KAAK;AAAA,IACrB,WAAW,KAAK,KAAK;AAAA,IACrB,QAAQ,KAAK,KAAK,UAAU;AAAA,IAC5B,iBAAiB,KAAK;AAAA,EACxB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,KAAK,KAAK,IAAI;AAAA,MACd,UAAU;AAAA,QACR,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,QACzB,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,sBAAsB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACA,SAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,MAAM,KAAK,oBAAI,IAAI;AAAA,QACjB,IAAI,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS;AAAA,QACnD,GAAI,MAAM,cAAc,CAAC;AAAA,MAC3B,CAAC,CAAC;AAAA,IACJ;AACA,UAAM,WAAW,kBAAkB,OAAO,WAAW;AACrD,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,OAAO,SAAS,MAAM;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAAyB,CAAC,GAAG,SAAS,MAAM;AAClD,UAAM,aAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,QAAS,YAAY,iBAAqD,KAAK,IAClG,YAAY,gBAAyC,MAAM,OAAO,CAAC,UACnE,OAAQ,OAAmC,cAAc,YACtD,OAAQ,OAAmC,cAAc,QAC7D,IACD,SAAS;AAEb,eAAW,QAAQ,YAAY;AAC7B,UAAI;AACF,cAAM,KAAK,MAAM,cAAc;AAAA,UAC7B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,iBAAiB,YAAY,IAAI,KAAK,SAAS,GAAG,YAAY;AAAA,QAChE,CAAC;AACD,YAAI,GAAI,YAAW,KAAK,EAAE;AAAA,MAC5B,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,WAAW,KAAK,WAAW,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MAC/E;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,QAC/G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,MAC/G,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/api/overrides/route.js CHANGED Viewed

@@ -21,6 +21,7 @@ import {
   changeOverrideStateResponseSchema
 } from "../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 const logger = createLogger("feature_toggles").child({ component: "overrides" });
 async function GET(req) {
   const { auth, ctx, scope } = await buildContext(req);
@@ -156,6 +157,10 @@ async function PUT(req) {
     if (isCrudHttpError(error)) {
       return NextResponse.json(error.body, { status: error.status });
     }
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     const message = error instanceof Error ? error.message : "Unknown error";
     if (message === "NOT_FOUND") return NextResponse.json({ error: "Not found" }, { status: 404 });
     if (message === "INVALID_STATE" || message === "INVALID_TOGGLE_ID" || message === "INVALID_TENANT_ID") {

package/dist/modules/feature_toggles/api/overrides/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/feature_toggles/api/overrides/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('feature_toggles').child({ component: 'overrides' })\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope, organizationId } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    // Run the CRUD mutation guard lifecycle so this custom write route honors\n    // module-level guard injections (and after-success hooks) like every other\n    // mutating endpoint. The override either updates an existing row or creates a\n    // new one, so the resource id falls back to the toggle id when no row exists.\n    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null\n    if (!guardUserId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const guardResourceKind = 'feature_toggles.feature_toggle_override'\n    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: scope.tenantId,\n      organizationId: organizationId ?? null,\n      userId: guardUserId,\n      resourceKind: guardResourceKind,\n      resourceId: guardResourceId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: scope.tenantId,\n        organizationId: organizationId ?? null,\n        userId: guardUserId,\n        resourceKind: guardResourceKind,\n        resourceId: result?.overrideToggleId ?? guardResourceId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    logger.error('Override state change failed', { err: error })\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAE/E,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,2BAA2B;AAAA,MACjE,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAMA,UAAM,cAAc,IAAI,MAAM,UAAU,IAAI,MAAM,OAAO;AACzD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,oBAAoB;AAC1B,UAAM,kBAAkB,kBAAkB,MAAM,OAAO,KAAK;AAC5D,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,MAAM;AAAA,MAChB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,QAAQ,oBAAoB;AAAA,QACxC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { Tenant } from '@open-mercato/core/modules/directory/data/entities'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport { getOverrides } from '../../lib/queries'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { logCrudAccess } from '@open-mercato/shared/lib/crud/factory'\nimport { FeatureToggleOverride } from '../../data/entities'\nimport { buildContext } from '../../lib/utils'\nimport { resolveFeatureCheckContext } from \"@open-mercato/core/modules/directory/utils/organizationScope\"\nimport { ProcessedChangeOverrideStateInput } from '../../data/validators'\nimport {\n  changeOverrideStateBaseSchema,\n  overrideListQuerySchema,\n  featureTogglesTag,\n  featureToggleOverrideListResponseSchema,\n  featureToggleErrorSchema,\n  changeOverrideStateResponseSchema,\n} from '../openapi'\nimport type { OpenApiRouteDoc, OpenApiMethodDoc } from '@open-mercato/shared/lib/openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nconst logger = createLogger('feature_toggles').child({ component: 'overrides' })\n\nexport async function GET(req: Request) {\n  const { auth, ctx, scope } = await buildContext(req)\n\n  const url = new URL(req.url)\n  const parsed = overrideListQuerySchema.safeParse(Object.fromEntries(url.searchParams.entries()))\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid query parameters' }, { status: 400 })\n  }\n  const em = ctx.container.resolve('em') as EntityManager\n\n  const tenant = await em.findOne(Tenant, {\n    id: scope.tenantId,\n  })\n\n  if (!tenant) {\n    return NextResponse.json({\n      error: 'Tenant context required. Please select a tenant.'\n    }, { status: 400 })\n  }\n\n  const result = await getOverrides(em, tenant, parsed.data)\n\n  await logCrudAccess({\n    container: ctx.container,\n    auth,\n    request: req,\n    items: [...result.raw.toggles, ...result.raw.overrides],\n    idField: 'id',\n    resourceKind: 'feature_toggles.override_list',\n    tenantId: scope.tenantId ?? null,\n    query: parsed.data,\n    accessType: 'read:list',\n    fields: ['id', 'toggleId', 'tenantId', 'identifier', 'name', 'category']\n  })\n\n  return NextResponse.json({\n    items: result.items,\n    total: result.total,\n    totalPages: result.totalPages,\n    page: result.page,\n    pageSize: result.pageSize,\n    isSuperAdmin: auth.isSuperAdmin ?? false\n  })\n}\n\nexport async function PUT(req: Request) {\n  try {\n    const { ctx } = await buildContext(req)\n\n    const parsed = changeOverrideStateBaseSchema.safeParse(await req.json())\n    if (!parsed.success) {\n      return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n    }\n\n    const { scope, organizationId } = await resolveFeatureCheckContext({\n      container: ctx.container,\n      auth: ctx.auth,\n      request: req\n    })\n\n    if (!scope.tenantId) {\n      return NextResponse.json({\n        error: 'Tenant context required. Please select a tenant.'\n      }, { status: 400 })\n    }\n\n    // Optimistic lock: refuse a stale override overwrite when two admins edit the\n    // same global toggle override in parallel. Only enforced when an override row\n    // already exists (first set has no prior version). Strictly additive.\n    const em = ctx.container.resolve('em') as EntityManager\n    const existingOverride = await em.findOne(FeatureToggleOverride, {\n      tenantId: scope.tenantId,\n      toggle: { id: parsed.data.toggleId },\n    })\n    if (existingOverride) {\n      await enforceCommandOptimisticLockWithGuards(ctx.container, {\n        resourceKind: 'feature_toggles.feature_toggle_override',\n        resourceId: existingOverride.id,\n        current: existingOverride.updatedAt ?? null,\n        request: req,\n      })\n    }\n\n    // Run the CRUD mutation guard lifecycle so this custom write route honors\n    // module-level guard injections (and after-success hooks) like every other\n    // mutating endpoint. The override either updates an existing row or creates a\n    // new one, so the resource id falls back to the toggle id when no row exists.\n    const guardUserId = ctx.auth?.userId ?? ctx.auth?.sub ?? null\n    if (!guardUserId) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n    const guardResourceKind = 'feature_toggles.feature_toggle_override'\n    const guardResourceId = existingOverride?.id ?? parsed.data.toggleId\n    const guardResult = await validateCrudMutationGuard(ctx.container, {\n      tenantId: scope.tenantId,\n      organizationId: organizationId ?? null,\n      userId: guardUserId,\n      resourceKind: guardResourceKind,\n      resourceId: guardResourceId,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: parsed.data,\n    })\n    if (guardResult && !guardResult.ok) {\n      return NextResponse.json(guardResult.body, { status: guardResult.status })\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as CommandBus\n    const { result, logEntry } = await commandBus.execute<ProcessedChangeOverrideStateInput, { overrideToggleId: string | null }>('feature_toggles.overrides.changeState', {\n      input: {\n        toggleId: parsed.data.toggleId,\n        tenantId: scope.tenantId,\n        isOverride: parsed.data.isOverride,\n        overrideValue: parsed.data.overrideValue,\n      },\n      ctx,\n    })\n\n    if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n      await runCrudMutationGuardAfterSuccess(ctx.container, {\n        tenantId: scope.tenantId,\n        organizationId: organizationId ?? null,\n        userId: guardUserId,\n        resourceKind: guardResourceKind,\n        resourceId: result?.overrideToggleId ?? guardResourceId,\n        operation: 'update',\n        requestMethod: req.method,\n        requestHeaders: req.headers,\n        metadata: guardResult.metadata ?? null,\n      })\n    }\n\n    const response = NextResponse.json({\n      ok: true,\n      overrideToggleId: result?.overrideToggleId ?? null,\n    })\n\n    if (logEntry?.undoToken && logEntry?.id && logEntry?.commandId) {\n      response.headers.set(\n        'x-om-operation',\n        serializeOperationMetadata({\n          id: logEntry.id,\n          undoToken: logEntry.undoToken,\n          commandId: logEntry.commandId,\n          actionLabel: logEntry.actionLabel ?? null,\n          resourceKind: logEntry.resourceKind ?? 'feature_toggles.override',\n          resourceId: logEntry.resourceId ?? result?.overrideToggleId ?? null,\n          executedAt: logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : undefined,\n        })\n      )\n    }\n\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return NextResponse.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    if (message === 'NOT_FOUND') return NextResponse.json({ error: 'Not found' }, { status: 404 })\n    if (message === 'INVALID_STATE' || message === 'INVALID_TOGGLE_ID' || message === 'INVALID_TENANT_ID') {\n      return NextResponse.json({ error: message }, { status: 400 })\n    }\n    logger.error('Override state change failed', { err: error })\n    return NextResponse.json({ error: 'Failed to update override' }, { status: 500 })\n  }\n}\n\nconst routeMetadata = {\n  GET: { requireAuth: true, requireFeatures: ['feature_toggles.view'] },\n  PUT: { requireAuth: true, requireFeatures: ['feature_toggles.manage'] },\n}\n\nexport const metadata = routeMetadata\n\nconst overrideGetDoc: OpenApiMethodDoc = {\n  summary: 'List overrides',\n  description: 'Returns list of feature toggle overrides.',\n  tags: [featureTogglesTag],\n  query: overrideListQuerySchema,\n  responses: [\n    { status: 200, description: 'List of overrides', schema: featureToggleOverrideListResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid query parameters', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n  ],\n}\n\nconst overridePutDoc: OpenApiMethodDoc = {\n  summary: 'Change override state',\n  description: 'Enable, disable or inherit a feature toggle for a specific tenant.',\n  tags: [featureTogglesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: changeOverrideStateBaseSchema,\n    description: 'Override details.',\n  },\n  responses: [\n    { status: 200, description: 'Override updated', schema: changeOverrideStateResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed', schema: featureToggleErrorSchema },\n    { status: 401, description: 'Authentication required', schema: featureToggleErrorSchema },\n    { status: 404, description: 'Not found', schema: featureToggleErrorSchema },\n    { status: 500, description: 'Internal server error', schema: featureToggleErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: featureTogglesTag,\n  summary: 'Manage feature toggle overrides',\n  methods: {\n    GET: overrideGetDoc,\n    PUT: overridePutDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,cAAc;AAEvB,SAAS,kCAAkC;AAC3C,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,8CAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAE3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC;AAE/E,eAAsB,IAAI,KAAc;AACtC,QAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,aAAa,GAAG;AAEnD,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,SAAS,wBAAwB,UAAU,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AAC/F,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,2BAA2B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjF;AACA,QAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AAErC,QAAM,SAAS,MAAM,GAAG,QAAQ,QAAQ;AAAA,IACtC,IAAI,MAAM;AAAA,EACZ,CAAC;AAED,MAAI,CAAC,QAAQ;AACX,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,IACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,QAAM,SAAS,MAAM,aAAa,IAAI,QAAQ,OAAO,IAAI;AAEzD,QAAM,cAAc;AAAA,IAClB,WAAW,IAAI;AAAA,IACf;AAAA,IACA,SAAS;AAAA,IACT,OAAO,CAAC,GAAG,OAAO,IAAI,SAAS,GAAG,OAAO,IAAI,SAAS;AAAA,IACtD,SAAS;AAAA,IACT,cAAc;AAAA,IACd,UAAU,MAAM,YAAY;AAAA,IAC5B,OAAO,OAAO;AAAA,IACd,YAAY;AAAA,IACZ,QAAQ,CAAC,MAAM,YAAY,YAAY,cAAc,QAAQ,UAAU;AAAA,EACzE,CAAC;AAED,SAAO,aAAa,KAAK;AAAA,IACvB,OAAO,OAAO;AAAA,IACd,OAAO,OAAO;AAAA,IACd,YAAY,OAAO;AAAA,IACnB,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,cAAc,KAAK,gBAAgB;AAAA,EACrC,CAAC;AACH;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,IAAI,IAAI,MAAM,aAAa,GAAG;AAEtC,UAAM,SAAS,8BAA8B,UAAU,MAAM,IAAI,KAAK,CAAC;AACvE,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzG;AAEA,UAAM,EAAE,OAAO,eAAe,IAAI,MAAM,2BAA2B;AAAA,MACjE,WAAW,IAAI;AAAA,MACf,MAAM,IAAI;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAED,QAAI,CAAC,MAAM,UAAU;AACnB,aAAO,aAAa,KAAK;AAAA,QACvB,OAAO;AAAA,MACT,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpB;AAKA,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,mBAAmB,MAAM,GAAG,QAAQ,uBAAuB;AAAA,MAC/D,UAAU,MAAM;AAAA,MAChB,QAAQ,EAAE,IAAI,OAAO,KAAK,SAAS;AAAA,IACrC,CAAC;AACD,QAAI,kBAAkB;AACpB,YAAM,uCAAuC,IAAI,WAAW;AAAA,QAC1D,cAAc;AAAA,QACd,YAAY,iBAAiB;AAAA,QAC7B,SAAS,iBAAiB,aAAa;AAAA,QACvC,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAMA,UAAM,cAAc,IAAI,MAAM,UAAU,IAAI,MAAM,OAAO;AACzD,QAAI,CAAC,aAAa;AAChB,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AACA,UAAM,oBAAoB;AAC1B,UAAM,kBAAkB,kBAAkB,MAAM,OAAO,KAAK;AAC5D,UAAM,cAAc,MAAM,0BAA0B,IAAI,WAAW;AAAA,MACjE,UAAU,MAAM;AAAA,MAChB,gBAAgB,kBAAkB;AAAA,MAClC,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,OAAO;AAAA,IAC1B,CAAC;AACD,QAAI,eAAe,CAAC,YAAY,IAAI;AAClC,aAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,IAC3E;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,WAAW,QAAgF,yCAAyC;AAAA,MACrK,OAAO;AAAA,QACL,UAAU,OAAO,KAAK;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,YAAY,OAAO,KAAK;AAAA,QACxB,eAAe,OAAO,KAAK;AAAA,MAC7B;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,YAAM,iCAAiC,IAAI,WAAW;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,gBAAgB,kBAAkB;AAAA,QAClC,QAAQ;AAAA,QACR,cAAc;AAAA,QACd,YAAY,QAAQ,oBAAoB;AAAA,QACxC,WAAW;AAAA,QACX,eAAe,IAAI;AAAA,QACnB,gBAAgB,IAAI;AAAA,QACpB,UAAU,YAAY,YAAY;AAAA,MACpC,CAAC;AAAA,IACH;AAEA,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI;AAAA,MACJ,kBAAkB,QAAQ,oBAAoB;AAAA,IAChD,CAAC;AAED,QAAI,UAAU,aAAa,UAAU,MAAM,UAAU,WAAW;AAC9D,eAAS,QAAQ;AAAA,QACf;AAAA,QACA,2BAA2B;AAAA,UACzB,IAAI,SAAS;AAAA,UACb,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,eAAe;AAAA,UACrC,cAAc,SAAS,gBAAgB;AAAA,UACvC,YAAY,SAAS,cAAc,QAAQ,oBAAoB;AAAA,UAC/D,YAAY,SAAS,qBAAqB,OAAO,SAAS,UAAU,YAAY,IAAI;AAAA,QACtF,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AACA,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,aAAa,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IAC7F;AACA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAI,YAAY,YAAa,QAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC7F,QAAI,YAAY,mBAAmB,YAAY,uBAAuB,YAAY,qBAAqB;AACrG,aAAO,aAAa,KAAK,EAAE,OAAO,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9D;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAClF;AACF;AAEA,MAAM,gBAAgB;AAAA,EACpB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AAAA,EACpE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,EAAE;AACxE;AAEO,MAAM,WAAW;AAExB,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,OAAO;AAAA,EACP,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,wCAAwC;AAAA,EACnG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,yBAAyB;AAAA,IACzF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,EAC1F;AACF;AAEA,MAAM,iBAAmC;AAAA,EACvC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,iBAAiB;AAAA,EACxB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,oBAAoB,QAAQ,kCAAkC;AAAA,EAC5F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,yBAAyB;AAAA,IAClF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,yBAAyB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,yBAAyB;AAAA,IAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,yBAAyB;AAAA,EACxF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,IACL,KAAK;AAAA,EACP;AACF;",
   "names": []
 }

package/dist/modules/messages/api/[id]/actions/[actionId]/route.js CHANGED Viewed

@@ -4,6 +4,7 @@ import { attachOperationMetadataHeader } from "../../../../lib/operationMetadata
 import { resolveMessageContext } from "../../../../lib/routeHelpers.js";
 import { resolveUserFeatures, runMessageMutationGuardAfterSuccess, runMessageMutationGuards } from "../../../guards.js";
 import { actionResultResponseSchema } from "../../../openapi.js";
+import { getCommandInterceptorHttpRejection } from "@open-mercato/shared/lib/commands/errors";
 const metadata = {
   POST: { requireAuth: true, requireFeatures: ["messages.actions"] }
 };
@@ -77,6 +78,10 @@ async function POST(req, { params }) {
     if (isCrudHttpError(error)) {
       return Response.json(error.body, { status: error.status });
     }
+    const interceptorRejection = getCommandInterceptorHttpRejection(error);
+    if (interceptorRejection) {
+      return Response.json(interceptorRejection.body, { status: interceptorRejection.status });
+    }
     if (error instanceof Error) {
       if (error.message === "Message not found") {
         return Response.json({ error: "Message not found" }, { status: 404 });

package/dist/modules/messages/api/[id]/actions/[actionId]/route.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/messages/api/%5Bid%5D/actions/%5BactionId%5D/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { attachOperationMetadataHeader, type OperationLogEntryLike } from '../../../../lib/operationMetadata'\nimport { resolveMessageContext } from '../../../../lib/routeHelpers'\nimport { resolveUserFeatures, runMessageMutationGuardAfterSuccess, runMessageMutationGuards } from '../../../guards'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { actionResultResponseSchema } from '../../../openapi'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['messages.actions'] },\n}\n\nexport async function POST(\n  req: Request,\n  { params }: { params: { id: string; actionId: string } }\n) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n\n  const rawBody = await req.json().catch(() => ({}))\n  const body = (typeof rawBody === 'object' && rawBody && !Array.isArray(rawBody)\n    ? rawBody\n    : {}) as Record<string, unknown>\n\n  const guardResult = await runMessageMutationGuards(\n    ctx.container,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: body,\n    },\n    resolveUserFeatures(ctx.auth),\n  )\n  if (!guardResult.ok) {\n    return Response.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  try {\n    const commandResult = await commandBus.execute('messages.actions.execute', {\n      input: {\n        messageId: params.id,\n        actionId: params.actionId,\n        payload: body,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n\n    const result = commandResult.result as {\n      ok: boolean\n      actionId: string\n      result: Record<string, unknown>\n      operationLogEntry?: OperationLogEntryLike | null\n    }\n    const response = Response.json({\n      ok: result.ok,\n      actionId: result.actionId,\n      result: result.result,\n    })\n    attachOperationMetadataHeader(response, result.operationLogEntry ?? null, {\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n    })\n    await runMessageMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: 'Message not found' }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: 'Access denied' }, { status: 403 })\n      }\n      if (error.message === 'Action not found') {\n        return Response.json({ error: 'Action not found' }, { status: 404 })\n      }\n      if (error.message === 'Action command is not allowed') {\n        return Response.json({ error: 'Action command is not allowed' }, { status: 403 })\n      }\n      if (error.message === 'Action already taken') {\n        const actionTaken = (error as Error & { actionTaken?: string }).actionTaken ?? null\n        return Response.json({ error: 'Action already taken', actionTaken }, { status: 409 })\n      }\n      if (error.message === 'Actions have expired') {\n        return Response.json({ error: 'Actions have expired' }, { status: 410 })\n      }\n      if (error.message === 'Action has no executable target') {\n        return Response.json({ error: 'Action has no executable target' }, { status: 409 })\n      }\n      if (error.message === 'Action failed') {\n        return Response.json({ error: 'Action failed' }, { status: 500 })\n      }\n    }\n    throw error\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    POST: {\n      summary: 'Execute message action',\n      requestBody: { schema: z.record(z.string(), z.unknown()).optional() },\n      responses: [\n        { status: 200, description: 'Action executed', schema: actionResultResponseSchema },\n        { status: 403, description: 'Access denied' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already taken, or the message was modified concurrently (optimistic lock conflict)' },\n        { status: 410, description: 'Action expired' },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,qCAAiE;AAC1E,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,qCAAqC,gCAAgC;AAEnG,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,KACpB,KACA,EAAE,OAAO,GACT;AACA,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAErD,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,QAAM,OAAQ,OAAO,YAAY,YAAY,WAAW,CAAC,MAAM,QAAQ,OAAO,IAC1E,UACA,CAAC;AAEL,QAAM,cAAc,MAAM;AAAA,IACxB,IAAI;AAAA,IACJ;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB;AAAA,IACA,oBAAoB,IAAI,IAAI;AAAA,EAC9B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,SAAS;AAAA,MACd,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,WAAW,QAAQ,4BAA4B;AAAA,MACzE,OAAO;AAAA,QACL,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,SAAS;AAAA,QACT,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,SAAS,cAAc;AAM7B,UAAM,WAAW,SAAS,KAAK;AAAA,MAC7B,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,IACjB,CAAC;AACD,kCAA8B,UAAU,OAAO,qBAAqB,MAAM;AAAA,MACxE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,IACrB,CAAC;AACD,UAAM,oCAAoC,YAAY,uBAAuB;AAAA,MAC3E,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AACA,UAAI,MAAM,YAAY,oBAAoB;AACxC,eAAO,SAAS,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,UAAI,MAAM,YAAY,iCAAiC;AACrD,eAAO,SAAS,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClF;AACA,UAAI,MAAM,YAAY,wBAAwB;AAC5C,cAAM,cAAe,MAA2C,eAAe;AAC/E,eAAO,SAAS,KAAK,EAAE,OAAO,wBAAwB,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtF;AACA,UAAI,MAAM,YAAY,wBAAwB;AAC5C,eAAO,SAAS,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACzE;AACA,UAAI,MAAM,YAAY,mCAAmC;AACvD,eAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACpF;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE;AAAA,MACpE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,2BAA2B;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,4FAA4F;AAAA,QACxH,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { attachOperationMetadataHeader, type OperationLogEntryLike } from '../../../../lib/operationMetadata'\nimport { resolveMessageContext } from '../../../../lib/routeHelpers'\nimport { resolveUserFeatures, runMessageMutationGuardAfterSuccess, runMessageMutationGuards } from '../../../guards'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi/types'\nimport { actionResultResponseSchema } from '../../../openapi'\nimport { getCommandInterceptorHttpRejection } from '@open-mercato/shared/lib/commands/errors'\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['messages.actions'] },\n}\n\nexport async function POST(\n  req: Request,\n  { params }: { params: { id: string; actionId: string } }\n) {\n  const { ctx, scope } = await resolveMessageContext(req)\n  const commandBus = ctx.container.resolve('commandBus') as CommandBus\n\n  const rawBody = await req.json().catch(() => ({}))\n  const body = (typeof rawBody === 'object' && rawBody && !Array.isArray(rawBody)\n    ? rawBody\n    : {}) as Record<string, unknown>\n\n  const guardResult = await runMessageMutationGuards(\n    ctx.container,\n    {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: body,\n    },\n    resolveUserFeatures(ctx.auth),\n  )\n  if (!guardResult.ok) {\n    return Response.json(\n      guardResult.errorBody ?? { error: 'Operation blocked by guard' },\n      { status: guardResult.errorStatus ?? 422 },\n    )\n  }\n\n  try {\n    const commandResult = await commandBus.execute('messages.actions.execute', {\n      input: {\n        messageId: params.id,\n        actionId: params.actionId,\n        payload: body,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        userId: scope.userId,\n      },\n      ctx: {\n        container: ctx.container,\n        auth: ctx.auth ?? null,\n        organizationScope: null,\n        selectedOrganizationId: scope.organizationId,\n        organizationIds: scope.organizationId ? [scope.organizationId] : null,\n        request: req,\n      },\n    })\n\n    const result = commandResult.result as {\n      ok: boolean\n      actionId: string\n      result: Record<string, unknown>\n      operationLogEntry?: OperationLogEntryLike | null\n    }\n    const response = Response.json({\n      ok: result.ok,\n      actionId: result.actionId,\n      result: result.result,\n    })\n    attachOperationMetadataHeader(response, result.operationLogEntry ?? null, {\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n    })\n    await runMessageMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      userId: scope.userId,\n      resourceKind: 'messages.message',\n      resourceId: params.id,\n      operation: 'update',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n    })\n    return response\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const interceptorRejection = getCommandInterceptorHttpRejection(error)\n    if (interceptorRejection) {\n      return Response.json(interceptorRejection.body, { status: interceptorRejection.status })\n    }\n    if (error instanceof Error) {\n      if (error.message === 'Message not found') {\n        return Response.json({ error: 'Message not found' }, { status: 404 })\n      }\n      if (error.message === 'Access denied') {\n        return Response.json({ error: 'Access denied' }, { status: 403 })\n      }\n      if (error.message === 'Action not found') {\n        return Response.json({ error: 'Action not found' }, { status: 404 })\n      }\n      if (error.message === 'Action command is not allowed') {\n        return Response.json({ error: 'Action command is not allowed' }, { status: 403 })\n      }\n      if (error.message === 'Action already taken') {\n        const actionTaken = (error as Error & { actionTaken?: string }).actionTaken ?? null\n        return Response.json({ error: 'Action already taken', actionTaken }, { status: 409 })\n      }\n      if (error.message === 'Actions have expired') {\n        return Response.json({ error: 'Actions have expired' }, { status: 410 })\n      }\n      if (error.message === 'Action has no executable target') {\n        return Response.json({ error: 'Action has no executable target' }, { status: 409 })\n      }\n      if (error.message === 'Action failed') {\n        return Response.json({ error: 'Action failed' }, { status: 500 })\n      }\n    }\n    throw error\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Messages',\n  methods: {\n    POST: {\n      summary: 'Execute message action',\n      requestBody: { schema: z.record(z.string(), z.unknown()).optional() },\n      responses: [\n        { status: 200, description: 'Action executed', schema: actionResultResponseSchema },\n        { status: 403, description: 'Access denied' },\n        { status: 404, description: 'Action not found' },\n        { status: 409, description: 'Action already taken, or the message was modified concurrently (optimistic lock conflict)' },\n        { status: 410, description: 'Action expired' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,uBAAuB;AAChC,SAAS,qCAAiE;AAC1E,SAAS,6BAA6B;AACtC,SAAS,qBAAqB,qCAAqC,gCAAgC;AAEnG,SAAS,kCAAkC;AAC3C,SAAS,0CAA0C;AAE5C,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,eAAsB,KACpB,KACA,EAAE,OAAO,GACT;AACA,QAAM,EAAE,KAAK,MAAM,IAAI,MAAM,sBAAsB,GAAG;AACtD,QAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAErD,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,QAAM,OAAQ,OAAO,YAAY,YAAY,WAAW,CAAC,MAAM,QAAQ,OAAO,IAC1E,UACA,CAAC;AAEL,QAAM,cAAc,MAAM;AAAA,IACxB,IAAI;AAAA,IACJ;AAAA,MACE,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,IACnB;AAAA,IACA,oBAAoB,IAAI,IAAI;AAAA,EAC9B;AACA,MAAI,CAAC,YAAY,IAAI;AACnB,WAAO,SAAS;AAAA,MACd,YAAY,aAAa,EAAE,OAAO,6BAA6B;AAAA,MAC/D,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI;AACF,UAAM,gBAAgB,MAAM,WAAW,QAAQ,4BAA4B;AAAA,MACzE,OAAO;AAAA,QACL,WAAW,OAAO;AAAA,QAClB,UAAU,OAAO;AAAA,QACjB,SAAS;AAAA,QACT,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,MACA,KAAK;AAAA,QACH,WAAW,IAAI;AAAA,QACf,MAAM,IAAI,QAAQ;AAAA,QAClB,mBAAmB;AAAA,QACnB,wBAAwB,MAAM;AAAA,QAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACjE,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,SAAS,cAAc;AAM7B,UAAM,WAAW,SAAS,KAAK;AAAA,MAC7B,IAAI,OAAO;AAAA,MACX,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,IACjB,CAAC;AACD,kCAA8B,UAAU,OAAO,qBAAqB,MAAM;AAAA,MACxE,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,IACrB,CAAC;AACD,UAAM,oCAAoC,YAAY,uBAAuB;AAAA,MAC3E,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,uBAAuB,mCAAmC,KAAK;AACrE,QAAI,sBAAsB;AACxB,aAAO,SAAS,KAAK,qBAAqB,MAAM,EAAE,QAAQ,qBAAqB,OAAO,CAAC;AAAA,IACzF;AACA,QAAI,iBAAiB,OAAO;AAC1B,UAAI,MAAM,YAAY,qBAAqB;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtE;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AACA,UAAI,MAAM,YAAY,oBAAoB;AACxC,eAAO,SAAS,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrE;AACA,UAAI,MAAM,YAAY,iCAAiC;AACrD,eAAO,SAAS,KAAK,EAAE,OAAO,gCAAgC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClF;AACA,UAAI,MAAM,YAAY,wBAAwB;AAC5C,cAAM,cAAe,MAA2C,eAAe;AAC/E,eAAO,SAAS,KAAK,EAAE,OAAO,wBAAwB,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACtF;AACA,UAAI,MAAM,YAAY,wBAAwB;AAC5C,eAAO,SAAS,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACzE;AACA,UAAI,MAAM,YAAY,mCAAmC;AACvD,eAAO,SAAS,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACpF;AACA,UAAI,MAAM,YAAY,iBAAiB;AACrC,eAAO,SAAS,KAAK,EAAE,OAAO,gBAAgB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClE;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE;AAAA,MACpE,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,2BAA2B;AAAA,QAClF,EAAE,QAAQ,KAAK,aAAa,gBAAgB;AAAA,QAC5C,EAAE,QAAQ,KAAK,aAAa,mBAAmB;AAAA,QAC/C,EAAE,QAAQ,KAAK,aAAa,4FAA4F;AAAA,QACxH,EAAE,QAAQ,KAAK,aAAa,iBAAiB;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }