@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/eudr/api/dashboard/widgets/compliance-overview/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/eudr/api/dashboard/widgets/compliance-overview/route.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport {\n  EudrDueDiligenceStatement,\n  EudrEvidenceSubmission,\n  EudrPlot,\n  EudrProductMapping,\n  EudrRiskAssessment,\n} from '../../../../data/entities'\nimport { EUDR_APPLICATION_DATES } from '../../../../lib/reference-data'\nimport { EUDR_AMEND_WINDOW_MS, isAmendWindowOpen } from '../../../../lib/statement-lifecycle'\nimport {\n  EUDR_STATEMENT_STATUSES,\n  EUDR_SUBMISSION_STATUSES,\n} from '../../../../data/validators'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst logger = createLogger('eudr').child({ component: 'api/dashboard/widgets/compliance-overview' })\n\ntype RequestContext = {\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype AvgCompletenessRow = {\n  avg_completeness: string | number | null\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000\nconst QUEUE_LIMIT = 5\nconst NON_TERMINAL_SUBMISSION_STATUSES = ['draft', 'submitted'] as const\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n  const userId = auth.sub ?? null\n  const tenantId = auth.tenantId\n\n  return {\n    em: container.resolve('em') as EntityManager,\n    tenantId,\n    organizationId,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], { tenantId, organizationId })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nfunction countRowsByStatus<T extends object>(\n  em: EntityManager,\n  entity: new () => T,\n  statuses: readonly string[],\n  scope: { tenantId: string; organizationId: string },\n): Promise<Record<string, number>> {\n  return Promise.all(\n    statuses.map(async (status) => {\n      const count = await em.count(entity, {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        status,\n      } as FilterQuery<T>)\n      return [status, count] as const\n    }),\n  ).then((entries) => Object.fromEntries(entries))\n}\n\nasync function fetchAverageCompleteness(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n): Promise<number | null> {\n  const rows = await em.getConnection().execute(\n    `select avg(completeness_score) as avg_completeness\n       from eudr_evidence_submissions\n      where tenant_id = ?\n        and organization_id = ?\n        and deleted_at is null`,\n    [scope.tenantId, scope.organizationId],\n  ) as AvgCompletenessRow[]\n  const value = rows[0]?.avg_completeness ?? null\n  if (value === null) return null\n  const parsed = typeof value === 'number' ? value : Number(value)\n  return Number.isFinite(parsed) ? parsed : null\n}\n\nfunction daysLeft(deadline: string, now: Date): number {\n  const deadlineDate = new Date(`${deadline}T00:00:00.000Z`)\n  return Math.ceil((deadlineDate.getTime() - now.getTime()) / DAY_MS)\n}\n\ntype QueueScope = { tenantId: string; organizationId: string }\n\ntype IncompleteSubmissionQueueItem = { id: string; label: string | null; completeness: number; url: string }\ntype ReviewDueQueueItem = { id: string; label: string | null; dueAt: string; url: string }\ntype AmendWindowQueueItem = { id: string; label: string; expiresAt: string; url: string }\ntype PlotWarningQueueItem = { id: string; label: string; warnings: string[]; url: string }\n\ntype ComplianceQueues = {\n  incompleteSubmissions?: IncompleteSubmissionQueueItem[]\n  reviewsDue?: ReviewDueQueueItem[]\n  amendWindow?: AmendWindowQueueItem[]\n  plotsWithWarnings?: PlotWarningQueueItem[]\n}\n\nfunction readSupplierDisplayName(snapshot: { displayName?: string | null } | null | undefined): string | null {\n  const displayName = snapshot?.displayName?.trim()\n  return displayName && displayName.length > 0 ? displayName : null\n}\n\nasync function fetchIncompleteSubmissionsQueue(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<IncompleteSubmissionQueueItem[]> {\n  const submissions = await em.find(EudrEvidenceSubmission, {\n    ...scope,\n    deletedAt: null,\n    status: { $in: [...NON_TERMINAL_SUBMISSION_STATUSES] },\n    completenessScore: { $lt: 100 },\n  } as FilterQuery<EudrEvidenceSubmission>, {\n    fields: ['id', 'supplierSnapshot', 'batchNumber', 'completenessScore'],\n    orderBy: { completenessScore: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  return submissions.map((submission) => {\n    const batchNumber = typeof submission.batchNumber === 'string' && submission.batchNumber.trim().length > 0\n      ? submission.batchNumber.trim()\n      : null\n    return {\n      id: submission.id,\n      label: readSupplierDisplayName(submission.supplierSnapshot) ?? batchNumber,\n      completeness: submission.completenessScore,\n      url: `/backend/eudr/evidence-submissions/${submission.id}`,\n    }\n  })\n}\n\nasync function fetchReviewsDueQueue(\n  em: EntityManager,\n  scope: QueueScope,\n  now: Date,\n): Promise<ReviewDueQueueItem[]> {\n  const reviewWindowEnd = new Date(now.getTime() + 30 * DAY_MS)\n  const assessments = await em.find(EudrRiskAssessment, {\n    ...scope,\n    deletedAt: null,\n    reviewDueAt: { $ne: null, $lte: reviewWindowEnd },\n  } as FilterQuery<EudrRiskAssessment>, {\n    fields: ['id', 'statementId', 'conclusion', 'reviewDueAt'],\n    orderBy: { reviewDueAt: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  const statementIds = [...new Set(assessments.map((assessment) => assessment.statementId))]\n  const statements = statementIds.length > 0\n    ? await em.find(EudrDueDiligenceStatement, {\n        ...scope,\n        deletedAt: null,\n        id: { $in: statementIds },\n      } as FilterQuery<EudrDueDiligenceStatement>, { fields: ['id', 'title'] })\n    : []\n  const statementTitleById = new Map(statements.map((statement) => [statement.id, statement.title]))\n  return assessments.flatMap((assessment) => {\n    const dueAt = assessment.reviewDueAt\n    if (!dueAt) return []\n    const statementTitle = statementTitleById.get(assessment.statementId) ?? null\n    return [{\n      id: assessment.id,\n      label: statementTitle,\n      dueAt: dueAt.toISOString(),\n      url: statementTitle !== null\n        ? `/backend/eudr/statements/${assessment.statementId}`\n        : `/backend/eudr/risk-assessments/${assessment.id}`,\n    }]\n  })\n}\n\nasync function fetchAmendWindowQueue(\n  em: EntityManager,\n  scope: QueueScope,\n  now: Date,\n): Promise<AmendWindowQueueItem[]> {\n  const windowStart = new Date(now.getTime() - EUDR_AMEND_WINDOW_MS)\n  const statements = await em.find(EudrDueDiligenceStatement, {\n    ...scope,\n    deletedAt: null,\n    status: 'available',\n    referenceIssuedAt: { $ne: null, $gte: windowStart },\n  } as FilterQuery<EudrDueDiligenceStatement>, {\n    fields: ['id', 'title', 'referenceIssuedAt'],\n    orderBy: { referenceIssuedAt: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  return statements.flatMap((statement) => {\n    const issuedAt = statement.referenceIssuedAt\n    if (!issuedAt || !isAmendWindowOpen(issuedAt, now)) return []\n    return [{\n      id: statement.id,\n      label: statement.title,\n      expiresAt: new Date(issuedAt.getTime() + EUDR_AMEND_WINDOW_MS).toISOString(),\n      url: `/backend/eudr/statements/${statement.id}`,\n    }]\n  })\n}\n\ntype PlotWarningRow = { id: string; name: string; validation_warnings: unknown }\n\nasync function fetchPlotsWithWarningsQueue(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<PlotWarningQueueItem[]> {\n  const rows = await em.getConnection().execute(\n    `select id, name, validation_warnings\n       from eudr_plots\n      where tenant_id = ?\n        and organization_id = ?\n        and deleted_at is null\n        and is_active = true\n        and jsonb_array_length(validation_warnings) > 0\n      order by name asc\n      limit ${QUEUE_LIMIT}`,\n    [scope.tenantId, scope.organizationId],\n  ) as PlotWarningRow[]\n  return rows.map((row) => ({\n    id: row.id,\n    label: row.name,\n    warnings: Array.isArray(row.validation_warnings)\n      ? row.validation_warnings.filter((warning): warning is string => typeof warning === 'string')\n      : [],\n    url: `/backend/eudr/plots/${row.id}`,\n  }))\n}\n\ntype PlotCountsRow = { with_warnings: number | string | null }\n\nasync function fetchPlotCounts(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<{ active: number; withWarnings: number }> {\n  const [active, rows] = await Promise.all([\n    em.count(EudrPlot, { ...scope, deletedAt: null, isActive: true }),\n    em.getConnection().execute(\n      `select count(*)::int as with_warnings\n         from eudr_plots\n        where tenant_id = ?\n          and organization_id = ?\n          and deleted_at is null\n          and is_active = true\n          and jsonb_array_length(validation_warnings) > 0`,\n      [scope.tenantId, scope.organizationId],\n    ) as Promise<PlotCountsRow[]>,\n  ])\n  const rawWithWarnings = rows[0]?.with_warnings ?? 0\n  const withWarnings = typeof rawWithWarnings === 'number' ? rawWithWarnings : Number(rawWithWarnings)\n  return { active, withWarnings: Number.isFinite(withWarnings) ? withWarnings : 0 }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    const now = new Date()\n    const reviewWindowEnd = new Date(now.getTime() + 30 * DAY_MS)\n\n    const [\n      canViewMappingsRollup,\n      canViewSubmissionsQueue,\n      canViewRiskQueue,\n      canViewStatementsQueue,\n      canViewPlotsQueue,\n    ] = await Promise.all([\n      ctx.hasFeature('eudr.mappings.view'),\n      ctx.hasFeature('eudr.submissions.view'),\n      ctx.hasFeature('eudr.risk.view'),\n      ctx.hasFeature('eudr.statements.view'),\n      ctx.hasFeature('eudr.plots.view'),\n    ])\n\n    const [\n      mappingsInScope,\n      submissionsTotal,\n      submissionsByStatus,\n      avgCompleteness,\n      incomplete,\n      statementsTotal,\n      statementsByStatus,\n      notReady,\n      missingReference,\n      riskReviewsDueSoon,\n      incompleteSubmissionsQueue,\n      reviewsDueQueue,\n      amendWindowQueue,\n      plotsWithWarningsQueue,\n      plotCounts,\n    ] = await Promise.all([\n      canViewMappingsRollup\n        ? ctx.em.count(EudrProductMapping, { ...scope, deletedAt: null, isInScope: true })\n        : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? ctx.em.count(EudrEvidenceSubmission, { ...scope, deletedAt: null })\n        : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? countRowsByStatus(ctx.em, EudrEvidenceSubmission, EUDR_SUBMISSION_STATUSES, scope)\n        : Promise.resolve(null),\n      canViewSubmissionsQueue ? fetchAverageCompleteness(ctx.em, scope) : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? ctx.em.count(EudrEvidenceSubmission, { ...scope, deletedAt: null, completenessScore: { $lt: 100 } } as FilterQuery<EudrEvidenceSubmission>)\n        : Promise.resolve(null),\n      ctx.em.count(EudrDueDiligenceStatement, { ...scope, deletedAt: null }),\n      countRowsByStatus(ctx.em, EudrDueDiligenceStatement, EUDR_STATEMENT_STATUSES, scope),\n      ctx.em.count(EudrDueDiligenceStatement, { ...scope, deletedAt: null, status: 'draft' }),\n      ctx.em.count(EudrDueDiligenceStatement, {\n        ...scope,\n        deletedAt: null,\n        status: { $in: ['submitted', 'available'] },\n        referenceNumber: null,\n      } as FilterQuery<EudrDueDiligenceStatement>),\n      canViewRiskQueue\n        ? ctx.em.count(EudrRiskAssessment, {\n            ...scope,\n            deletedAt: null,\n            // Same predicate as fetchReviewsDueQueue: overdue reviews are still\n            // due, so the headline count and the queue list cannot disagree.\n            reviewDueAt: { $ne: null, $lte: reviewWindowEnd },\n          } as FilterQuery<EudrRiskAssessment>)\n        : Promise.resolve(null),\n      canViewSubmissionsQueue ? fetchIncompleteSubmissionsQueue(ctx.em, scope) : Promise.resolve(null),\n      canViewRiskQueue ? fetchReviewsDueQueue(ctx.em, scope, now) : Promise.resolve(null),\n      canViewStatementsQueue ? fetchAmendWindowQueue(ctx.em, scope, now) : Promise.resolve(null),\n      canViewPlotsQueue ? fetchPlotsWithWarningsQueue(ctx.em, scope) : Promise.resolve(null),\n      canViewPlotsQueue ? fetchPlotCounts(ctx.em, scope) : Promise.resolve(null),\n    ])\n\n    const queues: ComplianceQueues = {}\n    if (incompleteSubmissionsQueue !== null) queues.incompleteSubmissions = incompleteSubmissionsQueue\n    if (reviewsDueQueue !== null) queues.reviewsDue = reviewsDueQueue\n    if (amendWindowQueue !== null) queues.amendWindow = amendWindowQueue\n    if (plotsWithWarningsQueue !== null) queues.plotsWithWarnings = plotsWithWarningsQueue\n\n    return Response.json({\n      deadline: {\n        date: EUDR_APPLICATION_DATES.largeAndMedium,\n        daysLeft: daysLeft(EUDR_APPLICATION_DATES.largeAndMedium, now),\n      },\n      ...(mappingsInScope !== null ? { mappingsInScope } : {}),\n      ...(submissionsTotal !== null && submissionsByStatus !== null && incomplete !== null\n        ? {\n            submissions: {\n              total: submissionsTotal,\n              byStatus: submissionsByStatus,\n              avgCompleteness,\n              incomplete,\n            },\n          }\n        : {}),\n      statements: {\n        total: statementsTotal,\n        byStatus: statementsByStatus,\n        notReady,\n        missingReference,\n      },\n      ...(riskReviewsDueSoon !== null ? { riskReviewsDueSoon } : {}),\n      ...(plotCounts !== null ? { plots: plotCounts } : {}),\n      queues,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Compliance overview loading failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.compliance_overview_failed', 'Failed to load EUDR compliance overview') },\n      { status: 500 },\n    )\n  }\n}\n\nconst responseSchema = z.object({\n  deadline: z.object({\n    date: z.literal(EUDR_APPLICATION_DATES.largeAndMedium),\n    daysLeft: z.number(),\n  }),\n  mappingsInScope: z.number().optional(),\n  submissions: z.object({\n    total: z.number(),\n    byStatus: z.record(z.string(), z.number()),\n    avgCompleteness: z.number().nullable(),\n    incomplete: z.number(),\n  }).optional(),\n  statements: z.object({\n    total: z.number(),\n    byStatus: z.record(z.string(), z.number()),\n    notReady: z.number(),\n    missingReference: z.number(),\n  }),\n  riskReviewsDueSoon: z.number().optional(),\n  plots: z.object({\n    active: z.number(),\n    withWarnings: z.number(),\n  }).optional(),\n  queues: z.object({\n    incompleteSubmissions: z.array(z.object({\n      id: z.string(),\n      label: z.string().nullable(),\n      completeness: z.number(),\n      url: z.string(),\n    })).optional(),\n    reviewsDue: z.array(z.object({\n      id: z.string(),\n      label: z.string().nullable(),\n      dueAt: z.string(),\n      url: z.string(),\n    })).optional(),\n    amendWindow: z.array(z.object({\n      id: z.string(),\n      label: z.string(),\n      expiresAt: z.string(),\n      url: z.string(),\n    })).optional(),\n    plotsWithWarnings: z.array(z.object({\n      id: z.string(),\n      label: z.string(),\n      warnings: z.array(z.string()),\n      url: z.string(),\n    })).optional(),\n  }),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'EUDR compliance overview widget',\n  methods: {\n    GET: {\n      summary: 'Compliance overview',\n      responses: [\n        { status: 200, description: 'EUDR compliance overview metrics', schema: responseSchema },\n        { status: 400, description: 'Invalid organization context', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Compliance overview loading failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC,SAAS,sBAAsB,yBAAyB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,4CAA4C,CAAC;AAapG,MAAM,SAAS,KAAK,KAAK,KAAK;AAC9B,MAAM,cAAc;AACpB,MAAM,mCAAmC,CAAC,SAAS,WAAW;AAE9D,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AACA,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,WAAW,KAAK;AAEtB,SAAO;AAAA,IACL,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,MAC7F,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,kBACP,IACA,QACA,UACA,OACiC;AACjC,SAAO,QAAQ;AAAA,IACb,SAAS,IAAI,OAAO,WAAW;AAC7B,YAAM,QAAQ,MAAM,GAAG,MAAM,QAAQ;AAAA,QACnC,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX;AAAA,MACF,CAAmB;AACnB,aAAO,CAAC,QAAQ,KAAK;AAAA,IACvB,CAAC;AAAA,EACH,EAAE,KAAK,CAAC,YAAY,OAAO,YAAY,OAAO,CAAC;AACjD;AAEA,eAAe,yBACb,IACA,OACwB;AACxB,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,EACvC;AACA,QAAM,QAAQ,KAAK,CAAC,GAAG,oBAAoB;AAC3C,MAAI,UAAU,KAAM,QAAO;AAC3B,QAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC/D,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,SAAS,UAAkB,KAAmB;AACrD,QAAM,eAAe,oBAAI,KAAK,GAAG,QAAQ,gBAAgB;AACzD,SAAO,KAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,QAAQ,KAAK,MAAM;AACpE;AAgBA,SAAS,wBAAwB,UAA6E;AAC5G,QAAM,cAAc,UAAU,aAAa,KAAK;AAChD,SAAO,eAAe,YAAY,SAAS,IAAI,cAAc;AAC/D;AAEA,eAAe,gCACb,IACA,OAC0C;AAC1C,QAAM,cAAc,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACxD,GAAG;AAAA,IACH,WAAW;AAAA,IACX,QAAQ,EAAE,KAAK,CAAC,GAAG,gCAAgC,EAAE;AAAA,IACrD,mBAAmB,EAAE,KAAK,IAAI;AAAA,EAChC,GAA0C;AAAA,IACxC,QAAQ,CAAC,MAAM,oBAAoB,eAAe,mBAAmB;AAAA,IACrE,SAAS,EAAE,mBAAmB,MAAM;AAAA,IACpC,OAAO;AAAA,EACT,CAAC;AACD,SAAO,YAAY,IAAI,CAAC,eAAe;AACrC,UAAM,cAAc,OAAO,WAAW,gBAAgB,YAAY,WAAW,YAAY,KAAK,EAAE,SAAS,IACrG,WAAW,YAAY,KAAK,IAC5B;AACJ,WAAO;AAAA,MACL,IAAI,WAAW;AAAA,MACf,OAAO,wBAAwB,WAAW,gBAAgB,KAAK;AAAA,MAC/D,cAAc,WAAW;AAAA,MACzB,KAAK,sCAAsC,WAAW,EAAE;AAAA,IAC1D;AAAA,EACF,CAAC;AACH;AAEA,eAAe,qBACb,IACA,OACA,KAC+B;AAC/B,QAAM,kBAAkB,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,MAAM;AAC5D,QAAM,cAAc,MAAM,GAAG,KAAK,oBAAoB;AAAA,IACpD,GAAG;AAAA,IACH,WAAW;AAAA,IACX,aAAa,EAAE,KAAK,MAAM,MAAM,gBAAgB;AAAA,EAClD,GAAsC;AAAA,IACpC,QAAQ,CAAC,MAAM,eAAe,cAAc,aAAa;AAAA,IACzD,SAAS,EAAE,aAAa,MAAM;AAAA,IAC9B,OAAO;AAAA,EACT,CAAC;AACD,QAAM,eAAe,CAAC,GAAG,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,WAAW,CAAC,CAAC;AACzF,QAAM,aAAa,aAAa,SAAS,IACrC,MAAM,GAAG,KAAK,2BAA2B;AAAA,IACvC,GAAG;AAAA,IACH,WAAW;AAAA,IACX,IAAI,EAAE,KAAK,aAAa;AAAA,EAC1B,GAA6C,EAAE,QAAQ,CAAC,MAAM,OAAO,EAAE,CAAC,IACxE,CAAC;AACL,QAAM,qBAAqB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC;AACjG,SAAO,YAAY,QAAQ,CAAC,eAAe;AACzC,UAAM,QAAQ,WAAW;AACzB,QAAI,CAAC,MAAO,QAAO,CAAC;AACpB,UAAM,iBAAiB,mBAAmB,IAAI,WAAW,WAAW,KAAK;AACzE,WAAO,CAAC;AAAA,MACN,IAAI,WAAW;AAAA,MACf,OAAO;AAAA,MACP,OAAO,MAAM,YAAY;AAAA,MACzB,KAAK,mBAAmB,OACpB,4BAA4B,WAAW,WAAW,KAClD,kCAAkC,WAAW,EAAE;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,sBACb,IACA,OACA,KACiC;AACjC,QAAM,cAAc,IAAI,KAAK,IAAI,QAAQ,IAAI,oBAAoB;AACjE,QAAM,aAAa,MAAM,GAAG,KAAK,2BAA2B;AAAA,IAC1D,GAAG;AAAA,IACH,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,mBAAmB,EAAE,KAAK,MAAM,MAAM,YAAY;AAAA,EACpD,GAA6C;AAAA,IAC3C,QAAQ,CAAC,MAAM,SAAS,mBAAmB;AAAA,IAC3C,SAAS,EAAE,mBAAmB,MAAM;AAAA,IACpC,OAAO;AAAA,EACT,CAAC;AACD,SAAO,WAAW,QAAQ,CAAC,cAAc;AACvC,UAAM,WAAW,UAAU;AAC3B,QAAI,CAAC,YAAY,CAAC,kBAAkB,UAAU,GAAG,EAAG,QAAO,CAAC;AAC5D,WAAO,CAAC;AAAA,MACN,IAAI,UAAU;AAAA,MACd,OAAO,UAAU;AAAA,MACjB,WAAW,IAAI,KAAK,SAAS,QAAQ,IAAI,oBAAoB,EAAE,YAAY;AAAA,MAC3E,KAAK,4BAA4B,UAAU,EAAE;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC;AACH;AAIA,eAAe,4BACb,IACA,OACiC;AACjC,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAQU,WAAW;AAAA,IACrB,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,EACvC;AACA,SAAO,KAAK,IAAI,CAAC,SAAS;AAAA,IACxB,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,UAAU,MAAM,QAAQ,IAAI,mBAAmB,IAC3C,IAAI,oBAAoB,OAAO,CAAC,YAA+B,OAAO,YAAY,QAAQ,IAC1F,CAAC;AAAA,IACL,KAAK,uBAAuB,IAAI,EAAE;AAAA,EACpC,EAAE;AACJ;AAIA,eAAe,gBACb,IACA,OACmD;AACnD,QAAM,CAAC,QAAQ,IAAI,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvC,GAAG,MAAM,UAAU,EAAE,GAAG,OAAO,WAAW,MAAM,UAAU,KAAK,CAAC;AAAA,IAChE,GAAG,cAAc,EAAE;AAAA,MACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,IACvC;AAAA,EACF,CAAC;AACD,QAAM,kBAAkB,KAAK,CAAC,GAAG,iBAAiB;AAClD,QAAM,eAAe,OAAO,oBAAoB,WAAW,kBAAkB,OAAO,eAAe;AACnG,SAAO,EAAE,QAAQ,cAAc,OAAO,SAAS,YAAY,IAAI,eAAe,EAAE;AAClF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,kBAAkB,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,MAAM;AAE5D,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpB,IAAI,WAAW,oBAAoB;AAAA,MACnC,IAAI,WAAW,uBAAuB;AAAA,MACtC,IAAI,WAAW,gBAAgB;AAAA,MAC/B,IAAI,WAAW,sBAAsB;AAAA,MACrC,IAAI,WAAW,iBAAiB;AAAA,IAClC,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpB,wBACI,IAAI,GAAG,MAAM,oBAAoB,EAAE,GAAG,OAAO,WAAW,MAAM,WAAW,KAAK,CAAC,IAC/E,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BACI,IAAI,GAAG,MAAM,wBAAwB,EAAE,GAAG,OAAO,WAAW,KAAK,CAAC,IAClE,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BACI,kBAAkB,IAAI,IAAI,wBAAwB,0BAA0B,KAAK,IACjF,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BAA0B,yBAAyB,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACxF,0BACI,IAAI,GAAG,MAAM,wBAAwB,EAAE,GAAG,OAAO,WAAW,MAAM,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAwC,IAC1I,QAAQ,QAAQ,IAAI;AAAA,MACxB,IAAI,GAAG,MAAM,2BAA2B,EAAE,GAAG,OAAO,WAAW,KAAK,CAAC;AAAA,MACrE,kBAAkB,IAAI,IAAI,2BAA2B,yBAAyB,KAAK;AAAA,MACnF,IAAI,GAAG,MAAM,2BAA2B,EAAE,GAAG,OAAO,WAAW,MAAM,QAAQ,QAAQ,CAAC;AAAA,MACtF,IAAI,GAAG,MAAM,2BAA2B;AAAA,QACtC,GAAG;AAAA,QACH,WAAW;AAAA,QACX,QAAQ,EAAE,KAAK,CAAC,aAAa,WAAW,EAAE;AAAA,QAC1C,iBAAiB;AAAA,MACnB,CAA2C;AAAA,MAC3C,mBACI,IAAI,GAAG,MAAM,oBAAoB;AAAA,QAC/B,GAAG;AAAA,QACH,WAAW;AAAA;AAAA;AAAA,QAGX,aAAa,EAAE,KAAK,MAAM,MAAM,gBAAgB;AAAA,MAClD,CAAoC,IACpC,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BAA0B,gCAAgC,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MAC/F,mBAAmB,qBAAqB,IAAI,IAAI,OAAO,GAAG,IAAI,QAAQ,QAAQ,IAAI;AAAA,MAClF,yBAAyB,sBAAsB,IAAI,IAAI,OAAO,GAAG,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACzF,oBAAoB,4BAA4B,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACrF,oBAAoB,gBAAgB,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC3E,CAAC;AAED,UAAM,SAA2B,CAAC;AAClC,QAAI,+BAA+B,KAAM,QAAO,wBAAwB;AACxE,QAAI,oBAAoB,KAAM,QAAO,aAAa;AAClD,QAAI,qBAAqB,KAAM,QAAO,cAAc;AACpD,QAAI,2BAA2B,KAAM,QAAO,oBAAoB;AAEhE,WAAO,SAAS,KAAK;AAAA,MACnB,UAAU;AAAA,QACR,MAAM,uBAAuB;AAAA,QAC7B,UAAU,SAAS,uBAAuB,gBAAgB,GAAG;AAAA,MAC/D;AAAA,MACA,GAAI,oBAAoB,OAAO,EAAE,gBAAgB,IAAI,CAAC;AAAA,MACtD,GAAI,qBAAqB,QAAQ,wBAAwB,QAAQ,eAAe,OAC5E;AAAA,QACE,aAAa;AAAA,UACX,OAAO;AAAA,UACP,UAAU;AAAA,UACV;AAAA,UACA;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,MACL,YAAY;AAAA,QACV,OAAO;AAAA,QACP,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,MACA,GAAI,uBAAuB,OAAO,EAAE,mBAAmB,IAAI,CAAC;AAAA,MAC5D,GAAI,eAAe,OAAO,EAAE,OAAO,WAAW,IAAI,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,QAAQ,uBAAuB,cAAc;AAAA,IACrD,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC;AAAA,EACD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA,IACzC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,IACrC,YAAY,EAAE,OAAO;AAAA,EACvB,CAAC,EAAE,SAAS;AAAA,EACZ,YAAY,EAAE,OAAO;AAAA,IACnB,OAAO,EAAE,OAAO;AAAA,IAChB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA,IACzC,UAAU,EAAE,OAAO;AAAA,IACnB,kBAAkB,EAAE,OAAO;AAAA,EAC7B,CAAC;AAAA,EACD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,OAAO,EAAE,OAAO;AAAA,IACd,QAAQ,EAAE,OAAO;AAAA,IACjB,cAAc,EAAE,OAAO;AAAA,EACzB,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO;AAAA,IACf,uBAAuB,EAAE,MAAM,EAAE,OAAO;AAAA,MACtC,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,cAAc,EAAE,OAAO;AAAA,MACvB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,YAAY,EAAE,MAAM,EAAE,OAAO;AAAA,MAC3B,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,OAAO,EAAE,OAAO;AAAA,MAChB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,aAAa,EAAE,MAAM,EAAE,OAAO;AAAA,MAC5B,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO;AAAA,MAChB,WAAW,EAAE,OAAO;AAAA,MACpB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,mBAAmB,EAAE,MAAM,EAAE,OAAO;AAAA,MAClC,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO;AAAA,MAChB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,MAC5B,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,EACf,CAAC;AACH,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,eAAe;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5G;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport {\n  EudrDueDiligenceStatement,\n  EudrEvidenceSubmission,\n  EudrPlot,\n  EudrProductMapping,\n  EudrRiskAssessment,\n} from '../../../../data/entities'\nimport { EUDR_APPLICATION_DATES } from '../../../../lib/reference-data'\nimport { EUDR_AMEND_WINDOW_MS, isAmendWindowOpen } from '../../../../lib/statement-lifecycle'\nimport {\n  EUDR_STATEMENT_STATUSES,\n  EUDR_SUBMISSION_STATUSES,\n} from '../../../../data/validators'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst logger = createLogger('eudr').child({ component: 'api/dashboard/widgets/compliance-overview' })\n\ntype RequestContext = {\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype AvgCompletenessRow = {\n  avg_completeness: string | number | null\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000\nconst QUEUE_LIMIT = 5\nconst NON_TERMINAL_SUBMISSION_STATUSES = ['draft', 'submitted'] as const\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n  const userId = auth.sub ?? null\n  const tenantId = auth.tenantId\n\n  return {\n    em: container.resolve('em') as EntityManager,\n    tenantId,\n    organizationId,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], { tenantId, organizationId })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nfunction countRowsByStatus<T extends object>(\n  em: EntityManager,\n  entity: new () => T,\n  statuses: readonly string[],\n  scope: { tenantId: string; organizationId: string },\n): Promise<Record<string, number>> {\n  return Promise.all(\n    statuses.map(async (status) => {\n      const count = await em.count(entity, {\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n        deletedAt: null,\n        status,\n      } as FilterQuery<T>)\n      return [status, count] as const\n    }),\n  ).then((entries) => Object.fromEntries(entries))\n}\n\nasync function fetchAverageCompleteness(\n  em: EntityManager,\n  scope: { tenantId: string; organizationId: string },\n): Promise<number | null> {\n  const rows = await em.getConnection().execute(\n    `select avg(completeness_score) as avg_completeness\n       from eudr_evidence_submissions\n      where tenant_id = ?\n        and organization_id = ?\n        and deleted_at is null`,\n    [scope.tenantId, scope.organizationId],\n  ) as AvgCompletenessRow[]\n  const value = rows[0]?.avg_completeness ?? null\n  if (value === null) return null\n  const parsed = typeof value === 'number' ? value : Number(value)\n  return Number.isFinite(parsed) ? parsed : null\n}\n\nfunction daysLeft(deadline: string, now: Date): number {\n  const deadlineDate = new Date(`${deadline}T00:00:00.000Z`)\n  return Math.ceil((deadlineDate.getTime() - now.getTime()) / DAY_MS)\n}\n\ntype QueueScope = { tenantId: string; organizationId: string }\n\ntype IncompleteSubmissionQueueItem = { id: string; label: string | null; completeness: number; url: string }\ntype ReviewDueQueueItem = { id: string; label: string | null; dueAt: string; url: string }\ntype AmendWindowQueueItem = { id: string; label: string; expiresAt: string; url: string }\ntype PlotWarningQueueItem = { id: string; label: string; warnings: string[]; url: string }\n\ntype ComplianceQueues = {\n  incompleteSubmissions?: IncompleteSubmissionQueueItem[]\n  reviewsDue?: ReviewDueQueueItem[]\n  amendWindow?: AmendWindowQueueItem[]\n  plotsWithWarnings?: PlotWarningQueueItem[]\n}\n\nfunction readSupplierDisplayName(snapshot: { displayName?: string | null } | null | undefined): string | null {\n  const displayName = snapshot?.displayName?.trim()\n  return displayName && displayName.length > 0 ? displayName : null\n}\n\nasync function fetchIncompleteSubmissionsQueue(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<IncompleteSubmissionQueueItem[]> {\n  const submissions = await em.find(EudrEvidenceSubmission, {\n    ...scope,\n    deletedAt: null,\n    status: { $in: [...NON_TERMINAL_SUBMISSION_STATUSES] },\n    completenessScore: { $lt: 100 },\n  } as FilterQuery<EudrEvidenceSubmission>, {\n    fields: ['id', 'supplierSnapshot', 'batchNumber', 'completenessScore'],\n    orderBy: { completenessScore: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  return submissions.map((submission) => {\n    const batchNumber = typeof submission.batchNumber === 'string' && submission.batchNumber.trim().length > 0\n      ? submission.batchNumber.trim()\n      : null\n    return {\n      id: submission.id,\n      label: readSupplierDisplayName(submission.supplierSnapshot) ?? batchNumber,\n      completeness: submission.completenessScore,\n      url: `/backend/eudr/evidence-submissions/${submission.id}`,\n    }\n  })\n}\n\nasync function fetchReviewsDueQueue(\n  em: EntityManager,\n  scope: QueueScope,\n  now: Date,\n): Promise<ReviewDueQueueItem[]> {\n  const reviewWindowEnd = new Date(now.getTime() + 30 * DAY_MS)\n  const assessments = await em.find(EudrRiskAssessment, {\n    ...scope,\n    deletedAt: null,\n    reviewDueAt: { $ne: null, $lte: reviewWindowEnd },\n  } as FilterQuery<EudrRiskAssessment>, {\n    fields: ['id', 'statementId', 'conclusion', 'reviewDueAt'],\n    orderBy: { reviewDueAt: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  const statementIds = [...new Set(assessments.map((assessment) => assessment.statementId))]\n  const statements = statementIds.length > 0\n    ? await em.find(EudrDueDiligenceStatement, {\n        ...scope,\n        deletedAt: null,\n        id: { $in: statementIds },\n      } as FilterQuery<EudrDueDiligenceStatement>, { fields: ['id', 'title'] })\n    : []\n  const statementTitleById = new Map(statements.map((statement) => [statement.id, statement.title]))\n  return assessments.flatMap((assessment) => {\n    const dueAt = assessment.reviewDueAt\n    if (!dueAt) return []\n    const statementTitle = statementTitleById.get(assessment.statementId) ?? null\n    return [{\n      id: assessment.id,\n      label: statementTitle,\n      dueAt: dueAt.toISOString(),\n      url: statementTitle !== null\n        ? `/backend/eudr/statements/${assessment.statementId}`\n        : `/backend/eudr/risk-assessments/${assessment.id}`,\n    }]\n  })\n}\n\nasync function fetchAmendWindowQueue(\n  em: EntityManager,\n  scope: QueueScope,\n  now: Date,\n): Promise<AmendWindowQueueItem[]> {\n  const windowStart = new Date(now.getTime() - EUDR_AMEND_WINDOW_MS)\n  const statements = await em.find(EudrDueDiligenceStatement, {\n    ...scope,\n    deletedAt: null,\n    status: 'available',\n    referenceIssuedAt: { $ne: null, $gte: windowStart },\n  } as FilterQuery<EudrDueDiligenceStatement>, {\n    fields: ['id', 'title', 'referenceIssuedAt'],\n    orderBy: { referenceIssuedAt: 'asc' },\n    limit: QUEUE_LIMIT,\n  })\n  return statements.flatMap((statement) => {\n    const issuedAt = statement.referenceIssuedAt\n    if (!issuedAt || !isAmendWindowOpen(issuedAt, now)) return []\n    return [{\n      id: statement.id,\n      label: statement.title,\n      expiresAt: new Date(issuedAt.getTime() + EUDR_AMEND_WINDOW_MS).toISOString(),\n      url: `/backend/eudr/statements/${statement.id}`,\n    }]\n  })\n}\n\ntype PlotWarningRow = { id: string; name: string; validation_warnings: unknown }\n\nasync function fetchPlotsWithWarningsQueue(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<PlotWarningQueueItem[]> {\n  const rows = await em.getConnection().execute(\n    `select id, name, validation_warnings\n       from eudr_plots\n      where tenant_id = ?\n        and organization_id = ?\n        and deleted_at is null\n        and is_active = true\n        and jsonb_array_length(validation_warnings) > 0\n      order by name asc\n      limit ${QUEUE_LIMIT}`,\n    [scope.tenantId, scope.organizationId],\n  ) as PlotWarningRow[]\n  return rows.map((row) => ({\n    id: row.id,\n    label: row.name,\n    warnings: Array.isArray(row.validation_warnings)\n      ? row.validation_warnings.filter((warning): warning is string => typeof warning === 'string')\n      : [],\n    url: `/backend/eudr/plots/${row.id}`,\n  }))\n}\n\ntype PlotCountsRow = { with_warnings: number | string | null }\n\nasync function fetchPlotCounts(\n  em: EntityManager,\n  scope: QueueScope,\n): Promise<{ active: number; withWarnings: number }> {\n  const [active, rows] = await Promise.all([\n    em.count(EudrPlot, { ...scope, deletedAt: null, isActive: true }),\n    em.getConnection().execute(\n      `select count(*)::int as with_warnings\n         from eudr_plots\n        where tenant_id = ?\n          and organization_id = ?\n          and deleted_at is null\n          and is_active = true\n          and jsonb_array_length(validation_warnings) > 0`,\n      [scope.tenantId, scope.organizationId],\n    ) as Promise<PlotCountsRow[]>,\n  ])\n  const rawWithWarnings = rows[0]?.with_warnings ?? 0\n  const withWarnings = typeof rawWithWarnings === 'number' ? rawWithWarnings : Number(rawWithWarnings)\n  return { active, withWarnings: Number.isFinite(withWarnings) ? withWarnings : 0 }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const scope = { tenantId: ctx.tenantId, organizationId: ctx.organizationId }\n    const now = new Date()\n    const reviewWindowEnd = new Date(now.getTime() + 30 * DAY_MS)\n\n    const [\n      canViewMappingsRollup,\n      canViewSubmissionsQueue,\n      canViewRiskQueue,\n      canViewStatementsQueue,\n      canViewPlotsQueue,\n    ] = await Promise.all([\n      ctx.hasFeature('eudr.mappings.view'),\n      ctx.hasFeature('eudr.submissions.view'),\n      ctx.hasFeature('eudr.risk.view'),\n      ctx.hasFeature('eudr.statements.view'),\n      ctx.hasFeature('eudr.plots.view'),\n    ])\n\n    const [\n      mappingsInScope,\n      submissionsTotal,\n      submissionsByStatus,\n      avgCompleteness,\n      incomplete,\n      statementsTotal,\n      statementsByStatus,\n      notReady,\n      missingReference,\n      riskReviewsDueSoon,\n      incompleteSubmissionsQueue,\n      reviewsDueQueue,\n      amendWindowQueue,\n      plotsWithWarningsQueue,\n      plotCounts,\n    ] = await Promise.all([\n      canViewMappingsRollup\n        ? ctx.em.count(EudrProductMapping, { ...scope, deletedAt: null, isInScope: true })\n        : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? ctx.em.count(EudrEvidenceSubmission, { ...scope, deletedAt: null })\n        : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? countRowsByStatus(ctx.em, EudrEvidenceSubmission, EUDR_SUBMISSION_STATUSES, scope)\n        : Promise.resolve(null),\n      canViewSubmissionsQueue ? fetchAverageCompleteness(ctx.em, scope) : Promise.resolve(null),\n      canViewSubmissionsQueue\n        ? ctx.em.count(EudrEvidenceSubmission, { ...scope, deletedAt: null, completenessScore: { $lt: 100 } } as FilterQuery<EudrEvidenceSubmission>)\n        : Promise.resolve(null),\n      ctx.em.count(EudrDueDiligenceStatement, { ...scope, deletedAt: null }),\n      countRowsByStatus(ctx.em, EudrDueDiligenceStatement, EUDR_STATEMENT_STATUSES, scope),\n      ctx.em.count(EudrDueDiligenceStatement, { ...scope, deletedAt: null, status: 'draft' }),\n      ctx.em.count(EudrDueDiligenceStatement, {\n        ...scope,\n        deletedAt: null,\n        status: { $in: ['submitted', 'available'] },\n        referenceNumber: null,\n      } as FilterQuery<EudrDueDiligenceStatement>),\n      canViewRiskQueue\n        ? ctx.em.count(EudrRiskAssessment, {\n            ...scope,\n            deletedAt: null,\n            // Same predicate as fetchReviewsDueQueue: overdue reviews are still\n            // due, so the headline count and the queue list cannot disagree.\n            reviewDueAt: { $ne: null, $lte: reviewWindowEnd },\n          } as FilterQuery<EudrRiskAssessment>)\n        : Promise.resolve(null),\n      canViewSubmissionsQueue ? fetchIncompleteSubmissionsQueue(ctx.em, scope) : Promise.resolve(null),\n      canViewRiskQueue ? fetchReviewsDueQueue(ctx.em, scope, now) : Promise.resolve(null),\n      canViewStatementsQueue ? fetchAmendWindowQueue(ctx.em, scope, now) : Promise.resolve(null),\n      canViewPlotsQueue ? fetchPlotsWithWarningsQueue(ctx.em, scope) : Promise.resolve(null),\n      canViewPlotsQueue ? fetchPlotCounts(ctx.em, scope) : Promise.resolve(null),\n    ])\n\n    const queues: ComplianceQueues = {}\n    if (incompleteSubmissionsQueue !== null) queues.incompleteSubmissions = incompleteSubmissionsQueue\n    if (reviewsDueQueue !== null) queues.reviewsDue = reviewsDueQueue\n    if (amendWindowQueue !== null) queues.amendWindow = amendWindowQueue\n    if (plotsWithWarningsQueue !== null) queues.plotsWithWarnings = plotsWithWarningsQueue\n\n    return Response.json({\n      deadline: {\n        date: EUDR_APPLICATION_DATES.largeAndMedium,\n        daysLeft: daysLeft(EUDR_APPLICATION_DATES.largeAndMedium, now),\n      },\n      ...(mappingsInScope !== null ? { mappingsInScope } : {}),\n      ...(submissionsTotal !== null && submissionsByStatus !== null && incomplete !== null\n        ? {\n            submissions: {\n              total: submissionsTotal,\n              byStatus: submissionsByStatus,\n              avgCompleteness,\n              incomplete,\n            },\n          }\n        : {}),\n      statements: {\n        total: statementsTotal,\n        byStatus: statementsByStatus,\n        notReady,\n        missingReference,\n      },\n      ...(riskReviewsDueSoon !== null ? { riskReviewsDueSoon } : {}),\n      ...(plotCounts !== null ? { plots: plotCounts } : {}),\n      queues,\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Compliance overview loading failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.compliance_overview_failed', 'Failed to load EUDR compliance overview') },\n      { status: 500 },\n    )\n  }\n}\n\nconst responseSchema = z.object({\n  deadline: z.object({\n    date: z.literal(EUDR_APPLICATION_DATES.largeAndMedium),\n    daysLeft: z.number(),\n  }),\n  mappingsInScope: z.number().optional(),\n  submissions: z.object({\n    total: z.number(),\n    byStatus: z.record(z.string(), z.number()),\n    avgCompleteness: z.number().nullable(),\n    incomplete: z.number(),\n  }).optional(),\n  statements: z.object({\n    total: z.number(),\n    byStatus: z.record(z.string(), z.number()),\n    notReady: z.number(),\n    missingReference: z.number(),\n  }),\n  riskReviewsDueSoon: z.number().optional(),\n  plots: z.object({\n    active: z.number(),\n    withWarnings: z.number(),\n  }).optional(),\n  queues: z.object({\n    incompleteSubmissions: z.array(z.object({\n      id: z.string(),\n      label: z.string().nullable(),\n      completeness: z.number(),\n      url: z.string(),\n    })).optional(),\n    reviewsDue: z.array(z.object({\n      id: z.string(),\n      label: z.string().nullable(),\n      dueAt: z.string(),\n      url: z.string(),\n    })).optional(),\n    amendWindow: z.array(z.object({\n      id: z.string(),\n      label: z.string(),\n      expiresAt: z.string(),\n      url: z.string(),\n    })).optional(),\n    plotsWithWarnings: z.array(z.object({\n      id: z.string(),\n      label: z.string(),\n      warnings: z.array(z.string()),\n      url: z.string(),\n    })).optional(),\n  }),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'EUDR compliance overview widget',\n  methods: {\n    GET: {\n      summary: 'Compliance overview',\n      responses: [\n        { status: 200, description: 'EUDR compliance overview metrics', schema: responseSchema },\n        { status: 400, description: 'Invalid organization context', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Compliance overview loading failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC,SAAS,sBAAsB,yBAAyB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,4CAA4C,CAAC;AAapG,MAAM,SAAS,KAAK,KAAK,KAAK;AAC9B,MAAM,cAAc;AACpB,MAAM,mCAAmC,CAAC,SAAS,WAAW;AAE9D,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AACA,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,WAAW,KAAK;AAEtB,SAAO;AAAA,IACL,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,MAC7F,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,kBACP,IACA,QACA,UACA,OACiC;AACjC,SAAO,QAAQ;AAAA,IACb,SAAS,IAAI,OAAO,WAAW;AAC7B,YAAM,QAAQ,MAAM,GAAG,MAAM,QAAQ;AAAA,QACnC,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,QACX;AAAA,MACF,CAAmB;AACnB,aAAO,CAAC,QAAQ,KAAK;AAAA,IACvB,CAAC;AAAA,EACH,EAAE,KAAK,CAAC,YAAY,OAAO,YAAY,OAAO,CAAC;AACjD;AAEA,eAAe,yBACb,IACA,OACwB;AACxB,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,EACvC;AACA,QAAM,QAAQ,KAAK,CAAC,GAAG,oBAAoB;AAC3C,MAAI,UAAU,KAAM,QAAO;AAC3B,QAAM,SAAS,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC/D,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;AAEA,SAAS,SAAS,UAAkB,KAAmB;AACrD,QAAM,eAAe,oBAAI,KAAK,GAAG,QAAQ,gBAAgB;AACzD,SAAO,KAAK,MAAM,aAAa,QAAQ,IAAI,IAAI,QAAQ,KAAK,MAAM;AACpE;AAgBA,SAAS,wBAAwB,UAA6E;AAC5G,QAAM,cAAc,UAAU,aAAa,KAAK;AAChD,SAAO,eAAe,YAAY,SAAS,IAAI,cAAc;AAC/D;AAEA,eAAe,gCACb,IACA,OAC0C;AAC1C,QAAM,cAAc,MAAM,GAAG,KAAK,wBAAwB;AAAA,IACxD,GAAG;AAAA,IACH,WAAW;AAAA,IACX,QAAQ,EAAE,KAAK,CAAC,GAAG,gCAAgC,EAAE;AAAA,IACrD,mBAAmB,EAAE,KAAK,IAAI;AAAA,EAChC,GAA0C;AAAA,IACxC,QAAQ,CAAC,MAAM,oBAAoB,eAAe,mBAAmB;AAAA,IACrE,SAAS,EAAE,mBAAmB,MAAM;AAAA,IACpC,OAAO;AAAA,EACT,CAAC;AACD,SAAO,YAAY,IAAI,CAAC,eAAe;AACrC,UAAM,cAAc,OAAO,WAAW,gBAAgB,YAAY,WAAW,YAAY,KAAK,EAAE,SAAS,IACrG,WAAW,YAAY,KAAK,IAC5B;AACJ,WAAO;AAAA,MACL,IAAI,WAAW;AAAA,MACf,OAAO,wBAAwB,WAAW,gBAAgB,KAAK;AAAA,MAC/D,cAAc,WAAW;AAAA,MACzB,KAAK,sCAAsC,WAAW,EAAE;AAAA,IAC1D;AAAA,EACF,CAAC;AACH;AAEA,eAAe,qBACb,IACA,OACA,KAC+B;AAC/B,QAAM,kBAAkB,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,MAAM;AAC5D,QAAM,cAAc,MAAM,GAAG,KAAK,oBAAoB;AAAA,IACpD,GAAG;AAAA,IACH,WAAW;AAAA,IACX,aAAa,EAAE,KAAK,MAAM,MAAM,gBAAgB;AAAA,EAClD,GAAsC;AAAA,IACpC,QAAQ,CAAC,MAAM,eAAe,cAAc,aAAa;AAAA,IACzD,SAAS,EAAE,aAAa,MAAM;AAAA,IAC9B,OAAO;AAAA,EACT,CAAC;AACD,QAAM,eAAe,CAAC,GAAG,IAAI,IAAI,YAAY,IAAI,CAAC,eAAe,WAAW,WAAW,CAAC,CAAC;AACzF,QAAM,aAAa,aAAa,SAAS,IACrC,MAAM,GAAG,KAAK,2BAA2B;AAAA,IACvC,GAAG;AAAA,IACH,WAAW;AAAA,IACX,IAAI,EAAE,KAAK,aAAa;AAAA,EAC1B,GAA6C,EAAE,QAAQ,CAAC,MAAM,OAAO,EAAE,CAAC,IACxE,CAAC;AACL,QAAM,qBAAqB,IAAI,IAAI,WAAW,IAAI,CAAC,cAAc,CAAC,UAAU,IAAI,UAAU,KAAK,CAAC,CAAC;AACjG,SAAO,YAAY,QAAQ,CAAC,eAAe;AACzC,UAAM,QAAQ,WAAW;AACzB,QAAI,CAAC,MAAO,QAAO,CAAC;AACpB,UAAM,iBAAiB,mBAAmB,IAAI,WAAW,WAAW,KAAK;AACzE,WAAO,CAAC;AAAA,MACN,IAAI,WAAW;AAAA,MACf,OAAO;AAAA,MACP,OAAO,MAAM,YAAY;AAAA,MACzB,KAAK,mBAAmB,OACpB,4BAA4B,WAAW,WAAW,KAClD,kCAAkC,WAAW,EAAE;AAAA,IACrD,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,sBACb,IACA,OACA,KACiC;AACjC,QAAM,cAAc,IAAI,KAAK,IAAI,QAAQ,IAAI,oBAAoB;AACjE,QAAM,aAAa,MAAM,GAAG,KAAK,2BAA2B;AAAA,IAC1D,GAAG;AAAA,IACH,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,mBAAmB,EAAE,KAAK,MAAM,MAAM,YAAY;AAAA,EACpD,GAA6C;AAAA,IAC3C,QAAQ,CAAC,MAAM,SAAS,mBAAmB;AAAA,IAC3C,SAAS,EAAE,mBAAmB,MAAM;AAAA,IACpC,OAAO;AAAA,EACT,CAAC;AACD,SAAO,WAAW,QAAQ,CAAC,cAAc;AACvC,UAAM,WAAW,UAAU;AAC3B,QAAI,CAAC,YAAY,CAAC,kBAAkB,UAAU,GAAG,EAAG,QAAO,CAAC;AAC5D,WAAO,CAAC;AAAA,MACN,IAAI,UAAU;AAAA,MACd,OAAO,UAAU;AAAA,MACjB,WAAW,IAAI,KAAK,SAAS,QAAQ,IAAI,oBAAoB,EAAE,YAAY;AAAA,MAC3E,KAAK,4BAA4B,UAAU,EAAE;AAAA,IAC/C,CAAC;AAAA,EACH,CAAC;AACH;AAIA,eAAe,4BACb,IACA,OACiC;AACjC,QAAM,OAAO,MAAM,GAAG,cAAc,EAAE;AAAA,IACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAQU,WAAW;AAAA,IACrB,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,EACvC;AACA,SAAO,KAAK,IAAI,CAAC,SAAS;AAAA,IACxB,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,UAAU,MAAM,QAAQ,IAAI,mBAAmB,IAC3C,IAAI,oBAAoB,OAAO,CAAC,YAA+B,OAAO,YAAY,QAAQ,IAC1F,CAAC;AAAA,IACL,KAAK,uBAAuB,IAAI,EAAE;AAAA,EACpC,EAAE;AACJ;AAIA,eAAe,gBACb,IACA,OACmD;AACnD,QAAM,CAAC,QAAQ,IAAI,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvC,GAAG,MAAM,UAAU,EAAE,GAAG,OAAO,WAAW,MAAM,UAAU,KAAK,CAAC;AAAA,IAChE,GAAG,cAAc,EAAE;AAAA,MACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,CAAC,MAAM,UAAU,MAAM,cAAc;AAAA,IACvC;AAAA,EACF,CAAC;AACD,QAAM,kBAAkB,KAAK,CAAC,GAAG,iBAAiB;AAClD,QAAM,eAAe,OAAO,oBAAoB,WAAW,kBAAkB,OAAO,eAAe;AACnG,SAAO,EAAE,QAAQ,cAAc,OAAO,SAAS,YAAY,IAAI,eAAe,EAAE;AAClF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,QAAQ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAC3E,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,kBAAkB,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,MAAM;AAE5D,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpB,IAAI,WAAW,oBAAoB;AAAA,MACnC,IAAI,WAAW,uBAAuB;AAAA,MACtC,IAAI,WAAW,gBAAgB;AAAA,MAC/B,IAAI,WAAW,sBAAsB;AAAA,MACrC,IAAI,WAAW,iBAAiB;AAAA,IAClC,CAAC;AAED,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,IAAI,MAAM,QAAQ,IAAI;AAAA,MACpB,wBACI,IAAI,GAAG,MAAM,oBAAoB,EAAE,GAAG,OAAO,WAAW,MAAM,WAAW,KAAK,CAAC,IAC/E,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BACI,IAAI,GAAG,MAAM,wBAAwB,EAAE,GAAG,OAAO,WAAW,KAAK,CAAC,IAClE,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BACI,kBAAkB,IAAI,IAAI,wBAAwB,0BAA0B,KAAK,IACjF,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BAA0B,yBAAyB,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACxF,0BACI,IAAI,GAAG,MAAM,wBAAwB,EAAE,GAAG,OAAO,WAAW,MAAM,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAwC,IAC1I,QAAQ,QAAQ,IAAI;AAAA,MACxB,IAAI,GAAG,MAAM,2BAA2B,EAAE,GAAG,OAAO,WAAW,KAAK,CAAC;AAAA,MACrE,kBAAkB,IAAI,IAAI,2BAA2B,yBAAyB,KAAK;AAAA,MACnF,IAAI,GAAG,MAAM,2BAA2B,EAAE,GAAG,OAAO,WAAW,MAAM,QAAQ,QAAQ,CAAC;AAAA,MACtF,IAAI,GAAG,MAAM,2BAA2B;AAAA,QACtC,GAAG;AAAA,QACH,WAAW;AAAA,QACX,QAAQ,EAAE,KAAK,CAAC,aAAa,WAAW,EAAE;AAAA,QAC1C,iBAAiB;AAAA,MACnB,CAA2C;AAAA,MAC3C,mBACI,IAAI,GAAG,MAAM,oBAAoB;AAAA,QAC/B,GAAG;AAAA,QACH,WAAW;AAAA;AAAA;AAAA,QAGX,aAAa,EAAE,KAAK,MAAM,MAAM,gBAAgB;AAAA,MAClD,CAAoC,IACpC,QAAQ,QAAQ,IAAI;AAAA,MACxB,0BAA0B,gCAAgC,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MAC/F,mBAAmB,qBAAqB,IAAI,IAAI,OAAO,GAAG,IAAI,QAAQ,QAAQ,IAAI;AAAA,MAClF,yBAAyB,sBAAsB,IAAI,IAAI,OAAO,GAAG,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACzF,oBAAoB,4BAA4B,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,MACrF,oBAAoB,gBAAgB,IAAI,IAAI,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC3E,CAAC;AAED,UAAM,SAA2B,CAAC;AAClC,QAAI,+BAA+B,KAAM,QAAO,wBAAwB;AACxE,QAAI,oBAAoB,KAAM,QAAO,aAAa;AAClD,QAAI,qBAAqB,KAAM,QAAO,cAAc;AACpD,QAAI,2BAA2B,KAAM,QAAO,oBAAoB;AAEhE,WAAO,SAAS,KAAK;AAAA,MACnB,UAAU;AAAA,QACR,MAAM,uBAAuB;AAAA,QAC7B,UAAU,SAAS,uBAAuB,gBAAgB,GAAG;AAAA,MAC/D;AAAA,MACA,GAAI,oBAAoB,OAAO,EAAE,gBAAgB,IAAI,CAAC;AAAA,MACtD,GAAI,qBAAqB,QAAQ,wBAAwB,QAAQ,eAAe,OAC5E;AAAA,QACE,aAAa;AAAA,UACX,OAAO;AAAA,UACP,UAAU;AAAA,UACV;AAAA,UACA;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,MACL,YAAY;AAAA,QACV,OAAO;AAAA,QACP,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAAA,MACA,GAAI,uBAAuB,OAAO,EAAE,mBAAmB,IAAI,CAAC;AAAA,MAC5D,GAAI,eAAe,OAAO,EAAE,OAAO,WAAW,IAAI,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,sCAAsC,EAAE,KAAK,MAAM,CAAC;AACjE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO;AAAA,IACjB,MAAM,EAAE,QAAQ,uBAAuB,cAAc;AAAA,IACrD,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC;AAAA,EACD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,aAAa,EAAE,OAAO;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA,IACzC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,IACrC,YAAY,EAAE,OAAO;AAAA,EACvB,CAAC,EAAE,SAAS;AAAA,EACZ,YAAY,EAAE,OAAO;AAAA,IACnB,OAAO,EAAE,OAAO;AAAA,IAChB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA,IACzC,UAAU,EAAE,OAAO;AAAA,IACnB,kBAAkB,EAAE,OAAO;AAAA,EAC7B,CAAC;AAAA,EACD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,OAAO,EAAE,OAAO;AAAA,IACd,QAAQ,EAAE,OAAO;AAAA,IACjB,cAAc,EAAE,OAAO;AAAA,EACzB,CAAC,EAAE,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO;AAAA,IACf,uBAAuB,EAAE,MAAM,EAAE,OAAO;AAAA,MACtC,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,cAAc,EAAE,OAAO;AAAA,MACvB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,YAAY,EAAE,MAAM,EAAE,OAAO;AAAA,MAC3B,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,OAAO,EAAE,OAAO;AAAA,MAChB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,aAAa,EAAE,MAAM,EAAE,OAAO;AAAA,MAC5B,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO;AAAA,MAChB,WAAW,EAAE,OAAO;AAAA,MACpB,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,IACb,mBAAmB,EAAE,MAAM,EAAE,OAAO;AAAA,MAClC,IAAI,EAAE,OAAO;AAAA,MACb,OAAO,EAAE,OAAO;AAAA,MAChB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,MAC5B,KAAK,EAAE,OAAO;AAAA,IAChB,CAAC,CAAC,EAAE,SAAS;AAAA,EACf,CAAC;AACH,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,oCAAoC,QAAQ,eAAe;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5G;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/plots/import/route.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -64,7 +65,7 @@ async function resolveRequestContext(req) {
     throw new CrudHttpError(401, { error: translate("eudr.errors.unauthorized", "Unauthorized") });
   }
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
   if (!organizationId) {
     throw new CrudHttpError(400, {
       error: translate("eudr.errors.organization_required", "Organization context is required")

package/dist/modules/eudr/api/plots/import/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/eudr/api/plots/import/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { collectFeatures } from '../../../lib/geometry'\nimport { plotCreateSchema } from '../../../data/validators'\n\nconst logger = createLogger('eudr').child({ component: 'api/plots/import' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.plots.manage'] },\n}\n\nconst importSchema = z.object({\n  supplierEntityId: z.string().uuid(),\n  defaultCountry: z.string().regex(/^[A-Za-z]{2}$/).transform((value) => value.toUpperCase()).optional(),\n  featureCollection: z.unknown(),\n})\n\ntype PlotImportInput = z.infer<typeof importSchema>\ntype PlotImportFailure = { index: number; name: string; errorKey: string }\ntype RequestContext = { ctx: CommandRuntimeContext; organizationId: string; tenantId: string }\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction optionalString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction optionalNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isFinite(value) ? value : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nfunction featureProperties(feature: unknown): Record<string, unknown> {\n  if (!isRecord(feature)) return {}\n  const properties = feature.properties\n  return isRecord(properties) ? properties : {}\n}\n\nfunction featureGeometryType(feature: unknown): string | null {\n  if (!isRecord(feature)) return null\n  if (feature.type === 'Feature' && isRecord(feature.geometry) && typeof feature.geometry.type === 'string') {\n    return feature.geometry.type\n  }\n  return typeof feature.type === 'string' ? feature.type : null\n}\n\nfunction resolveFeatureName(properties: Record<string, unknown>, index: number): string {\n  return optionalString(properties.name)\n    ?? optionalString(properties.ProductionPlace)\n    ?? `Plot ${index + 1}`\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.plot_import_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.plot_import_failed'\n  }\n  return 'eudr.errors.plot_import_failed'\n}\n\nasync function loadSupplierDisplayName(\n  queryEngine: QueryEngine,\n  scope: { tenantId: string; organizationId: string },\n  supplierEntityId: string,\n): Promise<string | null> {\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to null when the peer is absent so the\n  // import still succeeds without a snapshot.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return null\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: [supplierEntityId] } },\n      page: { page: 1, pageSize: 1 },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n    const rawName = result.items[0]?.display_name ?? result.items[0]?.displayName\n    return typeof rawName === 'string' && rawName.length ? rawName : null\n  } catch {\n    return null\n  }\n}\n\nasync function createPlotFromFeature(args: {\n  commandBus: CommandBus\n  ctx: CommandRuntimeContext\n  scope: { tenantId: string; organizationId: string }\n  input: PlotImportInput\n  feature: unknown\n  index: number\n  supplierDisplayName: string | null\n}): Promise<{ id: string | null }> {\n  const properties = featureProperties(args.feature)\n  const name = resolveFeatureName(properties, args.index)\n  const originCountry = optionalString(properties.ProducerCountry) ?? args.input.defaultCountry ?? null\n  if (!originCountry) throw new CrudHttpError(400, { error: 'eudr.errors.importCountryMissing' })\n\n  const area = optionalNumber(properties.Area)\n  const base = {\n    supplierEntityId: args.input.supplierEntityId,\n    name,\n    originCountry,\n    geometry: args.feature,\n    producerName: optionalString(properties.ProducerName),\n    areaHa: featureGeometryType(args.feature) === 'Point' && area !== null ? area : undefined,\n    supplierSnapshot: args.supplierDisplayName ? { displayName: args.supplierDisplayName } : undefined,\n  }\n  const parsed = plotCreateSchema.parse(base)\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.plots.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n      },\n      ctx: args.ctx,\n      metadata: {\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n        resourceKind: 'eudr.plot',\n        context: { cacheAliases: ['eudr.plot'] },\n      },\n    },\n  )\n  return { id: result?.entityId ?? result?.id ?? null }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = importSchema.parse(payload)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.plot',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        supplierEntityId: input.supplierEntityId,\n        defaultCountry: input.defaultCountry ?? null,\n      },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n    const guardPatch = guardResult.modifiedPayload ?? null\n    const effectiveSupplierEntityId = typeof guardPatch?.supplierEntityId === 'string' && guardPatch.supplierEntityId.length\n      ? guardPatch.supplierEntityId\n      : input.supplierEntityId\n    const effectiveDefaultCountry = typeof guardPatch?.defaultCountry === 'string' && guardPatch.defaultCountry.length\n      ? guardPatch.defaultCountry\n      : input.defaultCountry\n\n    const featureResult = collectFeatures(input.featureCollection)\n    if (!featureResult.ok) {\n      return Response.json({ errorKey: featureResult.errorKey }, { status: 400 })\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: PlotImportFailure[] = []\n    const createdIds: string[] = []\n    const effectiveInput: PlotImportInput = {\n      ...input,\n      supplierEntityId: effectiveSupplierEntityId,\n      defaultCountry: effectiveDefaultCountry,\n    }\n\n    const importScope = { tenantId: requestContext.tenantId, organizationId: requestContext.organizationId }\n    const supplierDisplayName = await loadSupplierDisplayName(\n      requestContext.ctx.container.resolve('queryEngine') as QueryEngine,\n      importScope,\n      effectiveSupplierEntityId,\n    )\n\n    for (const [index, feature] of featureResult.features.entries()) {\n      const name = resolveFeatureName(featureProperties(feature), index)\n      try {\n        const created = await createPlotFromFeature({\n          commandBus,\n          ctx: requestContext.ctx,\n          scope: importScope,\n          input: effectiveInput,\n          feature,\n          index,\n          supplierDisplayName,\n        })\n        if (created.id) createdIds.push(created.id)\n      } catch (error) {\n        failed.push({ index, name, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.plot',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n        { status: 400 },\n      )\n    }\n    logger.error('Plot import failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n      { status: 500 },\n    )\n  }\n}\n\nconst importResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    index: z.number(),\n    name: z.string(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Import EUDR plots from GeoJSON',\n  methods: {\n    POST: {\n      summary: 'Import plots',\n      requestBody: {\n        contentType: 'application/json',\n        schema: importSchema,\n      },\n      responses: [\n        { status: 200, description: 'Import result', schema: importResponseSchema },\n        { status: 400, description: 'Invalid import payload', schema: z.object({ error: z.string().optional(), errorKey: z.string().optional() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Plot import failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AAEjC,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,MAAM,eAAe,EAAE,UAAU,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,SAAS;AAAA,EACrG,mBAAmB,EAAE,QAAQ;AAC/B,CAAC;AAOD,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA2C;AACpE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO,CAAC;AAChC,QAAM,aAAa,QAAQ;AAC3B,SAAO,SAAS,UAAU,IAAI,aAAa,CAAC;AAC9C;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,SAAS,aAAa,SAAS,QAAQ,QAAQ,KAAK,OAAO,QAAQ,SAAS,SAAS,UAAU;AACzG,WAAO,QAAQ,SAAS;AAAA,EAC1B;AACA,SAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC3D;AAEA,SAAS,mBAAmB,YAAqC,OAAuB;AACtF,SAAO,eAAe,WAAW,IAAI,KAChC,eAAe,WAAW,eAAe,KACzC,QAAQ,QAAQ,CAAC;AACxB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,wBACb,aACA,OACA,kBACwB;AAIxB,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO;AAC/B,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE;AAAA,MAC3C,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,UAAM,UAAU,OAAO,MAAM,CAAC,GAAG,gBAAgB,OAAO,MAAM,CAAC,GAAG;AAClE,WAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,sBAAsB,MAQF;AACjC,QAAM,aAAa,kBAAkB,KAAK,OAAO;AACjD,QAAM,OAAO,mBAAmB,YAAY,KAAK,KAAK;AACtD,QAAM,gBAAgB,eAAe,WAAW,eAAe,KAAK,KAAK,MAAM,kBAAkB;AACjG,MAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAE9F,QAAM,OAAO,eAAe,WAAW,IAAI;AAC3C,QAAM,OAAO;AAAA,IACX,kBAAkB,KAAK,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,UAAU,KAAK;AAAA,IACf,cAAc,eAAe,WAAW,YAAY;AAAA,IACpD,QAAQ,oBAAoB,KAAK,OAAO,MAAM,WAAW,SAAS,OAAO,OAAO;AAAA,IAChF,kBAAkB,KAAK,sBAAsB,EAAE,aAAa,KAAK,oBAAoB,IAAI;AAAA,EAC3F;AACA,QAAM,SAAS,iBAAiB,MAAM,IAAI;AAC1C,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,MAC7B;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,QACR,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,QAC3B,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,IAAI,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACtD;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,kBAAkB,MAAM;AAAA,QACxB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,aAAa,YAAY,mBAAmB;AAClD,UAAM,4BAA4B,OAAO,YAAY,qBAAqB,YAAY,WAAW,iBAAiB,SAC9G,WAAW,mBACX,MAAM;AACV,UAAM,0BAA0B,OAAO,YAAY,mBAAmB,YAAY,WAAW,eAAe,SACxG,WAAW,iBACX,MAAM;AAEV,UAAM,gBAAgB,gBAAgB,MAAM,iBAAiB;AAC7D,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO,SAAS,KAAK,EAAE,UAAU,cAAc,SAAS,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAA8B,CAAC;AACrC,UAAM,aAAuB,CAAC;AAC9B,UAAM,iBAAkC;AAAA,MACtC,GAAG;AAAA,MACH,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,IAClB;AAEA,UAAM,cAAc,EAAE,UAAU,eAAe,UAAU,gBAAgB,eAAe,eAAe;AACvG,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,IAAI,UAAU,QAAQ,aAAa;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAEA,eAAW,CAAC,OAAO,OAAO,KAAK,cAAc,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,mBAAmB,kBAAkB,OAAO,GAAG,KAAK;AACjE,UAAI;AACF,cAAM,UAAU,MAAM,sBAAsB;AAAA,UAC1C;AAAA,UACA,KAAK,eAAe;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,QAAQ,GAAI,YAAW,KAAK,QAAQ,EAAE;AAAA,MAC5C,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,OAAO,MAAM,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,QAC/E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,sBAAsB,EAAE,KAAK,MAAM,CAAC;AACjD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO;AAAA,IACf,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAC1I,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { collectFeatures } from '../../../lib/geometry'\nimport { plotCreateSchema } from '../../../data/validators'\n\nconst logger = createLogger('eudr').child({ component: 'api/plots/import' })\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.plots.manage'] },\n}\n\nconst importSchema = z.object({\n  supplierEntityId: z.string().uuid(),\n  defaultCountry: z.string().regex(/^[A-Za-z]{2}$/).transform((value) => value.toUpperCase()).optional(),\n  featureCollection: z.unknown(),\n})\n\ntype PlotImportInput = z.infer<typeof importSchema>\ntype PlotImportFailure = { index: number; name: string; errorKey: string }\ntype RequestContext = { ctx: CommandRuntimeContext; organizationId: string; tenantId: string }\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction optionalString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction optionalNumber(value: unknown): number | null {\n  return typeof value === 'number' && Number.isFinite(value) ? value : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nfunction featureProperties(feature: unknown): Record<string, unknown> {\n  if (!isRecord(feature)) return {}\n  const properties = feature.properties\n  return isRecord(properties) ? properties : {}\n}\n\nfunction featureGeometryType(feature: unknown): string | null {\n  if (!isRecord(feature)) return null\n  if (feature.type === 'Feature' && isRecord(feature.geometry) && typeof feature.geometry.type === 'string') {\n    return feature.geometry.type\n  }\n  return typeof feature.type === 'string' ? feature.type : null\n}\n\nfunction resolveFeatureName(properties: Record<string, unknown>, index: number): string {\n  return optionalString(properties.name)\n    ?? optionalString(properties.ProductionPlace)\n    ?? `Plot ${index + 1}`\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.plot_import_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.plot_import_failed'\n  }\n  return 'eudr.errors.plot_import_failed'\n}\n\nasync function loadSupplierDisplayName(\n  queryEngine: QueryEngine,\n  scope: { tenantId: string; organizationId: string },\n  supplierEntityId: string,\n): Promise<string | null> {\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to null when the peer is absent so the\n  // import still succeeds without a snapshot.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return null\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: [supplierEntityId] } },\n      page: { page: 1, pageSize: 1 },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    })\n    const rawName = result.items[0]?.display_name ?? result.items[0]?.displayName\n    return typeof rawName === 'string' && rawName.length ? rawName : null\n  } catch {\n    return null\n  }\n}\n\nasync function createPlotFromFeature(args: {\n  commandBus: CommandBus\n  ctx: CommandRuntimeContext\n  scope: { tenantId: string; organizationId: string }\n  input: PlotImportInput\n  feature: unknown\n  index: number\n  supplierDisplayName: string | null\n}): Promise<{ id: string | null }> {\n  const properties = featureProperties(args.feature)\n  const name = resolveFeatureName(properties, args.index)\n  const originCountry = optionalString(properties.ProducerCountry) ?? args.input.defaultCountry ?? null\n  if (!originCountry) throw new CrudHttpError(400, { error: 'eudr.errors.importCountryMissing' })\n\n  const area = optionalNumber(properties.Area)\n  const base = {\n    supplierEntityId: args.input.supplierEntityId,\n    name,\n    originCountry,\n    geometry: args.feature,\n    producerName: optionalString(properties.ProducerName),\n    areaHa: featureGeometryType(args.feature) === 'Point' && area !== null ? area : undefined,\n    supplierSnapshot: args.supplierDisplayName ? { displayName: args.supplierDisplayName } : undefined,\n  }\n  const parsed = plotCreateSchema.parse(base)\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.plots.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n      },\n      ctx: args.ctx,\n      metadata: {\n        tenantId: args.scope.tenantId,\n        organizationId: args.scope.organizationId,\n        resourceKind: 'eudr.plot',\n        context: { cacheAliases: ['eudr.plot'] },\n      },\n    },\n  )\n  return { id: result?.entityId ?? result?.id ?? null }\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = importSchema.parse(payload)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.plot',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        supplierEntityId: input.supplierEntityId,\n        defaultCountry: input.defaultCountry ?? null,\n      },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n    const guardPatch = guardResult.modifiedPayload ?? null\n    const effectiveSupplierEntityId = typeof guardPatch?.supplierEntityId === 'string' && guardPatch.supplierEntityId.length\n      ? guardPatch.supplierEntityId\n      : input.supplierEntityId\n    const effectiveDefaultCountry = typeof guardPatch?.defaultCountry === 'string' && guardPatch.defaultCountry.length\n      ? guardPatch.defaultCountry\n      : input.defaultCountry\n\n    const featureResult = collectFeatures(input.featureCollection)\n    if (!featureResult.ok) {\n      return Response.json({ errorKey: featureResult.errorKey }, { status: 400 })\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: PlotImportFailure[] = []\n    const createdIds: string[] = []\n    const effectiveInput: PlotImportInput = {\n      ...input,\n      supplierEntityId: effectiveSupplierEntityId,\n      defaultCountry: effectiveDefaultCountry,\n    }\n\n    const importScope = { tenantId: requestContext.tenantId, organizationId: requestContext.organizationId }\n    const supplierDisplayName = await loadSupplierDisplayName(\n      requestContext.ctx.container.resolve('queryEngine') as QueryEngine,\n      importScope,\n      effectiveSupplierEntityId,\n    )\n\n    for (const [index, feature] of featureResult.features.entries()) {\n      const name = resolveFeatureName(featureProperties(feature), index)\n      try {\n        const created = await createPlotFromFeature({\n          commandBus,\n          ctx: requestContext.ctx,\n          scope: importScope,\n          input: effectiveInput,\n          feature,\n          index,\n          supplierDisplayName,\n        })\n        if (created.id) createdIds.push(created.id)\n      } catch (error) {\n        failed.push({ index, name, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.plot',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n        { status: 400 },\n      )\n    }\n    logger.error('Plot import failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.plot_import_failed', 'Failed to import plots') },\n      { status: 500 },\n    )\n  }\n}\n\nconst importResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    index: z.number(),\n    name: z.string(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Import EUDR plots from GeoJSON',\n  methods: {\n    POST: {\n      summary: 'Import plots',\n      requestBody: {\n        contentType: 'application/json',\n        schema: importSchema,\n      },\n      responses: [\n        { status: 200, description: 'Import result', schema: importResponseSchema },\n        { status: 400, description: 'Invalid import payload', schema: z.object({ error: z.string().optional(), errorKey: z.string().optional() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Plot import failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AAEjC,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAEpE,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,mBAAmB,EAAE;AACpE;AAEA,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,EAClC,gBAAgB,EAAE,OAAO,EAAE,MAAM,eAAe,EAAE,UAAU,CAAC,UAAU,MAAM,YAAY,CAAC,EAAE,SAAS;AAAA,EACrG,mBAAmB,EAAE,QAAQ;AAC/B,CAAC;AAOD,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,eAAe,OAA+B;AACrD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IAAI,QAAQ;AACvE;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,SAA2C;AACpE,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO,CAAC;AAChC,QAAM,aAAa,QAAQ;AAC3B,SAAO,SAAS,UAAU,IAAI,aAAa,CAAC;AAC9C;AAEA,SAAS,oBAAoB,SAAiC;AAC5D,MAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,MAAI,QAAQ,SAAS,aAAa,SAAS,QAAQ,QAAQ,KAAK,OAAO,QAAQ,SAAS,SAAS,UAAU;AACzG,WAAO,QAAQ,SAAS;AAAA,EAC1B;AACA,SAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC3D;AAEA,SAAS,mBAAmB,YAAqC,OAAuB;AACtF,SAAO,eAAe,WAAW,IAAI,KAChC,eAAe,WAAW,eAAe,KACzC,QAAQ,QAAQ,CAAC;AACxB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,wBACb,aACA,OACA,kBACwB;AAIxB,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO;AAC/B,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE;AAAA,MAC3C,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;AAAA,MAC7B,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD,UAAM,UAAU,OAAO,MAAM,CAAC,GAAG,gBAAgB,OAAO,MAAM,CAAC,GAAG;AAClE,WAAO,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAAA,EACnE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,sBAAsB,MAQF;AACjC,QAAM,aAAa,kBAAkB,KAAK,OAAO;AACjD,QAAM,OAAO,mBAAmB,YAAY,KAAK,KAAK;AACtD,QAAM,gBAAgB,eAAe,WAAW,eAAe,KAAK,KAAK,MAAM,kBAAkB;AACjG,MAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,mCAAmC,CAAC;AAE9F,QAAM,OAAO,eAAe,WAAW,IAAI;AAC3C,QAAM,OAAO;AAAA,IACX,kBAAkB,KAAK,MAAM;AAAA,IAC7B;AAAA,IACA;AAAA,IACA,UAAU,KAAK;AAAA,IACf,cAAc,eAAe,WAAW,YAAY;AAAA,IACpD,QAAQ,oBAAoB,KAAK,OAAO,MAAM,WAAW,SAAS,OAAO,OAAO;AAAA,IAChF,kBAAkB,KAAK,sBAAsB,EAAE,aAAa,KAAK,oBAAoB,IAAI;AAAA,EAC3F;AACA,QAAM,SAAS,iBAAiB,MAAM,IAAI;AAC1C,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,MAC7B;AAAA,MACA,KAAK,KAAK;AAAA,MACV,UAAU;AAAA,QACR,UAAU,KAAK,MAAM;AAAA,QACrB,gBAAgB,KAAK,MAAM;AAAA,QAC3B,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,WAAW,EAAE;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,IAAI,QAAQ,YAAY,QAAQ,MAAM,KAAK;AACtD;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,aAAa,MAAM,OAAO;AACxC,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf,kBAAkB,MAAM;AAAA,QACxB,gBAAgB,MAAM,kBAAkB;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,aAAa,YAAY,mBAAmB;AAClD,UAAM,4BAA4B,OAAO,YAAY,qBAAqB,YAAY,WAAW,iBAAiB,SAC9G,WAAW,mBACX,MAAM;AACV,UAAM,0BAA0B,OAAO,YAAY,mBAAmB,YAAY,WAAW,eAAe,SACxG,WAAW,iBACX,MAAM;AAEV,UAAM,gBAAgB,gBAAgB,MAAM,iBAAiB;AAC7D,QAAI,CAAC,cAAc,IAAI;AACrB,aAAO,SAAS,KAAK,EAAE,UAAU,cAAc,SAAS,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC5E;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAA8B,CAAC;AACrC,UAAM,aAAuB,CAAC;AAC9B,UAAM,iBAAkC;AAAA,MACtC,GAAG;AAAA,MACH,kBAAkB;AAAA,MAClB,gBAAgB;AAAA,IAClB;AAEA,UAAM,cAAc,EAAE,UAAU,eAAe,UAAU,gBAAgB,eAAe,eAAe;AACvG,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,IAAI,UAAU,QAAQ,aAAa;AAAA,MAClD;AAAA,MACA;AAAA,IACF;AAEA,eAAW,CAAC,OAAO,OAAO,KAAK,cAAc,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,mBAAmB,kBAAkB,OAAO,GAAG,KAAK;AACjE,UAAI;AACF,cAAM,UAAU,MAAM,sBAAsB;AAAA,UAC1C;AAAA,UACA,KAAK,eAAe;AAAA,UACpB,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,QAAQ,GAAI,YAAW,KAAK,QAAQ,EAAE;AAAA,MAC5C,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,OAAO,MAAM,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MACjE;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,QAC/E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,sBAAsB,EAAE,KAAK,MAAM,CAAC;AACjD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,kCAAkC,wBAAwB,EAAE;AAAA,MAC/E,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO;AAAA,IACf,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,qBAAqB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,0BAA0B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,GAAG,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE;AAAA,QAC1I,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/product-mappings/suggestions/apply/route.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
@@ -72,7 +73,7 @@ async function resolveRequestContext(req) {
     throw new CrudHttpError(401, { error: translate("eudr.errors.unauthorized", "Unauthorized") });
   }
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
   if (!organizationId) {
     throw new CrudHttpError(400, {
       error: translate("eudr.errors.organization_required", "Organization context is required")

package/dist/modules/eudr/api/product-mappings/suggestions/apply/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/eudr/api/product-mappings/suggestions/apply/route.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport {\n  EUDR_COMMODITIES,\n  productMappingCreateSchema,\n} from '../../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../../lib/reference-data'\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions/apply' })\n\nconst CATALOG_LOOKUP_PAGE_SIZE = 100\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.mappings.manage'] },\n}\n\nconst applyItemSchema = z.object({\n  productId: z.string().uuid(),\n  commodity: z.enum(EUDR_COMMODITIES),\n  hsCode: z.string().max(20).optional().nullable(),\n})\n\nconst applySchema = z\n  .object({\n    items: z.array(applyItemSchema).max(100).optional(),\n    productIds: z.array(z.string().uuid()).max(100).optional(),\n  })\n  .superRefine((value, context) => {\n    if ((value.items?.length ?? 0) > 0 || (value.productIds?.length ?? 0) > 0) return\n    context.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: 'eudr.errors.mapping_suggestions_apply_failed',\n    })\n  })\n\ntype ApplyItem = z.infer<typeof applyItemSchema>\ntype ApplyFailure = { productId: string; errorKey: string }\ntype ProductSnapshot = { name?: string | null; sku?: string | null }\ntype CatalogProductInfo = { snapshot: ProductSnapshot | null; hsCode: string | null }\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n}\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nasync function loadCatalogProductInfo(ctx: RequestContext, productIds: string[]): Promise<Map<string, CatalogProductInfo>> {\n  const info = new Map<string, CatalogProductInfo>()\n  for (const productId of productIds) info.set(productId, { snapshot: null, hsCode: null })\n  if (!productIds.length) return info\n\n  try {\n    const queryEngine = ctx.ctx.container.resolve('queryEngine') as QueryEngine\n    // `items` and `productIds` are capped at 100 each, so their union can reach\n    // 200 \u2014 chunk the lookup to keep every page within the pageSize <= 100 rule.\n    const chunks: string[][] = []\n    for (let index = 0; index < productIds.length; index += CATALOG_LOOKUP_PAGE_SIZE) {\n      chunks.push(productIds.slice(index, index + CATALOG_LOOKUP_PAGE_SIZE))\n    }\n    const products: CatalogProductRecord[] = []\n    for (const chunk of chunks) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: { id: { $in: chunk } },\n        page: { page: 1, pageSize: chunk.length },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n    }\n    for (const product of products) {\n      const id = readString(product.id)\n      if (!id) continue\n      info.set(id, {\n        snapshot: {\n          name: readString(product.title) ?? readString(product.name),\n          sku: readString(product.sku),\n        },\n        hsCode: readString(product.hs_code),\n      })\n    }\n  } catch {\n    return info\n  }\n\n  return info\n}\n\nfunction resolveApplyItems(\n  input: z.infer<typeof applySchema>,\n  catalogInfo: Map<string, CatalogProductInfo>,\n): { items: ApplyItem[]; failed: ApplyFailure[] } {\n  const items: ApplyItem[] = [...(input.items ?? [])]\n  const failed: ApplyFailure[] = []\n  const explicitIds = new Set(items.map((item) => item.productId))\n\n  for (const productId of input.productIds ?? []) {\n    if (explicitIds.has(productId)) continue\n    explicitIds.add(productId)\n    const hsCode = catalogInfo.get(productId)?.hsCode ?? null\n    const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n    if (!hsCode || !suggestedCommodity) {\n      failed.push({ productId, errorKey: 'eudr.errors.mapping_suggestions_apply_failed' })\n      continue\n    }\n    items.push({ productId, commodity: suggestedCommodity, hsCode })\n  }\n\n  return { items, failed }\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  return 'eudr.errors.mapping_suggestions_apply_failed'\n}\n\nasync function createMapping(args: {\n  commandBus: CommandBus\n  ctx: RequestContext\n  item: ApplyItem\n  productSnapshot: ProductSnapshot | null\n}): Promise<string | null> {\n  const parsed = productMappingCreateSchema.parse({\n    productId: args.item.productId,\n    commodity: args.item.commodity,\n    hsCode: args.item.hsCode ?? null,\n    productSnapshot: args.productSnapshot,\n  })\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.product_mappings.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n      },\n      ctx: args.ctx.ctx,\n      metadata: {\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n        resourceKind: 'eudr.product_mapping',\n        context: { cacheAliases: ['eudr.product_mapping'] },\n      },\n    },\n  )\n  return result?.entityId ?? result?.id ?? null\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = applySchema.parse(payload)\n    const catalogInfo = await loadCatalogProductInfo(\n      requestContext,\n      Array.from(new Set([\n        ...(input.items ?? []).map((item) => item.productId),\n        ...(input.productIds ?? []),\n      ])),\n    )\n    const resolved = resolveApplyItems(input, catalogInfo)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.product_mapping',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { items: resolved.items },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: ApplyFailure[] = [...resolved.failed]\n    const createdIds: string[] = []\n\n    const guardItems = Array.isArray((guardResult.modifiedPayload as { items?: unknown } | undefined)?.items)\n      ? ((guardResult.modifiedPayload as { items: unknown[] }).items.filter((entry): entry is typeof resolved.items[number] => (\n          typeof (entry as { productId?: unknown })?.productId === 'string'\n          && typeof (entry as { commodity?: unknown })?.commodity === 'string'\n        )))\n      : resolved.items\n\n    for (const item of guardItems) {\n      try {\n        const id = await createMapping({\n          commandBus,\n          ctx: requestContext,\n          item,\n          productSnapshot: catalogInfo.get(item.productId)?.snapshot ?? null,\n        })\n        if (id) createdIds.push(id)\n      } catch (error) {\n        failed.push({ productId: item.productId, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.product_mapping',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n        { status: 400 },\n      )\n    }\n    logger.error('Product mapping suggestions apply failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst applyResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    productId: z.string().uuid(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Apply EUDR product mapping suggestions',\n  methods: {\n    POST: {\n      summary: 'Apply mapping suggestions',\n      requestBody: {\n        contentType: 'application/json',\n        schema: applySchema,\n      },\n      responses: [\n        { status: 200, description: 'Apply result', schema: applyResponseSchema },\n        { status: 400, description: 'Invalid apply payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Mapping suggestion apply failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AAEnD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAE1C,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,yCAAyC,CAAC;AAEjG,MAAM,2BAA2B;AAE1B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,WAAW,EAAE,KAAK,gBAAgB;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAED,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,eAAe,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY,CAAC,OAAO,YAAY;AAC/B,OAAK,MAAM,OAAO,UAAU,KAAK,MAAM,MAAM,YAAY,UAAU,KAAK,EAAG;AAC3E,UAAQ,SAAS;AAAA,IACf,MAAM,EAAE,aAAa;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH,CAAC;AAoBH,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAe,uBAAuB,KAAqB,YAAgE;AACzH,QAAM,OAAO,oBAAI,IAAgC;AACjD,aAAW,aAAa,WAAY,MAAK,IAAI,WAAW,EAAE,UAAU,MAAM,QAAQ,KAAK,CAAC;AACxF,MAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,UAAU,QAAQ,aAAa;AAG3D,UAAM,SAAqB,CAAC;AAC5B,aAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,0BAA0B;AAChF,aAAO,KAAK,WAAW,MAAM,OAAO,QAAQ,wBAAwB,CAAC;AAAA,IACvE;AACA,UAAM,WAAmC,CAAC;AAC1C,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,QAC9B,MAAM,EAAE,MAAM,GAAG,UAAU,MAAM,OAAO;AAAA,QACxC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAAA,IAC/B;AACA,eAAW,WAAW,UAAU;AAC9B,YAAM,KAAK,WAAW,QAAQ,EAAE;AAChC,UAAI,CAAC,GAAI;AACT,WAAK,IAAI,IAAI;AAAA,QACX,UAAU;AAAA,UACR,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI;AAAA,UAC1D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC7B;AAAA,QACA,QAAQ,WAAW,QAAQ,OAAO;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,kBACP,OACA,aACgD;AAChD,QAAM,QAAqB,CAAC,GAAI,MAAM,SAAS,CAAC,CAAE;AAClD,QAAM,SAAyB,CAAC;AAChC,QAAM,cAAc,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;AAE/D,aAAW,aAAa,MAAM,cAAc,CAAC,GAAG;AAC9C,QAAI,YAAY,IAAI,SAAS,EAAG;AAChC,gBAAY,IAAI,SAAS;AACzB,UAAM,SAAS,YAAY,IAAI,SAAS,GAAG,UAAU;AACrD,UAAM,qBAAqB,0BAA0B,MAAM;AAC3D,QAAI,CAAC,UAAU,CAAC,oBAAoB;AAClC,aAAO,KAAK,EAAE,WAAW,UAAU,+CAA+C,CAAC;AACnF;AAAA,IACF;AACA,UAAM,KAAK,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AAAA,EACjE;AAEA,SAAO,EAAE,OAAO,OAAO;AACzB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,MAKF;AACzB,QAAM,SAAS,2BAA2B,MAAM;AAAA,IAC9C,WAAW,KAAK,KAAK;AAAA,IACrB,WAAW,KAAK,KAAK;AAAA,IACrB,QAAQ,KAAK,KAAK,UAAU;AAAA,IAC5B,iBAAiB,KAAK;AAAA,EACxB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,KAAK,KAAK,IAAI;AAAA,MACd,UAAU;AAAA,QACR,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,QACzB,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,sBAAsB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACA,SAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,MAAM,KAAK,oBAAI,IAAI;AAAA,QACjB,IAAI,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS;AAAA,QACnD,GAAI,MAAM,cAAc,CAAC;AAAA,MAC3B,CAAC,CAAC;AAAA,IACJ;AACA,UAAM,WAAW,kBAAkB,OAAO,WAAW;AACrD,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,OAAO,SAAS,MAAM;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAAyB,CAAC,GAAG,SAAS,MAAM;AAClD,UAAM,aAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,QAAS,YAAY,iBAAqD,KAAK,IAClG,YAAY,gBAAyC,MAAM,OAAO,CAAC,UACnE,OAAQ,OAAmC,cAAc,YACtD,OAAQ,OAAmC,cAAc,QAC7D,IACD,SAAS;AAEb,eAAW,QAAQ,YAAY;AAC7B,UAAI;AACF,cAAM,KAAK,MAAM,cAAc;AAAA,UAC7B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,iBAAiB,YAAY,IAAI,KAAK,SAAS,GAAG,YAAY;AAAA,QAChE,CAAC;AACD,YAAI,GAAI,YAAW,KAAK,EAAE;AAAA,MAC5B,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,WAAW,KAAK,WAAW,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MAC/E;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,QAC/G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,MAC/G,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { getAllMutationGuardInstances } from '@open-mercato/shared/lib/crud/mutation-guard-store'\nimport {\n  bridgeLegacyGuard,\n  runMutationGuards,\n  type MutationGuard,\n  type MutationGuardInput,\n} from '@open-mercato/shared/lib/crud/mutation-guard-registry'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport {\n  EUDR_COMMODITIES,\n  productMappingCreateSchema,\n} from '../../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../../lib/reference-data'\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions/apply' })\n\nconst CATALOG_LOOKUP_PAGE_SIZE = 100\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['eudr.mappings.manage'] },\n}\n\nconst applyItemSchema = z.object({\n  productId: z.string().uuid(),\n  commodity: z.enum(EUDR_COMMODITIES),\n  hsCode: z.string().max(20).optional().nullable(),\n})\n\nconst applySchema = z\n  .object({\n    items: z.array(applyItemSchema).max(100).optional(),\n    productIds: z.array(z.string().uuid()).max(100).optional(),\n  })\n  .superRefine((value, context) => {\n    if ((value.items?.length ?? 0) > 0 || (value.productIds?.length ?? 0) > 0) return\n    context.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: 'eudr.errors.mapping_suggestions_apply_failed',\n    })\n  })\n\ntype ApplyItem = z.infer<typeof applyItemSchema>\ntype ApplyFailure = { productId: string; errorKey: string }\ntype ProductSnapshot = { name?: string | null; sku?: string | null }\ntype CatalogProductInfo = { snapshot: ProductSnapshot | null; hsCode: string | null }\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\ntype RequestContext = {\n  ctx: CommandRuntimeContext\n  tenantId: string\n  organizationId: string\n}\ntype CommandCreateResult = { entityId?: string; id?: string }\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nfunction resolveUserFeatures(auth: unknown): string[] {\n  const features = (auth as { features?: unknown })?.features\n  if (!Array.isArray(features)) return []\n  return features.filter((value): value is string => typeof value === 'string')\n}\n\nasync function runGuards(\n  ctx: CommandRuntimeContext,\n  input: MutationGuardInput,\n): Promise<{\n  ok: boolean\n  errorBody?: Record<string, unknown>\n  errorStatus?: number\n  modifiedPayload?: Record<string, unknown>\n  afterSuccessCallbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>\n}> {\n  const legacyGuard = bridgeLegacyGuard(ctx.container)\n  const guards = [...getAllMutationGuardInstances(), ...(legacyGuard ? [legacyGuard] : [])]\n  return runMutationGuards(guards, input, {\n    userFeatures: resolveUserFeatures(ctx.auth),\n  })\n}\n\nasync function runGuardAfterSuccessCallbacks(\n  callbacks: Array<{ guard: MutationGuard; metadata: Record<string, unknown> | null }>,\n  input: {\n    tenantId: string\n    organizationId: string\n    userId: string\n    resourceKind: string\n    resourceId: string\n    operation: 'create'\n    requestMethod: string\n    requestHeaders: Headers\n  },\n): Promise<void> {\n  for (const callback of callbacks) {\n    if (!callback.guard.afterSuccess) continue\n    try {\n      await callback.guard.afterSuccess({\n        ...input,\n        metadata: callback.metadata ?? null,\n      })\n    } catch (err) {\n      logger.warn('Mutation guard afterSuccess callback failed', { err })\n    }\n  }\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    tenantId: auth.tenantId,\n    organizationId,\n    ctx: {\n      container,\n      auth,\n      organizationScope: scope,\n      selectedOrganizationId: organizationId,\n      organizationIds: scope?.filterIds ?? (auth.orgId ? [auth.orgId] : null),\n      request: req,\n    },\n  }\n}\n\nasync function loadCatalogProductInfo(ctx: RequestContext, productIds: string[]): Promise<Map<string, CatalogProductInfo>> {\n  const info = new Map<string, CatalogProductInfo>()\n  for (const productId of productIds) info.set(productId, { snapshot: null, hsCode: null })\n  if (!productIds.length) return info\n\n  try {\n    const queryEngine = ctx.ctx.container.resolve('queryEngine') as QueryEngine\n    // `items` and `productIds` are capped at 100 each, so their union can reach\n    // 200 \u2014 chunk the lookup to keep every page within the pageSize <= 100 rule.\n    const chunks: string[][] = []\n    for (let index = 0; index < productIds.length; index += CATALOG_LOOKUP_PAGE_SIZE) {\n      chunks.push(productIds.slice(index, index + CATALOG_LOOKUP_PAGE_SIZE))\n    }\n    const products: CatalogProductRecord[] = []\n    for (const chunk of chunks) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: { id: { $in: chunk } },\n        page: { page: 1, pageSize: chunk.length },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n    }\n    for (const product of products) {\n      const id = readString(product.id)\n      if (!id) continue\n      info.set(id, {\n        snapshot: {\n          name: readString(product.title) ?? readString(product.name),\n          sku: readString(product.sku),\n        },\n        hsCode: readString(product.hs_code),\n      })\n    }\n  } catch {\n    return info\n  }\n\n  return info\n}\n\nfunction resolveApplyItems(\n  input: z.infer<typeof applySchema>,\n  catalogInfo: Map<string, CatalogProductInfo>,\n): { items: ApplyItem[]; failed: ApplyFailure[] } {\n  const items: ApplyItem[] = [...(input.items ?? [])]\n  const failed: ApplyFailure[] = []\n  const explicitIds = new Set(items.map((item) => item.productId))\n\n  for (const productId of input.productIds ?? []) {\n    if (explicitIds.has(productId)) continue\n    explicitIds.add(productId)\n    const hsCode = catalogInfo.get(productId)?.hsCode ?? null\n    const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n    if (!hsCode || !suggestedCommodity) {\n      failed.push({ productId, errorKey: 'eudr.errors.mapping_suggestions_apply_failed' })\n      continue\n    }\n    items.push({ productId, commodity: suggestedCommodity, hsCode })\n  }\n\n  return { items, failed }\n}\n\nfunction errorKeyFromError(error: unknown): string {\n  if (isCrudHttpError(error)) {\n    const bodyError = error.body?.error\n    return typeof bodyError === 'string' && bodyError.length > 0 ? bodyError : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  if (error instanceof z.ZodError) {\n    const firstMessage = error.issues[0]?.message\n    return typeof firstMessage === 'string' && firstMessage.length > 0 ? firstMessage : 'eudr.errors.mapping_suggestions_apply_failed'\n  }\n  return 'eudr.errors.mapping_suggestions_apply_failed'\n}\n\nasync function createMapping(args: {\n  commandBus: CommandBus\n  ctx: RequestContext\n  item: ApplyItem\n  productSnapshot: ProductSnapshot | null\n}): Promise<string | null> {\n  const parsed = productMappingCreateSchema.parse({\n    productId: args.item.productId,\n    commodity: args.item.commodity,\n    hsCode: args.item.hsCode ?? null,\n    productSnapshot: args.productSnapshot,\n  })\n  const { result } = await args.commandBus.execute<typeof parsed & { tenantId: string; organizationId: string }, CommandCreateResult>(\n    'eudr.product_mappings.create',\n    {\n      input: {\n        ...parsed,\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n      },\n      ctx: args.ctx.ctx,\n      metadata: {\n        tenantId: args.ctx.tenantId,\n        organizationId: args.ctx.organizationId,\n        resourceKind: 'eudr.product_mapping',\n        context: { cacheAliases: ['eudr.product_mapping'] },\n      },\n    },\n  )\n  return result?.entityId ?? result?.id ?? null\n}\n\nexport async function POST(req: Request) {\n  try {\n    const requestContext = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const payload = await req.json().catch(() => ({}))\n    const input = applySchema.parse(payload)\n    const catalogInfo = await loadCatalogProductInfo(\n      requestContext,\n      Array.from(new Set([\n        ...(input.items ?? []).map((item) => item.productId),\n        ...(input.productIds ?? []),\n      ])),\n    )\n    const resolved = resolveApplyItems(input, catalogInfo)\n    const guardResult = await runGuards(requestContext.ctx, {\n      tenantId: requestContext.tenantId,\n      organizationId: requestContext.organizationId,\n      userId: requestContext.ctx.auth?.sub ?? '',\n      resourceKind: 'eudr.product_mapping',\n      resourceId: null,\n      operation: 'create',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: { items: resolved.items },\n    })\n    if (!guardResult.ok) {\n      return Response.json(\n        guardResult.errorBody ?? { error: translate('eudr.errors.operation_blocked', 'Operation blocked by guard') },\n        { status: guardResult.errorStatus ?? 422 },\n      )\n    }\n\n    const commandBus = requestContext.ctx.container.resolve('commandBus') as CommandBus\n    const failed: ApplyFailure[] = [...resolved.failed]\n    const createdIds: string[] = []\n\n    const guardItems = Array.isArray((guardResult.modifiedPayload as { items?: unknown } | undefined)?.items)\n      ? ((guardResult.modifiedPayload as { items: unknown[] }).items.filter((entry): entry is typeof resolved.items[number] => (\n          typeof (entry as { productId?: unknown })?.productId === 'string'\n          && typeof (entry as { commodity?: unknown })?.commodity === 'string'\n        )))\n      : resolved.items\n\n    for (const item of guardItems) {\n      try {\n        const id = await createMapping({\n          commandBus,\n          ctx: requestContext,\n          item,\n          productSnapshot: catalogInfo.get(item.productId)?.snapshot ?? null,\n        })\n        if (id) createdIds.push(id)\n      } catch (error) {\n        failed.push({ productId: item.productId, errorKey: errorKeyFromError(error) })\n      }\n    }\n\n    if (guardResult.afterSuccessCallbacks.length) {\n      for (const id of createdIds) {\n        await runGuardAfterSuccessCallbacks(guardResult.afterSuccessCallbacks, {\n          tenantId: requestContext.tenantId,\n          organizationId: requestContext.organizationId,\n          userId: requestContext.ctx.auth?.sub ?? '',\n          resourceKind: 'eudr.product_mapping',\n          resourceId: id,\n          operation: 'create',\n          requestMethod: req.method,\n          requestHeaders: req.headers,\n        })\n      }\n    }\n\n    return Response.json({ created: createdIds.length, failed })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    // No command-interceptor mapping here (issue #5097): every `commandBus.execute`\n    // in this route runs inside the per-item loop above, whose catch records the\n    // failure in `failed[]` and continues, so an interceptor rejection can never\n    // reach this handler. The batch contract \u2014 HTTP 200 with a per-item failure\n    // list \u2014 is deliberately unchanged; the route is listed in\n    // `ROUTES_WITH_BATCH_ITEM_ERROR_HANDLING` in\n    // `packages/core/src/__tests__/command-interceptor-http-coverage.test.ts`.\n    const { translate } = await resolveTranslations()\n    if (error instanceof z.ZodError) {\n      return Response.json(\n        { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n        { status: 400 },\n      )\n    }\n    logger.error('Product mapping suggestions apply failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_apply_failed', 'Failed to apply EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst applyResponseSchema = z.object({\n  created: z.number(),\n  failed: z.array(z.object({\n    productId: z.string().uuid(),\n    errorKey: z.string(),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Apply EUDR product mapping suggestions',\n  methods: {\n    POST: {\n      summary: 'Apply mapping suggestions',\n      requestBody: {\n        contentType: 'application/json',\n        schema: applySchema,\n      },\n      responses: [\n        { status: 200, description: 'Apply result', schema: applyResponseSchema },\n        { status: 400, description: 'Invalid apply payload', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Mapping suggestion apply failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,eAAe,uBAAuB;AAC/C,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAEP,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAE1C,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,yCAAyC,CAAC;AAEjG,MAAM,2BAA2B;AAE1B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACvE;AAEA,MAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,WAAW,EAAE,KAAK,gBAAgB;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAED,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,eAAe,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC3D,CAAC,EACA,YAAY,CAAC,OAAO,YAAY;AAC/B,OAAK,MAAM,OAAO,UAAU,KAAK,MAAM,MAAM,YAAY,UAAU,KAAK,EAAG;AAC3E,UAAQ,SAAS;AAAA,IACf,MAAM,EAAE,aAAa;AAAA,IACrB,SAAS;AAAA,EACX,CAAC;AACH,CAAC;AAoBH,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,SAAS,oBAAoB,MAAyB;AACpD,QAAM,WAAY,MAAiC;AACnD,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,SAAO,SAAS,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC9E;AAEA,eAAe,UACb,KACA,OAOC;AACD,QAAM,cAAc,kBAAkB,IAAI,SAAS;AACnD,QAAM,SAAS,CAAC,GAAG,6BAA6B,GAAG,GAAI,cAAc,CAAC,WAAW,IAAI,CAAC,CAAE;AACxF,SAAO,kBAAkB,QAAQ,OAAO;AAAA,IACtC,cAAc,oBAAoB,IAAI,IAAI;AAAA,EAC5C,CAAC;AACH;AAEA,eAAe,8BACb,WACA,OAUe;AACf,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,SAAS,MAAM,aAAc;AAClC,QAAI;AACF,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,GAAG;AAAA,QACH,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,+CAA+C,EAAE,IAAI,CAAC;AAAA,IACpE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,UAAU,KAAK;AAAA,IACf;AAAA,IACA,KAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA,mBAAmB;AAAA,MACnB,wBAAwB;AAAA,MACxB,iBAAiB,OAAO,cAAc,KAAK,QAAQ,CAAC,KAAK,KAAK,IAAI;AAAA,MAClE,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,eAAe,uBAAuB,KAAqB,YAAgE;AACzH,QAAM,OAAO,oBAAI,IAAgC;AACjD,aAAW,aAAa,WAAY,MAAK,IAAI,WAAW,EAAE,UAAU,MAAM,QAAQ,KAAK,CAAC;AACxF,MAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,MAAI;AACF,UAAM,cAAc,IAAI,IAAI,UAAU,QAAQ,aAAa;AAG3D,UAAM,SAAqB,CAAC;AAC5B,aAAS,QAAQ,GAAG,QAAQ,WAAW,QAAQ,SAAS,0BAA0B;AAChF,aAAO,KAAK,WAAW,MAAM,OAAO,QAAQ,wBAAwB,CAAC;AAAA,IACvE;AACA,UAAM,WAAmC,CAAC;AAC1C,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS,EAAE,IAAI,EAAE,KAAK,MAAM,EAAE;AAAA,QAC9B,MAAM,EAAE,MAAM,GAAG,UAAU,MAAM,OAAO;AAAA,QACxC,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAAA,IAC/B;AACA,eAAW,WAAW,UAAU;AAC9B,YAAM,KAAK,WAAW,QAAQ,EAAE;AAChC,UAAI,CAAC,GAAI;AACT,WAAK,IAAI,IAAI;AAAA,QACX,UAAU;AAAA,UACR,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI;AAAA,UAC1D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC7B;AAAA,QACA,QAAQ,WAAW,QAAQ,OAAO;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,kBACP,OACA,aACgD;AAChD,QAAM,QAAqB,CAAC,GAAI,MAAM,SAAS,CAAC,CAAE;AAClD,QAAM,SAAyB,CAAC;AAChC,QAAM,cAAc,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;AAE/D,aAAW,aAAa,MAAM,cAAc,CAAC,GAAG;AAC9C,QAAI,YAAY,IAAI,SAAS,EAAG;AAChC,gBAAY,IAAI,SAAS;AACzB,UAAM,SAAS,YAAY,IAAI,SAAS,GAAG,UAAU;AACrD,UAAM,qBAAqB,0BAA0B,MAAM;AAC3D,QAAI,CAAC,UAAU,CAAC,oBAAoB;AAClC,aAAO,KAAK,EAAE,WAAW,UAAU,+CAA+C,CAAC;AACnF;AAAA,IACF;AACA,UAAM,KAAK,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AAAA,EACjE;AAEA,SAAO,EAAE,OAAO,OAAO;AACzB;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,gBAAgB,KAAK,GAAG;AAC1B,UAAM,YAAY,MAAM,MAAM;AAC9B,WAAO,OAAO,cAAc,YAAY,UAAU,SAAS,IAAI,YAAY;AAAA,EAC7E;AACA,MAAI,iBAAiB,EAAE,UAAU;AAC/B,UAAM,eAAe,MAAM,OAAO,CAAC,GAAG;AACtC,WAAO,OAAO,iBAAiB,YAAY,aAAa,SAAS,IAAI,eAAe;AAAA,EACtF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,MAKF;AACzB,QAAM,SAAS,2BAA2B,MAAM;AAAA,IAC9C,WAAW,KAAK,KAAK;AAAA,IACrB,WAAW,KAAK,KAAK;AAAA,IACrB,QAAQ,KAAK,KAAK,UAAU;AAAA,IAC5B,iBAAiB,KAAK;AAAA,EACxB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI,MAAM,KAAK,WAAW;AAAA,IACvC;AAAA,IACA;AAAA,MACE,OAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,MAC3B;AAAA,MACA,KAAK,KAAK,IAAI;AAAA,MACd,UAAU;AAAA,QACR,UAAU,KAAK,IAAI;AAAA,QACnB,gBAAgB,KAAK,IAAI;AAAA,QACzB,cAAc;AAAA,QACd,SAAS,EAAE,cAAc,CAAC,sBAAsB,EAAE;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACA,SAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C;AAEA,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,iBAAiB,MAAM,sBAAsB,GAAG;AACtD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AACjD,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA,MAAM,KAAK,oBAAI,IAAI;AAAA,QACjB,IAAI,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS;AAAA,QACnD,GAAI,MAAM,cAAc,CAAC;AAAA,MAC3B,CAAC,CAAC;AAAA,IACJ;AACA,UAAM,WAAW,kBAAkB,OAAO,WAAW;AACrD,UAAM,cAAc,MAAM,UAAU,eAAe,KAAK;AAAA,MACtD,UAAU,eAAe;AAAA,MACzB,gBAAgB,eAAe;AAAA,MAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,MACxC,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB,EAAE,OAAO,SAAS,MAAM;AAAA,IAC3C,CAAC;AACD,QAAI,CAAC,YAAY,IAAI;AACnB,aAAO,SAAS;AAAA,QACd,YAAY,aAAa,EAAE,OAAO,UAAU,iCAAiC,4BAA4B,EAAE;AAAA,QAC3G,EAAE,QAAQ,YAAY,eAAe,IAAI;AAAA,MAC3C;AAAA,IACF;AAEA,UAAM,aAAa,eAAe,IAAI,UAAU,QAAQ,YAAY;AACpE,UAAM,SAAyB,CAAC,GAAG,SAAS,MAAM;AAClD,UAAM,aAAuB,CAAC;AAE9B,UAAM,aAAa,MAAM,QAAS,YAAY,iBAAqD,KAAK,IAClG,YAAY,gBAAyC,MAAM,OAAO,CAAC,UACnE,OAAQ,OAAmC,cAAc,YACtD,OAAQ,OAAmC,cAAc,QAC7D,IACD,SAAS;AAEb,eAAW,QAAQ,YAAY;AAC7B,UAAI;AACF,cAAM,KAAK,MAAM,cAAc;AAAA,UAC7B;AAAA,UACA,KAAK;AAAA,UACL;AAAA,UACA,iBAAiB,YAAY,IAAI,KAAK,SAAS,GAAG,YAAY;AAAA,QAChE,CAAC;AACD,YAAI,GAAI,YAAW,KAAK,EAAE;AAAA,MAC5B,SAAS,OAAO;AACd,eAAO,KAAK,EAAE,WAAW,KAAK,WAAW,UAAU,kBAAkB,KAAK,EAAE,CAAC;AAAA,MAC/E;AAAA,IACF;AAEA,QAAI,YAAY,sBAAsB,QAAQ;AAC5C,iBAAW,MAAM,YAAY;AAC3B,cAAM,8BAA8B,YAAY,uBAAuB;AAAA,UACrE,UAAU,eAAe;AAAA,UACzB,gBAAgB,eAAe;AAAA,UAC/B,QAAQ,eAAe,IAAI,MAAM,OAAO;AAAA,UACxC,cAAc;AAAA,UACd,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,eAAe,IAAI;AAAA,UACnB,gBAAgB,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,SAAS,WAAW,QAAQ,OAAO,CAAC;AAAA,EAC7D,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAQA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,iBAAiB,EAAE,UAAU;AAC/B,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,QAC/G,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,MAAM,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACvE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,gDAAgD,0CAA0C,EAAE;AAAA,MAC/G,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,SAAS,EAAE,OAAO;AAAA,EAClB,QAAQ,EAAE,MAAM,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,UAAU,EAAE,OAAO;AAAA,EACrB,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAC7F,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACzG;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/product-mappings/suggestions/route.js

@@ -5,6 +5,7 @@ import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/er
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { E } from "../../../../../generated/entities.ids.generated.js";
 import { EudrProductMapping } from "../../../data/entities.js";
 import { EUDR_COMMODITIES } from "../../../data/validators.js";
@@ -21,7 +22,7 @@ async function resolveRequestContext(req) {
     throw new CrudHttpError(401, { error: translate("eudr.errors.unauthorized", "Unauthorized") });
   }
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
   if (!organizationId) {
     throw new CrudHttpError(400, {
       error: translate("eudr.errors.organization_required", "Organization context is required")

package/dist/modules/eudr/api/product-mappings/suggestions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/eudr/api/product-mappings/suggestions/route.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { EudrProductMapping } from '../../../data/entities'\nimport { EUDR_COMMODITIES } from '../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../lib/reference-data'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.mappings.view'] },\n}\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions' })\n\ntype RequestContext = {\n  container: { resolve: <T = unknown>(name: string) => T }\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n}\n\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    container,\n    em: container.resolve('em') as EntityManager,\n    tenantId: auth.tenantId,\n    organizationId,\n  }\n}\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nasync function loadCatalogProducts(ctx: RequestContext): Promise<CatalogProductRecord[]> {\n  try {\n    const queryEngine = ctx.container.resolve<QueryEngine>('queryEngine')\n    const products: CatalogProductRecord[] = []\n    for (let page = 1; page <= 5; page += 1) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: [\n          { field: 'hs_code', op: 'exists', value: true },\n          { field: 'hs_code', op: 'ne', value: '' },\n        ],\n        page: { page, pageSize: 100 },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n      if (result.items.length < 100) break\n    }\n    return products\n  } catch (error) {\n    logger.debug('Catalog product scan failed; returning no mapping suggestions', { err: error })\n    return []\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const products = await loadCatalogProducts(ctx)\n    const candidates = products\n      .map((product) => {\n        const productId = readString(product.id)\n        const hsCode = readString(product.hs_code)\n        const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n        if (!productId || !hsCode || !suggestedCommodity) return null\n        return {\n          productId,\n          name: readString(product.title) ?? readString(product.name) ?? productId,\n          sku: readString(product.sku),\n          hsCode,\n          suggestedCommodity,\n        }\n      })\n      .filter((item): item is {\n        productId: string\n        name: string\n        sku: string | null\n        hsCode: string\n        suggestedCommodity: NonNullable<ReturnType<typeof suggestCommodityForHsCode>>\n      } => item !== null)\n\n    const productIds = candidates.map((item) => item.productId)\n    const activeMappings = productIds.length\n      ? await ctx.em.find(EudrProductMapping, {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          deletedAt: null,\n          productId: { $in: productIds },\n        } as FilterQuery<EudrProductMapping>)\n      : []\n    const mappedProductIds = new Set(activeMappings.map((mapping) => mapping.productId))\n\n    return Response.json({\n      items: candidates\n        .filter((item) => !mappedProductIds.has(item.productId))\n        .slice(0, 200),\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Product mapping suggestions loading failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_failed', 'Failed to load EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst suggestionSchema = z.object({\n  productId: z.string().uuid(),\n  name: z.string(),\n  sku: z.string().nullable(),\n  hsCode: z.string(),\n  suggestedCommodity: z.enum(EUDR_COMMODITIES),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Suggest EUDR product mappings from catalog HS codes',\n  methods: {\n    GET: {\n      summary: 'Product mapping suggestions',\n      responses: [\n        { status: 200, description: 'Suggested product mappings', schema: z.object({ items: z.array(suggestionSchema) }) },\n        { status: 400, description: 'Invalid organization context', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Product mapping suggestions loading failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AAEnD,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACpE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mCAAmC,CAAC;AAiB3F,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B,UAAU,KAAK;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,eAAe,oBAAoB,KAAsD;AACvF,MAAI;AACF,UAAM,cAAc,IAAI,UAAU,QAAqB,aAAa;AACpE,UAAM,WAAmC,CAAC;AAC1C,aAAS,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG;AACvC,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS;AAAA,UACP,EAAE,OAAO,WAAW,IAAI,UAAU,OAAO,KAAK;AAAA,UAC9C,EAAE,OAAO,WAAW,IAAI,MAAM,OAAO,GAAG;AAAA,QAC1C;AAAA,QACA,MAAM,EAAE,MAAM,UAAU,IAAI;AAAA,QAC5B,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAC7B,UAAI,OAAO,MAAM,SAAS,IAAK;AAAA,IACjC;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,MAAM,iEAAiE,EAAE,KAAK,MAAM,CAAC;AAC5F,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,UAAM,aAAa,SAChB,IAAI,CAAC,YAAY;AAChB,YAAM,YAAY,WAAW,QAAQ,EAAE;AACvC,YAAM,SAAS,WAAW,QAAQ,OAAO;AACzC,YAAM,qBAAqB,0BAA0B,MAAM;AAC3D,UAAI,CAAC,aAAa,CAAC,UAAU,CAAC,mBAAoB,QAAO;AACzD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI,KAAK;AAAA,QAC/D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC3B;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAMJ,SAAS,IAAI;AAEpB,UAAM,aAAa,WAAW,IAAI,CAAC,SAAS,KAAK,SAAS;AAC1D,UAAM,iBAAiB,WAAW,SAC9B,MAAM,IAAI,GAAG,KAAK,oBAAoB;AAAA,MACpC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,MACX,WAAW,EAAE,KAAK,WAAW;AAAA,IAC/B,CAAoC,IACpC,CAAC;AACL,UAAM,mBAAmB,IAAI,IAAI,eAAe,IAAI,CAAC,YAAY,QAAQ,SAAS,CAAC;AAEnF,WAAO,SAAS,KAAK;AAAA,MACnB,OAAO,WACJ,OAAO,CAAC,SAAS,CAAC,iBAAiB,IAAI,KAAK,SAAS,CAAC,EACtD,MAAM,GAAG,GAAG;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8CAA8C,EAAE,KAAK,MAAM,CAAC;AACzE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,MAAM,EAAE,OAAO;AAAA,EACf,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,KAAK,gBAAgB;AAC7C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,EAAE,CAAC,EAAE;AAAA,QACjH,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACpH;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport { EudrProductMapping } from '../../../data/entities'\nimport { EUDR_COMMODITIES } from '../../../data/validators'\nimport { suggestCommodityForHsCode } from '../../../lib/reference-data'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.mappings.view'] },\n}\n\nconst logger = createLogger('eudr').child({ component: 'api/product-mappings/suggestions' })\n\ntype RequestContext = {\n  container: { resolve: <T = unknown>(name: string) => T }\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n}\n\ntype CatalogProductRecord = Record<string, unknown> & {\n  id?: unknown\n  title?: unknown\n  name?: unknown\n  sku?: unknown\n  hs_code?: unknown\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth || !auth.tenantId) {\n    throw new CrudHttpError(401, { error: translate('eudr.errors.unauthorized', 'Unauthorized') })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  return {\n    container,\n    em: container.resolve('em') as EntityManager,\n    tenantId: auth.tenantId,\n    organizationId,\n  }\n}\n\nfunction readString(value: unknown): string | null {\n  return typeof value === 'string' && value.trim().length > 0 ? value.trim() : null\n}\n\nasync function loadCatalogProducts(ctx: RequestContext): Promise<CatalogProductRecord[]> {\n  try {\n    const queryEngine = ctx.container.resolve<QueryEngine>('queryEngine')\n    const products: CatalogProductRecord[] = []\n    for (let page = 1; page <= 5; page += 1) {\n      const result = await queryEngine.query<CatalogProductRecord>(E.catalog.catalog_product, {\n        fields: ['id', 'title', 'name', 'sku', 'hs_code'],\n        filters: [\n          { field: 'hs_code', op: 'exists', value: true },\n          { field: 'hs_code', op: 'ne', value: '' },\n        ],\n        page: { page, pageSize: 100 },\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      })\n      products.push(...result.items)\n      if (result.items.length < 100) break\n    }\n    return products\n  } catch (error) {\n    logger.debug('Catalog product scan failed; returning no mapping suggestions', { err: error })\n    return []\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const products = await loadCatalogProducts(ctx)\n    const candidates = products\n      .map((product) => {\n        const productId = readString(product.id)\n        const hsCode = readString(product.hs_code)\n        const suggestedCommodity = suggestCommodityForHsCode(hsCode)\n        if (!productId || !hsCode || !suggestedCommodity) return null\n        return {\n          productId,\n          name: readString(product.title) ?? readString(product.name) ?? productId,\n          sku: readString(product.sku),\n          hsCode,\n          suggestedCommodity,\n        }\n      })\n      .filter((item): item is {\n        productId: string\n        name: string\n        sku: string | null\n        hsCode: string\n        suggestedCommodity: NonNullable<ReturnType<typeof suggestCommodityForHsCode>>\n      } => item !== null)\n\n    const productIds = candidates.map((item) => item.productId)\n    const activeMappings = productIds.length\n      ? await ctx.em.find(EudrProductMapping, {\n          tenantId: ctx.tenantId,\n          organizationId: ctx.organizationId,\n          deletedAt: null,\n          productId: { $in: productIds },\n        } as FilterQuery<EudrProductMapping>)\n      : []\n    const mappedProductIds = new Set(activeMappings.map((mapping) => mapping.productId))\n\n    return Response.json({\n      items: candidates\n        .filter((item) => !mappedProductIds.has(item.productId))\n        .slice(0, 200),\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Product mapping suggestions loading failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.mapping_suggestions_failed', 'Failed to load EUDR mapping suggestions') },\n      { status: 500 },\n    )\n  }\n}\n\nconst suggestionSchema = z.object({\n  productId: z.string().uuid(),\n  name: z.string(),\n  sku: z.string().nullable(),\n  hsCode: z.string(),\n  suggestedCommodity: z.enum(EUDR_COMMODITIES),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Suggest EUDR product mappings from catalog HS codes',\n  methods: {\n    GET: {\n      summary: 'Product mapping suggestions',\n      responses: [\n        { status: 200, description: 'Suggested product mappings', schema: z.object({ items: z.array(suggestionSchema) }) },\n        { status: 400, description: 'Invalid organization context', schema: z.object({ error: z.string() }) },\n        { status: 401, description: 'Unauthorized', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Forbidden', schema: z.object({ error: z.string() }) },\n        { status: 500, description: 'Product mapping suggestions loading failed', schema: z.object({ error: z.string() }) },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAElD,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,wBAAwB;AACjC,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,oBAAoB,EAAE;AACpE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,WAAW,mCAAmC,CAAC;AAiB3F,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,QAAQ,CAAC,KAAK,UAAU;AAC3B,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,CAAC;AAAA,EAC/F;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B,UAAU,KAAK;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,WAAW,OAA+B;AACjD,SAAO,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAAI,MAAM,KAAK,IAAI;AAC/E;AAEA,eAAe,oBAAoB,KAAsD;AACvF,MAAI;AACF,UAAM,cAAc,IAAI,UAAU,QAAqB,aAAa;AACpE,UAAM,WAAmC,CAAC;AAC1C,aAAS,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG;AACvC,YAAM,SAAS,MAAM,YAAY,MAA4B,EAAE,QAAQ,iBAAiB;AAAA,QACtF,QAAQ,CAAC,MAAM,SAAS,QAAQ,OAAO,SAAS;AAAA,QAChD,SAAS;AAAA,UACP,EAAE,OAAO,WAAW,IAAI,UAAU,OAAO,KAAK;AAAA,UAC9C,EAAE,OAAO,WAAW,IAAI,MAAM,OAAO,GAAG;AAAA,QAC1C;AAAA,QACA,MAAM,EAAE,MAAM,UAAU,IAAI;AAAA,QAC5B,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB,CAAC;AACD,eAAS,KAAK,GAAG,OAAO,KAAK;AAC7B,UAAI,OAAO,MAAM,SAAS,IAAK;AAAA,IACjC;AACA,WAAO;AAAA,EACT,SAAS,OAAO;AACd,WAAO,MAAM,iEAAiE,EAAE,KAAK,MAAM,CAAC;AAC5F,WAAO,CAAC;AAAA,EACV;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,WAAW,MAAM,oBAAoB,GAAG;AAC9C,UAAM,aAAa,SAChB,IAAI,CAAC,YAAY;AAChB,YAAM,YAAY,WAAW,QAAQ,EAAE;AACvC,YAAM,SAAS,WAAW,QAAQ,OAAO;AACzC,YAAM,qBAAqB,0BAA0B,MAAM;AAC3D,UAAI,CAAC,aAAa,CAAC,UAAU,CAAC,mBAAoB,QAAO;AACzD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,WAAW,QAAQ,KAAK,KAAK,WAAW,QAAQ,IAAI,KAAK;AAAA,QAC/D,KAAK,WAAW,QAAQ,GAAG;AAAA,QAC3B;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC,EACA,OAAO,CAAC,SAMJ,SAAS,IAAI;AAEpB,UAAM,aAAa,WAAW,IAAI,CAAC,SAAS,KAAK,SAAS;AAC1D,UAAM,iBAAiB,WAAW,SAC9B,MAAM,IAAI,GAAG,KAAK,oBAAoB;AAAA,MACpC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB,WAAW;AAAA,MACX,WAAW,EAAE,KAAK,WAAW;AAAA,IAC/B,CAAoC,IACpC,CAAC;AACL,UAAM,mBAAmB,IAAI,IAAI,eAAe,IAAI,CAAC,YAAY,QAAQ,SAAS,CAAC;AAEnF,WAAO,SAAS,KAAK;AAAA,MACnB,OAAO,WACJ,OAAO,CAAC,SAAS,CAAC,iBAAiB,IAAI,KAAK,SAAS,CAAC,EACtD,MAAM,GAAG,GAAG;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8CAA8C,EAAE,KAAK,MAAM,CAAC;AACzE,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,MAAM,EAAE,OAAO;AAAA,EACf,KAAK,EAAE,OAAO,EAAE,SAAS;AAAA,EACzB,QAAQ,EAAE,OAAO;AAAA,EACjB,oBAAoB,EAAE,KAAK,gBAAgB;AAC7C,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,EAAE,CAAC,EAAE;AAAA,QACjH,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,MACpH;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/reports/annual/route.js

@@ -6,6 +6,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import {
   accumulateSupplementaryQuantities,
   annualReportSchema,
@@ -32,7 +33,7 @@ async function resolveRequestContext(request) {
   }
   const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request });
   const organizationIds = Array.isArray(organizationScope.filterIds) ? organizationScope.filterIds : null;
-  const featureOrganizationId = organizationScope.selectedId ?? auth.orgId ?? null;
+  const featureOrganizationId = resolveSingleOrganizationIdOrDeny(organizationScope, auth) ?? null;
   const tenantId = auth.tenantId;
   const userId = auth.sub ?? null;
   const em = container.resolve("em");