@open-mercato/core 0.8.1-develop.7296.1.2111d779db → 0.8.1-develop.7441.1.b42958b98c

package/dist/modules/eudr/api/reports/annual/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/eudr/api/reports/annual/route.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  accumulateSupplementaryQuantities,\n  annualReportSchema,\n  buildAnnualReportCsv,\n  type AnnualReport,\n} from '../../../lib/annual-report'\nimport { getCountryRiskTier } from '../../../lib/reference-data'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst logger = createLogger('eudr').child({ route: 'reports/annual' })\nconst INCLUDED_STATUSES = ['submitted', 'available', 'withdrawn', 'archived'] as const\n\nconst querySchema = z.object({\n  year: z.coerce.number().int().min(2020).max(2100),\n  format: z.enum(['json', 'csv']).default('json'),\n})\n\ntype AnnualReportDatabase = {\n  eudr_due_diligence_statements: {\n    id: string\n    tenant_id: string\n    organization_id: string\n    submitted_at: Date | null\n    status: string\n    commodity: string\n    quantity_kg: string | number | null\n    supplementary_unit: string | null\n    supplementary_quantity: string | number | null\n    deleted_at: Date | null\n  }\n  eudr_evidence_submissions: {\n    statement_id: string | null\n    tenant_id: string\n    organization_id: string\n    origin_country: string | null\n    deleted_at: Date | null\n  }\n  eudr_risk_assessments: {\n    id: string\n    statement_id: string\n    tenant_id: string\n    organization_id: string\n    conclusion: string\n    is_simplified: boolean\n    assessed_at: Date\n    created_at: Date\n    deleted_at: Date | null\n  }\n  eudr_mitigation_actions: {\n    risk_assessment_id: string\n    tenant_id: string\n    organization_id: string\n    status: string\n    deleted_at: Date | null\n  }\n}\n\ntype ReportScope = {\n  tenantId: string\n  organizationIds: string[] | null\n}\n\ntype RequestContext = ReportScope & {\n  db: Kysely<AnnualReportDatabase>\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype StatusCountRow = { status: string; count: unknown }\ntype CommodityAggregateRow = {\n  commodity: string\n  count: unknown\n  quantity_kg: unknown\n}\ntype SupplementaryAggregateRow = {\n  commodity: string\n  unit: string | null\n  quantity: unknown\n}\ntype CountryAggregateRow = { country: string | null; submission_count: unknown }\ntype RiskAggregateRow = {\n  assessments: unknown\n  negligible: unknown\n  non_negligible: unknown\n  simplified: unknown\n}\ntype MitigationAggregateRow = { total: unknown; completed: unknown }\n\nasync function resolveRequestContext(request: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(request)\n  const { translate } = await resolveTranslations()\n\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, {\n      error: translate('eudr.errors.unauthorized', 'Unauthorized'),\n    })\n  }\n\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request })\n  const organizationIds = Array.isArray(organizationScope.filterIds)\n    ? organizationScope.filterIds\n    : null\n  const featureOrganizationId = organizationScope.selectedId ?? auth.orgId ?? null\n  const tenantId = auth.tenantId\n  const userId = auth.sub ?? null\n  const em = container.resolve('em') as EntityManager\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n\n  return {\n    db: em.getKysely<AnnualReportDatabase>(),\n    tenantId,\n    organizationIds,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], {\n          tenantId,\n          organizationId: featureOrganizationId,\n        })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nfunction buildStatementBucket(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n) {\n  let query = db\n    .selectFrom('eudr_due_diligence_statements')\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('submitted_at', '>=', start)\n    .where('submitted_at', '<', end)\n    .where('status', 'in', [...INCLUDED_STATUSES])\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n  return query\n}\n\nfunction buildLatestAssessments(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n) {\n  let query = db\n    .selectFrom('eudr_risk_assessments')\n    .distinctOn('statement_id')\n    .select(['id', 'statement_id', 'conclusion', 'is_simplified'])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('statement_id', 'in', buildStatementBucket(db, scope, start, end).select('id'))\n    .orderBy('statement_id', 'asc')\n    .orderBy('assessed_at', 'desc')\n    .orderBy('created_at', 'desc')\n    .orderBy('id', 'desc')\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n  return query\n}\n\nfunction normalizeCount(value: unknown): number {\n  const count = Number(value ?? 0)\n  return Number.isFinite(count) && count >= 0 ? count : 0\n}\n\nfunction normalizeQuantity(value: unknown): string {\n  const quantity = typeof value === 'bigint'\n    ? value.toString()\n    : (typeof value === 'string' || typeof value === 'number' ? value : null)\n  return accumulateSupplementaryQuantities([{ unit: 'KG', quantity }])[0]?.quantity ?? '0.000'\n}\n\nasync function fetchStatementAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<AnnualReport['statements']> {\n  const [rawStatusRows, rawCommodityRows, rawSupplementaryRows] = await Promise.all([\n    buildStatementBucket(db, scope, start, end)\n      .select(['status', sql<string>`count(*)`.as('count')])\n      .groupBy('status')\n      .orderBy('status', 'asc')\n      .execute(),\n    buildStatementBucket(db, scope, start, end)\n      .select([\n        'commodity',\n        sql<string>`count(*)`.as('count'),\n        sql<string>`coalesce(sum(quantity_kg), 0)`.as('quantity_kg'),\n      ])\n      .groupBy('commodity')\n      .orderBy('commodity', 'asc')\n      .execute(),\n    buildStatementBucket(db, scope, start, end)\n      .select([\n        'commodity',\n        'supplementary_unit as unit',\n        sql<string>`coalesce(sum(supplementary_quantity), 0)`.as('quantity'),\n      ])\n      .where('supplementary_unit', 'is not', null)\n      .where(sql<boolean>`trim(supplementary_unit) != ''`)\n      .groupBy(['commodity', 'supplementary_unit'])\n      .orderBy('commodity', 'asc')\n      .orderBy('supplementary_unit', 'asc')\n      .execute(),\n  ])\n\n  const statusRows = rawStatusRows as StatusCountRow[]\n  const commodityRows = rawCommodityRows as CommodityAggregateRow[]\n  const supplementaryRows = rawSupplementaryRows as SupplementaryAggregateRow[]\n  const byStatus = Object.fromEntries(\n    statusRows.map((row) => [row.status, normalizeCount(row.count)]),\n  )\n  const supplementaryByCommodity = new Map<string, SupplementaryAggregateRow[]>()\n  for (const row of supplementaryRows) {\n    const rows = supplementaryByCommodity.get(row.commodity) ?? []\n    rows.push(row)\n    supplementaryByCommodity.set(row.commodity, rows)\n  }\n\n  return {\n    total: Object.values(byStatus).reduce((total, count) => total + count, 0),\n    byStatus,\n    byCommodity: commodityRows.map((row) => ({\n      commodity: row.commodity,\n      count: normalizeCount(row.count),\n      quantityKg: normalizeQuantity(row.quantity_kg),\n      supplementaryQuantities: accumulateSupplementaryQuantities(\n        (supplementaryByCommodity.get(row.commodity) ?? []).map((supplementary) => ({\n          unit: supplementary.unit,\n          quantity: typeof supplementary.quantity === 'bigint'\n            ? supplementary.quantity.toString()\n            : (typeof supplementary.quantity === 'string' || typeof supplementary.quantity === 'number'\n                ? supplementary.quantity\n                : null),\n        })),\n      ),\n    })),\n  }\n}\n\nasync function fetchCountryAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<NonNullable<AnnualReport['countries']>> {\n  let query = db\n    .selectFrom('eudr_evidence_submissions')\n    .select([\n      'origin_country as country',\n      sql<string>`count(*)`.as('submission_count'),\n    ])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('origin_country', 'is not', null)\n    .where(sql<boolean>`trim(origin_country) != ''`)\n    .where('statement_id', 'in', buildStatementBucket(db, scope, start, end).select('id'))\n    .groupBy('origin_country')\n    .orderBy('origin_country', 'asc')\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n\n  const rows = await query.execute() as CountryAggregateRow[]\n  return rows.flatMap((row) => {\n    const country = row.country?.trim().toUpperCase() ?? ''\n    if (country.length === 0) return []\n    return [{\n      country,\n      tier: getCountryRiskTier(country),\n      submissionCount: normalizeCount(row.submission_count),\n    }]\n  })\n}\n\nasync function fetchRiskAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<{\n  risk: NonNullable<AnnualReport['risk']>\n  mitigation: NonNullable<AnnualReport['mitigation']>\n}> {\n  const latestAssessments = buildLatestAssessments(db, scope, start, end)\n  const latestAssessmentIds = db\n    .selectFrom(latestAssessments.as('latest_assessment'))\n    .select('latest_assessment.id')\n\n  let mitigationQuery = db\n    .selectFrom('eudr_mitigation_actions')\n    .select([\n      sql<string>`count(*)`.as('total'),\n      sql<string>`count(*) filter (where status = 'completed')`.as('completed'),\n    ])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('risk_assessment_id', 'in', latestAssessmentIds)\n\n  if (Array.isArray(scope.organizationIds)) {\n    mitigationQuery = mitigationQuery.where('organization_id', 'in', scope.organizationIds)\n  }\n\n  const [rawRisk, rawMitigation] = await Promise.all([\n    db\n      .selectFrom(latestAssessments.as('latest_assessment'))\n      .select([\n        sql<string>`count(*)`.as('assessments'),\n        sql<string>`count(*) filter (where conclusion = 'negligible')`.as('negligible'),\n        sql<string>`count(*) filter (where conclusion = 'non_negligible')`.as('non_negligible'),\n        sql<string>`count(*) filter (where is_simplified = true)`.as('simplified'),\n      ])\n      .executeTakeFirst(),\n    mitigationQuery.executeTakeFirst(),\n  ])\n  const riskRow = (rawRisk ?? {}) as Partial<RiskAggregateRow>\n  const mitigationRow = (rawMitigation ?? {}) as Partial<MitigationAggregateRow>\n\n  return {\n    risk: {\n      assessments: normalizeCount(riskRow.assessments),\n      negligible: normalizeCount(riskRow.negligible),\n      nonNegligible: normalizeCount(riskRow.non_negligible),\n      simplified: normalizeCount(riskRow.simplified),\n    },\n    mitigation: {\n      total: normalizeCount(mitigationRow.total),\n      completed: normalizeCount(mitigationRow.completed),\n    },\n  }\n}\n\nexport async function GET(request: Request) {\n  const parsedQuery = querySchema.safeParse(Object.fromEntries(new URL(request.url).searchParams.entries()))\n  if (!parsedQuery.success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({\n      error: translate('eudr.errors.invalid_query', 'Invalid query'),\n      details: parsedQuery.error.flatten(),\n    }, { status: 400 })\n  }\n\n  try {\n    const context = await resolveRequestContext(request)\n    const scope: ReportScope = {\n      tenantId: context.tenantId,\n      organizationIds: context.organizationIds,\n    }\n    const start = new Date(Date.UTC(parsedQuery.data.year, 0, 1))\n    const end = new Date(Date.UTC(parsedQuery.data.year + 1, 0, 1))\n    const [canViewCountries, canViewRisk] = await Promise.all([\n      context.hasFeature('eudr.submissions.view'),\n      context.hasFeature('eudr.risk.view'),\n    ])\n\n    const [statements, countries, riskBlocks] = await Promise.all([\n      fetchStatementAggregates(context.db, scope, start, end),\n      canViewCountries\n        ? fetchCountryAggregates(context.db, scope, start, end)\n        : Promise.resolve(null),\n      canViewRisk\n        ? fetchRiskAggregates(context.db, scope, start, end)\n        : Promise.resolve(null),\n    ])\n\n    const report = annualReportSchema.parse({\n      year: parsedQuery.data.year,\n      generatedAt: new Date().toISOString(),\n      statements,\n      ...(countries !== null ? { countries } : {}),\n      ...(riskBlocks !== null ? riskBlocks : {}),\n    })\n\n    if (parsedQuery.data.format === 'csv') {\n      const serialized = buildAnnualReportCsv(report)\n      return new Response(serialized.content, {\n        status: 200,\n        headers: {\n          'Content-Type': 'text/csv; charset=utf-8',\n          'Content-Disposition': `attachment; filename=\"eudr-annual-report-${report.year}.csv\"`,\n        },\n      })\n    }\n\n    return Response.json(report)\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Annual report generation failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.annual_report_failed', 'Failed to generate EUDR annual report') },\n      { status: 500 },\n    )\n  }\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n  details: z.unknown().optional(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Generate an annual EUDR due diligence report',\n  methods: {\n    GET: {\n      summary: 'Generate an annual EUDR due diligence report',\n      description: 'Returns aggregate-only annual statement metrics. Country, risk, and mitigation blocks are omitted unless the caller holds their corresponding view features. Use format=csv for a statement-derived commodity export.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Annual EUDR due diligence report (JSON by default; with format=csv the same endpoint streams a statement-derived commodity table as text/csv)',\n          schema: annualReportSchema,\n        },\n        { status: 400, description: 'Invalid report query', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 500, description: 'Annual report generation failed', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,OAAO,iBAAiB,CAAC;AACrE,MAAM,oBAAoB,CAAC,aAAa,aAAa,aAAa,UAAU;AAE5E,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI;AAAA,EAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAChD,CAAC;AAwED,eAAe,sBAAsB,SAA2C;AAC9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,4BAA4B,cAAc;AAAA,IAC7D,CAAC;AAAA,EACH;AAEA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AAC/F,QAAM,kBAAkB,MAAM,QAAQ,kBAAkB,SAAS,IAC7D,kBAAkB,YAClB;AACJ,QAAM,wBAAwB,kBAAkB,cAAc,KAAK,SAAS;AAC5E,QAAM,WAAW,KAAK;AACtB,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,IAAI,GAAG,UAAgC;AAAA,IACvC;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG;AAAA,UAC7D;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,qBACP,IACA,OACA,OACA,KACA;AACA,MAAI,QAAQ,GACT,WAAW,+BAA+B,EAC1C,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,gBAAgB,MAAM,KAAK,EACjC,MAAM,gBAAgB,KAAK,GAAG,EAC9B,MAAM,UAAU,MAAM,CAAC,GAAG,iBAAiB,CAAC;AAE/C,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,uBACP,IACA,OACA,OACA,KACA;AACA,MAAI,QAAQ,GACT,WAAW,uBAAuB,EAClC,WAAW,cAAc,EACzB,OAAO,CAAC,MAAM,gBAAgB,cAAc,eAAe,CAAC,EAC5D,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,gBAAgB,MAAM,qBAAqB,IAAI,OAAO,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,EACpF,QAAQ,gBAAgB,KAAK,EAC7B,QAAQ,eAAe,MAAM,EAC7B,QAAQ,cAAc,MAAM,EAC5B,QAAQ,MAAM,MAAM;AAEvB,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAwB;AAC9C,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,SAAO,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;AACxD;AAEA,SAAS,kBAAkB,OAAwB;AACjD,QAAM,WAAW,OAAO,UAAU,WAC9B,MAAM,SAAS,IACd,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,QAAQ;AACtE,SAAO,kCAAkC,CAAC,EAAE,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY;AACvF;AAEA,eAAe,yBACb,IACA,OACA,OACA,KACqC;AACrC,QAAM,CAAC,eAAe,kBAAkB,oBAAoB,IAAI,MAAM,QAAQ,IAAI;AAAA,IAChF,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO,CAAC,UAAU,cAAsB,GAAG,OAAO,CAAC,CAAC,EACpD,QAAQ,QAAQ,EAChB,QAAQ,UAAU,KAAK,EACvB,QAAQ;AAAA,IACX,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO;AAAA,MACN;AAAA,MACA,cAAsB,GAAG,OAAO;AAAA,MAChC,mCAA2C,GAAG,aAAa;AAAA,IAC7D,CAAC,EACA,QAAQ,WAAW,EACnB,QAAQ,aAAa,KAAK,EAC1B,QAAQ;AAAA,IACX,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,8CAAsD,GAAG,UAAU;AAAA,IACrE,CAAC,EACA,MAAM,sBAAsB,UAAU,IAAI,EAC1C,MAAM,mCAA4C,EAClD,QAAQ,CAAC,aAAa,oBAAoB,CAAC,EAC3C,QAAQ,aAAa,KAAK,EAC1B,QAAQ,sBAAsB,KAAK,EACnC,QAAQ;AAAA,EACb,CAAC;AAED,QAAM,aAAa;AACnB,QAAM,gBAAgB;AACtB,QAAM,oBAAoB;AAC1B,QAAM,WAAW,OAAO;AAAA,IACtB,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,eAAe,IAAI,KAAK,CAAC,CAAC;AAAA,EACjE;AACA,QAAM,2BAA2B,oBAAI,IAAyC;AAC9E,aAAW,OAAO,mBAAmB;AACnC,UAAM,OAAO,yBAAyB,IAAI,IAAI,SAAS,KAAK,CAAC;AAC7D,SAAK,KAAK,GAAG;AACb,6BAAyB,IAAI,IAAI,WAAW,IAAI;AAAA,EAClD;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,QAAQ,EAAE,OAAO,CAAC,OAAO,UAAU,QAAQ,OAAO,CAAC;AAAA,IACxE;AAAA,IACA,aAAa,cAAc,IAAI,CAAC,SAAS;AAAA,MACvC,WAAW,IAAI;AAAA,MACf,OAAO,eAAe,IAAI,KAAK;AAAA,MAC/B,YAAY,kBAAkB,IAAI,WAAW;AAAA,MAC7C,yBAAyB;AAAA,SACtB,yBAAyB,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG,IAAI,CAAC,mBAAmB;AAAA,UAC1E,MAAM,cAAc;AAAA,UACpB,UAAU,OAAO,cAAc,aAAa,WACxC,cAAc,SAAS,SAAS,IAC/B,OAAO,cAAc,aAAa,YAAY,OAAO,cAAc,aAAa,WAC7E,cAAc,WACd;AAAA,QACV,EAAE;AAAA,MACJ;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAEA,eAAe,uBACb,IACA,OACA,OACA,KACiD;AACjD,MAAI,QAAQ,GACT,WAAW,2BAA2B,EACtC,OAAO;AAAA,IACN;AAAA,IACA,cAAsB,GAAG,kBAAkB;AAAA,EAC7C,CAAC,EACA,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,kBAAkB,UAAU,IAAI,EACtC,MAAM,+BAAwC,EAC9C,MAAM,gBAAgB,MAAM,qBAAqB,IAAI,OAAO,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,EACpF,QAAQ,gBAAgB,EACxB,QAAQ,kBAAkB,KAAK;AAElC,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AAEA,QAAM,OAAO,MAAM,MAAM,QAAQ;AACjC,SAAO,KAAK,QAAQ,CAAC,QAAQ;AAC3B,UAAM,UAAU,IAAI,SAAS,KAAK,EAAE,YAAY,KAAK;AACrD,QAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,WAAO,CAAC;AAAA,MACN;AAAA,MACA,MAAM,mBAAmB,OAAO;AAAA,MAChC,iBAAiB,eAAe,IAAI,gBAAgB;AAAA,IACtD,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,oBACb,IACA,OACA,OACA,KAIC;AACD,QAAM,oBAAoB,uBAAuB,IAAI,OAAO,OAAO,GAAG;AACtE,QAAM,sBAAsB,GACzB,WAAW,kBAAkB,GAAG,mBAAmB,CAAC,EACpD,OAAO,sBAAsB;AAEhC,MAAI,kBAAkB,GACnB,WAAW,yBAAyB,EACpC,OAAO;AAAA,IACN,cAAsB,GAAG,OAAO;AAAA,IAChC,kDAA0D,GAAG,WAAW;AAAA,EAC1E,CAAC,EACA,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,sBAAsB,MAAM,mBAAmB;AAExD,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,sBAAkB,gBAAgB,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACxF;AAEA,QAAM,CAAC,SAAS,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,GACG,WAAW,kBAAkB,GAAG,mBAAmB,CAAC,EACpD,OAAO;AAAA,MACN,cAAsB,GAAG,aAAa;AAAA,MACtC,uDAA+D,GAAG,YAAY;AAAA,MAC9E,2DAAmE,GAAG,gBAAgB;AAAA,MACtF,kDAA0D,GAAG,YAAY;AAAA,IAC3E,CAAC,EACA,iBAAiB;AAAA,IACpB,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AACD,QAAM,UAAW,WAAW,CAAC;AAC7B,QAAM,gBAAiB,iBAAiB,CAAC;AAEzC,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,aAAa,eAAe,QAAQ,WAAW;AAAA,MAC/C,YAAY,eAAe,QAAQ,UAAU;AAAA,MAC7C,eAAe,eAAe,QAAQ,cAAc;AAAA,MACpD,YAAY,eAAe,QAAQ,UAAU;AAAA,IAC/C;AAAA,IACA,YAAY;AAAA,MACV,OAAO,eAAe,cAAc,KAAK;AAAA,MACzC,WAAW,eAAe,cAAc,SAAS;AAAA,IACnD;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,QAAQ,CAAC,CAAC;AACzG,MAAI,CAAC,YAAY,SAAS;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK;AAAA,MACnB,OAAO,UAAU,6BAA6B,eAAe;AAAA,MAC7D,SAAS,YAAY,MAAM,QAAQ;AAAA,IACrC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,sBAAsB,OAAO;AACnD,UAAM,QAAqB;AAAA,MACzB,UAAU,QAAQ;AAAA,MAClB,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,YAAY,KAAK,MAAM,GAAG,CAAC,CAAC;AAC5D,UAAM,MAAM,IAAI,KAAK,KAAK,IAAI,YAAY,KAAK,OAAO,GAAG,GAAG,CAAC,CAAC;AAC9D,UAAM,CAAC,kBAAkB,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxD,QAAQ,WAAW,uBAAuB;AAAA,MAC1C,QAAQ,WAAW,gBAAgB;AAAA,IACrC,CAAC;AAED,UAAM,CAAC,YAAY,WAAW,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC5D,yBAAyB,QAAQ,IAAI,OAAO,OAAO,GAAG;AAAA,MACtD,mBACI,uBAAuB,QAAQ,IAAI,OAAO,OAAO,GAAG,IACpD,QAAQ,QAAQ,IAAI;AAAA,MACxB,cACI,oBAAoB,QAAQ,IAAI,OAAO,OAAO,GAAG,IACjD,QAAQ,QAAQ,IAAI;AAAA,IAC1B,CAAC;AAED,UAAM,SAAS,mBAAmB,MAAM;AAAA,MACtC,MAAM,YAAY,KAAK;AAAA,MACvB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,cAAc,OAAO,EAAE,UAAU,IAAI,CAAC;AAAA,MAC1C,GAAI,eAAe,OAAO,aAAa,CAAC;AAAA,IAC1C,CAAC;AAED,QAAI,YAAY,KAAK,WAAW,OAAO;AACrC,YAAM,aAAa,qBAAqB,MAAM;AAC9C,aAAO,IAAI,SAAS,WAAW,SAAS;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,uBAAuB,4CAA4C,OAAO,IAAI;AAAA,QAChF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,SAAS,KAAK,MAAM;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,mCAAmC,EAAE,KAAK,MAAM,CAAC;AAC9D,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,oCAAoC,uCAAuC,EAAE;AAAA,MAChG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,YAAY;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,YAAY;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { type Kysely, sql } from 'kysely'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport {\n  accumulateSupplementaryQuantities,\n  annualReportSchema,\n  buildAnnualReportCsv,\n  type AnnualReport,\n} from '../../../lib/annual-report'\nimport { getCountryRiskTier } from '../../../lib/reference-data'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst logger = createLogger('eudr').child({ route: 'reports/annual' })\nconst INCLUDED_STATUSES = ['submitted', 'available', 'withdrawn', 'archived'] as const\n\nconst querySchema = z.object({\n  year: z.coerce.number().int().min(2020).max(2100),\n  format: z.enum(['json', 'csv']).default('json'),\n})\n\ntype AnnualReportDatabase = {\n  eudr_due_diligence_statements: {\n    id: string\n    tenant_id: string\n    organization_id: string\n    submitted_at: Date | null\n    status: string\n    commodity: string\n    quantity_kg: string | number | null\n    supplementary_unit: string | null\n    supplementary_quantity: string | number | null\n    deleted_at: Date | null\n  }\n  eudr_evidence_submissions: {\n    statement_id: string | null\n    tenant_id: string\n    organization_id: string\n    origin_country: string | null\n    deleted_at: Date | null\n  }\n  eudr_risk_assessments: {\n    id: string\n    statement_id: string\n    tenant_id: string\n    organization_id: string\n    conclusion: string\n    is_simplified: boolean\n    assessed_at: Date\n    created_at: Date\n    deleted_at: Date | null\n  }\n  eudr_mitigation_actions: {\n    risk_assessment_id: string\n    tenant_id: string\n    organization_id: string\n    status: string\n    deleted_at: Date | null\n  }\n}\n\ntype ReportScope = {\n  tenantId: string\n  organizationIds: string[] | null\n}\n\ntype RequestContext = ReportScope & {\n  db: Kysely<AnnualReportDatabase>\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype StatusCountRow = { status: string; count: unknown }\ntype CommodityAggregateRow = {\n  commodity: string\n  count: unknown\n  quantity_kg: unknown\n}\ntype SupplementaryAggregateRow = {\n  commodity: string\n  unit: string | null\n  quantity: unknown\n}\ntype CountryAggregateRow = { country: string | null; submission_count: unknown }\ntype RiskAggregateRow = {\n  assessments: unknown\n  negligible: unknown\n  non_negligible: unknown\n  simplified: unknown\n}\ntype MitigationAggregateRow = { total: unknown; completed: unknown }\n\nasync function resolveRequestContext(request: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(request)\n  const { translate } = await resolveTranslations()\n\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, {\n      error: translate('eudr.errors.unauthorized', 'Unauthorized'),\n    })\n  }\n\n  const organizationScope = await resolveOrganizationScopeForRequest({ container, auth, request })\n  const organizationIds = Array.isArray(organizationScope.filterIds)\n    ? organizationScope.filterIds\n    : null\n  const featureOrganizationId = resolveSingleOrganizationIdOrDeny(organizationScope, auth) ?? null\n  const tenantId = auth.tenantId\n  const userId = auth.sub ?? null\n  const em = container.resolve('em') as EntityManager\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n\n  return {\n    db: em.getKysely<AnnualReportDatabase>(),\n    tenantId,\n    organizationIds,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], {\n          tenantId,\n          organizationId: featureOrganizationId,\n        })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nfunction buildStatementBucket(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n) {\n  let query = db\n    .selectFrom('eudr_due_diligence_statements')\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('submitted_at', '>=', start)\n    .where('submitted_at', '<', end)\n    .where('status', 'in', [...INCLUDED_STATUSES])\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n  return query\n}\n\nfunction buildLatestAssessments(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n) {\n  let query = db\n    .selectFrom('eudr_risk_assessments')\n    .distinctOn('statement_id')\n    .select(['id', 'statement_id', 'conclusion', 'is_simplified'])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('statement_id', 'in', buildStatementBucket(db, scope, start, end).select('id'))\n    .orderBy('statement_id', 'asc')\n    .orderBy('assessed_at', 'desc')\n    .orderBy('created_at', 'desc')\n    .orderBy('id', 'desc')\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n  return query\n}\n\nfunction normalizeCount(value: unknown): number {\n  const count = Number(value ?? 0)\n  return Number.isFinite(count) && count >= 0 ? count : 0\n}\n\nfunction normalizeQuantity(value: unknown): string {\n  const quantity = typeof value === 'bigint'\n    ? value.toString()\n    : (typeof value === 'string' || typeof value === 'number' ? value : null)\n  return accumulateSupplementaryQuantities([{ unit: 'KG', quantity }])[0]?.quantity ?? '0.000'\n}\n\nasync function fetchStatementAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<AnnualReport['statements']> {\n  const [rawStatusRows, rawCommodityRows, rawSupplementaryRows] = await Promise.all([\n    buildStatementBucket(db, scope, start, end)\n      .select(['status', sql<string>`count(*)`.as('count')])\n      .groupBy('status')\n      .orderBy('status', 'asc')\n      .execute(),\n    buildStatementBucket(db, scope, start, end)\n      .select([\n        'commodity',\n        sql<string>`count(*)`.as('count'),\n        sql<string>`coalesce(sum(quantity_kg), 0)`.as('quantity_kg'),\n      ])\n      .groupBy('commodity')\n      .orderBy('commodity', 'asc')\n      .execute(),\n    buildStatementBucket(db, scope, start, end)\n      .select([\n        'commodity',\n        'supplementary_unit as unit',\n        sql<string>`coalesce(sum(supplementary_quantity), 0)`.as('quantity'),\n      ])\n      .where('supplementary_unit', 'is not', null)\n      .where(sql<boolean>`trim(supplementary_unit) != ''`)\n      .groupBy(['commodity', 'supplementary_unit'])\n      .orderBy('commodity', 'asc')\n      .orderBy('supplementary_unit', 'asc')\n      .execute(),\n  ])\n\n  const statusRows = rawStatusRows as StatusCountRow[]\n  const commodityRows = rawCommodityRows as CommodityAggregateRow[]\n  const supplementaryRows = rawSupplementaryRows as SupplementaryAggregateRow[]\n  const byStatus = Object.fromEntries(\n    statusRows.map((row) => [row.status, normalizeCount(row.count)]),\n  )\n  const supplementaryByCommodity = new Map<string, SupplementaryAggregateRow[]>()\n  for (const row of supplementaryRows) {\n    const rows = supplementaryByCommodity.get(row.commodity) ?? []\n    rows.push(row)\n    supplementaryByCommodity.set(row.commodity, rows)\n  }\n\n  return {\n    total: Object.values(byStatus).reduce((total, count) => total + count, 0),\n    byStatus,\n    byCommodity: commodityRows.map((row) => ({\n      commodity: row.commodity,\n      count: normalizeCount(row.count),\n      quantityKg: normalizeQuantity(row.quantity_kg),\n      supplementaryQuantities: accumulateSupplementaryQuantities(\n        (supplementaryByCommodity.get(row.commodity) ?? []).map((supplementary) => ({\n          unit: supplementary.unit,\n          quantity: typeof supplementary.quantity === 'bigint'\n            ? supplementary.quantity.toString()\n            : (typeof supplementary.quantity === 'string' || typeof supplementary.quantity === 'number'\n                ? supplementary.quantity\n                : null),\n        })),\n      ),\n    })),\n  }\n}\n\nasync function fetchCountryAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<NonNullable<AnnualReport['countries']>> {\n  let query = db\n    .selectFrom('eudr_evidence_submissions')\n    .select([\n      'origin_country as country',\n      sql<string>`count(*)`.as('submission_count'),\n    ])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('origin_country', 'is not', null)\n    .where(sql<boolean>`trim(origin_country) != ''`)\n    .where('statement_id', 'in', buildStatementBucket(db, scope, start, end).select('id'))\n    .groupBy('origin_country')\n    .orderBy('origin_country', 'asc')\n\n  if (Array.isArray(scope.organizationIds)) {\n    query = query.where('organization_id', 'in', scope.organizationIds)\n  }\n\n  const rows = await query.execute() as CountryAggregateRow[]\n  return rows.flatMap((row) => {\n    const country = row.country?.trim().toUpperCase() ?? ''\n    if (country.length === 0) return []\n    return [{\n      country,\n      tier: getCountryRiskTier(country),\n      submissionCount: normalizeCount(row.submission_count),\n    }]\n  })\n}\n\nasync function fetchRiskAggregates(\n  db: Kysely<AnnualReportDatabase>,\n  scope: ReportScope,\n  start: Date,\n  end: Date,\n): Promise<{\n  risk: NonNullable<AnnualReport['risk']>\n  mitigation: NonNullable<AnnualReport['mitigation']>\n}> {\n  const latestAssessments = buildLatestAssessments(db, scope, start, end)\n  const latestAssessmentIds = db\n    .selectFrom(latestAssessments.as('latest_assessment'))\n    .select('latest_assessment.id')\n\n  let mitigationQuery = db\n    .selectFrom('eudr_mitigation_actions')\n    .select([\n      sql<string>`count(*)`.as('total'),\n      sql<string>`count(*) filter (where status = 'completed')`.as('completed'),\n    ])\n    .where('tenant_id', '=', scope.tenantId)\n    .where('deleted_at', 'is', null)\n    .where('risk_assessment_id', 'in', latestAssessmentIds)\n\n  if (Array.isArray(scope.organizationIds)) {\n    mitigationQuery = mitigationQuery.where('organization_id', 'in', scope.organizationIds)\n  }\n\n  const [rawRisk, rawMitigation] = await Promise.all([\n    db\n      .selectFrom(latestAssessments.as('latest_assessment'))\n      .select([\n        sql<string>`count(*)`.as('assessments'),\n        sql<string>`count(*) filter (where conclusion = 'negligible')`.as('negligible'),\n        sql<string>`count(*) filter (where conclusion = 'non_negligible')`.as('non_negligible'),\n        sql<string>`count(*) filter (where is_simplified = true)`.as('simplified'),\n      ])\n      .executeTakeFirst(),\n    mitigationQuery.executeTakeFirst(),\n  ])\n  const riskRow = (rawRisk ?? {}) as Partial<RiskAggregateRow>\n  const mitigationRow = (rawMitigation ?? {}) as Partial<MitigationAggregateRow>\n\n  return {\n    risk: {\n      assessments: normalizeCount(riskRow.assessments),\n      negligible: normalizeCount(riskRow.negligible),\n      nonNegligible: normalizeCount(riskRow.non_negligible),\n      simplified: normalizeCount(riskRow.simplified),\n    },\n    mitigation: {\n      total: normalizeCount(mitigationRow.total),\n      completed: normalizeCount(mitigationRow.completed),\n    },\n  }\n}\n\nexport async function GET(request: Request) {\n  const parsedQuery = querySchema.safeParse(Object.fromEntries(new URL(request.url).searchParams.entries()))\n  if (!parsedQuery.success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({\n      error: translate('eudr.errors.invalid_query', 'Invalid query'),\n      details: parsedQuery.error.flatten(),\n    }, { status: 400 })\n  }\n\n  try {\n    const context = await resolveRequestContext(request)\n    const scope: ReportScope = {\n      tenantId: context.tenantId,\n      organizationIds: context.organizationIds,\n    }\n    const start = new Date(Date.UTC(parsedQuery.data.year, 0, 1))\n    const end = new Date(Date.UTC(parsedQuery.data.year + 1, 0, 1))\n    const [canViewCountries, canViewRisk] = await Promise.all([\n      context.hasFeature('eudr.submissions.view'),\n      context.hasFeature('eudr.risk.view'),\n    ])\n\n    const [statements, countries, riskBlocks] = await Promise.all([\n      fetchStatementAggregates(context.db, scope, start, end),\n      canViewCountries\n        ? fetchCountryAggregates(context.db, scope, start, end)\n        : Promise.resolve(null),\n      canViewRisk\n        ? fetchRiskAggregates(context.db, scope, start, end)\n        : Promise.resolve(null),\n    ])\n\n    const report = annualReportSchema.parse({\n      year: parsedQuery.data.year,\n      generatedAt: new Date().toISOString(),\n      statements,\n      ...(countries !== null ? { countries } : {}),\n      ...(riskBlocks !== null ? riskBlocks : {}),\n    })\n\n    if (parsedQuery.data.format === 'csv') {\n      const serialized = buildAnnualReportCsv(report)\n      return new Response(serialized.content, {\n        status: 200,\n        headers: {\n          'Content-Type': 'text/csv; charset=utf-8',\n          'Content-Disposition': `attachment; filename=\"eudr-annual-report-${report.year}.csv\"`,\n        },\n      })\n    }\n\n    return Response.json(report)\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('Annual report generation failed', { err: error })\n    return Response.json(\n      { error: translate('eudr.errors.annual_report_failed', 'Failed to generate EUDR annual report') },\n      { status: 500 },\n    )\n  }\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n  details: z.unknown().optional(),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Generate an annual EUDR due diligence report',\n  methods: {\n    GET: {\n      summary: 'Generate an annual EUDR due diligence report',\n      description: 'Returns aggregate-only annual statement metrics. Country, risk, and mitigation blocks are omitted unless the caller holds their corresponding view features. Use format=csv for a statement-derived commodity export.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Annual EUDR due diligence report (JSON by default; with format=csv the same endpoint streams a statement-derived commodity table as text/csv)',\n          schema: annualReportSchema,\n        },\n        { status: 400, description: 'Invalid report query', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 500, description: 'Annual report generation failed', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AACA,SAAsB,WAAW;AACjC,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AAE5B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,SAAS,aAAa,MAAM,EAAE,MAAM,EAAE,OAAO,iBAAiB,CAAC;AACrE,MAAM,oBAAoB,CAAC,aAAa,aAAa,aAAa,UAAU;AAE5E,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,IAAI;AAAA,EAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAChD,CAAC;AAwED,eAAe,sBAAsB,SAA2C;AAC9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,OAAO;AAC7C,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,4BAA4B,cAAc;AAAA,IAC7D,CAAC;AAAA,EACH;AAEA,QAAM,oBAAoB,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AAC/F,QAAM,kBAAkB,MAAM,QAAQ,kBAAkB,SAAS,IAC7D,kBAAkB,YAClB;AACJ,QAAM,wBAAwB,kCAAkC,mBAAmB,IAAI,KAAK;AAC5F,QAAM,WAAW,KAAK;AACtB,QAAM,SAAS,KAAK,OAAO;AAC3B,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AAEA,SAAO;AAAA,IACL,IAAI,GAAG,UAAgC;AAAA,IACvC;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG;AAAA,UAC7D;AAAA,UACA,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,qBACP,IACA,OACA,OACA,KACA;AACA,MAAI,QAAQ,GACT,WAAW,+BAA+B,EAC1C,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,gBAAgB,MAAM,KAAK,EACjC,MAAM,gBAAgB,KAAK,GAAG,EAC9B,MAAM,UAAU,MAAM,CAAC,GAAG,iBAAiB,CAAC;AAE/C,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,uBACP,IACA,OACA,OACA,KACA;AACA,MAAI,QAAQ,GACT,WAAW,uBAAuB,EAClC,WAAW,cAAc,EACzB,OAAO,CAAC,MAAM,gBAAgB,cAAc,eAAe,CAAC,EAC5D,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,gBAAgB,MAAM,qBAAqB,IAAI,OAAO,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,EACpF,QAAQ,gBAAgB,KAAK,EAC7B,QAAQ,eAAe,MAAM,EAC7B,QAAQ,cAAc,MAAM,EAC5B,QAAQ,MAAM,MAAM;AAEvB,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAwB;AAC9C,QAAM,QAAQ,OAAO,SAAS,CAAC;AAC/B,SAAO,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;AACxD;AAEA,SAAS,kBAAkB,OAAwB;AACjD,QAAM,WAAW,OAAO,UAAU,WAC9B,MAAM,SAAS,IACd,OAAO,UAAU,YAAY,OAAO,UAAU,WAAW,QAAQ;AACtE,SAAO,kCAAkC,CAAC,EAAE,MAAM,MAAM,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY;AACvF;AAEA,eAAe,yBACb,IACA,OACA,OACA,KACqC;AACrC,QAAM,CAAC,eAAe,kBAAkB,oBAAoB,IAAI,MAAM,QAAQ,IAAI;AAAA,IAChF,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO,CAAC,UAAU,cAAsB,GAAG,OAAO,CAAC,CAAC,EACpD,QAAQ,QAAQ,EAChB,QAAQ,UAAU,KAAK,EACvB,QAAQ;AAAA,IACX,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO;AAAA,MACN;AAAA,MACA,cAAsB,GAAG,OAAO;AAAA,MAChC,mCAA2C,GAAG,aAAa;AAAA,IAC7D,CAAC,EACA,QAAQ,WAAW,EACnB,QAAQ,aAAa,KAAK,EAC1B,QAAQ;AAAA,IACX,qBAAqB,IAAI,OAAO,OAAO,GAAG,EACvC,OAAO;AAAA,MACN;AAAA,MACA;AAAA,MACA,8CAAsD,GAAG,UAAU;AAAA,IACrE,CAAC,EACA,MAAM,sBAAsB,UAAU,IAAI,EAC1C,MAAM,mCAA4C,EAClD,QAAQ,CAAC,aAAa,oBAAoB,CAAC,EAC3C,QAAQ,aAAa,KAAK,EAC1B,QAAQ,sBAAsB,KAAK,EACnC,QAAQ;AAAA,EACb,CAAC;AAED,QAAM,aAAa;AACnB,QAAM,gBAAgB;AACtB,QAAM,oBAAoB;AAC1B,QAAM,WAAW,OAAO;AAAA,IACtB,WAAW,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,eAAe,IAAI,KAAK,CAAC,CAAC;AAAA,EACjE;AACA,QAAM,2BAA2B,oBAAI,IAAyC;AAC9E,aAAW,OAAO,mBAAmB;AACnC,UAAM,OAAO,yBAAyB,IAAI,IAAI,SAAS,KAAK,CAAC;AAC7D,SAAK,KAAK,GAAG;AACb,6BAAyB,IAAI,IAAI,WAAW,IAAI;AAAA,EAClD;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,OAAO,QAAQ,EAAE,OAAO,CAAC,OAAO,UAAU,QAAQ,OAAO,CAAC;AAAA,IACxE;AAAA,IACA,aAAa,cAAc,IAAI,CAAC,SAAS;AAAA,MACvC,WAAW,IAAI;AAAA,MACf,OAAO,eAAe,IAAI,KAAK;AAAA,MAC/B,YAAY,kBAAkB,IAAI,WAAW;AAAA,MAC7C,yBAAyB;AAAA,SACtB,yBAAyB,IAAI,IAAI,SAAS,KAAK,CAAC,GAAG,IAAI,CAAC,mBAAmB;AAAA,UAC1E,MAAM,cAAc;AAAA,UACpB,UAAU,OAAO,cAAc,aAAa,WACxC,cAAc,SAAS,SAAS,IAC/B,OAAO,cAAc,aAAa,YAAY,OAAO,cAAc,aAAa,WAC7E,cAAc,WACd;AAAA,QACV,EAAE;AAAA,MACJ;AAAA,IACF,EAAE;AAAA,EACJ;AACF;AAEA,eAAe,uBACb,IACA,OACA,OACA,KACiD;AACjD,MAAI,QAAQ,GACT,WAAW,2BAA2B,EACtC,OAAO;AAAA,IACN;AAAA,IACA,cAAsB,GAAG,kBAAkB;AAAA,EAC7C,CAAC,EACA,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,kBAAkB,UAAU,IAAI,EACtC,MAAM,+BAAwC,EAC9C,MAAM,gBAAgB,MAAM,qBAAqB,IAAI,OAAO,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,EACpF,QAAQ,gBAAgB,EACxB,QAAQ,kBAAkB,KAAK;AAElC,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,YAAQ,MAAM,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACpE;AAEA,QAAM,OAAO,MAAM,MAAM,QAAQ;AACjC,SAAO,KAAK,QAAQ,CAAC,QAAQ;AAC3B,UAAM,UAAU,IAAI,SAAS,KAAK,EAAE,YAAY,KAAK;AACrD,QAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,WAAO,CAAC;AAAA,MACN;AAAA,MACA,MAAM,mBAAmB,OAAO;AAAA,MAChC,iBAAiB,eAAe,IAAI,gBAAgB;AAAA,IACtD,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,oBACb,IACA,OACA,OACA,KAIC;AACD,QAAM,oBAAoB,uBAAuB,IAAI,OAAO,OAAO,GAAG;AACtE,QAAM,sBAAsB,GACzB,WAAW,kBAAkB,GAAG,mBAAmB,CAAC,EACpD,OAAO,sBAAsB;AAEhC,MAAI,kBAAkB,GACnB,WAAW,yBAAyB,EACpC,OAAO;AAAA,IACN,cAAsB,GAAG,OAAO;AAAA,IAChC,kDAA0D,GAAG,WAAW;AAAA,EAC1E,CAAC,EACA,MAAM,aAAa,KAAK,MAAM,QAAQ,EACtC,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,sBAAsB,MAAM,mBAAmB;AAExD,MAAI,MAAM,QAAQ,MAAM,eAAe,GAAG;AACxC,sBAAkB,gBAAgB,MAAM,mBAAmB,MAAM,MAAM,eAAe;AAAA,EACxF;AAEA,QAAM,CAAC,SAAS,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,GACG,WAAW,kBAAkB,GAAG,mBAAmB,CAAC,EACpD,OAAO;AAAA,MACN,cAAsB,GAAG,aAAa;AAAA,MACtC,uDAA+D,GAAG,YAAY;AAAA,MAC9E,2DAAmE,GAAG,gBAAgB;AAAA,MACtF,kDAA0D,GAAG,YAAY;AAAA,IAC3E,CAAC,EACA,iBAAiB;AAAA,IACpB,gBAAgB,iBAAiB;AAAA,EACnC,CAAC;AACD,QAAM,UAAW,WAAW,CAAC;AAC7B,QAAM,gBAAiB,iBAAiB,CAAC;AAEzC,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,aAAa,eAAe,QAAQ,WAAW;AAAA,MAC/C,YAAY,eAAe,QAAQ,UAAU;AAAA,MAC7C,eAAe,eAAe,QAAQ,cAAc;AAAA,MACpD,YAAY,eAAe,QAAQ,UAAU;AAAA,IAC/C;AAAA,IACA,YAAY;AAAA,MACV,OAAO,eAAe,cAAc,KAAK;AAAA,MACzC,WAAW,eAAe,cAAc,SAAS;AAAA,IACnD;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,SAAkB;AAC1C,QAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,IAAI,QAAQ,GAAG,EAAE,aAAa,QAAQ,CAAC,CAAC;AACzG,MAAI,CAAC,YAAY,SAAS;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK;AAAA,MACnB,OAAO,UAAU,6BAA6B,eAAe;AAAA,MAC7D,SAAS,YAAY,MAAM,QAAQ;AAAA,IACrC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACpB;AAEA,MAAI;AACF,UAAM,UAAU,MAAM,sBAAsB,OAAO;AACnD,UAAM,QAAqB;AAAA,MACzB,UAAU,QAAQ;AAAA,MAClB,iBAAiB,QAAQ;AAAA,IAC3B;AACA,UAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,YAAY,KAAK,MAAM,GAAG,CAAC,CAAC;AAC5D,UAAM,MAAM,IAAI,KAAK,KAAK,IAAI,YAAY,KAAK,OAAO,GAAG,GAAG,CAAC,CAAC;AAC9D,UAAM,CAAC,kBAAkB,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MACxD,QAAQ,WAAW,uBAAuB;AAAA,MAC1C,QAAQ,WAAW,gBAAgB;AAAA,IACrC,CAAC;AAED,UAAM,CAAC,YAAY,WAAW,UAAU,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC5D,yBAAyB,QAAQ,IAAI,OAAO,OAAO,GAAG;AAAA,MACtD,mBACI,uBAAuB,QAAQ,IAAI,OAAO,OAAO,GAAG,IACpD,QAAQ,QAAQ,IAAI;AAAA,MACxB,cACI,oBAAoB,QAAQ,IAAI,OAAO,OAAO,GAAG,IACjD,QAAQ,QAAQ,IAAI;AAAA,IAC1B,CAAC;AAED,UAAM,SAAS,mBAAmB,MAAM;AAAA,MACtC,MAAM,YAAY,KAAK;AAAA,MACvB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC;AAAA,MACA,GAAI,cAAc,OAAO,EAAE,UAAU,IAAI,CAAC;AAAA,MAC1C,GAAI,eAAe,OAAO,aAAa,CAAC;AAAA,IAC1C,CAAC;AAED,QAAI,YAAY,KAAK,WAAW,OAAO;AACrC,YAAM,aAAa,qBAAqB,MAAM;AAC9C,aAAO,IAAI,SAAS,WAAW,SAAS;AAAA,QACtC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,uBAAuB,4CAA4C,OAAO,IAAI;AAAA,QAChF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,WAAO,SAAS,KAAK,MAAM;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,mCAAmC,EAAE,KAAK,MAAM,CAAC;AAC9D,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,oCAAoC,uCAAuC,EAAE;AAAA,MAChG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAAA,EAChB,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,YAAY;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,YAAY;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/statements/[id]/export/route.js

@@ -5,6 +5,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import {
   EudrDueDiligenceStatement,
   EudrEvidenceSubmission,
@@ -230,7 +231,7 @@ async function loadExportData(req, id) {
     if (Array.isArray(orgScope?.filterIds)) {
       statementFilter.organizationId = { $in: orgScope.filterIds };
     } else {
-      const organizationId = orgScope?.selectedId ?? auth.orgId;
+      const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth);
       if (!organizationId) {
         return { response: Response.json({ error: translate("eudr.errors.forbidden", "Forbidden") }, { status: 403 }) };
       }

package/dist/modules/eudr/api/statements/[id]/export/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/eudr/api/statements/%5Bid%5D/export/route.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport type { NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport {\n  EudrDueDiligenceStatement,\n  EudrEvidenceSubmission,\n  EudrMitigationAction,\n  EudrPlot,\n  EudrProductMapping,\n  EudrRiskAssessment,\n} from '../../../../data/entities'\nimport {\n  EUDR_ACTIVITY_TYPES,\n  EUDR_ACTOR_ROLES,\n  EUDR_COMMODITIES,\n  EUDR_MITIGATION_STATUSES,\n  EUDR_MITIGATION_TYPES,\n  EUDR_RISK_CONCLUSIONS,\n  EUDR_RISK_TIERS,\n  EUDR_STATEMENT_STATUSES,\n  EUDR_SUBMISSION_STATUSES,\n} from '../../../../data/validators'\nimport { hasMissingSpecies } from '../../../../lib/species'\nimport { EUDR_AMEND_WINDOW_MS } from '../../../../lib/statement-lifecycle'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view', 'eudr.submissions.view', 'eudr.mappings.view', 'eudr.plots.view', 'eudr.risk.view'] },\n}\n\nconst uuidSchema = z.string().uuid()\nconst querySchema = z.object({\n  format: z.enum(['json', 'geojson']).optional(),\n})\n\ntype AuthenticatedContext = Exclude<AuthContext, null>\ntype Scope = { tenantId: string; organizationId: string }\ntype GeoJsonGeometry = Record<string, unknown> & { type: string }\ntype GeoJsonFeature = {\n  type: 'Feature'\n  geometry: GeoJsonGeometry\n  properties: Record<string, unknown>\n}\n\nfunction hasPrivilegedStatementExportAccess(auth: AuthenticatedContext): boolean {\n  return auth.isSuperAdmin === true\n}\n\nfunction toIsoString(value: unknown): string | null {\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value !== 'string' || value.length === 0) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nfunction stringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  return value.filter((entry): entry is string => typeof entry === 'string')\n}\n\nfunction asNumber(value: unknown): number {\n  if (typeof value === 'number' && Number.isFinite(value)) return value\n  if (typeof value === 'string' && value.trim().length > 0) {\n    const parsed = Number(value)\n    if (Number.isFinite(parsed)) return parsed\n  }\n  return 0\n}\n\nfunction addMilliseconds(value: Date | null | undefined, milliseconds: number): string | null {\n  if (!value) return null\n  const time = value.getTime()\n  if (Number.isNaN(time)) return null\n  return new Date(time + milliseconds).toISOString()\n}\n\nfunction addYears(value: Date | null | undefined, years: number): string | null {\n  if (!value) return null\n  const time = value.getTime()\n  if (Number.isNaN(time)) return null\n  const date = new Date(time)\n  date.setUTCFullYear(date.getUTCFullYear() + years)\n  return date.toISOString()\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction normalizeGeometry(value: unknown): GeoJsonGeometry | null {\n  if (!isRecord(value) || typeof value.type !== 'string') return null\n  if (value.type === 'Feature') {\n    return normalizeGeometry(value.geometry)\n  }\n  if (value.type === 'Point' || value.type === 'Polygon' || value.type === 'MultiPolygon') {\n    return value as GeoJsonGeometry\n  }\n  return null\n}\n\nfunction statementPayload(statement: EudrDueDiligenceStatement) {\n  return {\n    id: statement.id,\n    title: statement.title,\n    commodity: statement.commodity,\n    referenceNumber: statement.referenceNumber ?? null,\n    verificationNumber: statement.verificationNumber ?? null,\n    status: statement.status,\n    activityType: statement.activityType ?? null,\n    actorRole: statement.actorRole ?? null,\n    referencedStatements: statement.referencedStatements ?? [],\n    quantityKg: statement.quantityKg ?? null,\n    supplementaryUnit: statement.supplementaryUnit ?? null,\n    supplementaryQuantity: statement.supplementaryQuantity ?? null,\n    orderId: statement.orderId ?? null,\n    submittedAt: toIsoString(statement.submittedAt),\n    referenceIssuedAt: toIsoString(statement.referenceIssuedAt),\n    orderSnapshot: statement.orderSnapshot ?? null,\n    notes: statement.notes ?? null,\n    createdAt: toIsoString(statement.createdAt),\n    updatedAt: toIsoString(statement.updatedAt),\n  }\n}\n\nfunction submissionPayload(submission: EudrEvidenceSubmission) {\n  return {\n    id: submission.id,\n    supplierEntityId: submission.supplierEntityId,\n    supplierSnapshot: submission.supplierSnapshot ?? null,\n    commodity: submission.commodity,\n    productMappingId: submission.productMappingId ?? null,\n    statementId: submission.statementId ?? null,\n    originCountry: submission.originCountry ?? null,\n    geolocation: submission.geolocation ?? null,\n    quantityKg: submission.quantityKg ?? null,\n    batchNumber: submission.batchNumber ?? null,\n    harvestFrom: toIsoString(submission.harvestFrom),\n    harvestTo: toIsoString(submission.harvestTo),\n    producerName: submission.producerName ?? null,\n    attachmentIds: stringArray(submission.attachmentIds),\n    plotIds: stringArray(submission.plotIds),\n    status: submission.status,\n    completenessScore: asNumber(submission.completenessScore),\n    missingFields: stringArray(submission.missingFields),\n    notes: submission.notes ?? null,\n    createdAt: toIsoString(submission.createdAt),\n    updatedAt: toIsoString(submission.updatedAt),\n  }\n}\n\nfunction productMappingPayload(mapping: EudrProductMapping) {\n  return {\n    id: mapping.id,\n    productId: mapping.productId,\n    productSnapshot: mapping.productSnapshot ?? null,\n    commodity: mapping.commodity,\n    hsCode: mapping.hsCode ?? null,\n    speciesScientificName: mapping.speciesScientificName ?? null,\n    speciesCommonName: mapping.speciesCommonName ?? null,\n    isInScope: mapping.isInScope,\n    notes: mapping.notes ?? null,\n    createdAt: toIsoString(mapping.createdAt),\n    updatedAt: toIsoString(mapping.updatedAt),\n  }\n}\n\nfunction riskAssessmentPayload(assessment: EudrRiskAssessment | null) {\n  if (!assessment) return null\n  return {\n    id: assessment.id,\n    statementId: assessment.statementId,\n    countryRisks: assessment.countryRisks,\n    overallTier: assessment.overallTier,\n    criteria: assessment.criteria,\n    conclusion: assessment.conclusion,\n    isSimplified: assessment.isSimplified,\n    assessedAt: toIsoString(assessment.assessedAt),\n    assessedByName: assessment.assessedByName ?? null,\n    reviewDueAt: toIsoString(assessment.reviewDueAt),\n    notes: assessment.notes ?? null,\n    createdAt: toIsoString(assessment.createdAt),\n    updatedAt: toIsoString(assessment.updatedAt),\n  }\n}\n\nfunction mitigationActionPayload(action: EudrMitigationAction) {\n  return {\n    id: action.id,\n    riskAssessmentId: action.riskAssessmentId,\n    actionType: action.actionType,\n    title: action.title,\n    description: action.description ?? null,\n    status: action.status,\n    dueDate: toIsoString(action.dueDate),\n    completedAt: toIsoString(action.completedAt),\n    notes: action.notes ?? null,\n    createdAt: toIsoString(action.createdAt),\n    updatedAt: toIsoString(action.updatedAt),\n  }\n}\n\nfunction plotPayload(plot: EudrPlot) {\n  return {\n    id: plot.id,\n    supplierEntityId: plot.supplierEntityId,\n    supplierSnapshot: plot.supplierSnapshot ?? null,\n    name: plot.name,\n    externalId: plot.externalId ?? null,\n    description: plot.description ?? null,\n    originCountry: plot.originCountry,\n    plotType: plot.plotType,\n    geometry: plot.geometry ?? null,\n    areaHa: plot.areaHa ?? null,\n    validationWarnings: stringArray(plot.validationWarnings),\n    producerName: plot.producerName ?? null,\n    isActive: plot.isActive,\n    createdAt: toIsoString(plot.createdAt),\n    updatedAt: toIsoString(plot.updatedAt),\n  }\n}\n\nfunction lifecyclePayload(statement: EudrDueDiligenceStatement) {\n  const retentionBase = statement.submittedAt ?? statement.createdAt\n  return {\n    activityType: statement.activityType ?? null,\n    actorRole: statement.actorRole ?? null,\n    submittedAt: toIsoString(statement.submittedAt),\n    referenceIssuedAt: toIsoString(statement.referenceIssuedAt),\n    amendWindowEndsAt: addMilliseconds(statement.referenceIssuedAt, EUDR_AMEND_WINDOW_MS),\n    retainUntil: addYears(retentionBase, 5),\n  }\n}\n\nasync function loadExportData(req: NextRequest, id: string) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return { response: Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 }) }\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const privileged = hasPrivilegedStatementExportAccess(auth)\n\n  const statementFilter: FilterQuery<EudrDueDiligenceStatement> = {\n    id,\n    deletedAt: null,\n  }\n  // Tenant-bound sessions always keep tenant scoping. Only a global super-admin\n  // without tenant context may look up across tenants, and only super-admins\n  // bypass organization scoping.\n  if (auth.tenantId) {\n    statementFilter.tenantId = auth.tenantId\n  } else if (!auth.isSuperAdmin) {\n    return { response: Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 }) }\n  }\n  if (!privileged) {\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (Array.isArray(orgScope?.filterIds)) {\n      statementFilter.organizationId = { $in: orgScope.filterIds }\n    } else {\n      const organizationId = orgScope?.selectedId ?? auth.orgId\n      if (!organizationId) {\n        return { response: Response.json({ error: translate('eudr.errors.forbidden', 'Forbidden') }, { status: 403 }) }\n      }\n      statementFilter.organizationId = organizationId\n    }\n  }\n\n  const statement = await em.findOne(EudrDueDiligenceStatement, statementFilter)\n  if (!statement) {\n    return { response: Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 }) }\n  }\n\n  const scope: Scope = {\n    tenantId: statement.tenantId,\n    organizationId: statement.organizationId,\n  }\n\n  const submissions = await findWithDecryption(\n    em,\n    EudrEvidenceSubmission,\n    {\n      statementId: id,\n      deletedAt: null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    {},\n    scope,\n  )\n\n  const productMappingIds = Array.from(\n    new Set(\n      submissions\n        .map((submission) => submission.productMappingId)\n        .filter((productMappingId): productMappingId is string => typeof productMappingId === 'string' && productMappingId.length > 0),\n    ),\n  )\n  const productMappings = productMappingIds.length\n    ? await em.find(EudrProductMapping, {\n        id: { $in: productMappingIds },\n        deletedAt: null,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      } as FilterQuery<EudrProductMapping>)\n    : []\n\n  const riskAssessments = await findWithDecryption(\n    em,\n    EudrRiskAssessment,\n    {\n      statementId: id,\n      deletedAt: null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    { orderBy: { assessedAt: 'DESC', createdAt: 'DESC' } },\n    scope,\n  )\n  const latestRiskAssessment = riskAssessments[0] ?? null\n\n  const mitigationActions = latestRiskAssessment\n    ? await findWithDecryption(\n        em,\n        EudrMitigationAction,\n        {\n          riskAssessmentId: latestRiskAssessment.id,\n          deletedAt: null,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        },\n        { orderBy: { createdAt: 'ASC' } },\n        scope,\n      )\n    : []\n\n  const plotIds = Array.from(\n    new Set(\n      submissions\n        .flatMap((submission) => stringArray(submission.plotIds))\n        .filter((plotId) => plotId.length > 0),\n    ),\n  )\n  const plots = plotIds.length\n    ? await findWithDecryption(\n        em,\n        EudrPlot,\n        {\n          id: { $in: plotIds },\n          deletedAt: null,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        },\n        {},\n        scope,\n      )\n    : []\n\n  const supplierNames = await loadSupplierNames(container.resolve('queryEngine') as QueryEngine, scope, plots)\n\n  return {\n    statement,\n    submissions,\n    productMappings,\n    latestRiskAssessment,\n    mitigationActions,\n    plots,\n    supplierNames,\n  }\n}\n\nasync function loadSupplierNames(\n  queryEngine: QueryEngine,\n  scope: Scope,\n  plots: EudrPlot[],\n): Promise<Map<string, string>> {\n  const supplierIds = Array.from(\n    new Set(\n      plots\n        .filter((plot) => !plot.supplierSnapshot?.displayName)\n        .map((plot) => plot.supplierEntityId)\n        .filter((supplierId): supplierId is string => typeof supplierId === 'string' && supplierId.length > 0),\n    ),\n  )\n  if (!supplierIds.length) return new Map()\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to an empty map when the peer is absent.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return new Map()\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: supplierIds } },\n      page: { page: 1, pageSize: Math.min(supplierIds.length, 100) },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? undefined,\n    })\n    const names = new Map<string, string>()\n    for (const item of result.items) {\n      const supplierId = typeof item.id === 'string' ? item.id : null\n      const rawName = item.display_name ?? item.displayName\n      const displayName = typeof rawName === 'string' && rawName.length ? rawName : null\n      if (supplierId && displayName) names.set(supplierId, displayName)\n    }\n    return names\n  } catch {\n    return new Map()\n  }\n}\n\nfunction buildJsonPacket(data: Exclude<Awaited<ReturnType<typeof loadExportData>>, { response: Response }>) {\n  const submissionItems = data.submissions.map(submissionPayload)\n  const gaps = submissionItems\n    .filter((submission) => submission.status !== 'verified' || submission.completenessScore !== 100)\n    .map((submission) => ({\n      submissionId: submission.id,\n      status: submission.status,\n      completenessScore: submission.completenessScore,\n      missingFields: submission.missingFields,\n    }))\n  const verifiedCount = submissionItems.filter((submission) => submission.status === 'verified').length\n  const completeCount = submissionItems.filter((submission) => submission.completenessScore === 100).length\n\n  return {\n    generatedAt: new Date().toISOString(),\n    statement: statementPayload(data.statement),\n    submissions: submissionItems,\n    productMappings: data.productMappings.map(productMappingPayload),\n    readiness: {\n      ready: submissionItems.length > 0 && submissionItems.every((submission) => submission.status === 'verified' && submission.completenessScore === 100),\n      submissionCount: submissionItems.length,\n      verifiedCount,\n      completeCount,\n      gaps,\n      warnings: data.productMappings.some((mapping) => hasMissingSpecies(mapping))\n        ? ['eudr.warnings.speciesMissing']\n        : [],\n    },\n    riskAssessment: riskAssessmentPayload(data.latestRiskAssessment),\n    mitigationActions: data.mitigationActions.map(mitigationActionPayload),\n    plots: data.plots.map(plotPayload),\n    lifecycle: lifecyclePayload(data.statement),\n    referencedStatements: data.statement.referencedStatements ?? [],\n  }\n}\n\nfunction buildGeoJsonPacket(data: Exclude<Awaited<ReturnType<typeof loadExportData>>, { response: Response }>) {\n  const features: GeoJsonFeature[] = []\n  for (const plot of data.plots) {\n    const geometry = normalizeGeometry(plot.geometry)\n    if (!geometry) continue\n    features.push({\n      type: 'Feature',\n      geometry,\n      properties: {\n        plotId: plot.id,\n        plotName: plot.name,\n        supplierName: plot.supplierSnapshot?.displayName ?? data.supplierNames.get(plot.supplierEntityId) ?? null,\n        producerName: plot.producerName ?? null,\n        originCountry: plot.originCountry,\n        areaHa: plot.areaHa ?? null,\n      },\n    })\n  }\n\n  for (const submission of data.submissions) {\n    const geometry = normalizeGeometry(submission.geolocation)\n    if (!geometry) continue\n    features.push({\n      type: 'Feature',\n      geometry,\n      properties: {\n        submissionId: submission.id,\n        source: 'submission_geolocation',\n      },\n    })\n  }\n\n  return {\n    type: 'FeatureCollection',\n    features,\n  }\n}\n\nexport async function GET(\n  req: NextRequest,\n  context: { params: Promise<{ id: string }> },\n) {\n  const { id } = await context.params\n  if (!uuidSchema.safeParse(id).success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const parsedQuery = querySchema.safeParse(Object.fromEntries(req.nextUrl.searchParams.entries()))\n  if (!parsedQuery.success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({ error: translate('eudr.errors.invalid_query', 'Invalid query'), details: parsedQuery.error.flatten() }, { status: 400 })\n  }\n\n  const data = await loadExportData(req, id)\n  if ('response' in data) return data.response\n\n  if (parsedQuery.data.format === 'geojson') {\n    return new Response(JSON.stringify(buildGeoJsonPacket(data)), {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/geo+json',\n      },\n    })\n  }\n\n  return Response.json(buildJsonPacket(data))\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nconst referencedStatementResponseSchema = z.object({\n  referenceNumber: z.string(),\n  verificationNumber: z.string().nullable().optional(),\n})\n\nconst exportResponseSchema = z.object({\n  generatedAt: z.string(),\n  statement: z.object({\n    id: z.string().uuid(),\n    title: z.string(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    referenceNumber: z.string().nullable(),\n    verificationNumber: z.string().nullable(),\n    status: z.enum(EUDR_STATEMENT_STATUSES),\n    activityType: z.enum(EUDR_ACTIVITY_TYPES).nullable(),\n    actorRole: z.enum(EUDR_ACTOR_ROLES).nullable(),\n    referencedStatements: z.array(referencedStatementResponseSchema),\n    quantityKg: z.union([z.string(), z.number()]).nullable(),\n    supplementaryUnit: z.string().nullable(),\n    supplementaryQuantity: z.union([z.string(), z.number()]).nullable(),\n    orderId: z.string().uuid().nullable(),\n    submittedAt: z.string().nullable(),\n    referenceIssuedAt: z.string().nullable(),\n    orderSnapshot: z.object({\n      orderNumber: z.string().nullable().optional(),\n    }).nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  }),\n  submissions: z.array(z.object({\n    id: z.string().uuid(),\n    supplierEntityId: z.string().uuid(),\n    supplierSnapshot: z.object({\n      displayName: z.string().nullable().optional(),\n    }).nullable(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    productMappingId: z.string().uuid().nullable(),\n    statementId: z.string().uuid().nullable(),\n    originCountry: z.string().nullable(),\n    geolocation: z.unknown().nullable(),\n    quantityKg: z.union([z.string(), z.number()]).nullable(),\n    batchNumber: z.string().nullable(),\n    harvestFrom: z.string().nullable(),\n    harvestTo: z.string().nullable(),\n    producerName: z.string().nullable(),\n    attachmentIds: z.array(z.string().uuid()),\n    plotIds: z.array(z.string().uuid()),\n    status: z.enum(EUDR_SUBMISSION_STATUSES),\n    completenessScore: z.number(),\n    missingFields: z.array(z.string()),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  productMappings: z.array(z.object({\n    id: z.string().uuid(),\n    productId: z.string().uuid(),\n    productSnapshot: z.object({\n      name: z.string().nullable().optional(),\n      sku: z.string().nullable().optional(),\n    }).nullable(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    hsCode: z.string().nullable(),\n    speciesScientificName: z.string().nullable(),\n    speciesCommonName: z.string().nullable(),\n    isInScope: z.boolean(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  readiness: z.object({\n    ready: z.boolean(),\n    submissionCount: z.number(),\n    verifiedCount: z.number(),\n    completeCount: z.number(),\n    warnings: z.array(z.string()),\n    gaps: z.array(z.object({\n      submissionId: z.string().uuid(),\n      status: z.enum(EUDR_SUBMISSION_STATUSES),\n      completenessScore: z.number(),\n      missingFields: z.array(z.string()),\n    })),\n  }),\n  riskAssessment: z.object({\n    id: z.string().uuid(),\n    statementId: z.string().uuid(),\n    countryRisks: z.array(z.object({\n      country: z.string(),\n      tier: z.string(),\n    })),\n    overallTier: z.enum(EUDR_RISK_TIERS),\n    criteria: z.record(z.string(), z.unknown()),\n    conclusion: z.enum(EUDR_RISK_CONCLUSIONS),\n    isSimplified: z.boolean(),\n    assessedAt: z.string().nullable(),\n    assessedByName: z.string().nullable(),\n    reviewDueAt: z.string().nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  }).nullable(),\n  mitigationActions: z.array(z.object({\n    id: z.string().uuid(),\n    riskAssessmentId: z.string().uuid(),\n    actionType: z.enum(EUDR_MITIGATION_TYPES),\n    title: z.string(),\n    description: z.string().nullable(),\n    status: z.enum(EUDR_MITIGATION_STATUSES),\n    dueDate: z.string().nullable(),\n    completedAt: z.string().nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  plots: z.array(z.object({\n    id: z.string().uuid(),\n    supplierEntityId: z.string().uuid(),\n    supplierSnapshot: z.object({\n      displayName: z.string().nullable().optional(),\n    }).nullable(),\n    name: z.string(),\n    externalId: z.string().nullable(),\n    description: z.string().nullable(),\n    originCountry: z.string(),\n    plotType: z.string(),\n    geometry: z.unknown().nullable(),\n    areaHa: z.union([z.string(), z.number()]).nullable(),\n    validationWarnings: z.array(z.string()),\n    producerName: z.string().nullable(),\n    isActive: z.boolean(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  lifecycle: z.object({\n    activityType: z.enum(EUDR_ACTIVITY_TYPES).nullable(),\n    actorRole: z.enum(EUDR_ACTOR_ROLES).nullable(),\n    submittedAt: z.string().nullable(),\n    referenceIssuedAt: z.string().nullable(),\n    amendWindowEndsAt: z.string().nullable(),\n    retainUntil: z.string().nullable(),\n  }),\n  referencedStatements: z.array(referencedStatementResponseSchema),\n})\n\nconst geoJsonResponseSchema = z.object({\n  type: z.literal('FeatureCollection'),\n  features: z.array(z.object({\n    type: z.literal('Feature'),\n    geometry: z.unknown(),\n    properties: z.record(z.string(), z.unknown()),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Export due diligence statement evidence packet',\n  methods: {\n    GET: {\n      summary: 'Export due diligence statement evidence packet',\n      description: 'Returns a due diligence statement with decrypted evidence submissions, product mappings, readiness details, lifecycle fields, latest risk assessment, mitigation actions, and referenced plots. Use `format=geojson` to export referenced plot and legacy submission geolocations.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Due diligence statement evidence packet',\n          schema: exportResponseSchema,\n        },\n        {\n          status: 200,\n          description: 'GeoJSON plot and legacy submission geolocation export',\n          mediaType: 'application/geo+json',\n          schema: geoJsonResponseSchema,\n        },\n      ],\n      errors: [\n        {\n          status: 404,\n          description: 'Statement not found',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAEA,SAAS,SAAS;AAGlB,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,0CAA0C;AACnD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,yBAAyB,sBAAsB,mBAAmB,gBAAgB,EAAE;AAC1J;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK;AACnC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,SAAS,CAAC,EAAE,SAAS;AAC/C,CAAC;AAWD,SAAS,mCAAmC,MAAqC;AAC/E,SAAO,KAAK,iBAAiB;AAC/B;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,SAAS,YAAY,OAA0B;AAC7C,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC3E;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,EAAG,QAAO;AAChE,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,OAAO,SAAS,MAAM,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAgC,cAAqC;AAC5F,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,OAAO,MAAM,IAAI,EAAG,QAAO;AAC/B,SAAO,IAAI,KAAK,OAAO,YAAY,EAAE,YAAY;AACnD;AAEA,SAAS,SAAS,OAAgC,OAA8B;AAC9E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,OAAO,MAAM,IAAI,EAAG,QAAO;AAC/B,QAAM,OAAO,IAAI,KAAK,IAAI;AAC1B,OAAK,eAAe,KAAK,eAAe,IAAI,KAAK;AACjD,SAAO,KAAK,YAAY;AAC1B;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,kBAAkB,OAAwC;AACjE,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,kBAAkB,MAAM,QAAQ;AAAA,EACzC;AACA,MAAI,MAAM,SAAS,WAAW,MAAM,SAAS,aAAa,MAAM,SAAS,gBAAgB;AACvF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,WAAsC;AAC9D,SAAO;AAAA,IACL,IAAI,UAAU;AAAA,IACd,OAAO,UAAU;AAAA,IACjB,WAAW,UAAU;AAAA,IACrB,iBAAiB,UAAU,mBAAmB;AAAA,IAC9C,oBAAoB,UAAU,sBAAsB;AAAA,IACpD,QAAQ,UAAU;AAAA,IAClB,cAAc,UAAU,gBAAgB;AAAA,IACxC,WAAW,UAAU,aAAa;AAAA,IAClC,sBAAsB,UAAU,wBAAwB,CAAC;AAAA,IACzD,YAAY,UAAU,cAAc;AAAA,IACpC,mBAAmB,UAAU,qBAAqB;AAAA,IAClD,uBAAuB,UAAU,yBAAyB;AAAA,IAC1D,SAAS,UAAU,WAAW;AAAA,IAC9B,aAAa,YAAY,UAAU,WAAW;AAAA,IAC9C,mBAAmB,YAAY,UAAU,iBAAiB;AAAA,IAC1D,eAAe,UAAU,iBAAiB;AAAA,IAC1C,OAAO,UAAU,SAAS;AAAA,IAC1B,WAAW,YAAY,UAAU,SAAS;AAAA,IAC1C,WAAW,YAAY,UAAU,SAAS;AAAA,EAC5C;AACF;AAEA,SAAS,kBAAkB,YAAoC;AAC7D,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,kBAAkB,WAAW;AAAA,IAC7B,kBAAkB,WAAW,oBAAoB;AAAA,IACjD,WAAW,WAAW;AAAA,IACtB,kBAAkB,WAAW,oBAAoB;AAAA,IACjD,aAAa,WAAW,eAAe;AAAA,IACvC,eAAe,WAAW,iBAAiB;AAAA,IAC3C,aAAa,WAAW,eAAe;AAAA,IACvC,YAAY,WAAW,cAAc;AAAA,IACrC,aAAa,WAAW,eAAe;AAAA,IACvC,aAAa,YAAY,WAAW,WAAW;AAAA,IAC/C,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,cAAc,WAAW,gBAAgB;AAAA,IACzC,eAAe,YAAY,WAAW,aAAa;AAAA,IACnD,SAAS,YAAY,WAAW,OAAO;AAAA,IACvC,QAAQ,WAAW;AAAA,IACnB,mBAAmB,SAAS,WAAW,iBAAiB;AAAA,IACxD,eAAe,YAAY,WAAW,aAAa;AAAA,IACnD,OAAO,WAAW,SAAS;AAAA,IAC3B,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,WAAW,YAAY,WAAW,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,sBAAsB,SAA6B;AAC1D,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ;AAAA,IACnB,QAAQ,QAAQ,UAAU;AAAA,IAC1B,uBAAuB,QAAQ,yBAAyB;AAAA,IACxD,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,WAAW,QAAQ;AAAA,IACnB,OAAO,QAAQ,SAAS;AAAA,IACxB,WAAW,YAAY,QAAQ,SAAS;AAAA,IACxC,WAAW,YAAY,QAAQ,SAAS;AAAA,EAC1C;AACF;AAEA,SAAS,sBAAsB,YAAuC;AACpE,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,aAAa,WAAW;AAAA,IACxB,cAAc,WAAW;AAAA,IACzB,aAAa,WAAW;AAAA,IACxB,UAAU,WAAW;AAAA,IACrB,YAAY,WAAW;AAAA,IACvB,cAAc,WAAW;AAAA,IACzB,YAAY,YAAY,WAAW,UAAU;AAAA,IAC7C,gBAAgB,WAAW,kBAAkB;AAAA,IAC7C,aAAa,YAAY,WAAW,WAAW;AAAA,IAC/C,OAAO,WAAW,SAAS;AAAA,IAC3B,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,WAAW,YAAY,WAAW,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,wBAAwB,QAA8B;AAC7D,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,kBAAkB,OAAO;AAAA,IACzB,YAAY,OAAO;AAAA,IACnB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO,eAAe;AAAA,IACnC,QAAQ,OAAO;AAAA,IACf,SAAS,YAAY,OAAO,OAAO;AAAA,IACnC,aAAa,YAAY,OAAO,WAAW;AAAA,IAC3C,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,YAAY,OAAO,SAAS;AAAA,IACvC,WAAW,YAAY,OAAO,SAAS;AAAA,EACzC;AACF;AAEA,SAAS,YAAY,MAAgB;AACnC,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,kBAAkB,KAAK;AAAA,IACvB,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,MAAM,KAAK;AAAA,IACX,YAAY,KAAK,cAAc;AAAA,IAC/B,aAAa,KAAK,eAAe;AAAA,IACjC,eAAe,KAAK;AAAA,IACpB,UAAU,KAAK;AAAA,IACf,UAAU,KAAK,YAAY;AAAA,IAC3B,QAAQ,KAAK,UAAU;AAAA,IACvB,oBAAoB,YAAY,KAAK,kBAAkB;AAAA,IACvD,cAAc,KAAK,gBAAgB;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,WAAW,YAAY,KAAK,SAAS;AAAA,IACrC,WAAW,YAAY,KAAK,SAAS;AAAA,EACvC;AACF;AAEA,SAAS,iBAAiB,WAAsC;AAC9D,QAAM,gBAAgB,UAAU,eAAe,UAAU;AACzD,SAAO;AAAA,IACL,cAAc,UAAU,gBAAgB;AAAA,IACxC,WAAW,UAAU,aAAa;AAAA,IAClC,aAAa,YAAY,UAAU,WAAW;AAAA,IAC9C,mBAAmB,YAAY,UAAU,iBAAiB;AAAA,IAC1D,mBAAmB,gBAAgB,UAAU,mBAAmB,oBAAoB;AAAA,IACpF,aAAa,SAAS,eAAe,CAAC;AAAA,EACxC;AACF;AAEA,eAAe,eAAe,KAAkB,IAAY;AAC1D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtH;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,aAAa,mCAAmC,IAAI;AAE1D,QAAM,kBAA0D;AAAA,IAC9D;AAAA,IACA,WAAW;AAAA,EACb;AAIA,MAAI,KAAK,UAAU;AACjB,oBAAgB,WAAW,KAAK;AAAA,EAClC,WAAW,CAAC,KAAK,cAAc;AAC7B,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtH;AACA,MAAI,CAAC,YAAY;AACf,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,QAAI,MAAM,QAAQ,UAAU,SAAS,GAAG;AACtC,sBAAgB,iBAAiB,EAAE,KAAK,SAAS,UAAU;AAAA,IAC7D,OAAO;AACL,YAAM,iBAAiB,UAAU,cAAc,KAAK;AACpD,UAAI,CAAC,gBAAgB;AACnB,eAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,yBAAyB,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,MAChH;AACA,sBAAgB,iBAAiB;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,2BAA2B,eAAe;AAC7E,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACpI;AAEA,QAAM,QAAe;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,gBAAgB,UAAU;AAAA,EAC5B;AAEA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAAA,IAC9B,IAAI;AAAA,MACF,YACG,IAAI,CAAC,eAAe,WAAW,gBAAgB,EAC/C,OAAO,CAAC,qBAAiD,OAAO,qBAAqB,YAAY,iBAAiB,SAAS,CAAC;AAAA,IACjI;AAAA,EACF;AACA,QAAM,kBAAkB,kBAAkB,SACtC,MAAM,GAAG,KAAK,oBAAoB;AAAA,IAChC,IAAI,EAAE,KAAK,kBAAkB;AAAA,IAC7B,WAAW;AAAA,IACX,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAoC,IACpC,CAAC;AAEL,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,YAAY,QAAQ,WAAW,OAAO,EAAE;AAAA,IACrD;AAAA,EACF;AACA,QAAM,uBAAuB,gBAAgB,CAAC,KAAK;AAEnD,QAAM,oBAAoB,uBACtB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,kBAAkB,qBAAqB;AAAA,MACvC,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC;AAAA,EACF,IACA,CAAC;AAEL,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,MACF,YACG,QAAQ,CAAC,eAAe,YAAY,WAAW,OAAO,CAAC,EACvD,OAAO,CAAC,WAAW,OAAO,SAAS,CAAC;AAAA,IACzC;AAAA,EACF;AACA,QAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF,IACA,CAAC;AAEL,QAAM,gBAAgB,MAAM,kBAAkB,UAAU,QAAQ,aAAa,GAAkB,OAAO,KAAK;AAE3G,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,kBACb,aACA,OACA,OAC8B;AAC9B,QAAM,cAAc,MAAM;AAAA,IACxB,IAAI;AAAA,MACF,MACG,OAAO,CAAC,SAAS,CAAC,KAAK,kBAAkB,WAAW,EACpD,IAAI,CAAC,SAAS,KAAK,gBAAgB,EACnC,OAAO,CAAC,eAAqC,OAAO,eAAe,YAAY,WAAW,SAAS,CAAC;AAAA,IACzG;AAAA,EACF;AACA,MAAI,CAAC,YAAY,OAAQ,QAAO,oBAAI,IAAI;AAGxC,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO,oBAAI,IAAI;AACvC,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE;AAAA,MACpC,MAAM,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,YAAY,QAAQ,GAAG,EAAE;AAAA,MAC7D,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C,CAAC;AACD,UAAM,QAAQ,oBAAI,IAAoB;AACtC,eAAW,QAAQ,OAAO,OAAO;AAC/B,YAAM,aAAa,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC3D,YAAM,UAAU,KAAK,gBAAgB,KAAK;AAC1C,YAAM,cAAc,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAC9E,UAAI,cAAc,YAAa,OAAM,IAAI,YAAY,WAAW;AAAA,IAClE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAEA,SAAS,gBAAgB,MAAmF;AAC1G,QAAM,kBAAkB,KAAK,YAAY,IAAI,iBAAiB;AAC9D,QAAM,OAAO,gBACV,OAAO,CAAC,eAAe,WAAW,WAAW,cAAc,WAAW,sBAAsB,GAAG,EAC/F,IAAI,CAAC,gBAAgB;AAAA,IACpB,cAAc,WAAW;AAAA,IACzB,QAAQ,WAAW;AAAA,IACnB,mBAAmB,WAAW;AAAA,IAC9B,eAAe,WAAW;AAAA,EAC5B,EAAE;AACJ,QAAM,gBAAgB,gBAAgB,OAAO,CAAC,eAAe,WAAW,WAAW,UAAU,EAAE;AAC/F,QAAM,gBAAgB,gBAAgB,OAAO,CAAC,eAAe,WAAW,sBAAsB,GAAG,EAAE;AAEnG,SAAO;AAAA,IACL,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,WAAW,iBAAiB,KAAK,SAAS;AAAA,IAC1C,aAAa;AAAA,IACb,iBAAiB,KAAK,gBAAgB,IAAI,qBAAqB;AAAA,IAC/D,WAAW;AAAA,MACT,OAAO,gBAAgB,SAAS,KAAK,gBAAgB,MAAM,CAAC,eAAe,WAAW,WAAW,cAAc,WAAW,sBAAsB,GAAG;AAAA,MACnJ,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,KAAK,gBAAgB,KAAK,CAAC,YAAY,kBAAkB,OAAO,CAAC,IACvE,CAAC,8BAA8B,IAC/B,CAAC;AAAA,IACP;AAAA,IACA,gBAAgB,sBAAsB,KAAK,oBAAoB;AAAA,IAC/D,mBAAmB,KAAK,kBAAkB,IAAI,uBAAuB;AAAA,IACrE,OAAO,KAAK,MAAM,IAAI,WAAW;AAAA,IACjC,WAAW,iBAAiB,KAAK,SAAS;AAAA,IAC1C,sBAAsB,KAAK,UAAU,wBAAwB,CAAC;AAAA,EAChE;AACF;AAEA,SAAS,mBAAmB,MAAmF;AAC7G,QAAM,WAA6B,CAAC;AACpC,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,WAAW,kBAAkB,KAAK,QAAQ;AAChD,QAAI,CAAC,SAAU;AACf,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN;AAAA,MACA,YAAY;AAAA,QACV,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,cAAc,KAAK,kBAAkB,eAAe,KAAK,cAAc,IAAI,KAAK,gBAAgB,KAAK;AAAA,QACrG,cAAc,KAAK,gBAAgB;AAAA,QACnC,eAAe,KAAK;AAAA,QACpB,QAAQ,KAAK,UAAU;AAAA,MACzB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,aAAW,cAAc,KAAK,aAAa;AACzC,UAAM,WAAW,kBAAkB,WAAW,WAAW;AACzD,QAAI,CAAC,SAAU;AACf,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN;AAAA,MACA,YAAY;AAAA,QACV,cAAc,WAAW;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,EACF;AACF;AAEA,eAAsB,IACpB,KACA,SACA;AACA,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,WAAW,UAAU,EAAE,EAAE,SAAS;AACrC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,QAAQ,aAAa,QAAQ,CAAC,CAAC;AAChG,MAAI,CAAC,YAAY,SAAS;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,6BAA6B,eAAe,GAAG,SAAS,YAAY,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AAEA,QAAM,OAAO,MAAM,eAAe,KAAK,EAAE;AACzC,MAAI,cAAc,KAAM,QAAO,KAAK;AAEpC,MAAI,YAAY,KAAK,WAAW,WAAW;AACzC,WAAO,IAAI,SAAS,KAAK,UAAU,mBAAmB,IAAI,CAAC,GAAG;AAAA,MAC5D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,SAAS,KAAK,gBAAgB,IAAI,CAAC;AAC5C;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,iBAAiB,EAAE,OAAO;AAAA,EAC1B,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACrD,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,IACrC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,IACxC,QAAQ,EAAE,KAAK,uBAAuB;AAAA,IACtC,cAAc,EAAE,KAAK,mBAAmB,EAAE,SAAS;AAAA,IACnD,WAAW,EAAE,KAAK,gBAAgB,EAAE,SAAS;AAAA,IAC7C,sBAAsB,EAAE,MAAM,iCAAiC;AAAA,IAC/D,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACvD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,uBAAuB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IAClE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,eAAe,EAAE,OAAO;AAAA,MACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,aAAa,EAAE,MAAM,EAAE,OAAO;AAAA,IAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,kBAAkB,EAAE,OAAO;AAAA,MACzB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,IACnC,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,IAClC,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACvD,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,IACxC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,IAClC,QAAQ,EAAE,KAAK,wBAAwB;AAAA,IACvC,mBAAmB,EAAE,OAAO;AAAA,IAC5B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,iBAAiB,EAAE,MAAM,EAAE,OAAO;AAAA,IAChC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,iBAAiB,EAAE,OAAO;AAAA,MACxB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MACrC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACtC,CAAC,EAAE,SAAS;AAAA,IACZ,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3C,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,WAAW,EAAE,QAAQ;AAAA,IACrB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,WAAW,EAAE,OAAO;AAAA,IAClB,OAAO,EAAE,QAAQ;AAAA,IACjB,iBAAiB,EAAE,OAAO;AAAA,IAC1B,eAAe,EAAE,OAAO;AAAA,IACxB,eAAe,EAAE,OAAO;AAAA,IACxB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IAC5B,MAAM,EAAE,MAAM,EAAE,OAAO;AAAA,MACrB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,MAC9B,QAAQ,EAAE,KAAK,wBAAwB;AAAA,MACvC,mBAAmB,EAAE,OAAO;AAAA,MAC5B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,CAAC;AAAA,EACD,gBAAgB,EAAE,OAAO;AAAA,IACvB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,IAC7B,cAAc,EAAE,MAAM,EAAE,OAAO;AAAA,MAC7B,SAAS,EAAE,OAAO;AAAA,MAClB,MAAM,EAAE,OAAO;AAAA,IACjB,CAAC,CAAC;AAAA,IACF,aAAa,EAAE,KAAK,eAAe;AAAA,IACnC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IAC1C,YAAY,EAAE,KAAK,qBAAqB;AAAA,IACxC,cAAc,EAAE,QAAQ;AAAA,IACxB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,EAAE,SAAS;AAAA,EACZ,mBAAmB,EAAE,MAAM,EAAE,OAAO;AAAA,IAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,YAAY,EAAE,KAAK,qBAAqB;AAAA,IACxC,OAAO,EAAE,OAAO;AAAA,IAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,QAAQ,EAAE,KAAK,wBAAwB;AAAA,IACvC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,OAAO,EAAE,MAAM,EAAE,OAAO;AAAA,IACtB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,kBAAkB,EAAE,OAAO;AAAA,MACzB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,MAAM,EAAE,OAAO;AAAA,IACf,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,eAAe,EAAE,OAAO;AAAA,IACxB,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACnD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,UAAU,EAAE,QAAQ;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,WAAW,EAAE,OAAO;AAAA,IAClB,cAAc,EAAE,KAAK,mBAAmB,EAAE,SAAS;AAAA,IACnD,WAAW,EAAE,KAAK,gBAAgB,EAAE,SAAS;AAAA,IAC7C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,CAAC;AAAA,EACD,sBAAsB,EAAE,MAAM,iCAAiC;AACjE,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,MAAM,EAAE,QAAQ,mBAAmB;AAAA,EACnC,UAAU,EAAE,MAAM,EAAE,OAAO;AAAA,IACzB,MAAM,EAAE,QAAQ,SAAS;AAAA,IACzB,UAAU,EAAE,QAAQ;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC9C,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,WAAW;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport type { NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { QueryEngine } from '@open-mercato/shared/lib/query/types'\nimport { E } from '#generated/entities.ids.generated'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport {\n  EudrDueDiligenceStatement,\n  EudrEvidenceSubmission,\n  EudrMitigationAction,\n  EudrPlot,\n  EudrProductMapping,\n  EudrRiskAssessment,\n} from '../../../../data/entities'\nimport {\n  EUDR_ACTIVITY_TYPES,\n  EUDR_ACTOR_ROLES,\n  EUDR_COMMODITIES,\n  EUDR_MITIGATION_STATUSES,\n  EUDR_MITIGATION_TYPES,\n  EUDR_RISK_CONCLUSIONS,\n  EUDR_RISK_TIERS,\n  EUDR_STATEMENT_STATUSES,\n  EUDR_SUBMISSION_STATUSES,\n} from '../../../../data/validators'\nimport { hasMissingSpecies } from '../../../../lib/species'\nimport { EUDR_AMEND_WINDOW_MS } from '../../../../lib/statement-lifecycle'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view', 'eudr.submissions.view', 'eudr.mappings.view', 'eudr.plots.view', 'eudr.risk.view'] },\n}\n\nconst uuidSchema = z.string().uuid()\nconst querySchema = z.object({\n  format: z.enum(['json', 'geojson']).optional(),\n})\n\ntype AuthenticatedContext = Exclude<AuthContext, null>\ntype Scope = { tenantId: string; organizationId: string }\ntype GeoJsonGeometry = Record<string, unknown> & { type: string }\ntype GeoJsonFeature = {\n  type: 'Feature'\n  geometry: GeoJsonGeometry\n  properties: Record<string, unknown>\n}\n\nfunction hasPrivilegedStatementExportAccess(auth: AuthenticatedContext): boolean {\n  return auth.isSuperAdmin === true\n}\n\nfunction toIsoString(value: unknown): string | null {\n  if (value instanceof Date) return value.toISOString()\n  if (typeof value !== 'string' || value.length === 0) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? value : date.toISOString()\n}\n\nfunction stringArray(value: unknown): string[] {\n  if (!Array.isArray(value)) return []\n  return value.filter((entry): entry is string => typeof entry === 'string')\n}\n\nfunction asNumber(value: unknown): number {\n  if (typeof value === 'number' && Number.isFinite(value)) return value\n  if (typeof value === 'string' && value.trim().length > 0) {\n    const parsed = Number(value)\n    if (Number.isFinite(parsed)) return parsed\n  }\n  return 0\n}\n\nfunction addMilliseconds(value: Date | null | undefined, milliseconds: number): string | null {\n  if (!value) return null\n  const time = value.getTime()\n  if (Number.isNaN(time)) return null\n  return new Date(time + milliseconds).toISOString()\n}\n\nfunction addYears(value: Date | null | undefined, years: number): string | null {\n  if (!value) return null\n  const time = value.getTime()\n  if (Number.isNaN(time)) return null\n  const date = new Date(time)\n  date.setUTCFullYear(date.getUTCFullYear() + years)\n  return date.toISOString()\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\n\nfunction normalizeGeometry(value: unknown): GeoJsonGeometry | null {\n  if (!isRecord(value) || typeof value.type !== 'string') return null\n  if (value.type === 'Feature') {\n    return normalizeGeometry(value.geometry)\n  }\n  if (value.type === 'Point' || value.type === 'Polygon' || value.type === 'MultiPolygon') {\n    return value as GeoJsonGeometry\n  }\n  return null\n}\n\nfunction statementPayload(statement: EudrDueDiligenceStatement) {\n  return {\n    id: statement.id,\n    title: statement.title,\n    commodity: statement.commodity,\n    referenceNumber: statement.referenceNumber ?? null,\n    verificationNumber: statement.verificationNumber ?? null,\n    status: statement.status,\n    activityType: statement.activityType ?? null,\n    actorRole: statement.actorRole ?? null,\n    referencedStatements: statement.referencedStatements ?? [],\n    quantityKg: statement.quantityKg ?? null,\n    supplementaryUnit: statement.supplementaryUnit ?? null,\n    supplementaryQuantity: statement.supplementaryQuantity ?? null,\n    orderId: statement.orderId ?? null,\n    submittedAt: toIsoString(statement.submittedAt),\n    referenceIssuedAt: toIsoString(statement.referenceIssuedAt),\n    orderSnapshot: statement.orderSnapshot ?? null,\n    notes: statement.notes ?? null,\n    createdAt: toIsoString(statement.createdAt),\n    updatedAt: toIsoString(statement.updatedAt),\n  }\n}\n\nfunction submissionPayload(submission: EudrEvidenceSubmission) {\n  return {\n    id: submission.id,\n    supplierEntityId: submission.supplierEntityId,\n    supplierSnapshot: submission.supplierSnapshot ?? null,\n    commodity: submission.commodity,\n    productMappingId: submission.productMappingId ?? null,\n    statementId: submission.statementId ?? null,\n    originCountry: submission.originCountry ?? null,\n    geolocation: submission.geolocation ?? null,\n    quantityKg: submission.quantityKg ?? null,\n    batchNumber: submission.batchNumber ?? null,\n    harvestFrom: toIsoString(submission.harvestFrom),\n    harvestTo: toIsoString(submission.harvestTo),\n    producerName: submission.producerName ?? null,\n    attachmentIds: stringArray(submission.attachmentIds),\n    plotIds: stringArray(submission.plotIds),\n    status: submission.status,\n    completenessScore: asNumber(submission.completenessScore),\n    missingFields: stringArray(submission.missingFields),\n    notes: submission.notes ?? null,\n    createdAt: toIsoString(submission.createdAt),\n    updatedAt: toIsoString(submission.updatedAt),\n  }\n}\n\nfunction productMappingPayload(mapping: EudrProductMapping) {\n  return {\n    id: mapping.id,\n    productId: mapping.productId,\n    productSnapshot: mapping.productSnapshot ?? null,\n    commodity: mapping.commodity,\n    hsCode: mapping.hsCode ?? null,\n    speciesScientificName: mapping.speciesScientificName ?? null,\n    speciesCommonName: mapping.speciesCommonName ?? null,\n    isInScope: mapping.isInScope,\n    notes: mapping.notes ?? null,\n    createdAt: toIsoString(mapping.createdAt),\n    updatedAt: toIsoString(mapping.updatedAt),\n  }\n}\n\nfunction riskAssessmentPayload(assessment: EudrRiskAssessment | null) {\n  if (!assessment) return null\n  return {\n    id: assessment.id,\n    statementId: assessment.statementId,\n    countryRisks: assessment.countryRisks,\n    overallTier: assessment.overallTier,\n    criteria: assessment.criteria,\n    conclusion: assessment.conclusion,\n    isSimplified: assessment.isSimplified,\n    assessedAt: toIsoString(assessment.assessedAt),\n    assessedByName: assessment.assessedByName ?? null,\n    reviewDueAt: toIsoString(assessment.reviewDueAt),\n    notes: assessment.notes ?? null,\n    createdAt: toIsoString(assessment.createdAt),\n    updatedAt: toIsoString(assessment.updatedAt),\n  }\n}\n\nfunction mitigationActionPayload(action: EudrMitigationAction) {\n  return {\n    id: action.id,\n    riskAssessmentId: action.riskAssessmentId,\n    actionType: action.actionType,\n    title: action.title,\n    description: action.description ?? null,\n    status: action.status,\n    dueDate: toIsoString(action.dueDate),\n    completedAt: toIsoString(action.completedAt),\n    notes: action.notes ?? null,\n    createdAt: toIsoString(action.createdAt),\n    updatedAt: toIsoString(action.updatedAt),\n  }\n}\n\nfunction plotPayload(plot: EudrPlot) {\n  return {\n    id: plot.id,\n    supplierEntityId: plot.supplierEntityId,\n    supplierSnapshot: plot.supplierSnapshot ?? null,\n    name: plot.name,\n    externalId: plot.externalId ?? null,\n    description: plot.description ?? null,\n    originCountry: plot.originCountry,\n    plotType: plot.plotType,\n    geometry: plot.geometry ?? null,\n    areaHa: plot.areaHa ?? null,\n    validationWarnings: stringArray(plot.validationWarnings),\n    producerName: plot.producerName ?? null,\n    isActive: plot.isActive,\n    createdAt: toIsoString(plot.createdAt),\n    updatedAt: toIsoString(plot.updatedAt),\n  }\n}\n\nfunction lifecyclePayload(statement: EudrDueDiligenceStatement) {\n  const retentionBase = statement.submittedAt ?? statement.createdAt\n  return {\n    activityType: statement.activityType ?? null,\n    actorRole: statement.actorRole ?? null,\n    submittedAt: toIsoString(statement.submittedAt),\n    referenceIssuedAt: toIsoString(statement.referenceIssuedAt),\n    amendWindowEndsAt: addMilliseconds(statement.referenceIssuedAt, EUDR_AMEND_WINDOW_MS),\n    retainUntil: addYears(retentionBase, 5),\n  }\n}\n\nasync function loadExportData(req: NextRequest, id: string) {\n  const { translate } = await resolveTranslations()\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return { response: Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 }) }\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n  const privileged = hasPrivilegedStatementExportAccess(auth)\n\n  const statementFilter: FilterQuery<EudrDueDiligenceStatement> = {\n    id,\n    deletedAt: null,\n  }\n  // Tenant-bound sessions always keep tenant scoping. Only a global super-admin\n  // without tenant context may look up across tenants, and only super-admins\n  // bypass organization scoping.\n  if (auth.tenantId) {\n    statementFilter.tenantId = auth.tenantId\n  } else if (!auth.isSuperAdmin) {\n    return { response: Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 }) }\n  }\n  if (!privileged) {\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (Array.isArray(orgScope?.filterIds)) {\n      statementFilter.organizationId = { $in: orgScope.filterIds }\n    } else {\n      const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth)\n      if (!organizationId) {\n        return { response: Response.json({ error: translate('eudr.errors.forbidden', 'Forbidden') }, { status: 403 }) }\n      }\n      statementFilter.organizationId = organizationId\n    }\n  }\n\n  const statement = await em.findOne(EudrDueDiligenceStatement, statementFilter)\n  if (!statement) {\n    return { response: Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 }) }\n  }\n\n  const scope: Scope = {\n    tenantId: statement.tenantId,\n    organizationId: statement.organizationId,\n  }\n\n  const submissions = await findWithDecryption(\n    em,\n    EudrEvidenceSubmission,\n    {\n      statementId: id,\n      deletedAt: null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    {},\n    scope,\n  )\n\n  const productMappingIds = Array.from(\n    new Set(\n      submissions\n        .map((submission) => submission.productMappingId)\n        .filter((productMappingId): productMappingId is string => typeof productMappingId === 'string' && productMappingId.length > 0),\n    ),\n  )\n  const productMappings = productMappingIds.length\n    ? await em.find(EudrProductMapping, {\n        id: { $in: productMappingIds },\n        deletedAt: null,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      } as FilterQuery<EudrProductMapping>)\n    : []\n\n  const riskAssessments = await findWithDecryption(\n    em,\n    EudrRiskAssessment,\n    {\n      statementId: id,\n      deletedAt: null,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    },\n    { orderBy: { assessedAt: 'DESC', createdAt: 'DESC' } },\n    scope,\n  )\n  const latestRiskAssessment = riskAssessments[0] ?? null\n\n  const mitigationActions = latestRiskAssessment\n    ? await findWithDecryption(\n        em,\n        EudrMitigationAction,\n        {\n          riskAssessmentId: latestRiskAssessment.id,\n          deletedAt: null,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        },\n        { orderBy: { createdAt: 'ASC' } },\n        scope,\n      )\n    : []\n\n  const plotIds = Array.from(\n    new Set(\n      submissions\n        .flatMap((submission) => stringArray(submission.plotIds))\n        .filter((plotId) => plotId.length > 0),\n    ),\n  )\n  const plots = plotIds.length\n    ? await findWithDecryption(\n        em,\n        EudrPlot,\n        {\n          id: { $in: plotIds },\n          deletedAt: null,\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        },\n        {},\n        scope,\n      )\n    : []\n\n  const supplierNames = await loadSupplierNames(container.resolve('queryEngine') as QueryEngine, scope, plots)\n\n  return {\n    statement,\n    submissions,\n    productMappings,\n    latestRiskAssessment,\n    mitigationActions,\n    plots,\n    supplierNames,\n  }\n}\n\nasync function loadSupplierNames(\n  queryEngine: QueryEngine,\n  scope: Scope,\n  plots: EudrPlot[],\n): Promise<Map<string, string>> {\n  const supplierIds = Array.from(\n    new Set(\n      plots\n        .filter((plot) => !plot.supplierSnapshot?.displayName)\n        .map((plot) => plot.supplierEntityId)\n        .filter((supplierId): supplierId is string => typeof supplierId === 'string' && supplierId.length > 0),\n    ),\n  )\n  if (!supplierIds.length) return new Map()\n  // Soft cross-module read (FK-id convention) via the query engine \u2014 no direct\n  // customers entity import; degrades to an empty map when the peer is absent.\n  try {\n    const customersEntityId = (E as Record<string, Record<string, string>>).customers?.customer_entity\n    if (!customersEntityId) return new Map()\n    const result = await queryEngine.query<Record<string, unknown>>(customersEntityId, {\n      fields: ['id', 'display_name'],\n      filters: { id: { $in: supplierIds } },\n      page: { page: 1, pageSize: Math.min(supplierIds.length, 100) },\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId ?? undefined,\n    })\n    const names = new Map<string, string>()\n    for (const item of result.items) {\n      const supplierId = typeof item.id === 'string' ? item.id : null\n      const rawName = item.display_name ?? item.displayName\n      const displayName = typeof rawName === 'string' && rawName.length ? rawName : null\n      if (supplierId && displayName) names.set(supplierId, displayName)\n    }\n    return names\n  } catch {\n    return new Map()\n  }\n}\n\nfunction buildJsonPacket(data: Exclude<Awaited<ReturnType<typeof loadExportData>>, { response: Response }>) {\n  const submissionItems = data.submissions.map(submissionPayload)\n  const gaps = submissionItems\n    .filter((submission) => submission.status !== 'verified' || submission.completenessScore !== 100)\n    .map((submission) => ({\n      submissionId: submission.id,\n      status: submission.status,\n      completenessScore: submission.completenessScore,\n      missingFields: submission.missingFields,\n    }))\n  const verifiedCount = submissionItems.filter((submission) => submission.status === 'verified').length\n  const completeCount = submissionItems.filter((submission) => submission.completenessScore === 100).length\n\n  return {\n    generatedAt: new Date().toISOString(),\n    statement: statementPayload(data.statement),\n    submissions: submissionItems,\n    productMappings: data.productMappings.map(productMappingPayload),\n    readiness: {\n      ready: submissionItems.length > 0 && submissionItems.every((submission) => submission.status === 'verified' && submission.completenessScore === 100),\n      submissionCount: submissionItems.length,\n      verifiedCount,\n      completeCount,\n      gaps,\n      warnings: data.productMappings.some((mapping) => hasMissingSpecies(mapping))\n        ? ['eudr.warnings.speciesMissing']\n        : [],\n    },\n    riskAssessment: riskAssessmentPayload(data.latestRiskAssessment),\n    mitigationActions: data.mitigationActions.map(mitigationActionPayload),\n    plots: data.plots.map(plotPayload),\n    lifecycle: lifecyclePayload(data.statement),\n    referencedStatements: data.statement.referencedStatements ?? [],\n  }\n}\n\nfunction buildGeoJsonPacket(data: Exclude<Awaited<ReturnType<typeof loadExportData>>, { response: Response }>) {\n  const features: GeoJsonFeature[] = []\n  for (const plot of data.plots) {\n    const geometry = normalizeGeometry(plot.geometry)\n    if (!geometry) continue\n    features.push({\n      type: 'Feature',\n      geometry,\n      properties: {\n        plotId: plot.id,\n        plotName: plot.name,\n        supplierName: plot.supplierSnapshot?.displayName ?? data.supplierNames.get(plot.supplierEntityId) ?? null,\n        producerName: plot.producerName ?? null,\n        originCountry: plot.originCountry,\n        areaHa: plot.areaHa ?? null,\n      },\n    })\n  }\n\n  for (const submission of data.submissions) {\n    const geometry = normalizeGeometry(submission.geolocation)\n    if (!geometry) continue\n    features.push({\n      type: 'Feature',\n      geometry,\n      properties: {\n        submissionId: submission.id,\n        source: 'submission_geolocation',\n      },\n    })\n  }\n\n  return {\n    type: 'FeatureCollection',\n    features,\n  }\n}\n\nexport async function GET(\n  req: NextRequest,\n  context: { params: Promise<{ id: string }> },\n) {\n  const { id } = await context.params\n  if (!uuidSchema.safeParse(id).success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const parsedQuery = querySchema.safeParse(Object.fromEntries(req.nextUrl.searchParams.entries()))\n  if (!parsedQuery.success) {\n    const { translate } = await resolveTranslations()\n    return Response.json({ error: translate('eudr.errors.invalid_query', 'Invalid query'), details: parsedQuery.error.flatten() }, { status: 400 })\n  }\n\n  const data = await loadExportData(req, id)\n  if ('response' in data) return data.response\n\n  if (parsedQuery.data.format === 'geojson') {\n    return new Response(JSON.stringify(buildGeoJsonPacket(data)), {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/geo+json',\n      },\n    })\n  }\n\n  return Response.json(buildJsonPacket(data))\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nconst referencedStatementResponseSchema = z.object({\n  referenceNumber: z.string(),\n  verificationNumber: z.string().nullable().optional(),\n})\n\nconst exportResponseSchema = z.object({\n  generatedAt: z.string(),\n  statement: z.object({\n    id: z.string().uuid(),\n    title: z.string(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    referenceNumber: z.string().nullable(),\n    verificationNumber: z.string().nullable(),\n    status: z.enum(EUDR_STATEMENT_STATUSES),\n    activityType: z.enum(EUDR_ACTIVITY_TYPES).nullable(),\n    actorRole: z.enum(EUDR_ACTOR_ROLES).nullable(),\n    referencedStatements: z.array(referencedStatementResponseSchema),\n    quantityKg: z.union([z.string(), z.number()]).nullable(),\n    supplementaryUnit: z.string().nullable(),\n    supplementaryQuantity: z.union([z.string(), z.number()]).nullable(),\n    orderId: z.string().uuid().nullable(),\n    submittedAt: z.string().nullable(),\n    referenceIssuedAt: z.string().nullable(),\n    orderSnapshot: z.object({\n      orderNumber: z.string().nullable().optional(),\n    }).nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  }),\n  submissions: z.array(z.object({\n    id: z.string().uuid(),\n    supplierEntityId: z.string().uuid(),\n    supplierSnapshot: z.object({\n      displayName: z.string().nullable().optional(),\n    }).nullable(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    productMappingId: z.string().uuid().nullable(),\n    statementId: z.string().uuid().nullable(),\n    originCountry: z.string().nullable(),\n    geolocation: z.unknown().nullable(),\n    quantityKg: z.union([z.string(), z.number()]).nullable(),\n    batchNumber: z.string().nullable(),\n    harvestFrom: z.string().nullable(),\n    harvestTo: z.string().nullable(),\n    producerName: z.string().nullable(),\n    attachmentIds: z.array(z.string().uuid()),\n    plotIds: z.array(z.string().uuid()),\n    status: z.enum(EUDR_SUBMISSION_STATUSES),\n    completenessScore: z.number(),\n    missingFields: z.array(z.string()),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  productMappings: z.array(z.object({\n    id: z.string().uuid(),\n    productId: z.string().uuid(),\n    productSnapshot: z.object({\n      name: z.string().nullable().optional(),\n      sku: z.string().nullable().optional(),\n    }).nullable(),\n    commodity: z.enum(EUDR_COMMODITIES),\n    hsCode: z.string().nullable(),\n    speciesScientificName: z.string().nullable(),\n    speciesCommonName: z.string().nullable(),\n    isInScope: z.boolean(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  readiness: z.object({\n    ready: z.boolean(),\n    submissionCount: z.number(),\n    verifiedCount: z.number(),\n    completeCount: z.number(),\n    warnings: z.array(z.string()),\n    gaps: z.array(z.object({\n      submissionId: z.string().uuid(),\n      status: z.enum(EUDR_SUBMISSION_STATUSES),\n      completenessScore: z.number(),\n      missingFields: z.array(z.string()),\n    })),\n  }),\n  riskAssessment: z.object({\n    id: z.string().uuid(),\n    statementId: z.string().uuid(),\n    countryRisks: z.array(z.object({\n      country: z.string(),\n      tier: z.string(),\n    })),\n    overallTier: z.enum(EUDR_RISK_TIERS),\n    criteria: z.record(z.string(), z.unknown()),\n    conclusion: z.enum(EUDR_RISK_CONCLUSIONS),\n    isSimplified: z.boolean(),\n    assessedAt: z.string().nullable(),\n    assessedByName: z.string().nullable(),\n    reviewDueAt: z.string().nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  }).nullable(),\n  mitigationActions: z.array(z.object({\n    id: z.string().uuid(),\n    riskAssessmentId: z.string().uuid(),\n    actionType: z.enum(EUDR_MITIGATION_TYPES),\n    title: z.string(),\n    description: z.string().nullable(),\n    status: z.enum(EUDR_MITIGATION_STATUSES),\n    dueDate: z.string().nullable(),\n    completedAt: z.string().nullable(),\n    notes: z.string().nullable(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  plots: z.array(z.object({\n    id: z.string().uuid(),\n    supplierEntityId: z.string().uuid(),\n    supplierSnapshot: z.object({\n      displayName: z.string().nullable().optional(),\n    }).nullable(),\n    name: z.string(),\n    externalId: z.string().nullable(),\n    description: z.string().nullable(),\n    originCountry: z.string(),\n    plotType: z.string(),\n    geometry: z.unknown().nullable(),\n    areaHa: z.union([z.string(), z.number()]).nullable(),\n    validationWarnings: z.array(z.string()),\n    producerName: z.string().nullable(),\n    isActive: z.boolean(),\n    createdAt: z.string().nullable(),\n    updatedAt: z.string().nullable(),\n  })),\n  lifecycle: z.object({\n    activityType: z.enum(EUDR_ACTIVITY_TYPES).nullable(),\n    actorRole: z.enum(EUDR_ACTOR_ROLES).nullable(),\n    submittedAt: z.string().nullable(),\n    referenceIssuedAt: z.string().nullable(),\n    amendWindowEndsAt: z.string().nullable(),\n    retainUntil: z.string().nullable(),\n  }),\n  referencedStatements: z.array(referencedStatementResponseSchema),\n})\n\nconst geoJsonResponseSchema = z.object({\n  type: z.literal('FeatureCollection'),\n  features: z.array(z.object({\n    type: z.literal('Feature'),\n    geometry: z.unknown(),\n    properties: z.record(z.string(), z.unknown()),\n  })),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Export due diligence statement evidence packet',\n  methods: {\n    GET: {\n      summary: 'Export due diligence statement evidence packet',\n      description: 'Returns a due diligence statement with decrypted evidence submissions, product mappings, readiness details, lifecycle fields, latest risk assessment, mitigation actions, and referenced plots. Use `format=geojson` to export referenced plot and legacy submission geolocations.',\n      query: querySchema,\n      responses: [\n        {\n          status: 200,\n          description: 'Due diligence statement evidence packet',\n          schema: exportResponseSchema,\n        },\n        {\n          status: 200,\n          description: 'GeoJSON plot and legacy submission geolocation export',\n          mediaType: 'application/geo+json',\n          schema: geoJsonResponseSchema,\n        },\n      ],\n      errors: [\n        {\n          status: 404,\n          description: 'Statement not found',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,SAAS;AAGlB,SAAS,SAAS;AAElB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,yBAAyB;AAClC,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,wBAAwB,yBAAyB,sBAAsB,mBAAmB,gBAAgB,EAAE;AAC1J;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK;AACnC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,SAAS,CAAC,EAAE,SAAS;AAC/C,CAAC;AAWD,SAAS,mCAAmC,MAAqC;AAC/E,SAAO,KAAK,iBAAiB;AAC/B;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,QAAQ,KAAK,YAAY;AACjE;AAEA,SAAS,YAAY,OAA0B;AAC7C,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,SAAO,MAAM,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAC3E;AAEA,SAAS,SAAS,OAAwB;AACxC,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,EAAG,QAAO;AAChE,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,GAAG;AACxD,UAAM,SAAS,OAAO,KAAK;AAC3B,QAAI,OAAO,SAAS,MAAM,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,OAAgC,cAAqC;AAC5F,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,OAAO,MAAM,IAAI,EAAG,QAAO;AAC/B,SAAO,IAAI,KAAK,OAAO,YAAY,EAAE,YAAY;AACnD;AAEA,SAAS,SAAS,OAAgC,OAA8B;AAC9E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,MAAM,QAAQ;AAC3B,MAAI,OAAO,MAAM,IAAI,EAAG,QAAO;AAC/B,QAAM,OAAO,IAAI,KAAK,IAAI;AAC1B,OAAK,eAAe,KAAK,eAAe,IAAI,KAAK;AACjD,SAAO,KAAK,YAAY;AAC1B;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,kBAAkB,OAAwC;AACjE,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,SAAU,QAAO;AAC/D,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,kBAAkB,MAAM,QAAQ;AAAA,EACzC;AACA,MAAI,MAAM,SAAS,WAAW,MAAM,SAAS,aAAa,MAAM,SAAS,gBAAgB;AACvF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,WAAsC;AAC9D,SAAO;AAAA,IACL,IAAI,UAAU;AAAA,IACd,OAAO,UAAU;AAAA,IACjB,WAAW,UAAU;AAAA,IACrB,iBAAiB,UAAU,mBAAmB;AAAA,IAC9C,oBAAoB,UAAU,sBAAsB;AAAA,IACpD,QAAQ,UAAU;AAAA,IAClB,cAAc,UAAU,gBAAgB;AAAA,IACxC,WAAW,UAAU,aAAa;AAAA,IAClC,sBAAsB,UAAU,wBAAwB,CAAC;AAAA,IACzD,YAAY,UAAU,cAAc;AAAA,IACpC,mBAAmB,UAAU,qBAAqB;AAAA,IAClD,uBAAuB,UAAU,yBAAyB;AAAA,IAC1D,SAAS,UAAU,WAAW;AAAA,IAC9B,aAAa,YAAY,UAAU,WAAW;AAAA,IAC9C,mBAAmB,YAAY,UAAU,iBAAiB;AAAA,IAC1D,eAAe,UAAU,iBAAiB;AAAA,IAC1C,OAAO,UAAU,SAAS;AAAA,IAC1B,WAAW,YAAY,UAAU,SAAS;AAAA,IAC1C,WAAW,YAAY,UAAU,SAAS;AAAA,EAC5C;AACF;AAEA,SAAS,kBAAkB,YAAoC;AAC7D,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,kBAAkB,WAAW;AAAA,IAC7B,kBAAkB,WAAW,oBAAoB;AAAA,IACjD,WAAW,WAAW;AAAA,IACtB,kBAAkB,WAAW,oBAAoB;AAAA,IACjD,aAAa,WAAW,eAAe;AAAA,IACvC,eAAe,WAAW,iBAAiB;AAAA,IAC3C,aAAa,WAAW,eAAe;AAAA,IACvC,YAAY,WAAW,cAAc;AAAA,IACrC,aAAa,WAAW,eAAe;AAAA,IACvC,aAAa,YAAY,WAAW,WAAW;AAAA,IAC/C,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,cAAc,WAAW,gBAAgB;AAAA,IACzC,eAAe,YAAY,WAAW,aAAa;AAAA,IACnD,SAAS,YAAY,WAAW,OAAO;AAAA,IACvC,QAAQ,WAAW;AAAA,IACnB,mBAAmB,SAAS,WAAW,iBAAiB;AAAA,IACxD,eAAe,YAAY,WAAW,aAAa;AAAA,IACnD,OAAO,WAAW,SAAS;AAAA,IAC3B,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,WAAW,YAAY,WAAW,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,sBAAsB,SAA6B;AAC1D,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,WAAW,QAAQ;AAAA,IACnB,iBAAiB,QAAQ,mBAAmB;AAAA,IAC5C,WAAW,QAAQ;AAAA,IACnB,QAAQ,QAAQ,UAAU;AAAA,IAC1B,uBAAuB,QAAQ,yBAAyB;AAAA,IACxD,mBAAmB,QAAQ,qBAAqB;AAAA,IAChD,WAAW,QAAQ;AAAA,IACnB,OAAO,QAAQ,SAAS;AAAA,IACxB,WAAW,YAAY,QAAQ,SAAS;AAAA,IACxC,WAAW,YAAY,QAAQ,SAAS;AAAA,EAC1C;AACF;AAEA,SAAS,sBAAsB,YAAuC;AACpE,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO;AAAA,IACL,IAAI,WAAW;AAAA,IACf,aAAa,WAAW;AAAA,IACxB,cAAc,WAAW;AAAA,IACzB,aAAa,WAAW;AAAA,IACxB,UAAU,WAAW;AAAA,IACrB,YAAY,WAAW;AAAA,IACvB,cAAc,WAAW;AAAA,IACzB,YAAY,YAAY,WAAW,UAAU;AAAA,IAC7C,gBAAgB,WAAW,kBAAkB;AAAA,IAC7C,aAAa,YAAY,WAAW,WAAW;AAAA,IAC/C,OAAO,WAAW,SAAS;AAAA,IAC3B,WAAW,YAAY,WAAW,SAAS;AAAA,IAC3C,WAAW,YAAY,WAAW,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,wBAAwB,QAA8B;AAC7D,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,kBAAkB,OAAO;AAAA,IACzB,YAAY,OAAO;AAAA,IACnB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO,eAAe;AAAA,IACnC,QAAQ,OAAO;AAAA,IACf,SAAS,YAAY,OAAO,OAAO;AAAA,IACnC,aAAa,YAAY,OAAO,WAAW;AAAA,IAC3C,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,YAAY,OAAO,SAAS;AAAA,IACvC,WAAW,YAAY,OAAO,SAAS;AAAA,EACzC;AACF;AAEA,SAAS,YAAY,MAAgB;AACnC,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,kBAAkB,KAAK;AAAA,IACvB,kBAAkB,KAAK,oBAAoB;AAAA,IAC3C,MAAM,KAAK;AAAA,IACX,YAAY,KAAK,cAAc;AAAA,IAC/B,aAAa,KAAK,eAAe;AAAA,IACjC,eAAe,KAAK;AAAA,IACpB,UAAU,KAAK;AAAA,IACf,UAAU,KAAK,YAAY;AAAA,IAC3B,QAAQ,KAAK,UAAU;AAAA,IACvB,oBAAoB,YAAY,KAAK,kBAAkB;AAAA,IACvD,cAAc,KAAK,gBAAgB;AAAA,IACnC,UAAU,KAAK;AAAA,IACf,WAAW,YAAY,KAAK,SAAS;AAAA,IACrC,WAAW,YAAY,KAAK,SAAS;AAAA,EACvC;AACF;AAEA,SAAS,iBAAiB,WAAsC;AAC9D,QAAM,gBAAgB,UAAU,eAAe,UAAU;AACzD,SAAO;AAAA,IACL,cAAc,UAAU,gBAAgB;AAAA,IACxC,WAAW,UAAU,aAAa;AAAA,IAClC,aAAa,YAAY,UAAU,WAAW;AAAA,IAC9C,mBAAmB,YAAY,UAAU,iBAAiB;AAAA,IAC1D,mBAAmB,gBAAgB,UAAU,mBAAmB,oBAAoB;AAAA,IACpF,aAAa,SAAS,eAAe,CAAC;AAAA,EACxC;AACF;AAEA,eAAe,eAAe,KAAkB,IAAY;AAC1D,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtH;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,aAAa,mCAAmC,IAAI;AAE1D,QAAM,kBAA0D;AAAA,IAC9D;AAAA,IACA,WAAW;AAAA,EACb;AAIA,MAAI,KAAK,UAAU;AACjB,oBAAgB,WAAW,KAAK;AAAA,EAClC,WAAW,CAAC,KAAK,cAAc;AAC7B,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACtH;AACA,MAAI,CAAC,YAAY;AACf,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,QAAI,MAAM,QAAQ,UAAU,SAAS,GAAG;AACtC,sBAAgB,iBAAiB,EAAE,KAAK,SAAS,UAAU;AAAA,IAC7D,OAAO;AACL,YAAM,iBAAiB,kCAAkC,UAAU,IAAI;AACvE,UAAI,CAAC,gBAAgB;AACnB,eAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,yBAAyB,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,MAChH;AACA,sBAAgB,iBAAiB;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,2BAA2B,eAAe;AAC7E,MAAI,CAAC,WAAW;AACd,WAAO,EAAE,UAAU,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,EAAE;AAAA,EACpI;AAEA,QAAM,QAAe;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,gBAAgB,UAAU;AAAA,EAC5B;AAEA,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF;AAEA,QAAM,oBAAoB,MAAM;AAAA,IAC9B,IAAI;AAAA,MACF,YACG,IAAI,CAAC,eAAe,WAAW,gBAAgB,EAC/C,OAAO,CAAC,qBAAiD,OAAO,qBAAqB,YAAY,iBAAiB,SAAS,CAAC;AAAA,IACjI;AAAA,EACF;AACA,QAAM,kBAAkB,kBAAkB,SACtC,MAAM,GAAG,KAAK,oBAAoB;AAAA,IAChC,IAAI,EAAE,KAAK,kBAAkB;AAAA,IAC7B,WAAW;AAAA,IACX,UAAU,MAAM;AAAA,IAChB,gBAAgB,MAAM;AAAA,EACxB,CAAoC,IACpC,CAAC;AAEL,QAAM,kBAAkB,MAAM;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,YAAY,QAAQ,WAAW,OAAO,EAAE;AAAA,IACrD;AAAA,EACF;AACA,QAAM,uBAAuB,gBAAgB,CAAC,KAAK;AAEnD,QAAM,oBAAoB,uBACtB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,kBAAkB,qBAAqB;AAAA,MACvC,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,EAAE,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAChC;AAAA,EACF,IACA,CAAC;AAEL,QAAM,UAAU,MAAM;AAAA,IACpB,IAAI;AAAA,MACF,YACG,QAAQ,CAAC,eAAe,YAAY,WAAW,OAAO,CAAC,EACvD,OAAO,CAAC,WAAW,OAAO,SAAS,CAAC;AAAA,IACzC;AAAA,EACF;AACA,QAAM,QAAQ,QAAQ,SAClB,MAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,WAAW;AAAA,MACX,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB;AAAA,IACA,CAAC;AAAA,IACD;AAAA,EACF,IACA,CAAC;AAEL,QAAM,gBAAgB,MAAM,kBAAkB,UAAU,QAAQ,aAAa,GAAkB,OAAO,KAAK;AAE3G,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,kBACb,aACA,OACA,OAC8B;AAC9B,QAAM,cAAc,MAAM;AAAA,IACxB,IAAI;AAAA,MACF,MACG,OAAO,CAAC,SAAS,CAAC,KAAK,kBAAkB,WAAW,EACpD,IAAI,CAAC,SAAS,KAAK,gBAAgB,EACnC,OAAO,CAAC,eAAqC,OAAO,eAAe,YAAY,WAAW,SAAS,CAAC;AAAA,IACzG;AAAA,EACF;AACA,MAAI,CAAC,YAAY,OAAQ,QAAO,oBAAI,IAAI;AAGxC,MAAI;AACF,UAAM,oBAAqB,EAA6C,WAAW;AACnF,QAAI,CAAC,kBAAmB,QAAO,oBAAI,IAAI;AACvC,UAAM,SAAS,MAAM,YAAY,MAA+B,mBAAmB;AAAA,MACjF,QAAQ,CAAC,MAAM,cAAc;AAAA,MAC7B,SAAS,EAAE,IAAI,EAAE,KAAK,YAAY,EAAE;AAAA,MACpC,MAAM,EAAE,MAAM,GAAG,UAAU,KAAK,IAAI,YAAY,QAAQ,GAAG,EAAE;AAAA,MAC7D,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM,kBAAkB;AAAA,IAC1C,CAAC;AACD,UAAM,QAAQ,oBAAI,IAAoB;AACtC,eAAW,QAAQ,OAAO,OAAO;AAC/B,YAAM,aAAa,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK;AAC3D,YAAM,UAAU,KAAK,gBAAgB,KAAK;AAC1C,YAAM,cAAc,OAAO,YAAY,YAAY,QAAQ,SAAS,UAAU;AAC9E,UAAI,cAAc,YAAa,OAAM,IAAI,YAAY,WAAW;AAAA,IAClE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,oBAAI,IAAI;AAAA,EACjB;AACF;AAEA,SAAS,gBAAgB,MAAmF;AAC1G,QAAM,kBAAkB,KAAK,YAAY,IAAI,iBAAiB;AAC9D,QAAM,OAAO,gBACV,OAAO,CAAC,eAAe,WAAW,WAAW,cAAc,WAAW,sBAAsB,GAAG,EAC/F,IAAI,CAAC,gBAAgB;AAAA,IACpB,cAAc,WAAW;AAAA,IACzB,QAAQ,WAAW;AAAA,IACnB,mBAAmB,WAAW;AAAA,IAC9B,eAAe,WAAW;AAAA,EAC5B,EAAE;AACJ,QAAM,gBAAgB,gBAAgB,OAAO,CAAC,eAAe,WAAW,WAAW,UAAU,EAAE;AAC/F,QAAM,gBAAgB,gBAAgB,OAAO,CAAC,eAAe,WAAW,sBAAsB,GAAG,EAAE;AAEnG,SAAO;AAAA,IACL,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,WAAW,iBAAiB,KAAK,SAAS;AAAA,IAC1C,aAAa;AAAA,IACb,iBAAiB,KAAK,gBAAgB,IAAI,qBAAqB;AAAA,IAC/D,WAAW;AAAA,MACT,OAAO,gBAAgB,SAAS,KAAK,gBAAgB,MAAM,CAAC,eAAe,WAAW,WAAW,cAAc,WAAW,sBAAsB,GAAG;AAAA,MACnJ,iBAAiB,gBAAgB;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,KAAK,gBAAgB,KAAK,CAAC,YAAY,kBAAkB,OAAO,CAAC,IACvE,CAAC,8BAA8B,IAC/B,CAAC;AAAA,IACP;AAAA,IACA,gBAAgB,sBAAsB,KAAK,oBAAoB;AAAA,IAC/D,mBAAmB,KAAK,kBAAkB,IAAI,uBAAuB;AAAA,IACrE,OAAO,KAAK,MAAM,IAAI,WAAW;AAAA,IACjC,WAAW,iBAAiB,KAAK,SAAS;AAAA,IAC1C,sBAAsB,KAAK,UAAU,wBAAwB,CAAC;AAAA,EAChE;AACF;AAEA,SAAS,mBAAmB,MAAmF;AAC7G,QAAM,WAA6B,CAAC;AACpC,aAAW,QAAQ,KAAK,OAAO;AAC7B,UAAM,WAAW,kBAAkB,KAAK,QAAQ;AAChD,QAAI,CAAC,SAAU;AACf,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN;AAAA,MACA,YAAY;AAAA,QACV,QAAQ,KAAK;AAAA,QACb,UAAU,KAAK;AAAA,QACf,cAAc,KAAK,kBAAkB,eAAe,KAAK,cAAc,IAAI,KAAK,gBAAgB,KAAK;AAAA,QACrG,cAAc,KAAK,gBAAgB;AAAA,QACnC,eAAe,KAAK;AAAA,QACpB,QAAQ,KAAK,UAAU;AAAA,MACzB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,aAAW,cAAc,KAAK,aAAa;AACzC,UAAM,WAAW,kBAAkB,WAAW,WAAW;AACzD,QAAI,CAAC,SAAU;AACf,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN;AAAA,MACA,YAAY;AAAA,QACV,cAAc,WAAW;AAAA,QACzB,QAAQ;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,EACF;AACF;AAEA,eAAsB,IACpB,KACA,SACA;AACA,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,WAAW,UAAU,EAAE,EAAE,SAAS;AACrC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,QAAQ,aAAa,QAAQ,CAAC,CAAC;AAChG,MAAI,CAAC,YAAY,SAAS;AACxB,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,6BAA6B,eAAe,GAAG,SAAS,YAAY,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAChJ;AAEA,QAAM,OAAO,MAAM,eAAe,KAAK,EAAE;AACzC,MAAI,cAAc,KAAM,QAAO,KAAK;AAEpC,MAAI,YAAY,KAAK,WAAW,WAAW;AACzC,WAAO,IAAI,SAAS,KAAK,UAAU,mBAAmB,IAAI,CAAC,GAAG;AAAA,MAC5D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,SAAS,KAAK,gBAAgB,IAAI,CAAC;AAC5C;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,iBAAiB,EAAE,OAAO;AAAA,EAC1B,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AACrD,CAAC;AAED,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,IAClB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,OAAO,EAAE,OAAO;AAAA,IAChB,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,IACrC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,IACxC,QAAQ,EAAE,KAAK,uBAAuB;AAAA,IACtC,cAAc,EAAE,KAAK,mBAAmB,EAAE,SAAS;AAAA,IACnD,WAAW,EAAE,KAAK,gBAAgB,EAAE,SAAS;AAAA,IAC7C,sBAAsB,EAAE,MAAM,iCAAiC;AAAA,IAC/D,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACvD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,uBAAuB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IAClE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,eAAe,EAAE,OAAO;AAAA,MACtB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,aAAa,EAAE,MAAM,EAAE,OAAO;AAAA,IAC5B,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,kBAAkB,EAAE,OAAO;AAAA,MACzB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC7C,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,IACnC,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,IAClC,YAAY,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACvD,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,IACxC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAAA,IAClC,QAAQ,EAAE,KAAK,wBAAwB;AAAA,IACvC,mBAAmB,EAAE,OAAO;AAAA,IAC5B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,iBAAiB,EAAE,MAAM,EAAE,OAAO;AAAA,IAChC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,IAC3B,iBAAiB,EAAE,OAAO;AAAA,MACxB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MACrC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IACtC,CAAC,EAAE,SAAS;AAAA,IACZ,WAAW,EAAE,KAAK,gBAAgB;AAAA,IAClC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3C,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,WAAW,EAAE,QAAQ;AAAA,IACrB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,WAAW,EAAE,OAAO;AAAA,IAClB,OAAO,EAAE,QAAQ;AAAA,IACjB,iBAAiB,EAAE,OAAO;AAAA,IAC1B,eAAe,EAAE,OAAO;AAAA,IACxB,eAAe,EAAE,OAAO;AAAA,IACxB,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IAC5B,MAAM,EAAE,MAAM,EAAE,OAAO;AAAA,MACrB,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,MAC9B,QAAQ,EAAE,KAAK,wBAAwB;AAAA,MACvC,mBAAmB,EAAE,OAAO;AAAA,MAC5B,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,CAAC;AAAA,EACD,gBAAgB,EAAE,OAAO;AAAA,IACvB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,IAC7B,cAAc,EAAE,MAAM,EAAE,OAAO;AAAA,MAC7B,SAAS,EAAE,OAAO;AAAA,MAClB,MAAM,EAAE,OAAO;AAAA,IACjB,CAAC,CAAC;AAAA,IACF,aAAa,EAAE,KAAK,eAAe;AAAA,IACnC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,IAC1C,YAAY,EAAE,KAAK,qBAAqB;AAAA,IACxC,cAAc,EAAE,QAAQ;AAAA,IACxB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,EAAE,SAAS;AAAA,EACZ,mBAAmB,EAAE,MAAM,EAAE,OAAO;AAAA,IAClC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,YAAY,EAAE,KAAK,qBAAqB;AAAA,IACxC,OAAO,EAAE,OAAO;AAAA,IAChB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,QAAQ,EAAE,KAAK,wBAAwB;AAAA,IACvC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,OAAO,EAAE,MAAM,EAAE,OAAO;AAAA,IACtB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,kBAAkB,EAAE,OAAO,EAAE,KAAK;AAAA,IAClC,kBAAkB,EAAE,OAAO;AAAA,MACzB,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,IAC9C,CAAC,EAAE,SAAS;AAAA,IACZ,MAAM,EAAE,OAAO;AAAA,IACf,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,eAAe,EAAE,OAAO;AAAA,IACxB,UAAU,EAAE,OAAO;AAAA,IACnB,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,IACnD,oBAAoB,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,IACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,IAClC,UAAU,EAAE,QAAQ;AAAA,IACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC,CAAC;AAAA,EACF,WAAW,EAAE,OAAO;AAAA,IAClB,cAAc,EAAE,KAAK,mBAAmB,EAAE,SAAS;AAAA,IACnD,WAAW,EAAE,KAAK,gBAAgB,EAAE,SAAS;AAAA,IAC7C,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,IACvC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,CAAC;AAAA,EACD,sBAAsB,EAAE,MAAM,iCAAiC;AACjE,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,MAAM,EAAE,QAAQ,mBAAmB;AAAA,EACnC,UAAU,EAAE,MAAM,EAAE,OAAO;AAAA,IACzB,MAAM,EAAE,QAAQ,SAAS;AAAA,IACzB,UAAU,EAAE,QAAQ;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC9C,CAAC,CAAC;AACJ,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,WAAW;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/statements/[id]/readiness/route.js

@@ -3,6 +3,7 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { EudrDueDiligenceStatement } from "../../../../data/entities.js";
 import { EUDR_STATEMENT_STATUSES } from "../../../../data/validators.js";
 import { evaluateSubmissionGate } from "../../../../lib/statement-lifecycle.js";
@@ -43,7 +44,7 @@ async function GET(req, context) {
     if (Array.isArray(orgScope?.filterIds)) {
       statementFilter.organizationId = { $in: orgScope.filterIds };
     } else {
-      const organizationId = orgScope?.selectedId ?? auth.orgId;
+      const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth);
       if (!organizationId) {
         return Response.json({ error: translate("eudr.errors.forbidden", "Forbidden") }, { status: 403 });
       }

package/dist/modules/eudr/api/statements/[id]/readiness/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/eudr/api/statements/%5Bid%5D/readiness/route.ts"],
-  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport type { NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { EudrDueDiligenceStatement } from '../../../../data/entities'\nimport { EUDR_STATEMENT_STATUSES } from '../../../../data/validators'\nimport { evaluateSubmissionGate } from '../../../../lib/statement-lifecycle'\nimport {\n  loadLatestAssessmentForGate,\n  loadStatementSubmissionsForGate,\n} from '../../../../commands/statements'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst uuidSchema = z.string().uuid()\n\ntype AuthenticatedContext = Exclude<AuthContext, null>\n\nfunction hasPrivilegedStatementAccess(auth: AuthenticatedContext): boolean {\n  return auth.isSuperAdmin === true\n}\n\nexport async function GET(\n  req: NextRequest,\n  context: { params: Promise<{ id: string }> },\n) {\n  const { id } = await context.params\n  const { translate } = await resolveTranslations()\n  if (!uuidSchema.safeParse(id).success) {\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const statementFilter: FilterQuery<EudrDueDiligenceStatement> = {\n    id,\n    deletedAt: null,\n  }\n  if (auth.tenantId) {\n    statementFilter.tenantId = auth.tenantId\n  } else if (!auth.isSuperAdmin) {\n    return Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  if (!hasPrivilegedStatementAccess(auth)) {\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (Array.isArray(orgScope?.filterIds)) {\n      statementFilter.organizationId = { $in: orgScope.filterIds }\n    } else {\n      const organizationId = orgScope?.selectedId ?? auth.orgId\n      if (!organizationId) {\n        return Response.json({ error: translate('eudr.errors.forbidden', 'Forbidden') }, { status: 403 })\n      }\n      statementFilter.organizationId = organizationId\n    }\n  }\n\n  const statement = await em.findOne(EudrDueDiligenceStatement, statementFilter)\n  if (!statement) {\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const referencedStatements = Array.isArray(statement.referencedStatements)\n    ? statement.referencedStatements\n    : []\n  const [submissions, latestAssessment] = await Promise.all([\n    loadStatementSubmissionsForGate(em.fork(), statement),\n    loadLatestAssessmentForGate(em.fork(), statement),\n  ])\n  const gate = evaluateSubmissionGate({\n    actorRole: statement.actorRole ?? null,\n    referencedStatementsCount: referencedStatements.length,\n    submissions,\n    latestAssessment,\n  })\n\n  return Response.json({\n    status: statement.status,\n    allowed: gate.allowed,\n    reasons: gate.reasons.map((reason) => `eudr.gate.${reason}`),\n  })\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nconst readinessResponseSchema = z.object({\n  status: z.enum(EUDR_STATEMENT_STATUSES),\n  allowed: z.boolean(),\n  reasons: z.array(z.string()),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Evaluate the submit gate for a due diligence statement',\n  methods: {\n    GET: {\n      summary: 'Evaluate the submit gate for a due diligence statement',\n      description: 'Runs the draft\u2192submitted gate evaluation without transitioning the statement, returning the unmet requirements as machine-readable i18n keys (eudr.gate.*). Lets the UI show a live readiness checklist before the operator attempts Submit.',\n      responses: [\n        {\n          status: 200,\n          description: 'Gate evaluation result',\n          schema: readinessResponseSchema,\n        },\n      ],\n      errors: [\n        {\n          status: 404,\n          description: 'Statement not found',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAEA,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,0CAA0C;AACnD,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK;AAInC,SAAS,6BAA6B,MAAqC;AACzE,SAAO,KAAK,iBAAiB;AAC/B;AAEA,eAAsB,IACpB,KACA,SACA;AACA,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,WAAW,UAAU,EAAE,EAAE,SAAS;AACrC,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,kBAA0D;AAAA,IAC9D;AAAA,IACA,WAAW;AAAA,EACb;AACA,MAAI,KAAK,UAAU;AACjB,oBAAgB,WAAW,KAAK;AAAA,EAClC,WAAW,CAAC,KAAK,cAAc;AAC7B,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AACA,MAAI,CAAC,6BAA6B,IAAI,GAAG;AACvC,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,QAAI,MAAM,QAAQ,UAAU,SAAS,GAAG;AACtC,sBAAgB,iBAAiB,EAAE,KAAK,SAAS,UAAU;AAAA,IAC7D,OAAO;AACL,YAAM,iBAAiB,UAAU,cAAc,KAAK;AACpD,UAAI,CAAC,gBAAgB;AACnB,eAAO,SAAS,KAAK,EAAE,OAAO,UAAU,yBAAyB,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClG;AACA,sBAAgB,iBAAiB;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,2BAA2B,eAAe;AAC7E,MAAI,CAAC,WAAW;AACd,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,uBAAuB,MAAM,QAAQ,UAAU,oBAAoB,IACrE,UAAU,uBACV,CAAC;AACL,QAAM,CAAC,aAAa,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,IACxD,gCAAgC,GAAG,KAAK,GAAG,SAAS;AAAA,IACpD,4BAA4B,GAAG,KAAK,GAAG,SAAS;AAAA,EAClD,CAAC;AACD,QAAM,OAAO,uBAAuB;AAAA,IAClC,WAAW,UAAU,aAAa;AAAA,IAClC,2BAA2B,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,QAAQ,UAAU;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,QAAQ,IAAI,CAAC,WAAW,aAAa,MAAM,EAAE;AAAA,EAC7D,CAAC;AACH;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,QAAQ,EAAE,KAAK,uBAAuB;AAAA,EACtC,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;AAC7B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager, FilterQuery } from '@mikro-orm/postgresql'\nimport type { NextRequest } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { EudrDueDiligenceStatement } from '../../../../data/entities'\nimport { EUDR_STATEMENT_STATUSES } from '../../../../data/validators'\nimport { evaluateSubmissionGate } from '../../../../lib/statement-lifecycle'\nimport {\n  loadLatestAssessmentForGate,\n  loadStatementSubmissionsForGate,\n} from '../../../../commands/statements'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.statements.view'] },\n}\n\nconst uuidSchema = z.string().uuid()\n\ntype AuthenticatedContext = Exclude<AuthContext, null>\n\nfunction hasPrivilegedStatementAccess(auth: AuthenticatedContext): boolean {\n  return auth.isSuperAdmin === true\n}\n\nexport async function GET(\n  req: NextRequest,\n  context: { params: Promise<{ id: string }> },\n) {\n  const { id } = await context.params\n  const { translate } = await resolveTranslations()\n  if (!uuidSchema.safeParse(id).success) {\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth) {\n    return Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as EntityManager\n\n  const statementFilter: FilterQuery<EudrDueDiligenceStatement> = {\n    id,\n    deletedAt: null,\n  }\n  if (auth.tenantId) {\n    statementFilter.tenantId = auth.tenantId\n  } else if (!auth.isSuperAdmin) {\n    return Response.json({ error: translate('eudr.errors.unauthorized', 'Unauthorized') }, { status: 401 })\n  }\n  if (!hasPrivilegedStatementAccess(auth)) {\n    const orgScope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n    if (Array.isArray(orgScope?.filterIds)) {\n      statementFilter.organizationId = { $in: orgScope.filterIds }\n    } else {\n      const organizationId = resolveSingleOrganizationIdOrDeny(orgScope, auth)\n      if (!organizationId) {\n        return Response.json({ error: translate('eudr.errors.forbidden', 'Forbidden') }, { status: 403 })\n      }\n      statementFilter.organizationId = organizationId\n    }\n  }\n\n  const statement = await em.findOne(EudrDueDiligenceStatement, statementFilter)\n  if (!statement) {\n    return Response.json({ error: translate('eudr.errors.statement_not_found', 'Statement not found') }, { status: 404 })\n  }\n\n  const referencedStatements = Array.isArray(statement.referencedStatements)\n    ? statement.referencedStatements\n    : []\n  const [submissions, latestAssessment] = await Promise.all([\n    loadStatementSubmissionsForGate(em.fork(), statement),\n    loadLatestAssessmentForGate(em.fork(), statement),\n  ])\n  const gate = evaluateSubmissionGate({\n    actorRole: statement.actorRole ?? null,\n    referencedStatementsCount: referencedStatements.length,\n    submissions,\n    latestAssessment,\n  })\n\n  return Response.json({\n    status: statement.status,\n    allowed: gate.allowed,\n    reasons: gate.reasons.map((reason) => `eudr.gate.${reason}`),\n  })\n}\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nconst readinessResponseSchema = z.object({\n  status: z.enum(EUDR_STATEMENT_STATUSES),\n  allowed: z.boolean(),\n  reasons: z.array(z.string()),\n})\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'Evaluate the submit gate for a due diligence statement',\n  methods: {\n    GET: {\n      summary: 'Evaluate the submit gate for a due diligence statement',\n      description: 'Runs the draft\u2192submitted gate evaluation without transitioning the statement, returning the unmet requirements as machine-readable i18n keys (eudr.gate.*). Lets the UI show a live readiness checklist before the operator attempts Submit.',\n      responses: [\n        {\n          status: 200,\n          description: 'Gate evaluation result',\n          schema: readinessResponseSchema,\n        },\n      ],\n      errors: [\n        {\n          status: 404,\n          description: 'Statement not found',\n          schema: errorSchema,\n        },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAEA,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,iCAAiC;AAC1C,SAAS,+BAA+B;AACxC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,aAAa,EAAE,OAAO,EAAE,KAAK;AAInC,SAAS,6BAA6B,MAAqC;AACzE,SAAO,KAAK,iBAAiB;AAC/B;AAEA,eAAsB,IACpB,KACA,SACA;AACA,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,MAAI,CAAC,WAAW,UAAU,EAAE,EAAE,SAAS;AACrC,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM;AACT,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,kBAA0D;AAAA,IAC9D;AAAA,IACA,WAAW;AAAA,EACb;AACA,MAAI,KAAK,UAAU;AACjB,oBAAgB,WAAW,KAAK;AAAA,EAClC,WAAW,CAAC,KAAK,cAAc;AAC7B,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,4BAA4B,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACxG;AACA,MAAI,CAAC,6BAA6B,IAAI,GAAG;AACvC,UAAM,WAAW,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3F,QAAI,MAAM,QAAQ,UAAU,SAAS,GAAG;AACtC,sBAAgB,iBAAiB,EAAE,KAAK,SAAS,UAAU;AAAA,IAC7D,OAAO;AACL,YAAM,iBAAiB,kCAAkC,UAAU,IAAI;AACvE,UAAI,CAAC,gBAAgB;AACnB,eAAO,SAAS,KAAK,EAAE,OAAO,UAAU,yBAAyB,WAAW,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClG;AACA,sBAAgB,iBAAiB;AAAA,IACnC;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,GAAG,QAAQ,2BAA2B,eAAe;AAC7E,MAAI,CAAC,WAAW;AACd,WAAO,SAAS,KAAK,EAAE,OAAO,UAAU,mCAAmC,qBAAqB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACtH;AAEA,QAAM,uBAAuB,MAAM,QAAQ,UAAU,oBAAoB,IACrE,UAAU,uBACV,CAAC;AACL,QAAM,CAAC,aAAa,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,IACxD,gCAAgC,GAAG,KAAK,GAAG,SAAS;AAAA,IACpD,4BAA4B,GAAG,KAAK,GAAG,SAAS;AAAA,EAClD,CAAC;AACD,QAAM,OAAO,uBAAuB;AAAA,IAClC,WAAW,UAAU,aAAa;AAAA,IAClC,2BAA2B,qBAAqB;AAAA,IAChD;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,SAAS,KAAK;AAAA,IACnB,QAAQ,UAAU;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,SAAS,KAAK,QAAQ,IAAI,CAAC,WAAW,aAAa,MAAM,EAAE;AAAA,EAC7D,CAAC;AACH;AAEA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,QAAQ,EAAE,KAAK,uBAAuB;AAAA,EACtC,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;AAC7B,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/eudr/api/suppliers/compliance/route.js

@@ -6,6 +6,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { resolveSingleOrganizationIdOrDeny } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { EUDR_SUBMISSION_STATUSES } from "../../../data/validators.js";
 const logger = createLogger("eudr");
 const querySchema = z.object({
@@ -69,7 +70,7 @@ async function resolveRequestContext(req) {
     });
   }
   const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req });
-  const organizationId = scope?.selectedId ?? auth.orgId ?? null;
+  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null;
   if (!organizationId) {
     throw new CrudHttpError(400, {
       error: translate("eudr.errors.organization_required", "Organization context is required")

package/dist/modules/eudr/api/suppliers/compliance/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/eudr/api/suppliers/compliance/route.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { EUDR_SUBMISSION_STATUSES } from '../../../data/validators'\n\nconst logger = createLogger('eudr')\n\nconst querySchema = z.object({\n  supplierEntityId: z.string().uuid(),\n})\n\nconst responseSchema = z.object({\n  submissions: z.object({\n    total: z.number().int().nonnegative(),\n    byStatus: z.record(z.string(), z.number().int().nonnegative()),\n    avgCompleteness: z.number().int().min(0).max(100).nullable(),\n  }),\n  lastSubmissionAt: z.string().datetime().nullable(),\n  plots: z.object({\n    total: z.number().int().nonnegative(),\n    withWarnings: z.number().int().nonnegative(),\n  }).optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.submissions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'EUDR supplier compliance aggregate',\n  methods: {\n    GET: {\n      summary: 'Get supplier compliance readiness',\n      description: 'Returns organization-scoped EUDR submission and permitted plot aggregates for a supplier.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Supplier compliance readiness', schema: responseSchema },\n        { status: 400, description: 'Invalid query or organization context', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 500, description: 'Failed to load supplier compliance readiness', schema: errorSchema },\n      ],\n    },\n  },\n}\n\ntype SupplierComplianceDatabase = {\n  eudr_evidence_submissions: {\n    supplier_entity_id: string\n    tenant_id: string\n    organization_id: string\n    status: string\n    completeness_score: number\n    created_at: Date\n    deleted_at: Date | null\n  }\n  eudr_plots: {\n    supplier_entity_id: string\n    tenant_id: string\n    organization_id: string\n    validation_warnings: unknown\n    is_active: boolean\n    deleted_at: Date | null\n  }\n}\n\ntype RequestContext = {\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype CountValue = string | number | bigint | null | undefined\n\nfunction normalizeCount(value: CountValue): number {\n  const parsed = typeof value === 'bigint' ? Number(value) : Number(value ?? 0)\n  return Number.isFinite(parsed) && parsed >= 0 ? Math.trunc(parsed) : 0\n}\n\nfunction normalizeNullableInteger(value: CountValue): number | null {\n  if (value === null || value === undefined) return null\n  const parsed = typeof value === 'bigint' ? Number(value) : Number(value)\n  return Number.isFinite(parsed) ? Math.round(parsed) : null\n}\n\nfunction normalizeDateTime(value: Date | string | null | undefined): string | null {\n  if (value === null || value === undefined) return null\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date.toISOString()\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, {\n      error: translate('eudr.errors.unauthorized', 'Unauthorized'),\n    })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = scope?.selectedId ?? auth.orgId ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n\n  const tenantId = auth.tenantId\n  const userId = auth.sub ?? null\n\n  return {\n    em: container.resolve('em') as EntityManager,\n    tenantId,\n    organizationId,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], { tenantId, organizationId })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const parsedQuery = querySchema.safeParse(Object.fromEntries(new URL(req.url).searchParams))\n    if (!parsedQuery.success) {\n      throw new CrudHttpError(400, {\n        error: translate('eudr.errors.invalid_query', 'Invalid query'),\n      })\n    }\n\n    const { supplierEntityId } = parsedQuery.data\n    const db = ctx.em.getKysely<SupplierComplianceDatabase>()\n    const submissionScope = db\n      .selectFrom('eudr_evidence_submissions')\n      .where('supplier_entity_id', '=', supplierEntityId)\n      .where('tenant_id', '=', ctx.tenantId)\n      .where('organization_id', '=', ctx.organizationId)\n      .where('deleted_at', 'is', null)\n\n    const [submissionTotals, submissionStatusRows, canViewPlots] = await Promise.all([\n      submissionScope\n        .select([\n          sql<CountValue>`count(*)`.as('total'),\n          sql<CountValue>`round(avg(completeness_score))`.as('avg_completeness'),\n          sql<Date | string | null>`max(created_at)`.as('last_submission_at'),\n        ])\n        .executeTakeFirst(),\n      submissionScope\n        .select([\n          'status',\n          sql<CountValue>`count(*)`.as('total'),\n        ])\n        .groupBy('status')\n        .execute(),\n      ctx.hasFeature('eudr.plots.view'),\n    ])\n\n    const byStatus: Record<string, number> = Object.fromEntries(\n      EUDR_SUBMISSION_STATUSES.map((status) => [status, 0]),\n    )\n    for (const row of submissionStatusRows) {\n      if (!EUDR_SUBMISSION_STATUSES.includes(row.status as (typeof EUDR_SUBMISSION_STATUSES)[number])) continue\n      byStatus[row.status] = normalizeCount(row.total)\n    }\n\n    let plots: { total: number; withWarnings: number } | undefined\n    if (canViewPlots) {\n      const plotCounts = await db\n        .selectFrom('eudr_plots')\n        .select([\n          sql<CountValue>`count(*)`.as('total'),\n          sql<CountValue>`count(*) filter (where jsonb_array_length(validation_warnings) > 0)`.as('with_warnings'),\n        ])\n        .where('supplier_entity_id', '=', supplierEntityId)\n        .where('tenant_id', '=', ctx.tenantId)\n        .where('organization_id', '=', ctx.organizationId)\n        .where('deleted_at', 'is', null)\n        .where('is_active', '=', true)\n        .executeTakeFirst()\n\n      plots = {\n        total: normalizeCount(plotCounts?.total),\n        withWarnings: normalizeCount(plotCounts?.with_warnings),\n      }\n    }\n\n    const response = responseSchema.parse({\n      submissions: {\n        total: normalizeCount(submissionTotals?.total),\n        byStatus,\n        avgCompleteness: normalizeNullableInteger(submissionTotals?.avg_completeness),\n      },\n      lastSubmissionAt: normalizeDateTime(submissionTotals?.last_submission_at),\n      ...(plots ? { plots } : {}),\n    })\n\n    return Response.json(response)\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n\n    logger.error('Supplier compliance aggregate failed', {\n      component: 'api/suppliers/compliance',\n      err: error,\n    })\n    const { translate } = await resolveTranslations()\n    return Response.json(\n      { error: translate('eudr.errors.compliance_overview_failed', 'Failed to load EUDR compliance overview') },\n      { status: 500 },\n    )\n  }\n}\n"],
-  "mappings": "AACA,SAAS,WAAW;AACpB,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAG7B,SAAS,0CAA0C;AACnD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,MAAM;AAElC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AACpC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,aAAa,EAAE,OAAO;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC;AAAA,IAC7D,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7D,CAAC;AAAA,EACD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,OAAO,EAAE,OAAO;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACpC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC7C,CAAC,EAAE,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AACvE;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,eAAe;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,yCAAyC,QAAQ,YAAY;AAAA,QACzF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,YAAY;AAAA,MAClG;AAAA,IACF;AAAA,EACF;AACF;AA+BA,SAAS,eAAe,OAA2B;AACjD,QAAM,SAAS,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI,OAAO,SAAS,CAAC;AAC5E,SAAO,OAAO,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK,MAAM,MAAM,IAAI;AACvE;AAEA,SAAS,yBAAyB,OAAkC;AAClE,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAM,SAAS,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI,OAAO,KAAK;AACvE,SAAO,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI;AACxD;AAEA,SAAS,kBAAkB,OAAwD;AACjF,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY;AAChE;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,4BAA4B,cAAc;AAAA,IAC7D,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,OAAO,cAAc,KAAK,SAAS;AAC1D,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AAEA,QAAM,WAAW,KAAK;AACtB,QAAM,SAAS,KAAK,OAAO;AAE3B,SAAO;AAAA,IACL,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,MAC7F,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,IAAI,IAAI,GAAG,EAAE,YAAY,CAAC;AAC3F,QAAI,CAAC,YAAY,SAAS;AACxB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,eAAe;AAAA,MAC/D,CAAC;AAAA,IACH;AAEA,UAAM,EAAE,iBAAiB,IAAI,YAAY;AACzC,UAAM,KAAK,IAAI,GAAG,UAAsC;AACxD,UAAM,kBAAkB,GACrB,WAAW,2BAA2B,EACtC,MAAM,sBAAsB,KAAK,gBAAgB,EACjD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,cAAc,MAAM,IAAI;AAEjC,UAAM,CAAC,kBAAkB,sBAAsB,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/E,gBACG,OAAO;AAAA,QACN,cAA0B,GAAG,OAAO;AAAA,QACpC,oCAAgD,GAAG,kBAAkB;AAAA,QACrE,qBAA2C,GAAG,oBAAoB;AAAA,MACpE,CAAC,EACA,iBAAiB;AAAA,MACpB,gBACG,OAAO;AAAA,QACN;AAAA,QACA,cAA0B,GAAG,OAAO;AAAA,MACtC,CAAC,EACA,QAAQ,QAAQ,EAChB,QAAQ;AAAA,MACX,IAAI,WAAW,iBAAiB;AAAA,IAClC,CAAC;AAED,UAAM,WAAmC,OAAO;AAAA,MAC9C,yBAAyB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAAA,IACtD;AACA,eAAW,OAAO,sBAAsB;AACtC,UAAI,CAAC,yBAAyB,SAAS,IAAI,MAAmD,EAAG;AACjG,eAAS,IAAI,MAAM,IAAI,eAAe,IAAI,KAAK;AAAA,IACjD;AAEA,QAAI;AACJ,QAAI,cAAc;AAChB,YAAM,aAAa,MAAM,GACtB,WAAW,YAAY,EACvB,OAAO;AAAA,QACN,cAA0B,GAAG,OAAO;AAAA,QACpC,yEAAqF,GAAG,eAAe;AAAA,MACzG,CAAC,EACA,MAAM,sBAAsB,KAAK,gBAAgB,EACjD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,aAAa,KAAK,IAAI,EAC5B,iBAAiB;AAEpB,cAAQ;AAAA,QACN,OAAO,eAAe,YAAY,KAAK;AAAA,QACvC,cAAc,eAAe,YAAY,aAAa;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,WAAW,eAAe,MAAM;AAAA,MACpC,aAAa;AAAA,QACX,OAAO,eAAe,kBAAkB,KAAK;AAAA,QAC7C;AAAA,QACA,iBAAiB,yBAAyB,kBAAkB,gBAAgB;AAAA,MAC9E;AAAA,MACA,kBAAkB,kBAAkB,kBAAkB,kBAAkB;AAAA,MACxE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IAC3B,CAAC;AAED,WAAO,SAAS,KAAK,QAAQ;AAAA,EAC/B,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAEA,WAAO,MAAM,wCAAwC;AAAA,MACnD,WAAW;AAAA,MACX,KAAK;AAAA,IACP,CAAC;AACD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { sql } from 'kysely'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveSingleOrganizationIdOrDeny } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { EUDR_SUBMISSION_STATUSES } from '../../../data/validators'\n\nconst logger = createLogger('eudr')\n\nconst querySchema = z.object({\n  supplierEntityId: z.string().uuid(),\n})\n\nconst responseSchema = z.object({\n  submissions: z.object({\n    total: z.number().int().nonnegative(),\n    byStatus: z.record(z.string(), z.number().int().nonnegative()),\n    avgCompleteness: z.number().int().min(0).max(100).nullable(),\n  }),\n  lastSubmissionAt: z.string().datetime().nullable(),\n  plots: z.object({\n    total: z.number().int().nonnegative(),\n    withWarnings: z.number().int().nonnegative(),\n  }).optional(),\n})\n\nconst errorSchema = z.object({ error: z.string() })\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['eudr.submissions.view'] },\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'EUDR',\n  summary: 'EUDR supplier compliance aggregate',\n  methods: {\n    GET: {\n      summary: 'Get supplier compliance readiness',\n      description: 'Returns organization-scoped EUDR submission and permitted plot aggregates for a supplier.',\n      query: querySchema,\n      responses: [\n        { status: 200, description: 'Supplier compliance readiness', schema: responseSchema },\n        { status: 400, description: 'Invalid query or organization context', schema: errorSchema },\n        { status: 401, description: 'Unauthorized', schema: errorSchema },\n        { status: 403, description: 'Forbidden', schema: errorSchema },\n        { status: 500, description: 'Failed to load supplier compliance readiness', schema: errorSchema },\n      ],\n    },\n  },\n}\n\ntype SupplierComplianceDatabase = {\n  eudr_evidence_submissions: {\n    supplier_entity_id: string\n    tenant_id: string\n    organization_id: string\n    status: string\n    completeness_score: number\n    created_at: Date\n    deleted_at: Date | null\n  }\n  eudr_plots: {\n    supplier_entity_id: string\n    tenant_id: string\n    organization_id: string\n    validation_warnings: unknown\n    is_active: boolean\n    deleted_at: Date | null\n  }\n}\n\ntype RequestContext = {\n  em: EntityManager\n  tenantId: string\n  organizationId: string\n  hasFeature: (feature: string) => Promise<boolean>\n}\n\ntype CountValue = string | number | bigint | null | undefined\n\nfunction normalizeCount(value: CountValue): number {\n  const parsed = typeof value === 'bigint' ? Number(value) : Number(value ?? 0)\n  return Number.isFinite(parsed) && parsed >= 0 ? Math.trunc(parsed) : 0\n}\n\nfunction normalizeNullableInteger(value: CountValue): number | null {\n  if (value === null || value === undefined) return null\n  const parsed = typeof value === 'bigint' ? Number(value) : Number(value)\n  return Number.isFinite(parsed) ? Math.round(parsed) : null\n}\n\nfunction normalizeDateTime(value: Date | string | null | undefined): string | null {\n  if (value === null || value === undefined) return null\n  const date = value instanceof Date ? value : new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date.toISOString()\n}\n\nasync function resolveRequestContext(req: Request): Promise<RequestContext> {\n  const container = await createRequestContainer()\n  const auth = await getAuthFromRequest(req)\n  const { translate } = await resolveTranslations()\n\n  if (!auth?.tenantId) {\n    throw new CrudHttpError(401, {\n      error: translate('eudr.errors.unauthorized', 'Unauthorized'),\n    })\n  }\n\n  const scope = await resolveOrganizationScopeForRequest({ container, auth, request: req })\n  const organizationId = resolveSingleOrganizationIdOrDeny(scope, auth) ?? null\n  if (!organizationId) {\n    throw new CrudHttpError(400, {\n      error: translate('eudr.errors.organization_required', 'Organization context is required'),\n    })\n  }\n\n  let rbacService: RbacService | null\n  try {\n    rbacService = container.resolve('rbacService') as RbacService\n  } catch {\n    rbacService = null\n  }\n\n  const tenantId = auth.tenantId\n  const userId = auth.sub ?? null\n\n  return {\n    em: container.resolve('em') as EntityManager,\n    tenantId,\n    organizationId,\n    hasFeature: async (feature: string) => {\n      if (!rbacService || !userId) return false\n      try {\n        return await rbacService.userHasAllFeatures(userId, [feature], { tenantId, organizationId })\n      } catch {\n        return false\n      }\n    },\n  }\n}\n\nexport async function GET(req: Request) {\n  try {\n    const ctx = await resolveRequestContext(req)\n    const { translate } = await resolveTranslations()\n    const parsedQuery = querySchema.safeParse(Object.fromEntries(new URL(req.url).searchParams))\n    if (!parsedQuery.success) {\n      throw new CrudHttpError(400, {\n        error: translate('eudr.errors.invalid_query', 'Invalid query'),\n      })\n    }\n\n    const { supplierEntityId } = parsedQuery.data\n    const db = ctx.em.getKysely<SupplierComplianceDatabase>()\n    const submissionScope = db\n      .selectFrom('eudr_evidence_submissions')\n      .where('supplier_entity_id', '=', supplierEntityId)\n      .where('tenant_id', '=', ctx.tenantId)\n      .where('organization_id', '=', ctx.organizationId)\n      .where('deleted_at', 'is', null)\n\n    const [submissionTotals, submissionStatusRows, canViewPlots] = await Promise.all([\n      submissionScope\n        .select([\n          sql<CountValue>`count(*)`.as('total'),\n          sql<CountValue>`round(avg(completeness_score))`.as('avg_completeness'),\n          sql<Date | string | null>`max(created_at)`.as('last_submission_at'),\n        ])\n        .executeTakeFirst(),\n      submissionScope\n        .select([\n          'status',\n          sql<CountValue>`count(*)`.as('total'),\n        ])\n        .groupBy('status')\n        .execute(),\n      ctx.hasFeature('eudr.plots.view'),\n    ])\n\n    const byStatus: Record<string, number> = Object.fromEntries(\n      EUDR_SUBMISSION_STATUSES.map((status) => [status, 0]),\n    )\n    for (const row of submissionStatusRows) {\n      if (!EUDR_SUBMISSION_STATUSES.includes(row.status as (typeof EUDR_SUBMISSION_STATUSES)[number])) continue\n      byStatus[row.status] = normalizeCount(row.total)\n    }\n\n    let plots: { total: number; withWarnings: number } | undefined\n    if (canViewPlots) {\n      const plotCounts = await db\n        .selectFrom('eudr_plots')\n        .select([\n          sql<CountValue>`count(*)`.as('total'),\n          sql<CountValue>`count(*) filter (where jsonb_array_length(validation_warnings) > 0)`.as('with_warnings'),\n        ])\n        .where('supplier_entity_id', '=', supplierEntityId)\n        .where('tenant_id', '=', ctx.tenantId)\n        .where('organization_id', '=', ctx.organizationId)\n        .where('deleted_at', 'is', null)\n        .where('is_active', '=', true)\n        .executeTakeFirst()\n\n      plots = {\n        total: normalizeCount(plotCounts?.total),\n        withWarnings: normalizeCount(plotCounts?.with_warnings),\n      }\n    }\n\n    const response = responseSchema.parse({\n      submissions: {\n        total: normalizeCount(submissionTotals?.total),\n        byStatus,\n        avgCompleteness: normalizeNullableInteger(submissionTotals?.avg_completeness),\n      },\n      lastSubmissionAt: normalizeDateTime(submissionTotals?.last_submission_at),\n      ...(plots ? { plots } : {}),\n    })\n\n    return Response.json(response)\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return Response.json(error.body, { status: error.status })\n    }\n\n    logger.error('Supplier compliance aggregate failed', {\n      component: 'api/suppliers/compliance',\n      err: error,\n    })\n    const { translate } = await resolveTranslations()\n    return Response.json(\n      { error: translate('eudr.errors.compliance_overview_failed', 'Failed to load EUDR compliance overview') },\n      { status: 500 },\n    )\n  }\n}\n"],
+  "mappings": "AACA,SAAS,WAAW;AACpB,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAG7B,SAAS,0CAA0C;AACnD,SAAS,yCAAyC;AAClD,SAAS,gCAAgC;AAEzC,MAAM,SAAS,aAAa,MAAM;AAElC,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,kBAAkB,EAAE,OAAO,EAAE,KAAK;AACpC,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,aAAa,EAAE,OAAO;AAAA,IACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACpC,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC;AAAA,IAC7D,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7D,CAAC;AAAA,EACD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,OAAO,EAAE,OAAO;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACpC,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC7C,CAAC,EAAE,SAAS;AACd,CAAC;AAED,MAAM,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE3C,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,uBAAuB,EAAE;AACvE;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,eAAe;AAAA,QACpF,EAAE,QAAQ,KAAK,aAAa,yCAAyC,QAAQ,YAAY;AAAA,QACzF,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,YAAY;AAAA,QAChE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,YAAY;AAAA,QAC7D,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,YAAY;AAAA,MAClG;AAAA,IACF;AAAA,EACF;AACF;AA+BA,SAAS,eAAe,OAA2B;AACjD,QAAM,SAAS,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI,OAAO,SAAS,CAAC;AAC5E,SAAO,OAAO,SAAS,MAAM,KAAK,UAAU,IAAI,KAAK,MAAM,MAAM,IAAI;AACvE;AAEA,SAAS,yBAAyB,OAAkC;AAClE,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAM,SAAS,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI,OAAO,KAAK;AACvE,SAAO,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI;AACxD;AAEA,SAAS,kBAAkB,OAAwD;AACjF,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAM,OAAO,iBAAiB,OAAO,QAAQ,IAAI,KAAK,KAAK;AAC3D,SAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,OAAO,KAAK,YAAY;AAChE;AAEA,eAAe,sBAAsB,KAAuC;AAC1E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAEhD,MAAI,CAAC,MAAM,UAAU;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,4BAA4B,cAAc;AAAA,IAC7D,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AACxF,QAAM,iBAAiB,kCAAkC,OAAO,IAAI,KAAK;AACzE,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,cAAc,KAAK;AAAA,MAC3B,OAAO,UAAU,qCAAqC,kCAAkC;AAAA,IAC1F,CAAC;AAAA,EACH;AAEA,MAAI;AACJ,MAAI;AACF,kBAAc,UAAU,QAAQ,aAAa;AAAA,EAC/C,QAAQ;AACN,kBAAc;AAAA,EAChB;AAEA,QAAM,WAAW,KAAK;AACtB,QAAM,SAAS,KAAK,OAAO;AAE3B,SAAO;AAAA,IACL,IAAI,UAAU,QAAQ,IAAI;AAAA,IAC1B;AAAA,IACA;AAAA,IACA,YAAY,OAAO,YAAoB;AACrC,UAAI,CAAC,eAAe,CAAC,OAAQ,QAAO;AACpC,UAAI;AACF,eAAO,MAAM,YAAY,mBAAmB,QAAQ,CAAC,OAAO,GAAG,EAAE,UAAU,eAAe,CAAC;AAAA,MAC7F,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,MAAM,MAAM,sBAAsB,GAAG;AAC3C,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,cAAc,YAAY,UAAU,OAAO,YAAY,IAAI,IAAI,IAAI,GAAG,EAAE,YAAY,CAAC;AAC3F,QAAI,CAAC,YAAY,SAAS;AACxB,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO,UAAU,6BAA6B,eAAe;AAAA,MAC/D,CAAC;AAAA,IACH;AAEA,UAAM,EAAE,iBAAiB,IAAI,YAAY;AACzC,UAAM,KAAK,IAAI,GAAG,UAAsC;AACxD,UAAM,kBAAkB,GACrB,WAAW,2BAA2B,EACtC,MAAM,sBAAsB,KAAK,gBAAgB,EACjD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,cAAc,MAAM,IAAI;AAEjC,UAAM,CAAC,kBAAkB,sBAAsB,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC/E,gBACG,OAAO;AAAA,QACN,cAA0B,GAAG,OAAO;AAAA,QACpC,oCAAgD,GAAG,kBAAkB;AAAA,QACrE,qBAA2C,GAAG,oBAAoB;AAAA,MACpE,CAAC,EACA,iBAAiB;AAAA,MACpB,gBACG,OAAO;AAAA,QACN;AAAA,QACA,cAA0B,GAAG,OAAO;AAAA,MACtC,CAAC,EACA,QAAQ,QAAQ,EAChB,QAAQ;AAAA,MACX,IAAI,WAAW,iBAAiB;AAAA,IAClC,CAAC;AAED,UAAM,WAAmC,OAAO;AAAA,MAC9C,yBAAyB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAAA,IACtD;AACA,eAAW,OAAO,sBAAsB;AACtC,UAAI,CAAC,yBAAyB,SAAS,IAAI,MAAmD,EAAG;AACjG,eAAS,IAAI,MAAM,IAAI,eAAe,IAAI,KAAK;AAAA,IACjD;AAEA,QAAI;AACJ,QAAI,cAAc;AAChB,YAAM,aAAa,MAAM,GACtB,WAAW,YAAY,EACvB,OAAO;AAAA,QACN,cAA0B,GAAG,OAAO;AAAA,QACpC,yEAAqF,GAAG,eAAe;AAAA,MACzG,CAAC,EACA,MAAM,sBAAsB,KAAK,gBAAgB,EACjD,MAAM,aAAa,KAAK,IAAI,QAAQ,EACpC,MAAM,mBAAmB,KAAK,IAAI,cAAc,EAChD,MAAM,cAAc,MAAM,IAAI,EAC9B,MAAM,aAAa,KAAK,IAAI,EAC5B,iBAAiB;AAEpB,cAAQ;AAAA,QACN,OAAO,eAAe,YAAY,KAAK;AAAA,QACvC,cAAc,eAAe,YAAY,aAAa;AAAA,MACxD;AAAA,IACF;AAEA,UAAM,WAAW,eAAe,MAAM;AAAA,MACpC,aAAa;AAAA,QACX,OAAO,eAAe,kBAAkB,KAAK;AAAA,QAC7C;AAAA,QACA,iBAAiB,yBAAyB,kBAAkB,gBAAgB;AAAA,MAC9E;AAAA,MACA,kBAAkB,kBAAkB,kBAAkB,kBAAkB;AAAA,MACxE,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IAC3B,CAAC;AAED,WAAO,SAAS,KAAK,QAAQ;AAAA,EAC/B,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,SAAS,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC3D;AAEA,WAAO,MAAM,wCAAwC;AAAA,MACnD,WAAW;AAAA,MACX,KAAK;AAAA,IACP,CAAC;AACD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,SAAS;AAAA,MACd,EAAE,OAAO,UAAU,0CAA0C,yCAAyC,EAAE;AAAA,MACxG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/feature_toggles/commands/global.js

@@ -7,6 +7,7 @@ import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/opti
 import { buildChanges, emitCrudSideEffects, emitCrudUndoSideEffects, requireId } from "@open-mercato/shared/lib/commands/helpers";
 import { extractUndoPayload } from "@open-mercato/shared/lib/commands/undo";
 import { resolveRedoSnapshot } from "@open-mercato/shared/lib/commands/redo";
+import { isFeatureToggleCacheDisabled } from "../lib/feature-flag-check.js";
 import { E } from "../../../generated/entities.ids.generated.js";
 function assertGlobalToggleSuperAdmin(ctx) {
   if (ctx.systemActor === true) return;
@@ -16,6 +17,11 @@ function assertGlobalToggleSuperAdmin(ctx) {
 }
 const featureToggleCrudIndexer = { entityType: E.feature_toggles.feature_toggle };
 const FEATURE_TOGGLE_LOCK_RESOURCE_KIND = "feature_toggles.feature_toggle";
+async function invalidateGlobalToggleCache(ctx, identifier) {
+  if (isFeatureToggleCacheDisabled()) return;
+  const featureTogglesService = ctx.container.resolve("featureTogglesService");
+  await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(identifier);
+}
 function featureToggleIdentifiers(toggle) {
   return {
     id: toggle.id,
@@ -117,8 +123,7 @@ const createToggleCommand = {
         syncOrigin: ctx.syncOrigin,
         indexer: featureToggleCrudIndexer
       });
-      const featureTogglesService = ctx.container.resolve("featureTogglesService");
-      await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+      await invalidateGlobalToggleCache(ctx, toggle.identifier);
     }
   },
   redo: async ({ logEntry, ctx }) => {
@@ -156,8 +161,7 @@ const createToggleCommand = {
       syncOrigin: ctx.syncOrigin,
       indexer: featureToggleCrudIndexer
     });
-    const featureTogglesService = ctx.container.resolve("featureTogglesService");
-    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    await invalidateGlobalToggleCache(ctx, toggle.identifier);
     return { toggleId: toggle.id };
   }
 };
@@ -204,11 +208,10 @@ const updateToggleCommand = {
       syncOrigin: ctx.syncOrigin,
       indexer: featureToggleCrudIndexer
     });
-    const featureTogglesService = ctx.container.resolve("featureTogglesService");
     if (previousIdentifier !== toggle.identifier) {
-      await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(previousIdentifier);
+      await invalidateGlobalToggleCache(ctx, previousIdentifier);
     }
-    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    await invalidateGlobalToggleCache(ctx, toggle.identifier);
     return { toggleId: toggle.id };
   },
   buildLog: async ({ snapshots, ctx }) => {
@@ -283,8 +286,7 @@ const updateToggleCommand = {
       syncOrigin: ctx.syncOrigin,
       indexer: featureToggleCrudIndexer
     });
-    const featureTogglesService = ctx.container.resolve("featureTogglesService");
-    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    await invalidateGlobalToggleCache(ctx, toggle.identifier);
   }
 };
 const deleteToggleCommand = {
@@ -308,8 +310,7 @@ const deleteToggleCommand = {
       current: toggle.updatedAt ?? null,
       request: ctx.request ?? null
     });
-    const featureTogglesService = ctx.container.resolve("featureTogglesService");
-    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    await invalidateGlobalToggleCache(ctx, toggle.identifier);
     toggle.deletedAt = /* @__PURE__ */ new Date();
     await em.flush();
     const dataEngine = ctx.container.resolve("dataEngine");
@@ -379,8 +380,7 @@ const deleteToggleCommand = {
       toggle.defaultValue = before.defaultValue;
       toggle.deletedAt = null;
     }
-    const featureTogglesService = ctx.container.resolve("featureTogglesService");
-    await featureTogglesService.invalidateIsEnabledCacheByIdentifierTag(toggle.identifier);
+    await invalidateGlobalToggleCache(ctx, toggle.identifier);
     await em.flush();
     const dataEngine = ctx.container.resolve("dataEngine");
     await emitCrudUndoSideEffects({