@things-factory/compliance 0.0.0-stage → 10.1.254

package/dist-server/service/common/correction.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.entities = exports.ComplianceCorrection = void 0;
+exports.recordCorrections = recordCorrections;
+exports.correctionsOf = correctionsOf;
+const tslib_1 = require("tslib");
+const type_graphql_1 = require("type-graphql");
+const typeorm_1 = require("typeorm");
+const auth_base_1 = require("@things-factory/auth-base");
+const shell_1 = require("@things-factory/shell");
+/*
+ * 고친 기록 (ADR-0187 「그 밖의 법무 기록」) - the legal records are not deleted, and a value written on one is changed
+ * only with a row saying what it was, what it became, who changed it and when. Every record of the module keeps its
+ * corrections here, by its kind and id; who reads them is who reads that record.
+ */
+let ComplianceCorrection = class ComplianceCorrection {
+};
+exports.ComplianceCorrection = ComplianceCorrection;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
+    (0, type_graphql_1.Field)(type => shell_1.Domain, { nullable: true }),
+    tslib_1.__metadata("design:type", shell_1.Domain)
+], ComplianceCorrection.prototype, "domain", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.domain),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "domainId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'The kind of record changed - ComplianceCase, PrivacyRequest, PrivacyIncident' }),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "subjectKind", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'The id of the record changed' }),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "subjectId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'The field changed' }),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "field", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'What it was, as text' }),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "before", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'What it became, as text' }),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "after", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'When it was changed' }),
+    tslib_1.__metadata("design:type", Date)
+], ComplianceCorrection.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
+    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true, description: 'Who changed it' }),
+    tslib_1.__metadata("design:type", auth_base_1.User)
+], ComplianceCorrection.prototype, "creator", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.creator),
+    tslib_1.__metadata("design:type", String)
+], ComplianceCorrection.prototype, "creatorId", void 0);
+exports.ComplianceCorrection = ComplianceCorrection = tslib_1.__decorate([
+    (0, typeorm_1.Entity)({ name: 'compliance_corrections' }),
+    (0, typeorm_1.Index)('ix_compliance_correction_0', (row) => [row.domain, row.subjectKind, row.subjectId]),
+    (0, type_graphql_1.ObjectType)({ description: 'Entity for ComplianceCorrection - a value of a legal record changed after it was written: what it was and what it became' })
+], ComplianceCorrection);
+const textOf = (value) => (value === undefined || value === null || value === '' ? null : value instanceof Date ? value.toISOString() : String(value));
+/**
+ * Writes one correction for each of `fields` whose written value `after` changes. A value written for the first time
+ * - empty before - is no correction.
+ */
+async function recordCorrections(tx, domain, user, subject, before, after, fields) {
+    const rows = fields
+        .filter(field => after[field] !== undefined)
+        .map(field => ({ field, before: textOf(before[field]), after: textOf(after[field]) }))
+        .filter(one => one.before !== null && one.before !== one.after);
+    if (!rows.length)
+        return 0;
+    const repository = tx.getRepository(ComplianceCorrection);
+    await repository.save(rows.map(one => repository.create({ domain, subjectKind: subject.kind, subjectId: subject.id, ...one, creator: user })));
+    return rows.length;
+}
+/** The corrections of one record, oldest first. */
+async function correctionsOf(tx, domain, subject) {
+    return await tx.getRepository(ComplianceCorrection).find({ where: { domain: { id: domain.id }, subjectKind: subject.kind, subjectId: subject.id }, order: { createdAt: 'ASC' } });
+}
+exports.entities = [ComplianceCorrection];
+//# sourceMappingURL=correction.js.map

package/dist-server/service/common/correction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"correction.js","sourceRoot":"","sources":["../../../server/service/common/correction.ts"],"names":[],"mappings":";;;AAiEA,8CAiBC;AAGD,sCAEC;;AAvFD,+CAAoD;AACpD,qCAA+H;AAE/H,yDAAgD;AAChD,iDAA8C;AAE9C;;;;GAIG;AAKI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;CA0ChC,CAAA;AA1CY,oDAAoB;AAGtB;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,CAAC;;gDACC;AAInB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;IACzB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACjC,cAAM;oDAAA;AAGf;IADC,IAAA,oBAAU,EAAC,CAAC,GAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;;sDACrC;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,8EAA8E,EAAE,CAAC;;yDACpF;AAInB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC;;uDACtC;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;;mDAC/B;AAIb;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;;oDAChD;AAIf;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;;mDACpD;AAId;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;sCAClD,IAAI;uDAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;sCAC7D,gBAAI;qDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,GAAyB,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;uDACrC;+BAzCP,oBAAoB;IAHhC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC1C,IAAA,eAAK,EAAC,4BAA4B,EAAE,CAAC,GAAyB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAChH,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,0HAA0H,EAAE,CAAC;GAC3I,oBAAoB,CA0ChC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAiB,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAE9K;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CACrC,EAAiB,EACjB,MAAc,EACd,IAAU,EACV,OAAqC,EACrC,MAA2B,EAC3B,KAA0B,EAC1B,MAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM;SAChB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;SAC3C,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAA;IAC1B,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAA;IACzD,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAS,CAAC,CAAQ,CAAC,CAAA;IAC5J,OAAO,IAAI,CAAC,MAAM,CAAA;AACpB,CAAC;AAED,mDAAmD;AAC5C,KAAK,UAAU,aAAa,CAAC,EAAiB,EAAE,MAAsB,EAAE,OAAqC;IAClH,OAAO,MAAM,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAS,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAS,EAAE,CAAC,CAAA;AACjM,CAAC;AAEY,QAAA,QAAQ,GAAG,CAAC,oBAAoB,CAAC,CAAA","sourcesContent":["import { Field, ID, ObjectType } from 'type-graphql'\nimport { Column, CreateDateColumn, Entity, EntityManager, Index, ManyToOne, PrimaryGeneratedColumn, RelationId } from 'typeorm'\n\nimport { User } from '@things-factory/auth-base'\nimport { Domain } from '@things-factory/shell'\n\n/*\n * 고친 기록 (ADR-0187 「그 밖의 법무 기록」) - the legal records are not deleted, and a value written on one is changed\n * only with a row saying what it was, what it became, who changed it and when. Every record of the module keeps its\n * corrections here, by its kind and id; who reads them is who reads that record.\n */\n\n@Entity({ name: 'compliance_corrections' })\n@Index('ix_compliance_correction_0', (row: ComplianceCorrection) => [row.domain, row.subjectKind, row.subjectId])\n@ObjectType({ description: 'Entity for ComplianceCorrection - a value of a legal record changed after it was written: what it was and what it became' })\nexport class ComplianceCorrection {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID)\n  readonly id: string\n\n  @ManyToOne(type => Domain)\n  @Field(type => Domain, { nullable: true })\n  domain?: Domain\n\n  @RelationId((row: ComplianceCorrection) => row.domain)\n  domainId?: string\n\n  @Column()\n  @Field({ description: 'The kind of record changed - ComplianceCase, PrivacyRequest, PrivacyIncident' })\n  subjectKind: string\n\n  @Column()\n  @Field({ description: 'The id of the record changed' })\n  subjectId: string\n\n  @Column()\n  @Field({ description: 'The field changed' })\n  field: string\n\n  @Column({ type: 'text', nullable: true })\n  @Field({ nullable: true, description: 'What it was, as text' })\n  before?: string\n\n  @Column({ type: 'text', nullable: true })\n  @Field({ nullable: true, description: 'What it became, as text' })\n  after?: string\n\n  @CreateDateColumn()\n  @Field({ nullable: true, description: 'When it was changed' })\n  createdAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true, description: 'Who changed it' })\n  creator?: User\n\n  @RelationId((row: ComplianceCorrection) => row.creator)\n  creatorId?: string\n}\n\nconst textOf = (value: unknown): string | null => (value === undefined || value === null || value === '' ? null : value instanceof Date ? value.toISOString() : String(value))\n\n/**\n * Writes one correction for each of `fields` whose written value `after` changes. A value written for the first time\n * - empty before - is no correction.\n */\nexport async function recordCorrections(\n  tx: EntityManager,\n  domain: Domain,\n  user: User,\n  subject: { kind: string; id: string },\n  before: Record<string, any>,\n  after: Record<string, any>,\n  fields: readonly string[]\n): Promise<number> {\n  const rows = fields\n    .filter(field => after[field] !== undefined)\n    .map(field => ({ field, before: textOf(before[field]), after: textOf(after[field]) }))\n    .filter(one => one.before !== null && one.before !== one.after)\n  if (!rows.length) return 0\n  const repository = tx.getRepository(ComplianceCorrection)\n  await repository.save(rows.map(one => repository.create({ domain, subjectKind: subject.kind, subjectId: subject.id, ...one, creator: user } as any)) as any)\n  return rows.length\n}\n\n/** The corrections of one record, oldest first. */\nexport async function correctionsOf(tx: EntityManager, domain: { id: string }, subject: { kind: string; id: string }): Promise<ComplianceCorrection[]> {\n  return await tx.getRepository(ComplianceCorrection).find({ where: { domain: { id: domain.id }, subjectKind: subject.kind, subjectId: subject.id } as any, order: { createdAt: 'ASC' } as any })\n}\n\nexport const entities = [ComplianceCorrection]\n"]}

package/dist-server/service/common/employee-reader.d.ts

@@ -0,0 +1,11 @@
+import { Employee } from '@things-factory/organization';
+/** The domain's calendar day - the one "today" every deadline of this module is counted from. */
+export declare function todayIn(domain: {
+    timezone?: string | null;
+}, now?: Date): string;
+/** The request's employee record still working here, or nothing - asked once per request. */
+export declare function workingEmployeeOf(context: any): Promise<Employee | null>;
+/** The request's employee, refused for an account that is not one - a partner reads no company rule. */
+export declare function requireWorkingEmployee(context: any): Promise<Employee>;
+/** Whether the request holds `category` of this module (`regulation`, `compliance-case` ...) - asked once per request. */
+export declare function holds(context: any, category: string, privilege?: 'query' | 'mutation'): Promise<boolean>;

package/dist-server/service/common/employee-reader.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.todayIn = todayIn;
+exports.workingEmployeeOf = workingEmployeeOf;
+exports.requireWorkingEmployee = requireWorkingEmployee;
+exports.holds = holds;
+const auth_base_1 = require("@things-factory/auth-base");
+const my_employee_js_1 = require("@things-factory/organization/dist-server/service/employee/my-employee.js");
+const employee_profile_rules_js_1 = require("@things-factory/organization/dist-server/service/employee-profile/employee-profile-rules.js");
+const shell_1 = require("@things-factory/shell");
+/*
+ * Who reads the company's legal records (ADR-0187 decisions 7, 8, 21): an employee of the domain - an account tied to an
+ * `Employee` still working here - and the holders of the module's tasks. A partner, or an account with no employee
+ * record, is neither.
+ */
+/** The domain's calendar day - the one "today" every deadline of this module is counted from. */
+function todayIn(domain, now = new Date()) {
+    return (0, shell_1.calendarDay)(domain?.timezone, now);
+}
+/** The request's employee record still working here, or nothing - asked once per request. */
+async function workingEmployeeOf(context) {
+    const state = context?.state ?? {};
+    if (state.__complianceEmployee === undefined) {
+        const today = state.domain ? todayIn(state.domain) : '';
+        state.__complianceEmployee = (await (0, my_employee_js_1.myEmployees)(context)).find(one => (0, employee_profile_rules_js_1.isActiveEmployee)(one, today)) ?? null;
+    }
+    return state.__complianceEmployee;
+}
+/** The request's employee, refused for an account that is not one - a partner reads no company rule. */
+async function requireWorkingEmployee(context) {
+    const employee = await workingEmployeeOf(context);
+    if (!employee)
+        throw new shell_1.Refusal('compliance-employees-only', {}, 'only an employee of this company can do this');
+    return employee;
+}
+/** Whether the request holds `category` of this module (`regulation`, `compliance-case` ...) - asked once per request. */
+async function holds(context, category, privilege = 'mutation') {
+    const state = context?.state ?? {};
+    const { domain, user, unsafeIP, prohibitedPrivileges } = state;
+    if (!domain || !user)
+        return false;
+    const key = `__compliance:${category}:${privilege}`;
+    state[key] ??= (0, auth_base_1.checkPermission)({ category, privilege, owner: true }, user, domain, unsafeIP, prohibitedPrivileges).then(Boolean);
+    return await state[key];
+}
+//# sourceMappingURL=employee-reader.js.map

package/dist-server/service/common/employee-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"employee-reader.js","sourceRoot":"","sources":["../../../server/service/common/employee-reader.ts"],"names":[],"mappings":";;AAaA,0BAEC;AAGD,8CAOC;AAGD,wDAIC;AAGD,sBAOC;AA1CD,yDAA2D;AAE3D,6GAAsG;AACtG,2IAA8H;AAC9H,iDAA4D;AAE5D;;;;GAIG;AAEH,iGAAiG;AACjG,SAAgB,OAAO,CAAC,MAAoC,EAAE,MAAY,IAAI,IAAI,EAAE;IAClF,OAAO,IAAA,mBAAW,EAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;AAC3C,CAAC;AAED,6FAA6F;AACtF,KAAK,UAAU,iBAAiB,CAAC,OAAY;IAClD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAClC,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACvD,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,IAAA,4BAAW,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAA,4CAAgB,EAAC,GAAU,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAA;IACpH,CAAC;IACD,OAAO,KAAK,CAAC,oBAAoB,CAAA;AACnC,CAAC;AAED,wGAAwG;AACjG,KAAK,UAAU,sBAAsB,CAAC,OAAY;IACvD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACjD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAO,CAAC,2BAA2B,EAAE,EAAE,EAAE,8CAA8C,CAAC,CAAA;IACjH,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,0HAA0H;AACnH,KAAK,UAAU,KAAK,CAAC,OAAY,EAAE,QAAgB,EAAE,YAAkC,UAAU;IACtG,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAClC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GAAG,KAAK,CAAA;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,GAAG,GAAG,gBAAgB,QAAQ,IAAI,SAAS,EAAE,CAAA;IACnD,KAAK,CAAC,GAAG,CAAC,KAAK,IAAA,2BAAe,EAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvI,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;AACzB,CAAC","sourcesContent":["import { checkPermission } from '@things-factory/auth-base'\nimport { Employee } from '@things-factory/organization'\nimport { myEmployees } from '@things-factory/organization/dist-server/service/employee/my-employee.js'\nimport { isActiveEmployee } from '@things-factory/organization/dist-server/service/employee-profile/employee-profile-rules.js'\nimport { calendarDay, Refusal } from '@things-factory/shell'\n\n/*\n * Who reads the company's legal records (ADR-0187 decisions 7, 8, 21): an employee of the domain - an account tied to an\n * `Employee` still working here - and the holders of the module's tasks. A partner, or an account with no employee\n * record, is neither.\n */\n\n/** The domain's calendar day - the one \"today\" every deadline of this module is counted from. */\nexport function todayIn(domain: { timezone?: string | null }, now: Date = new Date()): string {\n  return calendarDay(domain?.timezone, now)\n}\n\n/** The request's employee record still working here, or nothing - asked once per request. */\nexport async function workingEmployeeOf(context: any): Promise<Employee | null> {\n  const state = context?.state ?? {}\n  if (state.__complianceEmployee === undefined) {\n    const today = state.domain ? todayIn(state.domain) : ''\n    state.__complianceEmployee = (await myEmployees(context)).find(one => isActiveEmployee(one as any, today)) ?? null\n  }\n  return state.__complianceEmployee\n}\n\n/** The request's employee, refused for an account that is not one - a partner reads no company rule. */\nexport async function requireWorkingEmployee(context: any): Promise<Employee> {\n  const employee = await workingEmployeeOf(context)\n  if (!employee) throw new Refusal('compliance-employees-only', {}, 'only an employee of this company can do this')\n  return employee\n}\n\n/** Whether the request holds `category` of this module (`regulation`, `compliance-case` ...) - asked once per request. */\nexport async function holds(context: any, category: string, privilege: 'query' | 'mutation' = 'mutation'): Promise<boolean> {\n  const state = context?.state ?? {}\n  const { domain, user, unsafeIP, prohibitedPrivileges } = state\n  if (!domain || !user) return false\n  const key = `__compliance:${category}:${privilege}`\n  state[key] ??= checkPermission({ category, privilege, owner: true } as any, user, domain, unsafeIP, prohibitedPrivileges).then(Boolean)\n  return await state[key]\n}\n"]}

package/dist-server/service/common/legal-todo.d.ts

@@ -0,0 +1,19 @@
+import { EntityManager } from 'typeorm';
+import { User } from '@things-factory/auth-base';
+export interface LegalTodo {
+    /** The one asked. */
+    assignee: User;
+    /** 「성희롱 예방교육 이수 — 2026」. */
+    name: string;
+    /** 「2026-12-31 까지」 - what the to-do shows. */
+    headline: string;
+    /** The screen that records it - `regulations?tab=trainings`. */
+    address: string;
+    subjectKind: string;
+    subjectId: string;
+    dueAt?: Date | null;
+}
+/** Hands out one to-do; answers its instance id, or nothing where the domain has not installed the to-do. */
+export declare function issueLegalTodo(tx: EntityManager, domain: any, todo: LegalTodo): Promise<string | null>;
+/** Closes the to-do once what it asked is recorded - left alone when it is closed already. */
+export declare function closeLegalTodo(tx: EntityManager, domain: any, instanceId: string | null | undefined, by: User, reason?: string): Promise<void>;

package/dist-server/service/common/legal-todo.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.issueLegalTodo = issueLegalTodo;
+exports.closeLegalTodo = closeLegalTodo;
+const typeorm_1 = require("typeorm");
+const env_1 = require("@things-factory/env");
+const translator_1 = require("@things-factory/i18n-base/translator");
+const worklist_1 = require("@things-factory/worklist");
+const legal_todo_activity_names_1 = require("../../activities/legal-todo-activity-names");
+/** The to-do is issued as its own assignee: nobody else hands it out. worklist speaks its refusals through `t`. */
+function contextOf(tx, domain, user) {
+    const t = (0, translator_1.translatorFor)(user.locale || 'ko');
+    return { state: { domain, user, tx }, t: (key, options) => t(key, options) };
+}
+/** Hands out one to-do; answers its instance id, or nothing where the domain has not installed the to-do. */
+async function issueLegalTodo(tx, domain, todo) {
+    const activity = await tx.getRepository(worklist_1.Activity).findOne({ where: { domain: { id: domain.id }, name: legal_todo_activity_names_1.LEGAL_TODO_ACTIVITY } });
+    if (!activity) {
+        env_1.logger.warn(`[Compliance] ${domain.subdomain}: the activity "${legal_todo_activity_names_1.LEGAL_TODO_ACTIVITY}" is not installed - "${todo.name}" not handed out`);
+        return null;
+    }
+    const context = contextOf(tx, domain, todo.assignee);
+    const dueAt = todo.dueAt ?? undefined;
+    const input = { subjectKind: todo.subjectKind, subjectId: todo.subjectId, headline: todo.headline, address: todo.address };
+    const instance = await (0, worklist_1.issue)({ name: todo.name, description: todo.headline, activityId: activity.id, input, assignees: [], threadsMin: 0, dueAt }, context);
+    await (0, worklist_1.assign)({ id: instance.id, assignees: [todo.assignee.email], dueAt, reason: todo.name }, context);
+    return instance.id;
+}
+/** Closes the to-do once what it asked is recorded - left alone when it is closed already. */
+async function closeLegalTodo(tx, domain, instanceId, by, reason = '기록함') {
+    if (!instanceId)
+        return;
+    const open = await tx.getRepository(worklist_1.ActivityThread).count({ where: { activityInstance: { id: instanceId }, state: (0, typeorm_1.In)(['assigned', 'started', 'unassigned']) } });
+    if (open)
+        await (0, worklist_1.abort)({ id: instanceId, reason }, contextOf(tx, domain, by));
+}
+//# sourceMappingURL=legal-todo.js.map

package/dist-server/service/common/legal-todo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legal-todo.js","sourceRoot":"","sources":["../../../server/service/common/legal-todo.ts"],"names":[],"mappings":";;AAmCA,wCAYC;AAGD,wCAIC;AAtDD,qCAA2C;AAG3C,6CAA4C;AAC5C,qEAAoE;AACpE,uDAAyF;AAEzF,0FAAgF;AAqBhF,mHAAmH;AACnH,SAAS,SAAS,CAAC,EAAiB,EAAE,MAAW,EAAE,IAAU;IAC3D,MAAM,CAAC,GAAG,IAAA,0BAAa,EAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAA;IAC5C,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAW,EAAE,OAAa,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAS,CAAA;AACnG,CAAC;AAED,6GAA6G;AACtG,KAAK,UAAU,cAAc,CAAC,EAAiB,EAAE,MAAW,EAAE,IAAe;IAClF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,mBAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,+CAAmB,EAAS,EAAE,CAAC,CAAA;IACrI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,YAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,SAAS,mBAAmB,+CAAmB,yBAAyB,IAAI,CAAC,IAAI,kBAAkB,CAAC,CAAA;QACvI,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAA;IACrC,MAAM,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IAC1H,MAAM,QAAQ,GAAG,MAAM,IAAA,gBAAK,EAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAS,EAAE,OAAO,CAAC,CAAA;IAClK,MAAM,IAAA,iBAAM,EAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAA;IACtG,OAAO,QAAQ,CAAC,EAAE,CAAA;AACpB,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,cAAc,CAAC,EAAiB,EAAE,MAAW,EAAE,UAAqC,EAAE,EAAQ,EAAE,MAAM,GAAG,KAAK;IAClI,IAAI,CAAC,UAAU;QAAE,OAAM;IACvB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,yBAAc,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAA,YAAE,EAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,EAAS,EAAE,CAAC,CAAA;IACvK,IAAI,IAAI;QAAE,MAAM,IAAA,gBAAK,EAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAS,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;AACrF,CAAC","sourcesContent":["import { EntityManager, In } from 'typeorm'\n\nimport { User } from '@things-factory/auth-base'\nimport { logger } from '@things-factory/env'\nimport { translatorFor } from '@things-factory/i18n-base/translator'\nimport { abort, Activity, ActivityThread, assign, issue } from '@things-factory/worklist'\n\nimport { LEGAL_TODO_ACTIVITY } from '../../activities/legal-todo-activity-names'\n\n/*\n * Handing out a legal to-do and closing it (ADR-0187 decisions 18, 23 · ADR-0147 decision 9). The record it is about\n * keeps the instance id; recording what was asked closes it. Reminding one past its day is worklist's (ADR-0186).\n */\n\nexport interface LegalTodo {\n  /** The one asked. */\n  assignee: User\n  /** 「성희롱 예방교육 이수 — 2026」. */\n  name: string\n  /** 「2026-12-31 까지」 - what the to-do shows. */\n  headline: string\n  /** The screen that records it - `regulations?tab=trainings`. */\n  address: string\n  subjectKind: string\n  subjectId: string\n  dueAt?: Date | null\n}\n\n/** The to-do is issued as its own assignee: nobody else hands it out. worklist speaks its refusals through `t`. */\nfunction contextOf(tx: EntityManager, domain: any, user: User) {\n  const t = translatorFor(user.locale || 'ko')\n  return { state: { domain, user, tx }, t: (key: string, options?: any) => t(key, options) } as any\n}\n\n/** Hands out one to-do; answers its instance id, or nothing where the domain has not installed the to-do. */\nexport async function issueLegalTodo(tx: EntityManager, domain: any, todo: LegalTodo): Promise<string | null> {\n  const activity = await tx.getRepository(Activity).findOne({ where: { domain: { id: domain.id }, name: LEGAL_TODO_ACTIVITY } as any })\n  if (!activity) {\n    logger.warn(`[Compliance] ${domain.subdomain}: the activity \"${LEGAL_TODO_ACTIVITY}\" is not installed - \"${todo.name}\" not handed out`)\n    return null\n  }\n  const context = contextOf(tx, domain, todo.assignee)\n  const dueAt = todo.dueAt ?? undefined\n  const input = { subjectKind: todo.subjectKind, subjectId: todo.subjectId, headline: todo.headline, address: todo.address }\n  const instance = await issue({ name: todo.name, description: todo.headline, activityId: activity.id, input, assignees: [], threadsMin: 0, dueAt } as any, context)\n  await assign({ id: instance.id, assignees: [todo.assignee.email], dueAt, reason: todo.name }, context)\n  return instance.id\n}\n\n/** Closes the to-do once what it asked is recorded - left alone when it is closed already. */\nexport async function closeLegalTodo(tx: EntityManager, domain: any, instanceId: string | null | undefined, by: User, reason = '기록함'): Promise<void> {\n  if (!instanceId) return\n  const open = await tx.getRepository(ActivityThread).count({ where: { activityInstance: { id: instanceId }, state: In(['assigned', 'started', 'unassigned']) } as any })\n  if (open) await abort({ id: instanceId, reason } as any, contextOf(tx, domain, by))\n}\n"]}

package/dist-server/service/compliance-case/compliance-case-mutation.d.ts

@@ -0,0 +1,9 @@
+import type { FileUpload } from 'graphql-upload/GraphQLUpload.js';
+import { ComplianceCase, ComplianceCaseEntry } from './compliance-case';
+import { ComplianceCaseHandling, ComplianceReportView, NewComplianceCase, NewComplianceCaseReport } from './compliance-case-type';
+export declare class ComplianceCaseMutation {
+    reportComplianceCase(report: NewComplianceCaseReport, attach: FileUpload[], context: ResolverContext): Promise<ComplianceReportView>;
+    recordComplianceCase(input: NewComplianceCase, attach: FileUpload[], context: ResolverContext): Promise<ComplianceCase>;
+    handleComplianceCase(patch: ComplianceCaseHandling, context: ResolverContext): Promise<ComplianceCase>;
+    addComplianceCaseEntry(caseId: string, writtenOn: string, body: string, attach: FileUpload[], context: ResolverContext): Promise<ComplianceCaseEntry>;
+}

package/dist-server/service/compliance-case/compliance-case-mutation.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ComplianceCaseMutation = void 0;
+const tslib_1 = require("tslib");
+const GraphQLUpload_js_1 = tslib_1.__importDefault(require("graphql-upload/GraphQLUpload.js"));
+const type_graphql_1 = require("type-graphql");
+const shell_1 = require("@things-factory/shell");
+const compliance_case_1 = require("./compliance-case");
+const compliance_case_service_1 = require("./compliance-case-service");
+const compliance_case_type_1 = require("./compliance-case-type");
+/* Nothing of a case is deleted - there is no door for it. A value changed keeps a correction. */
+let ComplianceCaseMutation = class ComplianceCaseMutation {
+    async reportComplianceCase(report, attach, context) {
+        return await (0, compliance_case_service_1.reportComplianceCase)(report, attach, context);
+    }
+    async recordComplianceCase(input, attach, context) {
+        return await (0, compliance_case_service_1.recordComplianceCase)(input, attach, context);
+    }
+    async handleComplianceCase(patch, context) {
+        return await (0, compliance_case_service_1.handleComplianceCase)(patch, context);
+    }
+    async addComplianceCaseEntry(caseId, writtenOn, body, attach, context) {
+        return await (0, compliance_case_service_1.addComplianceCaseEntry)(caseId, writtenOn, body, attach, context);
+    }
+};
+exports.ComplianceCaseMutation = ComplianceCaseMutation;
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(returns => compliance_case_type_1.ComplianceReportView, { description: 'To report workplace harassment or sexual harassment - an employee, of their own or of what they saw (ADR-0187 decision 21)' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('report', type => compliance_case_type_1.NewComplianceCaseReport)),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('attach', type => [GraphQLUpload_js_1.default], { nullable: true })),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_type_1.NewComplianceCaseReport, Array, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseMutation.prototype, "reportComplianceCase", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@privilege(category: "compliance-case", privilege: "mutation", domainOwnerGranted: true)'),
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(returns => compliance_case_1.ComplianceCase, { description: 'To write down a report the case handler received another way' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('case', type => compliance_case_type_1.NewComplianceCase)),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('attach', type => [GraphQLUpload_js_1.default], { nullable: true })),
+    tslib_1.__param(2, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_type_1.NewComplianceCase, Array, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseMutation.prototype, "recordComplianceCase", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(returns => compliance_case_1.ComplianceCase, { description: 'To write the handling of a case - investigators, protection, finding, the result told, closing; for those who read all of it' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('patch', type => compliance_case_type_1.ComplianceCaseHandling)),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_type_1.ComplianceCaseHandling, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseMutation.prototype, "handleComplianceCase", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@transaction'),
+    (0, type_graphql_1.Mutation)(returns => compliance_case_1.ComplianceCaseEntry, { description: 'To add one entry to the investigation record of a case' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('caseId')),
+    tslib_1.__param(1, (0, type_graphql_1.Arg)('writtenOn', { description: 'YYYY-MM-DD' })),
+    tslib_1.__param(2, (0, type_graphql_1.Arg)('body')),
+    tslib_1.__param(3, (0, type_graphql_1.Arg)('attach', type => [GraphQLUpload_js_1.default], { nullable: true })),
+    tslib_1.__param(4, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, String, Array, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseMutation.prototype, "addComplianceCaseEntry", null);
+exports.ComplianceCaseMutation = ComplianceCaseMutation = tslib_1.__decorate([
+    (0, type_graphql_1.Resolver)(compliance_case_1.ComplianceCase),
+    (0, type_graphql_1.UseMiddleware)(shell_1.SpeakRefusals)
+], ComplianceCaseMutation);
+//# sourceMappingURL=compliance-case-mutation.js.map

package/dist-server/service/compliance-case/compliance-case-mutation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-case-mutation.js","sourceRoot":"","sources":["../../../server/service/compliance-case/compliance-case-mutation.ts"],"names":[],"mappings":";;;;AACA,+FAA2D;AAC3D,+CAAqF;AAErF,iDAAqD;AAErD,uDAAuE;AACvE,uEAAoI;AACpI,iEAAiI;AAEjI,iGAAiG;AAG1F,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAG3B,AAAN,KAAK,CAAC,oBAAoB,CACwB,MAA+B,EACnB,MAAoB,EACzE,OAAwB;QAE/B,OAAO,MAAM,IAAA,8CAAoB,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5D,CAAC;IAKK,AAAN,KAAK,CAAC,oBAAoB,CACgB,KAAwB,EACJ,MAAoB,EACzE,OAAwB;QAE/B,OAAO,MAAM,IAAA,8CAAoB,EAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3D,CAAC;IAIK,AAAN,KAAK,CAAC,oBAAoB,CAA+C,KAA6B,EAAS,OAAwB;QACrI,OAAO,MAAM,IAAA,8CAAoB,EAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,sBAAsB,CACX,MAAc,EACoB,SAAiB,EACrD,IAAY,EACmC,MAAoB,EACzE,OAAwB;QAE/B,OAAO,MAAM,IAAA,gDAAsB,EAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/E,CAAC;CACF,CAAA;AAvCY,wDAAsB;AAG3B;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,2CAAoB,EAAE,EAAE,WAAW,EAAE,4HAA4H,EAAE,CAAC;IAEtL,mBAAA,IAAA,kBAAG,EAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,8CAAuB,CAAC,CAAA;IAC9C,mBAAA,IAAA,kBAAG,EAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,0BAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAFkD,8CAAuB;;kEAKhF;AAKK;IAHL,IAAA,wBAAS,EAAC,0FAA0F,CAAC;IACrG,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,gCAAc,EAAE,EAAE,WAAW,EAAE,8DAA8D,EAAE,CAAC;IAElH,mBAAA,IAAA,kBAAG,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,wCAAiB,CAAC,CAAA;IACtC,mBAAA,IAAA,kBAAG,EAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,0BAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAFyC,wCAAiB;;kEAKjE;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,gCAAc,EAAE,EAAE,WAAW,EAAE,8HAA8H,EAAE,CAAC;IACzJ,mBAAA,IAAA,kBAAG,EAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,6CAAsB,CAAC,CAAA;IAAiC,mBAAA,IAAA,kBAAG,GAAE,CAAA;;6CAA9B,6CAAsB;;kEAErG;AAIK;IAFL,IAAA,wBAAS,EAAC,cAAc,CAAC;IACzB,IAAA,uBAAQ,EAAC,OAAO,CAAC,EAAE,CAAC,qCAAmB,EAAE,EAAE,WAAW,EAAE,wDAAwD,EAAE,CAAC;IAEjH,mBAAA,IAAA,kBAAG,EAAC,QAAQ,CAAC,CAAA;IACb,mBAAA,IAAA,kBAAG,EAAC,WAAW,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAA;IAC/C,mBAAA,IAAA,kBAAG,EAAC,MAAM,CAAC,CAAA;IACX,mBAAA,IAAA,kBAAG,EAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,0BAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,mBAAA,IAAA,kBAAG,GAAE,CAAA;;;;oEAGP;iCAtCU,sBAAsB;IAFlC,IAAA,uBAAQ,EAAC,gCAAc,CAAC;IACxB,IAAA,4BAAa,EAAC,qBAAa,CAAC;GAChB,sBAAsB,CAuClC","sourcesContent":["import type { FileUpload } from 'graphql-upload/GraphQLUpload.js'\nimport GraphQLUpload from 'graphql-upload/GraphQLUpload.js'\nimport { Arg, Ctx, Directive, Mutation, Resolver, UseMiddleware } from 'type-graphql'\n\nimport { SpeakRefusals } from '@things-factory/shell'\n\nimport { ComplianceCase, ComplianceCaseEntry } from './compliance-case'\nimport { addComplianceCaseEntry, handleComplianceCase, recordComplianceCase, reportComplianceCase } from './compliance-case-service'\nimport { ComplianceCaseHandling, ComplianceReportView, NewComplianceCase, NewComplianceCaseReport } from './compliance-case-type'\n\n/* Nothing of a case is deleted - there is no door for it. A value changed keeps a correction. */\n@Resolver(ComplianceCase)\n@UseMiddleware(SpeakRefusals)\nexport class ComplianceCaseMutation {\n  @Directive('@transaction')\n  @Mutation(returns => ComplianceReportView, { description: 'To report workplace harassment or sexual harassment - an employee, of their own or of what they saw (ADR-0187 decision 21)' })\n  async reportComplianceCase(\n    @Arg('report', type => NewComplianceCaseReport) report: NewComplianceCaseReport,\n    @Arg('attach', type => [GraphQLUpload], { nullable: true }) attach: FileUpload[],\n    @Ctx() context: ResolverContext\n  ): Promise<ComplianceReportView> {\n    return await reportComplianceCase(report, attach, context)\n  }\n\n  @Directive('@privilege(category: \"compliance-case\", privilege: \"mutation\", domainOwnerGranted: true)')\n  @Directive('@transaction')\n  @Mutation(returns => ComplianceCase, { description: 'To write down a report the case handler received another way' })\n  async recordComplianceCase(\n    @Arg('case', type => NewComplianceCase) input: NewComplianceCase,\n    @Arg('attach', type => [GraphQLUpload], { nullable: true }) attach: FileUpload[],\n    @Ctx() context: ResolverContext\n  ): Promise<ComplianceCase> {\n    return await recordComplianceCase(input, attach, context)\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => ComplianceCase, { description: 'To write the handling of a case - investigators, protection, finding, the result told, closing; for those who read all of it' })\n  async handleComplianceCase(@Arg('patch', type => ComplianceCaseHandling) patch: ComplianceCaseHandling, @Ctx() context: ResolverContext): Promise<ComplianceCase> {\n    return await handleComplianceCase(patch, context)\n  }\n\n  @Directive('@transaction')\n  @Mutation(returns => ComplianceCaseEntry, { description: 'To add one entry to the investigation record of a case' })\n  async addComplianceCaseEntry(\n    @Arg('caseId') caseId: string,\n    @Arg('writtenOn', { description: 'YYYY-MM-DD' }) writtenOn: string,\n    @Arg('body') body: string,\n    @Arg('attach', type => [GraphQLUpload], { nullable: true }) attach: FileUpload[],\n    @Ctx() context: ResolverContext\n  ): Promise<ComplianceCaseEntry> {\n    return await addComplianceCaseEntry(caseId, writtenOn, body, attach, context)\n  }\n}\n"]}

package/dist-server/service/compliance-case/compliance-case-query.d.ts

@@ -0,0 +1,28 @@
+import { Attachment } from '@things-factory/attachment-base';
+import { User } from '@things-factory/auth-base';
+import { Employee } from '@things-factory/organization';
+import { ListParam } from '@things-factory/shell';
+import { ComplianceCorrection } from '../common/correction';
+import { ComplianceCase, ComplianceCaseEntry } from './compliance-case';
+import { ComplianceCaseList, ComplianceCasePerson, ComplianceReportView } from './compliance-case-type';
+export declare class ComplianceCaseQuery {
+    complianceCases(params: ListParam, context: ResolverContext): Promise<ComplianceCaseList>;
+    complianceCase(id: string, context: ResolverContext): Promise<ComplianceCase>;
+    myComplianceInvestigations(context: ResolverContext): Promise<ComplianceCase[]>;
+    myComplianceReports(context: ResolverContext): Promise<ComplianceReportView[]>;
+    complianceCaseHandlerLeft(accusedIds: string[], context: ResolverContext): Promise<boolean>;
+    complianceCasePeople(text: string, context: ResolverContext): Promise<ComplianceCasePerson[]>;
+    complianceCaseInvestigatorChoices(text: string, context: ResolverContext): Promise<ComplianceCasePerson[]>;
+    reporter(row: ComplianceCase): Promise<Employee | null>;
+    victim(row: ComplianceCase): Promise<Employee | null>;
+    accused(row: ComplianceCase): Promise<Employee[]>;
+    investigators(row: ComplianceCase): Promise<User[]>;
+    entries(row: ComplianceCase): Promise<ComplianceCaseEntry[]>;
+    attachments(row: ComplianceCase, context: ResolverContext): Promise<Attachment[]>;
+    corrections(row: ComplianceCase, context: ResolverContext): Promise<ComplianceCorrection[]>;
+    creator(row: ComplianceCase): Promise<User | null>;
+}
+export declare class ComplianceCaseEntryQuery {
+    attachments(row: ComplianceCaseEntry, context: ResolverContext): Promise<Attachment[]>;
+    creator(row: ComplianceCaseEntry): Promise<User | null>;
+}

package/dist-server/service/compliance-case/compliance-case-query.js

@@ -0,0 +1,212 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ComplianceCaseEntryQuery = exports.ComplianceCaseQuery = void 0;
+const tslib_1 = require("tslib");
+const type_graphql_1 = require("type-graphql");
+const attachment_base_1 = require("@things-factory/attachment-base");
+const auth_base_1 = require("@things-factory/auth-base");
+const organization_1 = require("@things-factory/organization");
+const shell_1 = require("@things-factory/shell");
+const correction_1 = require("../common/correction");
+const compliance_case_1 = require("./compliance-case");
+const compliance_case_service_1 = require("./compliance-case-service");
+const compliance_case_type_1 = require("./compliance-case-type");
+/*
+ * The doors that hand out cases (ADR-0187 decision 21). The `ComplianceCase` type, investigation and all, is answered
+ * only by the doors that ask for the whole sight - the handlers' list, one case, an investigator's list; the reporter
+ * and the victim read `ComplianceReportView`, which has no field of the investigation.
+ */
+let ComplianceCaseQuery = class ComplianceCaseQuery {
+    async complianceCases(params, context) {
+        return await (0, compliance_case_service_1.complianceCasesFor)(params, context);
+    }
+    async complianceCase(id, context) {
+        return await (0, compliance_case_service_1.complianceCaseFor)(id, context);
+    }
+    async myComplianceInvestigations(context) {
+        return await (0, compliance_case_service_1.myInvestigations)(context);
+    }
+    async myComplianceReports(context) {
+        return await (0, compliance_case_service_1.myComplianceReports)(context);
+    }
+    async complianceCaseHandlerLeft(accusedIds, context) {
+        return await (0, compliance_case_service_1.insideHandlerLeft)(accusedIds, context);
+    }
+    async complianceCasePeople(text, context) {
+        return await (0, compliance_case_service_1.casePeople)(text, context);
+    }
+    async complianceCaseInvestigatorChoices(text, context) {
+        return await (0, compliance_case_service_1.investigatorChoices)(text, context);
+    }
+    async reporter(row) {
+        return row.reporterId ? await (0, shell_1.getRepository)(organization_1.Employee).findOne({ where: { id: row.reporterId } }) : null;
+    }
+    async victim(row) {
+        return row.victimId ? await (0, shell_1.getRepository)(organization_1.Employee).findOne({ where: { id: row.victimId } }) : null;
+    }
+    async accused(row) {
+        return row.accused ?? (await (0, shell_1.getRepository)(compliance_case_1.ComplianceCase).findOne({ where: { id: row.id }, relations: ['accused'] }))?.accused ?? [];
+    }
+    async investigators(row) {
+        return row.investigators ?? (await (0, shell_1.getRepository)(compliance_case_1.ComplianceCase).findOne({ where: { id: row.id }, relations: ['investigators'] }))?.investigators ?? [];
+    }
+    async entries(row) {
+        return await (0, shell_1.getRepository)(compliance_case_1.ComplianceCaseEntry).find({ where: { complianceCase: { id: row.id } }, order: { writtenOn: 'ASC', createdAt: 'ASC' } });
+    }
+    async attachments(row, context) {
+        return await (0, shell_1.getRepository)(attachment_base_1.Attachment).find({ where: { domain: { id: context.state.domain.id }, refType: compliance_case_service_1.CASE_REF_TYPE, refBy: row.id }, order: { createdAt: 'ASC' } });
+    }
+    async corrections(row, context) {
+        return await (0, correction_1.correctionsOf)((0, shell_1.getRepository)(compliance_case_1.ComplianceCase).manager, context.state.domain, { kind: compliance_case_service_1.CASE_REF_TYPE, id: row.id });
+    }
+    async creator(row) {
+        return row.creatorId ? await (0, shell_1.getRepository)(auth_base_1.User).findOne({ where: { id: row.creatorId } }) : null;
+    }
+};
+exports.ComplianceCaseQuery = ComplianceCaseQuery;
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@privilege(category: "compliance-case", privilege: "query", domainOwnerGranted: true)'),
+    (0, type_graphql_1.Query)(returns => compliance_case_type_1.ComplianceCaseList, { description: '신고 사건 - the cases the handler reads; never one they are reported against (ADR-0187 decision 21)' }),
+    tslib_1.__param(0, (0, type_graphql_1.Args)(type => shell_1.ListParam)),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [shell_1.ListParam, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "complianceCases", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Query)(returns => compliance_case_1.ComplianceCase, { description: 'One case, whole - for its handlers and its investigators, never one reported against' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('id')),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "complianceCase", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Query)(returns => [compliance_case_1.ComplianceCase], { description: 'The cases the request investigates - an investigator who is no case handler reads them here' }),
+    tslib_1.__param(0, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "myComplianceInvestigations", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Query)(returns => [compliance_case_type_1.ComplianceReportView], { description: 'The cases the request reported or that happened to them - their progress, protection and result' }),
+    tslib_1.__param(0, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "myComplianceReports", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Query)(returns => Boolean, { description: 'Whether a case handler is left to take a report against these employees - false sends the reporter to the labour ministry' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('accusedIds', type => [String])),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [Array, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "complianceCaseHandlerLeft", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Query)(returns => [compliance_case_type_1.ComplianceCasePerson], { description: 'Employees still working here a report may name, found by name - for an employee making a report' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('text')),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "complianceCasePeople", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.Directive)('@privilege(category: "compliance-case", privilege: "mutation", domainOwnerGranted: true)'),
+    (0, type_graphql_1.Query)(returns => [compliance_case_type_1.ComplianceCasePerson], { description: 'Users of the domain a case handler may name as investigators, found by name or mail' }),
+    tslib_1.__param(0, (0, type_graphql_1.Arg)('text')),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "complianceCaseInvestigatorChoices", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => organization_1.Employee, { nullable: true }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "reporter", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => organization_1.Employee, { nullable: true }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "victim", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [organization_1.Employee]),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "accused", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [auth_base_1.User]),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "investigators", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [compliance_case_1.ComplianceCaseEntry], { description: 'The investigation record, oldest first' }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "entries", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [attachment_base_1.Attachment], { description: 'The files of the report' }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "attachments", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [correction_1.ComplianceCorrection], { description: 'The values changed after they were written' }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "corrections", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCase]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseQuery.prototype, "creator", null);
+exports.ComplianceCaseQuery = ComplianceCaseQuery = tslib_1.__decorate([
+    (0, type_graphql_1.Resolver)(compliance_case_1.ComplianceCase),
+    (0, type_graphql_1.UseMiddleware)(shell_1.SpeakRefusals)
+], ComplianceCaseQuery);
+let ComplianceCaseEntryQuery = class ComplianceCaseEntryQuery {
+    async attachments(row, context) {
+        return await (0, shell_1.getRepository)(attachment_base_1.Attachment).find({ where: { domain: { id: context.state.domain.id }, refType: compliance_case_service_1.CASE_ENTRY_REF_TYPE, refBy: row.id }, order: { createdAt: 'ASC' } });
+    }
+    async creator(row) {
+        return row.creatorId ? await (0, shell_1.getRepository)(auth_base_1.User).findOne({ where: { id: row.creatorId } }) : null;
+    }
+};
+exports.ComplianceCaseEntryQuery = ComplianceCaseEntryQuery;
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => [attachment_base_1.Attachment], { description: 'The files of the entry' }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__param(1, (0, type_graphql_1.Ctx)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCaseEntry, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseEntryQuery.prototype, "attachments", null);
+tslib_1.__decorate([
+    (0, type_graphql_1.FieldResolver)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__param(0, (0, type_graphql_1.Root)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [compliance_case_1.ComplianceCaseEntry]),
+    tslib_1.__metadata("design:returntype", Promise)
+], ComplianceCaseEntryQuery.prototype, "creator", null);
+exports.ComplianceCaseEntryQuery = ComplianceCaseEntryQuery = tslib_1.__decorate([
+    (0, type_graphql_1.Resolver)(compliance_case_1.ComplianceCaseEntry)
+], ComplianceCaseEntryQuery);
+//# sourceMappingURL=compliance-case-query.js.map