@things-factory/compliance 0.0.0-stage → 10.1.254

package/dist-server/service/privacy-record/privacy-record-type.js

@@ -0,0 +1,153 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrivacyIncidentList = exports.PrivacyRequestList = exports.PrivacyIncidentPatch = exports.PrivacyRequestPatch = exports.NewMyPrivacyRequest = void 0;
+const tslib_1 = require("tslib");
+const type_graphql_1 = require("type-graphql");
+const privacy_record_1 = require("./privacy-record");
+let NewMyPrivacyRequest = class NewMyPrivacyRequest {
+};
+exports.NewMyPrivacyRequest = NewMyPrivacyRequest;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => privacy_record_1.PrivacyRequestKind),
+    tslib_1.__metadata("design:type", String)
+], NewMyPrivacyRequest.prototype, "kind", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ description: 'What is asked' }),
+    tslib_1.__metadata("design:type", String)
+], NewMyPrivacyRequest.prototype, "details", void 0);
+exports.NewMyPrivacyRequest = NewMyPrivacyRequest = tslib_1.__decorate([
+    (0, type_graphql_1.InputType)({ description: 'A request an employee raises of their own personal information' })
+], NewMyPrivacyRequest);
+let PrivacyRequestPatch = class PrivacyRequestPatch {
+};
+exports.PrivacyRequestPatch = PrivacyRequestPatch;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID, { nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: '+ new, M changed' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "cuFlag", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'The employee who asked' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "requesterEmployeeId", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "requesterName", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "requesterContact", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => privacy_record_1.PrivacyRequestKind, { nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "kind", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "details", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'YYYY-MM-DD' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "receivedOn", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'YYYY-MM-DD' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "extendedDueOn", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "extensionReason", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "handling", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: 'YYYY-MM-DD' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequestPatch.prototype, "repliedOn", void 0);
+exports.PrivacyRequestPatch = PrivacyRequestPatch = tslib_1.__decorate([
+    (0, type_graphql_1.InputType)({ description: 'A request as the manager writes it - a new one (cuFlag +) or its handling (M); a value already written changes with a correction kept' })
+], PrivacyRequestPatch);
+let PrivacyIncidentPatch = class PrivacyIncidentPatch {
+};
+exports.PrivacyIncidentPatch = PrivacyIncidentPatch;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID, { nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true, description: '+ new, M changed' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "cuFlag", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncidentPatch.prototype, "knownAt", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => privacy_record_1.PrivacyIncidentCertainty, { nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "certainty", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "items", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.Int, { nullable: true }),
+    tslib_1.__metadata("design:type", Number)
+], PrivacyIncidentPatch.prototype, "subjectCount", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncidentPatch.prototype, "subjectsToldAt", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "subjectsToldHow", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncidentPatch.prototype, "reportedAt", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "reportReceiptNo", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncidentPatch.prototype, "measures", void 0);
+exports.PrivacyIncidentPatch = PrivacyIncidentPatch = tslib_1.__decorate([
+    (0, type_graphql_1.InputType)({ description: 'An incident as the manager writes it - a new one (cuFlag +) or what followed (M); a value already written changes with a correction kept' })
+], PrivacyIncidentPatch);
+let PrivacyRequestList = class PrivacyRequestList {
+};
+exports.PrivacyRequestList = PrivacyRequestList;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => [privacy_record_1.PrivacyRequest]),
+    tslib_1.__metadata("design:type", Array)
+], PrivacyRequestList.prototype, "items", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.Int),
+    tslib_1.__metadata("design:type", Number)
+], PrivacyRequestList.prototype, "total", void 0);
+exports.PrivacyRequestList = PrivacyRequestList = tslib_1.__decorate([
+    (0, type_graphql_1.ObjectType)({ description: 'A page of privacy requests' })
+], PrivacyRequestList);
+let PrivacyIncidentList = class PrivacyIncidentList {
+};
+exports.PrivacyIncidentList = PrivacyIncidentList;
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => [privacy_record_1.PrivacyIncident]),
+    tslib_1.__metadata("design:type", Array)
+], PrivacyIncidentList.prototype, "items", void 0);
+tslib_1.__decorate([
+    (0, type_graphql_1.Field)(type => type_graphql_1.Int),
+    tslib_1.__metadata("design:type", Number)
+], PrivacyIncidentList.prototype, "total", void 0);
+exports.PrivacyIncidentList = PrivacyIncidentList = tslib_1.__decorate([
+    (0, type_graphql_1.ObjectType)({ description: 'A page of privacy incidents' })
+], PrivacyIncidentList);
+//# sourceMappingURL=privacy-record-type.js.map

package/dist-server/service/privacy-record/privacy-record-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-record-type.js","sourceRoot":"","sources":["../../../server/service/privacy-record/privacy-record-type.ts"],"names":[],"mappings":";;;;AAAA,+CAAoE;AAEpE,qDAAgH;AAGzG,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAG/B,CAAA;AAHY,kDAAmB;AACK;IAAlC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,mCAAkB,CAAC;;iDAAyB;AAClB;IAAxC,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;;oDAAgB;8BAF7C,mBAAmB;IAD/B,IAAA,wBAAS,EAAC,EAAE,WAAW,EAAE,gEAAgE,EAAE,CAAC;GAChF,mBAAmB,CAG/B;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAa/B,CAAA;AAbY,kDAAmB;AACS;IAAtC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CAAY;AACU;IAA3D,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;;mDAAgB;AACT;IAAjE,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;;gEAA6B;AACnE;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DAAuB;AACtB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DAA0B;AACG;IAAtD,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,mCAAkB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;iDAA0B;AACrD;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;oDAAiB;AACW;IAArD,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;uDAAoB;AACnB;IAArD,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;0DAAuB;AACjD;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DAAyB;AACxB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDAAkB;AACU;IAArD,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;;sDAAmB;8BAZ7D,mBAAmB;IAD/B,IAAA,wBAAS,EAAC,EAAE,WAAW,EAAE,uIAAuI,EAAE,CAAC;GACvJ,mBAAmB,CAa/B;AAGM,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;CAYhC,CAAA;AAZY,oDAAoB;AACQ;IAAtC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;gDAAY;AACU;IAA3D,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;;oDAAgB;AAChD;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAAW,IAAI;qDAAA;AACoB;IAA5D,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,yCAAwB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;uDAAqC;AACtE;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;mDAAe;AACD;IAAvC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DAAsB;AAClC;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAAkB,IAAI;4DAAA;AACrB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DAAyB;AACxB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAAc,IAAI;wDAAA;AACjB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6DAAyB;AACxB;IAA1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDAAkB;+BAXjC,oBAAoB;IADhC,IAAA,wBAAS,EAAC,EAAE,WAAW,EAAE,0IAA0I,EAAE,CAAC;GAC1J,oBAAoB,CAYhC;AAGM,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;CAG9B,CAAA;AAHY,gDAAkB;AACI;IAAhC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,+BAAc,CAAC,CAAC;;iDAAwB;AACpC;IAAnB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAG,CAAC;;iDAAc;6BAFtB,kBAAkB;IAD9B,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;GAC7C,kBAAkB,CAG9B;AAGM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;CAG/B,CAAA;AAHY,kDAAmB;AACI;IAAjC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,gCAAe,CAAC,CAAC;;kDAAyB;AACtC;IAAnB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAG,CAAC;;kDAAc;8BAFtB,mBAAmB;IAD/B,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;GAC9C,mBAAmB,CAG/B","sourcesContent":["import { Field, ID, InputType, Int, ObjectType } from 'type-graphql'\n\nimport { PrivacyIncident, PrivacyIncidentCertainty, PrivacyRequest, PrivacyRequestKind } from './privacy-record'\n\n@InputType({ description: 'A request an employee raises of their own personal information' })\nexport class NewMyPrivacyRequest {\n  @Field(type => PrivacyRequestKind) kind: PrivacyRequestKind\n  @Field({ description: 'What is asked' }) details: string\n}\n\n@InputType({ description: 'A request as the manager writes it - a new one (cuFlag +) or its handling (M); a value already written changes with a correction kept' })\nexport class PrivacyRequestPatch {\n  @Field(type => ID, { nullable: true }) id?: string\n  @Field({ nullable: true, description: '+ new, M changed' }) cuFlag?: string\n  @Field({ nullable: true, description: 'The employee who asked' }) requesterEmployeeId?: string\n  @Field({ nullable: true }) requesterName?: string\n  @Field({ nullable: true }) requesterContact?: string\n  @Field(type => PrivacyRequestKind, { nullable: true }) kind?: PrivacyRequestKind\n  @Field({ nullable: true }) details?: string\n  @Field({ nullable: true, description: 'YYYY-MM-DD' }) receivedOn?: string\n  @Field({ nullable: true, description: 'YYYY-MM-DD' }) extendedDueOn?: string\n  @Field({ nullable: true }) extensionReason?: string\n  @Field({ nullable: true }) handling?: string\n  @Field({ nullable: true, description: 'YYYY-MM-DD' }) repliedOn?: string\n}\n\n@InputType({ description: 'An incident as the manager writes it - a new one (cuFlag +) or what followed (M); a value already written changes with a correction kept' })\nexport class PrivacyIncidentPatch {\n  @Field(type => ID, { nullable: true }) id?: string\n  @Field({ nullable: true, description: '+ new, M changed' }) cuFlag?: string\n  @Field({ nullable: true }) knownAt?: Date\n  @Field(type => PrivacyIncidentCertainty, { nullable: true }) certainty?: PrivacyIncidentCertainty\n  @Field({ nullable: true }) items?: string\n  @Field(type => Int, { nullable: true }) subjectCount?: number\n  @Field({ nullable: true }) subjectsToldAt?: Date\n  @Field({ nullable: true }) subjectsToldHow?: string\n  @Field({ nullable: true }) reportedAt?: Date\n  @Field({ nullable: true }) reportReceiptNo?: string\n  @Field({ nullable: true }) measures?: string\n}\n\n@ObjectType({ description: 'A page of privacy requests' })\nexport class PrivacyRequestList {\n  @Field(type => [PrivacyRequest]) items: PrivacyRequest[]\n  @Field(type => Int) total: number\n}\n\n@ObjectType({ description: 'A page of privacy incidents' })\nexport class PrivacyIncidentList {\n  @Field(type => [PrivacyIncident]) items: PrivacyIncident[]\n  @Field(type => Int) total: number\n}\n"]}

package/dist-server/service/privacy-record/privacy-record.d.ts

@@ -0,0 +1,69 @@
+import { User } from '@things-factory/auth-base';
+import { Employee } from '@things-factory/organization';
+import { Domain } from '@things-factory/shell';
+/** What a person asked of their personal information (개인정보보호법 §35~§37). */
+export declare enum PrivacyRequestKind {
+    ACCESS = "ACCESS",
+    CORRECTION = "CORRECTION",
+    DELETION = "DELETION",
+    SUSPENSION = "SUSPENSION"
+}
+/** Whether a leak is known for sure, or only possible - a possible one is told too (2026-09-11 amendment). */
+export declare enum PrivacyIncidentCertainty {
+    CONFIRMED = "CONFIRMED",
+    POSSIBLE = "POSSIBLE"
+}
+/**
+ * 개인정보 요구 (ADR-0187 decision 22) - a person's request to see, correct, delete or stop the processing of their
+ * personal information: who asked, when it came, the day it is due, an extension and why, how it was handled and the
+ * day it was answered. An employee raises their own; the manager writes down one from outside.
+ */
+export declare class PrivacyRequest {
+    readonly id: string;
+    domain?: Domain;
+    domainId?: string;
+    requesterEmployee?: Employee;
+    requesterEmployeeId?: string;
+    requesterName?: string;
+    requesterContact?: string;
+    kind: PrivacyRequestKind;
+    details: string;
+    receivedOn: string;
+    dueOn: string;
+    extendedDueOn?: string;
+    extensionReason?: string;
+    handling?: string;
+    repliedOn?: string;
+    createdAt?: Date;
+    updatedAt?: Date;
+    creator?: User;
+    creatorId?: string;
+    updater?: User;
+    updaterId?: string;
+}
+/**
+ * 개인정보 유출 사고 (ADR-0187 decision 22 · 개인정보보호법 §34) - a leak known, or possible: when it became known and the
+ * moment 72 hours on that it is due by, which items and how many people, when and how the subjects were told, when it
+ * was reported to the PIPC and KISA with the receipt number, and what was done.
+ */
+export declare class PrivacyIncident {
+    readonly id: string;
+    domain?: Domain;
+    domainId?: string;
+    knownAt: Date;
+    dueAt: Date;
+    certainty: PrivacyIncidentCertainty;
+    items: string;
+    subjectCount?: number;
+    subjectsToldAt?: Date;
+    subjectsToldHow?: string;
+    reportedAt?: Date;
+    reportReceiptNo?: string;
+    measures?: string;
+    createdAt?: Date;
+    updatedAt?: Date;
+    creator?: User;
+    creatorId?: string;
+    updater?: User;
+    updaterId?: string;
+}

package/dist-server/service/privacy-record/privacy-record.js

@@ -0,0 +1,245 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PrivacyIncident = exports.PrivacyRequest = exports.PrivacyIncidentCertainty = exports.PrivacyRequestKind = void 0;
+const tslib_1 = require("tslib");
+const type_graphql_1 = require("type-graphql");
+const typeorm_1 = require("typeorm");
+const auth_base_1 = require("@things-factory/auth-base");
+const organization_1 = require("@things-factory/organization");
+const shell_1 = require("@things-factory/shell");
+/** What a person asked of their personal information (개인정보보호법 §35~§37). */
+var PrivacyRequestKind;
+(function (PrivacyRequestKind) {
+    PrivacyRequestKind["ACCESS"] = "ACCESS";
+    PrivacyRequestKind["CORRECTION"] = "CORRECTION";
+    PrivacyRequestKind["DELETION"] = "DELETION";
+    PrivacyRequestKind["SUSPENSION"] = "SUSPENSION";
+})(PrivacyRequestKind || (exports.PrivacyRequestKind = PrivacyRequestKind = {}));
+(0, type_graphql_1.registerEnumType)(PrivacyRequestKind, { name: 'PrivacyRequestKind', description: '열람 · 정정 · 삭제 · 처리정지' });
+/** Whether a leak is known for sure, or only possible - a possible one is told too (2026-09-11 amendment). */
+var PrivacyIncidentCertainty;
+(function (PrivacyIncidentCertainty) {
+    PrivacyIncidentCertainty["CONFIRMED"] = "CONFIRMED";
+    PrivacyIncidentCertainty["POSSIBLE"] = "POSSIBLE";
+})(PrivacyIncidentCertainty || (exports.PrivacyIncidentCertainty = PrivacyIncidentCertainty = {}));
+(0, type_graphql_1.registerEnumType)(PrivacyIncidentCertainty, { name: 'PrivacyIncidentCertainty', description: 'confirmed, or possible' });
+/**
+ * 개인정보 요구 (ADR-0187 decision 22) - a person's request to see, correct, delete or stop the processing of their
+ * personal information: who asked, when it came, the day it is due, an extension and why, how it was handled and the
+ * day it was answered. An employee raises their own; the manager writes down one from outside.
+ */
+let PrivacyRequest = class PrivacyRequest {
+};
+exports.PrivacyRequest = PrivacyRequest;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
+    (0, type_graphql_1.Field)(type => shell_1.Domain, { nullable: true }),
+    tslib_1.__metadata("design:type", shell_1.Domain)
+], PrivacyRequest.prototype, "domain", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.domain),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "domainId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => organization_1.Employee, { nullable: true }),
+    (0, type_graphql_1.Field)(type => organization_1.Employee, { nullable: true, description: 'The employee who asked - empty for one from outside' }),
+    tslib_1.__metadata("design:type", organization_1.Employee)
+], PrivacyRequest.prototype, "requesterEmployee", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.requesterEmployee),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "requesterEmployeeId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'The name of one from outside who asked' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "requesterName", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'How to reach one from outside who asked' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "requesterContact", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)(type => PrivacyRequestKind),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "kind", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    (0, type_graphql_1.Field)({ description: 'What was asked' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "details", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'YYYY-MM-DD it was received' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "receivedOn", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'YYYY-MM-DD it is due - ten days from its receipt' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "dueOn", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'YYYY-MM-DD it is due once extended' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "extendedDueOn", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'Why it was extended - told to the one who asked' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "extensionReason", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'How it was handled - what was shown, corrected, deleted or stopped, or why not' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "handling", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'YYYY-MM-DD it was answered' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "repliedOn", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyRequest.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyRequest.prototype, "updatedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
+    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__metadata("design:type", auth_base_1.User)
+], PrivacyRequest.prototype, "creator", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.creator),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "creatorId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
+    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__metadata("design:type", auth_base_1.User)
+], PrivacyRequest.prototype, "updater", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.updater),
+    tslib_1.__metadata("design:type", String)
+], PrivacyRequest.prototype, "updaterId", void 0);
+exports.PrivacyRequest = PrivacyRequest = tslib_1.__decorate([
+    (0, typeorm_1.Entity)({ name: 'compliance_privacy_requests' }),
+    (0, typeorm_1.Index)('ix_compliance_privacy_request_0', (row) => [row.domain, row.receivedOn]),
+    (0, type_graphql_1.ObjectType)({ description: 'Entity for PrivacyRequest - a request to see, correct, delete or stop the processing of personal information' })
+], PrivacyRequest);
+/**
+ * 개인정보 유출 사고 (ADR-0187 decision 22 · 개인정보보호법 §34) - a leak known, or possible: when it became known and the
+ * moment 72 hours on that it is due by, which items and how many people, when and how the subjects were told, when it
+ * was reported to the PIPC and KISA with the receipt number, and what was done.
+ */
+let PrivacyIncident = class PrivacyIncident {
+};
+exports.PrivacyIncident = PrivacyIncident;
+tslib_1.__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    (0, type_graphql_1.Field)(type => type_graphql_1.ID),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "id", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => shell_1.Domain),
+    (0, type_graphql_1.Field)(type => shell_1.Domain, { nullable: true }),
+    tslib_1.__metadata("design:type", shell_1.Domain)
+], PrivacyIncident.prototype, "domain", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.domain),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "domainId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'When it became known' }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "knownAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)({ description: 'When it is to be reported and told by - 72 hours from its being known' }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "dueAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)(),
+    (0, type_graphql_1.Field)(type => PrivacyIncidentCertainty),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "certainty", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text' }),
+    (0, type_graphql_1.Field)({ description: 'The items of personal information' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "items", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'int', nullable: true }),
+    (0, type_graphql_1.Field)(type => type_graphql_1.Int, { nullable: true, description: 'How many people it is of' }),
+    tslib_1.__metadata("design:type", Number)
+], PrivacyIncident.prototype, "subjectCount", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'When the people it is of were told' }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "subjectsToldAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'How they were told - mail, text message, the homepage' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "subjectsToldHow", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'When it was reported to the PIPC and KISA' }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "reportedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'The receipt number of the report' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "reportReceiptNo", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.Column)({ type: 'text', nullable: true }),
+    (0, type_graphql_1.Field)({ nullable: true, description: 'What was done - stopping it, the damage relief, keeping it from happening again' }),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "measures", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.CreateDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "createdAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.UpdateDateColumn)(),
+    (0, type_graphql_1.Field)({ nullable: true }),
+    tslib_1.__metadata("design:type", Date)
+], PrivacyIncident.prototype, "updatedAt", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
+    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__metadata("design:type", auth_base_1.User)
+], PrivacyIncident.prototype, "creator", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.creator),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "creatorId", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.ManyToOne)(type => auth_base_1.User, { nullable: true }),
+    (0, type_graphql_1.Field)(type => auth_base_1.User, { nullable: true }),
+    tslib_1.__metadata("design:type", auth_base_1.User)
+], PrivacyIncident.prototype, "updater", void 0);
+tslib_1.__decorate([
+    (0, typeorm_1.RelationId)((row) => row.updater),
+    tslib_1.__metadata("design:type", String)
+], PrivacyIncident.prototype, "updaterId", void 0);
+exports.PrivacyIncident = PrivacyIncident = tslib_1.__decorate([
+    (0, typeorm_1.Entity)({ name: 'compliance_privacy_incidents' }),
+    (0, typeorm_1.Index)('ix_compliance_privacy_incident_0', (row) => [row.domain, row.knownAt]),
+    (0, type_graphql_1.ObjectType)({ description: 'Entity for PrivacyIncident - a leak of personal information, known or possible, and its report' })
+], PrivacyIncident);
+//# sourceMappingURL=privacy-record.js.map

package/dist-server/service/privacy-record/privacy-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-record.js","sourceRoot":"","sources":["../../../server/service/privacy-record/privacy-record.ts"],"names":[],"mappings":";;;;AAAA,+CAA2E;AAC3E,qCAAkI;AAElI,yDAAgD;AAChD,+DAAuD;AACvD,iDAA8C;AAE9C,2EAA2E;AAC3E,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,+CAAyB,CAAA;IACzB,2CAAqB,CAAA;IACrB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,kCAAlB,kBAAkB,QAK7B;AAED,IAAA,+BAAgB,EAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAA;AAExG,8GAA8G;AAC9G,IAAY,wBAGX;AAHD,WAAY,wBAAwB;IAClC,mDAAuB,CAAA;IACvB,iDAAqB,CAAA;AACvB,CAAC,EAHW,wBAAwB,wCAAxB,wBAAwB,QAGnC;AAED,IAAA,+BAAgB,EAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAA;AAEvH;;;;GAIG;AAII,IAAM,cAAc,GAApB,MAAM,cAAc;CAgF1B,CAAA;AAhFY,wCAAc;AAGhB;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,CAAC;;0CACC;AAInB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;IACzB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACjC,cAAM;8CAAA;AAGf;IADC,IAAA,oBAAU,EAAC,CAAC,GAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;;gDAC/B;AAIjB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,uBAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,uBAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;sCAC5F,uBAAQ;yDAAA;AAG5B;IADC,IAAA,oBAAU,EAAC,CAAC,GAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC;;2DAC/B;AAI5B;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;;qDAC3D;AAItB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;;wDACzD;AAIzB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC;;4CACV;AAIxB;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;;+CAC1B;AAIf;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;;kDACnC;AAIlB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,CAAC;;6CAC9D;AAIb;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;;qDACvD;AAItB;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;;uDAClE;AAIxB;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gFAAgF,EAAE,CAAC;;gDACxG;AAIjB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,4BAA4B,EAAE,CAAC;;iDACnD;AAIlB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;iDAAA;AAIhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;iDAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;+CAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,GAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;iDAC/B;AAIlB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;+CAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,GAAmB,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;iDAC/B;yBA/EP,cAAc;IAH1B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IAC/C,IAAA,eAAK,EAAC,iCAAiC,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/F,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,8GAA8G,EAAE,CAAC;GAC/H,cAAc,CAgF1B;AAED;;;;GAIG;AAII,IAAM,eAAe,GAArB,MAAM,eAAe;CAyE3B,CAAA;AAzEY,0CAAe;AAGjB;IAFR,IAAA,gCAAsB,EAAC,MAAM,CAAC;IAC9B,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,iBAAE,CAAC;;2CACC;AAInB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,CAAC;IACzB,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,cAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACjC,cAAM;+CAAA;AAGf;IADC,IAAA,oBAAU,EAAC,CAAC,GAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;;iDAChC;AAIjB;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;sCACtC,IAAI;gDAAA;AAIb;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,uEAAuE,EAAE,CAAC;sCACzF,IAAI;8CAAA;AAIX;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,wBAAwB,CAAC;;kDACL;AAInC;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxB,IAAA,oBAAK,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;;8CAC/C;AAIb;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,kBAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;;qDAC3D;AAIrB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;sCAC5D,IAAI;uDAAA;AAIrB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uDAAuD,EAAE,CAAC;;wDACxE;AAIxB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;sCACvE,IAAI;mDAAA;AAIjB;IAFC,IAAA,gBAAM,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;;wDACnD;AAIxB;IAFC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iFAAiF,EAAE,CAAC;;iDACzG;AAIjB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;kDAAA;AAIhB;IAFC,IAAA,0BAAgB,GAAE;IAClB,IAAA,oBAAK,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCACd,IAAI;kDAAA;AAIhB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;gDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,GAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;kDAChC;AAIlB;IAFC,IAAA,mBAAS,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAA,oBAAK,EAAC,IAAI,CAAC,EAAE,CAAC,gBAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;sCAC9B,gBAAI;gDAAA;AAGd;IADC,IAAA,oBAAU,EAAC,CAAC,GAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;;kDAChC;0BAxEP,eAAe;IAH3B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;IAChD,IAAA,eAAK,EAAC,kCAAkC,EAAE,CAAC,GAAoB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9F,IAAA,yBAAU,EAAC,EAAE,WAAW,EAAE,gGAAgG,EAAE,CAAC;GACjH,eAAe,CAyE3B","sourcesContent":["import { Field, ID, Int, ObjectType, registerEnumType } from 'type-graphql'\nimport { Column, CreateDateColumn, Entity, Index, ManyToOne, PrimaryGeneratedColumn, RelationId, UpdateDateColumn } from 'typeorm'\n\nimport { User } from '@things-factory/auth-base'\nimport { Employee } from '@things-factory/organization'\nimport { Domain } from '@things-factory/shell'\n\n/** What a person asked of their personal information (개인정보보호법 §35~§37). */\nexport enum PrivacyRequestKind {\n  ACCESS = 'ACCESS',\n  CORRECTION = 'CORRECTION',\n  DELETION = 'DELETION',\n  SUSPENSION = 'SUSPENSION'\n}\n\nregisterEnumType(PrivacyRequestKind, { name: 'PrivacyRequestKind', description: '열람 · 정정 · 삭제 · 처리정지' })\n\n/** Whether a leak is known for sure, or only possible - a possible one is told too (2026-09-11 amendment). */\nexport enum PrivacyIncidentCertainty {\n  CONFIRMED = 'CONFIRMED',\n  POSSIBLE = 'POSSIBLE'\n}\n\nregisterEnumType(PrivacyIncidentCertainty, { name: 'PrivacyIncidentCertainty', description: 'confirmed, or possible' })\n\n/**\n * 개인정보 요구 (ADR-0187 decision 22) - a person's request to see, correct, delete or stop the processing of their\n * personal information: who asked, when it came, the day it is due, an extension and why, how it was handled and the\n * day it was answered. An employee raises their own; the manager writes down one from outside.\n */\n@Entity({ name: 'compliance_privacy_requests' })\n@Index('ix_compliance_privacy_request_0', (row: PrivacyRequest) => [row.domain, row.receivedOn])\n@ObjectType({ description: 'Entity for PrivacyRequest - a request to see, correct, delete or stop the processing of personal information' })\nexport class PrivacyRequest {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID)\n  readonly id: string\n\n  @ManyToOne(type => Domain)\n  @Field(type => Domain, { nullable: true })\n  domain?: Domain\n\n  @RelationId((row: PrivacyRequest) => row.domain)\n  domainId?: string\n\n  @ManyToOne(type => Employee, { nullable: true })\n  @Field(type => Employee, { nullable: true, description: 'The employee who asked - empty for one from outside' })\n  requesterEmployee?: Employee\n\n  @RelationId((row: PrivacyRequest) => row.requesterEmployee)\n  requesterEmployeeId?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'The name of one from outside who asked' })\n  requesterName?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'How to reach one from outside who asked' })\n  requesterContact?: string\n\n  @Column()\n  @Field(type => PrivacyRequestKind)\n  kind: PrivacyRequestKind\n\n  @Column({ type: 'text' })\n  @Field({ description: 'What was asked' })\n  details: string\n\n  @Column()\n  @Field({ description: 'YYYY-MM-DD it was received' })\n  receivedOn: string\n\n  @Column()\n  @Field({ description: 'YYYY-MM-DD it is due - ten days from its receipt' })\n  dueOn: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'YYYY-MM-DD it is due once extended' })\n  extendedDueOn?: string\n\n  @Column({ type: 'text', nullable: true })\n  @Field({ nullable: true, description: 'Why it was extended - told to the one who asked' })\n  extensionReason?: string\n\n  @Column({ type: 'text', nullable: true })\n  @Field({ nullable: true, description: 'How it was handled - what was shown, corrected, deleted or stopped, or why not' })\n  handling?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'YYYY-MM-DD it was answered' })\n  repliedOn?: string\n\n  @CreateDateColumn()\n  @Field({ nullable: true })\n  createdAt?: Date\n\n  @UpdateDateColumn()\n  @Field({ nullable: true })\n  updatedAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  creator?: User\n\n  @RelationId((row: PrivacyRequest) => row.creator)\n  creatorId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  updater?: User\n\n  @RelationId((row: PrivacyRequest) => row.updater)\n  updaterId?: string\n}\n\n/**\n * 개인정보 유출 사고 (ADR-0187 decision 22 · 개인정보보호법 §34) - a leak known, or possible: when it became known and the\n * moment 72 hours on that it is due by, which items and how many people, when and how the subjects were told, when it\n * was reported to the PIPC and KISA with the receipt number, and what was done.\n */\n@Entity({ name: 'compliance_privacy_incidents' })\n@Index('ix_compliance_privacy_incident_0', (row: PrivacyIncident) => [row.domain, row.knownAt])\n@ObjectType({ description: 'Entity for PrivacyIncident - a leak of personal information, known or possible, and its report' })\nexport class PrivacyIncident {\n  @PrimaryGeneratedColumn('uuid')\n  @Field(type => ID)\n  readonly id: string\n\n  @ManyToOne(type => Domain)\n  @Field(type => Domain, { nullable: true })\n  domain?: Domain\n\n  @RelationId((row: PrivacyIncident) => row.domain)\n  domainId?: string\n\n  @Column()\n  @Field({ description: 'When it became known' })\n  knownAt: Date\n\n  @Column()\n  @Field({ description: 'When it is to be reported and told by - 72 hours from its being known' })\n  dueAt: Date\n\n  @Column()\n  @Field(type => PrivacyIncidentCertainty)\n  certainty: PrivacyIncidentCertainty\n\n  @Column({ type: 'text' })\n  @Field({ description: 'The items of personal information' })\n  items: string\n\n  @Column({ type: 'int', nullable: true })\n  @Field(type => Int, { nullable: true, description: 'How many people it is of' })\n  subjectCount?: number\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'When the people it is of were told' })\n  subjectsToldAt?: Date\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'How they were told - mail, text message, the homepage' })\n  subjectsToldHow?: string\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'When it was reported to the PIPC and KISA' })\n  reportedAt?: Date\n\n  @Column({ nullable: true })\n  @Field({ nullable: true, description: 'The receipt number of the report' })\n  reportReceiptNo?: string\n\n  @Column({ type: 'text', nullable: true })\n  @Field({ nullable: true, description: 'What was done - stopping it, the damage relief, keeping it from happening again' })\n  measures?: string\n\n  @CreateDateColumn()\n  @Field({ nullable: true })\n  createdAt?: Date\n\n  @UpdateDateColumn()\n  @Field({ nullable: true })\n  updatedAt?: Date\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  creator?: User\n\n  @RelationId((row: PrivacyIncident) => row.creator)\n  creatorId?: string\n\n  @ManyToOne(type => User, { nullable: true })\n  @Field(type => User, { nullable: true })\n  updater?: User\n\n  @RelationId((row: PrivacyIncident) => row.updater)\n  updaterId?: string\n}\n"]}

package/dist-server/service/regulation/index.d.ts

@@ -0,0 +1,5 @@
+import { Regulation, RegulationClause, RegulationProcedure, RegulationVersion } from './regulation';
+import { RegulationMutation } from './regulation-mutation';
+import { RegulationQuery } from './regulation-query';
+export declare const entities: (typeof Regulation | typeof RegulationVersion | typeof RegulationClause | typeof RegulationProcedure)[];
+export declare const resolvers: (typeof RegulationMutation | typeof RegulationQuery)[];

package/dist-server/service/regulation/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvers = exports.entities = void 0;
+const regulation_1 = require("./regulation");
+const regulation_mutation_1 = require("./regulation-mutation");
+const regulation_query_1 = require("./regulation-query");
+exports.entities = [regulation_1.Regulation, regulation_1.RegulationVersion, regulation_1.RegulationClause, regulation_1.RegulationProcedure];
+exports.resolvers = [regulation_query_1.RegulationQuery, regulation_mutation_1.RegulationMutation];
+//# sourceMappingURL=index.js.map

package/dist-server/service/regulation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/service/regulation/index.ts"],"names":[],"mappings":";;;AAAA,6CAAmG;AACnG,+DAA0D;AAC1D,yDAAoD;AAEvC,QAAA,QAAQ,GAAG,CAAC,uBAAU,EAAE,8BAAiB,EAAE,6BAAgB,EAAE,gCAAmB,CAAC,CAAA;AACjF,QAAA,SAAS,GAAG,CAAC,kCAAe,EAAE,wCAAkB,CAAC,CAAA","sourcesContent":["import { Regulation, RegulationClause, RegulationProcedure, RegulationVersion } from './regulation'\nimport { RegulationMutation } from './regulation-mutation'\nimport { RegulationQuery } from './regulation-query'\n\nexport const entities = [Regulation, RegulationVersion, RegulationClause, RegulationProcedure]\nexport const resolvers = [RegulationQuery, RegulationMutation]\n"]}

package/dist-server/service/regulation/regulation-mutation.d.ts

@@ -0,0 +1,15 @@
+import type { FileUpload } from 'graphql-upload/GraphQLUpload.js';
+import { Regulation, RegulationProcedure, RegulationVersion } from './regulation';
+import { NewRegulation, NewRegulationProcedure, RegulationPatch, RegulationVersionPatch } from './regulation-type';
+export declare class RegulationMutation {
+    createRegulation(regulation: NewRegulation, context: ResolverContext): Promise<Regulation>;
+    updateRegulation(id: string, patch: RegulationPatch, context: ResolverContext): Promise<Regulation>;
+    deleteRegulations(ids: string[], context: ResolverContext): Promise<boolean>;
+    newRegulationVersion(regulationId: string, context: ResolverContext): Promise<RegulationVersion>;
+    updateRegulationVersion(id: string, patch: RegulationVersionPatch, context: ResolverContext): Promise<RegulationVersion>;
+    deleteRegulationVersion(id: string, context: ResolverContext): Promise<boolean>;
+    recordRegulationProcedure(procedure: NewRegulationProcedure, files: FileUpload[], context: ResolverContext): Promise<RegulationProcedure>;
+    deleteRegulationProcedure(id: string, context: ResolverContext): Promise<boolean>;
+    submitRegulationVersion(id: string, context: ResolverContext): Promise<RegulationVersion>;
+    withdrawRegulationVersion(id: string, context: ResolverContext): Promise<RegulationVersion>;
+}