@things-factory/compliance 0.0.0-stage → 10.1.255

package/dist-server/service/training/training-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"training-rules.js","sourceRoot":"","sources":["../../../server/service/training/training-rules.ts"],"names":[],"mappings":";;AAsCA,sDAYC;AAGD,0CAIC;AAGD,4CAEC;AAGD,sCAcC;AAUD,wDAKC;AAYD,wDASC;AAaD,gEAkBC;AAGD,0DAIC;AAGD,0DAEC;AAKD,0CAIC;AAGD,wDAGC;AA7KD,iDAA+C;AAE/C,qDAA+F;AAE/F;;;GAGG;AAEH,MAAM,GAAG,GAAG,qBAAqB,CAAA;AACjC,MAAM,OAAO,GAAG,yCAAyC,CAAA;AACzD,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAA;AAChE,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AA0BvD,SAAgB,qBAAqB,CAAC,IAAmC;IACvE,OAAO,IAAA,8BAAa,GAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS;YAC7C,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,gCAAe;YACtC,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,EAAE;YAC/B,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;YACvB,GAAG,EAAE,CAAC,CAAC,GAAG;SACX,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAgB,eAAe,CAAC,IAAY,EAAE,MAAc;IAC1D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,gCAAe,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAA;IAC5D,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAA;AACpG,CAAC;AAED,8EAA8E;AAC9E,SAAgB,gBAAgB,CAAC,KAAa,EAAE,GAAW;IACzD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAA;AACnG,CAAC;AAED,gHAAgH;AAChH,SAAgB,aAAa,CAAC,GAAW,EAAE,QAAwB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,CAAA;IAC1C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;aACjL,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;aAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CACxC,CAAA;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;QACpH,OAAO,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AASD,uEAAuE;AACvE,SAAgB,sBAAsB,CAAC,KAA2B;IAChE,IAAI,CAAC,IAAA,+BAAc,EAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,iCAAiC,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAA;IAC9J,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,0BAA0B,EAAE,EAAE,EAAE,8CAA8C,CAAC,CAAA;IACnJ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,2BAA2B,EAAE,EAAE,EAAE,0DAA0D,CAAC,CAAA;IACvM,OAAO,IAAI,CAAA;AACb,CAAC;AAWD,mGAAmG;AACnG,SAAgB,sBAAsB,CAAC,KAA4B,EAAE,IAAiC;IACpG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,iCAAiC,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAA;IACxI,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,eAAO,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,gBAAgB,IAAI,CAAC,IAAI,2CAA2C,CAAC,CAAA;IACrJ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAK,KAAK,CAAC,IAAe,GAAG,IAAI,IAAK,KAAK,CAAC,IAAe,GAAG,IAAI;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,EAAE,wCAAwC,CAAC,CAAA;IAC9L,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,eAAO,CAAC,gCAAgC,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAA;IAC5G,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,0BAA0B,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAA;IACrH,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,6BAA6B,EAAE,EAAE,EAAE,sCAAsC,CAAC,CAAA;IAC/I,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,4BAA4B,EAAE,EAAE,EAAE,mDAAmD,CAAC,CAAA;IACzL,OAAO,IAAI,CAAA;AACb,CAAC;AASD;;;GAGG;AACH,SAAgB,0BAA0B,CACxC,KAAgC,EAChC,IAAiC,EACjC,KAAa,EACb,KAAa,EACb,IAAmC;IAEnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,iCAAiC,KAAK,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAA;IACxI,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,eAAO,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,gBAAgB,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAA;IAClI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,EAAE,wCAAwC,CAAC,CAAA;IAC5H,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,gCAAgC,EAAE,EAAE,EAAE,2CAA2C,CAAC,CAAA;IAC7J,IAAI,KAAK,CAAC,WAAW,GAAG,KAAK;QAAE,OAAO,IAAI,eAAO,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,EAAE,4CAA4C,KAAK,EAAE,CAAC,CAAA;IACjJ,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,IAAI,eAAO,CAAC,iCAAiC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,8BAA8B,KAAK,CAAC,IAAI,0BAA0B,CAAC,CAAA;IACzM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,0BAA0B,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAA;IACrH,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,+BAA+B,EAAE,EAAE,EAAE,2CAA2C,CAAC,CAAA;IACnH,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,uBAAuB,EAAE,EAAE,EAAE,iDAAiD,CAAC,CAAA;IACpJ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;QAAE,OAAO,IAAI,eAAO,CAAC,4BAA4B,EAAE,EAAE,EAAE,wDAAwD,CAAC,CAAA;IAChK,OAAO,IAAI,CAAA;AACb,CAAC;AAED,wEAAwE;AACxE,SAAgB,uBAAuB,CAAC,MAAc,EAAE,QAAkC,EAAE,MAAsB;IAChH,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,eAAO,CAAC,wBAAwB,EAAE,EAAE,EAAE,qEAAqE,CAAC,CAAA;IACnJ,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,eAAO,CAAC,iCAAiC,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAA;IACnI,OAAO,IAAI,CAAA;AACb,CAAC;AAED,0GAA0G;AAC1G,SAAgB,uBAAuB;IACrC,OAAO,IAAI,eAAO,CAAC,sBAAsB,EAAE,EAAE,EAAE,8FAA8F,CAAC,CAAA;AAChJ,CAAC;AAKD,SAAgB,eAAe,CAAC,WAA0C;IACxE,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;QAAE,OAAO,MAAM,CAAA;IACtE,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC;QAAE,OAAO,SAAS,CAAA;IACzE,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,gFAAgF;AAChF,SAAgB,sBAAsB,CAAC,MAAgC;IACrE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;AACpE,CAAC","sourcesContent":["import { Refusal } from '@things-factory/shell'\n\nimport { DEFAULT_DUE_DAY, TrainingKind, trainingKindOf, trainingKinds } from './training-kinds'\n\n/*\n * What the mandatory trainings hold to (ADR-0187 decisions 15-19). Pure - the service reads the rows and the people,\n * these say yes or no, and work out where each person stands.\n */\n\nconst DAY = /^\\d{4}-\\d{2}-\\d{2}$/\nconst DUE_DAY = /^(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])$/\nconst METHODS = ['COLLECTIVE', 'ONLINE', 'OUTSOURCED', 'POSTED']\nconst SCOPES = ['DOMAIN', 'DEPARTMENT', 'ROLE', 'USER']\n\nexport interface TrainingTarget {\n  scope: string\n  targetId: string\n  targetName?: string | null\n}\n\nexport interface TrainingSettingRow {\n  kind: string\n  enabled?: boolean | null\n  dueDay?: string | null\n  audiences?: TrainingTarget[] | null\n  memo?: string | null\n}\n\n/** A kind as a domain has it: the declaration with the domain's own word over it. */\nexport interface TrainingKindSet extends TrainingKind {\n  enabled: boolean\n  dueDay: string\n  audiences: TrainingTarget[]\n  memo?: string | null\n  /** Whether the domain has said anything - a kind with no row reads as declared. */\n  set: boolean\n}\n\nexport function trainingKindsInDomain(rows: readonly TrainingSettingRow[]): TrainingKindSet[] {\n  return trainingKinds().map(kind => {\n    const row = rows.find(one => one.kind === kind.code)\n    return {\n      ...kind,\n      enabled: row ? !!row.enabled : kind.defaultOn,\n      dueDay: row?.dueDay || DEFAULT_DUE_DAY,\n      audiences: row?.audiences ?? [],\n      memo: row?.memo ?? null,\n      set: !!row\n    }\n  })\n}\n\n/** The day a kind is due in a year - Feb 29 falls to Feb 28 in a year that has none. */\nexport function trainingDueOnOf(year: number, dueDay: string): string {\n  const [month, day] = (dueDay || DEFAULT_DUE_DAY).split('-').map(Number)\n  const last = new Date(Date.UTC(year, month, 0)).getUTCDate()\n  return `${year}-${String(month).padStart(2, '0')}-${String(Math.min(day, last)).padStart(2, '0')}`\n}\n\n/** Days from `today` to `day`, both YYYY-MM-DD - negative when it is past. */\nexport function trainingDaysLeft(today: string, day: string): number {\n  return Math.round((Date.parse(`${day}T00:00:00Z`) - Date.parse(`${today}T00:00:00Z`)) / 86400000)\n}\n\n/** The instant a calendar day ends in a time zone - a to-do due on a day is due until its last second there. */\nexport function trainingDueAt(day: string, timezone?: string | null): Date {\n  const utc = Date.parse(`${day}T23:59:59Z`)\n  if (!timezone) return new Date(utc)\n  try {\n    const parts = Object.fromEntries(\n      new Intl.DateTimeFormat('en-US', { timeZone: timezone, hourCycle: 'h23', year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', second: '2-digit' })\n        .formatToParts(new Date(utc))\n        .map(part => [part.type, part.value])\n    )\n    const shown = Date.parse(`${parts.year}-${parts.month}-${parts.day}T${parts.hour}:${parts.minute}:${parts.second}Z`)\n    return new Date(utc - (shown - utc))\n  } catch {\n    return new Date(utc)\n  }\n}\n\nexport interface TrainingSettingInput {\n  kind?: string | null\n  enabled?: boolean | null\n  dueDay?: string | null\n  audiences?: TrainingTarget[] | null\n}\n\n/** What a kind's setting asks for before it is written, or nothing. */\nexport function trainingSettingRefusal(input: TrainingSettingInput): Refusal | null {\n  if (!trainingKindOf(input.kind)) return new Refusal('training-kind-unknown', { kind: input.kind ?? '' }, `there is no kind of training '${input.kind ?? ''}'`)\n  if (input.dueDay && !DUE_DAY.test(input.dueDay)) return new Refusal('training-due-day-invalid', {}, 'give the due day of the year as MM-DD, 12-31')\n  if ((input.audiences ?? []).some(one => !SCOPES.includes(one?.scope) || !one.targetId)) return new Refusal('training-audience-invalid', {}, 'a target is the domain, a department, a role or a person')\n  return null\n}\n\nexport interface TrainingSessionFields {\n  kind?: string | null\n  year?: number | null\n  name?: string | null\n  method?: string | null\n  startsOn?: string | null\n  endsOn?: string | null\n}\n\n/** What a session asks for before it is opened, or nothing - the kind must be on in the domain. */\nexport function trainingSessionRefusal(input: TrainingSessionFields, kind: TrainingKindSet | undefined): Refusal | null {\n  if (!kind) return new Refusal('training-kind-unknown', { kind: input.kind ?? '' }, `there is no kind of training '${input.kind ?? ''}'`)\n  if (!kind.enabled) return new Refusal('training-kind-off', { kind: kind.code }, `the training ${kind.code} is off in this domain - turn it on first`)\n  if (!Number.isInteger(input.year) || (input.year as number) < 2000 || (input.year as number) > 2999) return new Refusal('training-year-invalid', {}, 'give the year it counts for, 2000-2999')\n  if (!input.name?.trim()) return new Refusal('training-session-name-required', {}, 'give the session a name')\n  if (!METHODS.includes(input.method ?? '')) return new Refusal('training-method-required', {}, 'pick how it is given')\n  if (!input.startsOn || !DAY.test(input.startsOn)) return new Refusal('training-starts-on-required', {}, 'give the day it is given, YYYY-MM-DD')\n  if (input.endsOn && (!DAY.test(input.endsOn) || input.endsOn < input.startsOn)) return new Refusal('training-ends-before-start', {}, 'the last day is on or after the first, YYYY-MM-DD')\n  return null\n}\n\nexport interface TrainingCertificateFields {\n  kind?: string | null\n  year?: number | null\n  completedOn?: string | null\n  method?: string | null\n}\n\n/**\n * What a certificate a person sends asks for, or nothing: a kind on in the domain, the day completed within the year it\n * counts for and not after today, a file, and no completion of it already done or waiting.\n */\nexport function trainingCertificateRefusal(\n  input: TrainingCertificateFields,\n  kind: TrainingKindSet | undefined,\n  today: string,\n  files: number,\n  mine: readonly { status: string }[]\n): Refusal | null {\n  if (!kind) return new Refusal('training-kind-unknown', { kind: input.kind ?? '' }, `there is no kind of training '${input.kind ?? ''}'`)\n  if (!kind.enabled) return new Refusal('training-kind-off', { kind: kind.code }, `the training ${kind.code} is off in this domain`)\n  if (!Number.isInteger(input.year)) return new Refusal('training-year-invalid', {}, 'give the year it counts for, 2000-2999')\n  if (!input.completedOn || !DAY.test(input.completedOn)) return new Refusal('training-completed-on-required', {}, 'give the day it was completed, YYYY-MM-DD')\n  if (input.completedOn > today) return new Refusal('training-completed-on-future', { today }, `the day completed is on or before today, ${today}`)\n  if (Number(input.completedOn.slice(0, 4)) !== input.year) return new Refusal('training-completed-outside-year', { year: input.year }, `the day completed falls in ${input.year}, the year it counts for`)\n  if (!METHODS.includes(input.method ?? '')) return new Refusal('training-method-required', {}, 'pick how it is given')\n  if (files < 1) return new Refusal('training-certificate-required', {}, 'attach the certificate, one file at least')\n  if (mine.some(one => one.status === 'CONFIRMED')) return new Refusal('training-already-done', {}, 'this training is completed for the year already')\n  if (mine.some(one => one.status === 'SUBMITTED')) return new Refusal('training-already-submitted', {}, 'a certificate of it is waiting for the manager already')\n  return null\n}\n\n/** Only a certificate sent and not decided is confirmed or returned. */\nexport function trainingDecisionRefusal(status: string, decision: 'CONFIRMED' | 'RETURNED', reason?: string | null): Refusal | null {\n  if (status !== 'SUBMITTED') return new Refusal('training-not-submitted', {}, 'only a certificate waiting for the manager is confirmed or returned')\n  if (decision === 'RETURNED' && !reason?.trim()) return new Refusal('training-return-reason-required', {}, 'say why it is returned')\n  return null\n}\n\n/** Completions, sessions and their files are kept (decision 17) - the refusal says what to do instead. */\nexport function trainingDeletionRefusal(): Refusal {\n  return new Refusal('training-record-kept', {}, 'training records are kept - return a certificate, or record a new completion, to correct one')\n}\n\n/** Where a person stands on a kind in a year. Only a confirmed completion is done; a certificate sent waits. */\nexport type TrainingState = 'DONE' | 'WAITING' | 'NOT_DONE'\n\nexport function trainingStateOf(completions: readonly { status: string }[]): TrainingState {\n  if (completions.some(one => one.status === 'CONFIRMED')) return 'DONE'\n  if (completions.some(one => one.status === 'SUBMITTED')) return 'WAITING'\n  return 'NOT_DONE'\n}\n\n/** The share of the people who are done, 0-1; null when nobody must take it. */\nexport function trainingCompletionRate(states: readonly TrainingState[]): number | null {\n  if (!states.length) return null\n  return states.filter(one => one === 'DONE').length / states.length\n}\n"]}

package/dist-server/service/training/training-service.d.ts

@@ -0,0 +1,98 @@
+import { EntityManager } from 'typeorm';
+import { Employee } from '@things-factory/organization';
+import { TrainingCompletion, TrainingSession, TrainingSetting } from './training';
+import { TrainingTarget, TrainingKindSet, TrainingState } from './training-rules';
+import { NewTrainingSession, TrainingCertificateInput, TrainingSessionPatch, TrainingSettingPatch } from './training-type';
+export declare const TRAINING_SESSION_REF_TYPE = "TrainingSession";
+export declare const TRAINING_COMPLETION_REF_TYPE = "TrainingCompletion";
+export declare const TRAINING_SCHEDULED_TRIGGER = "compliance.training-scheduled";
+/** The employee's screen of their trainings - where a to-do and an announcement lead. */
+export declare const MY_TRAININGS_ADDRESS = "regulations?tab=trainings";
+/** The request's transaction, or the data source's manager for a query that runs without one. */
+export declare function trainingManagerOf(context: any): EntityManager;
+/** The kinds as the domain has them. */
+export declare function trainingKindsOf(tx: EntityManager, domain: {
+    id: string;
+}): Promise<TrainingKindSet[]>;
+/** Whom a kind or a session is for - the whole domain when nobody is named. */
+export declare function trainingAudiencesOf(kind: TrainingKindSet, domain: {
+    id: string;
+    name?: string;
+}, own?: TrainingTarget[] | null): TrainingTarget[];
+/**
+ * The people who must take a kind: the employees still working here whose account the kind's audience reaches. One
+ * with no account is reached by no audience, as an announcement reaches nobody without one.
+ */
+export declare function trainingPeopleOf(tx: EntityManager, domain: any, audiences: TrainingTarget[], today: string): Promise<Employee[]>;
+export interface TrainingReader {
+    /** Holds `training` query - reads every completion and its certificates. */
+    all: boolean;
+    employee: Employee | null;
+    /** The departments the reader heads, with those under them - read for whether their people are done, nothing more. */
+    headed: string[];
+}
+/** Who the request is to the trainings. A department head is the employee a department names as its manager. */
+export declare function trainingReaderOf(context: any): Promise<TrainingReader>;
+/** A kind's own word - written over the declaration, one row per kind. */
+export declare function saveTrainingSettings(patches: TrainingSettingPatch[], context: any): Promise<TrainingSetting[]>;
+/** Opens a session with its material, and tells its audience - in the same write. */
+export declare function openTrainingSession(input: NewTrainingSession, attach: any[] | undefined, context: any): Promise<TrainingSession>;
+/** What a session says may be corrected - its kind and year stay, the completions of it count for them. */
+export declare function updateTrainingSessions(patches: TrainingSessionPatch[], context: any): Promise<TrainingSession[]>;
+/**
+ * The attendance of a session, recorded by the manager - confirmed at once. Someone already done for the kind and year
+ * is left as they are.
+ */
+export declare function recordTrainingAttendance(sessionId: string, employeeIds: string[], completedOn: string | null | undefined, context: any): Promise<TrainingCompletion[]>;
+/** A certificate the person sends for themself - waiting until the manager confirms it. */
+export declare function submitTrainingCertificate(input: TrainingCertificateInput, attach: any[] | undefined, context: any): Promise<TrainingCompletion>;
+/** The manager confirms certificates sent - each closes the person's to-do. */
+export declare function confirmTrainingCompletions(ids: string[], context: any): Promise<TrainingCompletion[]>;
+/** The manager returns a certificate, saying why - the person sends another. */
+export declare function returnTrainingCompletion(id: string, reason: string, context: any): Promise<TrainingCompletion>;
+/** Training records are kept (decision 17) - every delete is refused with what to do instead. */
+export declare function deleteTrainingRecords(): Promise<never>;
+export interface TrainingYearOpening {
+    people: number;
+    done: number;
+    handedOut: number;
+}
+/**
+ * Opens a kind's year: a worklist to-do 「<교육> 이수」 with the due day for everyone of its audience not done - at most
+ * one per person, kind and year, so opening it again hands out only to those it missed (a person who joined since, a
+ * to-do the domain could not hand out before).
+ */
+export declare function openTrainingYear(kindCode: string, year: number, context: any): Promise<TrainingYearOpening>;
+export interface TrainingStandingRow {
+    id: string;
+    kind: string;
+    year: number;
+    dueOn: string;
+    state: TrainingState;
+    completedOn?: string | null;
+    employee: Employee;
+    departmentName?: string | null;
+}
+/** Where everyone of every kind on stands in a year - the people of each kind's audience, by name. */
+export declare function standingsOf(tx: EntityManager, domain: any, year: number, today: string): Promise<TrainingStandingRow[]>;
+/**
+ * The standings the reader may read: a holder all of them; an employee their own; a department head also whether each
+ * of their people is done - no day, no waiting certificate, nothing of its content.
+ */
+export declare function readableStandings(year: number, context: any): Promise<TrainingStandingRow[]>;
+export interface MyTrainingRow {
+    kind: string;
+    year: number;
+    dueOn: string;
+    state: TrainingState;
+    completion?: TrainingCompletion | null;
+    sessions: TrainingSession[];
+}
+/** The request's employee's trainings of a year: each kind on whose audience they are in, with its sessions. */
+export declare function myTrainings(year: number, context: any): Promise<MyTrainingRow[]>;
+/** Whether the request may read a completion - a holder, or the one it is of. A department head may not. */
+export declare function mayReadCompletion(row: {
+    employeeId?: string | null;
+} | null, context: any): Promise<boolean>;
+/** Whether the request may read a session's material - a holder, or an employee it is for. */
+export declare function mayReadSession(row: TrainingSession | null, context: any): Promise<boolean>;

package/dist-server/service/training/training-service.js

@@ -0,0 +1,455 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MY_TRAININGS_ADDRESS = exports.TRAINING_SCHEDULED_TRIGGER = exports.TRAINING_COMPLETION_REF_TYPE = exports.TRAINING_SESSION_REF_TYPE = void 0;
+exports.trainingManagerOf = trainingManagerOf;
+exports.trainingKindsOf = trainingKindsOf;
+exports.trainingAudiencesOf = trainingAudiencesOf;
+exports.trainingPeopleOf = trainingPeopleOf;
+exports.trainingReaderOf = trainingReaderOf;
+exports.saveTrainingSettings = saveTrainingSettings;
+exports.openTrainingSession = openTrainingSession;
+exports.updateTrainingSessions = updateTrainingSessions;
+exports.recordTrainingAttendance = recordTrainingAttendance;
+exports.submitTrainingCertificate = submitTrainingCertificate;
+exports.confirmTrainingCompletions = confirmTrainingCompletions;
+exports.returnTrainingCompletion = returnTrainingCompletion;
+exports.deleteTrainingRecords = deleteTrainingRecords;
+exports.openTrainingYear = openTrainingYear;
+exports.standingsOf = standingsOf;
+exports.readableStandings = readableStandings;
+exports.myTrainings = myTrainings;
+exports.mayReadCompletion = mayReadCompletion;
+exports.mayReadSession = mayReadSession;
+const typeorm_1 = require("typeorm");
+const announcement_1 = require("@things-factory/announcement");
+const attachment_base_1 = require("@things-factory/attachment-base");
+const translator_1 = require("@things-factory/i18n-base/translator");
+const organization_1 = require("@things-factory/organization");
+const employee_profile_rules_js_1 = require("@things-factory/organization/dist-server/service/employee-profile/employee-profile-rules.js");
+const shell_1 = require("@things-factory/shell");
+const employee_reader_1 = require("../common/employee-reader");
+const legal_todo_1 = require("../common/legal-todo");
+const training_1 = require("./training");
+const training_rules_1 = require("./training-rules");
+/*
+ * The mandatory trainings of a domain (ADR-0187 decisions 15-19): a kind's setting, a session opened and told, the
+ * attendance and certificates that complete it, the to-dos of a year, and who reads where each person stands. Nothing
+ * here deletes a training record.
+ */
+exports.TRAINING_SESSION_REF_TYPE = 'TrainingSession';
+exports.TRAINING_COMPLETION_REF_TYPE = 'TrainingCompletion';
+exports.TRAINING_SCHEDULED_TRIGGER = 'compliance.training-scheduled';
+/** The employee's screen of their trainings - where a to-do and an announcement lead. */
+exports.MY_TRAININGS_ADDRESS = 'regulations?tab=trainings';
+const text = (value) => (typeof value === 'string' && value.trim() ? value.trim() : null);
+const kindWord = (t, code) => t(`text.training-kind.${code}`);
+/* ---------------------------------------------------------------- kinds and people */
+/** The request's transaction, or the data source's manager for a query that runs without one. */
+function trainingManagerOf(context) {
+    return context?.state?.tx ?? (0, shell_1.getRepository)(training_1.TrainingSetting).manager;
+}
+/** The kinds as the domain has them. */
+async function trainingKindsOf(tx, domain) {
+    return (0, training_rules_1.trainingKindsInDomain)(await tx.getRepository(training_1.TrainingSetting).find({ where: { domain: { id: domain.id } } }));
+}
+/** Whom a kind or a session is for - the whole domain when nobody is named. */
+function trainingAudiencesOf(kind, domain, own) {
+    if (own?.length)
+        return own;
+    if (kind.audiences.length)
+        return kind.audiences;
+    return [{ scope: 'DOMAIN', targetId: domain.id, targetName: domain.name }];
+}
+/**
+ * The people who must take a kind: the employees still working here whose account the kind's audience reaches. One
+ * with no account is reached by no audience, as an announcement reaches nobody without one.
+ */
+async function trainingPeopleOf(tx, domain, audiences, today) {
+    const userIds = await (0, organization_1.audienceUserIds)(domain, audiences, tx);
+    if (!userIds.length)
+        return [];
+    const rows = await tx.getRepository(organization_1.Employee).find({ where: { domain: { id: domain.id }, user: { id: (0, typeorm_1.In)(userIds) } }, relations: ['user', 'department'], order: { name: 'ASC' } });
+    return rows.filter(one => (0, employee_profile_rules_js_1.isActiveEmployee)(one, today));
+}
+/** Why the targets of an audience may not be given, or nothing - each names one of this domain's own. */
+async function audiencesRefusal(tx, domain, audiences) {
+    if (!audiences?.length)
+        return null;
+    const departmentIds = [...(await (0, organization_1.departmentTreeOf)(domain, tx)).keys()];
+    const roleIds = (await (0, organization_1.domainRolesOf)(domain, undefined, tx)).map(one => one.id);
+    for (const target of audiences) {
+        const why = (0, organization_1.audienceTargetRefusal)(target, { domainId: domain.id, departmentIds, roleIds });
+        if (why)
+            return new shell_1.Refusal('training-audience-invalid', { target: target.targetName ?? target.targetId }, `${target.targetName ?? target.targetId} is not of this domain (${why})`);
+    }
+    return null;
+}
+const audienceRows = (audiences) => (audiences ?? []).map(one => ({ scope: one.scope, targetId: one.targetId, ...(one.targetName ? { targetName: String(one.targetName).slice(0, 100) } : {}) }));
+/** Who the request is to the trainings. A department head is the employee a department names as its manager. */
+async function trainingReaderOf(context) {
+    const { domain } = context.state;
+    const tx = trainingManagerOf(context);
+    const all = await (0, employee_reader_1.holds)(context, 'training', 'query');
+    const employee = await (0, employee_reader_1.workingEmployeeOf)(context);
+    let headed = [];
+    if (employee) {
+        const managed = await tx.getRepository(organization_1.Department).find({ where: { domain: { id: domain.id }, manager: { id: employee.id } } });
+        if (managed.length)
+            headed = (0, organization_1.withDescendants)(managed.map(one => one.id), await (0, organization_1.departmentTreeOf)(domain, tx));
+    }
+    return { all, employee, headed };
+}
+/** The reader may read the trainings at all - a holder or an employee; a partner is refused. */
+function requireReader(reader) {
+    if (!reader.all && !reader.employee)
+        throw new shell_1.Refusal('compliance-employees-only', {}, 'only an employee of this company can do this');
+}
+/* ---------------------------------------------------------------- settings */
+/** A kind's own word - written over the declaration, one row per kind. */
+async function saveTrainingSettings(patches, context) {
+    const { domain, user, tx } = context.state;
+    const repository = tx.getRepository(training_1.TrainingSetting);
+    const kinds = await trainingKindsOf(tx, domain);
+    const saved = [];
+    for (const patch of patches) {
+        const refusal = (0, training_rules_1.trainingSettingRefusal)(patch) ?? (await audiencesRefusal(tx, domain, patch.audiences));
+        if (refusal)
+            throw refusal;
+        const kind = kinds.find(one => one.code === patch.kind);
+        const row = (await repository.findOne({ where: { domain: { id: domain.id }, kind: patch.kind } })) ?? repository.create({ domain, kind: patch.kind, enabled: kind.enabled, creator: user });
+        if (patch.enabled !== undefined && patch.enabled !== null)
+            row.enabled = !!patch.enabled;
+        if (patch.dueDay !== undefined)
+            row.dueDay = text(patch.dueDay);
+        if (patch.audiences !== undefined)
+            row.audiences = audienceRows(patch.audiences);
+        if (patch.memo !== undefined)
+            row.memo = text(patch.memo);
+        row.updater = user;
+        saved.push(await repository.save(row));
+    }
+    return saved;
+}
+/* ---------------------------------------------------------------- sessions */
+/** Opens a session with its material, and tells its audience - in the same write. */
+async function openTrainingSession(input, attach, context) {
+    const { domain, user, tx } = context.state;
+    const kind = (await trainingKindsOf(tx, domain)).find(one => one.code === input.kind);
+    const refusal = (0, training_rules_1.trainingSessionRefusal)(input, kind) ?? (await audiencesRefusal(tx, domain, input.audiences));
+    if (refusal)
+        throw refusal;
+    const saved = await tx.getRepository(training_1.TrainingSession).save({
+        domain,
+        kind: input.kind,
+        year: input.year,
+        name: input.name.trim(),
+        method: input.method,
+        startsOn: input.startsOn,
+        endsOn: text(input.endsOn),
+        instructor: text(input.instructor),
+        organisation: text(input.organisation),
+        audiences: audienceRows(input.audiences),
+        notes: text(input.notes),
+        creator: user,
+        updater: user
+    });
+    for (const file of attach ?? [])
+        await (0, attachment_base_1.createAttachment)(null, { attachment: { file, refType: exports.TRAINING_SESSION_REF_TYPE, refBy: saved.id } }, context);
+    const t = context.t ?? ((key) => key);
+    const when = saved.endsOn && saved.endsOn !== saved.startsOn ? `${saved.startsOn} ~ ${saved.endsOn}` : saved.startsOn;
+    await (0, announcement_1.announce)(context, {
+        trigger: exports.TRAINING_SCHEDULED_TRIGGER,
+        sourceKind: exports.TRAINING_SESSION_REF_TYPE,
+        sourceId: saved.id,
+        title: `${kindWord(t, saved.kind)} · ${saved.name}`,
+        body: [
+            `${t('field.training-session-when')}: ${when}`,
+            `${t('field.training-method')}: ${t(`text.training-method.${saved.method}`)}`,
+            ...(saved.instructor ? [`${t('field.training-instructor')}: ${saved.instructor}`] : []),
+            ...(saved.organisation ? [`${t('field.training-organisation')}: ${saved.organisation}`] : [])
+        ].join('\n'),
+        links: [{ label: t('title.training-my-trainings'), url: exports.MY_TRAININGS_ADDRESS }],
+        audiences: trainingAudiencesOf(kind, domain, saved.audiences)
+    });
+    return saved;
+}
+/** What a session says may be corrected - its kind and year stay, the completions of it count for them. */
+async function updateTrainingSessions(patches, context) {
+    const { domain, user, tx } = context.state;
+    const repository = tx.getRepository(training_1.TrainingSession);
+    const kinds = await trainingKindsOf(tx, domain);
+    const saved = [];
+    for (const patch of patches) {
+        const row = await repository.findOne({ where: { id: patch.id, domain: { id: domain.id } } });
+        if (!row)
+            throw new shell_1.Refusal('training-not-found', {}, 'the record was not found. reload and try again.');
+        for (const field of ['name', 'method', 'startsOn', 'endsOn', 'instructor', 'organisation', 'notes'])
+            if (patch[field] !== undefined)
+                row[field] = field === 'name' || field === 'method' || field === 'startsOn' ? (patch[field] ?? '').trim() : text(patch[field]);
+        /* An earlier session of a kind turned off since is still corrected - only what it says is asked. */
+        const refusal = (0, training_rules_1.trainingSessionRefusal)(row, { ...kinds.find(one => one.code === row.kind), enabled: true });
+        if (refusal)
+            throw refusal;
+        row.updater = user;
+        saved.push(await repository.save(row));
+    }
+    return saved;
+}
+/* ---------------------------------------------------------------- completions */
+async function completionsOf(tx, domain, employeeId, kind, year) {
+    return await tx.getRepository(training_1.TrainingCompletion).find({ where: { domain: { id: domain.id }, employee: { id: employeeId }, kind, year } });
+}
+/** A confirmed completion closes the person's to-do of the kind and year, once. */
+async function closeTodoOf(tx, domain, employeeId, kind, year, by) {
+    const repository = tx.getRepository(training_1.TrainingAssignment);
+    const assignment = await repository.findOne({ where: { domain: { id: domain.id }, employee: { id: employeeId }, kind, year } });
+    if (!assignment?.todoInstanceId || assignment.closedAt)
+        return;
+    await (0, legal_todo_1.closeLegalTodo)(tx, domain, assignment.todoInstanceId, by, '이수 확인');
+    assignment.closedAt = new Date();
+    assignment.updater = by;
+    await repository.save(assignment);
+}
+/**
+ * The attendance of a session, recorded by the manager - confirmed at once. Someone already done for the kind and year
+ * is left as they are.
+ */
+async function recordTrainingAttendance(sessionId, employeeIds, completedOn, context) {
+    const { domain, user, tx } = context.state;
+    const session = await tx.getRepository(training_1.TrainingSession).findOne({ where: { id: sessionId, domain: { id: domain.id } } });
+    if (!session)
+        throw new shell_1.Refusal('training-not-found', {}, 'the record was not found. reload and try again.');
+    const day = text(completedOn) ?? session.endsOn ?? session.startsOn;
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(day) || day < session.startsOn)
+        throw new shell_1.Refusal('training-attendance-day-invalid', { startsOn: session.startsOn }, `the day attended is on or after ${session.startsOn}, YYYY-MM-DD`);
+    if (!employeeIds.length)
+        throw new shell_1.Refusal('training-attendees-required', {}, 'pick the people who attended');
+    const today = (0, employee_reader_1.todayIn)(domain);
+    const employees = await tx.getRepository(organization_1.Employee).find({ where: { domain: { id: domain.id }, id: (0, typeorm_1.In)(employeeIds) } });
+    const repository = tx.getRepository(training_1.TrainingCompletion);
+    const written = [];
+    for (const id of new Set(employeeIds)) {
+        const employee = employees.find(one => one.id === id);
+        if (!employee || !(0, employee_profile_rules_js_1.isActiveEmployee)(employee, today))
+            throw new shell_1.Refusal('training-employee-unknown', {}, 'an attendee must be an employee working in this domain');
+        if ((0, training_rules_1.trainingStateOf)(await completionsOf(tx, domain, id, session.kind, session.year)) === 'DONE')
+            continue;
+        written.push(await repository.save({
+            domain,
+            employee,
+            kind: session.kind,
+            year: session.year,
+            session,
+            completedOn: day,
+            method: session.method,
+            organisation: session.organisation,
+            status: training_1.TrainingCompletionStatus.CONFIRMED,
+            decidedAt: new Date(),
+            decidedBy: user,
+            creator: user,
+            updater: user
+        }));
+        await closeTodoOf(tx, domain, id, session.kind, session.year, user);
+    }
+    return written;
+}
+/** A certificate the person sends for themself - waiting until the manager confirms it. */
+async function submitTrainingCertificate(input, attach, context) {
+    const { domain, user, tx } = context.state;
+    const employee = await (0, employee_reader_1.workingEmployeeOf)(context);
+    if (!employee)
+        throw new shell_1.Refusal('compliance-employees-only', {}, 'only an employee of this company can do this');
+    const kind = (await trainingKindsOf(tx, domain)).find(one => one.code === input.kind);
+    const refusal = (0, training_rules_1.trainingCertificateRefusal)(input, kind, (0, employee_reader_1.todayIn)(domain), attach?.length ?? 0, await completionsOf(tx, domain, employee.id, input.kind, input.year));
+    if (refusal)
+        throw refusal;
+    const session = input.sessionId ? await tx.getRepository(training_1.TrainingSession).findOne({ where: { id: input.sessionId, domain: { id: domain.id }, kind: input.kind, year: input.year } }) : null;
+    if (input.sessionId && !session)
+        throw new shell_1.Refusal('training-session-unknown', {}, 'the session must be one of this kind and year');
+    const saved = await tx.getRepository(training_1.TrainingCompletion).save({
+        domain,
+        employee,
+        kind: input.kind,
+        year: input.year,
+        session,
+        completedOn: input.completedOn,
+        method: input.method,
+        organisation: text(input.organisation),
+        status: training_1.TrainingCompletionStatus.SUBMITTED,
+        creator: user,
+        updater: user
+    });
+    for (const file of attach ?? [])
+        await (0, attachment_base_1.createAttachment)(null, { attachment: { file, refType: exports.TRAINING_COMPLETION_REF_TYPE, refBy: saved.id } }, context);
+    return saved;
+}
+/** The manager confirms certificates sent - each closes the person's to-do. */
+async function confirmTrainingCompletions(ids, context) {
+    return await decide(ids, training_1.TrainingCompletionStatus.CONFIRMED, null, context);
+}
+/** The manager returns a certificate, saying why - the person sends another. */
+async function returnTrainingCompletion(id, reason, context) {
+    return (await decide([id], training_1.TrainingCompletionStatus.RETURNED, reason, context))[0];
+}
+async function decide(ids, decision, reason, context) {
+    const { domain, user, tx } = context.state;
+    const repository = tx.getRepository(training_1.TrainingCompletion);
+    const saved = [];
+    for (const id of ids) {
+        const row = await repository.findOne({ where: { id, domain: { id: domain.id } } });
+        if (!row)
+            throw new shell_1.Refusal('training-not-found', {}, 'the record was not found. reload and try again.');
+        const refusal = (0, training_rules_1.trainingDecisionRefusal)(row.status, decision, reason);
+        if (refusal)
+            throw refusal;
+        row.status = decision;
+        row.returnReason = decision === training_1.TrainingCompletionStatus.RETURNED ? reason.trim() : null;
+        row.decidedAt = new Date();
+        row.decidedBy = user;
+        row.updater = user;
+        saved.push(await repository.save(row));
+        if (decision === training_1.TrainingCompletionStatus.CONFIRMED)
+            await closeTodoOf(tx, domain, row.employeeId, row.kind, row.year, user);
+    }
+    return saved;
+}
+/** Training records are kept (decision 17) - every delete is refused with what to do instead. */
+async function deleteTrainingRecords() {
+    throw (0, training_rules_1.trainingDeletionRefusal)();
+}
+/**
+ * Opens a kind's year: a worklist to-do 「<교육> 이수」 with the due day for everyone of its audience not done - at most
+ * one per person, kind and year, so opening it again hands out only to those it missed (a person who joined since, a
+ * to-do the domain could not hand out before).
+ */
+async function openTrainingYear(kindCode, year, context) {
+    const { domain, user, tx } = context.state;
+    const kind = (await trainingKindsOf(tx, domain)).find(one => one.code === kindCode);
+    const refusal = (0, training_rules_1.trainingSessionRefusal)({ kind: kindCode, year, name: '-', method: 'POSTED', startsOn: `${year}-01-01` }, kind);
+    if (refusal)
+        throw refusal;
+    const today = (0, employee_reader_1.todayIn)(domain);
+    const dueOn = (0, training_rules_1.trainingDueOnOf)(year, kind.dueDay);
+    const people = await trainingPeopleOf(tx, domain, trainingAudiencesOf(kind, domain), today);
+    const repository = tx.getRepository(training_1.TrainingAssignment);
+    const done = new Set((await tx.getRepository(training_1.TrainingCompletion).find({ where: { domain: { id: domain.id }, kind: kindCode, year, status: training_1.TrainingCompletionStatus.CONFIRMED } })).map(one => one.employeeId));
+    let handedOut = 0;
+    for (const person of people) {
+        if (done.has(person.id) || !person.user)
+            continue;
+        const assignment = (await repository.findOne({ where: { domain: { id: domain.id }, employee: { id: person.id }, kind: kindCode, year } })) ??
+            (await repository.save({ domain, employee: person, kind: kindCode, year, dueOn, creator: user, updater: user }));
+        if (assignment.todoInstanceId)
+            continue;
+        const t = (0, translator_1.translatorFor)(person.user.locale || 'ko');
+        const id = await (0, legal_todo_1.issueLegalTodo)(tx, domain, {
+            assignee: person.user,
+            name: t('text.training-todo-name', { kind: kindWord(t, kindCode), year }),
+            headline: t('text.training-todo-headline', { dueOn }),
+            address: exports.MY_TRAININGS_ADDRESS,
+            subjectKind: 'TrainingAssignment',
+            subjectId: assignment.id,
+            dueAt: (0, training_rules_1.trainingDueAt)(dueOn, domain.timezone)
+        });
+        if (!id)
+            continue;
+        assignment.todoInstanceId = id;
+        assignment.updater = user;
+        await repository.save(assignment);
+        handedOut++;
+    }
+    return { people: people.length, done: people.filter(one => done.has(one.id)).length, handedOut };
+}
+/** Where everyone of every kind on stands in a year - the people of each kind's audience, by name. */
+async function standingsOf(tx, domain, year, today) {
+    const kinds = (await trainingKindsOf(tx, domain)).filter(one => one.enabled);
+    const completions = await tx.getRepository(training_1.TrainingCompletion).find({ where: { domain: { id: domain.id }, year } });
+    const rows = [];
+    for (const kind of kinds) {
+        const dueOn = (0, training_rules_1.trainingDueOnOf)(year, kind.dueDay);
+        for (const employee of await trainingPeopleOf(tx, domain, trainingAudiencesOf(kind, domain), today)) {
+            const mine = completions.filter(one => one.kind === kind.code && one.employeeId === employee.id);
+            const state = (0, training_rules_1.trainingStateOf)(mine);
+            rows.push({
+                id: `${kind.code}:${year}:${employee.id}`,
+                kind: kind.code,
+                year,
+                dueOn,
+                state,
+                completedOn: state === 'DONE' ? mine.filter(one => one.status === 'CONFIRMED').map(one => one.completedOn).sort()[0] : null,
+                employee,
+                departmentName: employee.department?.name ?? null
+            });
+        }
+    }
+    return rows;
+}
+/**
+ * The standings the reader may read: a holder all of them; an employee their own; a department head also whether each
+ * of their people is done - no day, no waiting certificate, nothing of its content.
+ */
+async function readableStandings(year, context) {
+    const { domain } = context.state;
+    const tx = trainingManagerOf(context);
+    const reader = await trainingReaderOf(context);
+    requireReader(reader);
+    const rows = await standingsOf(tx, domain, year, (0, employee_reader_1.todayIn)(domain));
+    if (reader.all)
+        return rows;
+    return rows
+        .filter(row => row.employee.id === reader.employee.id || (row.employee.departmentId && reader.headed.includes(row.employee.departmentId)))
+        .map(row => (row.employee.id === reader.employee.id ? row : { ...row, state: row.state === 'DONE' ? 'DONE' : 'NOT_DONE', completedOn: null }));
+}
+/** The request's employee's trainings of a year: each kind on whose audience they are in, with its sessions. */
+async function myTrainings(year, context) {
+    const { domain } = context.state;
+    const tx = trainingManagerOf(context);
+    const employee = await (0, employee_reader_1.workingEmployeeOf)(context);
+    if (!employee)
+        throw new shell_1.Refusal('compliance-employees-only', {}, 'only an employee of this company can do this');
+    const today = (0, employee_reader_1.todayIn)(domain);
+    const kinds = (await trainingKindsOf(tx, domain)).filter(one => one.enabled);
+    const sessions = await tx.getRepository(training_1.TrainingSession).find({ where: { domain: { id: domain.id }, year }, order: { startsOn: 'ASC' } });
+    const out = [];
+    for (const kind of kinds) {
+        if (!(await trainingPeopleOf(tx, domain, trainingAudiencesOf(kind, domain), today)).some(one => one.id === employee.id))
+            continue;
+        const mine = (await completionsOf(tx, domain, employee.id, kind.code, year)).sort((a, b) => +new Date(b.createdAt) - +new Date(a.createdAt));
+        const state = (0, training_rules_1.trainingStateOf)(mine);
+        out.push({
+            kind: kind.code,
+            year,
+            dueOn: (0, training_rules_1.trainingDueOnOf)(year, kind.dueDay),
+            state,
+            completion: (state === 'DONE' ? mine.find(one => one.status === 'CONFIRMED') : mine[0]) ?? null,
+            sessions: sessions.filter(one => one.kind === kind.code)
+        });
+    }
+    return out;
+}
+/** Whether the request may read a completion - a holder, or the one it is of. A department head may not. */
+async function mayReadCompletion(row, context) {
+    if (!row)
+        return false;
+    if (await (0, employee_reader_1.holds)(context, 'training', 'query'))
+        return true;
+    const employee = await (0, employee_reader_1.workingEmployeeOf)(context);
+    return !!employee && employee.id === row.employeeId;
+}
+/** Whether the request may read a session's material - a holder, or an employee it is for. */
+async function mayReadSession(row, context) {
+    if (!row)
+        return false;
+    if (await (0, employee_reader_1.holds)(context, 'training', 'query'))
+        return true;
+    const { domain } = context.state;
+    const employee = await (0, employee_reader_1.workingEmployeeOf)(context);
+    if (!employee)
+        return false;
+    const manager = trainingManagerOf(context);
+    const kind = (await trainingKindsOf(manager, domain)).find(one => one.code === row.kind);
+    if (!kind)
+        return false;
+    return (await trainingPeopleOf(manager, domain, trainingAudiencesOf(kind, domain, row.audiences), (0, employee_reader_1.todayIn)(domain))).some(one => one.id === employee.id);
+}
+//# sourceMappingURL=training-service.js.map