@coderoftime/fints 0.0.0-stage → 0.1.0

package/dist/core/config.js

@@ -0,0 +1,113 @@
+import { invalidArgument } from '../util/errors.js';
+/** Numeric country code of Germany (ISO 3166), where FinTS banks are. */
+export const defaultCountryCode = '280';
+/** Connection and login data for one bank user. */
+export class FinTsConfig {
+    /** Numeric country code of Germany (ISO 3166), where FinTS banks are. */
+    static defaultCountryCode = defaultCountryCode;
+    url;
+    bankCode;
+    userId;
+    explicitCustomerId;
+    productId;
+    productVersion;
+    countryCode;
+    allowInsecureUrl;
+    /**
+     * Throws `TypeError` if `url` is not a valid URL, has no host or is not https, unless `allowInsecureUrl` is set and
+     * `url` is a loopback address, and if a login detail or the product is empty: the bank would refuse the login.
+     */
+    constructor(init) {
+        // `URL` would read `https:bank` and `https:///bank` as the host `bank`; such a URL is a mistake, not a host.
+        if (typeof init.url === 'string' && !/^[a-z][a-z0-9+.-]*:\/\/[^/]/i.test(init.url)) {
+            throw invalidArgument('The URL has no host', 'url');
+        }
+        let url;
+        try {
+            url = new URL(init.url);
+        }
+        catch {
+            throw invalidArgument('Not a valid URL', 'url');
+        }
+        this.url = url;
+        this.bankCode = init.bankCode;
+        this.userId = init.userId;
+        this.explicitCustomerId = init.customerId;
+        this.productId = init.productId;
+        this.productVersion = init.productVersion ?? '1.0';
+        this.countryCode = init.countryCode ?? defaultCountryCode;
+        this.allowInsecureUrl = init.allowInsecureUrl ?? false;
+        requireSecureUrl(url, this.allowInsecureUrl);
+        requireNotBlank(this.bankCode, 'bankCode');
+        requireNotBlank(this.userId, 'userId');
+        if (this.explicitCustomerId !== undefined)
+            requireNotBlank(this.explicitCustomerId, 'customerId');
+        requireNotBlank(this.productId, 'productId');
+        requireNotBlank(this.productVersion, 'productVersion');
+        requireNotBlank(this.countryCode, 'countryCode');
+    }
+    /** Customer ID; defaults to `userId`. */
+    get customerId() {
+        return this.explicitCustomerId ?? this.userId;
+    }
+}
+function requireNotBlank(value, name) {
+    if (value.trim() === '')
+        throw invalidArgument('Must not be empty', name);
+}
+/** The host of `url` without the brackets of an IPv6 address, as `URL` writes it. */
+export function hostOf(url) {
+    const host = url.hostname;
+    return host.startsWith('[') && host.endsWith(']') ? host.substring(1, host.length - 1) : host;
+}
+/**
+ * Throws `TypeError` unless `url` names a host and uses https: the PIN travels with every message.
+ *
+ * With `allowInsecure`, http is accepted for loopback hosts only.
+ */
+export function requireSecureUrl(url, allowInsecure = false) {
+    if (hostOf(url) === '')
+        throw invalidArgument('The URL has no host', 'url');
+    const loopbackHttp = allowInsecure && url.protocol === 'http:' && isLoopback(hostOf(url));
+    if (url.protocol !== 'https:' && !loopbackHttp)
+        throw invalidArgument('PIN/TAN requires an https URL', 'url');
+}
+/**
+ * Throws `TypeError` for an empty PIN, which the bank would count as a failed attempt, and for one with leading or
+ * trailing blanks: FinTS values carry none (Formals B.4.1), so such a PIN could only go out changed.
+ *
+ * The message leaves out the value.
+ */
+export function requirePin(pin) {
+    if (pin.trim() === '')
+        throw invalidArgument('The PIN is empty', 'pin');
+    if (pin.trim() !== pin)
+        throw invalidArgument('The PIN begins or ends with a blank', 'pin');
+    return pin;
+}
+/**
+ * Throws `TypeError` if `pin` is shorter than `min` or longer than `max` characters, the bank's limits: the bank would
+ * count such a PIN as a failed attempt. A limit that is `undefined` or below 1 does not apply.
+ *
+ * The message leaves out the PIN and its length.
+ */
+export function requirePinLength(pin, min, max) {
+    const tooShort = min !== undefined && min > 0 && pin.length < min;
+    const tooLong = max !== undefined && max > 0 && pin.length > max;
+    if (tooShort || tooLong) {
+        const range = [
+            ...(min !== undefined && min > 0 ? [`at least ${min}`] : []),
+            ...(max !== undefined && max > 0 ? [`at most ${max}`] : []),
+        ].join(' and ');
+        throw invalidArgument(`The bank takes PINs of ${range} characters`, 'pin');
+    }
+}
+const loopbackAddress = /^127(\.(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}$/;
+/**
+ * Only addresses and names that cannot leave the machine: a resolver may send a subdomain such as `bank.localhost`, or
+ * a string that is not an address, such as `127.999.1.1`, to DNS.
+ */
+function isLoopback(host) {
+    return host === 'localhost' || host === '::1' || loopbackAddress.test(host);
+}
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AA0BxC,mDAAmD;AACnD,MAAM,OAAO,WAAW;IACtB,yEAAyE;IACzE,MAAM,CAAU,kBAAkB,GAAG,kBAAkB,CAAC;IAE/C,GAAG,CAAM;IACT,QAAQ,CAAS;IACjB,MAAM,CAAS;IACP,kBAAkB,CAAqB;IAC/C,SAAS,CAAS;IAClB,cAAc,CAAS;IACvB,WAAW,CAAS;IACpB,gBAAgB,CAAU;IAEnC;;;OAGG;IACH,YAAY,IAAqB;QAC/B,6GAA6G;QAC7G,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnF,MAAM,eAAe,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,eAAe,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;QAC1D,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACvD,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS;YAAE,eAAe,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;QAClG,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAC7C,eAAe,CAAC,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACvD,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC;IAChD,CAAC;;AAGH,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,eAAe,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,MAAM,CAAC,GAAQ;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAQ,EAAE,aAAa,GAAG,KAAK;IAC9D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;QAAE,MAAM,eAAe,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAC5E,MAAM,YAAY,GAAG,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY;QAAE,MAAM,eAAe,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;AAChH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,eAAe,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,MAAM,eAAe,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;IAC5F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAuB,EAAE,GAAuB;IAC5F,MAAM,QAAQ,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjE,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,eAAe,CAAC,0BAA0B,KAAK,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,+CAA+C,CAAC;AAExE;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,91 @@
+import { type FinTsFeedback } from './feedback.js';
+/** Base class of all errors the client raises about the bank and its data. */
+export declare abstract class FinTsError extends Error {
+    protected constructor(name: string, message: string, cause?: unknown);
+}
+/** The connection to the bank failed or returned an HTTP error. */
+export declare class FinTsTransportError extends FinTsError {
+    /** The HTTP status code of the response, `undefined` if there was none, for example after a timeout. */
+    readonly statusCode: number | undefined;
+    constructor(message: string, options?: {
+        statusCode?: number;
+        cause?: unknown;
+    });
+}
+/** The bank's response could not be understood. */
+export declare class FinTsProtocolError extends FinTsError {
+    constructor(message: string);
+}
+/** The bank does not offer the requested business transaction. */
+export declare class FinTsUnsupportedError extends FinTsError {
+    constructor(message: string);
+}
+/**
+ * The bank rejected the request; `feedback` holds all return codes.
+ *
+ * After a refused login every later call that would send the PIN fails with the same error, without contacting the
+ * bank; create a new client to try again. The README tells which errors refuse a login.
+ */
+export declare class FinTsBankError extends FinTsError {
+    /** All return codes of the response, warnings and successes included. */
+    readonly feedback: readonly FinTsFeedback[];
+    /** A rejection with the return codes in `feedback`; `message` defaults to the errors among them. */
+    constructor(feedback: readonly FinTsFeedback[], message?: string, name?: string);
+    /** The return codes of `feedback`. */
+    get codes(): string[];
+}
+/** Wrong or blocked PIN, a refused login as `FinTsBankError` describes it. */
+export declare class FinTsPinError extends FinTsBankError {
+    constructor(feedback: readonly FinTsFeedback[]);
+}
+/** Invalid, expired or rejected TAN, as the bank reports it in answer to a TAN or to an approval status request. */
+export declare class FinTsTanError extends FinTsBankError {
+    constructor(feedback: readonly FinTsFeedback[]);
+}
+/**
+ * The bank has changed the user's login data and expects the new ones from now on (return code 3072).
+ *
+ * The client has ended the dialog, and every later call fails with this error. Create a new client with the new data; a
+ * `loginName` replaces user ID and customer ID: pass it as `userId`, without a customer ID.
+ */
+export declare class FinTsLoginDataChangedError extends FinTsBankError {
+    constructor(feedback: readonly FinTsFeedback[]);
+    /** The new user ID (Benutzerkennung); `undefined` where the bank names none. */
+    get userId(): string | undefined;
+    /** The new customer ID (Kunden-ID); `undefined` where the bank names none. */
+    get customerId(): string | undefined;
+    /** The new login name (Anmeldename); `undefined` where the bank names none. */
+    get loginName(): string | undefined;
+    private parameter;
+}
+/** The bank ended the dialog, for example after a timeout. */
+export declare class FinTsDialogAbortedError extends FinTsBankError {
+    constructor(feedback: readonly FinTsFeedback[]);
+}
+/** The user cancelled the TAN entry or the approval in the banking app. */
+export declare class FinTsTanCancelledError extends FinTsError {
+    constructor();
+}
+/** The user did not approve in the banking app within the bank's polling limit. */
+export declare class FinTsDecoupledTimeoutError extends FinTsError {
+    constructor();
+}
+/**
+ * The client was closed, or called from inside one of its own callbacks, which would wait for itself.
+ *
+ * It does not extend `FinTsError`: it tells about the app's use of the client, not about the bank.
+ */
+export declare class FinTsStateError extends Error {
+    constructor(message: string);
+}
+/**
+ * The most specific error for the errors in `feedback`, the answer to a message that `completesApproval` or not.
+ *
+ * Only the answer to a TAN or an approval status request can reject a TAN; anywhere else a TAN return code is a plain
+ * `FinTsBankError`. In answer to a login, 9941 or 9951 may reject the PIN, and the client must not take a refused login
+ * for a wrong TAN, after which it would send the PIN again.
+ */
+export declare function bankErrorFor(feedback: readonly FinTsFeedback[], completesApproval?: boolean): FinTsBankError;
+/** Runs `parse` on data from the bank and reports malformed data as `FinTsProtocolError`. */
+export declare function parseBankData<T>(parse: () => T): T;
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9E,8EAA8E;AAC9E,8BAAsB,UAAW,SAAQ,KAAK;IAC5C,SAAS,aAAa,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAKrE;AAED,mEAAmE;AACnE,qBAAa,mBAAoB,SAAQ,UAAU;IACjD,wGAAwG;IACxG,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE5B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAIhF;AAED,mDAAmD;AACnD,qBAAa,kBAAmB,SAAQ,UAAU;gBACpC,OAAO,EAAE,MAAM;CAG5B;AAED,kEAAkE;AAClE,qBAAa,qBAAsB,SAAQ,UAAU;gBACvC,OAAO,EAAE,MAAM;CAG5B;AAED;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,UAAU;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAE5C,oGAAoG;gBACxF,QAAQ,EAAE,SAAS,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,SAAmB;IAYzF,sCAAsC;IACtC,IAAI,KAAK,IAAI,MAAM,EAAE,CAEpB;CACF;AAED,8EAA8E;AAC9E,qBAAa,aAAc,SAAQ,cAAc;gBACnC,QAAQ,EAAE,SAAS,aAAa,EAAE;CAG/C;AAED,oHAAoH;AACpH,qBAAa,aAAc,SAAQ,cAAc;gBACnC,QAAQ,EAAE,SAAS,aAAa,EAAE;CAG/C;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,cAAc;gBAChD,QAAQ,EAAE,SAAS,aAAa,EAAE;IAI9C,gFAAgF;IAChF,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IAED,8EAA8E;IAC9E,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,+EAA+E;IAC/E,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,OAAO,CAAC,SAAS;CAKlB;AAED,8DAA8D;AAC9D,qBAAa,uBAAwB,SAAQ,cAAc;gBAC7C,QAAQ,EAAE,SAAS,aAAa,EAAE;CAG/C;AAED,2EAA2E;AAC3E,qBAAa,sBAAuB,SAAQ,UAAU;;CAIrD;AAED,mFAAmF;AACnF,qBAAa,0BAA2B,SAAQ,UAAU;;CAIzD;AAED;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAkCD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAAE,iBAAiB,UAAQ,GAAG,cAAc,CAO1G;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAOlD"}

package/dist/core/errors.js

@@ -0,0 +1,182 @@
+import { FormatError } from '../util/errors.js';
+import { endsDialog, FeedbackCodes } from './feedback.js';
+/** Base class of all errors the client raises about the bank and its data. */
+export class FinTsError extends Error {
+    constructor(name, message, cause) {
+        super(message, cause === undefined ? undefined : { cause });
+        // Set explicitly: a minifier renames classes, and `constructor.name` would show a meaningless name.
+        this.name = name;
+    }
+}
+/** The connection to the bank failed or returned an HTTP error. */
+export class FinTsTransportError extends FinTsError {
+    /** The HTTP status code of the response, `undefined` if there was none, for example after a timeout. */
+    statusCode;
+    constructor(message, options) {
+        super('FinTsTransportError', message, options?.cause);
+        this.statusCode = options?.statusCode;
+    }
+}
+/** The bank's response could not be understood. */
+export class FinTsProtocolError extends FinTsError {
+    constructor(message) {
+        super('FinTsProtocolError', message);
+    }
+}
+/** The bank does not offer the requested business transaction. */
+export class FinTsUnsupportedError extends FinTsError {
+    constructor(message) {
+        super('FinTsUnsupportedError', message);
+    }
+}
+/**
+ * The bank rejected the request; `feedback` holds all return codes.
+ *
+ * After a refused login every later call that would send the PIN fails with the same error, without contacting the
+ * bank; create a new client to try again. The README tells which errors refuse a login.
+ */
+export class FinTsBankError extends FinTsError {
+    /** All return codes of the response, warnings and successes included. */
+    feedback;
+    /** A rejection with the return codes in `feedback`; `message` defaults to the errors among them. */
+    constructor(feedback, message, name = 'FinTsBankError') {
+        super(name, message ??
+            feedback
+                .filter((f) => f.isError)
+                .map((f) => f.toString())
+                .join('; '));
+        this.feedback = Object.freeze([...feedback]);
+    }
+    /** The return codes of `feedback`. */
+    get codes() {
+        return this.feedback.map((f) => f.code);
+    }
+}
+/** Wrong or blocked PIN, a refused login as `FinTsBankError` describes it. */
+export class FinTsPinError extends FinTsBankError {
+    constructor(feedback) {
+        super(feedback, undefined, 'FinTsPinError');
+    }
+}
+/** Invalid, expired or rejected TAN, as the bank reports it in answer to a TAN or to an approval status request. */
+export class FinTsTanError extends FinTsBankError {
+    constructor(feedback) {
+        super(feedback, undefined, 'FinTsTanError');
+    }
+}
+/**
+ * The bank has changed the user's login data and expects the new ones from now on (return code 3072).
+ *
+ * The client has ended the dialog, and every later call fails with this error. Create a new client with the new data; a
+ * `loginName` replaces user ID and customer ID: pass it as `userId`, without a customer ID.
+ */
+export class FinTsLoginDataChangedError extends FinTsBankError {
+    constructor(feedback) {
+        super(feedback, 'The bank has changed the login data', 'FinTsLoginDataChangedError');
+    }
+    /** The new user ID (Benutzerkennung); `undefined` where the bank names none. */
+    get userId() {
+        return this.parameter(0);
+    }
+    /** The new customer ID (Kunden-ID); `undefined` where the bank names none. */
+    get customerId() {
+        return this.parameter(1);
+    }
+    /** The new login name (Anmeldename); `undefined` where the bank names none. */
+    get loginName() {
+        return this.parameter(2);
+    }
+    parameter(index) {
+        const change = this.feedback.find((f) => f.code === FeedbackCodes.newLoginData);
+        const value = change?.parameters[index]?.trim();
+        return value === undefined || value === '' ? undefined : value;
+    }
+}
+/** The bank ended the dialog, for example after a timeout. */
+export class FinTsDialogAbortedError extends FinTsBankError {
+    constructor(feedback) {
+        super(feedback, undefined, 'FinTsDialogAbortedError');
+    }
+}
+/** The user cancelled the TAN entry or the approval in the banking app. */
+export class FinTsTanCancelledError extends FinTsError {
+    constructor() {
+        super('FinTsTanCancelledError', 'TAN entry cancelled');
+    }
+}
+/** The user did not approve in the banking app within the bank's polling limit. */
+export class FinTsDecoupledTimeoutError extends FinTsError {
+    constructor() {
+        super('FinTsDecoupledTimeoutError', 'Approval on the separate device was not completed in time');
+    }
+}
+/**
+ * The client was closed, or called from inside one of its own callbacks, which would wait for itself.
+ *
+ * It does not extend `FinTsError`: it tells about the app's use of the client, not about the bank.
+ */
+export class FinTsStateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'FinTsStateError';
+    }
+}
+/**
+ * Return codes for a wrong or blocked PIN, from the FinTS return code list (Rückmeldungscodes): 9340 signature (PIN)
+ * wrong, 9910 PIN invalid or blocked, 9930 PIN blocked, 9931 blocked after failed attempts, 9942 PIN invalid.
+ */
+const pinErrors = new Set(['9340', '9910', '9930', '9931', '9942']);
+/**
+ * Return codes for a rejected TAN: 9941 TAN invalid, 9943 and 9991 TAN already used (the return code list and the
+ * PIN/TAN specification give different numbers), 9951 two-step timeout.
+ *
+ * The return code list gives 9941 and 9951 a second meaning, "Signatur ungültig" (invalid signature), which in PIN/TAN
+ * is the PIN; see `bankErrorFor`.
+ */
+const tanErrors = new Set(['9941', '9943', '9951', '9991']);
+/**
+ * Whether `f` reports a wrong or blocked PIN. Two of the codes stand for other faults as well, which the text tells:
+ * 9340 "Sicherheitsprofil unbekannt", 9910 "TAN-Reihe gesperrt" and "Chipkarte gesperrt".
+ */
+function isPinError(f) {
+    if (!f.isError || !pinErrors.has(f.code))
+        return false;
+    const text = f.text.toLowerCase();
+    switch (f.code) {
+        case '9340':
+            return !text.includes('profil');
+        case '9910':
+            return !text.includes('tan-reihe') && !text.includes('chipkarte');
+        default:
+            return true;
+    }
+}
+/**
+ * The most specific error for the errors in `feedback`, the answer to a message that `completesApproval` or not.
+ *
+ * Only the answer to a TAN or an approval status request can reject a TAN; anywhere else a TAN return code is a plain
+ * `FinTsBankError`. In answer to a login, 9941 or 9951 may reject the PIN, and the client must not take a refused login
+ * for a wrong TAN, after which it would send the PIN again.
+ */
+export function bankErrorFor(feedback, completesApproval = false) {
+    if (feedback.some(isPinError))
+        return new FinTsPinError(feedback);
+    if (completesApproval && feedback.some((f) => f.isError && tanErrors.has(f.code))) {
+        return new FinTsTanError(feedback);
+    }
+    if (endsDialog(feedback))
+        return new FinTsDialogAbortedError(feedback);
+    return new FinTsBankError(feedback);
+}
+/** Runs `parse` on data from the bank and reports malformed data as `FinTsProtocolError`. */
+export function parseBankData(parse) {
+    try {
+        return parse();
+    }
+    catch (error) {
+        if (error instanceof FormatError)
+            throw new FinTsProtocolError(`Malformed bank data: ${error.message}`);
+        throw error;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,eAAe,CAAC;AAE9E,8EAA8E;AAC9E,MAAM,OAAgB,UAAW,SAAQ,KAAK;IAC5C,YAAsB,IAAY,EAAE,OAAe,EAAE,KAAe;QAClE,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,oGAAoG;QACpG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACjD,wGAAwG;IAC/F,UAAU,CAAqB;IAExC,YAAY,OAAe,EAAE,OAAkD;QAC7E,KAAK,CAAC,qBAAqB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;IACxC,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,OAAO,kBAAmB,SAAQ,UAAU;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,yEAAyE;IAChE,QAAQ,CAA2B;IAE5C,oGAAoG;IACpG,YAAY,QAAkC,EAAE,OAAgB,EAAE,IAAI,GAAG,gBAAgB;QACvF,KAAK,CACH,IAAI,EACJ,OAAO;YACL,QAAQ;iBACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;iBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;iBACxB,IAAI,CAAC,IAAI,CAAC,CAChB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,sCAAsC;IACtC,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,aAAc,SAAQ,cAAc;IAC/C,YAAY,QAAkC;QAC5C,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,oHAAoH;AACpH,MAAM,OAAO,aAAc,SAAQ,cAAc;IAC/C,YAAY,QAAkC;QAC5C,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC9C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,cAAc;IAC5D,YAAY,QAAkC;QAC5C,KAAK,CAAC,QAAQ,EAAE,qCAAqC,EAAE,4BAA4B,CAAC,CAAC;IACvF,CAAC;IAED,gFAAgF;IAChF,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,8EAA8E;IAC9E,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,KAAa;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,YAAY,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,uBAAwB,SAAQ,cAAc;IACzD,YAAY,QAAkC;QAC5C,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,sBAAuB,SAAQ,UAAU;IACpD;QACE,KAAK,CAAC,wBAAwB,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD;QACE,KAAK,CAAC,4BAA4B,EAAE,2DAA2D,CAAC,CAAC;IACnG,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D;;;GAGG;AACH,SAAS,UAAU,CAAC,CAAgB;IAClC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,KAAK,MAAM;YACT,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpE;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkC,EAAE,iBAAiB,GAAG,KAAK;IACxF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,iBAAiB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACvE,OAAO,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAI,KAAc;IAC7C,IAAI,CAAC;QACH,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/feedback.d.ts

@@ -0,0 +1,69 @@
+/** A return code with text from the bank, for example `0020: Auftrag ausgeführt`. */
+export declare class FinTsFeedback {
+    /** The four-digit return code; `0…` reports success, `3…` a warning and `9…` an error. */
+    readonly code: string;
+    /** The element of the request the code refers to, if the bank names one. */
+    readonly reference: string | undefined;
+    /** The bank's explanation of the code. */
+    readonly text: string;
+    /** Values the bank adds to the code, such as the position to continue at. */
+    readonly parameters: readonly string[];
+    constructor(init: {
+        code: string;
+        reference?: string | undefined;
+        text: string;
+        parameters?: readonly string[];
+    });
+    /** Whether the code reports success. */
+    get isSuccess(): boolean;
+    /** Whether the code is a warning. */
+    get isWarning(): boolean;
+    /** Whether the code is an error. */
+    get isError(): boolean;
+    toString(): string;
+}
+/** Return codes the client reacts to, as named in the FinTS return code list (Rückmeldungscodes). */
+export declare const FeedbackCodes: Readonly<{
+    /** Order received, strong authentication required (Auftrag empfangen – Sicherheitsfreigabe erforderlich). */
+    tanRequired: "0030";
+    /** More information available; the first parameter is where to continue (Es liegen weitere Informationen vor). */
+    moreData: "3040";
+    /**
+     * The bank has new login data for the user; the parameters are the user ID, the customer ID and the login name
+     * (Neue Anmeldedaten).
+     */
+    newLoginData: "3072";
+    /** The one- and two-step methods the user may use, as parameters. */
+    allowedTanMethods: "3920";
+    /** Approval happens on another channel, such as a banking app (Sicherheitsfreigabe erfolgt über anderen Kanal). */
+    decoupledPending: "3955";
+    /** Strong authentication still pending (Starke Kundenauthentifizierung noch ausstehend). */
+    decoupledStillPending: "3956";
+    /** Wait for the push message (Auf Push-Nachricht warten). */
+    decoupledWaitForPush: "3957";
+    /** The bank ended the dialog (Dialog abgebrochen). */
+    dialogAborted: "9800";
+    /**
+     * The bank ended the dialog because it requires strong authentication (Dialog abgebrochen – starke Authentifizierung
+     * erforderlich).
+     */
+    scaRequired: "9075";
+    /** The customer system ID is not accepted any more; a synchronization delivers a new one (Neue Kundensystem-ID holen). */
+    newSystemIdRequired: "9391";
+}>;
+/** Whether a return code `code` is among the `feedback`. */
+export declare function hasCode(feedback: readonly FinTsFeedback[], code: string): boolean;
+/** Whether any return code is an error. */
+export declare function hasErrors(feedback: readonly FinTsFeedback[]): boolean;
+/** The positions to continue at that the bank names with return code 3040; empty on the last page. */
+export declare function continuations(feedback: readonly FinTsFeedback[]): Set<string>;
+/**
+ * The security functions of the TAN methods the user may use, as the bank lists them with return code 3920, in all such
+ * return codes; empty if it lists none.
+ */
+export declare function allowedTanMethodsIn(feedback: readonly FinTsFeedback[]): string[];
+/** Whether the bank ended the dialog with one of its return codes for that. */
+export declare function endsDialog(feedback: readonly FinTsFeedback[]): boolean;
+/** The warnings for the user: all but those about the protocol. */
+export declare function userWarnings(feedback: readonly FinTsFeedback[]): FinTsFeedback[];
+//# sourceMappingURL=feedback.d.ts.map

package/dist/core/feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.d.ts","sourceRoot":"","sources":["../../src/core/feedback.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,qBAAa,aAAa;IACxB,0FAA0F;IAC1F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAEvC,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;gBAE3B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE;IAOhH,wCAAwC;IACxC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,qCAAqC;IACrC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,oCAAoC;IACpC,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,QAAQ,IAAI,MAAM;CAGnB;AAED,qGAAqG;AACrG,eAAO,MAAM,aAAa;IACxB,6GAA6G;;IAE7G,kHAAkH;;IAElH;;;OAGG;;IAEH,qEAAqE;;IAErE,mHAAmH;;IAEnH,4FAA4F;;IAE5F,6DAA6D;;IAE7D,sDAAsD;;IAEtD;;;OAGG;;IAEH,0HAA0H;;EAE1H,CAAC;AA0BH,4DAA4D;AAC5D,wBAAgB,OAAO,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjF;AAED,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAErE;AAED,sGAAsG;AACtG,wBAAgB,aAAa,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAO7E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,EAAE,CAOhF;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAEtE;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,aAAa,EAAE,CAEhF"}

package/dist/core/feedback.js

@@ -0,0 +1,124 @@
+/** A return code with text from the bank, for example `0020: Auftrag ausgeführt`. */
+export class FinTsFeedback {
+    /** The four-digit return code; `0…` reports success, `3…` a warning and `9…` an error. */
+    code;
+    /** The element of the request the code refers to, if the bank names one. */
+    reference;
+    /** The bank's explanation of the code. */
+    text;
+    /** Values the bank adds to the code, such as the position to continue at. */
+    parameters;
+    constructor(init) {
+        this.code = init.code;
+        this.reference = init.reference;
+        this.text = init.text;
+        this.parameters = Object.freeze([...(init.parameters ?? [])]);
+    }
+    /** Whether the code reports success. */
+    get isSuccess() {
+        return this.code.startsWith('0');
+    }
+    /** Whether the code is a warning. */
+    get isWarning() {
+        return this.code.startsWith('3');
+    }
+    /** Whether the code is an error. */
+    get isError() {
+        return this.code.startsWith('9');
+    }
+    toString() {
+        return `${this.code}: ${this.text}${this.parameters.length === 0 ? '' : ` [${this.parameters.join(', ')}]`}`;
+    }
+}
+/** Return codes the client reacts to, as named in the FinTS return code list (Rückmeldungscodes). */
+export const FeedbackCodes = Object.freeze({
+    /** Order received, strong authentication required (Auftrag empfangen – Sicherheitsfreigabe erforderlich). */
+    tanRequired: '0030',
+    /** More information available; the first parameter is where to continue (Es liegen weitere Informationen vor). */
+    moreData: '3040',
+    /**
+     * The bank has new login data for the user; the parameters are the user ID, the customer ID and the login name
+     * (Neue Anmeldedaten).
+     */
+    newLoginData: '3072',
+    /** The one- and two-step methods the user may use, as parameters. */
+    allowedTanMethods: '3920',
+    /** Approval happens on another channel, such as a banking app (Sicherheitsfreigabe erfolgt über anderen Kanal). */
+    decoupledPending: '3955',
+    /** Strong authentication still pending (Starke Kundenauthentifizierung noch ausstehend). */
+    decoupledStillPending: '3956',
+    /** Wait for the push message (Auf Push-Nachricht warten). */
+    decoupledWaitForPush: '3957',
+    /** The bank ended the dialog (Dialog abgebrochen). */
+    dialogAborted: '9800',
+    /**
+     * The bank ended the dialog because it requires strong authentication (Dialog abgebrochen – starke Authentifizierung
+     * erforderlich).
+     */
+    scaRequired: '9075',
+    /** The customer system ID is not accepted any more; a synchronization delivers a new one (Neue Kundensystem-ID holen). */
+    newSystemIdRequired: '9391',
+});
+/**
+ * The return codes with which the bank ends the dialog ("Dialog abgebrochen" in the return code list): 9800 and 9075,
+ * and 9077 (hardened browser required), 9078 (product not registered) and 9361 (security procedure no longer allowed).
+ */
+const dialogEnding = new Set([FeedbackCodes.dialogAborted, FeedbackCodes.scaRequired, '9077', '9078', '9361']);
+/**
+ * The warnings about the protocol, which the client acts on itself and the user has no use for: paging, the allowed TAN
+ * methods, the steps of an approval and 3076 (no strong authentication needed), new login data, which fail the call,
+ * and 3060 (some warnings), which only announces the others.
+ */
+const protocolWarnings = new Set([
+    FeedbackCodes.moreData,
+    '3060',
+    FeedbackCodes.newLoginData,
+    '3076',
+    FeedbackCodes.allowedTanMethods,
+    FeedbackCodes.decoupledPending,
+    FeedbackCodes.decoupledStillPending,
+    FeedbackCodes.decoupledWaitForPush,
+]);
+// Reading return codes the way the session logic needs; not part of the public API.
+/** Whether a return code `code` is among the `feedback`. */
+export function hasCode(feedback, code) {
+    return feedback.some((f) => f.code === code);
+}
+/** Whether any return code is an error. */
+export function hasErrors(feedback) {
+    return feedback.some((f) => f.isError);
+}
+/** The positions to continue at that the bank names with return code 3040; empty on the last page. */
+export function continuations(feedback) {
+    const positions = new Set();
+    for (const f of feedback) {
+        const position = f.parameters[0];
+        if (f.code === FeedbackCodes.moreData && position !== undefined && position !== '')
+            positions.add(position);
+    }
+    return positions;
+}
+/**
+ * The security functions of the TAN methods the user may use, as the bank lists them with return code 3920, in all such
+ * return codes; empty if it lists none.
+ */
+export function allowedTanMethodsIn(feedback) {
+    const codes = new Set();
+    for (const f of feedback) {
+        if (f.code !== FeedbackCodes.allowedTanMethods)
+            continue;
+        for (const code of f.parameters)
+            if (code !== '')
+                codes.add(code);
+    }
+    return [...codes];
+}
+/** Whether the bank ended the dialog with one of its return codes for that. */
+export function endsDialog(feedback) {
+    return feedback.some((f) => dialogEnding.has(f.code));
+}
+/** The warnings for the user: all but those about the protocol. */
+export function userWarnings(feedback) {
+    return feedback.filter((f) => f.isWarning && !protocolWarnings.has(f.code));
+}
+//# sourceMappingURL=feedback.js.map

package/dist/core/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.js","sourceRoot":"","sources":["../../src/core/feedback.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,OAAO,aAAa;IACxB,0FAA0F;IACjF,IAAI,CAAS;IAEtB,4EAA4E;IACnE,SAAS,CAAqB;IAEvC,0CAA0C;IACjC,IAAI,CAAS;IAEtB,6EAA6E;IACpE,UAAU,CAAoB;IAEvC,YAAY,IAAoG;QAC9G,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,wCAAwC;IACxC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,qCAAqC;IACrC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/G,CAAC;CACF;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,6GAA6G;IAC7G,WAAW,EAAE,MAAM;IACnB,kHAAkH;IAClH,QAAQ,EAAE,MAAM;IAChB;;;OAGG;IACH,YAAY,EAAE,MAAM;IACpB,qEAAqE;IACrE,iBAAiB,EAAE,MAAM;IACzB,mHAAmH;IACnH,gBAAgB,EAAE,MAAM;IACxB,4FAA4F;IAC5F,qBAAqB,EAAE,MAAM;IAC7B,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM;IAC5B,sDAAsD;IACtD,aAAa,EAAE,MAAM;IACrB;;;OAGG;IACH,WAAW,EAAE,MAAM;IACnB,0HAA0H;IAC1H,mBAAmB,EAAE,MAAM;CAC5B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvH;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,aAAa,CAAC,QAAQ;IACtB,MAAM;IACN,aAAa,CAAC,YAAY;IAC1B,MAAM;IACN,aAAa,CAAC,iBAAiB;IAC/B,aAAa,CAAC,gBAAgB;IAC9B,aAAa,CAAC,qBAAqB;IACnC,aAAa,CAAC,oBAAoB;CACnC,CAAC,CAAC;AAEH,oFAAoF;AAEpF,4DAA4D;AAC5D,MAAM,UAAU,OAAO,CAAC,QAAkC,EAAE,IAAY;IACtE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,QAAkC;IAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,aAAa,CAAC,QAAkC;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;YAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAkC;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,iBAAiB;YAAE,SAAS;QACzD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,UAAU;YAAE,IAAI,IAAI,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,QAAkC;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,QAAkC;IAC7D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC"}