@coderoftime/fints 0.0.0-stage → 0.1.0

package/dist/session/pin-tan-dialog.js

@@ -0,0 +1,124 @@
+import { FinTsError, FinTsProtocolError, FinTsTransportError, parseBankData } from '../core/errors.js';
+import { endsDialog, FeedbackCodes, hasCode, hasErrors } from '../core/feedback.js';
+import { challengeText, TanChallenge } from '../tan/challenge.js';
+/**
+ * How long a dialog may stay idle where the bank states no timeout: on the safe side, since a dialog given up too early
+ * only costs a new login, while one kept too long fails the next call.
+ */
+const defaultIdleLimitMs = 5 * 60_000;
+/** The dialog logic of PIN/TAN: the TAN method and medium, the message count, the dialog's end, and the approvals. */
+export class PinTanDialog {
+    method;
+    tanMedium;
+    messageNumber = 1;
+    ended = false;
+    /** When the bank last answered without rejecting the whole message, which shows it still knows the dialog. */
+    lastAnswer;
+    constructor(method, 
+    /** The TAN medium the messages name, where the method takes one. */
+    tanMedium) {
+        this.method = method;
+        this.tanMedium = tanMedium;
+    }
+    /**
+     * Whether the dialog has ended, on either side.
+     *
+     * The bank ends a dialog idle for longer than its maximum timeout (HIBPA, Formals C.9), or five minutes where it
+     * states none. Such a dialog is neither used nor ended again: the bank would refuse any message in it.
+     */
+    get hasEnded() {
+        return this.ended || this.idleTooLong;
+    }
+    get idleTooLong() {
+        const last = this.lastAnswer;
+        const timeout = this.bankParameters?.bankInfo.maxTimeout;
+        // A timeout of 0 or below: the bank keeps idle dialogs without limit.
+        const limit = timeout === undefined ? defaultIdleLimitMs : timeout <= 0 ? undefined : timeout * 1000;
+        return last !== undefined && limit !== undefined && Date.now() - last > limit;
+    }
+    /** Whether the messages are signed with a two-step TAN method, so that the bank may ask for approvals. */
+    get isTwoStep() {
+        return !this.method.isOneStep;
+    }
+    /** The TAN medium name the messages send: the dialog's, unless the method takes none. */
+    get mediumName() {
+        return this.method.mediumRequirement === 'notAllowed' ? undefined : this.tanMedium;
+    }
+    async end() {
+        if (!this.isActive)
+            return;
+        this.ended = true;
+        try {
+            await this.sendEnd();
+        }
+        catch (error) {
+            // The bank may have ended the dialog on its side already.
+            if (!(error instanceof FinTsError))
+                throw error;
+        }
+    }
+    discard() {
+        this.ended = true;
+    }
+    /**
+     * Sends the next message through `post`, which takes its number, and reads the answer with `read`. The message counts
+     * once the bank has answered, whatever it answered.
+     *
+     * The dialog ends on the client's side, without a dialog end, where it is over for the bank: after a return code that
+     * ends it, such as 9800, and after a rejected opening message (Formals C.1.2), or a broken connection (C.6).
+     *
+     * Only an answer that does not reject the whole message starts the idle time anew (`hasEnded`): a rejection may come
+     * from a bank that has ended the dialog without saying so.
+     */
+    async transmit(post, read) {
+        const number = this.messageNumber;
+        let answer;
+        try {
+            answer = await post(number);
+        }
+        catch (error) {
+            if (error instanceof FinTsTransportError)
+                this.discard();
+            throw error;
+        }
+        this.messageNumber++;
+        const response = parseBankData(() => read(answer));
+        this.readDialogData(response);
+        if (!response.messageRejected)
+            this.lastAnswer = Date.now();
+        if (endsDialog(response.feedback) || (number === 1 && response.messageRejected))
+            this.discard();
+        return response;
+    }
+    approvalAskedIn(response) {
+        const feedback = response.feedback;
+        const asks = !hasErrors(feedback) &&
+            (hasCode(feedback, FeedbackCodes.tanRequired) || hasCode(feedback, FeedbackCodes.decoupledPending));
+        if (!asks)
+            return undefined;
+        const approval = this.approvalIn(response);
+        if (approval === undefined)
+            throw new FinTsProtocolError('The bank asks for an approval, but sends no challenge');
+        return approval;
+    }
+    /** The approval `response` asks for, with the challenge for the order the bank calls `reference`. */
+    approvalOf(response, parts) {
+        const feedback = response.feedback;
+        return {
+            challenge: TanChallenge.create({
+                method: this.method,
+                reference: parts.reference,
+                message: parts.message,
+                hhdUc: parts.hhdUc,
+                isDecoupled: hasCode(feedback, FeedbackCodes.decoupledPending) || this.method.decoupled,
+                validUntil: parts.validUntil,
+                tanMediumName: parts.tanMediumName ?? this.tanMedium,
+            }),
+            submitTan: parts.submitTan,
+            checkStatus: parts.checkStatus,
+            waitForPush: hasCode(feedback, FeedbackCodes.decoupledWaitForPush),
+            instructionsIn: (status) => challengeText(parts.instructionsIn(status)),
+        };
+    }
+}
+//# sourceMappingURL=pin-tan-dialog.js.map

package/dist/session/pin-tan-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pin-tan-dialog.js","sourceRoot":"","sources":["../../src/session/pin-tan-dialog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKlE;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC;AActC,sHAAsH;AACtH,MAAM,OAAgB,YAAY;IAQrB;IAEA;IATH,aAAa,GAAG,CAAC,CAAC;IAClB,KAAK,GAAG,KAAK,CAAC;IAEtB,8GAA8G;IACtG,UAAU,CAAqB;IAEvC,YACW,MAAiB;IAC1B,oEAAoE;IAC3D,SAA6B;QAF7B,WAAM,GAAN,MAAM,CAAW;QAEjB,cAAS,GAAT,SAAS,CAAoB;IACrC,CAAC;IAUJ;;;;;OAKG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC;IACxC,CAAC;IAED,IAAY,WAAW;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC;QACzD,sEAAsE;QACtE,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QACrG,OAAO,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC;IAChF,CAAC;IAED,0GAA0G;IAC1G,IAAI,SAAS;QACX,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,yFAAyF;IACzF,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0DAA0D;YAC1D,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAAE,MAAM,KAAK,CAAC;QAClD,CAAC;IACH,CAAC;IAKD,OAAO;QACL,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACO,KAAK,CAAC,QAAQ,CAAI,IAAoC,EAAE,IAAsB;QACtF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,IAAI,MAAS,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACzD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,eAAe;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChG,OAAO,QAAQ,CAAC;IAClB,CAAC;IAKD,eAAe,CAAC,QAAW;QACzB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,IAAI,GACR,CAAC,SAAS,CAAC,QAAQ,CAAC;YACpB,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,uDAAuD,CAAC,CAAC;QAClH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAQD,qGAAqG;IAC3F,UAAU,CAAC,QAAW,EAAE,KAAuB;QACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,OAAO;YACL,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBACvF,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS;aACrD,CAAC;YACF,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,oBAAoB,CAAC;YAClE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;SACxE,CAAC;IACJ,CAAC;CACF"}

package/dist/session/protocol.d.ts

@@ -0,0 +1,209 @@
+import type { Account } from '../core/account.js';
+import type { Balance } from '../core/balance.js';
+import type { BankMessage } from '../core/bank-info.js';
+import { type FinTsConfig } from '../core/config.js';
+import type { FinTsFeedback } from '../core/feedback.js';
+import type { Transaction, TransactionFormat } from '../core/transaction.js';
+import type { TanChallenge } from '../tan/challenge.js';
+import type { TanMedium, TanMethod } from '../tan/tan-models.js';
+import type { LoginGuard } from './login-guard.js';
+import { type BankParameters, type UserParameters } from './parameter-data.js';
+/**
+ * The filler the specification names for a reference that does not exist.
+ *
+ * The bank puts it into a dummy answer when no approval is needed. The client sends it as the TAN medium name in the
+ * dialog that looks up the TAN media, before it knows a medium; the bank ignores it there (PIN/TAN B.4.3.1.3).
+ */
+export declare const noReference = "noref";
+/**
+ * A business transaction by its name, such as `HKCAZ`, and the version to send; `undefined` where the bank does not
+ * offer it or the parameter data do not permit it.
+ */
+export interface OfferedTransaction {
+    readonly name: string;
+    readonly version: number | undefined;
+}
+/**
+ * What to request for transactions: camt.052 (`camt`) or MT940, the `version` to send, the `camtFormats` to name, and
+ * the `currency` of statements that state none.
+ */
+export interface TransactionsRequest {
+    readonly camt: boolean;
+    readonly version: number;
+    readonly camtFormats: readonly string[];
+    readonly currency: string | undefined;
+}
+/**
+ * What to request for the transactions of `account` in `format`.
+ *
+ * The client reads camt.052 only, so camt counts as offered only if `camtFormats` include it. With `auto` the client
+ * takes camt where the bank offers it, unless the user parameter data `upd` list only MT940 transactions for the
+ * account.
+ *
+ * Throws `FinTsUnsupportedError` if the bank does not offer the chosen format for the account.
+ */
+export declare function chooseTransactions(format: TransactionFormat, account: Account, upd: UserParameters | undefined, offered: {
+    camt: OfferedTransaction;
+    camtFormats: readonly string[];
+    mt940: OfferedTransaction;
+}): TransactionsRequest;
+/**
+ * The query for the balance of `account`.
+ *
+ * `order` builds the request for each page. Once all pages are in, `records` collects the balance records of all pages,
+ * `balanceRecord` picks the one for `account` with the help of `accountOf`, and `read` turns it into the `Balance`.
+ */
+export declare function balanceQuery<R extends BankResponse, O, T>(account: Account, parts: {
+    order: (continuation: string | undefined) => O;
+    records: (pages: readonly R[]) => T[];
+    accountOf: (record: T) => Account;
+    read: (record: T, account: Account) => Balance;
+}): Query<R, O, Balance>;
+/**
+ * Checks that a message signed with `pin` may go out.
+ *
+ * It may not if the bank refused a login before (`LoginGuard.check`), or if the bank parameters `bpd` rule out the
+ * PIN's length: the bank would count such a PIN as a failed attempt.
+ */
+export declare function checkBeforeSigning(guard: LoginGuard, pin: string, bpd: BankParameters | undefined): void;
+/**
+ * The balance record of `account` in `records`: the one whose account matches. A single record is taken as it is,
+ * since the query asked for this one account only.
+ *
+ * Throws `FinTsBankError` with the bank's `feedback` if there is none, and `FinTsProtocolError` if there are several
+ * and none matches.
+ */
+export declare function balanceRecord<T>(records: readonly T[], account: Account, accountOf: (record: T) => Account, feedback: readonly FinTsFeedback[]): T;
+/** A bank response, reduced to what the protocol-independent session logic needs. */
+export interface BankResponse {
+    /** Return codes of the whole message and of its parts. */
+    readonly feedback: readonly FinTsFeedback[];
+    /** Whether the bank rejected the message as a whole (an error in HIRMG), rather than single orders in it. */
+    readonly messageRejected: boolean;
+    /** Free-text messages the bank addresses to the user. */
+    readonly bankMessages: readonly BankMessage[];
+    /** The length of the message in bytes, a measure of the memory it holds. */
+    readonly size: number;
+}
+/** The bank's request to approve a message with a TAN or in a banking app. */
+export interface Approval<R> {
+    /** What the user is asked. */
+    readonly challenge: TanChallenge;
+    /** Sends the TAN the user entered. */
+    readonly submitTan: (tan: string) => Promise<R>;
+    /** Asks the bank whether the user has approved in the banking app. */
+    readonly checkStatus: () => Promise<R>;
+    /**
+     * Whether the bank announces a push message for once the user has approved (return code 3957), before which the
+     * status must not be asked. The client has no push channel, so the user reports the approval instead.
+     */
+    readonly waitForPush: boolean;
+    /** The new instructions a status answer gives the user (return code 3956); `undefined` where it gives none. */
+    readonly instructionsIn: (response: R) => string | undefined;
+}
+/** One message exchange of a dialog, sent when called. */
+export type Exchange<R> = () => Promise<R>;
+/**
+ * The messages that open a dialog and send an order: `login` opens the dialog, and `order` sends the order in a message
+ * of its own.
+ */
+export interface StartWithOrder<R> {
+    readonly login: Exchange<R>;
+    readonly order: Exchange<R> | undefined;
+}
+/** What the handling of responses needs of a dialog, whatever its protocol. */
+export interface DialogHandle<R extends BankResponse> {
+    /** The TAN method the dialog's messages are signed with. */
+    readonly method: TanMethod;
+    /** Whether the bank knows this dialog and it has not ended. */
+    readonly isActive: boolean;
+    /**
+     * The approval `response`, the dialog's latest answer, asks for with return code 0030 (TAN) or 3955 (banking app);
+     * `undefined` if it asks for none.
+     *
+     * The bank has not executed the message then, so a request without a challenge is a `FinTsProtocolError`: read as
+     * done, it would report an empty result.
+     */
+    approvalAskedIn(response: R): Approval<R> | undefined;
+    /** Forgets the dialog without contacting the bank, for example after the bank rejected the PIN. */
+    discard(): void;
+    /**
+     * Ends the dialog at the bank; does nothing if it is not active.
+     *
+     * Bank and connection errors are ignored, since the bank may have ended the dialog on its side already.
+     */
+    end(): Promise<void>;
+}
+/** One dialog with the bank: a numbered sequence of messages under one dialog ID. */
+export interface ProtocolDialog<R extends BankResponse, O> extends DialogHandle<R> {
+    /** Opens the dialog; with `synchronize` the bank also assigns a customer system ID. */
+    start(synchronize?: boolean): Promise<R>;
+    /** The messages that open the dialog and send `order` while no TAN medium is chosen yet, as for listing the media. */
+    startWith(order: O): StartWithOrder<R>;
+    /** Sends `order`, asking for strong customer authentication where the bank requires it. */
+    send(order: O): Promise<R>;
+}
+/** A business transaction: the order to send for each page, and how to read all pages the bank sent. */
+export interface Query<R, O, T> {
+    /** The order for the page at `continuation`; `undefined` for the first page. */
+    readonly order: (continuation: string | undefined) => O;
+    /** Reads the result; throws `FormatError` for malformed data. */
+    readonly read: (pages: readonly R[]) => T;
+}
+/**
+ * What the regular dialogs still need from a synchronization, a login in a dialog of its own, before the TAN method and
+ * medium are settled (`TanSelection.synchronizationDialog` tells which method signs it):
+ * - `none`: nothing, so no synchronization runs;
+ * - `helpful`: nothing they cannot get themselves, but it tells the TAN methods the user may use before the user
+ *   chooses one, so it runs once per client;
+ * - `required`: the customer system ID, without which no regular dialog starts (FinTS 3.0).
+ */
+export type Synchronization = 'none' | 'helpful' | 'required';
+/** What the handling of responses needs of a protocol, whatever the orders it builds. */
+export interface ResponseProtocol<R extends BankResponse> {
+    /** Keeps the parameter data and IDs in `response`, the answer to a message of a logged-in dialog. */
+    keepParameterData(response: R): void;
+    /** Joins a response with the one completing its approval. */
+    combine(first: R, second: R): R;
+}
+/**
+ * The protocol-specific half of a PIN/TAN client: builds and reads the messages.
+ *
+ * `PinTanClient` holds the other half, the session logic.
+ */
+export interface PinTanProtocol<R extends BankResponse, O> extends ResponseProtocol<R> {
+    /** Where and as whom the client talks to the bank. */
+    readonly config: FinTsConfig;
+    /** The bank parameter data received so far, if any. */
+    readonly bankParameters: BankParameters | undefined;
+    /** The user parameter data received so far, if any. */
+    readonly userParameters: UserParameters | undefined;
+    /** What regular dialogs still need from a synchronization dialog. */
+    readonly synchronization: Synchronization;
+    /**
+     * Drops the customer system ID the bank no longer accepts, so that a synchronization is required again; returns
+     * whether there was one.
+     */
+    forgetSystemId(): boolean;
+    /** Keeps the PIN from going out after a refused login: the protocol checks it before every message it signs. */
+    readonly loginGuard: LoginGuard;
+    /** Requests the bank parameter data without logging in, and keeps them. */
+    fetchBankParametersAnonymously(): Promise<R>;
+    /** A new dialog signed with `method` and, where the method needs one, `tanMedium`. */
+    newDialog(method: TanMethod, tanMedium?: string): ProtocolDialog<R, O>;
+    /** Lists the TAN media; `undefined` if the bank does not offer it. */
+    tanMedia(): Query<R, O, TanMedium[]> | undefined;
+    /** Lists IBAN and BIC of the accounts; `undefined` if the bank does not offer it. */
+    sepaAccounts(): Query<R, O, Account[]> | undefined;
+    /** The balance of `account`; throws `FinTsUnsupportedError` if the bank does not report balances. */
+    balance(account: Account): Query<R, O, Balance>;
+    /** The transactions of `account`; throws `FinTsUnsupportedError` if the bank does not offer `format`. */
+    transactions(account: Account, format: TransactionFormat, from: Date | undefined, to: Date | undefined): Query<R, O, Transaction[]>;
+    /** The parameter data and IDs the protocol keeps, as JSON data, for the client's saved state. */
+    saveState(): Record<string, unknown>;
+    /** Restores what `saveState` saved; throws if `saved` is damaged, leaving the protocol unchanged. */
+    restoreState(saved: Record<string, unknown>): void;
+    /** Releases the connection. */
+    close(): void;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/session/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/session/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAuB,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEpG;;;;;GAKG;AACH,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,cAAc,GAAG,SAAS,EAC/B,OAAO,EAAE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAC/F,mBAAmB,CAiBrB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC,EAAE,CAAC,EACvD,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE;IACL,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC;IAClC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;CAChD,GACA,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CActB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAGxG;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,EACjC,QAAQ,EAAE,SAAS,aAAa,EAAE,GACjC,CAAC,CAQH;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAE5C,6GAA6G;IAC7G,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,yDAAyD;IACzD,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IAE9C,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,8EAA8E;AAC9E,MAAM,WAAW,QAAQ,CAAC,CAAC;IACzB,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAEhD,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAEvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,+GAA+G;IAC/G,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;CAC9D;AAED,0DAA0D;AAC1D,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3C;;;GAGG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;CACzC;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY,CAAC,CAAC,SAAS,YAAY;IAClD,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAE3B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAE3B;;;;;;OAMG;IACH,eAAe,CAAC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;IAEtD,mGAAmG;IACnG,OAAO,IAAI,IAAI,CAAC;IAEhB;;;;OAIG;IACH,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC,CAAE,SAAQ,YAAY,CAAC,CAAC,CAAC;IAChF,uFAAuF;IACvF,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAEzC,sHAAsH;IACtH,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAEvC,2FAA2F;IAC3F,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC5B;AAED,wGAAwG;AACxG,MAAM,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC;IAExD,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9D,yFAAyF;AACzF,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,YAAY;IACtD,qGAAqG;IACrG,iBAAiB,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC;IAErC,6DAA6D;IAC7D,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC,CAAE,SAAQ,gBAAgB,CAAC,CAAC,CAAC;IACpF,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAEpD,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAEpD,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAE1C;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC;IAE1B,gHAAgH;IAChH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAEhC,2EAA2E;IAC3E,8BAA8B,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IAE7C,sFAAsF;IACtF,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEvE,sEAAsE;IACtE,QAAQ,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;IAEjD,qFAAqF;IACrF,YAAY,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,SAAS,CAAC;IAEnD,qGAAqG;IACrG,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAEhD,yGAAyG;IACzG,YAAY,CACV,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,IAAI,GAAG,SAAS,EACtB,EAAE,EAAE,IAAI,GAAG,SAAS,GACnB,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAE9B,iGAAiG;IACjG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,qGAAqG;IACrG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAEnD,+BAA+B;IAC/B,KAAK,IAAI,IAAI,CAAC;CACf"}

package/dist/session/protocol.js

@@ -0,0 +1,75 @@
+import { requirePinLength } from '../core/config.js';
+import { FinTsBankError, FinTsProtocolError, FinTsUnsupportedError } from '../core/errors.js';
+import { knownAccount, lists } from './parameter-data.js';
+/**
+ * The filler the specification names for a reference that does not exist.
+ *
+ * The bank puts it into a dummy answer when no approval is needed. The client sends it as the TAN medium name in the
+ * dialog that looks up the TAN media, before it knows a medium; the bank ignores it there (PIN/TAN B.4.3.1.3).
+ */
+export const noReference = 'noref';
+/**
+ * What to request for the transactions of `account` in `format`.
+ *
+ * The client reads camt.052 only, so camt counts as offered only if `camtFormats` include it. With `auto` the client
+ * takes camt where the bank offers it, unless the user parameter data `upd` list only MT940 transactions for the
+ * account.
+ *
+ * Throws `FinTsUnsupportedError` if the bank does not offer the chosen format for the account.
+ */
+export function chooseTransactions(format, account, upd, offered) {
+    const readable = offered.camtFormats.filter((f) => f.includes('camt.052'));
+    const camtVersion = readable.length === 0 ? undefined : offered.camt.version;
+    const known = knownAccount(upd, account);
+    const useCamt = format === 'camt' ||
+        (format === 'auto' &&
+            camtVersion !== undefined &&
+            (lists(known, offered.camt.name) || !lists(known, offered.mt940.name)));
+    const version = useCamt ? camtVersion : offered.mt940.version;
+    if (version === undefined) {
+        const name = useCamt ? offered.camt.name : offered.mt940.name;
+        throw new FinTsUnsupportedError(`The bank offers no ${useCamt ? 'camt ' : ''}transactions (${name}) for this account`);
+    }
+    return { camt: useCamt, version, camtFormats: readable, currency: known.currency ?? account.currency };
+}
+/**
+ * The query for the balance of `account`.
+ *
+ * `order` builds the request for each page. Once all pages are in, `records` collects the balance records of all pages,
+ * `balanceRecord` picks the one for `account` with the help of `accountOf`, and `read` turns it into the `Balance`.
+ */
+export function balanceQuery(account, parts) {
+    return {
+        order: parts.order,
+        read: (pages) => parts.read(balanceRecord(parts.records(pages), account, parts.accountOf, pages.flatMap((p) => p.feedback)), account),
+    };
+}
+/**
+ * Checks that a message signed with `pin` may go out.
+ *
+ * It may not if the bank refused a login before (`LoginGuard.check`), or if the bank parameters `bpd` rule out the
+ * PIN's length: the bank would count such a PIN as a failed attempt.
+ */
+export function checkBeforeSigning(guard, pin, bpd) {
+    guard.check();
+    requirePinLength(pin, bpd?.pinLength.min, bpd?.pinLength.max);
+}
+/**
+ * The balance record of `account` in `records`: the one whose account matches. A single record is taken as it is,
+ * since the query asked for this one account only.
+ *
+ * Throws `FinTsBankError` with the bank's `feedback` if there is none, and `FinTsProtocolError` if there are several
+ * and none matches.
+ */
+export function balanceRecord(records, account, accountOf, feedback) {
+    if (records.length === 0)
+        throw new FinTsBankError(feedback, 'No balance returned');
+    if (records.length === 1)
+        return records[0];
+    const match = records.find((record) => accountOf(record).matches(account));
+    if (match === undefined) {
+        throw new FinTsProtocolError('The bank returned balances, but none for the requested account');
+    }
+    return match;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/session/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/session/protocol.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAoB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAM9F,OAAO,EAAE,YAAY,EAAE,KAAK,EAA4C,MAAM,qBAAqB,CAAC;AAEpG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAsBnC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAyB,EACzB,OAAgB,EAChB,GAA+B,EAC/B,OAAgG;IAEhG,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;IAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GACX,MAAM,KAAK,MAAM;QACjB,CAAC,MAAM,KAAK,MAAM;YAChB,WAAW,KAAK,SAAS;YACzB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9D,MAAM,IAAI,qBAAqB,CAC7B,sBAAsB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,IAAI,oBAAoB,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;AACzG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAgB,EAChB,KAKC;IAED,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CACR,aAAa,CACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,OAAO,EACP,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CACjC,EACD,OAAO,CACR;KACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,GAAW,EAAE,GAA+B;IAChG,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAqB,EACrB,OAAgB,EAChB,SAAiC,EACjC,QAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,gEAAgE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/session/response-handler.d.ts

@@ -0,0 +1,48 @@
+import type { LoginGuard, RequestKind } from './login-guard.js';
+import type { BankResponse, DialogHandle, Exchange, ResponseProtocol, StartWithOrder } from './protocol.js';
+import type { SessionState } from './session-state.js';
+import type { UserPrompts } from './user-prompts.js';
+/** Checks what the bank answers and completes the approvals it asks for. The `LoginGuard` judges what errors mean. */
+export declare class ResponseHandler<R extends BankResponse> {
+    private readonly protocol;
+    private readonly state;
+    private readonly prompts;
+    private readonly guard;
+    constructor(protocol: ResponseProtocol<R>, state: SessionState, prompts: UserPrompts, guard: LoginGuard);
+    /** Sends `login`, the exchange that opens `dialog`, and completes the approval the bank asks for. */
+    startDialog(dialog: DialogHandle<R>, login: Exchange<R>): Promise<R>;
+    /**
+     * Opens `dialog` with `start`, which also sends an order, and returns the answers: the login's, then the order's where
+     * the order has a message of its own. Completes the approval of each before the next.
+     */
+    startDialogWith(dialog: DialogHandle<R>, start: StartWithOrder<R>): Promise<R[]>;
+    /** Receives `response`, the answer to an order in `dialog`, and completes the approval the bank asks for. */
+    complete(dialog: DialogHandle<R>, response: R): Promise<R>;
+    /**
+     * Receives `response`, the answer to a request of `kind` in `dialog`: keeps its parameter data, even alongside errors,
+     * since the remedy for a refused login may need them; passes its notices on; and throws its errors once the guard has
+     * judged them (`LoginGuard.judge`).
+     */
+    receive(dialog: DialogHandle<R>, response: R, kind: RequestKind): void;
+    /**
+     * Passes the bank's messages in `response` to the user: all an anonymous dialog tells, since the TAN methods it lists
+     * are not those of a user.
+     */
+    showBankMessages(response: R): void;
+    private start;
+    /**
+     * Ends `dialog`, whose login brought new login data, and stops the client from logging in with the old ones
+     * (Rückmeldungscodes C.6).
+     */
+    private retireLoginData;
+    /**
+     * Receives `response`, the answer to a request of `kind`, then completes the approval it asks for; returns it joined
+     * with the response that completes the approval.
+     */
+    private settle;
+    /** Passes on the notices in `response`: the TAN methods the user may use (3920), the bank's messages and warnings. */
+    private readNotices;
+    private enterTan;
+    private awaitAppApproval;
+}
+//# sourceMappingURL=response-handler.d.ts.map

package/dist/session/response-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-handler.d.ts","sourceRoot":"","sources":["../../src/session/response-handler.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAY,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACtH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,sHAAsH;AACtH,qBAAa,eAAe,CAAC,CAAC,SAAS,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAHL,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC7B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,UAAU;IAGpC,qGAAqG;IACrG,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAIpE;;;OAGG;IACG,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAOtF,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1D;;;;OAIG;IACH,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI;IAUtE;;;OAGG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI;YAIrB,KAAK;IAMnB;;;OAGG;YACW,eAAe;IAO7B;;;OAGG;YACW,MAAM;IAUpB,sHAAsH;IACtH,OAAO,CAAC,WAAW;YAOL,QAAQ;IAYtB,OAAO,CAAC,gBAAgB;CASzB"}

package/dist/session/response-handler.js

@@ -0,0 +1,121 @@
+import { bankErrorFor, FinTsLoginDataChangedError, FinTsTanCancelledError } from '../core/errors.js';
+import { allowedTanMethodsIn, FeedbackCodes, hasCode, hasErrors, userWarnings, } from '../core/feedback.js';
+import { invalidArgument } from '../util/errors.js';
+import { appApprovalWait } from './app-approval.js';
+/** Checks what the bank answers and completes the approvals it asks for. The `LoginGuard` judges what errors mean. */
+export class ResponseHandler {
+    protocol;
+    state;
+    prompts;
+    guard;
+    constructor(protocol, state, prompts, guard) {
+        this.protocol = protocol;
+        this.state = state;
+        this.prompts = prompts;
+        this.guard = guard;
+    }
+    /** Sends `login`, the exchange that opens `dialog`, and completes the approval the bank asks for. */
+    startDialog(dialog, login) {
+        return this.start(dialog, login, 'login');
+    }
+    /**
+     * Opens `dialog` with `start`, which also sends an order, and returns the answers: the login's, then the order's where
+     * the order has a message of its own. Completes the approval of each before the next.
+     */
+    async startDialogWith(dialog, start) {
+        const order = start.order;
+        if (order === undefined)
+            return [await this.start(dialog, start.login, 'loginWithOrder')];
+        const login = await this.startDialog(dialog, start.login);
+        return [login, await this.complete(dialog, await order())];
+    }
+    /** Receives `response`, the answer to an order in `dialog`, and completes the approval the bank asks for. */
+    complete(dialog, response) {
+        return this.settle(dialog, response, 'order');
+    }
+    /**
+     * Receives `response`, the answer to a request of `kind` in `dialog`: keeps its parameter data, even alongside errors,
+     * since the remedy for a refused login may need them; passes its notices on; and throws its errors once the guard has
+     * judged them (`LoginGuard.judge`).
+     */
+    receive(dialog, response, kind) {
+        this.protocol.keepParameterData(response);
+        this.readNotices(response);
+        if (!hasErrors(response.feedback))
+            return;
+        const error = bankErrorFor(response.feedback, kind === 'approval');
+        // Every further message of a refused login's dialog would carry the refused PIN.
+        if (this.guard.judge(error, kind, dialog.isActive, dialog.method))
+            dialog.discard();
+        throw error;
+    }
+    /**
+     * Passes the bank's messages in `response` to the user: all an anonymous dialog tells, since the TAN methods it lists
+     * are not those of a user.
+     */
+    showBankMessages(response) {
+        for (const message of response.bankMessages)
+            this.prompts.showBankMessage(message);
+    }
+    async start(dialog, login, kind) {
+        const response = await this.settle(dialog, await login(), kind);
+        if (hasCode(response.feedback, FeedbackCodes.newLoginData))
+            await this.retireLoginData(dialog, response.feedback);
+        return response;
+    }
+    /**
+     * Ends `dialog`, whose login brought new login data, and stops the client from logging in with the old ones
+     * (Rückmeldungscodes C.6).
+     */
+    async retireLoginData(dialog, feedback) {
+        await dialog.end();
+        const error = new FinTsLoginDataChangedError(feedback);
+        this.guard.refuse(error);
+        throw error;
+    }
+    /**
+     * Receives `response`, the answer to a request of `kind`, then completes the approval it asks for; returns it joined
+     * with the response that completes the approval.
+     */
+    async settle(dialog, response, kind) {
+        this.receive(dialog, response, kind);
+        const approval = dialog.approvalAskedIn(response);
+        if (approval === undefined)
+            return response;
+        const approved = approval.challenge.isDecoupled
+            ? await this.awaitAppApproval(dialog, approval)
+            : await this.enterTan(dialog, approval);
+        return this.protocol.combine(response, approved);
+    }
+    /** Passes on the notices in `response`: the TAN methods the user may use (3920), the bank's messages and warnings. */
+    readNotices(response) {
+        const allowed = allowedTanMethodsIn(response.feedback);
+        if (allowed.length > 0)
+            this.state.rememberAllowedMethods(allowed);
+        this.showBankMessages(response);
+        for (const warning of userWarnings(response.feedback))
+            this.prompts.showWarning(warning);
+    }
+    async enterTan(dialog, approval) {
+        const answer = await this.prompts.askTan(approval.challenge);
+        if (answer.kind === 'approved') {
+            throw invalidArgument('Answered a TAN challenge with an approval in the banking app', 'tanCallback');
+        }
+        const tan = answer.kind === 'tan' ? answer.tan.trim() : '';
+        if (tan === '')
+            throw new FinTsTanCancelledError();
+        const response = await approval.submitTan(tan);
+        this.receive(dialog, response, 'approval');
+        return response;
+    }
+    awaitAppApproval(dialog, approval) {
+        return appApprovalWait(approval, {
+            ask: (challenge) => this.prompts.askTan(challenge),
+            pause: (delayMs, interrupt) => this.prompts.pause(delayMs, interrupt),
+            receive: (response) => {
+                this.receive(dialog, response, 'approval');
+            },
+        }).run();
+    }
+}
+//# sourceMappingURL=response-handler.js.map

package/dist/session/response-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-handler.js","sourceRoot":"","sources":["../../src/session/response-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,OAAO,EACP,SAAS,EACT,YAAY,GAEb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMpD,sHAAsH;AACtH,MAAM,OAAO,eAAe;IAEP;IACA;IACA;IACA;IAJnB,YACmB,QAA6B,EAC7B,KAAmB,EACnB,OAAoB,EACpB,KAAiB;QAHjB,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,UAAK,GAAL,KAAK,CAAc;QACnB,YAAO,GAAP,OAAO,CAAa;QACpB,UAAK,GAAL,KAAK,CAAY;IACjC,CAAC;IAEJ,qGAAqG;IACrG,WAAW,CAAC,MAAuB,EAAE,KAAkB;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,MAAuB,EAAE,KAAwB;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,6GAA6G;IAC7G,QAAQ,CAAC,MAAuB,EAAE,QAAW;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,MAAuB,EAAE,QAAW,EAAE,IAAiB;QAC7D,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC1C,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC;QACnE,iFAAiF;QACjF,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACpF,MAAM,KAAK,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,QAAW;QAC1B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,YAAY;YAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACrF,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,MAAuB,EAAE,KAAkB,EAAE,IAAiB;QAChF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe,CAAC,MAAuB,EAAE,QAAkC;QACvF,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,MAAM,CAAC,MAAuB,EAAE,QAAW,EAAE,IAAiB;QAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,WAAW;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC/C,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,sHAAsH;IAC9G,WAAW,CAAC,QAAW;QAC7B,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3F,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,MAAuB,EAAE,QAAqB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,eAAe,CAAC,8DAA8D,EAAE,aAAa,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,GAAG,KAAK,EAAE;YAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,gBAAgB,CAAC,MAAuB,EAAE,QAAqB;QACrE,OAAO,eAAe,CAAC,QAAQ,EAAE;YAC/B,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;YACrE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC,CAAC,GAAG,EAAE,CAAC;IACX,CAAC;CACF"}