@coderoftime/fints 0.0.0-stage → 0.2.0

package/dist/v3/parameters.js

@@ -0,0 +1,450 @@
+// Internal to the package, and named after the FinTS specification. Documentation is where the meaning is not evident.
+import { Account } from '../core/account.js';
+import { BankInfo } from '../core/bank-info.js';
+import { FinTsProtocolError } from '../core/errors.js';
+import { TanMethod, tanMediumRequirementOf } from '../tan/tan-models.js';
+import { base64Decode, base64Encode, concatBytes } from '../util/bytes.js';
+import { nonBlank, tryParseInt } from '../util/text.js';
+import { AccountExtension } from './account-extension.js';
+import { parseSegments } from './syntax.js';
+/** Positions of the data elements in the header of the bank parameter data (HIBPA), after the segment header. */
+const Hibpa = {
+    version: 1,
+    /** Country code, then bank code. */
+    bankId: 2,
+    bankName: 3,
+    languages: 5,
+    fintsVersions: 6,
+    maxMessageSize: 7,
+    minTimeout: 8,
+    maxTimeout: 9,
+};
+/**
+ * The data element of every parameter segment (`HI…S`) that holds its specific parameters, after the maximum number of
+ * orders, the minimum number of signatures and the security class.
+ */
+const parameterGroup = 4;
+/** The standard language in the communication access (HIKOM). */
+const hikomStandardLanguage = 2;
+function defined(values) {
+    return values.filter((v) => v !== undefined);
+}
+/** `bpd`, or `FinTsProtocolError` if the bank has not sent its parameter data yet. */
+export function requireBankParameters(bpd) {
+    if (bpd === undefined)
+        throw new FinTsProtocolError('No bank parameter data available');
+    return bpd;
+}
+/** FinTS 3.0 bank parameter data (BPD): HIBPA and the parameter segments (`HI…S`), parsed once. */
+export class Bpd3 {
+    segments;
+    bankInfo;
+    /** The two-step TAN methods of HITANS versions 6 and 7, by security function. */
+    offeredMethods;
+    /** Two-step TAN methods the bank offers and the client can run. */
+    tanMethods;
+    /** Security functions of the two-step methods the bank offers in a form the client cannot run. */
+    unsupportedTanMethods;
+    pinTan;
+    /** camt formats the bank offers for HKCAZ. */
+    camtFormats;
+    /** Versions of each parameter segment, by segment type. */
+    versions;
+    /**
+     * The dialog language HKVVB names: the bank's standard language (HIKOM), else the first it supports (HIBPA). Only
+     * these may be sent once the parameter data are known; `0`, the default, only before (Formals C.3.1.3).
+     */
+    dialogLanguage;
+    encodedValue;
+    constructor(segments, hibpa, fallbackBankCode) {
+        this.segments = segments;
+        this.bankInfo = new BankInfo({
+            bankCode: hibpa.text(Hibpa.bankId, 1) ?? fallbackBankCode,
+            name: hibpa.text(Hibpa.bankName),
+            bpdVersion: hibpa.integer(Hibpa.version) ?? 0,
+            languages: defined(hibpa.texts(Hibpa.languages)),
+            supportedVersions: defined(hibpa.texts(Hibpa.fintsVersions)),
+            maxMessageSize: hibpa.integer(Hibpa.maxMessageSize),
+            minTimeout: hibpa.integer(Hibpa.minTimeout),
+            maxTimeout: hibpa.integer(Hibpa.maxTimeout),
+        });
+        this.offeredMethods = parseTanMethods(segments);
+        const offered = [...this.offeredMethods.values()];
+        this.tanMethods = Object.freeze(offered.filter((o) => o.runnable).map((o) => o.method));
+        this.unsupportedTanMethods = Object.freeze(offered.filter((o) => !o.runnable).map((o) => o.method.securityFunction));
+        this.pinTan = PinTanParameters.parse(segments);
+        this.camtFormats = segments
+            .filter((s) => s.type === 'HICAZS')
+            .flatMap((s) => defined(s.texts(parameterGroup)))
+            .filter((format) => format.includes('camt'));
+        this.versions = versionsByType(segments);
+        this.dialogLanguage = dialogLanguageOf(segments, this.bankInfo);
+    }
+    /** The version of the parameter data, which the client reports back so that the bank sends newer ones only. */
+    get version() {
+        return this.bankInfo.bpdVersion;
+    }
+    /** The segments as the saved state keeps them, encoded once. */
+    get encoded() {
+        return (this.encodedValue ??= encodeSegments(this.segments));
+    }
+    /** The BPD in `all`, or `undefined` if they contain no HIBPA segment. */
+    static fromSegments(all, fallbackBankCode) {
+        const segments = all.filter(isParameterSegment);
+        const hibpa = segments.find((s) => s.type === 'HIBPA');
+        return hibpa === undefined ? undefined : new Bpd3(segments, hibpa, fallbackBankCode);
+    }
+    /** The parameter segment type of a business transaction: `HKSAL` → `HISALS`. */
+    static parameterName(transaction) {
+        return `HI${transaction.substring(2)}S`;
+    }
+    /** The highest version of `transaction` that the bank offers and the client `implemented`. */
+    bestVersion(transaction, implemented) {
+        let best;
+        for (const version of this.versions.get(Bpd3.parameterName(transaction)) ?? []) {
+            if (implemented.has(version) && (best === undefined || version > best))
+                best = version;
+        }
+        return best;
+    }
+    /** The version of the HKTAN segments that go with `method`; `undefined` for a method the bank does not offer. */
+    tanVersion(method) {
+        return this.offeredMethods.get(method.securityFunction)?.version;
+    }
+}
+function dialogLanguageOf(segments, bankInfo) {
+    const languages = new Set([1, 2, 3]);
+    const standard = segments.find((s) => s.type === 'HIKOM')?.integer(hikomStandardLanguage);
+    if (standard !== undefined && languages.has(standard))
+        return standard;
+    return bankInfo.languages.map((l) => tryParseInt(l)).find((l) => l !== undefined && languages.has(l)) ?? 0;
+}
+function isParameterSegment(s) {
+    const type = s.type;
+    if (['HIBPA', 'HIKOM', 'HISHV', 'HIKPV'].includes(type))
+        return true;
+    if (type === 'HIRMS' || type === 'HIRMG')
+        return false;
+    return type.length >= 5 && (type.startsWith('HI') || type.startsWith('DI')) && type.endsWith('S');
+}
+function versionsByType(segments) {
+    const versions = new Map();
+    for (const s of segments) {
+        let set = versions.get(s.type);
+        if (set === undefined)
+            versions.set(s.type, (set = new Set()));
+        set.add(s.version);
+    }
+    return versions;
+}
+/** Parses the two-step TAN methods from HITANS versions 6 and 7; for a method offered in several, the highest wins. */
+function parseTanMethods(segments) {
+    const byCode = new Map();
+    for (const s of segments.filter((s) => s.type === 'HITANS')) {
+        for (const offered of parseHitans(s)) {
+            const existing = byCode.get(offered.method.securityFunction);
+            if (existing === undefined || offered.version > existing.version) {
+                byCode.set(offered.method.securityFunction, offered);
+            }
+        }
+    }
+    return byCode;
+}
+/** The fields describing one TAN method in HITANS, in order; version 6 ends with `activeMediaCount`. */
+const HitansField = {
+    securityFunction: 0,
+    processVariant: 1,
+    technicalId: 2,
+    dkMethod: 3,
+    dkVersion: 4,
+    name: 5,
+    maxTanLength: 6,
+    tanFormat: 7,
+    returnValueText: 8,
+    /** "Maximale Länge des Rückgabewertes": the return value is the challenge. */
+    maxChallengeLength: 9,
+    multipleTans: 10,
+    tanTimeAndDialogRelation: 11,
+    orderCancellation: 12,
+    smsChargeAccountRequired: 13,
+    orderingAccountRequired: 14,
+    challengeClassRequired: 15,
+    structuredChallenge: 16,
+    initializationMode: 17,
+    mediumNameRequired: 18,
+    hhdUcRequired: 19,
+    activeMediaCount: 20,
+    maxStatusPolls: 21,
+    firstPollDelay: 22,
+    pollInterval: 23,
+    manualConfirmation: 24,
+    automaticPolling: 25,
+};
+function parseHitans(s) {
+    const version = s.version;
+    if (version !== 6 && version !== 7)
+        return [];
+    // Version 7 adds the fields for decoupled approval.
+    const fieldsPerMethod = version === 6 ? HitansField.activeMediaCount + 1 : HitansField.automaticPolling + 1;
+    const all = s.texts(parameterGroup);
+    const methods = [];
+    // The group starts with three general fields, then lists the methods.
+    for (let start = 3; start < all.length; start += fieldsPerMethod) {
+        const fields = all.slice(start, start + fieldsPerMethod);
+        const field = (f) => fields[f];
+        const number = (f) => tryParseInt(field(f));
+        const code = field(HitansField.securityFunction);
+        if (code === undefined)
+            continue;
+        // Process variant 1 needs the order hash and another message flow; the client runs variant 2, the one of PSD2
+        // strong customer authentication. An SMS charge account or an HHD_UC answer, where required, it cannot send.
+        const runnable = number(HitansField.processVariant) !== 1 &&
+            field(HitansField.smsChargeAccountRequired) !== '2' &&
+            field(HitansField.hhdUcRequired) !== 'J';
+        const dkMethod = field(HitansField.dkMethod);
+        const decoupledFields = version === 7;
+        const method = new TanMethod({
+            securityFunction: code,
+            technicalId: field(HitansField.technicalId),
+            dkMethod,
+            dkVersion: field(HitansField.dkVersion),
+            name: field(HitansField.name) ?? code,
+            maxTanLength: number(HitansField.maxTanLength),
+            numericTan: field(HitansField.tanFormat) !== '2',
+            returnValueText: field(HitansField.returnValueText),
+            maxChallengeLength: number(HitansField.maxChallengeLength),
+            structuredChallenge: field(HitansField.structuredChallenge) === 'J',
+            mediumRequirement: tanMediumRequirementOf(field(HitansField.mediumNameRequired)),
+            activeMediaCount: number(HitansField.activeMediaCount),
+            decoupled: decoupledFields && dkMethod !== undefined && dkMethod.toLowerCase().startsWith('decoupled'),
+            decoupledMaxPolls: decoupledFields ? number(HitansField.maxStatusPolls) : undefined,
+            decoupledFirstPollDelaySeconds: decoupledFields ? number(HitansField.firstPollDelay) : undefined,
+            decoupledPollIntervalSeconds: decoupledFields ? number(HitansField.pollInterval) : undefined,
+            decoupledManualConfirmation: !decoupledFields || field(HitansField.manualConfirmation) !== 'N',
+            decoupledAutomaticPolling: !decoupledFields || field(HitansField.automaticPolling) !== 'N',
+        });
+        methods.push({ method, runnable, version });
+    }
+    return methods;
+}
+/**
+ * PIN/TAN parameters (HIPINS): the PIN length, which business transactions PIN/TAN allows, and which of them need a
+ * TAN.
+ */
+export class PinTanParameters {
+    tanRequired;
+    pinLength;
+    constructor(tanRequired, 
+    /** The shortest and longest PIN the bank takes. */
+    pinLength) {
+        this.tanRequired = tanRequired;
+        this.pinLength = pinLength;
+    }
+    /** Reads the HIPINS segment of the highest version. */
+    static parse(segments) {
+        let hipins;
+        for (const s of segments.filter((s) => s.type === 'HIPINS')) {
+            if (hipins === undefined || s.version > hipins.version)
+                hipins = s;
+        }
+        if (hipins === undefined)
+            return new PinTanParameters(new Map(), { min: undefined, max: undefined });
+        const fields = hipins.texts(parameterGroup);
+        const tanRequired = new Map();
+        // Five general fields, the PIN lengths first; then pairs of segment type and TAN flag.
+        for (let i = 5; i + 1 < fields.length; i += 2) {
+            const type = fields[i];
+            if (type !== undefined)
+                tanRequired.set(type, fields[i + 1] === 'J');
+        }
+        return new PinTanParameters(tanRequired, { min: tryParseInt(fields[0]), max: tryParseInt(fields[1]) });
+    }
+    /** Whether the bank wants a TAN for the business transaction of `segmentType`, such as `HKKAZ`. */
+    requiresTan(segmentType) {
+        return this.tanRequired.get(segmentType) ?? false;
+    }
+    /** Whether PIN/TAN allows `segmentType` at all: HIPINS lists it, or lists no business transactions (PIN/TAN B.8.1). */
+    allowsWithPinTan(segmentType) {
+        return this.tanRequired.size === 0 || this.tanRequired.has(segmentType);
+    }
+}
+/** The user ID (Benutzerkennung), the version and the usage ("UPD-Verwendung") of the user parameter data in HIUPA. */
+const hiupaUserId = 1;
+const hiupaVersion = 2;
+const hiupaUsage = 3;
+/** Business transaction codes such as `HKSAL` or `DKPAE`. */
+const transactionCode = /^[A-Z]{4,6}$/;
+/** FinTS 3.0 user parameter data (UPD): HIUPA and the accounts (HIUPD), parsed once. */
+export class Upd3 {
+    segments;
+    /** The user the bank sent them for; `undefined` where it names none. */
+    userId;
+    /** The version of the parameter data, which the client reports back so that the bank sends newer ones only. */
+    version;
+    /**
+     * Whether the lists of permitted transactions are complete: the bank permits nothing they leave out ("UPD-Verwendung"
+     * 0).
+     */
+    listsAllTransactions;
+    /** The transactions any entry lists as permitted, with or without an account. */
+    listedTransactions;
+    /** The accounts with the extension each carries, where it does. */
+    entries;
+    /** The accounts the user may access. */
+    accounts;
+    encodedValue;
+    /** `listsAll` tells whether HIUPA declares the lists of permitted transactions complete ("UPD-Verwendung" 0). */
+    constructor(segments, hiupa, listsAll, defaultBankCode, defaultCountry) {
+        this.segments = segments;
+        const hiupds = segments.filter((s) => s.type === 'HIUPD');
+        this.userId = hiupa.text(hiupaUserId)?.trim();
+        this.version = hiupa.integer(hiupaVersion) ?? 0;
+        this.listsAllTransactions = listsAll;
+        this.listedTransactions = new Set(hiupds.flatMap(transactionsOf));
+        this.entries = Object.freeze(hiupds.map((s) => entryOf(s, defaultBankCode, defaultCountry, listsAll)).filter((e) => e !== undefined));
+        this.accounts = Object.freeze(this.entries.map((e) => e.account));
+    }
+    /** The segments as the saved state keeps them, encoded once. */
+    get encoded() {
+        return (this.encodedValue ??= encodeSegments(this.segments));
+    }
+    /**
+     * The balance of `account` the user parameter data carry, where it holds all a balance query would deliver, so that
+     * the client asks for none (Formals E.3.1, F.3.2); `undefined` otherwise.
+     */
+    completeBalance(account) {
+        return this.entries.find((e) => e.account.matches(account))?.extension?.completeBalance(account);
+    }
+    /** The UPD in `all`, or `undefined` if they contain no HIUPA segment. */
+    static fromSegments(all, defaultBankCode, defaultCountry) {
+        const segments = all.filter((s) => s.type === 'HIUPA' || s.type === 'HIUPD');
+        const hiupa = segments.find((s) => s.type === 'HIUPA');
+        if (hiupa === undefined)
+            return undefined;
+        return new Upd3(segments, hiupa, hiupa.text(hiupaUsage) === '0', defaultBankCode, defaultCountry);
+    }
+}
+/**
+ * The data element where the permitted transactions start, by HIUPD version: version 6 inserts the IBAN, version 5 the
+ * account type.
+ */
+function allowedFrom(version) {
+    return version >= 6 ? 10 : version === 5 ? 9 : 8;
+}
+/** The permitted transactions of the HIUPD `s`. */
+function transactionsOf(s) {
+    const codes = [];
+    for (let i = allowedFrom(s.version); i < s.length; i++) {
+        const code = s.text(i, 0);
+        if (code !== undefined && transactionCode.test(code))
+            codes.push(code);
+    }
+    return codes;
+}
+/**
+ * The account extension of `s` (version 6, "Erweiterung, kontobezogen"): the JSON object behind the permitted
+ * transactions, whose count varies. A bank that leaves its colons unescaped splits it into group elements, which are
+ * joined again.
+ */
+function extensionOf(s) {
+    if (s.version < 6)
+        return undefined;
+    for (let i = allowedFrom(s.version); i < s.length; i++) {
+        const text = s
+            .group(i)
+            .map((e) => e.text)
+            .join(':');
+        if (text.trimStart().startsWith('{'))
+            return AccountExtension.tryParse(text);
+    }
+    return undefined;
+}
+function entryOf(s, defaultBankCode, defaultCountry, listsAll) {
+    const account = accountOf(s, defaultBankCode, defaultCountry, listsAll);
+    if (account === undefined)
+        return undefined;
+    const extension = extensionOf(s);
+    return {
+        account: extension === undefined ? account : account.copyWith({ bic: extension.bic, dataStatus: extension.status }),
+        extension,
+    };
+}
+function accountOf(s, defaultBankCode, defaultCountry, listsAll) {
+    const version = s.version;
+    // Every version names the account as KTV2, by position: a sub-account or bank code the bank leaves out is empty.
+    const [number, subAccount, country, bank] = s.texts(1);
+    const iban = version >= 6 ? s.text(2) : undefined;
+    if (number === undefined && iban === undefined)
+        return undefined;
+    // Field positions by HIUPD version: version 6 inserts the IBAN, version 5 the account type.
+    const fields = version >= 6
+        ? { customer: 3, type: 4, currency: 5, name1: 6, name2: 7, product: 8 }
+        : version === 5
+            ? { customer: 2, type: 3, currency: 4, name1: 5, name2: 6, product: 7 }
+            : { customer: 2, type: undefined, currency: 3, name1: 4, name2: 5, product: 6 };
+    return new Account({
+        accountNumber: number,
+        subAccount,
+        countryCode: country ?? defaultCountry,
+        bankCode: bank ?? defaultBankCode,
+        iban,
+        customerId: s.text(fields.customer),
+        typeCode: fields.type === undefined ? undefined : s.integer(fields.type),
+        currency: s.text(fields.currency),
+        ownerName: nonBlank(defined([s.text(fields.name1), s.text(fields.name2)]).join(' ')),
+        productName: s.text(fields.product),
+        allowedTransactions: transactionsOf(s),
+        allowedTransactionsComplete: listsAll,
+    });
+}
+/**
+ * The version of `transaction` to send, for `account` where it concerns one: the highest the bank offers and the client
+ * `implemented`. `undefined` where there is none, or the parameter data do not permit the transaction
+ * (`permitsTransaction`).
+ */
+export function offeredVersion(bpd, upd, transaction, implemented, options) {
+    return permitsTransaction(bpd, upd, transaction, options) ? bpd?.bestVersion(transaction, implemented) : undefined;
+}
+/**
+ * Whether the parameter data let the user send `transaction`, for `account` where it concerns one: the bank allows it
+ * with PIN/TAN, and the user parameter data permit it (Formals E.1, F.3.4; PIN/TAN B.1, B.8.1).
+ *
+ * - `account`, which the session has taken as the bank knows it (`SepaAccounts.complete`), permits what it lists, and
+ *   anything else only where its list is incomplete ("UPD-Verwendung" 1). One only the SEPA account list names lists
+ *   nothing, and so permits anything; where the lists are complete, the session refuses one the bank names nowhere.
+ * - A transaction without account, such as the TAN media list, is permitted where some entry lists it or the lists are
+ *   incomplete.
+ * - One that `requiresEntry`, the SEPA account list, must be listed even where the lists are incomplete (Formals F.3.4),
+ *   unless they list nothing at all, which tells nothing.
+ */
+function permitsTransaction(bpd, upd, transaction, options) {
+    if (bpd !== undefined && !bpd.pinTan.allowsWithPinTan(transaction))
+        return false;
+    if (upd === undefined)
+        return true;
+    if (options.account !== undefined)
+        return allows(options.account, transaction);
+    const listed = upd.listedTransactions;
+    if (listed.has(transaction))
+        return true;
+    return !upd.listsAllTransactions && (!(options.requiresEntry ?? false) || listed.size === 0);
+}
+/** Whether the bank lists `transaction`, such as `HKCAZ`, as permitted for `account`. */
+export function lists(account, transaction) {
+    return account.allowedTransactions.includes(transaction);
+}
+/**
+ * Whether the bank may permit `transaction` on `account`: it lists it, or its list is not complete
+ * (`Account.allowedTransactionsComplete`), so that only the bank can tell.
+ */
+function allows(account, transaction) {
+    return lists(account, transaction) || !account.allowedTransactionsComplete;
+}
+/** Serializes parameter segments for the saved state. */
+function encodeSegments(segments) {
+    return base64Encode(concatBytes(segments.map((s) => s.encode())));
+}
+export function decodeSegments(data) {
+    return parseSegments(base64Decode(data));
+}
+//# sourceMappingURL=parameters.js.map

package/dist/v3/parameters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameters.js","sourceRoot":"","sources":["../../src/v3/parameters.ts"],"names":[],"mappings":"AAAA,uHAAuH;AAEvH,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAgB,MAAM,aAAa,CAAC;AAY1D,iHAAiH;AACjH,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,CAAC;IACV,oCAAoC;IACpC,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,aAAa,EAAE,CAAC;IAChB,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;CACL,CAAC;AAEX;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,SAAS,OAAO,CAAI,MAAkC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAU,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,GAAqB;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,kCAAkC,CAAC,CAAC;IACxF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,MAAM,OAAO,IAAI;IA4BJ;IA3BF,QAAQ,CAAW;IAE5B,iFAAiF;IAChE,cAAc,CAAqC;IAEpE,mEAAmE;IAC1D,UAAU,CAAuB;IAE1C,kGAAkG;IACzF,qBAAqB,CAAoB;IACzC,MAAM,CAAmB;IAElC,8CAA8C;IACrC,WAAW,CAAoB;IAExC,2DAA2D;IAC1C,QAAQ,CAA2C;IAEpE;;;OAGG;IACM,cAAc,CAAS;IAExB,YAAY,CAAqB;IAEzC,YACW,QAA4B,EACrC,KAAc,EACd,gBAAwB;QAFf,aAAQ,GAAR,QAAQ,CAAoB;QAIrC,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC;YAC3B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,gBAAgB;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAChC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5D,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;YACnD,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;YAC3C,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,MAAM,CACxC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,QAAQ;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;aAClC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,+GAA+G;IAC/G,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAClC,CAAC;IAED,gEAAgE;IAChE,IAAI,OAAO;QACT,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,YAAY,CAAC,GAAuB,EAAE,gBAAwB;QACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACvF,CAAC;IAED,gFAAgF;IAChF,MAAM,CAAC,aAAa,CAAC,WAAmB;QACtC,OAAO,KAAK,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1C,CAAC;IAED,8FAA8F;IAC9F,WAAW,CAAC,WAAmB,EAAE,WAAgC;QAC/D,IAAI,IAAwB,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/E,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,GAAG,IAAI,CAAC;gBAAE,IAAI,GAAG,OAAO,CAAC;QACzF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iHAAiH;IACjH,UAAU,CAAC,MAAiB;QAC1B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACnE,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,QAA4B,EAAE,QAAkB;IACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU;IACpC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uHAAuH;AACvH,SAAS,eAAe,CAAC,QAA4B;IACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5D,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACjE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wGAAwG;AACxG,MAAM,WAAW,GAAG;IAClB,gBAAgB,EAAE,CAAC;IACnB,cAAc,EAAE,CAAC;IACjB,WAAW,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,YAAY,EAAE,CAAC;IACf,SAAS,EAAE,CAAC;IACZ,eAAe,EAAE,CAAC;IAClB,8EAA8E;IAC9E,kBAAkB,EAAE,CAAC;IACrB,YAAY,EAAE,EAAE;IAChB,wBAAwB,EAAE,EAAE;IAC5B,iBAAiB,EAAE,EAAE;IACrB,wBAAwB,EAAE,EAAE;IAC5B,uBAAuB,EAAE,EAAE;IAC3B,sBAAsB,EAAE,EAAE;IAC1B,mBAAmB,EAAE,EAAE;IACvB,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,aAAa,EAAE,EAAE;IACjB,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,EAAE;IAClB,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,EAAE;IAChB,kBAAkB,EAAE,EAAE;IACtB,gBAAgB,EAAE,EAAE;CACZ,CAAC;AAEX,SAAS,WAAW,CAAC,CAAU;IAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,oDAAoD;IACpD,MAAM,eAAe,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5G,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,sEAAsE;IACtE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,8GAA8G;QAC9G,6GAA6G;QAC7G,MAAM,QAAQ,GACZ,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,CAAC;YACxC,KAAK,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,GAAG;YACnD,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,eAAe,GAAG,OAAO,KAAK,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,gBAAgB,EAAE,IAAI;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC;YAC3C,QAAQ;YACR,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC;YACvC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI;YACrC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;YAC9C,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,GAAG;YAChD,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC,eAAe,CAAC;YACnD,kBAAkB,EAAE,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC;YAC1D,mBAAmB,EAAE,KAAK,CAAC,WAAW,CAAC,mBAAmB,CAAC,KAAK,GAAG;YACnE,iBAAiB,EAAE,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAChF,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACtD,SAAS,EAAE,eAAe,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YACtG,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YACnF,8BAA8B,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YAChG,4BAA4B,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;YAC5F,2BAA2B,EAAE,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,GAAG;YAC9F,yBAAyB,EAAE,CAAC,eAAe,IAAI,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAAC,KAAK,GAAG;SAC3F,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAER;IAER;IAHX,YACmB,WAAyC;IAC1D,mDAAmD;IAC1C,SAA+D;QAFvD,gBAAW,GAAX,WAAW,CAA8B;QAEjD,cAAS,GAAT,SAAS,CAAsD;IACvE,CAAC;IAEJ,uDAAuD;IACvD,MAAM,CAAC,KAAK,CAAC,QAA4B;QACvC,IAAI,MAA2B,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC5D,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;gBAAE,MAAM,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,gBAAgB,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC/C,uFAAuF;QACvF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,IAAI,KAAK,SAAS;gBAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,mGAAmG;IACnG,WAAW,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;IACpD,CAAC;IAED,uHAAuH;IACvH,gBAAgB,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC;CACF;AAOD,uHAAuH;AACvH,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB,6DAA6D;AAC7D,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,wFAAwF;AACxF,MAAM,OAAO,IAAI;IA0BJ;IAzBX,wEAAwE;IAC/D,MAAM,CAAqB;IAEpC,+GAA+G;IACtG,OAAO,CAAS;IAEzB;;;OAGG;IACM,oBAAoB,CAAU;IAEvC,iFAAiF;IACxE,kBAAkB,CAAsB;IAEjD,mEAAmE;IAClD,OAAO,CAAsB;IAE9C,wCAAwC;IAC/B,QAAQ,CAAqB;IAE9B,YAAY,CAAqB;IAEzC,iHAAiH;IACjH,YACW,QAA4B,EACrC,KAAc,EACd,QAAiB,EACjB,eAAuB,EACvB,cAAsB;QAJb,aAAQ,GAAR,QAAQ,CAAoB;QAMrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,QAAQ,CAAC;QACrC,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACxG,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,gEAAgE;IAChE,IAAI,OAAO;QACT,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,OAAgB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,YAAY,CAAC,GAAuB,EAAE,eAAuB,EAAE,cAAsB;QAC1F,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;IACpG,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,mDAAmD;AACnD,SAAS,cAAc,CAAC,CAAU;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC;aACX,KAAK,CAAC,CAAC,CAAC;aACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,CAAU,EAAE,eAAuB,EAAE,cAAsB,EAAE,QAAiB;IAC7F,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO;QACL,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;QACnH,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,CAAU,EACV,eAAuB,EACvB,cAAsB,EACtB,QAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,iHAAiH;IACjH,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjE,4FAA4F;IAC5F,MAAM,MAAM,GACV,OAAO,IAAI,CAAC;QACV,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACvE,CAAC,CAAC,OAAO,KAAK,CAAC;YACb,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;YACvE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtF,OAAO,IAAI,OAAO,CAAC;QACjB,aAAa,EAAE,MAAM;QACrB,UAAU;QACV,WAAW,EAAE,OAAO,IAAI,cAAc;QACtC,QAAQ,EAAE,IAAI,IAAI,eAAe;QACjC,IAAI;QACJ,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnC,QAAQ,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACxE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpF,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACnC,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC;QACtC,2BAA2B,EAAE,QAAQ;KACtC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAqB,EACrB,GAAqB,EACrB,WAAmB,EACnB,WAAgC,EAChC,OAAuD;IAEvD,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,kBAAkB,CACzB,GAAqB,EACrB,GAAqB,EACrB,WAAmB,EACnB,OAAuD;IAEvD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACtC,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,KAAK,CAAC,OAAgB,EAAE,WAAmB;IACzD,OAAO,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,MAAM,CAAC,OAAgB,EAAE,WAAmB;IACnD,OAAO,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC;AAC7E,CAAC;AAED,yDAAyD;AACzD,SAAS,cAAc,CAAC,QAA4B;IAClD,OAAO,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/v3/protocol.d.ts

@@ -0,0 +1,61 @@
+import type { MessageLogger } from '../core/client.js';
+import type { FinTsTransport } from '../core/transport.js';
+import type { ParameterStore } from './parameter-store.js';
+import type { SegmentSpec } from './syntax.js';
+/** How a message is signed: the security function of the TAN method and the customer system ID. */
+export interface Signing3 {
+    readonly securityFunction: string;
+    readonly systemId: string;
+}
+/** Hands out the PIN for each message the protocol signs, and so decides whether one may go out. */
+export interface PinGuard {
+    /** The PIN to sign a message with; throws instead where none may go out. */
+    readonly pin: string;
+    /** Counts a login signed with the PIN, the first message of a dialog, before it goes out. */
+    loginSent(): void;
+}
+/**
+ * Builds, signs and posts FinTS 3.0 messages (HBCI segment syntax, PIN/TAN security) for the user `parameters.config`
+ * names, with the parameter data and IDs `parameters` keeps. Every message signed with the PIN takes it from the
+ * `PinGuard` (`post`), which keeps it from going out after a refused login.
+ */
+export declare class FinTs3Protocol {
+    readonly parameters: ParameterStore;
+    private readonly guard;
+    private readonly config;
+    private readonly connection;
+    /** Whether the client is closing, so that only dialog ends go out (`beginClose`). */
+    private closing;
+    constructor(parameters: ParameterStore, guard: PinGuard, transport?: FinTsTransport, logger?: MessageLogger);
+    /** Identification (HKIDN) and processing preparation (HKVVB), which open every dialog. */
+    initSegments(systemId: string, anonymous?: boolean): SegmentSpec[];
+    /**
+     * Sends `segments` as message `number` of the dialog `dialogId` and returns the bank's answer, not yet parsed.
+     *
+     * With `signing` the message is signed with the PIN, which `PinGuard.pin` hands out, and the `tan`; without, it
+     * goes out unsigned, as in an anonymous dialog.
+     */
+    post(message: {
+        dialogId: string;
+        number: number;
+        segments: readonly SegmentSpec[];
+        signing: Signing3 | undefined;
+        tan: string | undefined;
+    }): Promise<Uint8Array>;
+    /**
+     * The PIN to sign a login with, the first message of a dialog.
+     *
+     * Throws instead where the guard holds the PIN back (`PinGuard.pin`), or if the bank parameters rule out the PIN's
+     * length: the bank would count such a PIN as a failed attempt. The later messages of a dialog, its end included, take
+     * the PIN the bank has accepted, whatever the parameter data it delivered since say.
+     */
+    private pinForLogin;
+    /**
+     * Aborts the request on its way, and sends nothing but dialog ends from now on: any other message fails with
+     * `FinTsStateError` before it goes out, so that a call under way stops at its next one. The client calls it as soon as
+     * it is closed, and `close` once it has ended its dialog.
+     */
+    beginClose(): void;
+    close(): void;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/v3/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/v3/protocol.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAI3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,mGAAmG;AACnG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,oGAAoG;AACpG,MAAM,WAAW,QAAQ;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,6FAA6F;IAC7F,SAAS,IAAI,IAAI,CAAC;CACnB;AAOD;;;;GAIG;AACH,qBAAa,cAAc;IAQvB,QAAQ,CAAC,UAAU,EAAE,cAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK;IARxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C,qFAAqF;IACrF,OAAO,CAAC,OAAO,CAAS;gBAGb,UAAU,EAAE,cAAc,EAClB,KAAK,EAAE,QAAQ,EAChC,SAAS,CAAC,EAAE,cAAc,EAC1B,MAAM,CAAC,EAAE,aAAa;IAMxB,0FAA0F;IAC1F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,WAAW,EAAE;IAmBhE;;;;;OAKG;IACG,IAAI,CAAC,OAAO,EAAE;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;QAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;KACzB,GAAG,OAAO,CAAC,UAAU,CAAC;IA8BvB;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IAOnB;;;;OAIG;IACH,UAAU,IAAI,IAAI;IAKlB,KAAK,IAAI,IAAI;CAGd"}

package/dist/v3/protocol.js

@@ -0,0 +1,113 @@
+// Internal to the package, and named after the FinTS specification. Documentation is where the meaning is not evident.
+import { requirePinLength } from '../core/config.js';
+import { clientClosedError } from '../core/errors.js';
+import { decodeBankText } from '../util/text.js';
+import { BankConnection, checkMessageSize } from './bank-connection.js';
+import { buildMessage, decodeTransport, encodeTransport } from './message.js';
+import { Segments } from './segments.js';
+/** Customer ID the specification reserves for anonymous dialogs. */
+const anonymousCustomerId = '9999999999';
+/** Whether `segments` are those of a dialog end, the one message a closing client still sends. */
+function isDialogEnd(segments) {
+    return segments.length === 1 && segments[0].type === 'HKEND';
+}
+/**
+ * Builds, signs and posts FinTS 3.0 messages (HBCI segment syntax, PIN/TAN security) for the user `parameters.config`
+ * names, with the parameter data and IDs `parameters` keeps. Every message signed with the PIN takes it from the
+ * `PinGuard` (`post`), which keeps it from going out after a refused login.
+ */
+export class FinTs3Protocol {
+    parameters;
+    guard;
+    config;
+    connection;
+    /** Whether the client is closing, so that only dialog ends go out (`beginClose`). */
+    closing = false;
+    constructor(parameters, guard, transport, logger) {
+        this.parameters = parameters;
+        this.guard = guard;
+        this.config = parameters.config;
+        this.connection = new BankConnection(this.config.url, transport, logger);
+    }
+    /** Identification (HKIDN) and processing preparation (HKVVB), which open every dialog. */
+    initSegments(systemId, anonymous = false) {
+        return [
+            Segments.identification({
+                countryCode: this.config.countryCode,
+                bankCode: this.config.bankCode,
+                customerId: anonymous ? anonymousCustomerId : this.config.customerId,
+                systemId,
+                systemIdRequired: !anonymous,
+            }),
+            Segments.processingPreparation({
+                bpdVersion: this.parameters.reportedBpdVersion,
+                updVersion: anonymous ? 0 : this.parameters.reportedUpdVersion,
+                language: this.parameters.bankParameters?.dialogLanguage ?? 0,
+                productId: this.config.productId,
+                productVersion: this.config.productVersion,
+            }),
+        ];
+    }
+    /**
+     * Sends `segments` as message `number` of the dialog `dialogId` and returns the bank's answer, not yet parsed.
+     *
+     * With `signing` the message is signed with the PIN, which `PinGuard.pin` hands out, and the `tan`; without, it
+     * goes out unsigned, as in an anonymous dialog.
+     */
+    async post(message) {
+        if (this.closing && !isDialogEnd(message.segments))
+            throw clientClosedError();
+        const signing = message.signing;
+        // The first message of a signed dialog logs in: from here on the bank may count the PIN.
+        const login = signing !== undefined && message.number === 1;
+        const outgoing = buildMessage({
+            dialogId: message.dialogId,
+            messageNumber: message.number,
+            segments: message.segments,
+            security: signing === undefined
+                ? undefined
+                : {
+                    countryCode: this.config.countryCode,
+                    bankCode: this.config.bankCode,
+                    userId: this.config.userId,
+                    systemId: signing.systemId,
+                    pin: login ? this.pinForLogin() : this.guard.pin,
+                    securityFunction: signing.securityFunction,
+                },
+            tan: message.tan,
+        });
+        checkMessageSize(outgoing.bytes.length, this.parameters.bankParameters?.bankInfo.maxMessageSize);
+        this.connection.log('outgoing', () => outgoing.masked);
+        if (login)
+            this.guard.loginSent();
+        const bytes = decodeTransport(await this.connection.post(encodeTransport(outgoing.bytes), 'text/plain'));
+        this.connection.log('incoming', () => decodeBankText(bytes));
+        return bytes;
+    }
+    /**
+     * The PIN to sign a login with, the first message of a dialog.
+     *
+     * Throws instead where the guard holds the PIN back (`PinGuard.pin`), or if the bank parameters rule out the PIN's
+     * length: the bank would count such a PIN as a failed attempt. The later messages of a dialog, its end included, take
+     * the PIN the bank has accepted, whatever the parameter data it delivered since say.
+     */
+    pinForLogin() {
+        const pin = this.guard.pin;
+        const length = this.parameters.bankParameters?.pinTan.pinLength;
+        requirePinLength(pin, length?.min, length?.max);
+        return pin;
+    }
+    /**
+     * Aborts the request on its way, and sends nothing but dialog ends from now on: any other message fails with
+     * `FinTsStateError` before it goes out, so that a call under way stops at its next one. The client calls it as soon as
+     * it is closed, and `close` once it has ended its dialog.
+     */
+    beginClose() {
+        this.closing = true;
+        this.connection.abortRequests();
+    }
+    close() {
+        this.connection.close();
+    }
+}
+//# sourceMappingURL=protocol.js.map