@coderoftime/fints 0.1.0 → 0.3.0

package/dist/session/sepa-accounts.d.ts

@@ -1,32 +1,38 @@
-import type { Account } from '../core/account.js';
+import { Account } from '../core/account.js';
+import type { ParameterStore } from '../v3/parameter-store.js';
 import type { DialogRunner } from './dialog-runner.js';
-import type { LoginGuard } from './login-guard.js';
-import type { BankResponse, PinTanProtocol } from './protocol.js';
 import type { SessionState } from './session-state.js';
 /**
  * IBAN and BIC of the user's accounts, from the bank's SEPA account list where the user parameter data lack them
- * (Formals F.3.4).
+ * (Formals F.3.4), and the accounts the app passes completed from both.
  *
  * The list is read once per version of the user parameter data and kept in the saved state. Under version 0, which
- * holds for one dialog only (Formals E.2), without user parameter data, or where the bank rejects the list, it is kept
- * for this client only. Where the bank ends the dialog in answer to the list, the next call asks once more.
+ * holds for one dialog only (Formals E.2), without user parameter data, or where the bank rejects the list, also by
+ * ending the dialog, or names no account in it, it is kept for this client only: an empty list completes nothing, and
+ * saved it would outlast a fault of a single answer until the bank changes its user parameter data.
  */
-export declare class SepaAccounts<R extends BankResponse, O> {
-    private readonly protocol;
+export declare class SepaAccounts {
+    private readonly parameters;
     private readonly state;
     private readonly dialogs;
-    private readonly guard;
     /**
      * The list this client keeps unsaved, with the version of the user parameter data it was read under; empty where the
-     * bank rejected it.
+     * bank rejected it or named no account.
      */
     private unsaved;
-    /** Whether a call already went on without the list because the bank ended the dialog in answer to it. */
-    private abortSkipped;
-    constructor(protocol: PinTanProtocol<R, O>, state: SessionState, dialogs: DialogRunner<R, O>, guard: LoginGuard);
+    constructor(parameters: ParameterStore, state: SessionState, dialogs: DialogRunner);
     /** The accounts of the user parameter data completed with IBAN and BIC, then the accounts only the list names. */
     completedAccounts(): Promise<Account[]>;
-    /** `account` with IBAN and BIC filled in from the list. */
+    /**
+     * `account` as the bank knows it: the one of `completedAccounts` it matches, with what the bank states of it first,
+     * so that an account the app has built itself, such as from an IBAN alone, goes out with the account number, the
+     * sub-account and the BIC the bank's orders take, and the currency of its statements. Where the bank names none it
+     * matches, only what identifies `account`, and its currency: the rest, such as the transactions it permits, only the
+     * bank can state.
+     *
+     * Throws `FinTsUnsupportedError` for such an account where the user parameter data list all permitted transactions:
+     * they permit nothing for an account they leave out, and the client cannot tell it from a mistyped one.
+     */
     complete(account: Account): Promise<Account>;
     /** The list, read in the session's dialog, whose start delivers the user parameter data it is cached for. */
     private list;

package/dist/session/sepa-accounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sepa-accounts.d.ts","sourceRoot":"","sources":["../../src/session/sepa-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;GAOG;AACH,qBAAa,YAAY,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC;IAW/C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAbxB;;;OAGG;IACH,OAAO,CAAC,OAAO,CAA+E;IAE9F,yGAAyG;IACzG,OAAO,CAAC,YAAY,CAAS;gBAGV,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAC9B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAC3B,KAAK,EAAE,UAAU;IAGpC,kHAAkH;IAC5G,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAS7C,2DAA2D;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAKlD,6GAA6G;YAC/F,IAAI;CAwCnB"}
+{"version":3,"file":"sepa-accounts.d.ts","sourceRoot":"","sources":["../../src/session/sepa-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAgB,MAAM,oBAAoB,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;;;GAQG;AACH,qBAAa,YAAY;IAQrB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B;;;OAGG;IACH,OAAO,CAAC,OAAO,CAA+E;gBAG3E,UAAU,EAAE,cAAc,EAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,YAAY;IAGxC,kHAAkH;IAC5G,iBAAiB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAW7C;;;;;;;;;OASG;IACG,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IA2BlD,6GAA6G;YAC/F,IAAI;CA0BnB"}

package/dist/session/sepa-accounts.js

@@ -1,49 +1,80 @@
-import { FinTsDialogAbortedError } from '../core/errors.js';
+import { Account, AccountIndex } from '../core/account.js';
+import { FinTsUnsupportedError, tryLookUp } from '../core/errors.js';
+import { sepaAccountsQuery } from '../v3/queries.js';
 /**
  * IBAN and BIC of the user's accounts, from the bank's SEPA account list where the user parameter data lack them
- * (Formals F.3.4).
+ * (Formals F.3.4), and the accounts the app passes completed from both.
  *
  * The list is read once per version of the user parameter data and kept in the saved state. Under version 0, which
- * holds for one dialog only (Formals E.2), without user parameter data, or where the bank rejects the list, it is kept
- * for this client only. Where the bank ends the dialog in answer to the list, the next call asks once more.
+ * holds for one dialog only (Formals E.2), without user parameter data, or where the bank rejects the list, also by
+ * ending the dialog, or names no account in it, it is kept for this client only: an empty list completes nothing, and
+ * saved it would outlast a fault of a single answer until the bank changes its user parameter data.
  */
 export class SepaAccounts {
-    protocol;
+    parameters;
     state;
     dialogs;
-    guard;
     /**
      * The list this client keeps unsaved, with the version of the user parameter data it was read under; empty where the
-     * bank rejected it.
+     * bank rejected it or named no account.
      */
     unsaved;
-    /** Whether a call already went on without the list because the bank ended the dialog in answer to it. */
-    abortSkipped = false;
-    constructor(protocol, state, dialogs, guard) {
-        this.protocol = protocol;
+    constructor(parameters, state, dialogs) {
+        this.parameters = parameters;
         this.state = state;
         this.dialogs = dialogs;
-        this.guard = guard;
     }
     /** The accounts of the user parameter data completed with IBAN and BIC, then the accounts only the list names. */
     async completedAccounts() {
         const sepa = await this.list();
-        const accounts = this.protocol.userParameters?.accounts ?? [];
+        const accounts = this.parameters.userParameters?.accounts ?? [];
+        const listed = new AccountIndex(sepa);
+        const known = new AccountIndex(accounts);
         return [
-            ...accounts.map((account) => withSepaDetails(account, sepa)),
-            ...sepa.filter((s) => !accounts.some((a) => s.matches(a))),
+            ...accounts.map((account) => withSepaDetails(account, listed.find(account))),
+            ...sepa.filter((s) => known.find(s) === undefined),
         ];
     }
-    /** `account` with IBAN and BIC filled in from the list. */
+    /**
+     * `account` as the bank knows it: the one of `completedAccounts` it matches, with what the bank states of it first,
+     * so that an account the app has built itself, such as from an IBAN alone, goes out with the account number, the
+     * sub-account and the BIC the bank's orders take, and the currency of its statements. Where the bank names none it
+     * matches, only what identifies `account`, and its currency: the rest, such as the transactions it permits, only the
+     * bank can state.
+     *
+     * Throws `FinTsUnsupportedError` for such an account where the user parameter data list all permitted transactions:
+     * they permit nothing for an account they leave out, and the client cannot tell it from a mistyped one.
+     */
     async complete(account) {
-        if (account.iban !== undefined && account.bic !== undefined)
-            return account;
-        return withSepaDetails(account, await this.list());
+        const known = (await this.completedAccounts()).find((a) => account.matches(a));
+        if (known !== undefined) {
+            // A sub-account belongs to the account number it comes with.
+            const national = known.accountNumber === undefined ? account : known;
+            return known.copyWith({
+                accountNumber: national.accountNumber,
+                subAccount: national.subAccount,
+                iban: known.iban ?? account.iban,
+                bic: known.bic ?? account.bic,
+                currency: known.currency ?? account.currency,
+            });
+        }
+        if (this.parameters.userParameters?.listsAllTransactions === true) {
+            throw new FinTsUnsupportedError("The bank does not name this account among the user's, and so permits nothing");
+        }
+        return new Account({
+            accountNumber: account.accountNumber,
+            subAccount: account.subAccount,
+            bankCode: account.bankCode,
+            countryCode: account.countryCode,
+            iban: account.iban,
+            bic: account.bic,
+            currency: account.currency,
+        });
     }
     /** The list, read in the session's dialog, whose start delivers the user parameter data it is cached for. */
     async list() {
         await this.dialogs.open();
-        const upd = this.protocol.userParameters;
+        const upd = this.parameters.userParameters;
         if (upd !== undefined &&
             upd.accounts.length > 0 &&
             upd.accounts.every((a) => a.iban !== undefined && a.bic !== undefined)) {
@@ -55,29 +86,13 @@ export class SepaAccounts {
             return saved;
         if (this.unsaved !== undefined && this.unsaved.updVersion === updVersion)
             return this.unsaved.accounts;
-        const query = this.protocol.sepaAccounts();
+        const query = sepaAccountsQuery(this.parameters);
         if (query === undefined)
             return [];
-        // Where the bank rejects the list, the accounts stay as the user parameter data state them.
-        const outcome = { aborted: false };
-        const accounts = await this.guard.tryLookUp(async () => {
-            try {
-                return await this.dialogs.query(() => query);
-            }
-            catch (error) {
-                if (error instanceof FinTsDialogAbortedError)
-                    outcome.aborted = true;
-                throw error;
-            }
-        });
-        if (outcome.aborted && !this.abortSkipped) {
-            // The bank may have ended the dialog for a reason of its own, such as a timeout, so this call goes on without the
-            // list and the next one asks again in its new dialog. Only once: banks also end the dialog when they reject the
-            // list, and each time costs the next call a login.
-            this.abortSkipped = true;
-            return [];
-        }
-        if (accounts !== undefined && updVersion !== undefined && updVersion > 0) {
+        // Where the bank rejects the list, also by ending the dialog, the accounts stay as the user parameter data state
+        // them: asked again, a bank that ends the dialog in answer would cost each call a login.
+        const accounts = await tryLookUp(() => this.dialogs.query(() => query));
+        if (accounts !== undefined && accounts.length > 0 && updVersion !== undefined && updVersion > 0) {
             this.state.cacheSepaAccounts(accounts, updVersion);
         }
         else {
@@ -86,11 +101,12 @@ export class SepaAccounts {
         return accounts ?? [];
     }
 }
-function withSepaDetails(account, sepa) {
-    const match = sepa.find((s) => account.matches(s));
-    if (match === undefined)
-        return account;
+/**
+ * A copy of `account`, which shares no date with the user parameter data, with the IBAN and BIC of `match`, its entry
+ * in the SEPA account list, if any.
+ */
+function withSepaDetails(account, match) {
     // A BIC of the list takes precedence over the one of the user parameter data (Formals E.3.1.1, "BIC").
-    return account.copyWith({ iban: account.iban ?? match.iban, bic: match.bic ?? account.bic });
+    return account.copyWith({ iban: account.iban ?? match?.iban, bic: match?.bic ?? account.bic });
 }
 //# sourceMappingURL=sepa-accounts.js.map

package/dist/session/sepa-accounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"sepa-accounts.js","sourceRoot":"","sources":["../../src/session/sepa-accounts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAM5D;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAWJ;IACA;IACA;IACA;IAbnB;;;OAGG;IACK,OAAO,CAA+E;IAE9F,yGAAyG;IACjG,YAAY,GAAG,KAAK,CAAC;IAE7B,YACmB,QAA8B,EAC9B,KAAmB,EACnB,OAA2B,EAC3B,KAAiB;QAHjB,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,UAAK,GAAL,KAAK,CAAc;QACnB,YAAO,GAAP,OAAO,CAAoB;QAC3B,UAAK,GAAL,KAAK,CAAY;IACjC,CAAC;IAEJ,kHAAkH;IAClH,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC9D,OAAO;YACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5D,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC5E,OAAO,eAAe,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,6GAA6G;IACrG,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QACzC,IACE,GAAG,KAAK,SAAS;YACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,EACtE,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,EAAE,OAAO,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvG,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACnC,4FAA4F;QAC5F,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,uBAAuB;oBAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,kHAAkH;YAClH,gHAAgH;YAChH,mDAAmD;YACnD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;CACF;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,IAAwB;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxC,uGAAuG;IACvG,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"sepa-accounts.js","sourceRoot":"","sources":["../../src/session/sepa-accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IAQJ;IACA;IACA;IATnB;;;OAGG;IACK,OAAO,CAA+E;IAE9F,YACmB,UAA0B,EAC1B,KAAmB,EACnB,OAAqB;QAFrB,eAAU,GAAV,UAAU,CAAgB;QAC1B,UAAK,GAAL,KAAK,CAAc;QACnB,YAAO,GAAP,OAAO,CAAc;IACrC,CAAC;IAEJ,kHAAkH;IAClH,KAAK,CAAC,iBAAiB;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO;YACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5E,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACnD,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,QAAQ,CAAC,OAAgB;QAC7B,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YACrE,OAAO,KAAK,CAAC,QAAQ,CAAC;gBACpB,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;gBAChC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;gBAC7B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,oBAAoB,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,IAAI,qBAAqB,CAAC,8EAA8E,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,IAAI,OAAO,CAAC;YACjB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,6GAA6G;IACrG,KAAK,CAAC,IAAI;QAChB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAC3C,IACE,GAAG,KAAK,SAAS;YACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YACvB,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,EACtE,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,EAAE,OAAO,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvG,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACnC,iHAAiH;QACjH,yFAAyF;QACzF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAgB,EAAE,KAA0B;IACnE,uGAAuG;IACvG,OAAO,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACjG,CAAC"}

package/dist/session/session-setup.d.ts

@@ -1,23 +1,20 @@
 import type { BankInfo } from '../core/bank-info.js';
-import type { TanMethod } from '../tan/tan-models.js';
-import type { LoginGuard } from './login-guard.js';
-import type { BankResponse, PinTanProtocol, ProtocolDialog } from './protocol.js';
-import type { ResponseHandler } from './response-handler.js';
+import type { TanMedium, TanMethod } from '../tan/tan-models.js';
+import type { FinTs3Protocol } from '../v3/protocol.js';
+import { SignedDialog, type SessionParts } from './signed-dialog.js';
 import type { TanSelection } from './tan-selection.js';
 /**
  * What has to be settled before a login: the bank parameter data, the synchronization, and through `TanSelection` the
  * TAN method and medium. Each of the dialogs this takes serves one purpose only.
  *
- * Where the bank refuses a login for a reason the session can take care of, `remedied` does so and logs in again.
+ * Where the bank refuses a login for a reason the session can take care of, `remedied` does so and logs in again; so it
+ * does where the limits of bank parameter data that may be outdated keep a login from going out.
  */
-export declare class SessionSetup<R extends BankResponse, O> {
+export declare class SessionSetup {
+    private readonly session;
     private readonly protocol;
-    private readonly responses;
     private readonly tans;
-    private readonly guard;
-    /** Whether a synchronization dialog ran, so that a helpful one runs once only. */
-    private synchronizationTried;
-    constructor(protocol: PinTanProtocol<R, O>, responses: ResponseHandler<R>, tans: TanSelection<R, O>, guard: LoginGuard);
+    constructor(session: SessionParts, protocol: FinTs3Protocol, tans: TanSelection);
     /**
      * The bank's general information: from an anonymous dialog where the bank answers one, else from the synchronization.
      * No TAN method or medium is chosen for it.
@@ -25,21 +22,26 @@ export declare class SessionSetup<R extends BankResponse, O> {
     bankInfo(): Promise<BankInfo>;
     /** The TAN methods the bank allows for this user, which the synchronization reports. */
     methods(): Promise<TanMethod[]>;
-    /** Settles what is still open: the bank parameter data, the synchronization, the TAN method and medium. */
-    prepare(): Promise<void>;
+    /**
+     * Settles what is still open: the bank parameter data, the synchronization, the TAN method and medium. Returns the TAN
+     * media it looked up to choose the medium; `undefined` where it looked up none, or the bank listed none.
+     */
+    prepare(): Promise<TanMedium[] | undefined>;
     /** A new dialog signed with the TAN method and medium in use, once `prepare` has settled them. */
-    newDialog(): Promise<ProtocolDialog<R, O>>;
+    newDialog(): Promise<SignedDialog>;
     /**
-     * Runs `attempt`, which may log in, and runs it once more for each reason of a refused login the session can take
-     * care of, so that a bank that keeps refusing fails with its own error:
+     * Runs `attempt`, which may log in, once more after each refused login `remedy` takes care of.
      *
-     * | Refusal (`LoginGuard.remediableReasons`) | Remedy |
-     * | --- | --- |
-     * | 3920 without the method, or 9075 after the one-step method | another allowed method (`TanSelection.replace`) |
-     * | 9391 | a new synchronization, which issues a customer system ID |
+     * Where the limits of the bank parameter data kept a login from going out (`FinTs3Protocol.stoppedLogin`), it fetches
+     * them anew in an anonymous dialog, once, and runs `attempt` once more: they may be outdated, as saved ones are, and
+     * new ones would come only in answer to the login they rule out. The new limits judge the login built anew, not the
+     * one stopped: it reports version 0 for the parameter data they stand in for, so it may be shorter.
      */
     remedied<T>(attempt: () => Promise<T>): Promise<T>;
-    /** Takes care of `reason`, given for refusing a login signed with `rejected`; returns whether it could. */
+    /**
+     * Takes care of `reason`, given for refusing a login signed with `rejected`, with another TAN method or a new
+     * synchronization; returns whether it could.
+     */
     private remedy;
     /**
      * Loads the bank parameter data if they are missing, then synchronizes if that is due.
@@ -52,11 +54,26 @@ export declare class SessionSetup<R extends BankResponse, O> {
      */
     private loadParameters;
     /**
-     * Asks for the bank parameter data without logging in. A bank that does not answer anonymously is no error, but a
-     * failed connection is: the synchronization would only wait for the same server again.
+     * Asks for the bank parameter data without logging in, keeps them where there are none from a dialog signed with the
+     * PIN (`ParameterStore.keepAnonymous`), or with `refresh` their limits only (`ParameterStore.keepRefreshedLimits`),
+     * and passes the bank's messages on: all an anonymous dialog tells, since the TAN methods it lists are not those of a
+     * user. A bank that does not answer anonymously is no error, but a failed connection is: the synchronization would
+     * only wait for the same server again.
      */
     private fetchBankParametersAnonymously;
-    /** Runs the synchronization dialog where it is due (`TanSelection.synchronizationDialog`). */
+    /**
+     * Asks for the bank parameter data in an anonymous dialog that announces strong customer authentication; a bank that
+     * rejects the announcement, with a return code or by failing on it, is asked again without it.
+     *
+     * A timeout or a broken connection is not a reason to ask again: it would only double the wait.
+     */
+    private requestBankParametersAnonymously;
+    private anonymousDialog;
+    /**
+     * Runs the synchronization, a login in a dialog of its own, while there is no customer system ID, without which no
+     * regular dialog starts. It runs before the TAN method and medium are settled (`TanSelection.synchronizationDialog`
+     * tells which method signs it).
+     */
     private synchronizeIfDue;
     /**
      * The TAN media of the method in use; `undefined` if the bank does not list them or rejects the list, after which the

package/dist/session/session-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-setup.d.ts","sourceRoot":"","sources":["../../src/session/session-setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,kBAAkB,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;GAKG;AACH,qBAAa,YAAY,CAAC,CAAC,SAAS,YAAY,EAAE,CAAC;IAK/C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPxB,kFAAkF;IAClF,OAAO,CAAC,oBAAoB,CAAS;gBAGlB,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,EAC9B,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC,EAC7B,IAAI,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EACxB,KAAK,EAAE,UAAU;IAGpC;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAMnC,wFAAwF;IAClF,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKrC,2GAA2G;IACrG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAM9B,kGAAkG;IAC5F,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAKhD;;;;;;;;OAQG;IACG,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAkBxD,2GAA2G;YAC7F,MAAM;IAYpB;;;;;;;;OAQG;YACW,cAAc;IAM5B;;;OAGG;YACW,8BAA8B;IAS5C,8FAA8F;YAChF,gBAAgB;IAc9B;;;;;;OAMG;YACW,cAAc;IAW5B,+FAA+F;YACjF,IAAI;CAOnB"}
+{"version":3,"file":"session-setup.d.ts","sourceRoot":"","sources":["../../src/session/session-setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGrD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAIjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;;GAMG;AACH,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAFJ,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,YAAY;IAGrC;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAMnC,wFAAwF;IAClF,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAKrC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC;IASjD,kGAAkG;IAC5F,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAKxC;;;;;;;OAOG;IACG,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAYxD;;;OAGG;YACW,MAAM;IAYpB;;;;;;;;OAQG;YACW,cAAc;IAM5B;;;;;;OAMG;YACW,8BAA8B;IAY5C;;;;;OAKG;YACW,gCAAgC;YAahC,eAAe;IAS7B;;;;OAIG;YACW,gBAAgB;IAS9B;;;;;;OAMG;YACW,cAAc;IAW5B,+FAA+F;YACjF,IAAI;CAQnB"}

package/dist/session/session-setup.js

@@ -1,93 +1,93 @@
-import { FinTsBankError, FinTsError, FinTsProtocolError, FinTsTransportError, parseBankData } from '../core/errors.js';
-import { requireBankParameters } from './parameter-data.js';
+import { FinTsError, FinTsProtocolError, FinTsTransportError, parseBankData, tryLookUp } from '../core/errors.js';
+import { hasErrors } from '../core/feedback.js';
+import { FinTs3Dialog } from '../v3/dialog.js';
+import { requireBankParameters } from '../v3/parameters.js';
+import { tanMediaQuery } from '../v3/queries.js';
+import { SignedDialog } from './signed-dialog.js';
 /**
  * What has to be settled before a login: the bank parameter data, the synchronization, and through `TanSelection` the
  * TAN method and medium. Each of the dialogs this takes serves one purpose only.
  *
- * Where the bank refuses a login for a reason the session can take care of, `remedied` does so and logs in again.
+ * Where the bank refuses a login for a reason the session can take care of, `remedied` does so and logs in again; so it
+ * does where the limits of bank parameter data that may be outdated keep a login from going out.
  */
 export class SessionSetup {
+    session;
     protocol;
-    responses;
     tans;
-    guard;
-    /** Whether a synchronization dialog ran, so that a helpful one runs once only. */
-    synchronizationTried = false;
-    constructor(protocol, responses, tans, guard) {
+    constructor(session, protocol, tans) {
+        this.session = session;
         this.protocol = protocol;
-        this.responses = responses;
         this.tans = tans;
-        this.guard = guard;
     }
     /**
      * The bank's general information: from an anonymous dialog where the bank answers one, else from the synchronization.
      * No TAN method or medium is chosen for it.
      */
     async bankInfo() {
-        if (this.protocol.bankParameters === undefined)
+        if (this.session.parameters.bankParameters === undefined)
             await this.fetchBankParametersAnonymously();
-        if (this.protocol.bankParameters === undefined)
+        if (this.session.parameters.bankParameters === undefined)
             await this.synchronizeIfDue();
-        return requireBankParameters(this.protocol.bankParameters).bankInfo;
+        return requireBankParameters(this.session.parameters.bankParameters).bankInfo;
     }
     /** The TAN methods the bank allows for this user, which the synchronization reports. */
     async methods() {
         await this.loadParameters();
         return this.tans.available();
     }
-    /** Settles what is still open: the bank parameter data, the synchronization, the TAN method and medium. */
+    /**
+     * Settles what is still open: the bank parameter data, the synchronization, the TAN method and medium. Returns the TAN
+     * media it looked up to choose the medium; `undefined` where it looked up none, or the bank listed none.
+     */
     async prepare() {
         await this.loadParameters();
         await this.tans.ensureMethodChosen();
-        if (this.tans.mediumToLookUp)
-            await this.tans.chooseMedium(await this.lookUpTanMedia());
+        if (!this.tans.mediumToLookUp)
+            return undefined;
+        const media = await this.lookUpTanMedia();
+        await this.tans.chooseMedium(media);
+        return media;
     }
     /** A new dialog signed with the TAN method and medium in use, once `prepare` has settled them. */
     async newDialog() {
         await this.prepare();
-        return this.tans.newDialog();
+        return new SignedDialog(this.tans.newDialog(), this.session);
     }
     /**
-     * Runs `attempt`, which may log in, and runs it once more for each reason of a refused login the session can take
-     * care of, so that a bank that keeps refusing fails with its own error:
+     * Runs `attempt`, which may log in, once more after each refused login `remedy` takes care of.
      *
-     * | Refusal (`LoginGuard.remediableReasons`) | Remedy |
-     * | --- | --- |
-     * | 3920 without the method, or 9075 after the one-step method | another allowed method (`TanSelection.replace`) |
-     * | 9391 | a new synchronization, which issues a customer system ID |
+     * Where the limits of the bank parameter data kept a login from going out (`FinTs3Protocol.stoppedLogin`), it fetches
+     * them anew in an anonymous dialog, once, and runs `attempt` once more: they may be outdated, as saved ones are, and
+     * new ones would come only in answer to the login they rule out. The new limits judge the login built anew, not the
+     * one stopped: it reports version 0 for the parameter data they stand in for, so it may be shorter.
      */
     async remedied(attempt) {
-        // A refusal of an earlier call stops the attempt before it sends the PIN; there is nothing to remedy.
-        if (this.guard.hasRefusal)
-            return attempt();
-        const remedied = new Set();
-        for (;;) {
-            try {
-                return await attempt();
-            }
-            catch (error) {
-                if (!(error instanceof FinTsBankError))
-                    throw error;
-                const reason = this.guard.remediableReasons(error).find((r) => !remedied.has(r));
-                const rejected = this.guard.refusedMethod;
-                if (reason === undefined || rejected === undefined || !(await this.remedy(reason, rejected)))
-                    throw error;
-                remedied.add(reason);
-                this.guard.pardon(error);
-            }
+        const run = () => this.session.guard.remedied(attempt, (reason, rejected) => this.remedy(reason, rejected));
+        try {
+            return await run();
+        }
+        catch (error) {
+            if (!this.protocol.stoppedLogin(error))
+                throw error;
+            await this.fetchBankParametersAnonymously(true);
+            return run();
         }
     }
-    /** Takes care of `reason`, given for refusing a login signed with `rejected`; returns whether it could. */
+    /**
+     * Takes care of `reason`, given for refusing a login signed with `rejected`, with another TAN method or a new
+     * synchronization; returns whether it could.
+     */
     async remedy(reason, rejected) {
         switch (reason) {
             case 'tanMethodNotAllowed':
                 // The parameter data name the methods to choose from; the refusal may be the first to deliver them.
-                if (this.protocol.bankParameters === undefined)
+                if (this.session.parameters.bankParameters === undefined)
                     await this.fetchBankParametersAnonymously();
                 return this.tans.replace(rejected);
             case 'systemIdRejected':
                 // Without a customer system ID there is none to lose, and logging in once more would only send the PIN again.
-                return this.protocol.forgetSystemId();
+                return this.session.parameters.forgetSystemId();
         }
     }
     /**
@@ -100,18 +100,27 @@ export class SessionSetup {
      * After a refused login it throws the refusal right away, before the user is asked for a TAN method or medium.
      */
     async loadParameters() {
-        this.guard.check();
-        if (this.protocol.bankParameters === undefined)
+        this.session.guard.check();
+        if (this.session.parameters.bankParameters === undefined)
             await this.fetchBankParametersAnonymously();
         await this.synchronizeIfDue();
     }
     /**
-     * Asks for the bank parameter data without logging in. A bank that does not answer anonymously is no error, but a
-     * failed connection is: the synchronization would only wait for the same server again.
+     * Asks for the bank parameter data without logging in, keeps them where there are none from a dialog signed with the
+     * PIN (`ParameterStore.keepAnonymous`), or with `refresh` their limits only (`ParameterStore.keepRefreshedLimits`),
+     * and passes the bank's messages on: all an anonymous dialog tells, since the TAN methods it lists are not those of a
+     * user. A bank that does not answer anonymously is no error, but a failed connection is: the synchronization would
+     * only wait for the same server again.
      */
-    async fetchBankParametersAnonymously() {
+    async fetchBankParametersAnonymously(refresh = false) {
         try {
-            this.responses.showBankMessages(await this.protocol.fetchBankParametersAnonymously());
+            const response = await this.requestBankParametersAnonymously();
+            if (refresh)
+                this.session.parameters.keepRefreshedLimits(response);
+            else
+                this.session.parameters.keepAnonymous(response);
+            for (const message of response.bankMessages)
+                this.session.prompts.showBankMessage(message);
         }
         catch (error) {
             // Optional: the login delivers the parameters as well.
@@ -119,15 +128,48 @@ export class SessionSetup {
                 throw error;
         }
     }
-    /** Runs the synchronization dialog where it is due (`TanSelection.synchronizationDialog`). */
+    /**
+     * Asks for the bank parameter data in an anonymous dialog that announces strong customer authentication; a bank that
+     * rejects the announcement, with a return code or by failing on it, is asked again without it.
+     *
+     * A timeout or a broken connection is not a reason to ask again: it would only double the wait.
+     */
+    async requestBankParametersAnonymously() {
+        let announced;
+        try {
+            announced = await this.anonymousDialog(true);
+        }
+        catch (error) {
+            if (error instanceof FinTsTransportError && error.statusCode === undefined)
+                throw error;
+            if (!(error instanceof FinTsError))
+                throw error;
+            return this.anonymousDialog(false);
+        }
+        if (!hasErrors(announced.feedback) || announced.find('HIBPA') !== undefined)
+            return announced;
+        return this.anonymousDialog(false);
+    }
+    async anonymousDialog(announceSca) {
+        const dialog = FinTs3Dialog.anonymous(this.protocol);
+        try {
+            return await dialog.requestBankParameters(announceSca);
+        }
+        finally {
+            await dialog.end();
+        }
+    }
+    /**
+     * Runs the synchronization, a login in a dialog of its own, while there is no customer system ID, without which no
+     * regular dialog starts. It runs before the TAN method and medium are settled (`TanSelection.synchronizationDialog`
+     * tells which method signs it).
+     */
     async synchronizeIfDue() {
-        const due = this.protocol.synchronization === 'required' ||
-            (this.protocol.synchronization === 'helpful' && !this.synchronizationTried);
-        if (!due)
+        if (this.session.parameters.systemId !== undefined)
             return;
-        this.synchronizationTried = true;
-        await this.once(this.tans.synchronizationDialog(), (dialog) => this.responses.startDialog(dialog, () => dialog.start(true)));
-        if (this.protocol.synchronization === 'required') {
+        await this.once(this.tans.synchronizationDialog(), (dialog) => dialog.login(true));
+        // Set by the synchronization, which the compiler cannot see.
+        if (this.session.parameters.systemId === undefined) {
             throw new FinTsProtocolError('The bank did not complete the synchronization');
         }
     }
@@ -139,21 +181,22 @@ export class SessionSetup {
      * medium the list tells (PIN/TAN B.4.3.1.3).
      */
     async lookUpTanMedia() {
-        const query = this.protocol.tanMedia();
+        const query = tanMediaQuery(this.session.parameters);
         if (query === undefined)
             return undefined;
-        return this.guard.tryLookUp(() => this.once(this.tans.lookupDialog(), async (dialog) => {
-            const pages = await this.responses.startDialogWith(dialog, dialog.startWith(query.order(undefined)));
-            return parseBankData(() => query.read(pages));
+        return tryLookUp(() => this.once(this.tans.lookupDialog(), async (dialog) => {
+            const answers = await dialog.loginWith(query.order(undefined));
+            return parseBankData(() => query.read(answers));
         }));
     }
     /** Runs `use` in `dialog`, a dialog of its own, and ends it afterwards, however `use` ends. */
     async once(dialog, use) {
+        const signed = new SignedDialog(dialog, this.session);
         try {
-            return await use(dialog);
+            return await use(signed);
         }
         finally {
-            await dialog.end();
+            await signed.end();
         }
     }
 }