@coderoftime/fints 0.1.0 → 0.3.0

package/dist/v3/dialog.d.ts

@@ -1,59 +1,69 @@
-import { PinTanDialog } from '../session/pin-tan-dialog.js';
-import type { Approval, StartWithOrder } from '../session/protocol.js';
+import { TanChallenge } from '../tan/challenge.js';
 import { TanMethod } from '../tan/tan-models.js';
 import { IncomingMessage3 } from './message.js';
-import type { Bpd3 } from './parameters.js';
+import type { FinTs3Protocol } from './protocol.js';
 import type { SegmentSpec } from './syntax.js';
-/** How a message is signed: the security function of the TAN method and the customer system ID. */
-export interface Signing3 {
-    readonly securityFunction: string;
-    readonly systemId: string;
-}
-/**
- * What a dialog needs from the session: the parameter data received so far, the segments that open a dialog, and the
- * way to the bank. The `FinTs3Protocol` provides it, and keeps the login data and the PIN to itself.
- */
-export interface FinTs3DialogHost {
-    /** The bank parameter data received so far, if any. */
-    readonly bankParameters: Bpd3 | undefined;
-    /** The customer system ID the bank assigned; `undefined` before the synchronization. */
-    readonly systemId: string | undefined;
-    /** Identification (HKIDN) and processing preparation (HKVVB), which open every dialog. */
-    initSegments(systemId: string, anonymous?: boolean): SegmentSpec[];
+/** The bank's request to approve a message with a TAN or in a banking app; `R` is the bank's answer. */
+export interface Approval<R> {
+    /** What the user is asked. */
+    readonly challenge: TanChallenge;
+    /** Sends the TAN the user entered. */
+    readonly submitTan: (tan: string) => Promise<R>;
+    /** Asks the bank whether the user has approved in the banking app. */
+    readonly checkStatus: () => Promise<R>;
     /**
-     * Sends `segments` as message `number` of the dialog `dialogId` and returns the bank's answer, not yet parsed.
-     *
-     * With `signing` the message is signed with the PIN and the `tan`, after `LoginGuard.check`; without, it goes out
-     * unsigned, as in an anonymous dialog.
+     * Whether the bank announces a push message for once the user has approved (return code 3957), before which the
+     * status must not be asked. The client has no push channel, so the user reports the approval instead.
      */
-    post(message: {
-        dialogId: string;
-        number: number;
-        segments: readonly SegmentSpec[];
-        signing: Signing3 | undefined;
-        tan: string | undefined;
-    }): Promise<Uint8Array>;
+    readonly waitForPush: boolean;
+    /** The new instructions a status answer gives the user (return code 3956); `undefined` where it gives none. */
+    readonly instructionsIn: (response: R) => string | undefined;
 }
-/** One FinTS 3.0 dialog: numbered messages under the dialog ID the bank assigns in its first answer. */
-export declare class FinTs3Dialog extends PinTanDialog<IncomingMessage3, SegmentSpec> {
-    private readonly host;
+/**
+ * One FinTS 3.0 dialog: numbered messages under the dialog ID the bank assigns in its first answer, signed with a TAN
+ * method and medium, and the approvals the bank asks for. The `FinTs3Protocol` builds the messages and signs them.
+ */
+export declare class FinTs3Dialog {
+    private readonly protocol;
+    readonly method: TanMethod;
+    /** The TAN medium the messages name, where the method takes one. */
+    readonly tanMedium: string | undefined;
     private readonly anonymous;
     private systemId;
     private id;
+    private messageNumber;
+    private ended;
+    /** When the bank last answered without rejecting the whole message, which shows it still knows the dialog. */
+    private lastAnswer;
     private constructor();
-    static signed(host: FinTs3DialogHost, method: TanMethod, tanMedium?: string): FinTs3Dialog;
+    static signed(protocol: FinTs3Protocol, method: TanMethod, tanMedium?: string): FinTs3Dialog;
     /** A dialog without login, which only delivers the bank parameter data. */
-    static anonymous(host: FinTs3DialogHost): FinTs3Dialog;
-    protected get bankParameters(): Bpd3 | undefined;
+    static anonymous(protocol: FinTs3Protocol): FinTs3Dialog;
+    /** Whether the bank knows this dialog and it has not ended. */
     get isActive(): boolean;
+    /**
+     * Whether the dialog has ended, on either side.
+     *
+     * The bank ends a dialog idle for longer than its maximum timeout (HIBPA, Formals C.9), or five minutes where it
+     * states none. Such a dialog is neither used nor ended again: the bank would refuse any message in it.
+     */
+    private get hasEnded();
+    private get idleTooLong();
+    /** Whether the messages are signed with a two-step TAN method, so that the bank may ask for approvals. */
+    private get isTwoStep();
     /** The version of the HKTAN segments: that of the HITANS segment the bank describes the method in. */
     private get tanVersion();
+    /** Opens the dialog; with `synchronize` the bank also assigns a customer system ID. */
     start(synchronize?: boolean): Promise<IncomingMessage3>;
     /**
-     * Opens the dialog, asking strong authentication for `order` with a two-step method, then sends `order` in the next
-     * message.
+     * The messages that open the dialog and send `order` while no TAN medium is chosen yet, as for listing the media:
+     * `login` opens the dialog, asking strong authentication for `order` with a two-step method, and `order` sends the
+     * order in a message of its own.
      */
-    startWith(order: SegmentSpec): StartWithOrder<IncomingMessage3>;
+    startWith(order: SegmentSpec): {
+        readonly login: () => Promise<IncomingMessage3>;
+        readonly order: () => Promise<IncomingMessage3>;
+    };
     /**
      * Opens the anonymous dialog; the answer carries the bank parameter data.
      *
@@ -61,18 +71,46 @@ export declare class FinTs3Dialog extends PinTanDialog<IncomingMessage3, Segment
      * tells the bank so, whereupon the bank may send parameter data suited to it (PIN/TAN, B.4.3.1).
      */
     requestBankParameters(announceSca?: boolean): Promise<IncomingMessage3>;
+    /** Sends `order`, asking for strong customer authentication where the bank requires it. */
     send(order: SegmentSpec): Promise<IncomingMessage3>;
-    protected sendEnd(): Promise<void>;
+    /**
+     * Ends the dialog at the bank and returns the answer; `undefined` if the dialog is not active or the end failed.
+     *
+     * Bank and connection errors are ignored, since the bank may have ended the dialog on its side already.
+     */
+    end(): Promise<IncomingMessage3 | undefined>;
+    /** Forgets the dialog without contacting the bank, for example after the bank rejected the PIN. */
+    discard(): void;
+    /**
+     * The approval `response`, the dialog's latest answer, asks for with return code 0030 (TAN) or 3955 (banking app):
+     * HITAN of process 4, answered with HKTAN process 2 (TAN) or S (status); `undefined` if it asks for none, or carries
+     * only the dummy challenge of a message the bank exempts from strong authentication.
+     *
+     * The bank has not executed the message then, so a request without a challenge is a `FinTsProtocolError`: read as
+     * done, it would report an empty result. So is an app approval with a method of HITANS #6: the status request
+     * (process S) came with version 7, along with app approvals (PIN/TAN B.5.2).
+     */
+    approvalAskedIn(response: IncomingMessage3): Approval<IncomingMessage3> | undefined;
     private tanRequest;
     /**
-     * The approval a HITAN segment of process 4 asks for, answered with HKTAN process 2 (TAN) or S (status).
+     * Sends `segments`, with `tan` where they complete an approval, as the next message, and reads the bank's answer. The
+     * message counts once the bank has answered, whatever it answered.
+     *
+     * The bank assigns the dialog ID in its answer to the first message, so the answer to another user's first message
+     * passes for it (`ParameterStore.reportedUpdVersion`). Any other answer to another message fails with
+     * `FinTsProtocolError` before anything of it is kept: a relay or proxy that mixes up answers would hand the client
+     * another user's data, or a page of another query. Only the bank's dialog abort message may name the dialog or the
+     * message as unknown instead (`IncomingMessage3.aborts`), so that its text reaches the user.
+     *
+     * The dialog ends on the client's side, without a dialog end, where it is over for the bank: after a return code that
+     * ends it, such as 9800, a dialog abort message, a rejected opening message (Formals C.1.2), or a broken connection
+     * (C.6). A request that fails while the client is closing, as one it aborts (`FinTs3Protocol.beginClose`), leaves the
+     * dialog active instead, since the bank may have received it: its end follows under the next number. Not so where
+     * the request opened the dialog, whose ID only the answer tells.
      *
-     * Throws `FinTsProtocolError` for an app approval with a method of HITANS #6: the status request (process S) came with
-     * version 7, along with app approvals (PIN/TAN B.5.2).
+     * Only an answer that does not reject the whole message starts the idle time anew (`hasEnded`): a rejection may come
+     * from a bank that has ended the dialog without saying so.
      */
-    protected approvalIn(response: IncomingMessage3): Approval<IncomingMessage3> | undefined;
     private sendSegments;
-    /** The bank assigns the dialog ID in its answer to the first message. */
-    protected readDialogData(response: IncomingMessage3): void;
 }
 //# sourceMappingURL=dialog.d.ts.map

package/dist/v3/dialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dialog.d.ts","sourceRoot":"","sources":["../../src/v3/dialog.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW/C,mGAAmG;AACnG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,SAAS,CAAC;IAE1C,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC,0FAA0F;IAC1F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,CAAC;IAEnE;;;;;OAKG;IACH,IAAI,CAAC,OAAO,EAAE;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;QAC9B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;KACzB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACzB;AAED,wGAAwG;AACxG,qBAAa,YAAa,SAAQ,YAAY,CAAC,gBAAgB,EAAE,WAAW,CAAC;IAKzE,OAAO,CAAC,QAAQ,CAAC,IAAI;IAGrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAP5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,EAAE,CAAc;IAExB,OAAO;IAUP,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IAI1F,2EAA2E;IAC3E,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY;IAItD,SAAS,KAAK,cAAc,IAAI,IAAI,GAAG,SAAS,CAE/C;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED,sGAAsG;IACtG,OAAO,KAAK,UAAU,GAErB;IAED,KAAK,CAAC,WAAW,UAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IASrD;;;OAGG;IACH,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAAC,gBAAgB,CAAC;IAW/D;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,UAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOrE,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;cAKnC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxC,OAAO,CAAC,UAAU;IAIlB;;;;;OAKG;IACH,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,SAAS;IAoBxF,OAAO,CAAC,YAAY;IAgBpB,yEAAyE;IACzE,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI;CAG3D"}
+{"version":3,"file":"dialog.d.ts","sourceRoot":"","sources":["../../src/v3/dialog.ts"],"names":[],"mappings":"AAIA,OAAO,EAAiB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAiB/C,wGAAwG;AACxG,MAAM,WAAW,QAAQ,CAAC,CAAC;IACzB,8BAA8B;IAC9B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IAEjC,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAEhD,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAEvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,+GAA+G;IAC/G,QAAQ,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;CAC9D;AAED;;;GAGG;AACH,qBAAa,YAAY;IAUrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAb5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,KAAK,CAAS;IAEtB,8GAA8G;IAC9G,OAAO,CAAC,UAAU,CAAqB;IAEvC,OAAO;IAUP,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;IAI5F,2EAA2E;IAC3E,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,YAAY;IAIxD,+DAA+D;IAC/D,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;OAKG;IACH,OAAO,KAAK,QAAQ,GAEnB;IAED,OAAO,KAAK,WAAW,GAMtB;IAED,0GAA0G;IAC1G,OAAO,KAAK,SAAS,GAEpB;IAED,sGAAsG;IACtG,OAAO,KAAK,UAAU,GAErB;IAED,uFAAuF;IACvF,KAAK,CAAC,WAAW,UAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IASrD;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;KACjD;IAWD;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,UAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAOrE,2FAA2F;IAC3F,IAAI,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAMnD;;;;OAIG;IACG,GAAG,IAAI,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAWlD,mGAAmG;IACnG,OAAO,IAAI,IAAI;IAIf;;;;;;;;OAQG;IACH,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC,GAAG,SAAS;IAgCnF,OAAO,CAAC,UAAU;IASlB;;;;;;;;;;;;;;;;;;OAkBG;YACW,YAAY;CAgC3B"}

package/dist/v3/dialog.js

@@ -1,63 +1,100 @@
 // Internal to the package, and named after the FinTS specification. Documentation is where the meaning is not evident.
-import { FinTsProtocolError } from '../core/errors.js';
-import { FeedbackCodes, hasCode } from '../core/feedback.js';
-import { requireBankParameters } from '../session/parameter-data.js';
-import { PinTanDialog } from '../session/pin-tan-dialog.js';
+import { FinTsError, FinTsProtocolError, FinTsTransportError, parseBankData } from '../core/errors.js';
+import { endsDialog, FeedbackCodes, hasCode, hasErrors } from '../core/feedback.js';
+import { challengeText, TanChallenge } from '../tan/challenge.js';
 import { TanMethod } from '../tan/tan-models.js';
 import { IncomingMessage3 } from './message.js';
-import { Segments, TanResponse } from './segments.js';
+import { requireBankParameters } from './parameters.js';
+import { noReference, Segments, TanResponse } from './segments.js';
 /** Dialog ID of a dialog the bank has not answered yet, and customer system ID before synchronization. */
 const unassigned = '0';
 /** The first version of HKTAN that supports strong customer authentication. */
 const firstScaVersion = 6;
 /** The first version of HKTAN that supports app approvals, with the status request (process S). */
 const firstDecoupledVersion = 7;
-/** One FinTS 3.0 dialog: numbered messages under the dialog ID the bank assigns in its first answer. */
-export class FinTs3Dialog extends PinTanDialog {
-    host;
+/**
+ * How long a dialog may stay idle where the bank states no timeout: on the safe side, since a dialog given up too early
+ * only costs a new login, while one kept too long fails the next call.
+ */
+const defaultIdleLimitMs = 5 * 60_000;
+/**
+ * One FinTS 3.0 dialog: numbered messages under the dialog ID the bank assigns in its first answer, signed with a TAN
+ * method and medium, and the approvals the bank asks for. The `FinTs3Protocol` builds the messages and signs them.
+ */
+export class FinTs3Dialog {
+    protocol;
+    method;
+    tanMedium;
     anonymous;
     systemId;
     id = unassigned;
-    constructor(host, method, tanMedium, anonymous) {
-        super(method, tanMedium);
-        this.host = host;
+    messageNumber = 1;
+    ended = false;
+    /** When the bank last answered without rejecting the whole message, which shows it still knows the dialog. */
+    lastAnswer;
+    constructor(protocol, method, 
+    /** The TAN medium the messages name, where the method takes one. */
+    tanMedium, anonymous) {
+        this.protocol = protocol;
+        this.method = method;
+        this.tanMedium = tanMedium;
         this.anonymous = anonymous;
-        this.systemId = anonymous ? unassigned : (host.systemId ?? unassigned);
+        this.systemId = anonymous ? unassigned : (protocol.parameters.systemId ?? unassigned);
     }
-    static signed(host, method, tanMedium) {
-        return new FinTs3Dialog(host, method, tanMedium, false);
+    static signed(protocol, method, tanMedium) {
+        return new FinTs3Dialog(protocol, method, tanMedium, false);
     }
     /** A dialog without login, which only delivers the bank parameter data. */
-    static anonymous(host) {
-        return new FinTs3Dialog(host, TanMethod.oneStep, undefined, true);
-    }
-    get bankParameters() {
-        return this.host.bankParameters;
+    static anonymous(protocol) {
+        return new FinTs3Dialog(protocol, TanMethod.oneStep, undefined, true);
     }
+    /** Whether the bank knows this dialog and it has not ended. */
     get isActive() {
         return this.id !== unassigned && !this.hasEnded;
     }
+    /**
+     * Whether the dialog has ended, on either side.
+     *
+     * The bank ends a dialog idle for longer than its maximum timeout (HIBPA, Formals C.9), or five minutes where it
+     * states none. Such a dialog is neither used nor ended again: the bank would refuse any message in it.
+     */
+    get hasEnded() {
+        return this.ended || this.idleTooLong;
+    }
+    get idleTooLong() {
+        const last = this.lastAnswer;
+        const timeout = this.protocol.parameters.bankParameters?.bankInfo.maxTimeout;
+        // A timeout of 0 or below: the bank keeps idle dialogs without limit.
+        const limit = timeout === undefined ? defaultIdleLimitMs : timeout <= 0 ? undefined : timeout * 1000;
+        return last !== undefined && limit !== undefined && Date.now() - last > limit;
+    }
+    /** Whether the messages are signed with a two-step TAN method, so that the bank may ask for approvals. */
+    get isTwoStep() {
+        return !this.method.isOneStep;
+    }
     /** The version of the HKTAN segments: that of the HITANS segment the bank describes the method in. */
     get tanVersion() {
-        return this.bankParameters?.tanVersion(this.method) ?? firstScaVersion;
+        return this.protocol.parameters.bankParameters?.tanVersion(this.method) ?? firstScaVersion;
     }
+    /** Opens the dialog; with `synchronize` the bank also assigns a customer system ID. */
     start(synchronize = false) {
         if (synchronize)
             this.systemId = unassigned;
         return this.sendSegments([
-            ...this.host.initSegments(this.systemId),
+            ...this.protocol.initSegments(this.systemId),
             ...(this.isTwoStep ? [this.tanRequest('HKIDN')] : []),
             ...(synchronize ? [Segments.synchronization()] : []),
         ]);
     }
     /**
-     * Opens the dialog, asking strong authentication for `order` with a two-step method, then sends `order` in the next
-     * message.
+     * The messages that open the dialog and send `order` while no TAN medium is chosen yet, as for listing the media:
+     * `login` opens the dialog, asking strong authentication for `order` with a two-step method, and `order` sends the
+     * order in a message of its own.
      */
     startWith(order) {
         return {
             login: () => this.sendSegments([
-                ...this.host.initSegments(this.systemId),
+                ...this.protocol.initSegments(this.systemId),
                 ...(this.isTwoStep ? [this.tanRequest(order.type)] : []),
             ]),
             order: () => this.sendSegments([order]),
@@ -71,61 +108,138 @@ export class FinTs3Dialog extends PinTanDialog {
      */
     requestBankParameters(announceSca = false) {
         return this.sendSegments([
-            ...this.host.initSegments(unassigned, true),
+            ...this.protocol.initSegments(unassigned, true),
             ...(announceSca ? [Segments.tanProcess4(firstScaVersion, 'HKIDN')] : []),
         ]);
     }
+    /** Sends `order`, asking for strong customer authentication where the bank requires it. */
     send(order) {
-        const needsTan = this.isTwoStep && requireBankParameters(this.bankParameters).pinTan.requiresTan(order.type);
+        const needsTan = this.isTwoStep && requireBankParameters(this.protocol.parameters.bankParameters).pinTan.requiresTan(order.type);
         return this.sendSegments([order, ...(needsTan ? [this.tanRequest(order.type)] : [])]);
     }
-    async sendEnd() {
-        await this.sendSegments([Segments.dialogEnd(this.id)]);
+    /**
+     * Ends the dialog at the bank and returns the answer; `undefined` if the dialog is not active or the end failed.
+     *
+     * Bank and connection errors are ignored, since the bank may have ended the dialog on its side already.
+     */
+    async end() {
+        if (!this.isActive)
+            return undefined;
+        this.ended = true;
+        try {
+            return await this.sendSegments([Segments.dialogEnd(this.id)]);
+        }
+        catch (error) {
+            if (!(error instanceof FinTsError))
+                throw error;
+            return undefined;
+        }
     }
-    tanRequest(segmentType) {
-        return Segments.tanProcess4(this.tanVersion, segmentType, this.mediumName);
+    /** Forgets the dialog without contacting the bank, for example after the bank rejected the PIN. */
+    discard() {
+        this.ended = true;
     }
     /**
-     * The approval a HITAN segment of process 4 asks for, answered with HKTAN process 2 (TAN) or S (status).
+     * The approval `response`, the dialog's latest answer, asks for with return code 0030 (TAN) or 3955 (banking app):
+     * HITAN of process 4, answered with HKTAN process 2 (TAN) or S (status); `undefined` if it asks for none, or carries
+     * only the dummy challenge of a message the bank exempts from strong authentication.
      *
-     * Throws `FinTsProtocolError` for an app approval with a method of HITANS #6: the status request (process S) came with
-     * version 7, along with app approvals (PIN/TAN B.5.2).
+     * The bank has not executed the message then, so a request without a challenge is a `FinTsProtocolError`: read as
+     * done, it would report an empty result. So is an app approval with a method of HITANS #6: the status request
+     * (process S) came with version 7, along with app approvals (PIN/TAN B.5.2).
      */
-    approvalIn(response) {
-        const tan = tanResponseOf(response, '4');
-        if (tan === undefined || tan.isDummy)
+    approvalAskedIn(response) {
+        const feedback = response.feedback;
+        const decoupled = hasCode(feedback, FeedbackCodes.decoupledPending);
+        if (hasErrors(feedback) || !(hasCode(feedback, FeedbackCodes.tanRequired) || decoupled))
             return undefined;
-        if (hasCode(response.feedback, FeedbackCodes.decoupledPending) && this.tanVersion < firstDecoupledVersion) {
+        const tan = tanResponseOf(response, '4');
+        if (tan === undefined || tan.isDummy) {
+            throw new FinTsProtocolError('The bank asks for an approval, but sends no challenge');
+        }
+        if (decoupled && this.tanVersion < firstDecoupledVersion) {
             throw new FinTsProtocolError('The bank asks for an app approval, which needs HKTAN version 7');
         }
         const reference = tan.reference;
-        return this.approvalOf(response, {
-            reference,
-            message: tan.challenge,
-            hhdUc: tan.hhdUc,
-            validUntil: tan.validUntil,
-            tanMediumName: tan.mediumName,
+        // The placeholder the dialog that looks up the TAN media sends, and the bank may echo, is no medium.
+        const medium = tan.mediumName ?? this.tanMedium;
+        return {
+            challenge: TanChallenge.create({
+                method: this.method,
+                reference,
+                message: tan.challenge,
+                hhdUc: tan.hhdUc,
+                isDecoupled: decoupled || this.method.decoupled,
+                validUntil: tan.validUntil,
+                tanMediumName: medium === noReference ? undefined : medium,
+            }),
             submitTan: (value) => this.sendSegments([Segments.tanProcess2(this.tanVersion, reference)], value),
             checkStatus: () => this.sendSegments([Segments.tanProcessStatus(this.tanVersion, reference)]),
+            waitForPush: hasCode(feedback, FeedbackCodes.decoupledWaitForPush),
             // A status answer that the approval is still pending may carry new instructions (PIN/TAN B.4.2.2.1, step 2b).
-            instructionsIn: (status) => tanResponseOf(status, 'S')?.challenge,
-        });
-    }
-    sendSegments(segments, tan) {
-        return this.transmit((number) => this.host.post({
-            dialogId: this.id,
-            number,
-            segments,
-            signing: this.anonymous
-                ? undefined
-                : { securityFunction: this.method.securityFunction, systemId: this.systemId },
-            tan,
-        }), (answer) => IncomingMessage3.parse(answer));
-    }
-    /** The bank assigns the dialog ID in its answer to the first message. */
-    readDialogData(response) {
-        if (this.id === unassigned)
+            instructionsIn: (status) => challengeText(tanResponseOf(status, 'S')?.challenge),
+        };
+    }
+    tanRequest(segmentType) {
+        const medium = this.method.mediumRequirement === 'notAllowed' ? undefined : this.tanMedium;
+        return Segments.tanProcess4(this.tanVersion, segmentType, medium === undefined ? undefined : this.protocol.parameters.tanMediumToSend(medium));
+    }
+    /**
+     * Sends `segments`, with `tan` where they complete an approval, as the next message, and reads the bank's answer. The
+     * message counts once the bank has answered, whatever it answered.
+     *
+     * The bank assigns the dialog ID in its answer to the first message, so the answer to another user's first message
+     * passes for it (`ParameterStore.reportedUpdVersion`). Any other answer to another message fails with
+     * `FinTsProtocolError` before anything of it is kept: a relay or proxy that mixes up answers would hand the client
+     * another user's data, or a page of another query. Only the bank's dialog abort message may name the dialog or the
+     * message as unknown instead (`IncomingMessage3.aborts`), so that its text reaches the user.
+     *
+     * The dialog ends on the client's side, without a dialog end, where it is over for the bank: after a return code that
+     * ends it, such as 9800, a dialog abort message, a rejected opening message (Formals C.1.2), or a broken connection
+     * (C.6). A request that fails while the client is closing, as one it aborts (`FinTs3Protocol.beginClose`), leaves the
+     * dialog active instead, since the bank may have received it: its end follows under the next number. Not so where
+     * the request opened the dialog, whose ID only the answer tells.
+     *
+     * Only an answer that does not reject the whole message starts the idle time anew (`hasEnded`): a rejection may come
+     * from a bank that has ended the dialog without saying so.
+     */
+    async sendSegments(segments, tan) {
+        const number = this.messageNumber;
+        let answer;
+        try {
+            answer = await this.protocol.post({
+                dialogId: this.id,
+                number,
+                segments,
+                signing: this.anonymous
+                    ? undefined
+                    : { securityFunction: this.method.securityFunction, systemId: this.systemId },
+                tan,
+            });
+        }
+        catch (error) {
+            if (error instanceof FinTsTransportError) {
+                if (this.protocol.isClosing && this.id !== unassigned)
+                    this.messageNumber++;
+                else
+                    this.discard();
+            }
+            throw error;
+        }
+        this.messageNumber++;
+        const response = parseBankData(() => IncomingMessage3.parse(answer));
+        const assigned = this.id === unassigned ? undefined : this.id;
+        const aborted = response.aborts(number, assigned);
+        if (!aborted && !response.answers(number, assigned)) {
+            throw new FinTsProtocolError('The answer belongs to another message than the one sent');
+        }
+        if (assigned === undefined)
             this.id = response.dialogId ?? unassigned;
+        if (!response.messageRejected)
+            this.lastAnswer = Date.now();
+        if (aborted || endsDialog(response.feedback) || (number === 1 && response.messageRejected))
+            this.discard();
+        return response;
     }
 }
 /** The TAN part of `response` that answers TAN `process`. */

package/dist/v3/dialog.js.map

@@ -1 +1 @@
-{"version":3,"file":"dialog.js","sourceRoot":"","sources":["../../src/v3/dialog.ts"],"names":[],"mappings":"AAAA,uHAAuH;AAEvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGtD,0GAA0G;AAC1G,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,+EAA+E;AAC/E,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,mGAAmG;AACnG,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAqChC,wGAAwG;AACxG,MAAM,OAAO,YAAa,SAAQ,YAA2C;IAKxD;IAGA;IAPX,QAAQ,CAAS;IACjB,EAAE,GAAG,UAAU,CAAC;IAExB,YACmB,IAAsB,EACvC,MAAiB,EACjB,SAA6B,EACZ,SAAkB;QAEnC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QALR,SAAI,GAAJ,IAAI,CAAkB;QAGtB,cAAS,GAAT,SAAS,CAAS;QAGnC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,IAAsB,EAAE,MAAiB,EAAE,SAAkB;QACzE,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,SAAS,CAAC,IAAsB;QACrC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,IAAc,cAAc;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,sGAAsG;IACtG,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,WAAW,GAAG,KAAK;QACvB,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,KAAkB;QAC1B,OAAO;YACL,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,CAAC,YAAY,CAAC;gBAChB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;SACxC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,GAAG,KAAK;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC;YAC3C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAkB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAES,KAAK,CAAC,OAAO;QACrB,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IAEO,UAAU,CAAC,WAAmB;QACpC,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;OAKG;IACO,UAAU,CAAC,QAA0B;QAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;YAC1G,MAAM,IAAI,kBAAkB,CAAC,gEAAgE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAU,CAAC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC/B,SAAS;YACT,OAAO,EAAE,GAAG,CAAC,SAAS;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,aAAa,EAAE,GAAG,CAAC,UAAU;YAC7B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC;YAClG,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7F,8GAA8G;YAC9G,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS;SAClE,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,QAAgC,EAAE,GAAY;QACjE,OAAO,IAAI,CAAC,QAAQ,CAClB,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,SAAS;gBACrB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;YAC/E,GAAG;SACJ,CAAC,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED,yEAAyE;IAC/D,cAAc,CAAC,QAA0B;QACjD,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;YAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,IAAI,UAAU,CAAC;IACxE,CAAC;CACF;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,QAA0B,EAAE,OAAe;IAChE,OAAO,QAAQ;SACZ,OAAO,CAAC,OAAO,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"dialog.js","sourceRoot":"","sources":["../../src/v3/dialog.ts"],"names":[],"mappings":"AAAA,uHAAuH;AAEvH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGnE,0GAA0G;AAC1G,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,+EAA+E;AAC/E,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,mGAAmG;AACnG,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;GAGG;AACH,MAAM,kBAAkB,GAAG,CAAC,GAAG,MAAM,CAAC;AAuBtC;;;GAGG;AACH,MAAM,OAAO,YAAY;IAUJ;IACR;IAEA;IACQ;IAbX,QAAQ,CAAS;IACjB,EAAE,GAAG,UAAU,CAAC;IAChB,aAAa,GAAG,CAAC,CAAC;IAClB,KAAK,GAAG,KAAK,CAAC;IAEtB,8GAA8G;IACtG,UAAU,CAAqB;IAEvC,YACmB,QAAwB,EAChC,MAAiB;IAC1B,oEAAoE;IAC3D,SAA6B,EACrB,SAAkB;QAJlB,aAAQ,GAAR,QAAQ,CAAgB;QAChC,WAAM,GAAN,MAAM,CAAW;QAEjB,cAAS,GAAT,SAAS,CAAoB;QACrB,cAAS,GAAT,SAAS,CAAS;QAEnC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,QAAwB,EAAE,MAAiB,EAAE,SAAkB;QAC3E,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,SAAS,CAAC,QAAwB;QACvC,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,+DAA+D;IAC/D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED;;;;;OAKG;IACH,IAAY,QAAQ;QAClB,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC;IACxC,CAAC;IAED,IAAY,WAAW;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC;QAC7E,sEAAsE;QACtE,MAAM,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC;QACrG,OAAO,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC;IAChF,CAAC;IAED,0GAA0G;IAC1G,IAAY,SAAS;QACnB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,sGAAsG;IACtG,IAAY,UAAU;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC;IAC7F,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,WAAW,GAAG,KAAK;QACvB,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAAkB;QAI1B,OAAO;YACL,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,CAAC,YAAY,CAAC;gBAChB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;SACxC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,WAAW,GAAG,KAAK;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC;YACvB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC;YAC/C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAED,2FAA2F;IAC3F,IAAI,CAAC,KAAkB;QACrB,MAAM,QAAQ,GACZ,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClH,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,OAAO;QACL,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,QAA0B;QACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1G,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,kBAAkB,CAAC,uDAAuD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,qBAAqB,EAAE,CAAC;YACzD,MAAM,IAAI,kBAAkB,CAAC,gEAAgE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAU,CAAC;QACjC,qGAAqG;QACrG,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC;QAChD,OAAO;YACL,SAAS,EAAE,YAAY,CAAC,MAAM,CAAC;gBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS;gBACT,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,WAAW,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;gBAC/C,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,aAAa,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;aAC3D,CAAC;YACF,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC;YAClG,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YAC7F,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,oBAAoB,CAAC;YAClE,8GAA8G;YAC9G,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,SAAS,CAAC;SACjF,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,WAAmB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3F,OAAO,QAAQ,CAAC,WAAW,CACzB,IAAI,CAAC,UAAU,EACf,WAAW,EACX,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CACpF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACK,KAAK,CAAC,YAAY,CAAC,QAAgC,EAAE,GAAY;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,IAAI,MAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAChC,QAAQ,EAAE,IAAI,CAAC,EAAE;gBACjB,MAAM;gBACN,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,SAAS;oBACrB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;gBAC/E,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;oBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;;oBACvE,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAAC,yDAAyD,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,QAAQ,IAAI,UAAU,CAAC;QACtE,IAAI,CAAC,QAAQ,CAAC,eAAe;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,IAAI,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3G,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,6DAA6D;AAC7D,SAAS,aAAa,CAAC,QAA0B,EAAE,OAAe;IAChE,OAAO,QAAQ;SACZ,OAAO,CAAC,OAAO,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAChC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;AACxC,CAAC"}

package/dist/v3/message.d.ts

@@ -1,6 +1,5 @@
 import { BankMessage } from '../core/bank-info.js';
 import { FinTsFeedback } from '../core/feedback.js';
-import type { BankResponse } from '../session/protocol.js';
 import { type Segment, SegmentSpec } from './syntax.js';
 /** Signature data of a PIN/TAN message. */
 export interface PinTanCredentials {
@@ -14,12 +13,12 @@ export interface PinTanCredentials {
 /** A message to send, and the same message with PIN and TAN masked for logging. */
 export declare class OutgoingMessage {
     readonly bytes: Uint8Array;
-    /** The parts of the masked message, each decoded on its own as the bank's text is. */
-    private readonly maskedParts;
-    constructor(bytes: Uint8Array, 
-    /** The parts of the masked message, each decoded on its own as the bank's text is. */
-    maskedParts: readonly Uint8Array[]);
-    /** The message with PIN and TAN masked; decoded only when a logger asks for it. */
+    private readonly buildMasked;
+    constructor(bytes: Uint8Array, buildMasked: () => Uint8Array);
+    /**
+     * The message with PIN and TAN masked; built only when a logger asks for it. It is decoded as a whole, as the bank's
+     * text is, so a message that mixes ISO 8859-1 text with UTF-8 text (`encodeText`) shows all of it as ISO 8859-1.
+     */
     get masked(): string;
 }
 /**
@@ -28,7 +27,8 @@ export declare class OutgoingMessage {
  * With `security` the segments are signed with PIN and optional `tan` (HNSHK … HNSHA) and wrapped in the encryption
  * envelope (HNVSK, HNVSD) that PIN/TAN uses without actual encryption.
  *
- * The masked message states the sizes of its masked content, so that the log does not tell how long PIN and TAN are.
+ * The masked message is built as the message is, from the same time stamp and security control reference, with `***`
+ * for PIN and TAN, so that the log does not tell how long they are.
  */
 export declare function buildMessage(parts: {
     dialogId: string;
@@ -39,8 +39,9 @@ export declare function buildMessage(parts: {
     now?: Date;
 }): OutgoingMessage;
 /** A received message, with the segments of the encryption envelope unpacked. */
-export declare class IncomingMessage3 implements BankResponse {
+export declare class IncomingMessage3 {
     readonly segments: readonly Segment[];
+    /** The memory the message holds, in bytes: its length, and what its parts take beyond that. */
     readonly size: number;
     /**
      * Return codes for the whole message (HIRMG), then for single request segments (HIRMS).
@@ -49,16 +50,36 @@ export declare class IncomingMessage3 implements BankResponse {
      * approval reports on the order of an earlier message (PIN/TAN B.4.2.1).
      */
     readonly feedback: readonly FinTsFeedback[];
+    /** Whether the bank rejected the message as a whole (an error in HIRMG), rather than single orders in it. */
     readonly messageRejected: boolean;
     private constructor();
     /**
-     * Parses a message; throws `FormatError` if `data` is not a FinTS message, such as the HTML page of a proxy or a
-     * maintenance notice.
+     * Parses a message; throws `FormatError` if `data` is not one complete FinTS message, such as the HTML page of a
+     * proxy, a maintenance notice, a message cut short, which lacks the message trailer (HNHBS) at its end, or two
+     * messages run together, whose second would pass for part of the first. It does as well for more than one encrypted
+     * part (HNVSD), each of which `parseSegments` would allow as many data elements as the whole message.
+     *
+     * Its `size` counts the memory of the data elements it keeps along with its bytes, since a message of many short
+     * elements takes far more memory than bytes.
      */
     static parse(data: Uint8Array): IncomingMessage3;
     static combine(first: IncomingMessage3, second: IncomingMessage3): IncomingMessage3;
+    /** Free-text messages the bank addresses to the user. */
     get bankMessages(): BankMessage[];
+    /** The dialog ID the bank assigned, as `Segment.verbatim` reads it, to send back byte for byte. */
     get dialogId(): string | undefined;
+    /**
+     * Whether the message answers message `number` of the dialog `dialogId`: header and trailer carry that number, and the
+     * header names that message where it names the message it refers to (Bezugsnachricht). The dialog ID counts only once
+     * the bank has assigned one; before, `dialogId` is `undefined`, since every first message goes out under the same.
+     */
+    answers(number: number, dialogId: string | undefined): boolean;
+    /**
+     * Whether the message is the bank's dialog abort message (Formals B.7.6) for message `number` of the dialog
+     * `dialogId`: unencrypted, with nothing but the header, an error for the whole message (HIRMG) and the trailer. Its
+     * header names the dialog ID and the message number where the bank knows them, and `unbekannt` and 9999 where not.
+     */
+    aborts(number: number, dialogId: string | undefined): boolean;
     find(type: string): Segment | undefined;
     findAll(type: string): Segment[];
 }

package/dist/v3/message.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/v3/message.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAM3D,OAAO,EAAyB,KAAK,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAElG,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AA+DD,mFAAmF;AACnF,qBAAa,eAAe;IAExB,QAAQ,CAAC,KAAK,EAAE,UAAU;IAC1B,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFnB,KAAK,EAAE,UAAU;IAC1B,sFAAsF;IACrE,WAAW,EAAE,SAAS,UAAU,EAAE;IAGrD,mFAAmF;IACnF,IAAI,MAAM,IAAI,MAAM,CAEnB;CACF;AASD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,eAAe,CAelB;AAgFD,iFAAiF;AACjF,qBAAa,gBAAiB,YAAW,YAAY;IAYjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAZvB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAE5C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,OAAO;IAaP;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB;IAehD,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,GAAG,gBAAgB;IAInF,IAAI,YAAY,IAAI,WAAW,EAAE,CAEhC;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE;CAGjC;AAeD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAQ5D;AAaD,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAE/D"}
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/v3/message.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMpD,OAAO,EAIL,KAAK,OAAO,EACZ,WAAW,EAGZ,MAAM,aAAa,CAAC;AAErB,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAmED,mFAAmF;AACnF,qBAAa,eAAe;IAExB,QAAQ,CAAC,KAAK,EAAE,UAAU;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADnB,KAAK,EAAE,UAAU,EACT,WAAW,EAAE,MAAM,UAAU;IAGhD;;;OAGG;IACH,IAAI,MAAM,IAAI,MAAM,CAEnB;CACF;AAQD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,eAAe,CAWlB;AAgED,iFAAiF;AACjF,qBAAa,gBAAgB;IAazB,QAAQ,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE;IACrC,+FAA+F;IAC/F,QAAQ,CAAC,IAAI,EAAE,MAAM;IAdvB;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAE5C,6GAA6G;IAC7G,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,OAAO;IAcP;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB;IAgChD,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,GAAG,gBAAgB;IAInF,yDAAyD;IACzD,IAAI,YAAY,IAAI,WAAW,EAAE,CAEhC;IAED,mGAAmG;IACnG,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAED;;;;OAIG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;IAe9D;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;IAY7D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE;CAGjC;AAmBD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAS5D;AAaD,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAE/D"}