@coderoftime/fints 0.1.0 → 0.3.0

package/dist/core/balance.js

@@ -1,4 +1,5 @@
-import { formatIsoDate } from '../util/dates.js';
+import { copyDate, formatIsoDate } from '../util/dates.js';
+import { inspectCustom } from '../util/inspect.js';
 /** Account balance as reported by the bank. */
 export class Balance {
     /** The account the balance belongs to. */
@@ -28,18 +29,19 @@ export class Balance {
     bookingTime;
     /** The bank's name for the account, for example `Girokonto`. */
     productName;
+    /** Takes copies of the dates of `init`: each balance has its own, which no other one shares. */
     constructor(init) {
         this.account = init.account;
         this.booked = init.booked;
-        this.bookedAsOf = init.bookedAsOf;
-        this.bookedAsOfTime = init.bookedAsOfTime;
+        this.bookedAsOf = copyDate(init.bookedAsOf);
+        this.bookedAsOfTime = copyDate(init.bookedAsOfTime);
         this.pending = init.pending;
         this.creditLine = init.creditLine;
         this.available = init.available;
         this.used = init.used;
         this.overdraft = init.overdraft;
-        this.bookingDate = init.bookingDate;
-        this.bookingTime = init.bookingTime;
+        this.bookingDate = copyDate(init.bookingDate);
+        this.bookingTime = copyDate(init.bookingTime);
         this.productName = init.productName;
     }
     /**
@@ -49,5 +51,9 @@ export class Balance {
     toString() {
         return `Balance(${this.account.toString()}, ${formatIsoDate(this.bookedAsOf)})`;
     }
+    /** What Node.js's `util.inspect` and `console.log` show: `toString`, not the fields. */
+    [inspectCustom]() {
+        return this.toString();
+    }
 }
 //# sourceMappingURL=balance.js.map

package/dist/core/balance.js.map

@@ -1 +1 @@
-{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/core/balance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAoBjD,+CAA+C;AAC/C,MAAM,OAAO,OAAO;IAClB,0CAA0C;IACjC,OAAO,CAAU;IAE1B,+CAA+C;IACtC,MAAM,CAAS;IAExB;;;OAGG;IACM,UAAU,CAAO;IAE1B,8GAA8G;IACrG,cAAc,CAAmB;IAE1C,gFAAgF;IACvE,OAAO,CAAqB;IAErC,gCAAgC;IACvB,UAAU,CAAqB;IAExC,+CAA+C;IACtC,SAAS,CAAqB;IAEvC,mDAAmD;IAC1C,IAAI,CAAqB;IAElC,qDAAqD;IAC5C,SAAS,CAAqB;IAEvC,oGAAoG;IAC3F,WAAW,CAAmB;IAEvC,+GAA+G;IACtG,WAAW,CAAmB;IAEvC,gEAAgE;IACvD,WAAW,CAAqB;IAEzC,YAAY,IAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAClF,CAAC;CACF"}
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../src/core/balance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAoBnD,+CAA+C;AAC/C,MAAM,OAAO,OAAO;IAClB,0CAA0C;IACjC,OAAO,CAAU;IAE1B,+CAA+C;IACtC,MAAM,CAAS;IAExB;;;OAGG;IACM,UAAU,CAAO;IAE1B,8GAA8G;IACrG,cAAc,CAAmB;IAE1C,gFAAgF;IACvE,OAAO,CAAqB;IAErC,gCAAgC;IACvB,UAAU,CAAqB;IAExC,+CAA+C;IACtC,SAAS,CAAqB;IAEvC,mDAAmD;IAC1C,IAAI,CAAqB;IAElC,qDAAqD;IAC5C,SAAS,CAAqB;IAEvC,oGAAoG;IAC3F,WAAW,CAAmB;IAEvC,+GAA+G;IACtG,WAAW,CAAmB;IAEvC,gEAAgE;IACvD,WAAW,CAAqB;IAEzC,gGAAgG;IAChG,YAAY,IAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;IAClF,CAAC;IAED,wFAAwF;IACxF,CAAC,aAAa,CAAC;QACb,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/core/bank-info.d.ts

@@ -1,4 +1,8 @@
-/** General bank information from the bank parameter data (BPD). */
+import { inspectCustom } from '../util/inspect.js';
+/**
+ * General bank information from the bank parameter data (BPD). The maximum message size and the timeouts are
+ * `undefined` where the bank states none, or more than 9999, the four digits HIBPA allows.
+ */
 export declare class BankInfo {
     /** German bank code (BLZ). */
     readonly bankCode: string;
@@ -10,7 +14,7 @@ export declare class BankInfo {
     readonly supportedVersions: readonly string[];
     /** Languages the bank's messages come in, as codes the bank defines. */
     readonly languages: readonly string[];
-    /** Largest message in kilobytes (1024 bytes) the bank accepts; the client sends nothing larger. */
+    /** Largest message in kilobytes (1024 bytes) the bank accepts, `0` for no limit; the client sends nothing larger. */
     readonly maxMessageSize: number | undefined;
     /**
      * Time in seconds before which a client must not send a life-indicator message to keep an idle dialog open, `0` for
@@ -19,7 +23,7 @@ export declare class BankInfo {
     readonly minTimeout: number | undefined;
     /**
      * Time in seconds after which the bank will likely end a dialog without messages, `0` for no limit (HIBPA, Formals
-     * C.9). The client starts a new dialog for a call after that time.
+     * C.9). The client starts a new dialog for a call after that time, or after 5 minutes where the bank states none.
      */
     readonly maxTimeout: number | undefined;
     constructor(init: {
@@ -32,8 +36,15 @@ export declare class BankInfo {
         minTimeout?: number | undefined;
         maxTimeout?: number | undefined;
     });
+    /** What Node.js's `util.inspect` and `console.log` show: the bank code and the version of the parameter data. */
+    [inspectCustom](): string;
 }
-/** Free-text message sent by the bank during login. */
+/**
+ * Free-text message sent by the bank during login.
+ *
+ * Subject and text are the bank's, of any length: show them as text only, never as HTML (`innerHTML`, `v-html`), since
+ * they are no markup to trust.
+ */
 export declare class BankMessage {
     /** What the message is about. */
     readonly subject: string;
@@ -44,6 +55,12 @@ export declare class BankMessage {
     subject: string, 
     /** The message itself. */
     text: string);
+    /**
+     * Neither subject nor text, which may address the user, so that logs and crash reports do not collect them; show
+     * `subject` and `text` to the user.
+     */
     toString(): string;
+    /** What Node.js's `util.inspect` and `console.log` show: `toString`, not the fields. */
+    [inspectCustom](): string;
 }
 //# sourceMappingURL=bank-info.d.ts.map

package/dist/core/bank-info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bank-info.d.ts","sourceRoot":"","sources":["../../src/core/bank-info.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,qBAAa,QAAQ;IACnB,8BAA8B;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC,mGAAmG;IACnG,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE5B,IAAI,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACtC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACjC;CAUF;AAED,uDAAuD;AACvD,qBAAa,WAAW;IAEpB,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM;;IAHrB,iCAAiC;IACxB,OAAO,EAAE,MAAM;IACxB,0BAA0B;IACjB,IAAI,EAAE,MAAM;IAGvB,QAAQ,IAAI,MAAM;CAGnB"}
+{"version":3,"file":"bank-info.d.ts","sourceRoot":"","sources":["../../src/core/bank-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;GAGG;AACH,qBAAa,QAAQ;IACnB,8BAA8B;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,uBAAuB;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9C,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAEtC,qHAAqH;IACrH,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5C;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;gBAE5B,IAAI,EAAE;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACtC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACjC;IAWD,iHAAiH;IACjH,CAAC,aAAa,CAAC,IAAI,MAAM;CAG1B;AAED;;;;;GAKG;AACH,qBAAa,WAAW;IAEpB,iCAAiC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,0BAA0B;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM;;IAHrB,iCAAiC;IACxB,OAAO,EAAE,MAAM;IACxB,0BAA0B;IACjB,IAAI,EAAE,MAAM;IAGvB;;;OAGG;IACH,QAAQ,IAAI,MAAM;IAIlB,wFAAwF;IACxF,CAAC,aAAa,CAAC,IAAI,MAAM;CAG1B"}

package/dist/core/bank-info.js

@@ -1,4 +1,8 @@
-/** General bank information from the bank parameter data (BPD). */
+import { inspectCustom } from '../util/inspect.js';
+/**
+ * General bank information from the bank parameter data (BPD). The maximum message size and the timeouts are
+ * `undefined` where the bank states none, or more than 9999, the four digits HIBPA allows.
+ */
 export class BankInfo {
     /** German bank code (BLZ). */
     bankCode;
@@ -10,7 +14,7 @@ export class BankInfo {
     supportedVersions;
     /** Languages the bank's messages come in, as codes the bank defines. */
     languages;
-    /** Largest message in kilobytes (1024 bytes) the bank accepts; the client sends nothing larger. */
+    /** Largest message in kilobytes (1024 bytes) the bank accepts, `0` for no limit; the client sends nothing larger. */
     maxMessageSize;
     /**
      * Time in seconds before which a client must not send a life-indicator message to keep an idle dialog open, `0` for
@@ -19,7 +23,7 @@ export class BankInfo {
     minTimeout;
     /**
      * Time in seconds after which the bank will likely end a dialog without messages, `0` for no limit (HIBPA, Formals
-     * C.9). The client starts a new dialog for a call after that time.
+     * C.9). The client starts a new dialog for a call after that time, or after 5 minutes where the bank states none.
      */
     maxTimeout;
     constructor(init) {
@@ -32,8 +36,17 @@ export class BankInfo {
         this.minTimeout = init.minTimeout;
         this.maxTimeout = init.maxTimeout;
     }
+    /** What Node.js's `util.inspect` and `console.log` show: the bank code and the version of the parameter data. */
+    [inspectCustom]() {
+        return `BankInfo(${this.bankCode}, BPD version ${this.bpdVersion})`;
+    }
 }
-/** Free-text message sent by the bank during login. */
+/**
+ * Free-text message sent by the bank during login.
+ *
+ * Subject and text are the bank's, of any length: show them as text only, never as HTML (`innerHTML`, `v-html`), since
+ * they are no markup to trust.
+ */
 export class BankMessage {
     subject;
     text;
@@ -45,8 +58,16 @@ export class BankMessage {
         this.subject = subject;
         this.text = text;
     }
+    /**
+     * Neither subject nor text, which may address the user, so that logs and crash reports do not collect them; show
+     * `subject` and `text` to the user.
+     */
     toString() {
-        return `${this.subject}: ${this.text}`;
+        return 'BankMessage(…)';
+    }
+    /** What Node.js's `util.inspect` and `console.log` show: `toString`, not the fields. */
+    [inspectCustom]() {
+        return this.toString();
     }
 }
 //# sourceMappingURL=bank-info.js.map

package/dist/core/bank-info.js.map

@@ -1 +1 @@
-{"version":3,"file":"bank-info.js","sourceRoot":"","sources":["../../src/core/bank-info.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,OAAO,QAAQ;IACnB,8BAA8B;IACrB,QAAQ,CAAS;IAE1B,uBAAuB;IACd,IAAI,CAAqB;IAElC,sEAAsE;IAC7D,UAAU,CAAS;IAE5B,0DAA0D;IACjD,iBAAiB,CAAoB;IAE9C,wEAAwE;IAC/D,SAAS,CAAoB;IAEtC,mGAAmG;IAC1F,cAAc,CAAqB;IAE5C;;;OAGG;IACM,UAAU,CAAqB;IAExC;;;OAGG;IACM,UAAU,CAAqB;IAExC,YAAY,IASX;QACC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,OAAO,WAAW;IAGX;IAEA;IAJX;IACE,iCAAiC;IACxB,OAAe;IACxB,0BAA0B;IACjB,IAAY;QAFZ,YAAO,GAAP,OAAO,CAAQ;QAEf,SAAI,GAAJ,IAAI,CAAQ;IACpB,CAAC;IAEJ,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"bank-info.js","sourceRoot":"","sources":["../../src/core/bank-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;GAGG;AACH,MAAM,OAAO,QAAQ;IACnB,8BAA8B;IACrB,QAAQ,CAAS;IAE1B,uBAAuB;IACd,IAAI,CAAqB;IAElC,sEAAsE;IAC7D,UAAU,CAAS;IAE5B,0DAA0D;IACjD,iBAAiB,CAAoB;IAE9C,wEAAwE;IAC/D,SAAS,CAAoB;IAEtC,qHAAqH;IAC5G,cAAc,CAAqB;IAE5C;;;OAGG;IACM,UAAU,CAAqB;IAExC;;;OAGG;IACM,UAAU,CAAqB;IAExC,YAAY,IASX;QACC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,iHAAiH;IACjH,CAAC,aAAa,CAAC;QACb,OAAO,YAAY,IAAI,CAAC,QAAQ,iBAAiB,IAAI,CAAC,UAAU,GAAG,CAAC;IACtE,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IAGX;IAEA;IAJX;IACE,iCAAiC;IACxB,OAAe;IACxB,0BAA0B;IACjB,IAAY;QAFZ,YAAO,GAAP,OAAO,CAAQ;QAEf,SAAI,GAAJ,IAAI,CAAQ;IACpB,CAAC;IAEJ;;;OAGG;IACH,QAAQ;QACN,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,wFAAwF;IACxF,CAAC,aAAa,CAAC;QACb,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/core/client.d.ts

@@ -3,6 +3,7 @@ import type { TanMedium, TanMethod } from '../tan/tan-models.js';
 import type { Account } from './account.js';
 import type { Balance } from './balance.js';
 import type { BankInfo, BankMessage } from './bank-info.js';
+import type { FinTsLoginRefusedError } from './errors.js';
 import type { FinTsFeedback } from './feedback.js';
 import type { Transaction, TransactionFormat } from './transaction.js';
 import type { FinTsTransport } from './transport.js';
@@ -20,6 +21,11 @@ export type WarningHandler = (warning: FinTsFeedback) => void;
  * An error thrown by a callback that only informs the app (`onBankMessage`, `onWarning`, `logger`) fails the call once
  * the call's exchange with the bank is over, so that it cannot break off a dialog half-way; an error of the call itself
  * takes precedence.
+ *
+ * The client reads the options once, when it is built: changing them later changes nothing. Its constructor throws
+ * `TypeError` for a `tanCallback` that is no function, another callback that is neither a function nor `undefined` or
+ * `null`, which mean none, a `state` that is neither a string nor either of these, and a `transport` without the
+ * functions `post` and `close`.
  */
 export interface FinTsClientOptions {
     /** Called whenever the bank asks for a TAN or an app approval. */
@@ -28,19 +34,31 @@ export interface FinTsClientOptions {
     tanMethodSelector?: TanMethodSelector;
     /** Picks the TAN medium when the method needs one and the user has several; the first is used without it. */
     tanMediumSelector?: TanMediumSelector;
-    /** Receives the free-text messages the bank sends during login. */
+    /**
+     * Receives the free-text messages the bank sends during login. How many there are and how long they are is the
+     * bank's choice, without a limit, so bound what the app shows of them; show their text as text, never as markup.
+     */
     onBankMessage?: BankMessageHandler;
     /**
      * Receives the bank's warnings, such as 3951 (switch to another TAN method), but not those the client acts on itself,
-     * such as 3040 (more data follow). Show them to the user with code and text, as the specification asks.
+     * such as 3040 (more data follow). Show them to the user with code and text, as the specification asks. How many
+     * there are and how long they are is the bank's choice, without a limit, so bound what the app shows of them; show
+     * their text as text, never as markup.
      */
     onWarning?: WarningHandler;
     /** Receives every FinTS message with PIN and TAN masked, for diagnosis; the messages contain account data. */
     logger?: MessageLogger;
     /**
-     * The `FinTsClient.state` of a previous session, which skips the bank setup steps.
+     * The `FinTsClient.state` of a previous session, which skips the bank setup steps. A refused login in it keeps the
+     * client from sending the PIN (`FinTsClient.loginRefusal`).
+     *
+     * A state belongs to one client at a time: restore the clients of one bank user one after another, each from the
+     * state the one before saved, never two at once from the same state. The state saved last wins, and could lift a
+     * refused login the other client saved.
      *
-     * A state saved for another user or bank is ignored.
+     * A state saved for another user or bank is ignored, and of one saved for another server of the bank, such as before
+     * the bank moved its FinTS URL, or for FinTS 4.1 by the Dart package, only the refused login and the count of logins
+     * whose answer was lost hold.
      */
     state?: string | undefined;
     /**
@@ -62,35 +80,67 @@ export interface TransactionQuery {
 /**
  * Read access to a bank account over FinTS.
  *
- * All calls share one bank dialog, so strong authentication happens once per session. Calls run one after another; call
- * `close` when done.
+ * A call logs in where it needs to, which sends the PIN and may ask the callbacks for a TAN method, a TAN medium and an
+ * approval. Calls share one bank dialog while it is open, so that the approval of its login serves them all. The next
+ * call logs in anew, which may ask for another approval, once the dialog has idled longer than `BankInfo.maxTimeout`,
+ * after `selectTanMethod` and `clearLoginRefusal`, once the bank has ended the dialog, and after a message failed with
+ * another error than the bank's (`FinTsBankError`), such as a cancelled approval or a broken connection. Calls run one
+ * after another; call `close` when done.
  *
  * A callback in `FinTsClientOptions` must not wait for another call of its client, which would wait for the running
- * call. On Node.js, Deno and Bun such a call fails with `FinTsStateError`; elsewhere it would wait forever. `close` works
- * from anywhere.
+ * call. On Node.js, Deno 2.1 and Bun 1.2.6 or later such a call fails with `FinTsStateError`; elsewhere it waits
+ * forever. `close` works from anywhere.
  */
 export interface FinTsClient {
     /**
      * Serialized session data: bank and user parameters, customer system ID, the TAN methods the user may use, the chosen
-     * TAN method and medium, and the SEPA account list.
+     * TAN method and medium, the SEPA account list, and a refused login (`loginRefusal`) with the count of logins whose
+     * answer was lost.
      *
-     * Contains no PIN or TAN, but account details, so store it encrypted.
+     * Contains no PIN or TAN, but the user ID and customer ID, the customer system ID, the account holders' names and
+     * account details, and after a refused login the texts and parameters of the bank's return codes as the bank sent
+     * them, which for return code 3072 are the new login data; so store it encrypted. It holds what this client knows,
+     * and replaces the state it was restored from: one client at a time per state (`FinTsClientOptions.state`).
      */
     readonly state: string;
+    /**
+     * The refused login that keeps the client from sending the PIN again (`FinTsLoginRefusedError`); `undefined` while
+     * there is none. It is kept in `state` until `clearLoginRefusal`.
+     */
+    readonly loginRefusal: FinTsLoginRefusedError | undefined;
     /** Security function code of the TAN method in use, for example `942`; `undefined` before the first login. */
     readonly selectedTanMethod: string | undefined;
-    /** Name of the TAN medium sent to the bank, if the method needs one. */
+    /**
+     * Name of the TAN medium in use, if the method needs one, as the app passed it or the bank listed it; one the app
+     * passed goes out without blanks at either end.
+     */
     readonly selectedTanMedium: string | undefined;
     /**
      * Switches to another TAN method, and optionally TAN medium, for the following calls.
      *
      * Ends the current dialog, so the next call logs in again with the new method. If the bank does not offer
-     * `securityFunction`, the client picks another method at that login.
+     * `securityFunction`, the client picks another method at that login. Without `tanMedium`, also for `null`, that login
+     * looks the TAN media up where the method needs one. Rejects with `TypeError`, before it ends the dialog, for a
+     * `securityFunction` or `tanMedium` that is no string.
      */
     selectTanMethod(securityFunction: string, tanMedium?: string): Promise<void>;
+    /**
+     * Lifts `loginRefusal` and signs with `pin` from now on. Ends the current dialog, so that the next call logs in with
+     * it, and forgets the TAN medium, which the bank may have refused, such as that of a phone the user has replaced: where
+     * the TAN method needs one, the next call looks the media up anew and asks the `tanMediumSelector`.
+     *
+     * Pass a PIN the user has entered after the refusal, never a stored one unasked: banks lock the access after a few
+     * failed logins. Rejects with `TypeError` for a PIN the client cannot send, as its constructor throws, and with the
+     * refusal where it is a `FinTsLoginDataChangedError`: only a new client with the new login data can log in.
+     */
+    clearLoginRefusal(pin: string): Promise<void>;
     /** General information about the bank, from the bank parameter data. */
     getBankInfo(): Promise<BankInfo>;
-    /** TAN procedures the bank allows for this user. */
+    /**
+     * TAN procedures the bank allows for this user, which the synchronization reports. Where the session has no customer
+     * system ID yet, as without a saved state, this call logs in for it: it may ask `tanMethodSelector` where the bank
+     * refuses the one-step method, and `tanCallback` for an approval.
+     */
     getTanMethods(): Promise<TanMethod[]>;
     /** TAN devices registered for this user. */
     getTanMedia(): Promise<TanMedium[]>;
@@ -102,7 +152,9 @@ export interface FinTsClient {
      * Where the user parameter data carry the complete balance (account extension), possibly from the saved `state`, it
      * comes from there without a query; `Balance.bookedAsOf` tells the day it states.
      *
-     * Throws `FinTsUnsupportedError`, without asking the bank, where the parameter data rule the query out.
+     * Rejects with `FinTsUnsupportedError` where the parameter data rule the query out, without sending it; the login,
+     * which delivers them, may have gone out. Rejects with `TypeError`, before it waits for other calls, for an `account`
+     * that is no `Account`, such as one written to JSON and read back.
      */
     getBalance(account: Account): Promise<Balance>;
     /**
@@ -110,16 +162,26 @@ export interface FinTsClient {
      * the same day in the bank's order.
      *
      * Only the local calendar day counts, and a day in the future counts as today. Banks typically ask for a TAN when
-     * `from` is more than 90 days ago; see also `Account.dataStatus`. Throws `TypeError` if `from` lies on a day after
-     * `to`, and `FinTsUnsupportedError`, without asking the bank, where the parameter data rule the query out.
+     * `from` is more than 90 days ago; see also `Account.dataStatus`. Rejects with `TypeError`, before it waits for other
+     * calls, if `account` is no `Account`, `from` or `to` is no valid `Date`, `from` lies on a day after `to` or `format`
+     * is no `TransactionFormat`, and with `FinTsUnsupportedError`, without sending the query, where the parameter data
+     * rule it out; the login may have gone out.
      */
     getTransactions(account: Account, query?: TransactionQuery): Promise<Transaction[]>;
     /**
-     * Ends the bank dialog and releases the connection.
+     * Ends the bank dialog, releases the connection and forgets the PIN.
      *
      * A running call stops at its next step, also while it waits for a TAN, an app approval or a selection, and fails with
-     * `FinTsStateError`, as do all later calls. A request already on its way is awaited, at most for the transport's
-     * timeout.
+     * `FinTsStateError`, as do all later calls. A request already on its way has five seconds to bring its answer, which
+     * counts as any other: the logger gets it, and the client keeps what it brings, such as the parameter data or the
+     * customer system ID. The call fails with `FinTsStateError` all the same, also where that answer completes it, unless
+     * the answer brings an error, such as a rejected PIN, which the call fails with instead. After those five seconds the
+     * client stops waiting for the request, whatever the transport, and aborts it where the transport supports that, as
+     * `HttpTransport` does: the call fails with `FinTsTransportError` then, as after a broken connection, and an aborted
+     * login counts as one whose answer was lost. After the request, the call sends nothing but the end of its
+     * dialogs, that of an aborted message included, unless the message opened it. These dialog ends have five seconds
+     * once that request, if any, is over: then they are aborted the same way, and none goes out later, so that a bank
+     * that has stopped answering holds up neither `close` nor the call for longer.
      */
     close(): Promise<void>;
 }

package/dist/core/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEvD,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAEnF,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,WAAW,EAAE,WAAW,CAAC;IAEzB,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,6GAA6G;IAC7G,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,mEAAmE;IACnE,aAAa,CAAC,EAAE,kBAAkB,CAAC;IAEnC;;;OAGG;IACH,SAAS,CAAC,EAAE,cAAc,CAAC;IAE3B,8GAA8G;IAC9G,MAAM,CAAC,EAAE,aAAa,CAAC;IAEvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,8GAA8G;IAC9G,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,2DAA2D;IAC3D,EAAE,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACtB,gDAAgD;IAChD,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,8GAA8G;IAC9G,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C;;;;;OAKG;IACH,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E,wEAAwE;IACxE,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjC,oDAAoD;IACpD,aAAa,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEtC,4CAA4C;IAC5C,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEpC,sFAAsF;IACtF,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAElC;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C;;;;;;;OAOG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEpF;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,UAAU,CAAC;AAEvD,4DAA4D;AAC5D,MAAM,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAEnF,+DAA+D;AAC/D,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;AAE9D;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,WAAW,EAAE,WAAW,CAAC;IAEzB,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC,6GAA6G;IAC7G,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAEtC;;;OAGG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IAEnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,CAAC;IAE3B,8GAA8G;IAC9G,MAAM,CAAC,EAAE,aAAa,CAAC;IAEvB;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,8GAA8G;IAC9G,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxB,2DAA2D;IAC3D,EAAE,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACtB,gDAAgD;IAChD,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAE1D,8GAA8G;IAC9G,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C;;;;;;;OAOG;IACH,eAAe,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7E;;;;;;;;OAQG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9C,wEAAwE;IACxE,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjC;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEtC,4CAA4C;IAC5C,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEpC,sFAAsF;IACtF,WAAW,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAElC;;;;;;;;;OASG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE/C;;;;;;;;;OASG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAEpF;;;;;;;;;;;;;;OAcG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/core/config.d.ts

@@ -1,33 +1,40 @@
-/** Numeric country code of Germany (ISO 3166), where FinTS banks are. */
+import { inspectCustom } from '../util/inspect.js';
+/**
+ * The country code FinTS gives Germany, where FinTS banks are: the ISO 3166 code of the Federal Republic before 1990,
+ * not today's `276`.
+ */
 export declare const defaultCountryCode = "280";
 /** What `FinTsConfig` takes. */
 export interface FinTsConfigInit {
-    /** The bank's FinTS PIN/TAN endpoint; must be https. */
+    /** The bank's FinTS PIN/TAN endpoint; must be https, without user name or password. */
     url: string | URL;
-    /** German bank code (BLZ). */
+    /** Bank code: for a German bank its BLZ, eight digits. */
     bankCode: string;
-    /** Login name (Benutzerkennung / Legitimations-ID). */
+    /** Login name (Benutzerkennung / Legitimations-ID); at most 30 characters. */
     userId: string;
-    /** Customer ID; defaults to `userId`. */
+    /** Customer ID, at most 30 characters; defaults to `userId`. */
     customerId?: string | undefined;
     /** FinTS product registration number from the Deutsche Kreditwirtschaft; at most 25 characters. */
     productId: string;
     /** Version of the app as registered with the product; at most five characters. `1.0` by default. */
     productVersion?: string;
-    /** Numeric country code of the bank, `280` (Germany) by default. */
+    /** Country code of the bank, three digits: `280`, the default, for Germany. */
     countryCode?: string;
     /**
      * Allows plain http for the loopback addresses `localhost`, `127.x.x.x` and `::1`, for tests against a local server.
      *
-     * Any other host must use https, whatever this says: the PIN travels with every message.
+     * Any other host must use https, whatever this says: the PIN travels with every message. The default `HttpTransport`
+     * sends plain http wherever the global `fetch` sends it, though, as it sends https: a replacement of that `fetch` and
+     * a global dispatcher get the PIN, and a proxy that `fetch` takes from the environment sees it unencrypted. See
+     * `HttpTransport`.
      */
     allowInsecureUrl?: boolean;
 }
-/** Connection and login data for one bank user. */
+/** Connection and login data for one bank user; frozen, so that the client sends what the constructor has checked. */
 export declare class FinTsConfig {
-    /** Numeric country code of Germany (ISO 3166), where FinTS banks are. */
+    /** The country code FinTS gives Germany, where FinTS banks are: `280`, not today's ISO 3166 code `276`. */
     static readonly defaultCountryCode = "280";
-    readonly url: URL;
+    private readonly href;
     readonly bankCode: string;
     readonly userId: string;
     private readonly explicitCustomerId;
@@ -36,24 +43,37 @@ export declare class FinTsConfig {
     readonly countryCode: string;
     readonly allowInsecureUrl: boolean;
     /**
-     * Throws `TypeError` if `url` is not a valid URL, has no host or is not https, unless `allowInsecureUrl` is set and
-     * `url` is a loopback address, and if a login detail or the product is empty: the bank would refuse the login.
+     * Throws `TypeError` if `url` is not a valid URL, has no host, holds a user name or password, or is not https, unless
+     * `allowInsecureUrl` is set and `url` is a loopback address. Throws as well where the bank would refuse the login: for
+     * a login or product detail that is empty, has characters FinTS 3.0 cannot send (it uses ISO 8859-1, so `€` and most
+     * non-Latin letters are not possible) or is longer than its field (30 characters for the bank code, the user ID and
+     * the customer ID, 25 for the product ID, 5 for its version), for a country code of other than three digits, and for
+     * a German bank code of other than eight. Throws as well for a detail of another type than `FinTsConfigInit` names,
+     * such as a number as `bankCode` or the string `'false'` as `allowInsecureUrl`; `null` counts as a detail not given.
+     * The message leaves out the value.
+     *
+     * Drops leading and trailing blanks of the login details and the product, as FinTS sends them without (Formals
+     * B.4.1): `'alice '` is the user `alice`, also for a saved state.
      */
     constructor(init: FinTsConfigInit);
+    /**
+     * The bank's FinTS PIN/TAN endpoint, as checked by the constructor. A new `URL` on each access, so that changing one
+     * cannot change where the client posts the PIN.
+     */
+    get url(): URL;
     /** Customer ID; defaults to `userId`. */
     get customerId(): string;
+    /** What Node.js's `util.inspect` and `console.log` show: the bank code, neither the login data nor the product ID. */
+    [inspectCustom](): string;
 }
+/** `text`, unless it has characters FinTS 3.0 cannot send (ISO 8859-1 only); the message leaves out the value. */
+export declare function requireLatin1(text: string, name: string): string;
 /** The host of `url` without the brackets of an IPv6 address, as `URL` writes it. */
 export declare function hostOf(url: URL): string;
 /**
- * Throws `TypeError` unless `url` names a host and uses https: the PIN travels with every message.
- *
- * With `allowInsecure`, http is accepted for loopback hosts only.
- */
-export declare function requireSecureUrl(url: URL, allowInsecure?: boolean): void;
-/**
- * Throws `TypeError` for an empty PIN, which the bank would count as a failed attempt, and for one with leading or
- * trailing blanks: FinTS values carry none (Formals B.4.1), so such a PIN could only go out changed.
+ * `pin`, unless FinTS 3.0 cannot send it: throws `TypeError` for an empty PIN, which the bank would count as a failed
+ * attempt, for one with leading or trailing blanks, which would go out without them since FinTS values carry none
+ * (Formals B.4.1), and for one with characters outside ISO 8859-1.
  *
  * The message leaves out the value.
  */

package/dist/core/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,wDAAwD;IACxD,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mGAAmG;IACnG,SAAS,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,mDAAmD;AACnD,qBAAa,WAAW;IACtB,yEAAyE;IACzE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,SAAsB;IAExD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC;;;OAGG;gBACS,IAAI,EAAE,eAAe;IA4BjC,yCAAyC;IACzC,IAAI,UAAU,IAAI,MAAM,CAEvB;CACF;AAMD,qFAAqF;AACrF,wBAAgB,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAGvC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,UAAQ,GAAG,IAAI,CAItE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUpG"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAWxC,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,mGAAmG;IACnG,SAAS,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,sHAAsH;AACtH,qBAAa,WAAW;IACtB,2GAA2G;IAC3G,MAAM,CAAC,QAAQ,CAAC,kBAAkB,SAAsB;IAExD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqB;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC;;;;;;;;;;;;OAYG;gBACS,IAAI,EAAE,eAAe;IA+BjC;;;OAGG;IACH,IAAI,GAAG,IAAI,GAAG,CAEb;IAED,yCAAyC;IACzC,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,sHAAsH;IACtH,CAAC,aAAa,CAAC,IAAI,MAAM;CAG1B;AAcD,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED,qFAAqF;AACrF,wBAAgB,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAGvC;AAeD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAUpG"}