@maschinenlesbar.org/marktstammdatenregister-cli 0.0.6 → 0.0.8

package/dist/src/client/engine.d.ts

@@ -20,9 +20,13 @@ export interface EngineOptions {
      * only idle gaps (0 disables; capped at MAX_TIMEOUT_MS, 2^31 - 1 ms).
      */
     timeoutMs?: number;
-    /** Number of automatic retries for transient (429/503) responses. */
+    /**
+     * Number of automatic retries for transient (429/503) responses. Each waits the
+     * response's `Retry-After` (up to `MAX_RETRY_AFTER_MS`; a longer one is not
+     * retried), or else `retryDelayMs * attempt`.
+     */
     maxRetries?: number;
-    /** Base backoff between retries in milliseconds (grows linearly). */
+    /** Base backoff between retries in milliseconds (grows linearly); used without a Retry-After. */
     retryDelayMs?: number;
     /**
      * Hard cap on response body size in bytes (defends against memory exhaustion
@@ -33,17 +37,56 @@ export interface EngineOptions {
     sleep?: (ms: number) => Promise<void>;
 }
 /**
- * Strip control characters (C0 except tab/newline, DEL, and C1) out of a string
- * that originates in an attacker-controlled response — the error `detail` and the
- * echoed Content-Type. `JSON.parse` decodes an escaped ESC in an error body into a
- * real ESC byte, so without this a hostile/MITM'd endpoint could drive ANSI/OSC
- * escape sequences into the user's terminal when the message is printed to stderr.
- * This only needs to cover text that flows into an error message: the CLI's JSON
- * output is escaped separately (`escapeControlChars` in cli/shared.ts), as
- * `JSON.stringify` alone leaves DEL and the C1 range raw. Implemented as a code-point
- * filter so no raw control byte ever appears in this source file.
+ * Longest `Retry-After` the engine waits out before retrying a 429/503. When the
+ * server asks for longer, the engine does not retry at all and surfaces the error at
+ * once: retrying early would only land inside the window the server asked us to wait
+ * out, and a hostile value must not stall the CLI.
+ */
+export declare const MAX_RETRY_AFTER_MS = 30000;
+/**
+ * Parse a `Retry-After` header into a delay in milliseconds (RFC 9110 §10.2.3):
+ * either delay-seconds (`"120"`) or an HTTP-date (`"Wed, 21 Oct 2026 07:28:00 GMT"`,
+ * turned into the time left from `now`; a date in the past gives 0).
+ *
+ * Returns `undefined` when the header is absent or malformed — negative (`"-1"`),
+ * fractional (`"1.5"`), padded inside, any other date format — so the caller falls
+ * back to its own backoff. The strict patterns matter: `Date.parse` alone would
+ * read `"1.5"` as a date in 2001 and retry at once.
+ */
+export declare function parseRetryAfter(header: string | string[] | undefined, now?: number): number | undefined;
+/**
+ * True for the Unicode bidirectional formatting characters: ALM (U+061C), LRM/RLM
+ * (U+200E/U+200F), the embeddings and overrides U+202A–U+202E and the isolates
+ * U+2066–U+2069. A terminal applies them to the text that follows, so an override
+ * in server text can reorder what the user sees ("Trojan Source" spoofing).
+ */
+export declare function isBidiControl(code: number): boolean;
+/**
+ * Make a string that originates in an attacker-controlled response — the error
+ * `detail` (a JSON field, an `Errors` value or a text snippet) and the echoed
+ * Content-Type — safe to print into an error message on stderr:
+ *
+ * - C0 and C1 controls and DEL are dropped. `JSON.parse` decodes an escaped ESC into
+ *   a real ESC byte; printed raw, a hostile or MITM'd endpoint could drive ANSI/OSC
+ *   sequences into the terminal.
+ * - Bidi formatting characters (isBidiControl) are dropped, so server text cannot
+ *   reorder the visible message.
+ * - Every run of whitespace — newlines, tabs, U+2028/U+2029 included — becomes one
+ *   space and the ends are trimmed, so the text stays on one line and a server
+ *   cannot forge an `Error:` line of its own.
+ *
+ * The CLI's JSON output is escaped separately (`escapeControlChars` in
+ * cli/shared.ts): `JSON.stringify` alone leaves DEL, C1 and bidi characters raw.
+ * Written as a code-point filter so no raw control byte appears in this source.
  */
 export declare function sanitizeServerText(text: string): string;
+/**
+ * Describe a Kendo `Errors` value for an error message: a string as is; otherwise
+ * (a ModelState object such as `{"": {"errors": ["Invalid filter"]}}`, or an array)
+ * every string found in it, sanitised, blanks and repeats dropped, joined "; ".
+ * Returns `undefined` when nothing readable is left.
+ */
+export declare function describeMastrErrors(errors: unknown): string | undefined;
 export declare class RequestEngine {
     private readonly baseUrl;
     private readonly transport;
@@ -63,7 +106,11 @@ export declare class RequestEngine {
      * base URL bouncing to a portal page) surfaces as an error.
      */
     request(path: string, query?: QueryParams, accept?: string): Promise<RawResponse>;
-    /** GET a path with query params and parse the JSON reply into `T`. */
+    /**
+     * GET a path with query params and parse the JSON reply into `T`. Every MaStR
+     * endpoint answers with a JSON document, so an empty body or a 204 is a
+     * `MastrParseError`, never a silent `null`.
+     */
     getJson<T>(path: string, query?: QueryParams): Promise<T>;
     private toApiError;
 }

package/dist/src/client/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAKA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAGhE,eAAO,MAAM,gBAAgB,iDAAiD,CAAC;AAG/E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQvD;AAyBD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD,YAAY,OAAO,GAAE,aAAkB,EAWtC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM,CAIlD;IAED;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,SAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAoClG;IAED,sEAAsE;IAChE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAW9D;IAED,OAAO,CAAC,UAAU;CAsBnB"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAKA,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAGhE,eAAO,MAAM,gBAAgB,iDAAiD,CAAC;AAG/E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iGAAiG;IACjG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAID;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAMzC;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EACrC,GAAG,GAAE,MAAmB,GACvB,MAAM,GAAG,SAAS,CAOpB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQnD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASvD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAYvE;AA+BD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyB;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;IAEtD,YAAY,OAAO,GAAE,aAAkB,EAWtC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM,CAIlD;IAED;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,SAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAyClG;IAED;;;;OAIG;IACG,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAW9D;IAED,OAAO,CAAC,UAAU;CAsBnB"}

package/dist/src/client/engine.js

@@ -4,36 +4,112 @@
 // parameters travel in the query string.
 import { nodeHttpTransport } from "./http.js";
 import { buildQueryString } from "./query.js";
-import { MastrApiError, MastrNetworkError, MastrParseError } from "./errors.js";
+import { MastrApiError, MastrNetworkError, MastrParseError, redactUrl } from "./errors.js";
 export const DEFAULT_BASE_URL = "https://www.marktstammdatenregister.de/MaStR";
 const DEFAULT_USER_AGENT = "marktstammdatenregister-cli";
 const DEFAULT_MAX_RESPONSE_BYTES = 100 * 1024 * 1024;
 /**
- * Strip control characters (C0 except tab/newline, DEL, and C1) out of a string
- * that originates in an attacker-controlled response — the error `detail` and the
- * echoed Content-Type. `JSON.parse` decodes an escaped ESC in an error body into a
- * real ESC byte, so without this a hostile/MITM'd endpoint could drive ANSI/OSC
- * escape sequences into the user's terminal when the message is printed to stderr.
- * This only needs to cover text that flows into an error message: the CLI's JSON
- * output is escaped separately (`escapeControlChars` in cli/shared.ts), as
- * `JSON.stringify` alone leaves DEL and the C1 range raw. Implemented as a code-point
- * filter so no raw control byte ever appears in this source file.
+ * Longest `Retry-After` the engine waits out before retrying a 429/503. When the
+ * server asks for longer, the engine does not retry at all and surfaces the error at
+ * once: retrying early would only land inside the window the server asked us to wait
+ * out, and a hostile value must not stall the CLI.
+ */
+export const MAX_RETRY_AFTER_MS = 30_000;
+/** An IMF-fixdate (RFC 9110 §5.6.7), the one HTTP-date form senders must generate. */
+const IMF_FIXDATE = /^(Mon|Tue|Wed|Thu|Fri|Sat|Sun), \d{2} (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \d{4} \d{2}:\d{2}:\d{2} GMT$/;
+/**
+ * Parse a `Retry-After` header into a delay in milliseconds (RFC 9110 §10.2.3):
+ * either delay-seconds (`"120"`) or an HTTP-date (`"Wed, 21 Oct 2026 07:28:00 GMT"`,
+ * turned into the time left from `now`; a date in the past gives 0).
+ *
+ * Returns `undefined` when the header is absent or malformed — negative (`"-1"`),
+ * fractional (`"1.5"`), padded inside, any other date format — so the caller falls
+ * back to its own backoff. The strict patterns matter: `Date.parse` alone would
+ * read `"1.5"` as a date in 2001 and retry at once.
+ */
+export function parseRetryAfter(header, now = Date.now()) {
+    const value = (Array.isArray(header) ? header[0] : header)?.trim();
+    if (value === undefined || value === "")
+        return undefined;
+    if (/^\d+$/.test(value))
+        return Number(value) * 1000;
+    if (!IMF_FIXDATE.test(value))
+        return undefined;
+    const when = Date.parse(value);
+    return Number.isNaN(when) ? undefined : Math.max(0, when - now);
+}
+/**
+ * True for the Unicode bidirectional formatting characters: ALM (U+061C), LRM/RLM
+ * (U+200E/U+200F), the embeddings and overrides U+202A–U+202E and the isolates
+ * U+2066–U+2069. A terminal applies them to the text that follows, so an override
+ * in server text can reorder what the user sees ("Trojan Source" spoofing).
+ */
+export function isBidiControl(code) {
+    return (code === 0x061c ||
+        code === 0x200e ||
+        code === 0x200f ||
+        (code >= 0x202a && code <= 0x202e) ||
+        (code >= 0x2066 && code <= 0x2069));
+}
+/**
+ * Make a string that originates in an attacker-controlled response — the error
+ * `detail` (a JSON field, an `Errors` value or a text snippet) and the echoed
+ * Content-Type — safe to print into an error message on stderr:
+ *
+ * - C0 and C1 controls and DEL are dropped. `JSON.parse` decodes an escaped ESC into
+ *   a real ESC byte; printed raw, a hostile or MITM'd endpoint could drive ANSI/OSC
+ *   sequences into the terminal.
+ * - Bidi formatting characters (isBidiControl) are dropped, so server text cannot
+ *   reorder the visible message.
+ * - Every run of whitespace — newlines, tabs, U+2028/U+2029 included — becomes one
+ *   space and the ends are trimmed, so the text stays on one line and a server
+ *   cannot forge an `Error:` line of its own.
+ *
+ * The CLI's JSON output is escaped separately (`escapeControlChars` in
+ * cli/shared.ts): `JSON.stringify` alone leaves DEL, C1 and bidi characters raw.
+ * Written as a code-point filter so no raw control byte appears in this source.
  */
 export function sanitizeServerText(text) {
     let out = "";
     for (const ch of text) {
         const n = ch.codePointAt(0) ?? 0;
-        if (n <= 8 || (n >= 0x0b && n <= 0x1f) || (n >= 0x7f && n <= 0x9f))
+        const whitespaceControl = n >= 0x09 && n <= 0x0d;
+        if (!whitespaceControl && (n <= 0x1f || (n >= 0x7f && n <= 0x9f) || isBidiControl(n)))
             continue;
         out += ch;
     }
-    return out;
+    return out.replace(/\s+/g, " ").trim();
 }
 /**
- * Reject a base URL whose scheme is not http(s). The default transport already
- * gates this per hop, but the engine is exported as a library and may be handed a
- * custom transport that does no such check, so gate the configured base URL here
- * too (a `file:`/`ftp:` base URL fails fast with a typed error).
+ * Describe a Kendo `Errors` value for an error message: a string as is; otherwise
+ * (a ModelState object such as `{"": {"errors": ["Invalid filter"]}}`, or an array)
+ * every string found in it, sanitised, blanks and repeats dropped, joined "; ".
+ * Returns `undefined` when nothing readable is left.
+ */
+export function describeMastrErrors(errors) {
+    const found = [];
+    const walk = (value, depth) => {
+        if (typeof value === "string") {
+            const text = sanitizeServerText(value);
+            if (text !== "" && !found.includes(text))
+                found.push(text);
+        }
+        else if (value !== null && typeof value === "object" && depth < 5) {
+            for (const v of Object.values(value))
+                walk(v, depth + 1);
+        }
+    };
+    walk(errors, 0);
+    return found.length > 0 ? found.join("; ") : undefined;
+}
+/**
+ * Reject a base URL whose scheme is not http(s), or that has a query or fragment.
+ * The default transport already gates the scheme per hop, but the engine is
+ * exported as a library and may be handed a custom transport that does no such
+ * check, so gate the configured base URL here too (a `file:`/`ftp:` base URL fails
+ * fast with a typed error). Request paths are appended to the base URL as a string,
+ * so a `?` or `#` in it would swallow every path: `http://h/?x=1` requests
+ * `/?x=1/Einheit/...` and `http://h/#f` requests `/`.
  */
 function assertHttpScheme(baseUrl) {
     let url;
@@ -41,10 +117,13 @@ function assertHttpScheme(baseUrl) {
         url = new URL(baseUrl);
     }
     catch {
-        throw new MastrNetworkError(`Invalid base URL: ${baseUrl}`);
+        throw new MastrNetworkError(`Invalid base URL: ${redactUrl(baseUrl)}`);
     }
     if (url.protocol !== "http:" && url.protocol !== "https:") {
-        throw new MastrNetworkError(`Unsupported protocol "${url.protocol}" in base URL: ${baseUrl}`);
+        throw new MastrNetworkError(`Unsupported protocol "${url.protocol}" in base URL: ${redactUrl(baseUrl)}`);
+    }
+    if (/[?#]/.test(baseUrl)) {
+        throw new MastrNetworkError(`Base URL must not contain a query or fragment: ${redactUrl(baseUrl)}`);
     }
 }
 const realSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -103,9 +182,14 @@ export class RequestEngine {
             const status = response.status;
             const retryable = status === 429 || status === 503;
             if (retryable && attempt < this.maxRetries) {
-                attempt += 1;
-                await this.sleep(this.retryDelayMs * attempt);
-                continue;
+                // Honour Retry-After; without a usable one, back off linearly. A Retry-After
+                // beyond MAX_RETRY_AFTER_MS is not retried: the error below surfaces at once.
+                const retryAfter = parseRetryAfter(response.headers["retry-after"]);
+                if (retryAfter === undefined || retryAfter <= MAX_RETRY_AFTER_MS) {
+                    attempt += 1;
+                    await this.sleep(retryAfter ?? this.retryDelayMs * attempt);
+                    continue;
+                }
             }
             const contentType = String(response.headers["content-type"] ?? "");
             if (status < 200 || status >= 300) {
@@ -114,12 +198,16 @@ export class RequestEngine {
             return { data: response.body, contentType, status };
         }
     }
-    /** GET a path with query params and parse the JSON reply into `T`. */
+    /**
+     * GET a path with query params and parse the JSON reply into `T`. Every MaStR
+     * endpoint answers with a JSON document, so an empty body or a 204 is a
+     * `MastrParseError`, never a silent `null`.
+     */
     async getJson(path, query) {
         const res = await this.request(path, query);
         const text = res.data.toString("utf8");
         if (res.status === 204 || text.trim().length === 0) {
-            return null;
+            throw new MastrParseError(`Empty response body from ${path}`);
         }
         try {
             return JSON.parse(text);
@@ -133,8 +221,8 @@ export class RequestEngine {
         let detail;
         try {
             const parsed = JSON.parse(text);
-            if (typeof parsed?.Errors === "string")
-                detail = parsed.Errors;
+            if (parsed?.Errors !== undefined && parsed.Errors !== null)
+                detail = describeMastrErrors(parsed.Errors);
             else if (typeof parsed?.message === "string")
                 detail = parsed.message;
             else if (typeof parsed?.detail === "string")

package/dist/src/client/engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,oFAAoF;AACpF,oFAAoF;AACpF,yCAAyC;AAEzC,OAAO,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AAC/E,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAmCzD,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YAAE,SAAS;QAC7E,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,GAAG,CAAC,QAAQ,kBAAkB,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC9C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IAChB,SAAS,CAAY;IACrB,SAAS,CAAS;IAClB,cAAc,CAAyB;IACvC,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,gBAAgB,CAAS;IACzB,KAAK,CAAgC;IAEtD,YAAY,OAAO,GAAkB,EAAE;QACrC,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC/E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,IAAY,EAAE,KAAmB;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAmB,EAAE,MAAM,GAAG,kBAAkB;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAA2B;YACtC,GAAG,IAAI,CAAC,cAAc;YACtB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,IAAI,CAAC,SAAS;YAC5B,0EAA0E;YAC1E,sDAAsD;YACtD,kBAAkB,EAAE,gBAAgB;SACrC,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;gBACpC,MAAM,EAAE,KAAK;gBACb,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;YACnD,IAAI,SAAS,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,KAAmB;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,OAAO,IAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,sCAAsC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8D,CAAC;YAC7F,IAAI,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;iBAC1D,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;iBACjE,IAAI,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,CAAC;QACH,CAAC;QACD,+EAA+E;QAC/E,gFAAgF;QAChF,qDAAqD;QACrD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF"}
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/client/engine.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,oFAAoF;AACpF,oFAAoF;AACpF,yCAAyC;AAEzC,OAAO,EAAE,iBAAiB,EAAkB,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AAC/E,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAuCzD,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,sFAAsF;AACtF,MAAM,WAAW,GACf,sHAAsH,CAAC;AAEzH;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAqC,EACrC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,CACL,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,MAAM;QACf,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;QAClC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,iBAAiB,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAChG,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACpE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,GAAG,CAAC,QAAQ,kBAAkB,SAAS,CAAC,OAAO,CAAC,EAAE,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAiB,CAAC,kDAAkD,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC9C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,OAAO,aAAa;IACP,OAAO,CAAS;IAChB,SAAS,CAAY;IACrB,SAAS,CAAS;IAClB,cAAc,CAAyB;IACvC,SAAS,CAAS;IAClB,UAAU,CAAS;IACnB,YAAY,CAAS;IACrB,gBAAgB,CAAS;IACzB,KAAK,CAAgC;IAEtD,YAAY,OAAO,GAAkB,EAAE;QACrC,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC/E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAC1C,CAAC;IAED,6EAA6E;IAC7E,QAAQ,CAAC,IAAY,EAAE,KAAmB;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QAChE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAmB,EAAE,MAAM,GAAG,kBAAkB;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAA2B;YACtC,GAAG,IAAI,CAAC,cAAc;YACtB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,IAAI,CAAC,SAAS;YAC5B,0EAA0E;YAC1E,sDAAsD;YACtD,kBAAkB,EAAE,gBAAgB;SACrC,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;gBACpC,MAAM,EAAE,KAAK;gBACb,GAAG;gBACH,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;YACnD,IAAI,SAAS,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3C,6EAA6E;gBAC7E,8EAA8E;gBAC9E,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;gBACpE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,IAAI,kBAAkB,EAAE,CAAC;oBACjE,OAAO,IAAI,CAAC,CAAC;oBACb,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC;oBAC5D,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,KAAmB;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,sCAAsC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8D,CAAC;YAC7F,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACnG,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;iBACjE,IAAI,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YACxE,CAAC;QACH,CAAC;QACD,+EAA+E;QAC/E,gFAAgF;QAChF,qDAAqD;QACrD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/src/client/errors.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Replace the userinfo of a URL (`https://user:secret@host/...`) with `***`, so a
+ * credential in a base URL never reaches an error message, a log or CI output.
+ * A URL without userinfo, or one that does not parse, is returned unchanged.
+ */
+export declare function redactUrl(url: string): string;
 /** Base class for every error originating from this client. */
 export declare class MastrError extends Error {
     constructor(message: string, options?: {
@@ -33,7 +39,10 @@ export declare class MastrApiError extends MastrError {
 /** A transport-level failure (DNS, connection reset, timeout, ...). */
 export declare class MastrNetworkError extends MastrError {
 }
-/** A client-side validation error (e.g. a bad category) — no request made. */
+/**
+ * A client-side validation error — an unknown category, a page or pageSize out of
+ * range, a filter the register would misread — thrown before any request.
+ */
 export declare class MastrValidationError extends MastrError {
 }
 /** The response body could not be parsed as the expected JSON shape. */

package/dist/src/client/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAGA,+DAA+D;AAC/D,qBAAa,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EASA;IAED,yEAAyE;IACzE,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,2CAA2C;IAC3C,IAAI,UAAU,IAAI,OAAO,CAExB;CACF;AAED,uEAAuE;AACvE,qBAAa,iBAAkB,SAAQ,UAAU;CAAG;AAEpD,8EAA8E;AAC9E,qBAAa,oBAAqB,SAAQ,UAAU;CAAG;AAEvD,wEAAwE;AACxE,qBAAa,eAAgB,SAAQ,UAAU;CAAG"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW7C;AAED,+DAA+D;AAC/D,qBAAa,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAGzD;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,UAAU;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,IAAI,EAAE;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAWA;IAED,yEAAyE;IACzE,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,2CAA2C;IAC3C,IAAI,UAAU,IAAI,OAAO,CAExB;CACF;AAED,uEAAuE;AACvE,qBAAa,iBAAkB,SAAQ,UAAU;CAAG;AAEpD;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,UAAU;CAAG;AAEvD,wEAAwE;AACxE,qBAAa,eAAgB,SAAQ,UAAU;CAAG"}

package/dist/src/client/errors.js

@@ -1,5 +1,24 @@
 // Error types raised by the client. Kept free of any I/O so they are trivial to
 // construct in tests and to `instanceof`-check by consumers.
+/**
+ * Replace the userinfo of a URL (`https://user:secret@host/...`) with `***`, so a
+ * credential in a base URL never reaches an error message, a log or CI output.
+ * A URL without userinfo, or one that does not parse, is returned unchanged.
+ */
+export function redactUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return url;
+    }
+    if (parsed.username === "" && parsed.password === "")
+        return url;
+    parsed.username = "***";
+    parsed.password = "";
+    return parsed.href;
+}
 /** Base class for every error originating from this client. */
 export class MastrError extends Error {
     constructor(message, options) {
@@ -22,11 +41,13 @@ export class MastrApiError extends MastrError {
     method;
     body;
     constructor(args) {
+        // The URL is shown without userinfo: a credential in --base-url must not leak.
+        const url = redactUrl(args.url);
         const detailPart = args.detail ? `: ${args.detail}` : "";
         const head = args.status !== undefined ? `HTTP ${args.status}` : "MaStR error";
-        super(`${head} for ${args.method} ${args.url}${detailPart}`);
+        super(`${head} for ${args.method} ${url}${detailPart}`);
         this.status = args.status;
-        this.url = args.url;
+        this.url = url;
         this.method = args.method;
         this.body = args.body;
         this.detail = args.detail;
@@ -43,7 +64,10 @@ export class MastrApiError extends MastrError {
 /** A transport-level failure (DNS, connection reset, timeout, ...). */
 export class MastrNetworkError extends MastrError {
 }
-/** A client-side validation error (e.g. a bad category) — no request made. */
+/**
+ * A client-side validation error — an unknown category, a page or pageSize out of
+ * range, a filter the register would misread — thrown before any request.
+ */
 export class MastrValidationError extends MastrError {
 }
 /** The response body could not be parsed as the expected JSON shape. */

package/dist/src/client/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6DAA6D;AAE7D,+DAA+D;AAC/D,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,UAAU;IAClC,MAAM,CAAqB;IAC3B,MAAM,CAAqB;IAC3B,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,IAAI,CAAS;IAEtB,YAAY,IAMX;QACC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/E,KAAK,CAAC,GAAG,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,yEAAyE;IACzE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IACpD,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IAC7B,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;CAAG;AAEpD,8EAA8E;AAC9E,MAAM,OAAO,oBAAqB,SAAQ,UAAU;CAAG;AAEvD,wEAAwE;AACxE,MAAM,OAAO,eAAgB,SAAQ,UAAU;CAAG"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/client/errors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6DAA6D;AAE7D;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IACjE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,+DAA+D;AAC/D,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC;IAC9B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,UAAU;IAClC,MAAM,CAAqB;IAC3B,MAAM,CAAqB;IAC3B,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,IAAI,CAAS;IAEtB,YAAY,IAMX;QACC,+EAA+E;QAC/E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/E,KAAK,CAAC,GAAG,IAAI,QAAQ,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,yEAAyE;IACzE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IACpD,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC;IAC7B,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,iBAAkB,SAAQ,UAAU;CAAG;AAEpD;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,UAAU;CAAG;AAEvD,wEAAwE;AACxE,MAAM,OAAO,eAAgB,SAAQ,UAAU;CAAG"}

package/dist/src/client/filter.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The operators the register's search understands (from its web form, all checked
+ * live). `gt`/`lt` are strict and only for `number`/`date` columns; there is no
+ * `gte`/`lte`. Any other operator makes the register return 0 rows.
+ */
+export declare const FILTER_OPERATORS: readonly ["eq", "neq", "sw", "ct", "nct", "ew", "null", "nn", "gt", "lt"];
+/** A filter operator. */
+export type FilterOperator = (typeof FILTER_OPERATORS)[number];
+/**
+ * Describe why the register would misread a filter spec, or return `undefined` when
+ * the spec is fine. The spec is read the way the register reads it — split on every
+ * `~` into `FilterName`, operator and value, conditions joined by `and` — and must
+ * have that shape:
+ *
+ * - every condition has a non-blank FilterName, a known lower-case operator and a
+ *   value (`''` for `null`/`nn`: `Ort~null` without a value is ignored upstream and
+ *   returns the unfiltered register; a blank value for the other operators);
+ * - a value that starts with a single quote ends with one;
+ * - conditions are joined by `and` only, and nothing dangles at the end.
+ *
+ * `~or~` is refused: the live search keeps only the part before the first `~or~` and
+ * drops every later condition without an error (checked 2026-09-26: wind `2497` alone
+ * 43633, `2497~or~…2498` also 43633). An OR between codes of one dropdown column works
+ * as a comma list inside one value: `Energieträger~eq~'2497,2498'` (52448 = 43633 + 8815).
+ *
+ * An unknown FilterName cannot be checked here (the register ignores it and returns
+ * the unfiltered set); compare with `filterColumns()`.
+ */
+export declare function filterProblem(spec: string): string | undefined;
+/** One condition for {@link buildFilter}. */
+export interface FilterCondition {
+    /** The FilterName, e.g. `"Ort"` or `"Energieträger"` (see `filterColumns()`). */
+    name: string;
+    /** The operator. */
+    op: FilterOperator;
+    /**
+     * The value, quoted by `buildFilter`. For a dropdown column pass its code; an array
+     * becomes the comma list the register reads as "any of these codes". Ignored for
+     * `null`/`nn` (sent as `''`). Must not contain `~` (nor `,` in an array item).
+     */
+    value?: string | number | readonly (string | number)[];
+}
+/**
+ * Build a filter spec from conditions joined by `~and~`, quoting each value. Unlike
+ * string interpolation (`Ort~eq~'${input}'`), a value can't add conditions: one with a
+ * `~` (the register's separator, which has no escape) throws `MastrValidationError`, so
+ * `Münster'~and~Energieträger~eq~'2497` is refused instead of becoming a second
+ * condition.
+ *
+ *   buildFilter([{ name: "Ort", op: "eq", value: "Münster" },
+ *                { name: "Energieträger", op: "eq", value: ["2497", "2498"] }])
+ *   // → "Ort~eq~'Münster'~and~Energieträger~eq~'2497,2498'"
+ */
+export declare function buildFilter(conditions: readonly FilterCondition[]): string;
+/** Throw a {@link MastrValidationError} if {@link filterProblem} finds a problem. */
+export declare function validateFilter(spec: string): void;
+//# sourceMappingURL=filter.d.ts.map

package/dist/src/client/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../../src/client/filter.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAE1G,yBAAyB;AACzB,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAU/D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAwD9D;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,EAAE,EAAE,cAAc,CAAC;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACxD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CA+C1E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGjD"}

package/dist/src/client/filter.js

@@ -0,0 +1,145 @@
+// Checks for MaStR filter specs (`FilterName~op~'value'~and~…`), shared by the
+// client (library callers) and the CLI's `--filter` parser. The register never
+// reports a filter it misreads: it answers with a plausible but wrong count (an
+// unfiltered total, a truncated condition list, or 0 rows), so specs it would
+// misread are refused before any request.
+import { MastrValidationError } from "./errors.js";
+/**
+ * The operators the register's search understands (from its web form, all checked
+ * live). `gt`/`lt` are strict and only for `number`/`date` columns; there is no
+ * `gte`/`lte`. Any other operator makes the register return 0 rows.
+ */
+export const FILTER_OPERATORS = ["eq", "neq", "sw", "ct", "nct", "ew", "null", "nn", "gt", "lt"];
+/** Operators that test for an empty / non-empty column and ignore their value (send `''`). */
+const UNARY_OPERATORS = new Set(["null", "nn"]);
+const OPERATORS = new Set(FILTER_OPERATORS);
+const SHAPE = "Expected FilterName~op~'value' (e.g. Energieträger~eq~'2495'), several joined by ~and~.";
+/**
+ * Describe why the register would misread a filter spec, or return `undefined` when
+ * the spec is fine. The spec is read the way the register reads it — split on every
+ * `~` into `FilterName`, operator and value, conditions joined by `and` — and must
+ * have that shape:
+ *
+ * - every condition has a non-blank FilterName, a known lower-case operator and a
+ *   value (`''` for `null`/`nn`: `Ort~null` without a value is ignored upstream and
+ *   returns the unfiltered register; a blank value for the other operators);
+ * - a value that starts with a single quote ends with one;
+ * - conditions are joined by `and` only, and nothing dangles at the end.
+ *
+ * `~or~` is refused: the live search keeps only the part before the first `~or~` and
+ * drops every later condition without an error (checked 2026-09-26: wind `2497` alone
+ * 43633, `2497~or~…2498` also 43633). An OR between codes of one dropdown column works
+ * as a comma list inside one value: `Energieträger~eq~'2497,2498'` (52448 = 43633 + 8815).
+ *
+ * An unknown FilterName cannot be checked here (the register ignores it and returns
+ * the unfiltered set); compare with `filterColumns()`.
+ */
+export function filterProblem(spec) {
+    const parts = spec.split("~");
+    let i = 0;
+    for (let n = 1;; n++) {
+        const name = parts[i];
+        const op = parts[i + 1];
+        const value = parts[i + 2];
+        if (name === undefined || name.trim() === "") {
+            return `Condition ${n} has no FilterName. ${SHAPE}`;
+        }
+        if (op === undefined || value === undefined) {
+            return `Condition ${n} ("${parts.slice(i).join("~")}") is incomplete. ${SHAPE}`;
+        }
+        if (!OPERATORS.has(op)) {
+            const lower = op.trim().toLowerCase();
+            const hint = OPERATORS.has(lower) ? ` Operators are lower case: use "${lower}".` : "";
+            return (`Unknown operator "${op}" in condition ${n}. The operators are ` +
+                `${FILTER_OPERATORS.join(", ")} (gt/lt are strict; there is no gte/lte); the register ` +
+                `returns 0 rows for any other.${hint}`);
+        }
+        if (!UNARY_OPERATORS.has(op) && value.trim() === "") {
+            return `Condition ${n} ("${name}~${op}") has no value. ${SHAPE}`;
+        }
+        if (value.startsWith("'") && (value.length < 2 || !value.endsWith("'"))) {
+            // A later part that closes the quote means the value itself held a "~".
+            const close = parts.findIndex((part, j) => j > i + 2 && part.endsWith("'"));
+            if (close !== -1) {
+                const meant = parts.slice(i + 2, close + 1).join("~");
+                return (`The value ${meant} in condition ${n} contains "~". A filter value cannot contain "~": ` +
+                    `the register splits the filter on every "~" and has no escape, so it would read ${value}' ` +
+                    "and treat the rest as further conditions. Leave the ~ out (e.g. match a part with ct).");
+            }
+            return `The value of condition ${n} (${value}) has no closing single quote. ${SHAPE}`;
+        }
+        i += 3;
+        if (i >= parts.length)
+            return undefined;
+        const conjunction = parts[i] ?? "";
+        if (conjunction.toLowerCase() === "or") {
+            return ('"~or~" is not supported: the register ignores everything after the first ~or~ and ' +
+                "returns a wrong count. For several codes of one dropdown column, list them in one " +
+                "value: Energieträger~eq~'2497,2498'.");
+        }
+        if (conjunction !== "and") {
+            return `Expected ~and~ after condition ${n}, got "~${conjunction}~". Conditions are joined by ~and~ only.`;
+        }
+        i += 1;
+        if (parts.slice(i).join("~").trim() === "") {
+            return 'The filter ends with "~and~": a condition must follow it.';
+        }
+    }
+}
+/**
+ * Build a filter spec from conditions joined by `~and~`, quoting each value. Unlike
+ * string interpolation (`Ort~eq~'${input}'`), a value can't add conditions: one with a
+ * `~` (the register's separator, which has no escape) throws `MastrValidationError`, so
+ * `Münster'~and~Energieträger~eq~'2497` is refused instead of becoming a second
+ * condition.
+ *
+ *   buildFilter([{ name: "Ort", op: "eq", value: "Münster" },
+ *                { name: "Energieträger", op: "eq", value: ["2497", "2498"] }])
+ *   // → "Ort~eq~'Münster'~and~Energieträger~eq~'2497,2498'"
+ */
+export function buildFilter(conditions) {
+    if (!Array.isArray(conditions) || conditions.length === 0) {
+        throw new MastrValidationError("Invalid filter: expected at least one condition.");
+    }
+    const parts = conditions.map((c, index) => {
+        const n = index + 1;
+        if (typeof c?.name !== "string" || c.name.trim() === "" || c.name.includes("~")) {
+            throw new MastrValidationError(`Invalid filter: condition ${n} needs a non-blank FilterName without "~", got ${JSON.stringify(c?.name)}.`);
+        }
+        if (!OPERATORS.has(c.op)) {
+            throw new MastrValidationError(`Invalid filter: unknown operator ${JSON.stringify(c.op)} in condition ${n}; expected one of ${FILTER_OPERATORS.join(", ")}.`);
+        }
+        if (UNARY_OPERATORS.has(c.op))
+            return `${c.name}~${c.op}~''`;
+        const items = Array.isArray(c.value) ? c.value : [c.value];
+        if (items.length === 0) {
+            throw new MastrValidationError(`Invalid filter: condition ${n} ("${c.name}") has an empty value list.`);
+        }
+        const texts = items.map((item) => {
+            if ((typeof item !== "string" && typeof item !== "number") || String(item).trim() === "") {
+                throw new MastrValidationError(`Invalid filter: condition ${n} ("${c.name}") needs a non-blank value, got ${JSON.stringify(item)}.`);
+            }
+            const text = String(item);
+            if (text.includes("~")) {
+                throw new MastrValidationError(`Invalid filter: the value ${JSON.stringify(text)} in condition ${n} contains "~", which the ` +
+                    "register reads as a separator (there is no escape).");
+            }
+            if (items.length > 1 && text.includes(",")) {
+                throw new MastrValidationError(`Invalid filter: the list item ${JSON.stringify(text)} in condition ${n} contains ",", which ` +
+                    "separates the codes of a list.");
+            }
+            return text;
+        });
+        return `${c.name}~${c.op}~'${texts.join(",")}'`;
+    });
+    const spec = parts.join("~and~");
+    validateFilter(spec);
+    return spec;
+}
+/** Throw a {@link MastrValidationError} if {@link filterProblem} finds a problem. */
+export function validateFilter(spec) {
+    const problem = filterProblem(spec);
+    if (problem !== undefined)
+        throw new MastrValidationError(`Invalid filter: ${problem}`);
+}
+//# sourceMappingURL=filter.js.map