profiler: per-rule FCP/FCI verification modes

Each rule now carries an fciMode ('type' | 'type_size' | 'exact') plus an
fciHex (raw SELECT response) so rules can verify different depths of file
control information:

- Filetype only (FCP): exists + file type
- Filetype + size (FCP): adds file size (or record length/count) - previous
  behavior
- Exact FCI: adds byte-for-byte comparison of the raw SELECT response (the
  FCP '62' template), catching FID/AID, life-cycle, security-attribute and
  proprietary-parameter changes

/profile from card/ gains a matching FCP/FCI selector (default Filetype +
size); rules store fciMode and always capture fciHex so they can be
upgraded to Exact FCI in the editor without rescanning. The rule editor
adds the selector, hides size/record fields in 'type' mode and shows an
editable FCI hex textarea in 'exact' mode. Contents checks stay independent.

Server /api/select now returns fci_hex (raw FCP template hex, uppercased).
profilerValidateProfile accepts the new mode; profilerNormHexStrict added
for byte-exact comparison (no '?' wildcards). Legacy rules without fciMode
default to type_size.

10 new tests (build-rule fields, run-rule modes incl. byte compare +
missing-FCI, validation). Docs + RU i18n synced. SW cache v52 -> v53,
version 1.9.28.

frontend/help-ru.html

@@ -375,12 +375,13 @@
 	<p class="text-sm mb-2">Правила выполняются последовательно. Правило файловой системы задаётся:</p>
 	<ul class="list-disc list-inside text-sm space-y-1 mb-3">
 		<li><strong>Путь</strong> — начинается с <code class="font-mono text-sm">MF</code> (например, <code class="font-mono text-sm">MF/7F10/6F3A</code>) или с AID ADF (например, <code class="font-mono text-sm">A0000000871002/6F07</code>).</li>
-		<li><strong>Атрибуты файла</strong> — тип файла, размер, длина записи и число записей из FCI-шаблона (любой можно оставить незаданным).</li>
+		<li><strong>Проверка FCP/FCI</strong> — какая часть информации об управлении файлом проверяется: <strong>Filetype only (FCP)</strong> (существование + тип файла), <strong>Filetype + size (FCP)</strong> (добавляются размер файла либо длина/число записей для record-файлов) или <strong>Exact FCI</strong> (добавляется побайтовое сравнение сырого ответа SELECT — шаблона FCP <code class="font-mono text-sm">'62'</code> — выявляет изменения FID/AID, жизненного цикла, атрибутов безопасности и проприетарных параметров).</li>
+		<li><strong>Атрибуты файла</strong> — тип файла, размер, длина записи и число записей из FCP-шаблона (любой можно оставить незаданным).</li>
 		<li><strong>Содержимое</strong> (опционально) — <strong>Exact</strong> (точное совпадение hex) или <strong>Mask</strong>, где <code class="font-mono text-sm">?</code> — шаблон на один полубайт (маска без <code class="font-mono text-sm">?</code> — совпадение префикса, например <code class="font-mono text-sm">0891</code> для MCC/MNC из IMSI). Для record-файлов хранится список по записям.</li>
 	</ul>
-	<p class="text-sm mb-3"><strong>Check</strong> выполняет каждое правило на подключённой карте и показывает строку прогресса и отчёт прохождения (существование, каждый атрибут FCI и совпадение содержимого).</p>
+	<p class="text-sm mb-3"><strong>Check</strong> выполняет каждое правило на подключённой карте и показывает строку прогресса и отчёт прохождения (существование, каждый атрибут FCP и совпадение содержимого).</p>
 	<h4 class="font-medium mb-1">Опции сканирования &laquo;Profile from card&raquo;</h4>
-	<p class="text-sm mb-2">Диалог сканирования запрашивает имя профиля и предлагает список <strong>&laquo;Ignore contents of&raquo;</strong> (все отмечены по умолчанию) часто перезаписываемых файлов, содержимое которых пропускается: <code class="font-mono text-sm">EF.LOCI</code>, <code class="font-mono text-sm">EF.PSLOCI</code>, <code class="font-mono text-sm">EF.EPSLOCI</code>, <code class="font-mono text-sm">EF.5GS3GPPLOCI</code>, <code class="font-mono text-sm">EF.Keys</code>, <code class="font-mono text-sm">EF.KeysPS</code>, <code class="font-mono text-sm">EF.SMS</code>, <code class="font-mono text-sm">EF.Kc</code>, <code class="font-mono text-sm">EF.KcGPRS</code>, <code class="font-mono text-sm">EF.LOCIGPRS</code>, <code class="font-mono text-sm">EF.CBMID</code>, <code class="font-mono text-sm">EF.SMSS</code>. Правила создаются только для файлов, которые реально существуют на карте (возвращён FCI-шаблон); отсутствующие файлы пропускаются. Пользовательские файлы из подвкладки <strong>Custom files</strong> включаются с той же проверкой существования.</p>
+	<p class="text-sm mb-2">Диалог сканирования запрашивает имя профиля и предлагает селектор <strong>&laquo;FCP/FCI check&raquo;</strong> (те же три режима, по умолчанию <strong>Filetype + size</strong>), применяемый ко всем создаваемым правилам, а также список <strong>&laquo;Ignore contents of&raquo;</strong> (все отмечены по умолчанию) часто перезаписываемых файлов, содержимое которых пропускается: <code class="font-mono text-sm">EF.LOCI</code>, <code class="font-mono text-sm">EF.PSLOCI</code>, <code class="font-mono text-sm">EF.EPSLOCI</code>, <code class="font-mono text-sm">EF.5GS3GPPLOCI</code>, <code class="font-mono text-sm">EF.Keys</code>, <code class="font-mono text-sm">EF.KeysPS</code>, <code class="font-mono text-sm">EF.SMS</code>, <code class="font-mono text-sm">EF.Kc</code>, <code class="font-mono text-sm">EF.KcGPRS</code>, <code class="font-mono text-sm">EF.LOCIGPRS</code>, <code class="font-mono text-sm">EF.CBMID</code>, <code class="font-mono text-sm">EF.SMSS</code>. Правила создаются только для файлов, которые реально существуют на карте (возвращён FCP-шаблон); отсутствующие файлы пропускаются. Пользовательские файлы из подвкладки <strong>Custom files</strong> включаются с той же проверкой существования.</p>
 
 	<h3 id="usage-scenarios" class="text-lg font-medium mb-2">5.7 Сценарии использования</h3>
 

frontend/help.html

@@ -375,12 +375,13 @@
 	<p class="text-sm mb-2">Rules run sequentially. A filesystem rule is defined by:</p>
 	<ul class="list-disc list-inside text-sm space-y-1 mb-3">
 		<li><strong>Path</strong> — starts with <code class="font-mono text-sm">MF</code> (e.g. <code class="font-mono text-sm">MF/7F10/6F3A</code>) or an ADF AID (e.g. <code class="font-mono text-sm">A0000000871002/6F07</code>).</li>
-		<li><strong>File attributes</strong> — file type, size, record length and record count, taken from the FCI template (any may be left unset).</li>
+		<li><strong>FCP/FCI check</strong> — how much of the file control information to verify: <strong>Filetype only (FCP)</strong> (existence + file type), <strong>Filetype + size (FCP)</strong> (adds file size, or record length/count for record files), or <strong>Exact FCI</strong> (adds a byte-for-byte comparison of the raw SELECT response — the FCP template <code class="font-mono text-sm">'62'</code> — catching FID/AID, life-cycle status, security-attribute and proprietary-parameter changes).</li>
+		<li><strong>File attributes</strong> — file type, size, record length and record count, taken from the FCP template (any may be left unset).</li>
 		<li><strong>Contents</strong> (optional) — <strong>Exact</strong> hex equality, or <strong>Mask</strong> where <code class="font-mono text-sm">?</code> is a per-nibble wildcard (a mask with no <code class="font-mono text-sm">?</code> is a prefix match, e.g. <code class="font-mono text-sm">0891</code> for the IMSI MCC/MNC). Record files store a per-record list.</li>
 	</ul>
 	<p class="text-sm mb-3"><strong>Check</strong> runs every rule against the equipped card and shows a live progress line plus a pass/fail report (existence, each FCI attribute, and the content match).</p>
 	<h4 class="font-medium mb-1">&ldquo;Profile from card&rdquo; scan options</h4>
-	<p class="text-sm mb-2">The scan dialog asks for a profile name and offers an <strong>&ldquo;Ignore contents of&rdquo;</strong> checklist (all checked by default) of frequently-overwritten files whose contents are skipped: <code class="font-mono text-sm">EF.LOCI</code>, <code class="font-mono text-sm">EF.PSLOCI</code>, <code class="font-mono text-sm">EF.EPSLOCI</code>, <code class="font-mono text-sm">EF.5GS3GPPLOCI</code>, <code class="font-mono text-sm">EF.Keys</code>, <code class="font-mono text-sm">EF.KeysPS</code>, <code class="font-mono text-sm">EF.SMS</code>, <code class="font-mono text-sm">EF.Kc</code>, <code class="font-mono text-sm">EF.KcGPRS</code>, <code class="font-mono text-sm">EF.LOCIGPRS</code>, <code class="font-mono text-sm">EF.CBMID</code>, <code class="font-mono text-sm">EF.SMSS</code>. Rules are created only for files that actually exist on the card (an FCI template is returned); missing files are skipped. Custom files from the <strong>Custom files</strong> sub-tab are included under the same existence check.</p>
+	<p class="text-sm mb-2">The scan dialog asks for a profile name and offers a <strong>&ldquo;FCP/FCI check&rdquo;</strong> selector (the same three modes above, default <strong>Filetype + size</strong>) applied to every generated rule, plus an <strong>&ldquo;Ignore contents of&rdquo;</strong> checklist (all checked by default) of frequently-overwritten files whose contents are skipped: <code class="font-mono text-sm">EF.LOCI</code>, <code class="font-mono text-sm">EF.PSLOCI</code>, <code class="font-mono text-sm">EF.EPSLOCI</code>, <code class="font-mono text-sm">EF.5GS3GPPLOCI</code>, <code class="font-mono text-sm">EF.Keys</code>, <code class="font-mono text-sm">EF.KeysPS</code>, <code class="font-mono text-sm">EF.SMS</code>, <code class="font-mono text-sm">EF.Kc</code>, <code class="font-mono text-sm">EF.KcGPRS</code>, <code class="font-mono text-sm">EF.LOCIGPRS</code>, <code class="font-mono text-sm">EF.CBMID</code>, <code class="font-mono text-sm">EF.SMSS</code>. Rules are created only for files that actually exist on the card (a FCP template is returned); missing files are skipped. Custom files from the <strong>Custom files</strong> sub-tab are included under the same existence check.</p>
 
 	<h3 id="usage-scenarios" class="text-lg font-medium mb-2">5.7 Usage scenarios</h3>
 

frontend/index.html

@@ -18,7 +18,7 @@
 <div class="max-w-7xl mx-auto px-6 py-2">
 
 	<div class="flex items-center justify-between mb-3">
-		<h1 class="text-2xl font-bold text-heading">OTAMan <span id="slogan" class="text-sm font-normal text-gray-500 dark:text-slate-400 ml-2" data-l10n="SIM OTA with a Human Face">SIM OTA with a Human Face</span> <span class="text-xs text-gray-400 dark:text-slate-500 ml-1">v1.9.27</span></h1>
+		<h1 class="text-2xl font-bold text-heading">OTAMan <span id="slogan" class="text-sm font-normal text-gray-500 dark:text-slate-400 ml-2" data-l10n="SIM OTA with a Human Face">SIM OTA with a Human Face</span> <span class="text-xs text-gray-400 dark:text-slate-500 ml-1">v1.9.28</span></h1>
 		<div class="flex items-center gap-4">
 			<button id="install-btn" class="px-2 py-1 text-xs rounded border border-gray-300 dark:border-slate-600 hover:bg-gray-200 dark:hover:bg-slate-700" style="display:none">INSTALL PWA [for offline use]</button>
 			<a href="https://github.com/anttro/otaman" target="_blank" class="text-xs text-gray-400 hover:text-gray-600 dark:text-slate-500 dark:hover:text-slate-300">github</a>
@@ -914,6 +914,12 @@
 			<input id="profiler-scan-name" class="w-full font-mono border border-gray-300 dark:border-slate-600 text-sm rounded px-3 py-2 dark:bg-slate-800 mb-3" placeholder="Profile name">
 			<div class="mb-1 text-xs font-medium text-gray-500 dark:text-slate-400" data-l10n="Ignore contents of:">Ignore contents of:</div>
 			<div id="profiler-scan-ignore" class="space-y-1 mb-3 max-h-56 overflow-auto"></div>
+			<label class="block mb-1 text-xs font-medium text-gray-500 dark:text-slate-400" data-l10n="FCP/FCI check">FCP/FCI check</label>
+			<select id="profiler-scan-fci-mode" class="w-full border border-gray-300 dark:border-slate-600 text-sm rounded px-2 py-1.5 dark:bg-slate-800 mb-3">
+				<option value="type" data-l10n="Filetype only (FCP)">Filetype only (FCP)</option>
+				<option value="type_size" selected data-l10n="Filetype + size (FCP)">Filetype + size (FCP)</option>
+				<option value="exact" data-l10n="Exact FCI">Exact FCI</option>
+			</select>
 			<div id="profiler-scan-error" class="text-xs text-red-500 hidden mb-2"></div>
 			<div class="flex gap-2 justify-end">
 				<button onclick="profilerScanCancel()" class="px-3 py-1.5 text-xs rounded border border-gray-300 dark:border-slate-600 hover:bg-gray-100 dark:hover:bg-slate-700 text-gray-700 dark:text-slate-300" data-l10n="Cancel">Cancel</button>
@@ -6978,6 +6984,11 @@ function profilerNormHex(s) {
 	return (s || '').toUpperCase().replace(/[^0-9A-F?]/g, '');
 }
 
+// Strict hex normalization for byte-exact comparisons (no '?' wildcards).
+function profilerNormHexStrict(s) {
+	return (s || '').toUpperCase().replace(/[^0-9A-F]/g, '');
+}
+
 // Match an expected hex (may contain '?' nibble wildcards) against actual hex.
 function profilerMatch(mode, expected, actual) {
 	const e = profilerNormHex(expected);
@@ -7037,6 +7048,7 @@ function profilerValidateProfile(obj) {
 		if (!r || typeof r !== 'object') return 'Invalid rule';
 		if (r.type !== 'file') return 'Unsupported rule type: ' + r.type;
 		if (!r.path) return 'Rule missing path';
+		if (r.fciMode && !['type', 'type_size', 'exact'].includes(r.fciMode)) return 'Invalid FCP/FCI mode: ' + r.fciMode;
 	}
 	return null;
 }
@@ -7114,11 +7126,12 @@ async function profilerScanStart() {
 			ignoreNames.add((cb.getAttribute('data-ignore-name') || '').toUpperCase());
 		}
 	});
+	const fciMode = document.getElementById('profiler-scan-fci-mode').value;
 	const btn = document.getElementById('profiler-scan-btn');
 	btn.disabled = true;
 	btn.textContent = t('Scanning...');
 	try {
-		const rules = await profilerScanCard(ignoreFids, ignoreNames);
+		const rules = await profilerScanCard(ignoreFids, ignoreNames, fciMode);
 		const profile = { id: profilerNewId(), name: name, created: new Date().toISOString(), rules: rules };
 		profiles.push(profile);
 		profilerSave();
@@ -7134,7 +7147,7 @@ async function profilerScanStart() {
 }
 
 // Recursively walk the card filesystem and build rules for files that exist.
-async function profilerScanCard(ignoreFids, ignoreNames) {
+async function profilerScanCard(ignoreFids, ignoreNames, fciMode) {
 	const rules = [];
 	const seen = new Set();
 
@@ -7161,7 +7174,7 @@ async function profilerScanCard(ignoreFids, ignoreNames) {
 				const childPath = dir.pathPrefix.concat(c.fid ? c.fid.toUpperCase() : c.name).join('/');
 				if (seen.has(childPath)) continue;
 				seen.add(childPath);
-				const rule = await profilerBuildFileRule(childPath, c, ignoreFids, ignoreNames);
+				const rule = await profilerBuildFileRule(childPath, c, ignoreFids, ignoreNames, fciMode);
 				if (rule) rules.push(rule);
 			}
 		}
@@ -7180,13 +7193,13 @@ async function profilerScanCard(ignoreFids, ignoreNames) {
 		const path = segs.join('/');
 		if (seen.has(path)) continue;
 		seen.add(path);
-		const rule = await profilerBuildFileRule(path, { fid: cf.fid, name: cf.name }, ignoreFids, ignoreNames);
+		const rule = await profilerBuildFileRule(path, { fid: cf.fid, name: cf.name }, ignoreFids, ignoreNames, fciMode);
 		if (rule) rules.push(rule);
 	}
 	return rules;
 }
 
-async function profilerBuildFileRule(path, c, ignoreFids, ignoreNames) {
+async function profilerBuildFileRule(path, c, ignoreFids, ignoreNames, fciMode) {
 	let sel;
 	try {
 		sel = await pysimFetch('/api/select', { path: path });
@@ -7201,6 +7214,8 @@ async function profilerBuildFileRule(path, c, ignoreFids, ignoreNames) {
 		fileSize: isRecord ? null : ((sel.file_size === null || sel.file_size === undefined) ? null : sel.file_size),
 		recordLen: (sel.record_len === null || sel.record_len === undefined) ? null : sel.record_len,
 		numRecords: (sel.num_of_rec === null || sel.num_of_rec === undefined) ? null : sel.num_of_rec,
+		fciMode: fciMode || 'type_size',
+		fciHex: sel.fci_hex || null,
 		content: null,
 	};
 	const fid = (c.fid || sel.fid || '').toUpperCase();
@@ -7278,7 +7293,7 @@ function profilerBackToList() {
 
 function profilerAddRule() {
 	if (!profilerDraft) return;
-	profilerDraft.rules.push({ type: 'file', path: '', name: null, fileType: null, fileSize: null, recordLen: null, numRecords: null, content: null });
+	profilerDraft.rules.push({ type: 'file', path: '', name: null, fileType: null, fileSize: null, recordLen: null, numRecords: null, fciMode: 'type_size', fciHex: null, content: null });
 	profilerRenderEditor();
 }
 
@@ -7310,6 +7325,7 @@ function profilerRenderRule(i, r) {
 		ftOpts += '<option value="' + k + '"' + (r.fileType === k ? ' selected' : '') + '>' + fts[k] + '</option>';
 	}
 	const cm = r.content ? r.content.mode : 'exact';
+	const fciMode = r.fciMode || 'type_size';
 	let html = '<div class="mb-2 p-3 border border-gray-200 dark:border-slate-600 rounded">';
 	html += '<div class="flex items-center gap-2 mb-2">';
 	html += '<span class="text-xs font-semibold text-gray-500 dark:text-slate-400">#' + (i + 1) + '</span>';
@@ -7322,20 +7338,32 @@ function profilerRenderRule(i, r) {
 		'<input value="' + escHtml(r.path || '') + '" oninput="profilerUpdateRulePath(' + i + ',this.value,this)" class="w-full font-mono text-xs border border-gray-300 dark:border-slate-600 rounded px-2 py-1 dark:bg-slate-800" placeholder="MF/7F10/6F3A"></div>';
 	html += '</div>';
 	const vis = profilerFileFields(r.fileType);
+	const showSize = vis.size && fciMode !== 'type';
+	const showRecords = vis.records && fciMode !== 'type';
 	html += '<div class="grid grid-cols-2 md:grid-cols-4 gap-2 mb-2">';
+	html += '<div><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('FCP/FCI check')) + '</label>' +
+		'<select onchange="profilerUpdateRuleFciMode(' + i + ',this.value)" class="w-full border border-gray-300 dark:border-slate-600 text-xs rounded px-2 py-1 dark:bg-slate-800">' +
+		'<option value="type"' + (fciMode === 'type' ? ' selected' : '') + '>' + esc(t('Filetype only (FCP)')) + '</option>' +
+		'<option value="type_size"' + (fciMode === 'type_size' ? ' selected' : '') + '>' + esc(t('Filetype + size (FCP)')) + '</option>' +
+		'<option value="exact"' + (fciMode === 'exact' ? ' selected' : '') + '>' + esc(t('Exact FCI')) + '</option>' +
+		'</select></div>';
 	html += '<div><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('File type')) + '</label>' +
 		'<select onchange="profilerUpdateRuleFileType(' + i + ',this.value||null)" class="w-full border border-gray-300 dark:border-slate-600 text-xs rounded px-2 py-1 dark:bg-slate-800">' + ftOpts + '</select></div>';
-	if (vis.size) {
+	if (showSize) {
 		html += '<div><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('Size')) + '</label>' +
 			'<input type="number" value="' + (r.fileSize === null ? '' : r.fileSize) + '" oninput="profilerUpdateRule(' + i + ',\'fileSize\',this.value===\'\'?null:parseInt(this.value))" class="w-full font-mono text-xs border border-gray-300 dark:border-slate-600 rounded px-2 py-1 dark:bg-slate-800" placeholder="—"></div>';
 	}
-	if (vis.records) {
+	if (showRecords) {
 		html += '<div><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('Record length')) + '</label>' +
 			'<input type="number" value="' + (r.recordLen === null ? '' : r.recordLen) + '" oninput="profilerUpdateRule(' + i + ',\'recordLen\',this.value===\'\'?null:parseInt(this.value))" class="w-full font-mono text-xs border border-gray-300 dark:border-slate-600 rounded px-2 py-1 dark:bg-slate-800" placeholder="—"></div>';
 		html += '<div><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('Record count')) + '</label>' +
 			'<input type="number" value="' + (r.numRecords === null ? '' : r.numRecords) + '" oninput="profilerUpdateRule(' + i + ',\'numRecords\',this.value===\'\'?null:parseInt(this.value))" class="w-full font-mono text-xs border border-gray-300 dark:border-slate-600 rounded px-2 py-1 dark:bg-slate-800" placeholder="—"></div>';
 	}
 	html += '</div>';
+	if (fciMode === 'exact') {
+		html += '<div class="mb-2"><label class="block text-xs text-gray-600 dark:text-slate-400 mb-0.5">' + esc(t('FCI hex (raw SELECT response)')) + '</label>' +
+			'<textarea oninput="profilerUpdateRule(' + i + ',\'fciHex\',this.value)" rows="2" class="w-full font-mono text-xs border border-gray-300 dark:border-slate-600 rounded px-2 py-1 dark:bg-slate-800" placeholder="62...">' + escHtml(r.fciHex || '') + '</textarea></div>';
+	}
 	if (r.fileType !== 'df') {
 		html += profilerRenderContentEditor(i, r);
 	}
@@ -7407,6 +7435,12 @@ function profilerUpdateRuleFileType(i, value) {
 	profilerRenderEditor();
 }
 
+function profilerUpdateRuleFciMode(i, value) {
+	if (!profilerDraft) return;
+	profilerDraft.rules[i].fciMode = value;
+	profilerRenderEditor();
+}
+
 function profilerSetContent(i, mode) {
 	if (!profilerDraft) return;
 	const r = profilerDraft.rules[i];
@@ -7513,20 +7547,30 @@ async function profilerRunRule(r) {
 		res.checks.push({ label: 'fileType', expected: r.fileType, actual: sel.file_type, ok: ok });
 	}
 	const isRecord = profilerContentKindForFileType(r.fileType) === 'record';
-	if (!isRecord && r.fileSize !== null && r.fileSize !== undefined) {
-		const ok = sel.file_size === r.fileSize;
-		if (!ok) { res.status = 'fail'; sizeMismatch = true; }
-		res.checks.push({ label: 'fileSize', expected: r.fileSize, actual: sel.file_size, ok: ok });
+	const fciMode = r.fciMode || 'type_size';
+	if (fciMode !== 'type') {
+		if (!isRecord && r.fileSize !== null && r.fileSize !== undefined) {
+			const ok = sel.file_size === r.fileSize;
+			if (!ok) { res.status = 'fail'; sizeMismatch = true; }
+			res.checks.push({ label: 'fileSize', expected: r.fileSize, actual: sel.file_size, ok: ok });
+		}
+		if (r.recordLen !== null && r.recordLen !== undefined) {
+			const ok = sel.record_len === r.recordLen;
+			if (!ok) { res.status = 'fail'; sizeMismatch = true; }
+			res.checks.push({ label: 'recordLen', expected: r.recordLen, actual: sel.record_len, ok: ok });
+		}
+		if (r.numRecords !== null && r.numRecords !== undefined) {
+			const ok = sel.num_of_rec === r.numRecords;
+			if (!ok) { res.status = 'fail'; sizeMismatch = true; }
+			res.checks.push({ label: 'numRecords', expected: r.numRecords, actual: sel.num_of_rec, ok: ok });
+		}
 	}
-	if (r.recordLen !== null && r.recordLen !== undefined) {
-		const ok = sel.record_len === r.recordLen;
-		if (!ok) { res.status = 'fail'; sizeMismatch = true; }
-		res.checks.push({ label: 'recordLen', expected: r.recordLen, actual: sel.record_len, ok: ok });
-	}
-	if (r.numRecords !== null && r.numRecords !== undefined) {
-		const ok = sel.num_of_rec === r.numRecords;
-		if (!ok) { res.status = 'fail'; sizeMismatch = true; }
-		res.checks.push({ label: 'numRecords', expected: r.numRecords, actual: sel.num_of_rec, ok: ok });
+	if (fciMode === 'exact' && r.fciHex) {
+		const expected = profilerNormHexStrict(r.fciHex);
+		const actual = profilerNormHexStrict(sel.fci_hex);
+		const ok = !!expected && expected === actual;
+		if (!ok) res.status = 'fail';
+		res.checks.push({ label: 'fci', expected: r.fciHex, actual: sel.fci_hex || '', ok: ok });
 	}
 	if (r.content) {
 		let rd;
@@ -7805,6 +7849,11 @@ const LANG_RU = {
 	'Scan': 'Сканировать',
 	'Ignore contents of:': 'Игнорировать содержимое:',
 	'Ignore contents of': 'Игнорировать содержимое',
+	'FCP/FCI check': 'Проверка FCP/FCI',
+	'Filetype only (FCP)': 'Только тип файла (FCP)',
+	'Filetype + size (FCP)': 'Тип файла + размер (FCP)',
+	'Exact FCI': 'Точный FCI',
+	'FCI hex (raw SELECT response)': 'FCI hex (сырой ответ SELECT)',
 	'No profiles defined.': 'Профили не заданы.',
 	'rules': 'правил',
 	'Check': 'Проверить',

frontend/sw.js

@@ -1,4 +1,4 @@
-const CACHE = 'otaman-v52';
+const CACHE = 'otaman-v53';
 const URLS = [
   'index.html',
   'help.html',

frontend/tests/profiler.test.js

@@ -21,10 +21,11 @@ function extractFunc(src, name, asyncFn) {
 	return (asyncFn ? 'async ' : '') + src.slice(m.index, i + 1);
 }
 
-const FNS = ['profilerNormHex', 'profilerMatch', 'profilerMatchMin', 'profilerMaskPrefix4', 'profilerFileFields', 'profilerContentKindForFileType', 'profilerEmptyRecordContent', 'profilerValidateProfile', 'profilerCustomNameForPath', 'profilerUpdateRulePath'];
+const FNS = ['profilerNormHex', 'profilerNormHexStrict', 'profilerMatch', 'profilerMatchMin', 'profilerMaskPrefix4', 'profilerFileFields', 'profilerContentKindForFileType', 'profilerEmptyRecordContent', 'profilerValidateProfile', 'profilerCustomNameForPath', 'profilerUpdateRulePath'];
 let code = '';
 for (const f of FNS) code += extractFunc(html, f) + '\n';
 code += extractFunc(html, 'profilerBuildFileRule', true) + '\n';
+code += extractFunc(html, 'profilerRunRule', true) + '\n';
 code += html.match(/const PROFILER_MASK_PREFIX4_FIDS = \{[\s\S]*?\n\};/)[0] + '\n';
 eval(code);
 
@@ -232,3 +233,80 @@ test('profilerBuildFileRule still ignores when ignoreNames is omitted (back-comp
 	assert.strictEqual(rule.content, null);
 	assert.ok(!calls.includes('/api/read'));
 });
+
+// --- FCP/FCI verification modes ---
+
+test('profilerNormHexStrict strips non-hex and drops wildcards', () => {
+	assert.strictEqual(profilerNormHexStrict('62 10 82 02 40 21'), '621082024021');
+	assert.strictEqual(profilerNormHexStrict('aabb?cc'), 'AABBCC');
+	assert.strictEqual(profilerNormHexStrict(''), '');
+});
+
+test('profilerBuildFileRule stores fciMode and fciHex from the select response', async () => {
+	mockFetch({ '/api/select': () => ({ ...KCGPRS_SELECT, fci_hex: '62 10 82 02 40 21' }) });
+	const rule = await profilerBuildFileRule('MF/7F20/6F52',
+		{ fid: '6F52', name: 'EF.KcGPRS' }, new Set(['6F52']), new Set(['EF.KCGPRS']), 'exact');
+	assert.strictEqual(rule.fciMode, 'exact');
+	assert.strictEqual(rule.fciHex, '62 10 82 02 40 21');
+});
+
+test('profilerBuildFileRule defaults fciMode to type_size and fciHex to null when unavailable', async () => {
+	mockFetch({ '/api/select': () => KCGPRS_SELECT });
+	const rule = await profilerBuildFileRule('MF/7F20/6F52',
+		{ fid: '6F52', name: 'EF.KcGPRS' }, new Set(), new Set());
+	assert.strictEqual(rule.fciMode, 'type_size');
+	assert.strictEqual(rule.fciHex, null);
+});
+
+function runSelect(extra) {
+	return { name: 'EF.ADN', fid: '6F3A', file_type: 'transparent', file_size: 4, record_len: null, num_of_rec: null, exists: true, ...(extra || {}) };
+}
+
+test('profilerRunRule in type mode skips size checks', async () => {
+	mockFetch({ '/api/select': () => runSelect({ file_size: 99 }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4, fciMode: 'type' });
+	assert.strictEqual(res.status, 'pass');
+	assert.ok(!res.checks.some(c => c.label === 'fileSize'));
+});
+
+test('profilerRunRule in type_size mode checks size', async () => {
+	mockFetch({ '/api/select': () => runSelect({ file_size: 99 }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4, fciMode: 'type_size' });
+	assert.strictEqual(res.status, 'fail');
+	assert.ok(res.checks.some(c => c.label === 'fileSize' && c.ok === false));
+});
+
+test('profilerRunRule legacy rule (no fciMode) still checks size', async () => {
+	mockFetch({ '/api/select': () => runSelect({ file_size: 4 }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4 });
+	assert.strictEqual(res.status, 'pass');
+	assert.ok(res.checks.some(c => c.label === 'fileSize' && c.ok === true));
+});
+
+test('profilerRunRule exact FCI passes on byte-identical FCI', async () => {
+	mockFetch({ '/api/select': () => runSelect({ fci_hex: '621082024021' }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4, fciMode: 'exact', fciHex: '62 10 82 02 40 21' });
+	assert.strictEqual(res.status, 'pass');
+	assert.ok(res.checks.some(c => c.label === 'fci' && c.ok === true));
+});
+
+test('profilerRunRule exact FCI fails on byte mismatch', async () => {
+	mockFetch({ '/api/select': () => runSelect({ fci_hex: '621082024022' }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4, fciMode: 'exact', fciHex: '621082024021' });
+	assert.strictEqual(res.status, 'fail');
+	assert.ok(res.checks.some(c => c.label === 'fci' && c.ok === false));
+});
+
+test('profilerRunRule exact FCI fails when the live FCI is missing', async () => {
+	mockFetch({ '/api/select': () => runSelect({ fci_hex: null }) });
+	const res = await profilerRunRule({ path: 'MF/7F20/6F3A', fileType: 'transparent', fileSize: 4, fciMode: 'exact', fciHex: '621082024021' });
+	assert.strictEqual(res.status, 'fail');
+	assert.ok(res.checks.some(c => c.label === 'fci' && c.ok === false));
+});
+
+test('profilerValidateProfile accepts valid fciMode and rejects unknown', () => {
+	assert.strictEqual(profilerValidateProfile({ name: 'x', rules: [{ type: 'file', path: 'MF/6F07', fciMode: 'type' }] }), null);
+	assert.strictEqual(profilerValidateProfile({ name: 'x', rules: [{ type: 'file', path: 'MF/6F07', fciMode: 'type_size' }] }), null);
+	assert.strictEqual(profilerValidateProfile({ name: 'x', rules: [{ type: 'file', path: 'MF/6F07', fciMode: 'exact' }] }), null);
+	assert.strictEqual(profilerValidateProfile({ name: 'x', rules: [{ type: 'file', path: 'MF/6F07', fciMode: 'bogus' }] }), 'Invalid FCP/FCI mode: bogus');
+});