@open-charging-cloud/wwcp-poi 0.1.0 → 0.1.1

package/dist/index.js

@@ -736,6 +736,25 @@ function optionalTimestamp(object, property, what) {
   const text = optionalString(object, property, what);
   return text === void 0 ? void 0 : parseTimestamp(text, what ?? `The timestamp '${property}'`);
 }
+function timestampAt(object, property) {
+  const text = get(object, property);
+  if (typeof text !== "string")
+    return void 0;
+  try {
+    return parseTimestamp(text);
+  } catch {
+    return void 0;
+  }
+}
+function mandatoryText(object, property, what) {
+  if (get(object, property) === void 0)
+    throw new POIError(`Missing JSON property '${property}'!`);
+  return requireString(object, property, what);
+}
+function nonemptyText(object, property) {
+  const text = get(object, property);
+  return typeof text === "string" && text.length > 0 ? text : void 0;
+}
 var timeOf = (at) => at === void 0 ? Date.now() : typeof at === "number" ? at : typeof at === "string" ? parseTimestamp(at) : at.getTime();
 function firstText(i18n2) {
   if (!isObject(i18n2))
@@ -859,6 +878,13 @@ var isDotNetBase64 = (text) => {
   const significant = text.replace(/[ \t\r\n]/gu, "");
   return significant.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/u.test(significant);
 };
+var isDeterministicCbor = (bytes) => {
+  try {
+    return bytesEqual(encode(decodeDeterministicCbor(bytes)), bytes);
+  } catch {
+    return false;
+  }
+};
 var POIPublicKey = class _POIPublicKey {
   constructor(id, key, keyBytes, notBefore, notAfter, holder, usages, json) {
     this.id = id;
@@ -914,11 +940,11 @@ var POIPublicKey = class _POIPublicKey {
     }
     try {
       key = CoseKey.parse(keyBytes);
-      if (!bytesEqual(encode(decodeDeterministicCbor(keyBytes)), keyBytes))
-        throw new POIError("not deterministic CBOR");
     } catch (e) {
       throw new POIError(`Invalid COSE key: ${e instanceof Error ? e.message : String(e)}`);
     }
+    if (!isDeterministicCbor(keyBytes))
+      throw new POIError(`Invalid COSE key: Invalid deterministic CBOR: the key of the public key '${id}' is not written as the deterministic CBOR of its COSE key!`);
     if (key.isPrivate)
       throw new POIError("A public key must not contain private parts!");
     const notBefore = optionalTimestamp(json, "notBefore", `The notBefore of the key '${id}'`);
@@ -1102,6 +1128,7 @@ function parseAuditPath(value, algorithm, what) {
 // src/network/identifications.ts
 var objectsOf = (value) => isArray(value) ? value.filter(isObject) : [];
 var idOf = (entity) => typeof entity["@id"] === "string" ? entity["@id"] : "";
+var inRoamingNetwork = (error, parameter) => `The given JSON representation of a roaming network is invalid: ${error} (Parameter '${parameter}')`;
 var ignoringCase = (text) => Array.from(text, (character) => {
   const upper = character.toUpperCase();
   return upper.length === character.length ? upper : character;
@@ -1170,7 +1197,80 @@ function duplicateParking(parkingOperators, operators) {
   ], ignoringCase) ?? givenTwice("parking sensor", childrenOf(parkingOperators, "parkingSensors"), ignoringCase) ?? givenTwice("parking space group", childrenOf(parkingOperators, "parkingSpaceGroups"), ignoringCase) ?? givenTwice("parking space template", childrenOf(parkingOperators, "parkingSpaceTemplates"), ignoringCase) ?? // Parking products compare with case.
   givenTwice("parking product", childrenOf(parkingOperators, "parkingProducts"), withCase);
 }
-function duplicateIdentification(content) {
+function duplicateNotifiedBodyNumber(bodies) {
+  const seen = /* @__PURE__ */ new Map();
+  for (const body of bodies) {
+    const number = get(body, "notifiedBodyNumber");
+    if (typeof number !== "string")
+      continue;
+    const other = seen.get(number);
+    if (other !== void 0)
+      return `The notified body number '${number}' of the conformity assessment body '${idOf(body)}' is the one of the conformity assessment body '${other}' already!`;
+    seen.set(number, idOf(body));
+  }
+  return void 0;
+}
+var PARTIES_IN_ORDER = [
+  "chargingStationManufacturers",
+  "eMobilityProviders",
+  "gridOperators",
+  "parkingOperators",
+  "transparencySoftwareManufacturers",
+  "conformityAssessmentBodies",
+  "energyMeterManufacturers",
+  "chargingStationOperators"
+];
+var IDENTIFIED = {
+  chargingStationManufacturers: void 0,
+  chargingStationModels: void 0,
+  transparencySoftwareManufacturers: void 0,
+  conformityAssessmentBodies: void 0,
+  energyMeterManufacturers: void 0,
+  energyMeterModels: void 0,
+  chargingStationOperators: "charging station operator",
+  chargingTariffs: "charging tariff",
+  chargingPools: "charging pool",
+  chargingStations: "charging station",
+  EVSEs: "EVSE",
+  energyMeter: void 0,
+  EVSETemplates: "EVSE template",
+  chargingConnectors: void 0,
+  chargingStationTemplates: "charging station template",
+  energyMeterTemplates: void 0,
+  EVSEGroups: "EVSE group",
+  chargingStationGroups: "charging station group"
+};
+function invalidIdentification(content) {
+  const ofEntity = (entity, kind) => {
+    const id = entity["@id"];
+    if (id === void 0)
+      return "Missing JSON property '@id'!";
+    if (typeof id !== "string" && kind !== void 0)
+      return `Invalid '${kind} identification'!`;
+    return within(entity);
+  };
+  const within = (object) => {
+    for (const [property, value] of Object.entries(object)) {
+      if (property === "customData" || !(property in IDENTIFIED))
+        continue;
+      const kind = IDENTIFIED[property];
+      for (const entity of isArray(value) ? value.filter(isObject) : isObject(value) ? [value] : []) {
+        const error = ofEntity(entity, kind);
+        if (error !== void 0)
+          return error;
+      }
+    }
+    return void 0;
+  };
+  for (const property of PARTIES_IN_ORDER)
+    for (const party of objectsOf(get(content, property))) {
+      const error = ofEntity(party, IDENTIFIED[property]);
+      if (error !== void 0)
+        return error;
+    }
+  return void 0;
+}
+function duplicateIdentification(content, of) {
   const operators = objectsOf(get(content, "chargingStationOperators"));
   const providers = objectsOf(get(content, "eMobilityProviders"));
   const gridOperators = objectsOf(get(content, "gridOperators"));
@@ -1179,7 +1279,20 @@ function duplicateIdentification(content) {
   const bodies = objectsOf(get(content, "conformityAssessmentBodies"));
   const meterOwners = [...operators, ...gridOperators];
   const groupOwners = [...operators, ...providers];
-  return ofAnother(gridOperators, "gridConnectionPoints", (point, gridOperator, other) => `The grid connection point '${point}' of the grid operator '${gridOperator}' must be unique within the roaming network, but the grid operator '${other}' has it too!`) ?? givenTwice("energy meter", energyMetersOf(operators, gridOperators), ignoringCase) ?? duplicateParking(parkingOperators, operators) ?? ofAnother(softwareManufacturers, "transparencySoftware", (release, manufacturer, other) => `The transparency software release '${release}' of the manufacturer '${manufacturer}' is one of the manufacturer '${other}' already!`) ?? ofAnother(bodies, "certificates", (certificate, body, other) => `The certificate '${certificate}' of the conformity assessment body '${body}' is one of the conformity assessment body '${other}' already!`) ?? givenTwice("energy meter group", childrenOf(meterOwners, "energyMeterGroups"), ignoringCase) ?? givenTwice("EVSE group", childrenOf(groupOwners, "EVSEGroups"), groupId("EG")) ?? givenTwice("charging station group", childrenOf(groupOwners, "chargingStationGroups"), groupId("SG")) ?? givenTwice("charging pool group", childrenOf(groupOwners, "chargingPoolGroups"), groupId("PG")) ?? givenTwice("charging tariff offer", childrenOf(groupOwners, "chargingTariffOffers"), ignoringCase) ?? givenTwice("energy meter template", childrenOf(meterOwners, "energyMeterTemplates"), ignoringCase);
+  const gridConnectionPoint = () => ofAnother(gridOperators, "gridConnectionPoints", (point, gridOperator, other) => `The grid connection point '${point}' of the grid operator '${gridOperator}' must be unique within the roaming network, but the grid operator '${other}' has it too!`);
+  const energyMeter = () => givenTwice("energy meter", energyMetersOf(operators, gridOperators), ignoringCase);
+  const parking = () => duplicateParking(parkingOperators, operators);
+  const release = () => ofAnother(softwareManufacturers, "transparencySoftware", (id, manufacturer, other) => `The transparency software release '${id}' of the manufacturer '${manufacturer}' is one of the manufacturer '${other}' already!`);
+  const certificate = () => ofAnother(bodies, "certificates", (id, body, other) => `The certificate '${id}' of the conformity assessment body '${body}' is one of the conformity assessment body '${other}' already!`);
+  const number = () => duplicateNotifiedBodyNumber(bodies);
+  const energyMeterGroup = () => givenTwice("energy meter group", childrenOf(meterOwners, "energyMeterGroups"), ignoringCase);
+  const providerGroup = () => givenTwice("EVSE group", childrenOf(groupOwners, "EVSEGroups"), groupId("EG")) ?? givenTwice("charging station group", childrenOf(groupOwners, "chargingStationGroups"), groupId("SG")) ?? givenTwice("charging pool group", childrenOf(groupOwners, "chargingPoolGroups"), groupId("PG"));
+  const tariffOffer = () => givenTwice("charging tariff offer", childrenOf(groupOwners, "chargingTariffOffers"), ignoringCase);
+  const energyMeterTemplate = () => givenTwice("energy meter template", childrenOf(meterOwners, "energyMeterTemplates"), ignoringCase);
+  if (of === "change set")
+    return gridConnectionPoint() ?? energyMeter() ?? parking() ?? release() ?? certificate() ?? number() ?? energyMeterGroup() ?? providerGroup() ?? tariffOffer() ?? energyMeterTemplate();
+  const ofParameter = (parameter, error) => error === void 0 ? void 0 : inRoamingNetwork(error, parameter);
+  return ofParameter("GridOperators", gridConnectionPoint()) ?? ofParameter("ChargingStationOperators", energyMeter()) ?? ofParameter("ParkingOperators", parking()) ?? ofParameter("EMobilityProviders", providerGroup() ?? tariffOffer()) ?? ofParameter("TransparencySoftwareManufacturers", release()) ?? ofParameter("ConformityAssessmentBodies", certificate() ?? number()) ?? ofParameter("ChargingStationOperators", energyMeterGroup() ?? energyMeterTemplate());
 }
 
 // src/network/effective.ts
@@ -1513,11 +1626,11 @@ var AT_EDGES = new RegExp(`^[${WHITESPACE}]+|[${WHITESPACE}]+$`, "gu");
 var isText = (value) => typeof value === "string" && AS_GIVEN.test(value);
 var trimmed = (text) => text.replace(AT_EDGES, "");
 var shown = (value) => typeof value === "string" ? value : JSON.stringify(value);
-function invalidText(what, entity, properties) {
+function invalidText(entity, properties) {
   for (const [property, description] of Object.entries(properties)) {
     const value = get(entity, property);
     if (value !== void 0 && !isText(value))
-      return `The ${what} '${idOf2(entity)}': Invalid ${description} '${shown(value)}'!`;
+      return `Invalid ${description} '${shown(value)}'!`;
   }
   return void 0;
 }
@@ -1528,22 +1641,23 @@ function versionTwice(holder, whose) {
   for (const [property, description] of Object.entries(MODEL_VERSIONS)) {
     const versions = get(holder, property);
     if (isArray(versions) && new Set(versions).size !== versions.length)
-      return `A ${description} of ${whose} must not be given twice!`;
+      return `A ${description} of ${whose} must not be given twice! (Parameter 'Versions')`;
   }
   return void 0;
 }
-function invalidModelVersion(what, model) {
+function invalidModelVersion(what, kind, model) {
   for (const [property, description] of Object.entries(MODEL_VERSIONS)) {
     const versions = get(model, property);
     if (versions === void 0)
       continue;
     if (!isArray(versions))
-      return `The ${what} '${idOf2(model)}': The ${description} must be a JSON array!`;
+      return `The ${description} must be a JSON array!`;
     const invalid = versions.find((version) => !isText(version));
     if (invalid !== void 0)
-      return `The ${what} '${idOf2(model)}': Invalid ${description} '${shown(invalid)}'!`;
+      return `Invalid ${description} '${shown(invalid)}'!`;
   }
-  return versionTwice(model, `the ${what} '${idOf2(model)}'`);
+  const twice2 = versionTwice(model, `the ${what} '${idOf2(model)}'`);
+  return twice2 === void 0 ? void 0 : `The given JSON representation of ${kind} is invalid: ${twice2}`;
 }
 function invalidVersionText(content) {
   const operators = objectsOf2(get(content, "chargingStationOperators"));
@@ -1551,11 +1665,28 @@ function invalidVersionText(content) {
   const stations = operators.flatMap((operator) => objectsOf2(get(operator, "chargingPools"))).flatMap((pool) => objectsOf2(get(pool, "chargingStations")));
   const children = (parties, property) => parties.flatMap((party) => objectsOf2(get(party, property)));
   const first = (items, error) => items.map(error).find((found) => found !== void 0);
-  return first(stations, (station) => invalidText("charging station", station, DEVICE_TEXTS)) ?? first(children(operators, "chargingStationTemplates"), (template) => invalidText("charging station template", template, TEMPLATE_TEXTS)) ?? first(energyMetersOf(operators, gridOperators), (meter) => invalidText("energy meter", meter, DEVICE_TEXTS)) ?? first(children([...operators, ...gridOperators], "energyMeterTemplates"), (template) => invalidText("energy meter template", template, TEMPLATE_TEXTS)) ?? first(children(objectsOf2(get(content, "chargingStationManufacturers")), "chargingStationModels"), (model) => invalidModelVersion("charging station model", model)) ?? first(children(objectsOf2(get(content, "energyMeterManufacturers")), "energyMeterModels"), (model) => invalidModelVersion("energy meter model", model));
+  return first(stations, (station) => invalidText(station, DEVICE_TEXTS)) ?? first(children(operators, "chargingStationTemplates"), (template) => invalidText(template, TEMPLATE_TEXTS)) ?? first(energyMetersOf(operators, gridOperators), (meter) => invalidText(meter, DEVICE_TEXTS)) ?? first(children([...operators, ...gridOperators], "energyMeterTemplates"), (template) => invalidText(template, TEMPLATE_TEXTS)) ?? first(children(objectsOf2(get(content, "chargingStationManufacturers")), "chargingStationModels"), (model) => invalidModelVersion("charging station model", "a charging station model", model)) ?? first(children(objectsOf2(get(content, "energyMeterManufacturers")), "energyMeterModels"), (model) => invalidModelVersion("energy meter model", "an energy meter model", model));
 }
 
 // src/network/certificates.ts
 var MODEL_PROPERTIES = ["chargingStationManufacturerId", "chargingStationModel", "energyMeterManufacturerId", "energyMeterModel"];
+var CERTIFICATE_PROPERTIES = [
+  "@context",
+  "@id",
+  ...MODEL_PROPERTIES,
+  "hardwareRevisions",
+  "firmwareVersions",
+  "verifiedTransparencySoftwareIds",
+  "compatibleTransparencySoftwareIds",
+  "energyMeters",
+  "documentNumber",
+  "documentURL",
+  "notBefore",
+  "notAfter",
+  "legislation",
+  "statedBy"
+];
+var CERTIFIED_METER_PROPERTIES = ["manufacturerId", "modelId", "hardwareRevisions", "firmwareVersions"];
 var RELEASES = ["verifiedTransparencySoftwareIds", "compatibleTransparencySoftwareIds"];
 var idAt = (json, property) => {
   const value = get(json, property);
@@ -1630,13 +1761,26 @@ function invalidReleaseId(certificate) {
 function invalidEnergyMeter(meter) {
   if (!isObject(meter))
     return "Expected an object.";
-  for (const property of ["manufacturerId", "modelId"])
+  const unknown = Object.keys(meter).find((property) => !CERTIFIED_METER_PROPERTIES.includes(property));
+  if (unknown !== void 0)
+    return `Unknown property '${unknown}'.`;
+  for (const property of ["manufacturerId", "modelId"]) {
+    if (meter[property] !== void 0 && typeof meter[property] !== "string")
+      return `${property}: expected a string.`;
     if (idAt(meter, property) === "")
       return `${property}: expected a nonempty string.`;
+  }
   const model = `certified energy meter model '${idAt(meter, "modelId")}' of '${idAt(meter, "manufacturerId")}'`;
-  return invalidCertifiedVersion(meter) ?? versionTwice(meter, `the ${model}`) ?? (textsOf(meter, "hardwareRevisions").length === 0 ? `The ${model} must name at least one hardware revision!` : void 0) ?? (textsOf(meter, "firmwareVersions").length === 0 ? `The ${model} must name at least one firmware version!` : void 0);
+  return invalidCertifiedVersion(meter) ?? versionTwice(meter, `the ${model}`) ?? (textsOf(meter, "hardwareRevisions").length === 0 ? `The ${model} must name at least one hardware revision! (Parameter 'HardwareRevisions')` : void 0) ?? (textsOf(meter, "firmwareVersions").length === 0 ? `The ${model} must name at least one firmware version! (Parameter 'FirmwareVersions')` : void 0);
 }
 function invalidArgument(certificate) {
+  const unknown = Object.keys(certificate).find((property) => !CERTIFICATE_PROPERTIES.includes(property));
+  if (unknown !== void 0)
+    return `Unknown property '${unknown}'.`;
+  if (certificate["@id"] !== void 0 && typeof certificate["@id"] !== "string")
+    return "@id: expected a string.";
+  if (idAt(certificate, "@id") === "")
+    return "@id: expected a nonempty string.";
   const modelError = MODEL_PROPERTIES.map((property) => notText(certificate, property)).find((error) => error !== void 0);
   if (modelError !== void 0)
     return modelError;
@@ -1667,25 +1811,25 @@ function invalidConstruction(certificate, id) {
   if (twice2 !== void 0)
     return twice2;
   if (textsOf(certificate, "hardwareRevisions").length === 0)
-    return `The certificate '${id}' must name at least one hardware revision of its model!`;
+    return `The certificate '${id}' must name at least one hardware revision of its model! (Parameter 'HardwareRevisions')`;
   if (textsOf(certificate, "firmwareVersions").length === 0)
-    return `The certificate '${id}' must name at least one firmware version of its model!`;
+    return `The certificate '${id}' must name at least one firmware version of its model! (Parameter 'FirmwareVersions')`;
   const legislation = get(certificate, "legislation");
   if (typeof legislation === "string" && trimmed(legislation) === "")
-    return `The certificate '${id}': A legislation must not be empty.`;
+    return "A legislation must not be empty. (Parameter 'Legislation')";
   if (endsBeforeItBegins(certificate))
-    return `The certificate '${id}': notBefore must not exceed notAfter.`;
+    return "notBefore must not exceed notAfter. (Parameter 'NotBefore')";
   const [verified = [], compatible = []] = RELEASES.map((property) => textsOf(certificate, property).map(trimmed));
   if (new Set(verified).size !== verified.length || new Set(compatible).size !== compatible.length)
-    return `The certificate '${id}': Empty or duplicate TransparencySoftware reference.`;
+    return "Empty or duplicate TransparencySoftware reference.";
   if (verified.length === 0 && compatible.length === 0)
-    return `The certificate '${id}': A document must identify at least one software release.`;
+    return "A document must identify at least one software release.";
   const verifiedKeys = new Set(verified.map(idKey));
   if (compatible.some((release) => verifiedKeys.has(idKey(release))))
-    return `The certificate '${id}': A release cannot be both verified and merely compatible in the same document.`;
+    return "A release cannot be both verified and merely compatible in the same document.";
   const energyMeters = objectsOf2(get(certificate, "energyMeters"));
   if (forMeter && energyMeters.length > 0)
-    return `The certificate '${id}' of an energy meter model names no energy meters!`;
+    return `The certificate '${id}' of an energy meter model names no energy meters! (Parameter 'EnergyMeters')`;
   const models = /* @__PURE__ */ new Map();
   for (const meter of energyMeters) {
     const key = `${idKey(idAt(meter, "manufacturerId"))}\0${idKey(idAt(meter, "modelId"))}`;
@@ -1693,15 +1837,47 @@ function invalidConstruction(certificate, id) {
     models.set(key, { first: model?.first ?? meter, count: (model?.count ?? 0) + 1 });
   }
   const twiceNamed = [...models.values()].find((model) => model.count > 1)?.first;
-  return twiceNamed === void 0 ? void 0 : `The energy meter model '${idAt(twiceNamed, "modelId")}' of '${idAt(twiceNamed, "manufacturerId")}' must not be given twice in the certificate '${id}'!`;
+  return twiceNamed === void 0 ? void 0 : `The energy meter model '${idAt(twiceNamed, "modelId")}' of '${idAt(twiceNamed, "manufacturerId")}' must not be given twice in the certificate '${id}'! (Parameter 'EnergyMeters')`;
 }
 function invalidCertificate(certificate) {
-  const id = idAt(certificate, "@id");
-  const error = invalidArgument(certificate);
-  return error !== void 0 ? `The certificate '${id}': ${error}` : invalidConstruction(certificate, id);
+  return invalidArgument(certificate) ?? invalidConstruction(certificate, idAt(certificate, "@id"));
+}
+var NOTIFIED_BODY_NUMBER = /^[0-9]{4}$/u;
+function invalidNotifiedTexts(body) {
+  const number = get(body, "notifiedBodyNumber");
+  const notifiedFor = get(body, "notifiedFor");
+  if (number !== void 0 && typeof number !== "string")
+    return "The notified body number must be a text!";
+  if (notifiedFor !== void 0 && (!isArray(notifiedFor) || notifiedFor.some((legislation) => typeof legislation !== "string")))
+    return "The legislations notified for must be a JSON array of texts!";
+  const legislations = textsOf(body, "notifiedFor");
+  if (legislations.slice(1).some((legislation, index) => ordinal(legislations[index] ?? "", legislation) > 0))
+    return `The legislations the conformity assessment body '${typeof body["@id"] === "string" ? body["@id"] : ""}' is notified for are written in their ordinal order!`;
+  return void 0;
+}
+function invalidBody(body) {
+  const id = typeof body["@id"] === "string" ? body["@id"] : "";
+  const invalid = (message, parameter) => `The given JSON representation of a conformity assessment body is invalid: ${message} (Parameter '${parameter}')`;
+  const number = get(body, "notifiedBodyNumber");
+  if (typeof number === "string" && !NOTIFIED_BODY_NUMBER.test(number))
+    return invalid(`The notified body number '${number}' of the conformity assessment body '${id}' must be four digits!`, "NotifiedBodyNumber");
+  const notifiedFor = textsOf(body, "notifiedFor");
+  if (notifiedFor.some((legislation) => trimmed(legislation) === ""))
+    return invalid(`A legislation the conformity assessment body '${id}' is notified for must not be empty!`, "NotifiedFor");
+  if (new Set(notifiedFor).size !== notifiedFor.length)
+    return invalid(`A legislation the conformity assessment body '${id}' is notified for must not be given twice!`, "NotifiedFor");
+  const notNotified = objectsOf2(get(body, "certificates")).sort((left, right) => ordinal(idAt(left, "@id"), idAt(right, "@id"))).find((certificate) => typeof certificate["legislation"] === "string" && !notifiedFor.includes(certificate["legislation"]));
+  if (notNotified !== void 0)
+    return invalid(`The certificate '${idAt(notNotified, "@id")}' is issued under the legislation '${notNotified["legislation"]}', which the conformity assessment body '${id}' is not notified for!`, "Certificates");
+  return void 0;
 }
 function invalidCertificates(content) {
-  return objectsOf2(get(content, "conformityAssessmentBodies")).flatMap((body) => objectsOf2(get(body, "certificates"))).map(invalidCertificate).find((error) => error !== void 0);
+  for (const body of objectsOf2(get(content, "conformityAssessmentBodies"))) {
+    const error = invalidNotifiedTexts(body) ?? objectsOf2(get(body, "certificates")).map(invalidCertificate).find((certificateError) => certificateError !== void 0) ?? invalidBody(body);
+    if (error !== void 0)
+      return error;
+  }
+  return void 0;
 }
 
 // src/qidigital/json.ts
@@ -1973,6 +2149,8 @@ var EV_TALER_EXCHANGE_CONTEXT = CONTEXT_PREFIX + "roamingNetwork/evTalerExchange
 var EV_TALER_PAYMENT_OPTION = "EVTaler";
 var EV_TALER_PAYMENT_MEANS = "EV_TALER";
 var CROCKFORD_BASE32 = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+var MERCHANT_PROPERTIES = ["@context", "merchantBaseURL", "merchantPublicKey", "exchanges"];
+var EXCHANGE_PROPERTIES = ["@context", "masterPublicKey", "baseURL", "currency", "name"];
 var CURRENCIES = new Set(`EUR CHF USD CZK GBP HRK PLN RON RSD RUB SEK AED AFN ALL AMD AOA ARS AUD AWG AZN BAM BBD BDT BGN BHD BIF
                             BMD BND BOB BRL BSD BTN BWP BYN BZD CAD CDF CLP CNY COP CRC CUP CVE DJF DKK DOP DZD EGP ERN ETB FJD FKP
                             GEL GHS GIP GMD GNF GTQ GYD HKD HNL HTG HUF IDR ILS INR IQD IRR ISK JMD JOD JPY KES KGS KHR KMF KPW KRW
@@ -2044,6 +2222,26 @@ function lenientI18N(value) {
   }
   return [...texts2];
 }
+var unread = (json, properties) => Object.keys(json).find((property) => !properties.includes(property));
+function notWrittenAsRead(json, read) {
+  if ("merchantPublicKey" in read) {
+    const property2 = unread(json, MERCHANT_PROPERTIES);
+    if (property2 !== void 0)
+      return `The EV Taler merchant must not name the property '${property2}'!`;
+    if (get(json, "merchantBaseURL") !== read.merchantBaseURL)
+      return `The merchant base URL '${tokenText(get(json, "merchantBaseURL") ?? "")}' is written as '${read.merchantBaseURL}'!`;
+    return void 0;
+  }
+  const exchange = (error) => `Invalid exchange of an EV Taler merchant: ${error}`;
+  const property = unread(json, EXCHANGE_PROPERTIES);
+  if (property !== void 0)
+    return exchange(`The exchange '${read.masterPublicKey}' must not name the property '${property}'!`);
+  if (get(json, "baseURL") !== read.baseURL)
+    return exchange(`The base URL '${tokenText(get(json, "baseURL") ?? "")}' of the exchange '${read.masterPublicKey}' is written as '${read.baseURL}'!`);
+  if (get(json, "currency") !== read.currency)
+    return exchange(`The currency '${tokenText(get(json, "currency") ?? "")}' of the exchange '${read.masterPublicKey}' is written as '${read.currency}'!`);
+  return void 0;
+}
 function exchangeOf(json) {
   const context = get(json, "@context");
   if (context !== void 0 && context !== EV_TALER_EXCHANGE_CONTEXT)
@@ -2089,6 +2287,7 @@ function evTalerMerchantOf(value) {
   if (!isArray(exchangesJSON))
     return invalid("The exchanges of an EV Taler merchant must be a JSON array!");
   const exchanges = [];
+  const read = [];
   for (const exchangeJSON of exchangesJSON) {
     if (!isObject(exchangeJSON))
       return invalid("An exchange of an EV Taler merchant must be a JSON object!");
@@ -2096,6 +2295,7 @@ function evTalerMerchantOf(value) {
     if (typeof exchange === "string")
       return invalid(`Invalid exchange of an EV Taler merchant: ${exchange}`);
     exchanges.push(exchange);
+    read.push([exchangeJSON, exchange]);
   }
   const urlError = invalidBaseURL(merchantBaseURL, "merchant base URL");
   if (urlError !== void 0)
@@ -2104,11 +2304,13 @@ function evTalerMerchantOf(value) {
     return invalid("A merchant accepts at least one exchange! (Parameter 'Exchanges')");
   if (new Set(exchanges.map((exchange) => exchange.masterPublicKey)).size !== exchanges.length)
     return invalid("An exchange must not be given twice! (Parameter 'Exchanges')");
-  return {
+  const merchant = {
     merchantBaseURL: merchantBaseURL.text,
     merchantPublicKey,
     exchanges: exchanges.sort((left, right) => ordinal(left.masterPublicKey, right.masterPublicKey))
   };
+  const notWritten2 = notWrittenAsRead(value, merchant) ?? read.map(([json, exchange]) => notWrittenAsRead(json, exchange)).find((error) => error !== void 0);
+  return notWritten2 === void 0 ? merchant : invalid(notWritten2);
 }
 var namesEVTaler = (paymentOptions) => isArray(paymentOptions) && paymentOptions.some((option) => typeof option === "string" && ignoringCase(trimmed(option)) === ignoringCase(EV_TALER_PAYMENT_OPTION));
 function invalidPaymentOptions(entity, what) {
@@ -2176,6 +2378,7 @@ var PARTIES = [
   ["energyMeterManufacturers", "energy meter manufacturer", "an"],
   ["chargingStationOperators", "charging station operator", "a"]
 ];
+var KEY_PROPERTIES = ["@id", "@context", "key", "notBefore", "notAfter", "holder", "usages"];
 function keysOf(party, property, description) {
   const value = get(party, property);
   if (value === void 0)
@@ -2186,7 +2389,9 @@ function keysOf(party, property, description) {
     if (!isObject(item))
       throw new POIError(`Invalid ${description} '${compactJSON(item)}'!`);
     try {
-      return POIPublicKey.parse(item);
+      const key = POIPublicKey.parse(item);
+      onlyProperties(item, KEY_PROPERTIES, `The public key '${key.id}'`);
+      return key;
     } catch (e) {
       throw new POIError(`Invalid ${description} '${compactJSON(item)}': ${e instanceof Error ? e.message : String(e)}`);
     }
@@ -2229,6 +2434,1139 @@ function invalidPartyKeys(content) {
   return void 0;
 }
 
+// src/network/writtenForm.ts
+var idOf4 = (value) => isObject(value) && typeof value["@id"] === "string" ? value["@id"] : "";
+var ORDERED_TEXTS = /* @__PURE__ */ new Set([
+  "facilities",
+  "paymentOptions",
+  "uiFeatures",
+  "features",
+  "parkingRestrictions",
+  "services",
+  "standards",
+  "nutsCodes",
+  "vehicleTypes",
+  "euVehicleCategories",
+  "parkingSpaceIds",
+  "certificateIds",
+  "chargingTariffIds",
+  "acceptedEMobilityProviderIds",
+  "paymentMeans",
+  "paymentBrands",
+  "signatureMethods",
+  "connectorTypes",
+  "EVSEIds",
+  "chargingStationIds",
+  "chargingPoolIds",
+  "energyMeterIds",
+  "EVSEGroupIds",
+  "chargingStationGroupIds",
+  "chargingPoolGroupIds",
+  "chargingStationOperatorIds",
+  "eMobilityProviderIds",
+  "parkingSensorIds",
+  "parkingProductIds",
+  "measurands",
+  "notifiedFor",
+  "verifiedTransparencySoftwareIds",
+  "compatibleTransparencySoftwareIds",
+  "cardTypes",
+  "dimensions",
+  "usages"
+]);
+var LEFT_OUT_WHEN_EMPTY = /* @__PURE__ */ new Set([
+  "acceptedEMobilityProviderIds",
+  "authenticationModes",
+  "brands",
+  "cardTypes",
+  "certificateIds",
+  "certificates",
+  "chargingConnectors",
+  "chargingPoolGroupIds",
+  "chargingPoolGroups",
+  "chargingPoolIds",
+  "chargingPoolTemplates",
+  "chargingPools",
+  "chargingStationGroupIds",
+  "chargingStationGroups",
+  "chargingStationIds",
+  "chargingStationManufacturers",
+  "chargingStationModels",
+  "chargingStationOperatorIds",
+  "chargingStationOperators",
+  "chargingStationTemplates",
+  "chargingStations",
+  "chargingTariffGroups",
+  "chargingTariffIds",
+  "chargingTariffOffers",
+  "chargingTariffTemplates",
+  "chargingTariffs",
+  "conditions",
+  "conformityAssessmentBodies",
+  "connectorTypes",
+  "daysOfWeek",
+  "dimensions",
+  "eMobilityProviderIds",
+  "eMobilityProviders",
+  "euVehicleCategories",
+  "EVSEGroupIds",
+  "EVSEGroups",
+  "EVSEIds",
+  "EVSETemplates",
+  "EVSEs",
+  "energyMeterGroups",
+  "energyMeterIds",
+  "energyMeterManufacturers",
+  "energyMeterModels",
+  "energyMeterTemplates",
+  "energyMeters",
+  "facilities",
+  "features",
+  "gridConnectionPoints",
+  "gridOperators",
+  "identityKeys",
+  "images",
+  "locationLanguages",
+  "marketLocationIds",
+  "measurands",
+  "meteringLocationIds",
+  "models",
+  "notifiedFor",
+  "nutsCodes",
+  "parkingGarages",
+  "parkingOperators",
+  "parkingProductIds",
+  "parkingProducts",
+  "parkingRestrictions",
+  "parkingSensorIds",
+  "parkingSensors",
+  "parkingSpaceGroups",
+  "parkingSpaceIds",
+  "parkingSpaceTemplates",
+  "parkingSpaces",
+  "paymentBrands",
+  "paymentMeans",
+  "paymentOptions",
+  "publicKeys",
+  "relatedLocations",
+  "services",
+  "signatureMethods",
+  "signingKeys",
+  "standards",
+  "templateIds",
+  "transparencySoftware",
+  "transparencySoftwareManufacturers",
+  "transparencySoftwareStatus",
+  "uiFeatures",
+  "usages",
+  "vehicleTypes"
+]);
+var TEXTS_IN_LANGUAGES = /* @__PURE__ */ new Set(["name", "description", "comment", "assistanceServiceDetails", "arrivalInstructions", "additionalInformation"]);
+var WRITTEN_ALSO_EMPTY = {
+  certificates: ["verifiedTransparencySoftwareIds", "compatibleTransparencySoftwareIds"],
+  openSourceLicenses: ["URLs"]
+};
+var PARTY_NAMES = {
+  chargingStationOperators: "Charging Station Operator",
+  eMobilityProviders: "E-Mobility Provider",
+  chargingStationManufacturers: "Charging Station Manufacturer",
+  energyMeterManufacturers: "Energy Meter Manufacturer",
+  transparencySoftwareManufacturers: "Transparency Software Manufacturer",
+  conformityAssessmentBodies: "Conformity Assessment Body"
+};
+var KEY_PROPERTIES2 = ["@id", "@context", "key", "notBefore", "notAfter", "holder", "usages"];
+var ENTITY_PROPERTIES = {
+  "": [
+    "@context",
+    "@id",
+    "chargingStationManufacturerIds",
+    "chargingStationManufacturers",
+    "chargingStationOperatorIds",
+    "chargingStationOperators",
+    "conformityAssessmentBodies",
+    "conformityAssessmentBodyIds",
+    "created",
+    "customData",
+    "dataLicenseIds",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMobilityProviderIds",
+    "eMobilityProviders",
+    "eTags",
+    "energyMeterManufacturerIds",
+    "energyMeterManufacturers",
+    "gridOperatorIds",
+    "gridOperators",
+    "lastChange",
+    "name",
+    "operator",
+    "parkingOperatorIds",
+    "parkingOperators",
+    "transparencySoftwareManufacturerIds",
+    "transparencySoftwareManufacturers",
+    "treeHashAlgorithms"
+  ],
+  "operator": [
+    "@context",
+    "@id",
+    "address",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "homepage",
+    "hotline",
+    "hotlineEMailAddress",
+    "identityKeys",
+    "keyStatement",
+    "lastChange",
+    "minConsensus",
+    "name",
+    "signingKeyCertificates"
+  ],
+  "chargingStationOperators": [
+    "@context",
+    "@id",
+    "EVSEGroupIds",
+    "EVSEGroups",
+    "EVSETemplateIds",
+    "EVSETemplates",
+    "address",
+    "brandIds",
+    "brands",
+    "chargingPoolGroupIds",
+    "chargingPoolGroups",
+    "chargingPoolIds",
+    "chargingPoolTemplateIds",
+    "chargingPoolTemplates",
+    "chargingPools",
+    "chargingStationGroupIds",
+    "chargingStationGroups",
+    "chargingStationTemplateIds",
+    "chargingStationTemplates",
+    "chargingTariffGroupIds",
+    "chargingTariffGroups",
+    "chargingTariffIds",
+    "chargingTariffOfferIds",
+    "chargingTariffOffers",
+    "chargingTariffTemplateIds",
+    "chargingTariffTemplates",
+    "chargingTariffs",
+    "created",
+    "customData",
+    "dataLicenseIds",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "energyMeterGroupIds",
+    "energyMeterGroups",
+    "energyMeterTemplateIds",
+    "energyMeterTemplates",
+    "evTaler",
+    "exception",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "parkingSpaceIds",
+    "parkingSpaces",
+    "signingKeys",
+    "stackTrace",
+    "telephone",
+    "termsAndConditions",
+    "uri"
+  ],
+  "eMobilityProviders": [
+    "@context",
+    "@id",
+    "EVSEGroupIds",
+    "EVSEGroups",
+    "address",
+    "chargingPoolGroupIds",
+    "chargingPoolGroups",
+    "chargingStationGroupIds",
+    "chargingStationGroups",
+    "chargingTariffOfferIds",
+    "chargingTariffOffers",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "signingKeys",
+    "telephone",
+    "termsAndConditions",
+    "uri"
+  ],
+  "gridOperators": [
+    "@context",
+    "@id",
+    "address",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "energyMeterGroupIds",
+    "energyMeterGroups",
+    "energyMeterTemplateIds",
+    "energyMeterTemplates",
+    "gridConnectionPointIds",
+    "gridConnectionPoints",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "name",
+    "signingKeys"
+  ],
+  "parkingOperators": [
+    "@context",
+    "@id",
+    "address",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "name",
+    "parkingGarageIds",
+    "parkingGarages",
+    "parkingProductIds",
+    "parkingProducts",
+    "parkingSensorIds",
+    "parkingSensors",
+    "parkingSpaceGroupIds",
+    "parkingSpaceGroups",
+    "parkingSpaceIds",
+    "parkingSpaceTemplateIds",
+    "parkingSpaceTemplates",
+    "parkingSpaces",
+    "signingKeys"
+  ],
+  "chargingStationManufacturers": [
+    "@context",
+    "@id",
+    "address",
+    "chargingStationModelIds",
+    "chargingStationModels",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "signingKeys",
+    "telephone",
+    "termsAndConditions",
+    "uri"
+  ],
+  "energyMeterManufacturers": [
+    "@context",
+    "@id",
+    "address",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "energyMeterModelIds",
+    "energyMeterModels",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "signingKeys",
+    "telephone",
+    "termsAndConditions",
+    "uri"
+  ],
+  "transparencySoftwareManufacturers": [
+    "@context",
+    "@id",
+    "address",
+    "craRole",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "securityAdvisories",
+    "signingKeys",
+    "telephone",
+    "termsAndConditions",
+    "transparencySoftware",
+    "transparencySoftwareIds",
+    "uri",
+    "vulnerabilityContact",
+    "vulnerabilityDisclosurePolicy",
+    "vulnerabilityReporting"
+  ],
+  "conformityAssessmentBodies": [
+    "@context",
+    "@id",
+    "address",
+    "certificateIds",
+    "certificates",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "eMailAddress",
+    "geoLocation",
+    "homepage",
+    "hotline",
+    "identityKeys",
+    "lastChange",
+    "logos",
+    "name",
+    "notifiedBodyNumber",
+    "notifiedFor",
+    "signingKeys",
+    "telephone",
+    "termsAndConditions",
+    "uri"
+  ],
+  "chargingTariffs": [
+    "@context",
+    "@id",
+    "created",
+    "currency",
+    "customData",
+    "dataSource",
+    "description",
+    "elements",
+    "energyMix",
+    "lastChange",
+    "maxPrice",
+    "minPrice",
+    "name",
+    "paymentBrands",
+    "paymentMeans",
+    "tariffType",
+    "tariffURL",
+    "templateIds",
+    "validFrom",
+    "validUntil"
+  ],
+  "chargingTariffTemplates": [
+    "@context",
+    "@id",
+    "created",
+    "currency",
+    "customData",
+    "dataSource",
+    "description",
+    "elements",
+    "energyMix",
+    "lastChange",
+    "maxPrice",
+    "minPrice",
+    "name",
+    "paymentBrands",
+    "paymentMeans",
+    "tariffType",
+    "tariffURL",
+    "validFrom",
+    "validUntil"
+  ],
+  "chargingTariffGroups": [
+    "@context",
+    "@id",
+    "chargingTariffIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "lastChange",
+    "name"
+  ],
+  "chargingTariffOffers": [
+    "@context",
+    "@id",
+    "EVSEGroupIds",
+    "chargingPoolGroupIds",
+    "chargingStationGroupIds",
+    "chargingStationOperatorIds",
+    "chargingTariff",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "discount",
+    "eMobilityProviderIds",
+    "lastChange",
+    "maxSessionsPerContract",
+    "name",
+    "notAfter",
+    "notBefore",
+    "openingTimes",
+    "sessions"
+  ],
+  "elements": ["@context", "priceComponents", "restrictions"],
+  "chargingPools": [
+    "@context",
+    "@id",
+    "accessibility",
+    "address",
+    "arrivalInstructions",
+    "assistanceServiceDetails",
+    "authenticationModes",
+    "brandIds",
+    "brands",
+    "chargingStationIds",
+    "chargingStations",
+    "chargingWhenClosed",
+    "created",
+    "customData",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "energyMeterIds",
+    "energyMeters",
+    "energyMix",
+    "entranceAddress",
+    "entranceLocation",
+    "exitAddress",
+    "exitLocation",
+    "facilities",
+    "features",
+    "geoLocation",
+    "gridConnectionPoint",
+    "gridConnectionPointId",
+    "hotline",
+    "images",
+    "lastChange",
+    "locationLanguages",
+    "name",
+    "nutsCodes",
+    "openingTimes",
+    "parkingRestrictions",
+    "parkingType",
+    "paymentOptions",
+    "relatedLocations",
+    "services",
+    "standards",
+    "templateIds",
+    "timeZone",
+    "uiFeatures"
+  ],
+  "chargingPoolTemplates": [
+    "@context",
+    "@id",
+    "accessibility",
+    "address",
+    "arrivalInstructions",
+    "assistanceServiceDetails",
+    "authenticationModes",
+    "brandIds",
+    "brands",
+    "chargingTariffId",
+    "chargingWhenClosed",
+    "created",
+    "customData",
+    "dataLicenseIds",
+    "dataLicenses",
+    "dataSource",
+    "description",
+    "energyMix",
+    "entranceAddress",
+    "entranceLocation",
+    "exitAddress",
+    "exitLocation",
+    "facilities",
+    "features",
+    "geoLocation",
+    "gridConnectionPointId",
+    "hotline",
+    "images",
+    "lastChange",
+    "locationLanguages",
+    "name",
+    "nutsCodes",
+    "openingTimes",
+    "parkingRestrictions",
+    "parkingType",
+    "paymentOptions",
+    "relatedLocations",
+    "services",
+    "standards",
+    "timeZone",
+    "uiFeatures"
+  ],
+  "chargingPoolGroups": [
+    "@context",
+    "@id",
+    "chargingPoolIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "lastChange",
+    "name"
+  ],
+  "chargingStations": [
+    "@context",
+    "@id",
+    "EVSEIds",
+    "EVSEs",
+    "accessibility",
+    "address",
+    "brandIds",
+    "brands",
+    "calibrationInfo",
+    "certificateIds",
+    "certificationInfo",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "energyMeterIds",
+    "energyMeters",
+    "euVehicleCategories",
+    "features",
+    "firmwareVersion",
+    "geoLocation",
+    "hardwareRevision",
+    "hotline",
+    "images",
+    "lastChange",
+    "manufacturerId",
+    "maxPower",
+    "modelId",
+    "modelURL",
+    "name",
+    "openingTimes",
+    "parkingSpaceIds",
+    "physicalReference",
+    "publicKeys",
+    "serialNumber",
+    "signatureMethods",
+    "templateIds",
+    "transparencySoftwareStatus",
+    "vehicleTypes"
+  ],
+  "chargingStationTemplates": [
+    "@context",
+    "@id",
+    "accessibility",
+    "address",
+    "brandIds",
+    "brands",
+    "calibrationInfo",
+    "certificateIds",
+    "certificationInfo",
+    "chargingTariffId",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "euVehicleCategories",
+    "features",
+    "firmwareVersion",
+    "geoLocation",
+    "hardwareRevision",
+    "hotline",
+    "images",
+    "lastChange",
+    "manufacturerId",
+    "maxPower",
+    "modelId",
+    "modelURL",
+    "name",
+    "openingTimes",
+    "parkingSpaceIds",
+    "physicalReference",
+    "signatureMethods",
+    "transparencySoftwareStatus",
+    "vehicleTypes"
+  ],
+  "chargingStationGroups": [
+    "@context",
+    "@id",
+    "chargingStationIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "lastChange",
+    "name"
+  ],
+  "EVSEs": [
+    "@context",
+    "@id",
+    "acceptedEMobilityProviderIds",
+    "brandIds",
+    "brands",
+    "chargingConnectorIds",
+    "chargingConnectors",
+    "chargingModes",
+    "chargingTariffIds",
+    "created",
+    "currentTypes",
+    "customData",
+    "dataSource",
+    "description",
+    "energyMeter",
+    "extendedOperationTimeout",
+    "floorLevel",
+    "geoLocation",
+    "images",
+    "iso15118Certificate",
+    "lastChange",
+    "maxCurrent",
+    "maxPower",
+    "maxReservationDuration",
+    "maxVoltage",
+    "name",
+    "operationTimeout",
+    "physicalReference",
+    "reachDistance",
+    "standards",
+    "templateIds"
+  ],
+  "EVSETemplates": [
+    "@context",
+    "@id",
+    "acceptedEMobilityProviderIds",
+    "brandIds",
+    "brands",
+    "chargingConnectorIds",
+    "chargingConnectors",
+    "chargingModes",
+    "chargingTariffId",
+    "created",
+    "currentTypes",
+    "customData",
+    "dataSource",
+    "description",
+    "extendedOperationTimeout",
+    "floorLevel",
+    "geoLocation",
+    "images",
+    "lastChange",
+    "maxCurrent",
+    "maxPower",
+    "maxReservationDuration",
+    "maxVoltage",
+    "name",
+    "operationTimeout",
+    "physicalReference",
+    "reachDistance",
+    "standards"
+  ],
+  "EVSEGroups": [
+    "@context",
+    "@id",
+    "EVSEIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "lastChange",
+    "name"
+  ],
+  "chargingConnectors": [
+    "@context",
+    "@id",
+    "cableLength",
+    "cableManagementSystem",
+    "cableWeight",
+    "chargingTariffIds",
+    "currentTypes",
+    "format",
+    "images",
+    "lockable",
+    "maxCurrent",
+    "maxPower",
+    "maxVoltage",
+    "standards",
+    "type"
+  ],
+  "energyMeter": [
+    "@context",
+    "@id",
+    "certificateIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "firmwareVersion",
+    "hardwareRevision",
+    "lastChange",
+    "manufacturerId",
+    "modelId",
+    "modelURL",
+    "name",
+    "publicKeys",
+    "role",
+    "serialNumber",
+    "signatureMethods",
+    "templateIds",
+    "transparencySoftwareStatus"
+  ],
+  "energyMeterTemplates": [
+    "@context",
+    "@id",
+    "certificateIds",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "firmwareVersion",
+    "hardwareRevision",
+    "lastChange",
+    "manufacturerId",
+    "modelId",
+    "modelURL",
+    "name",
+    "role",
+    "signatureMethods",
+    "transparencySoftwareStatus"
+  ],
+  "energyMeterGroups": [
+    "@context",
+    "@id",
+    "created",
+    "customData",
+    "dataSource",
+    "description",
+    "energyMeterIds",
+    "lastChange",
+    "name"
+  ],
+  "transparencySoftwareStatus": ["@context", "certificateId", "legalStatus", "transparencySoftwareId"],
+  "gridConnectionPoints": [
+    "@context",
+    "@id",
+    "address",
+    "connectionAgreementId",
+    "connectionType",
+    "contractedExportApparentPower",
+    "contractedExportPower",
+    "contractedImportApparentPower",
+    "contractedImportPower",
+    "customData",
+    "description",
+    "energyMeter",
+    "geoLocation",
+    "gridOperator",
+    "gridOperatorId",
+    "maintainedBy",
+    "marketLocationIds",
+    "meteringLocationIds",
+    "name",
+    "networkLocationId",
+    "nominalFrequency",
+    "nominalVoltage",
+    "voltageLevel"
+  ],
+  "chargingStationModels": [
+    "@context",
+    "@id",
+    "connectorTypes",
+    "currentTypes",
+    "customData",
+    "datasheetURL",
+    "description",
+    "firmwareVersions",
+    "hardwareRevisions",
+    "images",
+    "manufacturerId",
+    "maxPower",
+    "name",
+    "numberOfEVSEs",
+    "productURL"
+  ],
+  "energyMeterModels": [
+    "@context",
+    "@id",
+    "accuracyClass",
+    "currentTypes",
+    "customData",
+    "datasheetURL",
+    "description",
+    "firmwareVersions",
+    "hardwareRevisions",
+    "images",
+    "manufacturerId",
+    "maxCurrent",
+    "measurands",
+    "name",
+    "productURL",
+    "signatureMethods"
+  ]
+};
+var PROPERTIES_OF = {
+  ...ENTITY_PROPERTIES,
+  geoLocation: ["@context", "lat", "lng", "alt", "projection"],
+  priceComponents: ["@context", "type", "price", "stepSize", "vat"],
+  publicKeys: ["@context", "@id", "key", "certificateChain"],
+  signingKeys: KEY_PROPERTIES2,
+  identityKeys: KEY_PROPERTIES2,
+  signingKey: KEY_PROPERTIES2,
+  keyStatement: ["@context", "roamingNetworkId", "roamingNetworkOperatorId", "identityKeys", "minConsensus", "signedAt", "validUntil", "signatures"],
+  signatures: ["algorithm", "keyId", "value"],
+  signingKeyCertificates: ["@context", "roamingNetworkOperatorId", "signingKey", "signedAt", "algorithm", "keyId", "value"],
+  evTaler: ["@context", "merchantBaseURL", "merchantPublicKey", "exchanges"],
+  exchanges: ["@context", "masterPublicKey", "baseURL", "currency", "name"]
+};
+var TRIMMED = /* @__PURE__ */ new Set([
+  "@id",
+  "currency",
+  "chargingTariffId",
+  "manufacturerId",
+  "modelId",
+  "transparencySoftwareId",
+  "version",
+  "vulnerabilityContact",
+  "energyMeterManufacturerId",
+  "energyMeterModel",
+  "roamingNetworkId",
+  "roamingNetworkOperatorId",
+  "sourceCodeRepository",
+  "declarationOfConformity",
+  "softwareBillOfMaterials",
+  "documentURL"
+]);
+var URLS = /* @__PURE__ */ new Set(["homepage", "datasheetURL", "vulnerabilityReporting", "vulnerabilityDisclosurePolicy", "securityAdvisories", "merchantBaseURL", "baseURL"]);
+var NAMED_VALUES = {
+  role: ["battery", "evse", "grid", "gridConnectionPoint", "pool", "pv", "station", "wind"],
+  legalStatus: ["forInformationOnly", "germanCalibrationLaw", "verified"],
+  signatureMethods: ["AlfenCrypt01", "AlfenCrypt03", "ChargePointCrypt01", "EDL40", "EMHCrypt01", "MennekesCrypt01", "OCMF", "PCDF"]
+};
+var RELEASE_PROPERTIES = [
+  "@context",
+  "@id",
+  "name",
+  "version",
+  "openSourceLicenses",
+  "sourceCodeRepository",
+  "supportUntil",
+  "declarationOfConformity",
+  "softwareBillOfMaterials",
+  "howToUse",
+  "moreInformation",
+  "logo"
+];
+var LICENSE_PROPERTIES = ["@context", "@id", "description", "URLs"];
+var KNOWN_DATA_LICENSES = /* @__PURE__ */ new Set([
+  "None",
+  "PDDL",
+  "ODC-By",
+  "ODbL",
+  "dl-de/by-2-0",
+  "dl-de/zero-2-0",
+  "GeoLizenz_V1.3",
+  "CC BY 4.0",
+  "CC BY-SA 4.0",
+  "CC BY-ND 4.0",
+  "CC BY-NC 4.0",
+  "CC BY-NC-SA 4.0",
+  "CC BY-NC-ND 4.0"
+]);
+var DAYS_OF_WEEK = ["MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"];
+var TIMESTAMP_PROPERTIES = /* @__PURE__ */ new Set(["created", "lastChange", "validFrom", "validUntil", "notBefore", "notAfter", "signedAt", "supportUntil"]);
+var TIMESTAMP3 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
+function orderKeys(items, property) {
+  if (property === "signingKeyCertificates" && items.every(isObject))
+    return items.map((item) => `${idOf4(isObject(item) ? item["signingKey"] : void 0)}\0${isObject(item) ? asText(item["keyId"]) : ""}`);
+  if (property === "authenticationModes" && items.every(isObject))
+    return items.map((item) => isObject(item) ? asText(item["type"]) : "");
+  if (property === "transparencySoftwareStatus" && items.every(isObject))
+    return items.map((item) => isObject(item) ? asText(item["transparencySoftwareId"]) : "");
+  if (property === "exchanges" && items.every(isObject))
+    return items.map((item) => isObject(item) ? asText(item["masterPublicKey"]) : "");
+  if (property === "daysOfWeek")
+    return items.map((item) => String(DAYS_OF_WEEK.indexOf(typeof item === "string" ? item : "")).padStart(2, "0"));
+  if (items.length > 0 && items.every((item) => isObject(item) && typeof item["@id"] === "string"))
+    return items.map(idOf4);
+  if (property !== void 0 && ORDERED_TEXTS.has(property) && items.every((item) => typeof item === "string"))
+    return items.map((item) => typeof item === "string" ? item : "");
+  return void 0;
+}
+var languagesOf = (text) => [...new Set(Object.entries(text).filter(([, value]) => typeof value === "string").map(([language]) => LANGUAGES.has(language.toLowerCase()) ? language.toLowerCase() : /^\d+$/u.test(language) && Number(language) < LANGUAGES.size ? `(language ${language})` : /^[+-]?\d+$/u.test(language) ? language : void 0).filter((language) => language !== void 0))];
+function writtenValueOf(property, value, holder) {
+  if ((property === "@id" || property === "type" && holder === "chargingConnectors") && (typeof value === "number" || typeof value === "boolean"))
+    return String(value);
+  if (typeof value === "string") {
+    if (property === "@id" && holder === "chargingStationOperators")
+      return trimmed(value).toUpperCase();
+    if (TRIMMED.has(property) || property === "type" && holder === "chargingConnectors")
+      return trimmed(value);
+    if (URLS.has(property))
+      return hermodURL(value)?.text;
+    const names = NAMED_VALUES[property];
+    if (names !== void 0)
+      return names.find((name) => name.toLowerCase() === trimmed(value).toLowerCase()) ?? trimmed(value);
+  }
+  if (holder === "geoLocation" && (property === "lat" || property === "lng") && (typeof value === "number" || typeof value === "object") && value !== null && !isArray(value)) {
+    const number = Number(canonicalJSON(value));
+    return Number.isFinite(number) ? number : void 0;
+  }
+  return void 0;
+}
+var contentText = (value) => typeof value === "number" && !Number.isSafeInteger(value) ? String(value) : canonicalJSON(value);
+function asRead(value, kind) {
+  if (isArray(value))
+    return value.map((element) => asRead(element, kind));
+  if (!isObject(value))
+    return value;
+  const known = PROPERTIES_OF[kind];
+  return Object.fromEntries(Object.entries(value).filter(([key]) => known === void 0 || known.includes(key)).map(([key, element]) => [key, PROPERTIES_OF[key] === void 0 ? element : asRead(element, key)]));
+}
+function notWritten(value, property, path, of) {
+  const eachOnce = of === "new value";
+  const join = (at, key) => at === "" ? key : `${at}.${key}`;
+  const holdsAs = (at, written) => ({ path: at, reason: `the content holds it as '${contentText(written)}'` });
+  const leftOut = (key, element, kind, keepsEmptyName) => {
+    if (element === null)
+      return "a property without a value is left out";
+    if (isArray(element) && element.length === 0 && LEFT_OUT_WHEN_EMPTY.has(key) && !(key === "identityKeys" && kind === "keyStatement"))
+      return "a list without elements is left out";
+    if (TEXTS_IN_LANGUAGES.has(key) && isObject(element) && languagesOf(element).length === 0 && !(key === "name" && keepsEmptyName))
+      return "the content leaves it out";
+    if (key === "dataLicenseIds")
+      return "the content leaves it out";
+    const known = kind === void 0 ? void 0 : PROPERTIES_OF[kind];
+    if (known !== void 0 && !known.includes(key))
+      return "the content leaves it out";
+    return void 0;
+  };
+  const check2 = (item, name, holder, at, root = false) => {
+    if (name === "customData")
+      return void 0;
+    if (isArray(item)) {
+      if (name !== void 0 && ORDERED_TEXTS.has(name) && item.some((element) => typeof element === "string" && trimmed(element) !== element))
+        return { path: at, reason: "the texts of its elements are trimmed" };
+      const keys = orderKeys(item, name);
+      if (keys?.some((key, index) => index > 0 && ordinal(keys[index - 1] ?? "", key) >= (eachOnce ? 0 : 1)) === true)
+        return { path: at, reason: eachOnce ? "its elements are in the order the content holds them in, each once" : "its elements are in the order the content holds them in" };
+      for (const [index, element] of item.entries()) {
+        const elementAt = `${at}[${String(index)}]`;
+        if (typeof element === "string" && name !== void 0 && NAMED_VALUES[name] !== void 0) {
+          const written = writtenValueOf(name, element, holder);
+          if (written !== void 0 && written !== element)
+            return holdsAs(elementAt, written);
+        }
+        const found = check2(element, void 0, name, elementAt);
+        if (found !== void 0)
+          return found;
+      }
+      return void 0;
+    }
+    if (isObject(item)) {
+      const kind = root ? "" : name ?? holder;
+      const party = name === void 0 && holder !== void 0 ? PARTY_NAMES[holder] : void 0;
+      const keepsEmptyName = name === void 0 && holder === "chargingStationOperators";
+      if (name !== void 0 && TEXTS_IN_LANGUAGES.has(name) && [...Object.keys(item)].sort(ordinal).join("\0") !== languagesOf(item).sort(ordinal).join("\0"))
+        return { path: at, reason: "a text in languages names each language as Styx writes it, in lower case, with a text" };
+      for (const [key, element] of Object.entries(item)) {
+        if (key === "@context") {
+          if (root)
+            continue;
+          return { path: at, reason: "embedded, an object names no JSON-LD context" };
+        }
+        const elementAt = join(at, key);
+        const omitted2 = leftOut(key, element, kind, keepsEmptyName);
+        if (omitted2 !== void 0)
+          return { path: elementAt, reason: omitted2 };
+        if (typeof element === "string" && TIMESTAMP_PROPERTIES.has(key) && !TIMESTAMP3.test(element))
+          return { path: elementAt, reason: "a timestamp is UTC to the millisecond, yyyy-MM-ddTHH:mm:ss.fffZ" };
+        const written = key === "customData" ? void 0 : writtenValueOf(key, element, kind);
+        if (written !== void 0 && contentText(written) !== contentText(element))
+          return holdsAs(elementAt, written);
+        const found = check2(element, key, kind, elementAt);
+        if (found !== void 0)
+          return found;
+      }
+      if (party !== void 0 && !("name" in item))
+        return holdsAs(join(at, "name"), { en: `${party} '${asText(writtenValueOf("@id", item["@id"] ?? "", holder) ?? item["@id"])}'` });
+      for (const list of name === void 0 && holder !== void 0 ? WRITTEN_ALSO_EMPTY[holder] ?? [] : [])
+        if (!(list in item))
+          return holdsAs(join(at, list), []);
+      if (!eachOnce && typeof item["created"] === "string" && !("lastChange" in item))
+        return holdsAs(join(at, "lastChange"), item["created"]);
+    }
+    return void 0;
+  };
+  const omitted = property === void 0 ? void 0 : leftOut(property, value, void 0, false);
+  if (omitted !== void 0)
+    return { path, reason: omitted };
+  return check2(value, property, void 0, path, of === "version" && property === void 0);
+}
+function notWrittenAsHeld(content) {
+  const unknownLicense = (value) => {
+    if (isArray(value))
+      return value.map(unknownLicense).find((found2) => found2 !== void 0);
+    if (!isObject(value))
+      return void 0;
+    for (const [key, element] of Object.entries(value)) {
+      if (key === "customData")
+        continue;
+      const unknown = key === "dataLicenseIds" && isArray(element) ? element.find((id) => typeof id === "string" && !KNOWN_DATA_LICENSES.has(id)) : void 0;
+      if (unknown !== void 0)
+        return `The data license '${asText(unknown)}' is not well-known, so it must be given completely!`;
+      const found2 = unknownLicense(element);
+      if (found2 !== void 0)
+        return found2;
+    }
+    return void 0;
+  };
+  const license = unknownLicense(content);
+  if (license !== void 0)
+    return license;
+  for (const manufacturer of isArray(content["transparencySoftwareManufacturers"]) ? content["transparencySoftwareManufacturers"].filter(isObject) : [])
+    for (const release of isArray(manufacturer["transparencySoftware"]) ? manufacturer["transparencySoftware"].filter(isObject) : []) {
+      const unknown = Object.keys(release).find((property) => !RELEASE_PROPERTIES.includes(property));
+      if (unknown !== void 0)
+        return `TransparencySoftware: Unknown property '${unknown}'.`;
+      for (const [index, license2] of (isArray(release["openSourceLicenses"]) ? release["openSourceLicenses"] : []).entries()) {
+        const unknownOfLicense = isObject(license2) ? Object.keys(license2).find((property) => !LICENSE_PROPERTIES.includes(property)) : void 0;
+        if (unknownOfLicense !== void 0)
+          return `TransparencySoftware: openSourceLicenses[${String(index)}]: Unknown property '${unknownOfLicense}'.`;
+      }
+    }
+  const found = notWritten(content, void 0, "", "version");
+  return found === void 0 ? void 0 : `'${found.path}' is not written as the content holds it: ${found.reason}!`;
+}
+
 // src/network/tree.ts
 var CHILD_ARRAYS = {
   roamingNetwork: {
@@ -2406,37 +3744,57 @@ var KeyStatement = class _KeyStatement {
   validUntil;
   signatures;
   json;
-  /** Reads a key statement, refusing properties it does not know: whatever is not signed is not taken. */
+  /**
+   * Reads a key statement as `RoamingNetworkKeyStatement.TryParse` of WWCP_POI3 reads it, in its words and order: its
+   * context, the roaming network and its operator, its identity keys, `signedAt` and `validUntil` as POI writes them,
+   * `minConsensus`, its signatures. Then what this library refuses besides, as whatever is not signed is not taken: a
+   * property it does not know, identity keys out of the order of their `@id`s, a `validUntil` before its `signedAt`.
+   */
   static parse(value) {
     const json = requireObject(value, "A key statement");
-    checkContext(json, KEY_STATEMENT_CONTEXT, "a key statement");
-    onlyProperties(json, ["@context", "roamingNetworkId", "roamingNetworkOperatorId", "identityKeys", "minConsensus", "signedAt", "validUntil", "signatures"], "A key statement");
-    const roamingNetworkId = requireString(json, "roamingNetworkId", "The roaming network of a key statement");
-    const roamingNetworkOperatorId = requireString(json, "roamingNetworkOperatorId", "The roaming network operator of a key statement");
-    const identityKeys = POIPublicKey.parseAll(json["identityKeys"], "identity keys of the key statement");
+    if (get(json, "@context") !== void 0 && get(json, "@context") !== KEY_STATEMENT_CONTEXT)
+      throw new POIError(`The JSON-LD context of the key statement must be '${KEY_STATEMENT_CONTEXT}'!`);
+    const roamingNetworkId = trimmed(mandatoryText(json, "roamingNetworkId", "The roaming network of a key statement"));
+    const roamingNetworkOperatorId = trimmed(mandatoryText(json, "roamingNetworkOperatorId", "The roaming network operator of a key statement"));
+    const identityKeysJSON = get(json, "identityKeys");
+    if (identityKeysJSON !== void 0 && !isArray(identityKeysJSON))
+      throw new POIError("The identityKeys of a key statement must be a JSON array!");
+    const identityKeys = (identityKeysJSON ?? []).map((item) => {
+      try {
+        return POIPublicKey.parse(item);
+      } catch {
+        throw new POIError("Invalid key in the identityKeys of a key statement!");
+      }
+    });
     if (identityKeys.length === 0)
       throw new POIError("A key statement requires its identityKeys!");
+    const signedAt = timestampAt(json, "signedAt");
+    const validUntil = timestampAt(json, "validUntil");
+    if (signedAt === void 0 || validUntil === void 0)
+      throw new POIError("The signedAt and validUntil of a key statement must be written as yyyy-MM-ddTHH:mm:ss.fffZ!");
+    const minConsensus = get(json, "minConsensus");
+    if (typeof minConsensus !== "number" || !Number.isInteger(minConsensus) || minConsensus < 1 || minConsensus > 255)
+      throw new POIError("A key statement requires its minConsensus, a whole number from 1 to 255!");
+    const signaturesJSON = get(json, "signatures");
+    if (!isArray(signaturesJSON) || signaturesJSON.length === 0)
+      throw new POIError("A key statement requires its signatures!");
+    const signatures = signaturesJSON.map((item) => {
+      const algorithm = isObject(item) ? nonemptyText(item, "algorithm") : void 0;
+      const keyId = isObject(item) ? nonemptyText(item, "keyId") : void 0;
+      const value2 = isObject(item) ? nonemptyText(item, "value") : void 0;
+      if (!isObject(item) || algorithm === void 0 || keyId === void 0 || value2 === void 0)
+        throw new POIError("Every signature of a key statement requires an algorithm, a key identification and a value!");
+      onlyProperties(item, ["algorithm", "keyId", "value"], "A signature of a key statement");
+      return { algorithm, keyId, value: value2 };
+    });
+    onlyProperties(json, ["@context", "roamingNetworkId", "roamingNetworkOperatorId", "identityKeys", "minConsensus", "signedAt", "validUntil", "signatures"], "A key statement");
     if (identityKeys.some((key, index) => {
       const before = identityKeys[index - 1];
       return before !== void 0 && before.id >= key.id;
     }))
       throw new POIError("The identity keys of a key statement are written in the order of their @ids!");
-    const minConsensus = requireInteger(json, "minConsensus", 1, 255, "The minConsensus of a key statement");
-    const signedAt = requireTimestamp(json, "signedAt", "The signedAt of a key statement");
-    const validUntil = requireTimestamp(json, "validUntil", "The validUntil of a key statement");
     if (validUntil < signedAt)
       throw new POIError("A key statement is not valid until before it was signed!");
-    const signatures = requireArray(json["signatures"], "The signatures of a key statement").map((item) => {
-      const signature = requireObject(item, "A signature of a key statement");
-      onlyProperties(signature, ["algorithm", "keyId", "value"], "A signature of a key statement");
-      return {
-        algorithm: requireString(signature, "algorithm"),
-        keyId: requireString(signature, "keyId"),
-        value: requireString(signature, "value")
-      };
-    });
-    if (signatures.length === 0)
-      throw new POIError("A key statement requires its signatures!");
     return new _KeyStatement(roamingNetworkId, roamingNetworkOperatorId, identityKeys, minConsensus, signedAt, validUntil, signatures, json);
   }
   /** The statement as it is signed: without `signatures`, with its `@context`, keys embedded without theirs. */
@@ -2546,7 +3904,7 @@ var KeyStatement = class _KeyStatement {
 
 // src/proofs/signingKeyCertificate.ts
 var SIGNING_KEY_CERTIFICATE_CONTEXT = CONTEXT_PREFIX + "roamingNetwork/signingKeyCertificate/v2";
-var describeHolder = (key) => key.holder !== void 0 ? `'${key.holder}'` : "no named holder";
+var describeHolder = (key) => key.holder !== void 0 ? `the holder '${key.holder}'` : "no named holder";
 var SigningKeyCertificate = class _SigningKeyCertificate {
   constructor(roamingNetworkOperatorId, signingKey, signedAt, algorithm, keyId, value, json) {
     this.roamingNetworkOperatorId = roamingNetworkOperatorId;
@@ -2564,19 +3922,32 @@ var SigningKeyCertificate = class _SigningKeyCertificate {
   keyId;
   value;
   json;
+  /**
+   * Reads a certificate as `RoamingNetworkSigningKeyCertificate.TryParse` of WWCP_POI3 reads it, in its words and order:
+   * its context, the roaming network operator, the signing key it certifies, `signedAt` as POI writes it, the algorithm,
+   * key identification and value of its signature; then a property it does not know, which is not signed.
+   */
   static parse(value) {
     const json = requireObject(value, "A certificate of a signing key");
-    checkContext(json, SIGNING_KEY_CERTIFICATE_CONTEXT, "a certificate of a signing key");
+    if (get(json, "@context") !== void 0 && get(json, "@context") !== SIGNING_KEY_CERTIFICATE_CONTEXT)
+      throw new POIError(`The JSON-LD context of a signing key certificate must be '${SIGNING_KEY_CERTIFICATE_CONTEXT}'!`);
+    const roamingNetworkOperatorId = trimmed(mandatoryText(json, "roamingNetworkOperatorId", "The roaming network operator of a certificate"));
+    let signingKey;
+    try {
+      signingKey = POIPublicKey.parse(isObject(json["signingKey"]) ? json["signingKey"] : void 0);
+    } catch {
+      throw new POIError("A signing key certificate requires the signingKey it certifies!");
+    }
+    const signedAt = timestampAt(json, "signedAt");
+    if (signedAt === void 0)
+      throw new POIError("The signedAt of a signing key certificate must be written as yyyy-MM-ddTHH:mm:ss.fffZ!");
+    const algorithm = nonemptyText(json, "algorithm");
+    const keyId = nonemptyText(json, "keyId");
+    const signature = nonemptyText(json, "value");
+    if (algorithm === void 0 || keyId === void 0 || signature === void 0)
+      throw new POIError("A signing key certificate requires the algorithm, the key identification and the value of its signature!");
     onlyProperties(json, ["@context", "roamingNetworkOperatorId", "signingKey", "signedAt", "algorithm", "keyId", "value"], "A certificate of a signing key");
-    return new _SigningKeyCertificate(
-      requireString(json, "roamingNetworkOperatorId", "The roaming network operator of a certificate"),
-      POIPublicKey.parse(json["signingKey"], "The signing key of a certificate"),
-      requireTimestamp(json, "signedAt", "The signedAt of a certificate"),
-      requireString(json, "algorithm"),
-      requireString(json, "keyId"),
-      requireString(json, "value"),
-      json
-    );
+    return new _SigningKeyCertificate(roamingNetworkOperatorId, signingKey, signedAt, algorithm, keyId, signature, json);
   }
   /** The signature input: the certificate without `value`, with its `@context`, its signing key embedded without its. */
   signingBytes() {
@@ -2614,6 +3985,9 @@ var SigningKeyCertificate = class _SigningKeyCertificate {
 
 // src/network/roamingNetwork.ts
 var ROAMING_NETWORK_CONTEXT = CONTEXT_PREFIX + "roamingNetwork/v1";
+var KeyStatementError = class extends POIError {
+};
+var sameId2 = (left, right) => ignoringCase(trimmed(left)) === ignoringCase(trimmed(right));
 var holdersOf = (keys) => new Set(keys.map((key) => key.holderOrUnnamed));
 var RoamingNetworkOperator = class _RoamingNetworkOperator {
   constructor(id, identityKeys, minConsensus, keyStatement, signingKeyCertificates, json) {
@@ -2647,68 +4021,72 @@ var RoamingNetworkOperator = class _RoamingNetworkOperator {
    */
   static parse(value, roamingNetworkId) {
     const json = requireObject(value, "The roaming network operator");
-    const id = requireString(json, "@id", "The identification of the roaming network operator");
+    const id = mandatoryText(json, "@id", "The identification of the roaming network operator");
     checkContext(json, CONTEXT_PREFIX + "roamingNetwork/operator/v1", `the roaming network operator '${id}'`);
     if (get(json, "signingKeys") !== void 0)
       throw new POIError("The signing keys of a roaming network operator are those of its signingKeyCertificates!");
     const identityKeys = partyKeysOf(json, `the roaming network operator '${id}'`, "a roaming network operator").identityKeys;
-    const minConsensus = get(json, "minConsensus") === void 0 ? 1 : requireInteger(json, "minConsensus", 1, 255, `The minConsensus of the roaming network operator '${id}'`);
-    const keyStatement = get(json, "keyStatement") === void 0 ? void 0 : KeyStatement.parse(get(json, "keyStatement"));
+    const minConsensus = get(json, "minConsensus") === void 0 ? 1 : requireInteger(json, "minConsensus", 1, 255, "The minConsensus of a roaming network operator");
+    const keyStatement = get(json, "keyStatement") === void 0 ? void 0 : KeyStatement.parse(asRead(requireObject(get(json, "keyStatement"), "The key statement"), "keyStatement"));
     const certificatesJSON = get(json, "signingKeyCertificates");
     const certificates = certificatesJSON === void 0 ? [] : (() => {
       if (!isArray(certificatesJSON) || certificatesJSON.length === 0)
         throw new POIError("The signingKeyCertificates of a roaming network operator must be a nonempty array!");
-      return certificatesJSON.map((certificate) => SigningKeyCertificate.parse(certificate));
+      return certificatesJSON.map((certificate) => SigningKeyCertificate.parse(asRead(certificate, "signingKeyCertificates")));
     })();
+    const invalid = (error) => new POIError(`The given JSON representation of a roaming network operator is invalid: ${error}`);
+    const certifications = certificates.map((certificate) => `${certificate.signingKey.id}/${certificate.keyId}`);
+    if (new Set(certifications).size !== certifications.length)
+      throw invalid(`An certificate of a signing key of the roaming network operator '${id}' must not be given twice!`);
     const certified = /* @__PURE__ */ new Map();
     for (const certificate of certificates) {
       const before = certified.get(certificate.signingKey.id);
-      if (before !== void 0 && !sameValue(without(before.json, "@context"), without(certificate.signingKey.json, "@context")))
-        throw new POIError(`The signing key '${certificate.signingKey.id}' of the roaming network operator '${id}' is certified twice in different forms!`);
+      if (before !== void 0 && !sameValue(without(before.json, "@context"), without(asRead(certificate.signingKey.json, "signingKey"), "@context")))
+        throw invalid(`An signing key of the roaming network operator '${id}' must not be given twice!`);
       certified.set(certificate.signingKey.id, certificate.signingKey);
     }
     const signingKeys = [...certified.values()];
-    const both = signingKeys.find((key) => identityKeys.some((identityKey) => identityKey.id === key.id));
+    const both = [...signingKeys].sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0).find((key) => identityKeys.some((identityKey) => identityKey.id === key.id));
     if (both !== void 0)
-      throw new POIError(`The key '${both.id}' of the roaming network operator '${id}' is both a signing key and an identity key!`);
+      throw invalid(`The key '${both.id}' of the roaming network operator '${id}' must not be both a signing and an identity key!`);
     for (const [kind, keys] of [["signing", signingKeys], ["identity", identityKeys]]) {
       const holders = holdersOf(keys).size;
       if (holders === 0) {
         if (minConsensus > 1)
-          throw new POIError(`The minConsensus ${minConsensus} of the roaming network operator '${id}' needs ${kind} keys of as many holders!`);
+          throw invalid(`The minConsensus ${minConsensus} of the roaming network operator '${id}' needs ${kind} keys of as many holders!`);
         continue;
       }
       if (minConsensus > holders)
-        throw new POIError(`The minConsensus ${minConsensus} of the roaming network operator '${id}' needs ${kind} keys of as many holders, not of ${holders}!`);
+        throw invalid(`The minConsensus ${minConsensus} of the roaming network operator '${id}' needs ${kind} keys of as many holders, not of ${holders}!`);
       if (2 * minConsensus <= holders)
-        throw new POIError(`The minConsensus ${minConsensus} of the roaming network operator '${id}' must be more than half of the ${holders} holders of its ${kind} keys!`);
+        throw invalid(`The minConsensus ${minConsensus} of the roaming network operator '${id}' must be more than half of the ${holders} holders of its ${kind} keys!`);
     }
+    if (keyStatement !== void 0 && !sameId2(keyStatement.roamingNetworkId, roamingNetworkId))
+      throw new KeyStatementError(`The key statement of the roaming network operator '${id}' is one of the roaming network '${keyStatement.roamingNetworkId}', not of '${roamingNetworkId}'!`);
     for (const certificate of certificates) {
-      if (certificate.roamingNetworkOperatorId !== id)
-        throw new POIError(`The certificate of the signing key '${certificate.signingKey.id}' of the roaming network operator '${id}' is one of '${certificate.roamingNetworkOperatorId}'!`);
+      if (!sameId2(certificate.roamingNetworkOperatorId, id))
+        throw new KeyStatementError(`The certificate of the signing key '${certificate.signingKey.id}' of the roaming network operator '${id}' is one of '${certificate.roamingNetworkOperatorId}'!`);
       try {
         certificate.verify(identityKeys);
       } catch (e) {
-        throw new POIError(`The roaming network operator '${id}': ${e instanceof Error ? e.message : String(e)}`);
+        throw new KeyStatementError(`The roaming network operator '${id}': ${e instanceof Error ? e.message : String(e)}`);
       }
     }
     if (keyStatement !== void 0) {
-      if (keyStatement.roamingNetworkId !== roamingNetworkId)
-        throw new POIError(`The key statement of the roaming network operator '${id}' is one of the roaming network '${keyStatement.roamingNetworkId}', not of '${roamingNetworkId}'!`);
-      if (keyStatement.roamingNetworkOperatorId !== id)
-        throw new POIError(`The key statement of the roaming network operator '${id}' is one of '${keyStatement.roamingNetworkOperatorId}'!`);
-      const unknown = keyStatement.identityKeys.find((key) => !identityKeys.some((identityKey) => sameValue(without(identityKey.json, "@context"), without(key.json, "@context"))));
+      if (!sameId2(keyStatement.roamingNetworkOperatorId, id))
+        throw new KeyStatementError(`The key statement of the roaming network operator '${id}' is one of '${keyStatement.roamingNetworkOperatorId}'!`);
+      const unknown = keyStatement.identityKeys.find((key) => !identityKeys.some((identityKey) => sameValue(without(asRead(identityKey.json, "identityKeys"), "@context"), without(key.json, "@context"))));
       if (unknown !== void 0)
-        throw new POIError(`The key statement of the roaming network operator '${id}' names the identity key '${unknown.id}', which is not one of its identity keys!`);
+        throw new KeyStatementError(`The key statement of the roaming network operator '${id}' names the identity key '${unknown.id}', which is not one of its identity keys!`);
       if (keyStatement.minConsensus !== minConsensus)
-        throw new POIError(`The key statement of the roaming network operator '${id}' states the minConsensus ${keyStatement.minConsensus}, not its ${minConsensus}!`);
+        throw new KeyStatementError(`The key statement of the roaming network operator '${id}' states the minConsensus ${keyStatement.minConsensus}, not its ${minConsensus}!`);
       try {
         const holders = /* @__PURE__ */ new Map();
         for (const key of identityKeys)
           holders.set(key.holderOrUnnamed, [...holders.get(key.holderOrUnnamed) ?? [], key.id]);
         keyStatement.verifyHolders([...holders.values()], identityKeys, { minConsensus });
       } catch (e) {
-        throw new POIError(minConsensus > 1 ? `The key statement of the roaming network operator '${id}' is not signed by identity keys of ${minConsensus} of its holders: ${e instanceof Error ? e.message : String(e)}` : `The key statement of the roaming network operator '${id}' is not signed by one of its identity keys: ${e instanceof Error ? e.message : String(e)}`);
+        throw new KeyStatementError(minConsensus > 1 ? `The key statement of the roaming network operator '${id}' is not signed by identity keys of ${minConsensus} of its holders: ${e instanceof Error ? e.message : String(e)}` : `The key statement of the roaming network operator '${id}' is not signed by one of its identity keys: ${e instanceof Error ? e.message : String(e)}`);
       }
     }
     return new _RoamingNetworkOperator(id, identityKeys, minConsensus, keyStatement, certificates, json);
@@ -2734,12 +4112,25 @@ var RoamingNetwork = class _RoamingNetwork {
    * revision, firmware version or serial number WWCP_POI refuses (`invalidVersionText`), nor a certificate WWCP_POI
    * refuses to read (`invalidCertificates`), nor an EV Taler merchant or payment options it refuses (`invalidEVTaler`),
    * nor keys of a party it refuses (`invalidPartyKeys`),
+   * nor what WWCP_POI takes and writes otherwise than the content holds it (`notWrittenAsHeld`),
    * also the version a change set leads to. Its `eTags` may be left out: what binds a version is the commit whose ETags it
    * has (`matchesCommitETags`).
    */
   static parse(value) {
+    return _RoamingNetwork.read(value, "version");
+  }
+  /**
+   * Reads the version the given change set leads to, its content after the last change, and refuses it as `parse`
+   * does, but in the words WWCP_POI3 names what it refuses of the network there (RoamingNetwork.ChangeSets.cs): its
+   * operator and the identifications it keeps unique within the roaming network bare, not as arguments of its
+   * constructor.
+   */
+  static afterChangeSet(content) {
+    return _RoamingNetwork.read(content, "change set");
+  }
+  static read(value, of) {
     const json = requireObject(value, "A roaming network");
-    const id = requireString(json, "@id", "The identification of a roaming network");
+    const id = mandatoryText(json, "@id", "The identification of a roaming network");
     checkContext(json, ROAMING_NETWORK_CONTEXT, `the roaming network '${id}'`);
     if (get(json, "signingKeys") !== void 0 || get(json, "identityKeys") !== void 0)
       throw new POIError(`The roaming network '${id}' names no keys of its own: those of its operator are its operator's!`);
@@ -2748,13 +4139,26 @@ var RoamingNetwork = class _RoamingNetwork {
     let treeHashAlgorithms = ["sha256"];
     const treeHashAlgorithmsJSON = get(json, "treeHashAlgorithms");
     if (treeHashAlgorithmsJSON !== void 0) {
-      if (!isArray(treeHashAlgorithmsJSON) || treeHashAlgorithmsJSON.length === 0 || !treeHashAlgorithmsJSON.every(isHashAlgorithm) || new Set(treeHashAlgorithmsJSON).size !== treeHashAlgorithmsJSON.length)
-        throw new POIError(`The treeHashAlgorithms of the roaming network '${id}' are at least one of sha256, sha384 and sha512, none twice!`);
+      if (!isArray(treeHashAlgorithmsJSON))
+        throw new POIError("The 'treeHashAlgorithms' must be a JSON array of hash algorithms!");
+      const unknown = treeHashAlgorithmsJSON.find((algorithm) => !isHashAlgorithm(algorithm));
+      if (unknown !== void 0)
+        throw new POIError(`Unknown tree hash algorithm '${asText(unknown)}': sha256, sha384 or sha512!`);
+      if (treeHashAlgorithmsJSON.length === 0)
+        throw new POIError("The 'treeHashAlgorithms' must name at least one hash algorithm!");
+      if (new Set(treeHashAlgorithmsJSON).size !== treeHashAlgorithmsJSON.length)
+        throw new POIError("The 'treeHashAlgorithms' must not name a hash algorithm twice!");
       treeHashAlgorithms = treeHashAlgorithmsJSON;
     }
     const operatorJSON = get(json, "operator");
-    const operator = operatorJSON === void 0 ? void 0 : RoamingNetworkOperator.parse(operatorJSON, id);
-    const refusal = duplicateIdentification(content) ?? invalidVersionText(content) ?? invalidCertificates(content) ?? invalidEVTaler(content) ?? invalidPartyKeys(content);
+    const operator = operatorJSON === void 0 ? void 0 : (() => {
+      try {
+        return RoamingNetworkOperator.parse(operatorJSON, id);
+      } catch (e) {
+        throw e instanceof KeyStatementError && of === "version" ? new POIError(inRoamingNetwork(e.message, "Operator")) : e;
+      }
+    })();
+    const refusal = invalidIdentification(content) ?? invalidVersionText(content) ?? invalidCertificates(content) ?? invalidEVTaler(content) ?? invalidPartyKeys(content) ?? duplicateIdentification(content, of) ?? notWrittenAsHeld(content);
     if (refusal !== void 0)
       throw new POIError(refusal);
     const network = new _RoamingNetwork(id, content, operator, treeHashAlgorithms);
@@ -3051,6 +4455,125 @@ function checkTrustAnchor(urls, holders, minConsensus) {
   return required(networkId, "A trust anchor names at least one URL of its roaming network!");
 }
 
+// src/proofs/trustContext.ts
+var TrustContext = class _TrustContext {
+  constructor(anchor, holders, statement, evaluatedAt) {
+    this.evaluatedAt = evaluatedAt;
+    this.anchor = frozenAnchor(anchor);
+    this.trustedHolders = Object.freeze(holders.map((holder) => Object.freeze([...holder])));
+    this.authorizedAnchor = frozenAnchor(TrustAnchor.create(
+      anchor.id,
+      anchor.urls,
+      holders.filter((holder) => holder.length > 0),
+      anchor.minConsensus,
+      anchor.name,
+      anchor.description
+    ));
+    this.roamingNetworkId = statement.roamingNetworkId;
+    this.roamingNetworkOperatorId = statement.roamingNetworkOperatorId;
+    this.keyStatementDigest = statementDigest(statement);
+    this.requiredConsensus = Math.max(anchor.minConsensus, statement.minConsensus);
+    this.validUntil = statement.validUntil;
+    Object.freeze(this);
+  }
+  evaluatedAt;
+  anchor;
+  authorizedAnchor;
+  trustedHolders;
+  roamingNetworkId;
+  roamingNetworkOperatorId;
+  keyStatementDigest;
+  requiredConsensus;
+  validUntil;
+  static create(anchor, statement, options) {
+    const result = _TrustContext.evaluate(anchor, statement, options);
+    if (result.context === void 0)
+      throw new POIError(result.verificationError ?? "No locally authorized trust quorum");
+    return result.context;
+  }
+  static evaluate(anchor, statement, options) {
+    const at = timeOf(options.at);
+    if (!Number.isFinite(at))
+      throw new POIError("Invalid trust evaluation time");
+    if (statement.roamingNetworkId !== anchor.id)
+      throw new POIError("The key statement belongs to another roaming network");
+    const trusted = new Set(options.trustedIdentityKeyIds);
+    const holders = anchor.holders.map((holder) => holder.filter((id) => trusted.has(id)));
+    const pool = [...statement.identityKeys, ...options.otherIdentityKeys ?? []];
+    const signedBy = new Set(statement.signatures.map((signature) => signature.keyId));
+    const trustedHolderCount = holders.filter((holder) => holder.some((id) => signedBy.has(id))).length;
+    let signaturesValid = true;
+    let keysValid = true;
+    let verificationError;
+    try {
+      for (const signature of statement.signatures) {
+        const key = pool.find((key2) => key2.id === signature.keyId);
+        if (key === void 0)
+          throw new POIError("The public key of a signer was not provided");
+        statement.verifySignature(signature, key);
+        if (!key.isValidAt(statement.signedAt))
+          keysValid = false;
+      }
+    } catch (error) {
+      signaturesValid = false;
+      verificationError = error instanceof Error ? error.message : String(error);
+    }
+    let quorumValid = false;
+    try {
+      statement.verifyHolders(holders, options.otherIdentityKeys, { minConsensus: anchor.minConsensus, at });
+      quorumValid = true;
+    } catch (error) {
+      verificationError ??= error instanceof Error ? error.message : String(error);
+    }
+    const validityValid = keysValid && statement.isValidAt(at);
+    return Object.freeze({
+      signatures: signaturesValid ? "valid" : "invalid",
+      signers: trustedHolderCount > 0 ? "valid" : "invalid",
+      quorum: quorumValid ? "valid" : "invalid",
+      validity: validityValid ? "valid" : "invalid",
+      trustedHolderCount,
+      requiredConsensus: Math.max(anchor.minConsensus, statement.minConsensus),
+      signatureCount: statement.signatures.length,
+      canTrustKeys: signaturesValid && validityValid,
+      ...verificationError === void 0 ? {} : { verificationError },
+      ...signaturesValid && quorumValid && validityValid ? { context: new _TrustContext(anchor, holders, statement, at) } : {}
+    });
+  }
+  /** The context represents exactly one evaluation time; a different time requires fresh local decisions. */
+  evaluationTime(at) {
+    if (at !== void 0 && timeOf(at) !== this.evaluatedAt)
+      throw new POIError("Recreate the trust context for a different evaluation time");
+    return this.evaluatedAt;
+  }
+  /** Rechecks supplied signatures and binds their signed content to the verified statement. */
+  verifyStatement(statement, otherIdentityKeys = [], at) {
+    const time = this.evaluationTime(at);
+    if (statement.roamingNetworkId !== this.roamingNetworkId || statement.roamingNetworkOperatorId !== this.roamingNetworkOperatorId || statementDigest(statement) !== this.keyStatementDigest)
+      throw new POIError("The operator or key statement differs from the authorized trust context");
+    return statement.verifyHolders(
+      this.trustedHolders,
+      otherIdentityKeys,
+      { minConsensus: this.anchor.minConsensus, at: time }
+    );
+  }
+};
+function anchorOf(basis) {
+  return basis instanceof TrustContext ? basis.authorizedAnchor : basis;
+}
+function statementDigest(statement) {
+  return toHex(hash("sha256", canonicalJSONBytes(statement.content())));
+}
+function frozenAnchor(anchor) {
+  const copy = TrustAnchor.parse(anchor.toQRCode());
+  for (const holder of copy.holders)
+    Object.freeze(holder);
+  Object.freeze(copy.holders);
+  Object.freeze(copy.urls);
+  Object.freeze(copy.name);
+  Object.freeze(copy.description);
+  return Object.freeze(copy);
+}
+
 // src/proofs/attestation.ts
 var ATTESTATION_CONTEXT = CONTEXT_PREFIX + "roamingNetwork/attestation/v1";
 var MAX_ATTESTATION_VALIDITY = 24 * 60 * 60 * 1e3;
@@ -3212,13 +4735,14 @@ var ChargingStationProof = class _ChargingStationProof {
    *
    * Attestations of a subject (8.5) attest one entity, not the root: they do not count here.
    */
-  verify(anchor, at) {
-    const time = timeOf(at);
+  verify(basis, at) {
+    const anchor = anchorOf(basis);
+    const time = basis instanceof TrustContext ? basis.evaluationTime(at) : timeOf(at);
     const networkId = this.roamingNetwork["@id"];
     if (networkId !== anchor.id)
       throw new POIError(`The trust anchor is one of the roaming network '${anchor.id}'!`);
     const { eTag, attested } = this.calculate();
-    const { keyStatement, required: required2, signingKeyOf } = this.certifiedSigningKeys(anchor, time);
+    const { keyStatement, required: required2, signingKeyOf } = this.certifiedSigningKeys(basis, time);
     const certifiedSigningKeyOf = (attestation) => signingKeyOf(attestation.keyId, attestation.signedAt);
     const counted = [];
     const holders = /* @__PURE__ */ new Set();
@@ -3265,8 +4789,9 @@ var ChargingStationProof = class _ChargingStationProof {
    * signed and at `at`, and allowed to sign for the party, as attestations are verified. Signatures that do not count are
    * ignored, not refused; the other signatures, e.g. of witnesses, are not checked here. Returns the holders that signed.
    */
-  verifyCheckpoint(checkpoint, anchor, at) {
-    const time = timeOf(at);
+  verifyCheckpoint(checkpoint, basis, at) {
+    const anchor = anchorOf(basis);
+    const time = basis instanceof TrustContext ? basis.evaluationTime(at) : timeOf(at);
     if (this.roamingNetwork["@id"] !== anchor.id || checkpoint.roamingNetworkId !== anchor.id)
       throw new POIError(`The trust anchor is one of the roaming network '${anchor.id}'!`);
     if (checkpoint.commitId !== this.commitId)
@@ -3277,7 +4802,7 @@ var ChargingStationProof = class _ChargingStationProof {
     const { eTag } = this.calculate();
     if (!bytesEqual(eTag.digest, named.digest))
       throw new POIError(`The proof leads to ${etagToText(eTag)}, not to ${etagToText(named)}!`);
-    const { required: required2, signingKeyOf } = this.certifiedSigningKeys(anchor, time);
+    const { required: required2, signingKeyOf } = this.certifiedSigningKeys(basis, time);
     const holders = /* @__PURE__ */ new Set();
     for (const signature of checkpoint.signatures) {
       const certified = signature.role === "roamingNetworkOperator" ? signingKeyOf(signature.keyId, signature.signedAt) : void 0;
@@ -3301,7 +4826,8 @@ var ChargingStationProof = class _ChargingStationProof {
    * and operator and their holders as the trust anchor does, and is valid at `time`; its identity keys are trusted then
    * as well. A signing key counts where a trusted identity key of its holder certifies it for this operator.
    */
-  certifiedSigningKeys(anchor, time) {
+  certifiedSigningKeys(basis, time) {
+    const anchor = anchorOf(basis);
     const networkId = this.roamingNetwork["@id"];
     const operator = get(this.roamingNetwork, "operator");
     if (!isObject(operator))
@@ -3316,7 +4842,7 @@ var ChargingStationProof = class _ChargingStationProof {
       throw new POIError(`The key statement is one of the roaming network '${keyStatement.roamingNetworkId}'!`);
     if (keyStatement.roamingNetworkOperatorId !== operatorId)
       throw new POIError(`The key statement is one of the roaming network operator '${keyStatement.roamingNetworkOperatorId}', not of '${operatorId}'!`);
-    const { holderOf } = keyStatement.verifyHolders(anchor.holders, operatorIdentityKeys, { minConsensus: anchor.minConsensus, at: time });
+    const { holderOf } = basis instanceof TrustContext ? basis.verifyStatement(keyStatement, operatorIdentityKeys, time) : keyStatement.verifyHolders(anchor.holders, operatorIdentityKeys, { minConsensus: anchor.minConsensus, at: time });
     const identityKeys = [...keyStatement.identityKeys, ...operatorIdentityKeys];
     const trustedIds = new Set(holderOf.keys());
     const signingKeyOf = (keyId, signedAt) => {
@@ -4142,9 +5668,10 @@ var PARTY_CHILD_TYPES = {
     property: "transparencySoftware",
     what: "transparency software release",
     usage: KeyUsages.Software,
+    // Not its version: a new version is a new release, so that a certificate naming a release names the version that
+    // was assessed.
     changeable: [
       "name",
-      "version",
       "openSourceLicenses",
       "logo",
       "howToUse",
@@ -4153,7 +5680,8 @@ var PARTY_CHILD_TYPES = {
       "supportUntil",
       "declarationOfConformity",
       "softwareBillOfMaterials"
-    ]
+    ],
+    keepsVersion: true
   },
   ConformityCertificate: {
     parentType: "ConformityAssessmentBody",
@@ -4206,7 +5734,7 @@ var ENERGY_METER_CHILD_TYPES = {
     changeable: ["name", "description", "dataSource", "energyMeterIds", "customData"]
   }
 };
-var sameId2 = (left, right) => left.toUpperCase() === right.toUpperCase();
+var sameId3 = (left, right) => left.toUpperCase() === right.toUpperCase();
 var OPERATOR_CHILD_ARRAYS = {
   ChargingTariff: "chargingTariffs",
   EVSETemplate: "EVSETemplates",
@@ -4220,87 +5748,10 @@ var OPERATOR_CHILD_ARRAYS = {
 };
 var TARIFF_TYPES = /* @__PURE__ */ new Set(["ChargingTariff", "ChargingTariffTemplate", "ChargingTariffGroup", "ChargingTariffOffer"]);
 var INFRASTRUCTURE_TYPES = /* @__PURE__ */ new Set([...Object.keys(OPERATOR_CHILD_ARRAYS), "ChargingPool", "ChargingStation", "EVSE"]);
-var idOf4 = (value) => isObject(value) && typeof value["@id"] === "string" ? value["@id"] : "";
-var ORDERED_TEXTS = /* @__PURE__ */ new Set([
-  "facilities",
-  "paymentOptions",
-  "uiFeatures",
-  "features",
-  "parkingRestrictions",
-  "services",
-  "standards",
-  "nutsCodes",
-  "vehicleTypes",
-  "euVehicleCategories",
-  "parkingSpaceIds",
-  "certificateIds",
-  "chargingTariffIds",
-  "acceptedEMobilityProviderIds",
-  "paymentMeans",
-  "paymentBrands",
-  "signatureMethods",
-  "connectorTypes",
-  "EVSEIds",
-  "chargingStationIds",
-  "chargingPoolIds",
-  "energyMeterIds",
-  "EVSEGroupIds",
-  "chargingStationGroupIds",
-  "chargingPoolGroupIds",
-  "chargingStationOperatorIds",
-  "eMobilityProviderIds",
-  "parkingSensorIds",
-  "parkingProductIds",
-  "measurands",
-  "notifiedFor",
-  "verifiedTransparencySoftwareIds",
-  "compatibleTransparencySoftwareIds",
-  "cardTypes",
-  "dimensions",
-  "usages"
-]);
-var DAYS_OF_WEEK = ["MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"];
-var TIMESTAMP_PROPERTIES = /* @__PURE__ */ new Set(["created", "lastChange", "validFrom", "validUntil", "notBefore", "notAfter", "signedAt", "supportUntil"]);
-var TIMESTAMP3 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
-function orderKeys(items, property) {
-  if (property === "signingKeyCertificates" && items.every(isObject))
-    return items.map((item) => `${idOf4(isObject(item) ? item["signingKey"] : void 0)}\0${isObject(item) ? asText(item["keyId"]) : ""}`);
-  if (property === "authenticationModes" && items.every(isObject))
-    return items.map((item) => isObject(item) ? asText(item["type"]) : "");
-  if (property === "transparencySoftwareStatus" && items.every(isObject))
-    return items.map((item) => isObject(item) ? asText(item["transparencySoftwareId"]) : "");
-  if (property === "exchanges" && items.every(isObject))
-    return items.map((item) => isObject(item) ? asText(item["masterPublicKey"]) : "");
-  if (property === "daysOfWeek")
-    return items.map((item) => String(DAYS_OF_WEEK.indexOf(typeof item === "string" ? item : "")).padStart(2, "0"));
-  if (items.length > 0 && items.every((item) => isObject(item) && typeof item["@id"] === "string"))
-    return items.map(idOf4);
-  if (property !== void 0 && ORDERED_TEXTS.has(property) && items.every((item) => typeof item === "string"))
-    return items.map((item) => typeof item === "string" ? item : "");
-  return void 0;
-}
 function asGiven(value, property, where) {
-  const notHeld = (path, reason) => new POIError(`${where}: ${path === "" ? "it" : `'${path}'`} is not given as the content holds it: ${reason}!`);
-  const check2 = (item, name, path) => {
-    if (name === "customData")
-      return;
-    if (isArray(item)) {
-      const keys = orderKeys(item, name);
-      if (keys?.some((key, index) => index > 0 && ordinal(keys[index - 1] ?? "", key) >= 0) === true)
-        throw notHeld(path, "its elements are in the order the content holds them in, each once");
-      item.forEach((element, index) => {
-        check2(element, void 0, `${path}[${String(index)}]`);
-      });
-    } else if (isObject(item)) {
-      for (const [key, element] of Object.entries(item)) {
-        if (key === "@context")
-          throw notHeld(path, "embedded, an object names no JSON-LD context");
-        check2(element, key, path === "" ? key : `${path}.${key}`);
-      }
-    } else if (typeof item === "string" && name !== void 0 && TIMESTAMP_PROPERTIES.has(name) && !TIMESTAMP3.test(item))
-      throw notHeld(path, "a timestamp is UTC to the millisecond, yyyy-MM-ddTHH:mm:ss.fffZ");
-  };
-  check2(value, property, property ?? "");
+  const found = notWritten(value, property, property ?? "", "new value");
+  if (found !== void 0)
+    throw new POIError(`${where}: ${found.path === "" ? "it" : `'${found.path}'`} is not given as the content holds it: ${found.reason}!`);
   return clone(value);
 }
 function insertOrdered(array, entity) {
@@ -4505,7 +5956,7 @@ function applyNetworkArrayChange(content, change, index, createdAt) {
 function partyChildOf(content, type, childId) {
   for (const party of objectsOf4(get(content, type.parents))) {
     const children = get(party, type.property);
-    const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId2(item["@id"], childId));
+    const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId3(item["@id"], childId));
     if (child !== void 0)
       return { party, children, child };
   }
@@ -4513,14 +5964,14 @@ function partyChildOf(content, type, childId) {
 }
 function partyNamed(content, type, id) {
   const property = NETWORK_ARRAYS[type];
-  return property === void 0 || id === void 0 ? void 0 : objectsOf4(get(content, property)).find((party) => typeof party["@id"] === "string" && sameId2(party["@id"], id));
+  return property === void 0 || id === void 0 ? void 0 : objectsOf4(get(content, property)).find((party) => typeof party["@id"] === "string" && sameId3(party["@id"], id));
 }
 function partyChildIn(content, type, change, index) {
   const party = change.parentEntityType === type.parentType ? partyNamed(content, type.parentType, change.parentEntityId) : void 0;
   if (party === void 0)
     throw new POIError(`Change ${index}: the ${type.what} '${change.entityId}' needs its ${type.parentType}, an existing one!`);
   const children = get(party, type.property);
-  const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId2(item["@id"], change.entityId));
+  const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId3(item["@id"], change.entityId));
   return { party, found: child === void 0 ? void 0 : { party, children, child } };
 }
 function applyPartyChildChange(content, change, index, createdAt) {
@@ -4547,7 +5998,7 @@ function applyPartyChildChange(content, change, index, createdAt) {
   } else {
     if (found === void 0)
       throw new POIError(`Change ${index}: the ${what} does not exist!`);
-    if (change.parentEntityType !== void 0 && (change.parentEntityType !== type.parentType || change.parentEntityId === void 0 || !sameId2(change.parentEntityId, asText(found.party["@id"]))))
+    if (change.parentEntityType !== void 0 && (change.parentEntityType !== type.parentType || change.parentEntityId === void 0 || !sameId3(change.parentEntityId, asText(found.party["@id"]))))
       throw new POIError(`Change ${index}: the ${what} belongs to ${type.parentType} '${asText(found.party["@id"])}', not to ${change.parentEntityType} '${change.parentEntityId ?? ""}'!`);
     party = found.party;
   }
@@ -4564,7 +6015,7 @@ function applyPartyChild(type, party, found, change, index, what, createdAt) {
       const property = change.propertyName ?? "";
       const child = existing().child;
       if (!type.changeable.includes(property))
-        throw new POIError(`Change ${index}: the property '${property}' of a ${type.what} can not be changed!`);
+        throw new POIError(type.keepsVersion === true && property === "version" ? `Change ${index}: the version of the ${what} can not be changed: a new version is a new release!` : `Change ${index}: the property '${property}' of a ${type.what} can not be changed!`);
       if (change.kind === "RemoveProperty") {
         if (get(child, property) === void 0)
           throw new POIError(`Change ${index}: the property '${property}' of the ${what} does not exist!`);
@@ -4577,7 +6028,7 @@ function applyPartyChild(type, party, found, change, index, what, createdAt) {
       break;
     }
     case "Add": {
-      if (!isObject(change.newValue) || typeof change.newValue["@id"] !== "string" || !sameId2(change.newValue["@id"], change.entityId))
+      if (!isObject(change.newValue) || typeof change.newValue["@id"] !== "string" || !sameId3(change.newValue["@id"], change.entityId))
         throw new POIError(`Change ${index}: the ${type.what} to add must be a JSON object with the identification '${change.entityId}'!`);
       const added = asGiven(without(change.newValue, "lastChange"), void 0, `Change ${String(index)}, the ${what} to add`);
       const children = get(party, type.property);
@@ -4605,7 +6056,7 @@ function energyMeterChildOf(content, type, childId) {
   for (const [partyType, parties] of [["ChargingStationOperator", "chargingStationOperators"], ["GridOperator", "gridOperators"]])
     for (const party of objectsOf4(get(content, parties))) {
       const children = get(party, type.property);
-      const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId2(item["@id"], childId));
+      const child = objectsOf4(children).find((item) => typeof item["@id"] === "string" && sameId3(item["@id"], childId));
       if (child !== void 0)
         return { party, partyType, children, child };
     }
@@ -4626,7 +6077,7 @@ function applyEnergyMeterChildChange(content, change, index, createdAt) {
   } else {
     if (found === void 0)
       throw new POIError(`Change ${index}: the ${what} does not exist!`);
-    if (change.parentEntityType !== void 0 && (change.parentEntityType !== found.partyType || change.parentEntityId === void 0 || !sameId2(change.parentEntityId, asText(found.party["@id"]))))
+    if (change.parentEntityType !== void 0 && (change.parentEntityType !== found.partyType || change.parentEntityId === void 0 || !sameId3(change.parentEntityId, asText(found.party["@id"]))))
       throw new POIError(`Change ${index}: the ${what} belongs to ${found.partyType} '${asText(found.party["@id"])}', not to ${change.parentEntityType} '${change.parentEntityId ?? ""}'!`);
     party = found.party;
   }
@@ -4707,6 +6158,8 @@ function ownerOf(content, change, index, addedEnergyMeterChildren) {
   if (PARTIES2.has(change.entityType)) {
     if (change.kind === "Add" || change.kind === "Remove")
       return { kind: "rno", keys: "signing" };
+    if (change.entityType === "ConformityAssessmentBody" && (change.propertyName === "notifiedBodyNumber" || change.propertyName === "notifiedFor"))
+      return { kind: "rno", keys: "signing" };
     const id = asText(partyNamed(content, change.entityType, change.entityId)?.["@id"] ?? change.entityId);
     return {
       kind: "party",
@@ -4911,12 +6364,27 @@ function applyChangeSet(before, changeSet, options = {}) {
   if (withoutMerchant2 !== void 0)
     throw new POIError(withoutMerchant2);
   checkStatedBy(before, content, changeSet);
+  const changedVersion = changedReleaseVersion(before.content, content);
+  if (changedVersion !== void 0)
+    throw new POIError(changedVersion);
   content["lastChange"] = createdAt;
-  const after = RoamingNetwork.parse(content);
+  const after = RoamingNetwork.afterChangeSet(content);
   matchETags(changeSet.afterETags, after, "The result does not match the change set");
   checkKeyHolders(before, after);
   return after;
 }
+function changedReleaseVersion(before, after) {
+  const releasesOf = (content) => objectsOf4(get(content, "transparencySoftwareManufacturers")).flatMap((manufacturer) => objectsOf4(get(manufacturer, "transparencySoftware")));
+  const versionOf2 = (release) => trimmed(asText(get(release, "version") ?? ""));
+  const versions = new Map(releasesOf(before).map((release) => [ignoringCase(asText(release["@id"])), versionOf2(release)]));
+  for (const release of releasesOf(after)) {
+    const was = versions.get(ignoringCase(asText(release["@id"])));
+    const is = versionOf2(release);
+    if (was !== void 0 && ignoringCase(was) !== ignoringCase(is))
+      return `The version of the transparency software release '${asText(release["@id"])}' can not be changed from '${was}' to '${is}': a new version is a new release!`;
+  }
+  return void 0;
+}
 function checkStatedBy(before, content, changeSet) {
   const type = required(PARTY_CHILD_TYPES["ConformityCertificate"], "Certificates are children of their bodies!");
   const keyless = objectsOf4(get(before.content, type.parents)).filter((body) => objectsOf4(get(body, "signingKeys")).length === 0).map((body) => asText(body["@id"]));
@@ -4929,7 +6397,7 @@ function checkStatedBy(before, content, changeSet) {
     const statedBy = get(found.child, "statedBy");
     if (statedBy !== void 0 && statedBy !== "roamingNetworkOperator")
       throw new POIError(`The certificate '${certificateId}' is stated by its conformity assessment body, or by the roaming network operator in its place, 'roamingNetworkOperator', not by '${asText(statedBy)}'!`);
-    const byOperator = keyless.some((id) => sameId2(id, bodyId));
+    const byOperator = keyless.some((id) => sameId3(id, bodyId));
     if (byOperator !== (statedBy !== void 0))
       throw new POIError(byOperator ? `The certificate '${certificateId}' of the conformity assessment body '${bodyId}' without signing keys is stated by the roaming network operator in its place: its statedBy is 'roamingNetworkOperator'!` : `The certificate '${certificateId}' of the conformity assessment body '${bodyId}' is stated by the body itself, with its keys: it names no statedBy!`);
   }
@@ -6928,17 +8396,19 @@ var OperatorTrust = class _OperatorTrust {
    * Verifies the key statement of the operator of the given version against the trust anchor (A1 step e) and returns the
    * trust in its keys. `at` is when the statement must be valid, now by default.
    */
-  static of(anchor, network, at) {
+  static of(basis, network, at) {
+    const anchor = anchorOf(basis);
     if (network.id !== anchor.id)
       throw new POIError("this is not the roaming network of the trust anchor");
-    return _OperatorTrust.ofOperator(anchor, network.operator, at);
+    return _OperatorTrust.ofOperator(basis, network.operator, at);
   }
   /**
    * The same from the roaming network operator alone, e.g. as a proof of a charging station gives it (8.4): its key
    * statement verified against the trust anchor at `at`.
    */
-  static fromOperatorJSON(anchor, operatorJSON, at) {
-    return _OperatorTrust.ofOperator(anchor, operatorJSON === void 0 ? void 0 : RoamingNetworkOperator.parse(operatorJSON, anchor.id), at);
+  static fromOperatorJSON(basis, operatorJSON, at) {
+    const anchor = anchorOf(basis);
+    return _OperatorTrust.ofOperator(basis, operatorJSON === void 0 ? void 0 : RoamingNetworkOperator.parse(operatorJSON, anchor.id), at);
   }
   /**
    * The trust in the operator of a later version of a history this trust follows (8.6, *Succession*): its key statement
@@ -6968,11 +8438,12 @@ var OperatorTrust = class _OperatorTrust {
       signedBy
     );
   }
-  static ofOperator(anchor, operator, at) {
+  static ofOperator(basis, operator, at) {
+    const anchor = anchorOf(basis);
     const statement = operator?.keyStatement;
     if (operator === void 0 || statement === void 0)
       throw new POIError("the roaming network operator states no keys");
-    const { signedBy, holderOf } = statement.verifyHolders(anchor.holders, operator.identityKeys, { minConsensus: anchor.minConsensus, at: timeOf(at) });
+    const { signedBy, holderOf } = basis instanceof TrustContext ? basis.verifyStatement(statement, operator.identityKeys, at) : statement.verifyHolders(anchor.holders, operator.identityKeys, { minConsensus: anchor.minConsensus, at: timeOf(at) });
     return new _OperatorTrust(
       anchor,
       operator,
@@ -7051,14 +8522,15 @@ var OperatorTrust = class _OperatorTrust {
 };
 
 // src/verifier/version.ts
-function verifyVersion(anchor, networkJSON, commitJSON, at) {
+function verifyVersion(basis, networkJSON, commitJSON, at) {
+  const anchor = anchorOf(basis);
   const network = RoamingNetwork.parse(networkJSON);
   if (network.id !== anchor.id)
     throw new POIError("this is not the roaming network of the trust anchor");
   const commit = Commit.parse(commitJSON);
   if (commit.roamingNetworkId !== network.id || !network.matchesCommitETags(commit.eTags))
     throw new POIError("the commit does not lead to the roaming network");
-  const trust = OperatorTrust.of(anchor, network, at);
+  const trust = OperatorTrust.of(basis, network, at);
   const signedBy = trust.verifyOperatorSignatures(commit.signatures, (signature, key) => {
     commit.verifySignature(signature, key);
   }, "the commit");
@@ -7155,6 +8627,7 @@ function verifyChargingStation(anchor, proof, options = {}) {
   const verified = parsed.verify(anchor, options.at);
   const attested = verified.attested;
   const warnings = [];
+  const shownAnchor = anchor instanceof TrustContext ? anchor.anchor : anchor;
   const found = [];
   for (const operator2 of objects2(get(attested, "chargingStationOperators")))
     for (const pool2 of objects2(get(operator2, "chargingPools")))
@@ -7193,7 +8666,7 @@ function verifyChargingStation(anchor, proof, options = {}) {
       energyMeterModels.set(asText(meter["@id"]), manufactured);
   }
   const certificates = certificatesOf(attested, station, energyMeters, warnings);
-  for (const [kind, shown3, proven] of [["name", anchor.name, get(attested, "name")], ["description", anchor.description, get(attested, "description")]])
+  for (const [kind, shown3, proven] of [["name", shownAnchor.name, get(attested, "name")], ["description", shownAnchor.description, get(attested, "description")]])
     for (const [language, text] of Object.entries(shown3))
       if (!isObject(proven) || get(proven, language) !== text)
         warnings.push(`the trust anchor shows the ${kind} '${text}' (${language}), not the one of the network in the proof`);
@@ -7550,6 +9023,6 @@ var RuntimeStatus = class _RuntimeStatus {
   }
 };
 
-export { ATTESTATION_CONTEXT, ArchiveSegment, Attestation, CHANGE_SET_CONTEXT, CHECKPOINT_CONTEXT2 as CHECKPOINT_CONTEXT, CHILD_ARRAYS, COMMIT_CONTEXT2 as COMMIT_CONTEXT, CONTEXT_PREFIX, ChangeSet, ChargingStationProof, Checkpoint, CheckpointProof, Commit, DCCMeasurementResult, DCCResult, DCCStatement, DCC_PERFORMANCE_LOCATIONS, DCOC_MODULES, DDoCNotifiedBody, Decimal, DigitalCalibrationCertificate, DigitalCertificateOfConformity, DigitalDeclarationOfConformity, EPOCH_CONTEXT, EPOCH_LINK_CONTEXT, EPOCH_PROFILES_CONTEXT, EV_TALER_EXCHANGE_CONTEXT, EV_TALER_MERCHANT_CONTEXT, EV_TALER_PAYMENT_MEANS, EV_TALER_PAYMENT_OPTION, EpochProfiles, FIRST_EPOCH, History, KEY_STATEMENT_CONTEXT, KeyStatement, KeyUsages, LIVE_TOPICS, MAX_DECIMAL_SCALE, MAX_PRICE_STATEMENT_SEQUENCE, MERGE_CHANGE_SET_ID_PREFIX, OperatorTrust, POIClient, POIError, POIPublicKey, PROOF_CONTEXT, PriceStatement, PriceStatementProof, QIDigitalDocument, QIDigitalItem, QIDigitalLegislation, QIDigitalManufacturer, QIDigitalModel, QIDigitalPerson, QIDigitalQuantity, QIDigitalSignature, QIDigitalStandard, QI_DIGITAL_CONFORMITIES, ROAMING_NETWORK_CONTEXT, RUNTIME_STATUS_KINDS, RoamingNetwork, RoamingNetworkOperator, RuntimeStatus, SIGNATURE_ALGORITHMS, SIGNING_KEY_CERTIFICATE_CONTEXT, STATUS_UPDATE_CONTEXT, STYX_CANONICAL_JSON, SignatureRoles, SigningKeyCertificate, TRUST_ANCHOR_CONTEXT, TRUST_ANCHOR_QR_PREFIX, TrustAnchor, applyChangeSet, approvesQualitySystem, auditPath, canonicalJSON, canonicalJSONBytes, canonicalString, cborETag, cborToJson, changeSetIdentification, check, checkOwnership, clone, commitsRoot, decodeDeterministicCbor, describeVersion, deterministicCbor, effectiveChargingStationOperator, effectiveContent, effectiveTreeETag, entityDigest, etagToJSON, etagToText, evTalerExchangesAt, evTalerMerchantOf, evTalerTariffOf, fromBase45, fromBase64, fromHex, fromJavaScript, get, hash, isArray, isObject, isTalerPublicKey, jsonETag, jsonToCbor, leafHash, liveRequest, merkleRoot, merkleRootOfLeafHashes, nodeHash, parseArchiveSegmentInfo, parseETag, parseETags, parseEpoch, parseEpochLink, parseEvidence, parseFrame, parseJSON, parseJSONBytes, parseJSONObject, parsePriceStatements, parseStatusUpdate, parseTimestamp, parseTrustedWitnesses, paymentOptionName, prettyJSON, priceStatementChainOf, priceStatementsRoot, prunedTree, qiDigitalContext, rootFromAuditPath, sameETag, sameETags, sameEpoch, sameValue, skeleton, subscribeRequest, toBase45, toBase64, toHex, toTimestamp, verifyChargingStation, verifyCheckpointLine, verifyCheckpointPriceStatements, verifyCheckpointSignatures, verifyEvidence, verifyPriceStatementChain, verifyPriceStatements, verifySegmentLine, verifySignature, verifyVersion };
+export { ATTESTATION_CONTEXT, ArchiveSegment, Attestation, CHANGE_SET_CONTEXT, CHECKPOINT_CONTEXT2 as CHECKPOINT_CONTEXT, CHILD_ARRAYS, COMMIT_CONTEXT2 as COMMIT_CONTEXT, CONTEXT_PREFIX, ChangeSet, ChargingStationProof, Checkpoint, CheckpointProof, Commit, DCCMeasurementResult, DCCResult, DCCStatement, DCC_PERFORMANCE_LOCATIONS, DCOC_MODULES, DDoCNotifiedBody, Decimal, DigitalCalibrationCertificate, DigitalCertificateOfConformity, DigitalDeclarationOfConformity, EPOCH_CONTEXT, EPOCH_LINK_CONTEXT, EPOCH_PROFILES_CONTEXT, EV_TALER_EXCHANGE_CONTEXT, EV_TALER_MERCHANT_CONTEXT, EV_TALER_PAYMENT_MEANS, EV_TALER_PAYMENT_OPTION, EpochProfiles, FIRST_EPOCH, History, KEY_STATEMENT_CONTEXT, KeyStatement, KeyUsages, LIVE_TOPICS, MAX_DECIMAL_SCALE, MAX_PRICE_STATEMENT_SEQUENCE, MERGE_CHANGE_SET_ID_PREFIX, OperatorTrust, POIClient, POIError, POIPublicKey, PROOF_CONTEXT, PriceStatement, PriceStatementProof, QIDigitalDocument, QIDigitalItem, QIDigitalLegislation, QIDigitalManufacturer, QIDigitalModel, QIDigitalPerson, QIDigitalQuantity, QIDigitalSignature, QIDigitalStandard, QI_DIGITAL_CONFORMITIES, ROAMING_NETWORK_CONTEXT, RUNTIME_STATUS_KINDS, RoamingNetwork, RoamingNetworkOperator, RuntimeStatus, SIGNATURE_ALGORITHMS, SIGNING_KEY_CERTIFICATE_CONTEXT, STATUS_UPDATE_CONTEXT, STYX_CANONICAL_JSON, SignatureRoles, SigningKeyCertificate, TRUST_ANCHOR_CONTEXT, TRUST_ANCHOR_QR_PREFIX, TrustAnchor, TrustContext, applyChangeSet, approvesQualitySystem, auditPath, canonicalJSON, canonicalJSONBytes, canonicalString, cborETag, cborToJson, changeSetIdentification, check, checkOwnership, clone, commitsRoot, decodeDeterministicCbor, describeVersion, deterministicCbor, effectiveChargingStationOperator, effectiveContent, effectiveTreeETag, entityDigest, etagToJSON, etagToText, evTalerExchangesAt, evTalerMerchantOf, evTalerTariffOf, fromBase45, fromBase64, fromHex, fromJavaScript, get, hash, isArray, isObject, isTalerPublicKey, jsonETag, jsonToCbor, leafHash, liveRequest, merkleRoot, merkleRootOfLeafHashes, nodeHash, parseArchiveSegmentInfo, parseETag, parseETags, parseEpoch, parseEpochLink, parseEvidence, parseFrame, parseJSON, parseJSONBytes, parseJSONObject, parsePriceStatements, parseStatusUpdate, parseTimestamp, parseTrustedWitnesses, paymentOptionName, prettyJSON, priceStatementChainOf, priceStatementsRoot, prunedTree, qiDigitalContext, rootFromAuditPath, sameETag, sameETags, sameEpoch, sameValue, skeleton, subscribeRequest, toBase45, toBase64, toHex, toTimestamp, verifyChargingStation, verifyCheckpointLine, verifyCheckpointPriceStatements, verifyCheckpointSignatures, verifyEvidence, verifyPriceStatementChain, verifyPriceStatements, verifySegmentLine, verifySignature, verifyVersion };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map