@open-charging-cloud/wwcp-poi 0.1.1 → 0.3.0

package/dist/crypto/ber.d.ts

@@ -0,0 +1,48 @@
+/** Universal tags. */
+export declare const TAG: {
+    readonly boolean: 1;
+    readonly integer: 2;
+    readonly bitString: 3;
+    readonly octetString: 4;
+    readonly null: 5;
+    readonly objectIdentifier: 6;
+    readonly sequence: 16;
+    readonly set: 17;
+};
+export declare const CONTEXT = 2;
+/** A record of BER. */
+export interface BER {
+    /** Universal 0, application 1, context-specific 2, private 3. */
+    readonly tagClass: number;
+    readonly tagNumber: number;
+    readonly constructed: boolean;
+    /** The value of a primitive record, of a string in segments its segments joined. */
+    readonly content: Uint8Array;
+    readonly children: readonly BER[];
+    /** Whether DER writes it and what it holds as given. */
+    readonly der: boolean;
+    /** The record as given. */
+    readonly encoded: Uint8Array;
+}
+export declare class BERError extends Error {
+}
+export declare const isSequence: (record: BER) => boolean;
+export declare const isInteger: (record: BER) => boolean;
+export declare const isNull: (record: BER) => boolean;
+export declare const isOID: (record: BER) => boolean;
+export declare const isBitString: (record: BER) => boolean;
+/** The one record of the given bytes, as `Asn1Object.FromByteArray` reads it: nothing after it. */
+export declare function readBER(bytes: Uint8Array): BER;
+/** The first record of the given bytes, as `Asn1InputStream.ReadObject` reads it from a stream: what follows it left. */
+export declare function readFirstBER(bytes: Uint8Array): BER;
+/** What `GetInstance` of a class throws of a record of another one. */
+export declare const illegal: (record: BER) => BERError;
+/** An integer as `DerInteger` reads it: two's complement in its fewest octets. */
+export declare function integerOf(record: BER): bigint;
+/** An object identifier in dotted decimal, as `DerObjectIdentifier` reads it: each arc in its fewest octets. */
+export declare function oidOf(record: BER): string;
+/** The octets of a bit string, as `DerBitString.GetOctets` gives them: of whole octets. */
+export declare function octetsOf(record: BER): Uint8Array;
+/** The children of a sequence of the given sizes, as a `GetInstance` of a sequence takes them. */
+export declare function sequenceOf(record: BER, sizes: readonly number[]): readonly BER[];
+//# sourceMappingURL=ber.d.ts.map

package/dist/crypto/ber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ber.d.ts","sourceRoot":"","sources":["../../src/crypto/ber.ts"],"names":[],"mappings":"AAuBA,sBAAsB;AACtB,eAAO,MAAM,GAAG;;;;;;;;;CASN,CAAC;AAEX,eAAO,MAAM,OAAO,IAAI,CAAC;AAEzB,uBAAuB;AACvB,MAAM,WAAW,GAAG;IAChB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAK,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAG,OAAO,CAAC;IAC/B,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAO,UAAU,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAM,SAAS,GAAG,EAAE,CAAC;IACtC,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAW,OAAO,CAAC;IAC/B,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAO,UAAU,CAAC;CACrC;AAED,qBAAa,QAAS,SAAQ,KAAK;CAAG;AAKtC,eAAO,MAAM,UAAU,GAAI,QAAQ,GAAG,KAAG,OAA4C,CAAC;AACtF,eAAO,MAAM,SAAS,GAAK,QAAQ,GAAG,KAAG,OAA2C,CAAC;AACrF,eAAO,MAAM,MAAM,GAAQ,QAAQ,GAAG,KAAG,OAAwC,CAAC;AAClF,eAAO,MAAM,KAAK,GAAS,QAAQ,GAAG,KAAG,OAAoD,CAAC;AAC9F,eAAO,MAAM,WAAW,GAAI,QAAQ,GAAG,KAAG,OAA6C,CAAC;AAwLxF,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAY9C;AAED,yHAAyH;AACzH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,GAAG,CAOnD;AAuBD,uEAAuE;AACvE,eAAO,MAAM,OAAO,GAAI,QAAQ,GAAG,KAAG,QACsE,CAAC;AAE7G,kFAAkF;AAClF,wBAAgB,SAAS,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAgB7C;AAED,gHAAgH;AAChH,wBAAgB,KAAK,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAgCzC;AAED,2FAA2F;AAC3F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,UAAU,CAkBhD;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAAG,EAAE,CAUhF"}

package/dist/crypto/certificates.d.ts

@@ -0,0 +1,21 @@
+import { type BER } from './ber.ts';
+import { type SubjectPublicKeyInfo } from './publicKeys.ts';
+export interface Certificate {
+    /** Its content, the TBSCertificate the signature is of. */
+    readonly tbs: BER;
+    readonly signatureAlgorithm: BER;
+    readonly tbsAlgorithm: BER;
+    readonly signature: BER;
+    readonly subjectPublicKeyInfo: SubjectPublicKeyInfo;
+}
+/** The DER of a certificate, as `ReadCertificate` reads it: undefined where it gives none, as it does of what is no sequence. */
+export declare function certificateOf(bytes: Uint8Array): {
+    certificate: Certificate;
+    der: boolean;
+} | undefined;
+/**
+ * Whether the certificate is issued by the other one, as `X509Certificate.Verify` with the public key of the other one
+ * tells: of a key BouncyCastle makes, the signature algorithm the one of the content, the signature verified.
+ */
+export declare function issuedBy(certificate: Certificate, issuer: Certificate): boolean;
+//# sourceMappingURL=certificates.d.ts.map

package/dist/crypto/certificates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certificates.d.ts","sourceRoot":"","sources":["../../src/crypto/certificates.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA0H,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAE5J,OAAO,EAAuD,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAWjH,MAAM,WAAW,WAAW;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,EAAmB,GAAG,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAI,GAAG,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAU,GAAG,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAa,GAAG,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;CACvD;AAqFD,iIAAiI;AACjI,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,WAAW,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAgEvG;AA6JD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAQ/E"}

package/dist/crypto/curves.d.ts

@@ -0,0 +1,25 @@
+export interface PrimeCurve {
+    readonly oid: string;
+    readonly name: string;
+    /** What BouncyCastle names its field elements, e.g. `SecP256R1FieldElement`, `Fp field element`. */
+    readonly field: string;
+    readonly bits: number;
+    readonly p: bigint;
+    readonly a: bigint;
+    readonly b: bigint;
+    readonly n: bigint;
+    readonly h: bigint;
+    readonly gx: bigint;
+    readonly gy: bigint;
+}
+export interface BinaryCurve {
+    readonly oid: string;
+    readonly name: string;
+    readonly field: string;
+    readonly bits: number;
+}
+/** The prime curves by their object identifiers. */
+export declare const PRIME_CURVES: ReadonlyMap<string, PrimeCurve>;
+/** The curves over binary fields by their object identifiers, of which this library tells the lengths of points only. */
+export declare const BINARY_CURVES: ReadonlyMap<string, BinaryCurve>;
+//# sourceMappingURL=curves.d.ts.map

package/dist/crypto/curves.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"curves.d.ts","sourceRoot":"","sources":["../../src/crypto/curves.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,GAAG,EAAK,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAI,MAAM,CAAC;IACxB,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAI,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAO,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAO,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAO,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAO,MAAM,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAO,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAM,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAM,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,GAAG,EAAK,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAI,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAI,MAAM,CAAC;CAC3B;AA8bD,oDAAoD;AACpD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CACiE,CAAC;AAE3H,yHAAyH;AACzH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAClB,CAAC"}

package/dist/crypto/ecc.d.ts

@@ -0,0 +1,34 @@
+import type { PrimeCurve } from './curves.ts';
+export declare const mod: (value: bigint, modulus: bigint) => bigint;
+export declare function modPow(base: bigint, exponent: bigint, modulus: bigint): bigint;
+/** The inverse modulo the given modulus; undefined, where there is none. */
+export declare function modInverse(value: bigint, modulus: bigint): bigint | undefined;
+export declare function gcd(a: bigint, b: bigint): bigint;
+export declare const bitLength: (value: bigint) => number;
+export declare const bigintOf: (bytes: Uint8Array) => bigint;
+/** The square root modulo an odd prime (Tonelli and Shanks); undefined, where there is none. */
+export declare function sqrtMod(value: bigint, p: bigint): bigint | undefined;
+/** A point of a curve; undefined is the point at infinity. */
+export interface Point {
+    readonly x: bigint;
+    readonly y: bigint;
+}
+/** k·P. */
+export declare const multiply: (curve: PrimeCurve, point: Point, k: bigint) => Point | undefined;
+export declare const onCurve: (curve: PrimeCurve, { x, y }: Point) => boolean;
+/** Whether a point is of the order of the curve, of a curve of a cofactor 1 always (`SatisfiesOrder`). */
+export declare const satisfiesOrder: (curve: PrimeCurve, point: Point) => boolean;
+export declare class PointError extends Error {
+}
+/**
+ * A point of a prime curve as `ECCurve.DecodePoint` of BouncyCastle decodes it, compressed (02, 03), uncompressed (04) or
+ * hybrid (06, 07), and refuses it in its words; undefined for the point at infinity (00).
+ */
+export declare function decodePoint(curve: PrimeCurve, encoded: Uint8Array): Point | undefined;
+/** The leftmost bits of a digest as wide as the order, as `CalculateE` of ECDsaSigner and DsaSigner takes them. */
+export declare function truncatedDigest(order: bigint, digest: Uint8Array): bigint;
+/** Whether (r, s) is a signature of the digest by the key Q of the curve (`ECDsaSigner.VerifySignature`). */
+export declare function verifyECDSA(curve: PrimeCurve, q: Point, digest: Uint8Array, r: bigint, s: bigint): boolean;
+/** Whether (r, s) is a signature of the digest by the key y of the group (p, q, g) (`DsaSigner.VerifySignature`). */
+export declare function verifyDSA(p: bigint, q: bigint, g: bigint, y: bigint, digest: Uint8Array, r: bigint, s: bigint): boolean;
+//# sourceMappingURL=ecc.d.ts.map

package/dist/crypto/ecc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecc.d.ts","sourceRoot":"","sources":["../../src/crypto/ecc.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQ9C,eAAO,MAAM,GAAG,GAAI,OAAO,MAAM,EAAE,SAAS,MAAM,KAAG,MAGpD,CAAC;AAEF,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAU9E;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQ7E;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAMhD;AAED,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,KAAG,MACI,CAAC;AAE/C,eAAO,MAAM,QAAQ,GAAI,OAAO,UAAU,KAAG,MACY,CAAC;AAE1D,gGAAgG;AAChG,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAuCpE;AAMD,8DAA8D;AAC9D,MAAM,WAAW,KAAK;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CACtB;AA6ED,WAAW;AACX,eAAO,MAAM,QAAQ,GAAI,OAAO,UAAU,EAAE,OAAO,KAAK,EAAE,GAAG,MAAM,KAAG,KAAK,GAAG,SAC5B,CAAC;AAEnD,eAAO,MAAM,OAAO,GAAI,OAAO,UAAU,EAAE,UAAU,KAAK,KAAG,OACO,CAAC;AAErE,0GAA0G;AAC1G,eAAO,MAAM,cAAc,GAAI,OAAO,UAAU,EAAE,OAAO,KAAK,KAAG,OACE,CAAC;AAEpE,qBAAa,UAAW,SAAQ,KAAK;CAAG;AAExC;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CA2DrF;AAED,mHAAmH;AACnH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAKzE;AAED,6GAA6G;AAC7G,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAiB1G;AAED,qHAAqH;AACrH,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAcvH"}

package/dist/crypto/publicKeys.d.ts

@@ -0,0 +1,51 @@
+import { type BER } from './ber.ts';
+import { type PrimeCurve } from './curves.ts';
+import { type Point } from './ecc.ts';
+export type PublicKey = {
+    readonly kind: 'ec';
+    readonly curve: PrimeCurve;
+    readonly q: Point;
+} | {
+    readonly kind: 'rsa';
+    readonly n: bigint;
+    readonly e: bigint;
+} | {
+    readonly kind: 'dsa';
+    readonly y: bigint;
+    readonly group: {
+        readonly p: bigint;
+        readonly q: bigint;
+        readonly g: bigint;
+    } | undefined;
+} | {
+    readonly kind: 'eddsa';
+    readonly curve: 'Ed25519' | 'Ed448';
+    readonly bytes: Uint8Array;
+} | {
+    readonly kind: 'ml-dsa';
+    readonly set: 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87';
+    readonly bytes: Uint8Array;
+} | {
+    readonly kind: 'other';
+    readonly oid: string;
+};
+/** What BouncyCastle refuses of a key it makes, in its words. */
+export declare class KeyError extends Error {
+}
+/** A SubjectPublicKeyInfo as `SubjectPublicKeyInfo.GetInstance` reads it. */
+export interface SubjectPublicKeyInfo {
+    readonly record: BER;
+    readonly algorithm: string;
+    readonly parameters: BER | undefined;
+    readonly key: BER;
+}
+/** The SubjectPublicKeyInfo of the given record: a sequence of an algorithm identifier and a bit string. */
+export declare function subjectPublicKeyInfoOf(record: BER): SubjectPublicKeyInfo;
+/** The SubjectPublicKeyInfo of the given bytes, as `Asn1Object.FromByteArray` reads them: one record of BER, nothing after it. */
+export declare const subjectPublicKeyInfo: (bytes: Uint8Array) => SubjectPublicKeyInfo;
+/**
+ * The key of the given SubjectPublicKeyInfo, as `PublicKeyFactory.CreateKey` of BouncyCastle makes it; what it refuses
+ * thrown as a `KeyError` or a `BERError` in its words.
+ */
+export declare function publicKeyOf(info: SubjectPublicKeyInfo): PublicKey;
+//# sourceMappingURL=publicKeys.d.ts.map

package/dist/crypto/publicKeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publicKeys.d.ts","sourceRoot":"","sources":["../../src/crypto/publicKeys.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA6F,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/H,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAA8D,KAAK,KAAK,EAAE,MAAM,UAAU,CAAC;AAYlG,MAAM,MAAM,SAAS,GACf;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAK,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAI,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAI,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAC3I;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC9G;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,iEAAiE;AACjE,qBAAa,QAAS,SAAQ,KAAK;CAAG;AAEtC,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,MAAM,EAAO,GAAG,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAI,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAG,GAAG,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAU,GAAG,CAAC;CAC7B;AAED,4GAA4G;AAC5G,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,oBAAoB,CAUxE;AAED,kIAAkI;AAClI,eAAO,MAAM,oBAAoB,GAAI,OAAO,UAAU,KAAG,oBACf,CAAC;AAsK3C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,oBAAoB,GAAG,SAAS,CA0DjE"}

package/dist/crypto/rsa.d.ts

@@ -0,0 +1,30 @@
+/** A digest by the object identifier of its algorithm. */
+export interface Digest {
+    readonly oid: string;
+    readonly size: number;
+    readonly digest: (data: Uint8Array) => Uint8Array;
+}
+export declare const DIGESTS: {
+    readonly md5: Digest;
+    readonly sha1: Digest;
+    readonly sha224: Digest;
+    readonly sha256: Digest;
+    readonly sha384: Digest;
+    readonly sha512: Digest;
+    readonly sha512_224: Digest;
+    readonly sha512_256: Digest;
+    readonly sha3_224: Digest;
+    readonly sha3_256: Digest;
+    readonly sha3_384: Digest;
+    readonly sha3_512: Digest;
+};
+export declare const digestByOid: (oid: string) => Digest | undefined;
+/** Whether an odd integer above 3 is probably prime, by rounds of Miller and Rabin with random bases. */
+export declare function isProbablePrime(candidate: bigint, rounds?: number): boolean;
+/** The error, when RsaKeyParameters of BouncyCastle refuses a public key, in its words and order; undefined for none. */
+export declare function rsaKeyError(modulus: bigint, exponent: bigint): string | undefined;
+/** Whether the signature of PKCS #1 v1.5 is of the message, its DigestInfo with NULL parameters or without (`RsaDigestSigner`). */
+export declare function verifyPKCS1(modulus: bigint, exponent: bigint, algorithm: Digest, message: Uint8Array, signature: Uint8Array): boolean;
+/** Whether the signature of PSS is of the message, with its digest, the digest of its mask and its salt length (`PssSigner`). */
+export declare function verifyPSS(modulus: bigint, exponent: bigint, algorithm: Digest, maskDigest: Digest, saltLength: number, message: Uint8Array, signature: Uint8Array): boolean;
+//# sourceMappingURL=rsa.d.ts.map

package/dist/crypto/rsa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.d.ts","sourceRoot":"","sources":["../../src/crypto/rsa.ts"],"names":[],"mappings":"AA4BA,0DAA0D;AAC1D,MAAM,WAAW,MAAM;IACnB,QAAQ,CAAC,GAAG,EAAK,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAI,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC;CACrD;AAKD,eAAO,MAAM,OAAO;;;;;;;;;;;;;CAaV,CAAC;AAEX,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,SACgB,CAAC;AA8BpE,yGAAyG;AACzG,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAuBvE;AAED,yHAAyH;AACzH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA6BjF;AAyCD,mIAAmI;AACnI,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAmBrI;AAaD,iIAAiI;AACjI,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAsC3K"}

package/dist/encoding/text.d.ts

@@ -11,6 +11,15 @@ export declare function toBase64(bytes: Uint8Array): string;
  * padding and nonzero padding bits, as POI requires of keys and signature values (SPECIFICATION.md section 4).
  */
 export declare function fromBase64(text: string): Uint8Array;
+/** What `Convert.FromBase64String` of .NET says of a text it can not read. */
+export declare const DOTNET_BAD_BASE64 = "The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters.";
+/**
+ * Whether `Convert.FromBase64String` of .NET reads the given text, though perhaps not canonically: white space left out
+ * anywhere, groups of four characters of the alphabet, at most two padding characters at the end, unused bits of any value.
+ */
+export declare const isDotNetBase64: (text: string) => boolean;
+/** Whether the given text is nonempty canonical Base64: what `Convert.ToBase64String` writes again of what it reads. */
+export declare const isCanonicalBase64: (text: string) => boolean;
 /** Base45 [RFC 9285], the encoding of the QR code of a trust anchor. */
 export declare function toBase45(bytes: Uint8Array): string;
 /** Reads Base45 [RFC 9285], refusing characters outside its alphabet and triples above 65535. */

package/dist/encoding/text.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/encoding/text.ts"],"names":[],"mappings":"AAyBA,+EAA+E;AAC/E,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAK/C;AAED,2GAA2G;AAC3G,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,UAAU,CAYnE;AAED,sFAAsF;AACtF,eAAO,MAAM,UAAU,GAAI,MAAM,OAAO,EAAE,QAAQ,MAAM,KAAG,IAAI,IAAI,MAIb,CAAC;AAevD,oCAAoC;AACpC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAmBlD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAoCnD;AAMD,wEAAwE;AACxE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAgBlD;AAED,iGAAiG;AACjG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAmCnD;AAGD,4CAA4C;AAC5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAWvE;AAED,mCAAmC;AACnC,wBAAgB,MAAM,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAYzD;AAED,aAAa;AACb,eAAO,MAAM,IAAI,GAAI,MAAM,MAAM,KAAG,UACF,CAAC"}
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/encoding/text.ts"],"names":[],"mappings":"AAyBA,+EAA+E;AAC/E,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAK/C;AAED,2GAA2G;AAC3G,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,UAAU,CAYnE;AAED,sFAAsF;AACtF,eAAO,MAAM,UAAU,GAAI,MAAM,OAAO,EAAE,QAAQ,MAAM,KAAG,IAAI,IAAI,MAIb,CAAC;AAiBvD,oCAAoC;AACpC,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAmBlD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAwCnD;AAGD,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,4KAA4K,CAAC;AAE3M;;;GAGG;AACH,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,OAG7C,CAAC;AAEF,wHAAwH;AACxH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,OAOhD,CAAC;AAMF,wEAAwE;AACxE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAgBlD;AAED,iGAAiG;AACjG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAmCnD;AAGD,4CAA4C;AAC5C,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAWvE;AAED,mCAAmC;AACnC,wBAAgB,MAAM,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAYzD;AAED,aAAa;AACb,eAAO,MAAM,IAAI,GAAI,MAAM,MAAM,KAAG,UACF,CAAC"}

package/dist/evTaler/amounts.d.ts

@@ -0,0 +1,89 @@
+import { Decimal } from '../json/decimal.ts';
+import { type JSONObject } from '../json/value.ts';
+import type { EVTalerCovers } from './step.ts';
+/**
+ * A number as System.Decimal holds and calculates it: a mantissa below 2^96 and at most 28 decimal places; a result it can
+ * not hold exactly rounded half to even, to as many places as it holds (DecCalc of .NET).
+ */
+export declare class NetDecimal {
+    readonly mantissa: bigint;
+    readonly scale: number;
+    private constructor();
+    static readonly ZERO: NetDecimal;
+    /** The given mantissa and scale, rounded half to even to what System.Decimal holds. */
+    private static fitted;
+    static of(value: number | bigint | Decimal): NetDecimal;
+    /** A text of digits, as `Decimal.TryParse` with `NumberStyles.AllowDecimalPoint` reads it; undefined beyond its range. */
+    static parse(text: string): NetDecimal | undefined;
+    /** An exact quotient of integers, e.g. milliseconds as seconds. */
+    static ofFraction(mantissa: bigint, scale: number): NetDecimal;
+    private aligned;
+    plus(other: NetDecimal): NetDecimal;
+    minus(other: NetDecimal): NetDecimal;
+    times(other: NetDecimal): NetDecimal;
+    /** The quotient as System.Decimal divides: exact where it holds it, else rounded half to even to as many places as it holds. */
+    dividedBy(other: NetDecimal): NetDecimal;
+    compareTo(other: NetDecimal): -1 | 0 | 1;
+    equals(other: NetDecimal): boolean;
+    isNegative(): boolean;
+    /** `Math.Round` to the given number of decimal places in the given way. */
+    round(places: number, mode: 'toEven' | 'awayFromZero' | 'toPositiveInfinity' | 'toZero'): NetDecimal;
+    /** `Math.Ceiling`. */
+    ceiling(): NetDecimal;
+    /** The digits of the given number of decimal places, as `ToString("F" + places)` writes a value that has no more. */
+    toFixed(places: number): string;
+    /** As `ToString("0.############################")` writes it: without trailing zeros, "-0" as "0". */
+    toString(): string;
+}
+/** The number of decimal digits of the minor unit of the given ISO 4217 currency: 2 unless it is known otherwise. */
+export declare const minorUnitDigits: (currency: string) => number;
+/** The given value rounded up to the minor unit of the given currency, as the amount of a step. */
+export declare const roundUp: (value: NetDecimal, currency: string) => NetDecimal;
+/** The given value rounded to the nearest minor unit of the given currency, half away from zero, as the price of a session. */
+export declare const roundToNearest: (value: NetDecimal, currency: string) => NetDecimal;
+/** The given amount with the digits of the minor unit of its currency, e.g. "3.20", or with all of its digits where it has more. */
+export declare function writeAmount(value: NetDecimal, currency: string): string;
+/** The given value as a text without trailing zeros, e.g. "13.412". */
+export declare const writeDecimal: (value: NetDecimal) => string;
+/**
+ * An amount as GNU Taler writes it, e.g. "EUR:3.25": a currency of at most 11 letters, no sign, at most 8 fractional
+ * digits, an integer part of at most 2^52; its error otherwise, as WWCP_POI words it.
+ */
+export declare function talerAmountOf(text: string | undefined): {
+    currency: string;
+    value: NetDecimal;
+} | string;
+/** The given property as a decimal written as a text, not negative, e.g. "13.412"; its error otherwise. */
+export declare function decimalTextOf(json: JSONObject, name: string): NetDecimal | string;
+/**
+ * The gross rates an EV Taler session is priced by, where its prices are those of the simple profile (`EVTalerRates`): one
+ * element, without restrictions, of ENERGY, TIME and FLAT components each at most once, with their VAT added; no minimum
+ * or maximum price. A session of other prices is paid in steps all the same, but its amounts and its price are not
+ * recalculated by a reader.
+ */
+export declare class EVTalerRates {
+    readonly currency: string;
+    /** The gross price of a kWh, if the tariff prices energy. */
+    readonly energyPerKWh: NetDecimal | undefined;
+    /** The billing increment of energy, in Wh. */
+    readonly energyStepWh: NetDecimal | undefined;
+    /** The gross price of an hour of charging, if the tariff prices time. */
+    readonly timePerHour: NetDecimal | undefined;
+    /** The billing increment of time, in seconds. */
+    readonly timeStepSeconds: NetDecimal | undefined;
+    /** The gross flat fee, if any. */
+    readonly flatFee: NetDecimal | undefined;
+    private constructor();
+    /** The rates of the simple profile of the given elements of the given charging tariff, or why there are none. */
+    static of(currency: string, tariff: JSONObject, elements: readonly JSONObject[]): EVTalerRates | {
+        readonly reason: string;
+    };
+    /** The price of what a step covers, rounded up to the minor unit: its kWh at the price of energy, its minutes at the price of time. */
+    stepPrice(covers: EVTalerCovers): NetDecimal | string;
+    /**
+     * The price of a session of the given energy, in kWh, and duration, in milliseconds: the flat fee, the energy and the
+     * time each billed in its increments, rounded to the nearest minor unit of the currency.
+     */
+    sessionPrice(energy: NetDecimal, durationMs: number): NetDecimal;
+}
+//# sourceMappingURL=amounts.d.ts.map

package/dist/evTaler/amounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.d.ts","sourceRoot":"","sources":["../../src/evTaler/amounts.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAA0B,KAAK,UAAU,EAAkB,MAAM,kBAAkB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAqC/C;;;GAGG;AACH,qBAAa,UAAU;aAGC,QAAQ,EAAG,MAAM;aACjB,KAAK,EAAM,MAAM;IAFrC,OAAO;IAKP,gBAAuB,IAAI,aAAyB;IAEpD,uFAAuF;IACvF,OAAO,CAAC,MAAM,CAAC,MAAM;WAcP,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU;IAM9D,0HAA0H;WAC5G,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAmBzD,mEAAmE;WACrD,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU;IAIrE,OAAO,CAAC,OAAO;IAKR,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAKnC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAKpC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAI3C,gIAAgI;IACzH,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAmCxC,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAKxC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IAIlC,UAAU,IAAI,OAAO;IAI5B,2EAA2E;IACpE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,cAAc,GAAG,oBAAoB,GAAG,QAAQ,GAAG,UAAU;IAyB3G,sBAAsB;IACf,OAAO,IAAI,UAAU;IAI5B,qHAAqH;IAC9G,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAKtC,sGAAsG;IAC/F,QAAQ,IAAI,MAAM;CAc5B;AAwBD,qHAAqH;AACrH,eAAO,MAAM,eAAe,GAAI,UAAU,MAAM,KAAG,MACjB,CAAC;AAEnC,mGAAmG;AACnG,eAAO,MAAM,OAAO,GAAI,OAAO,UAAU,EAAE,UAAU,MAAM,KAAG,UACE,CAAC;AAEjE,+HAA+H;AAC/H,eAAO,MAAM,cAAc,GAAI,OAAO,UAAU,EAAE,UAAU,MAAM,KAAG,UACX,CAAC;AAE3D,oIAAoI;AACpI,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED,uEAAuE;AACvE,eAAO,MAAM,YAAY,GAAI,OAAO,UAAU,KAAG,MAC7B,CAAC;AAErB;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG,MAAM,CAUxG;AAED,2GAA2G;AAC3G,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAOjF;AAQD;;;;;GAKG;AACH,qBAAa,YAAY;aAGD,QAAQ,EAAU,MAAM;IACxC,6DAA6D;aAC7C,YAAY,EAAM,UAAU,GAAG,SAAS;IACxD,8CAA8C;aAC9B,YAAY,EAAM,UAAU,GAAG,SAAS;IACxD,yEAAyE;aACzD,WAAW,EAAO,UAAU,GAAG,SAAS;IACxD,iDAAiD;aACjC,eAAe,EAAG,UAAU,GAAG,SAAS;IACxD,kCAAkC;aAClB,OAAO,EAAW,UAAU,GAAG,SAAS;IAX5D,OAAO;IAcP,iHAAiH;WACnG,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,UAAU,EAAE,GAAG,YAAY,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IA0DnI,uIAAuI;IAChI,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,GAAG,MAAM;IAgB5D;;;OAGG;IACI,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU;CAiB1E"}

package/dist/evTaler/contractTerms.d.ts

@@ -0,0 +1,107 @@
+import { type JSONObject, type JSONValue } from '../json/value.ts';
+import { type EVTalerMerchant } from '../network/evTaler.ts';
+import { type VerifiedChargingStation, type VerifiedPrice } from '../verifier/chargingStation.ts';
+import { EVTalerRates, NetDecimal } from './amounts.ts';
+import { type EVTalerMeterValueVerifier, type EVTalerVerifiedMeterValue } from './meterValue.ts';
+import { type EVTalerPayURI } from './payURI.ts';
+import { EVTalerStep } from './step.ts';
+/** How exactly a reader checked the amount of a step (`EVTalerAmountChecks`). */
+export declare const EVTalerAmountChecks: {
+    /** What the step covers at the price of the session, rounded up to the minor unit; in step 1 with the flat fee, the reserve as the rest. */
+    readonly Exact: "exact";
+    /** The session is priced by energy and time: the amount is at least what the step covers, the rest an estimate (5.1). */
+    readonly Estimate: "estimate";
+    /** The prices of the session are not of the simple profile: the amount is not recalculated. */
+    readonly Unsupported: "unsupported";
+};
+export type EVTalerAmountCheck = typeof EVTalerAmountChecks[keyof typeof EVTalerAmountChecks];
+/** A step of an EV Taler session as its contract terms and a station proof establish it (`EVTalerVerifiedStep`, 7). */
+export interface EVTalerVerifiedStep {
+    readonly terms: EVTalerContractTerms;
+    readonly step: EVTalerStep;
+    /** The operator's merchant, as the proof gives it. */
+    readonly merchant: EVTalerMerchant;
+    /** The EV Taler tariff of the EVSE, as the proof gives it. */
+    readonly tariff: JSONObject;
+    readonly currency: string;
+    /** The price statement that prices the session, if any. */
+    readonly priceStatement: VerifiedPrice | undefined;
+    /** The elements that price the session: of the price statement, else of the tariff. */
+    readonly elements: readonly JSONObject[];
+    /** The rates of the simple profile, if the elements are of it. */
+    readonly rates: EVTalerRates | undefined;
+    /** When step 1 was made: the time its price statement is current at, in milliseconds since 1970. */
+    readonly sessionStarted: number;
+    /** What the step covers at the price of its dimension, if recalculated. */
+    readonly stepPrice: NetDecimal | undefined;
+    /** The flat fee, in step 1, if recalculated. */
+    readonly flatFee: NetDecimal | undefined;
+    /** The reserve, in step 1, if recalculated: the amount less the step and the flat fee. */
+    readonly reserve: NetDecimal | undefined;
+    readonly amountCheck: EVTalerAmountCheck;
+    /** From step 2 on: the signed meter value at the start, verified. */
+    readonly start: EVTalerVerifiedMeterValue | undefined;
+    /** What a reader should know. */
+    readonly diagnostics: readonly string[];
+}
+/** An exchange of contract terms: its base URL and its master public key. */
+export interface EVTalerContractExchange {
+    readonly url: string;
+    readonly masterPublicKey: string;
+}
+/**
+ * The contract terms of a step of an EV Taler session, as GNU Taler's merchant backend makes them and its instance signs
+ * them (contract terms of version 0): what WWCP_POI reads of them, the rest kept as given.
+ */
+export declare class EVTalerContractTerms {
+    /** The contract terms, as given. */
+    readonly json: JSONObject;
+    readonly orderId: string;
+    readonly currency: string;
+    readonly amount: NetDecimal;
+    /** The base URL of the merchant instance. */
+    readonly merchantBaseURL: string;
+    /** The public key of the merchant instance, which signed the contract terms. */
+    readonly merchantPublicKey: string;
+    /** The exchanges the merchant accepts. */
+    readonly exchanges: readonly EVTalerContractExchange[];
+    /** When the contract terms were made, in milliseconds since 1970. */
+    readonly timestamp: number;
+    /** Until when the step can be paid. */
+    readonly payDeadline: number;
+    /** Until when the step can be refunded. */
+    readonly refundDeadline: number;
+    /** How long the wallet asks for a refund by itself, in microseconds, Infinity for "forever"; undefined if not at all. */
+    readonly autoRefund: number | undefined;
+    /** The step in WWCP terms: "extra": { "wwcp": … }. */
+    readonly step: EVTalerStep;
+    private constructor();
+    /**
+     * Reads the given contract terms of a step (`EVTalerContractTerms.TryParse`): of version 0, with an order, an amount and
+     * a maximum fee in one currency, the merchant's base URL and public key, at least one exchange, the times GNU Taler
+     * writes as { "t_s": … }, and the step in "extra": { "wwcp": … }. Refused in the words of WWCP_POI.
+     */
+    static parse(json: JSONValue | undefined): EVTalerContractTerms;
+    /**
+     * Checks these contract terms of a step against a verified charging station (`EVTalerContractTerms.TryVerify`,
+     * concepts/EVTaler.md 6 and 7): the merchant and its exchanges are those of the operator's evTaler in the currency of
+     * the EVSE's EV Taler tariff; the step names the roaming network, an EVSE of the station, that tariff and the price
+     * statement current when the session began; it follows the step before, or is step 1; from step 2 on, the signed start
+     * value is verified with a measurement key the proof gives; the amount is the step at the price of the session, where
+     * the prices are of the simple profile; the refund deadline is after the payment deadline, and the wallet picks a refund
+     * up by itself. Refused in the words of WWCP_POI.
+     *
+     * @param priceStatements  The price statements the app holds of the station, its pool and its EVSEs, as JSON.
+     * @param previous         The step before, verified; none for step 1.
+     * @param verifier         A transparency software verifying signed meter values, from step 2 on.
+     * @param payURI           The taler://pay URI of the offer, if the app has it as well.
+     */
+    verify(station: VerifiedChargingStation, priceStatements: JSONValue, previous: EVTalerVerifiedStep | undefined, verifier: EVTalerMeterValueVerifier | undefined, payURI?: EVTalerPayURI): EVTalerVerifiedStep;
+}
+/**
+ * The EV Taler tariff of the given EVSE, as the proof gives its tariffs (`EVTalerContractTerms.TryGetEVTalerTariff`, 4.3):
+ * the first of the type AD_HOC_PAYMENT, else the first without a type, with a currency, naming no payment means or
+ * EV_TALER among them; refused in the words of WWCP_POI otherwise.
+ */
+export declare function evTalerTariff(station: VerifiedChargingStation, evseId: string): JSONObject;
+//# sourceMappingURL=contractTerms.d.ts.map

package/dist/evTaler/contractTerms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractTerms.d.ts","sourceRoot":"","sources":["../../src/evTaler/contractTerms.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA0B,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAuC,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGlG,OAAO,EAAyB,KAAK,uBAAuB,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACzH,OAAO,EAAE,YAAY,EAAE,UAAU,EAA8B,MAAM,cAAc,CAAC;AACpF,OAAO,EAAoB,KAAK,yBAAyB,EAAE,KAAK,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACnH,OAAO,EAAe,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAOxC,iFAAiF;AACjF,eAAO,MAAM,mBAAmB;IAC5B,4IAA4I;;IAE5I,yHAAyH;;IAEzH,+FAA+F;;CAEzF,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,OAAO,mBAAmB,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE9F,uHAAuH;AACvH,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,KAAK,EAAY,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,IAAI,EAAa,WAAW,CAAC;IACtC,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,EAAS,eAAe,CAAC;IAC1C,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAW,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAS,MAAM,CAAC;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAG,aAAa,GAAG,SAAS,CAAC;IACpD,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAS,SAAS,UAAU,EAAE,CAAC;IAChD,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAY,YAAY,GAAG,SAAS,CAAC;IACnD,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAG,MAAM,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAQ,UAAU,GAAG,SAAS,CAAC;IACjD,gDAAgD;IAChD,QAAQ,CAAC,OAAO,EAAU,UAAU,GAAG,SAAS,CAAC;IACjD,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAU,UAAU,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAM,kBAAkB,CAAC;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAY,yBAAyB,GAAG,SAAS,CAAC;IAChE,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAM,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACpC,QAAQ,CAAC,GAAG,EAAe,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAG,MAAM,CAAC;CACrC;AA8BD;;;GAGG;AACH,qBAAa,oBAAoB;IAGzB,oCAAoC;aACpB,IAAI,EAAgB,UAAU;aAC9B,OAAO,EAAa,MAAM;aAC1B,QAAQ,EAAY,MAAM;aAC1B,MAAM,EAAc,UAAU;IAC9C,6CAA6C;aAC7B,eAAe,EAAK,MAAM;IAC1C,gFAAgF;aAChE,iBAAiB,EAAG,MAAM;IAC1C,0CAA0C;aAC1B,SAAS,EAAW,SAAS,uBAAuB,EAAE;IACtE,qEAAqE;aACrD,SAAS,EAAW,MAAM;IAC1C,uCAAuC;aACvB,WAAW,EAAS,MAAM;IAC1C,2CAA2C;aAC3B,cAAc,EAAM,MAAM;IAC1C,yHAAyH;aACzG,UAAU,EAAU,MAAM,GAAG,SAAS;IACtD,sDAAsD;aACtC,IAAI,EAAgB,WAAW;IArBnD,OAAO;IAwBP;;;;OAIG;WACW,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,oBAAoB;IAkFtE;;;;;;;;;;;;;OAaG;IACI,MAAM,CAAC,OAAO,EAAW,uBAAuB,EACzC,eAAe,EAAG,SAAS,EAC3B,QAAQ,EAAU,mBAAmB,GAAG,SAAS,EACjD,QAAQ,EAAU,yBAAyB,GAAG,SAAS,EACvD,MAAM,CAAC,EAAW,aAAa,GAAG,mBAAmB;CAiKtE;AAGD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAkB1F"}

package/dist/evTaler/meterValue.d.ts

@@ -0,0 +1,65 @@
+import { type JSONObject, type JSONValue } from '../json/value.ts';
+import type { VerifiedChargingStation } from '../verifier/chargingStation.ts';
+import type { NetDecimal } from './amounts.ts';
+/** What a transparency software reads from a signed meter value it verified: the meter that signed it, when, the energy register in kWh. */
+export interface EVTalerMeterReading {
+    readonly meterSerialNumber: string;
+    /** When it was measured, in milliseconds since 1970. */
+    readonly timestamp: number;
+    readonly energy: NetDecimal;
+}
+/** A measurement public key a station proof gives: its identification and its key, the DER of a SubjectPublicKeyInfo. */
+export interface EVTalerMeasurementKey {
+    readonly id: string;
+    readonly key: Uint8Array;
+    readonly json: JSONObject;
+}
+/**
+ * A transparency software verifying a signed meter value with the given public key, as it knows the format of the value,
+ * e.g. OCMF (`EVTalerMeterValueVerifier`): what the value says, or an Error saying why it is not valid.
+ */
+export type EVTalerMeterValueVerifier = (value: EVTalerSignedMeterValue, key: EVTalerMeasurementKey) => EVTalerMeterReading;
+/** A signed meter value verified with a key a station proof gives for the meter of the EVSE or for the station. */
+export interface EVTalerVerifiedMeterValue {
+    readonly value: EVTalerSignedMeterValue;
+    readonly reading: EVTalerMeterReading;
+    /** The @id of the measurement public key it was verified with. */
+    readonly keyId: string;
+    /** The @id of the energy meter or the charging station whose key it is. */
+    readonly signedBy: string;
+}
+/**
+ * A signed meter value as a charging station sends it with OCPP 2.1 (SignedMeterValueType): the signed data as the meter
+ * gives it, Base64 encoded, how it is encoded and signed, and maybe the public key. It is kept and compared as sent.
+ */
+export declare class EVTalerSignedMeterValue {
+    /** The signed data, canonical Base64, as the station sent it. */
+    readonly signedMeterData: string;
+    /** How the meter encodes it, e.g. "OCMF". */
+    readonly encodingMethod: string;
+    /** How it is signed, if the station says so apart from the data. */
+    readonly signingMethod: string | undefined;
+    /** The public key, canonical Base64 of the DER of a SubjectPublicKeyInfo, if the station sent it: which key of the proof verifies it. */
+    readonly publicKey: string | undefined;
+    private constructor();
+    /** A signed meter value as a charging station sent it, refused in the words of WWCP_POI where it is no valid one. */
+    static create(signedMeterData: string, encodingMethod: string, signingMethod?: string, publicKey?: string): EVTalerSignedMeterValue;
+    /**
+     * Reads a signed meter value as OCPP 2.1 writes it (`EVTalerSignedMeterValue.TryParse`): the signed data and the public
+     * key canonical Base64, the methods nonempty texts, nothing else; refused in its words.
+     */
+    static parse(json: JSONValue | undefined): EVTalerSignedMeterValue;
+    /** As OCPP 2.1 writes it. */
+    toJSON(): JSONObject;
+    /** Whether the station sent the same, field by field. */
+    equals(other: EVTalerSignedMeterValue | undefined): boolean;
+    private invalid;
+}
+/**
+ * Verifies the given signed meter value of the given EVSE with a measurement public key the station proof gives for the
+ * energy meter of the EVSE or for the charging station (`EVTalerSignedMeterValue.TryVerify`): the one the value names by
+ * its public key, else the only one there is; no key is tried after another. The reading must name the serial number of
+ * the meter or the station whose key it is. Refused in the words of WWCP_POI.
+ */
+export declare function verifyMeterValue(station: VerifiedChargingStation, evseId: string, value: EVTalerSignedMeterValue, verifier: EVTalerMeterValueVerifier): EVTalerVerifiedMeterValue;
+//# sourceMappingURL=meterValue.d.ts.map

package/dist/evTaler/meterValue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meterValue.d.ts","sourceRoot":"","sources":["../../src/evTaler/meterValue.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA0B,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG3F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ/C,4IAA4I;AAC5I,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,iBAAiB,EAAG,MAAM,CAAC;IACpC,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAW,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAc,UAAU,CAAC;CAC3C;AAED,yHAAyH;AACzH,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,EAAE,EAAK,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAI,UAAU,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,qBAAqB,KAAK,mBAAmB,CAAC;AAE5H,mHAAmH;AACnH,MAAM,WAAW,yBAAyB;IACtC,QAAQ,CAAC,KAAK,EAAM,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAI,mBAAmB,CAAC;IACxC,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAM,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAG,MAAM,CAAC;CAC9B;AAcD;;;GAGG;AACH,qBAAa,uBAAuB;IAG5B,iEAAiE;aACjD,eAAe,EAAG,MAAM;IACxC,6CAA6C;aAC7B,cAAc,EAAI,MAAM;IACxC,oEAAoE;aACpD,aAAa,EAAK,MAAM,GAAG,SAAS;IACpD,yIAAyI;aACzH,SAAS,EAAS,MAAM,GAAG,SAAS;IARxD,OAAO;IAWP,qHAAqH;WACvG,MAAM,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,uBAAuB;IAQ1I;;;OAGG;WACW,KAAK,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,GAAG,uBAAuB;IAuBzE,6BAA6B;IACtB,MAAM,IAAI,UAAU;IAS3B,yDAAyD;IAClD,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,SAAS,GAAG,OAAO;IASlE,OAAO,CAAC,OAAO;CAkBlB;AAGD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAI,uBAAuB,EAClC,MAAM,EAAK,MAAM,EACjB,KAAK,EAAM,uBAAuB,EAClC,QAAQ,EAAG,yBAAyB,GAAG,yBAAyB,CA2DhG"}

package/dist/evTaler/payURI.d.ts

@@ -0,0 +1,28 @@
+import type { EVTalerMerchant } from '../network/evTaler.ts';
+/** Whether two HTTPS base URLs are the same: the host in any case, the path as written (`EVTalerPayURI.SameBaseURL`). */
+export declare function sameBaseURL(a: string, b: string): boolean;
+/**
+ * A taler://pay URI of an offer, as the merchant backend gives it (`EVTalerPayURI`):
+ * taler://pay/{merchant_host}{/merchant_prefix_path*}/{order_id}/{session_id}{?c=claim_token}{#ssid}.
+ */
+export declare class EVTalerPayURI {
+    /** The URI as given. */
+    readonly text: string;
+    /** The base URL of the merchant instance it names: https://{merchant_host}/{merchant_prefix_path}/. */
+    readonly merchantBaseURL: string;
+    readonly orderId: string;
+    /** GNU Taler's session of the order, if any; not the session of the offers server. */
+    readonly sessionId: string | undefined;
+    readonly claimToken: string | undefined;
+    private constructor();
+    /**
+     * Reads the given taler://pay URI (`EVTalerPayURI.TryParse`). Its scheme is read in any case, as QR codes write it in
+     * upper case; taler+http://, of a merchant without HTTPS, is refused. The order and GNU Taler's session are counted from
+     * the end of its path, as the merchant's path may have any number of segments. Refused in the words of WWCP_POI.
+     */
+    static parse(text: string): EVTalerPayURI;
+    /** Checks that it names the merchant instance of the given EV Taler merchant: its host in any case, its path as written. */
+    verify(merchant: EVTalerMerchant): void;
+    toString(): string;
+}
+//# sourceMappingURL=payURI.d.ts.map

package/dist/evTaler/payURI.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payURI.d.ts","sourceRoot":"","sources":["../../src/evTaler/payURI.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAY7D,yHAAyH;AACzH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAwBzD;AAGD;;;GAGG;AACH,qBAAa,aAAa;IAGlB,wBAAwB;aACR,IAAI,EAAc,MAAM;IACxC,uGAAuG;aACvF,eAAe,EAAG,MAAM;aACxB,OAAO,EAAW,MAAM;IACxC,sFAAsF;aACtE,SAAS,EAAS,MAAM,GAAG,SAAS;aACpC,UAAU,EAAQ,MAAM,GAAG,SAAS;IARxD,OAAO;IAWP;;;;OAIG;WACW,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa;IAkDhD,4HAA4H;IACrH,MAAM,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAKvC,QAAQ,IAAI,MAAM;CAI5B"}