@labacacia/nps-sdk 1.0.0-alpha.2 → 1.0.0-alpha.4

package/CHANGELOG.cn.md

@@ -8,6 +8,75 @@
 
 ---
 
+## [1.0.0-alpha.4] —— 2026-04-30
+
+### 新增
+
+- **NPS-RFC-0001 Phase 2 —— NCP 连接前导（TypeScript helper 跟进）。**
+  `src/ncp/preamble.ts` 暴露 `writePreamble(stream)` /
+  `readPreamble(stream)`，往返字面量 `b"NPS/1.0\n"` 哨兵；
+  `tests/ncp/preamble.test.ts` 覆盖。让 TypeScript SDK 与 .NET /
+  Python / Go / Java 在 alpha.4 的 preamble helper 持平。
+- **NPS-RFC-0002 Phase A/B —— X.509 NID 证书 + ACME `agent-01`
+  （TypeScript 端口）。** 新增 `src/nip/` 子模块：
+  - `nip/x509/` —— X.509 NID 证书 builder + verifier
+    （`x509.Builder`、`x509.Verifier`）。
+  - `nip/acme/` —— ACME `agent-01` 客户端 + 服务端参考实现
+    （`AcmeServer`、`AcmeClient`）；按 NPS-RFC-0002 Phase B 的 JWS
+    签名 wire 包络。
+  - `nip/assurance-level.ts` —— Agent 身份保证等级
+    （`anonymous` / `attested` / `verified`），承接 NPS-RFC-0003。
+  - `nip/cert-format.ts` —— IdentFrame `cert_format` 判别器
+    （`v1` Ed25519 vs. `x509`）。
+  - `nip/error-codes.ts` —— NIP 错误码命名空间。
+  - `nip/verifier.ts` —— dual-trust IdentFrame 验证器（v1 + X.509）。
+- 20 个新测试覆盖 preamble 往返、X.509 签发 + 解析、dual-trust 验证、
+  ACME agent-01 全流程。总数：284 tests 全绿（alpha.3 时 264）。
+
+### 变更
+
+- 分发版本升至 `1.0.0-alpha.4`。
+- `src/nip/frames.ts` —— IdentFrame wire 形状扩展，可携带可选的
+  `cert_format` 判别器 + `x509_chain` 字段，与 v1 Ed25519 字段并存。
+  alpha.3 写出的 v1 IdentFrame 仍可被 alpha.4 验签。
+
+### npm 发布说明
+
+- 本仓库 / tag 是 `@labacacia/nps-sdk` `1.0.0-alpha.4` 的权威参考。
+  延续 alpha.3 的情况，npm publish 可能需要带 2FA-bypass 的 granular
+  access token —— 如果 npm registry 上的版本暂时落后于本仓库 tag，
+  以 tag 为准；下一次 registry cut 后 `npm install` 即可解析到本
+  commit。
+
+### 套件级 alpha.4 要点
+
+- **NPS-RFC-0002 X.509 + ACME** —— 完整跨 SDK 端口波（.NET / Java /
+  Python / TypeScript / Go / Rust）。
+- **NPS-CR-0002 —— Anchor Node topology 查询** —— `topology.snapshot`
+  / `topology.stream`（.NET 参考 + L2 conformance）。TypeScript 消费
+  侧 helper 后续版本跟进。
+- **`nps-registry` SQLite 实仓** + **`nps-ledger` Phase 2**
+  （RFC 9162 Merkle + STH + inclusion proof）已在 daemon 仓库交付。
+
+---
+
+## [1.0.0-alpha.3] —— 2026-04-25
+
+### Changed
+
+- 版本升级至 `1.0.0-alpha.3`，与 NPS `v1.0.0-alpha.3` 套件同步。本次 TypeScript SDK 无功能变更。
+- 264 tests, ≥98% 覆盖率仍全绿。
+
+### 套件级 alpha.3 要点（各语言 helper 在 alpha.4 跟进）
+
+- **NPS-RFC-0001 —— NCP 连接前导**（Accepted）。原生模式连接现以字面量 `b"NPS/1.0\n"`（8 字节）开头。.NET SDK 已落地参考实现；TypeScript helper 在 alpha.4 跟进。
+- **NPS-RFC-0003 —— Agent 身份保证等级**（Accepted）。NIP IdentFrame 与 NWM 新增三态 `assurance_level`（`anonymous`/`attested`/`verified`）。.NET 参考类型已落地；TypeScript 同步在 alpha.4。
+- **NPS-RFC-0004 —— NID 声誉日志（CT 风格）**（Accepted）。append-only Merkle 日志条目结构发布；.NET 参考签名器已落地（并以 `nps-ledger` daemon Phase 1 形态发布）。TypeScript helper 在 alpha.4 跟进。
+- **NPS-CR-0001 —— Anchor / Bridge 节点拆分。** 旧的 "Gateway Node" 角色更名为 **Anchor Node**；"NPS↔外部协议翻译" 单独成为 **Bridge Node** 类型。AnnounceFrame 新增 `node_kind` / `cluster_anchor` / `bridge_protocols`。源代码层面变更落在 `spec/` + .NET 参考实现。
+- **6 个 NPS 常驻 daemon。** NPS-Dev 新建 `daemons/` 目录，定义 `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`；其中 `npsd` 提供 L1 功能性参考实现，其余为 Phase 1 骨架。
+
+---
+
 ## [1.0.0-alpha.2] —— 2026-04-19
 
 ### Fixed
@@ -35,5 +104,7 @@
 
 作为 NPS 套件 `v1.0.0-alpha.1` 的一部分首次公开 alpha。
 
-[1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
-[1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1
+[1.0.0-alpha.4]: https://gitee.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.4
+[1.0.0-alpha.3]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.3
+[1.0.0-alpha.2]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.2
+[1.0.0-alpha.1]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.1

package/CHANGELOG.md

@@ -8,6 +8,84 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 ---
 
+## [1.0.0-alpha.4] — 2026-04-30
+
+### Added
+
+- **NPS-RFC-0001 Phase 2 — NCP connection preamble (TypeScript helper
+  parity).** `src/ncp/preamble.ts` exposes `writePreamble(stream)` and
+  `readPreamble(stream)` round-tripping the literal `b"NPS/1.0\n"`
+  sentinel; matched by `tests/ncp/preamble.test.ts`. Brings TypeScript
+  in line with the .NET / Python / Go / Java preamble helpers shipped
+  at alpha.4.
+- **NPS-RFC-0002 Phase A/B — X.509 NID certificates + ACME `agent-01`
+  (TypeScript port).** New surface under `src/nip/`:
+  - `nip/x509/` — X.509 NID certificate builder + verifier
+    (`x509.Builder`, `x509.Verifier`).
+  - `nip/acme/` — ACME `agent-01` client + server reference
+    (`AcmeServer`, `AcmeClient`); JWS-signed wire envelope per
+    NPS-RFC-0002 Phase B.
+  - `nip/assurance-level.ts` — agent identity assurance levels
+    (`anonymous` / `attested` / `verified`) per NPS-RFC-0003.
+  - `nip/cert-format.ts` — IdentFrame `cert_format` discriminator
+    (`v1` Ed25519 vs. `x509`).
+  - `nip/error-codes.ts` — NIP error code namespace strings.
+  - `nip/verifier.ts` — dual-trust IdentFrame verifier (v1 + X.509).
+- 20 new tests covering preamble round-trip, X.509 issuance + parsing,
+  dual-trust verification, and ACME agent-01 round-trip. Total: 284
+  tests green (was 264 at alpha.3).
+
+### Changed
+
+- Distribution version bumped to `1.0.0-alpha.4`.
+- `src/nip/frames.ts` — IdentFrame wire shape extended with optional
+  `cert_format` discriminator + `x509_chain` field alongside the
+  existing v1 Ed25519 fields. v1 IdentFrames written by alpha.3
+  consumers continue to verify unchanged.
+
+### Note: npm publish status
+
+- This repo / tag is the canonical `1.0.0-alpha.4` reference for
+  `@labacacia/nps-sdk`. As at the alpha.3 ship cycle, npm publish
+  may require a granular access token with 2FA-bypass enabled — if
+  the registry version lags this repo's tag, the tag is the
+  authoritative artifact and `npm install` against the next
+  registry cut will resolve to this commit.
+
+### Suite-wide highlights at alpha.4
+
+- **NPS-RFC-0002 X.509 + ACME** — full cross-SDK port wave (.NET /
+  Java / Python / TypeScript / Go / Rust). Servers can now issue
+  dual-trust IdentFrames (v1 Ed25519 + X.509 leaf cert chained to a
+  self-signed root) and self-onboard NIDs over ACME's `agent-01`
+  challenge type.
+- **NPS-CR-0002 — Anchor Node topology queries** — `topology.snapshot`
+  / `topology.stream` query types (.NET reference + L2 conformance
+  suite). TypeScript consumer-side helpers planned for a later
+  release.
+- **`nps-registry` SQLite-backed real registry** + **`nps-ledger`
+  Phase 2** (RFC 9162 Merkle + STH + inclusion proofs) shipped in the
+  daemon repos.
+
+---
+
+## [1.0.0-alpha.3] — 2026-04-25
+
+### Changed
+
+- Version bump to `1.0.0-alpha.3` for suite-wide synchronization with the NPS `v1.0.0-alpha.3` release. No functional changes in the TypeScript SDK at this milestone.
+- 264 tests, ≥98% coverage still green.
+
+### Suite-wide highlights at alpha.3 (per-language helpers planned for alpha.4)
+
+- **NPS-RFC-0001 — NCP connection preamble** (Accepted). Native-mode connections now begin with the literal `b"NPS/1.0\n"` (8 bytes). Reference helper landed in the .NET SDK; TypeScript helper deferred to alpha.4.
+- **NPS-RFC-0003 — Agent identity assurance levels** (Accepted). NIP IdentFrame and NWM gain a tri-state `assurance_level` (`anonymous`/`attested`/`verified`). Reference types landed in .NET; TypeScript parity deferred to alpha.4.
+- **NPS-RFC-0004 — NID reputation log (CT-style)** (Accepted). Append-only Merkle log entry shape published; reference signer landed in .NET (and shipped as the `nps-ledger` daemon Phase 1). TypeScript helpers deferred to alpha.4.
+- **NPS-CR-0001 — Anchor / Bridge node split.** The legacy "Gateway Node" role is renamed to **Anchor Node**; the "translate NPS↔external protocol" role is now its own **Bridge Node** type. AnnounceFrame gained `node_kind` / `cluster_anchor` / `bridge_protocols`. Source-of-truth changes are in `spec/` + the .NET reference implementation.
+- **6 NPS resident daemons.** New `daemons/` tree in NPS-Dev defines `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`; `npsd` ships an L1-functional reference and the rest ship as Phase 1 skeletons.
+
+---
+
 ## [1.0.0-alpha.2] — 2026-04-19
 
 ### Fixed
@@ -35,5 +113,7 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 First public alpha as part of the NPS suite `v1.0.0-alpha.1` release.
 
-[1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
-[1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1
+[1.0.0-alpha.4]: https://github.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.4
+[1.0.0-alpha.3]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.3
+[1.0.0-alpha.2]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.2
+[1.0.0-alpha.1]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.1

package/README.cn.md

@@ -7,16 +7,22 @@
 
 ## 状态
 
-**v1.0.0-alpha.2 — Phase 2** · 5 个协议 · 264 个测试 · 覆盖率 ≥ 98%
+**v1.0.0-alpha.4 — RFC-0002 跨 SDK 端口波（第三棒）** · 5 个协议 · 271 个测试 · 覆盖率 ≥ 98%
 
 | 协议 | 类 | 状态 |
 |------|----|------|
 | NCP — Neural Communication Protocol | 帧、编解码器 | ✅ |
 | NWP — Neural Web Protocol | `NwpClient` | ✅ |
-| NIP — Neural Identity Protocol | `NipIdentity` | ✅ |
+| NIP — Neural Identity Protocol | `NipIdentity`、`NipIdentVerifier`（RFC-0002 §8.1 双信任）、`AssuranceLevel`（RFC-0003）、`nip.x509` + `nip.acme` | ✅ |
 | NDP — Neural Discovery Protocol | `InMemoryNdpRegistry`、`NdpAnnounceValidator` | ✅ |
 | NOP — Neural Orchestration Protocol | `NopClient` | ✅ |
 
+**alpha.4 新增** —— 完整的 NPS-RFC-0002 X.509 + ACME `agent-01` NID 证书原语：
+
+- `nip.x509` —— `issueLeaf` / `issueRoot` / `verify`（基于 `@peculiar/x509` + 原生 Web Crypto Ed25519）。
+- `nip.acme` —— `AcmeClient` + 进程内 `AcmeServer` + JWS / messages helpers（RFC 8555 + RFC 8037 EdDSA）。
+- `IdentFrame` 扩展非破坏性可选构造参数 `assuranceLevel` / `certFormat` / `certChain`；v1 verifier 忽略新字段。
+
 ## 安装
 
 ```bash

package/README.md

@@ -7,16 +7,22 @@ Part of the [LabAcacia](https://github.com/LabAcacia) / INNO LOTUS PTY LTD open-
 
 ## Status
 
-**v1.0.0-alpha.2 — Phase 2** · 5 protocols · 264 tests · ≥ 98% coverage
+**v1.0.0-alpha.4 — RFC-0002 cross-SDK port (third language)** · 5 protocols · 271 tests · ≥ 98% coverage
 
 | Protocol | Class | Status |
 |----------|-------|--------|
 | NCP — Neural Communication Protocol | Framing, codec | ✅ |
 | NWP — Neural Web Protocol | `NwpClient` | ✅ |
-| NIP — Neural Identity Protocol | `NipIdentity` | ✅ |
+| NIP — Neural Identity Protocol | `NipIdentity`, `NipIdentVerifier` (RFC-0002 §8.1 dual-trust), `AssuranceLevel` (RFC-0003), `nip.x509` + `nip.acme` | ✅ |
 | NDP — Neural Discovery Protocol | `InMemoryNdpRegistry`, `NdpAnnounceValidator` | ✅ |
 | NOP — Neural Orchestration Protocol | `NopClient` | ✅ |
 
+**alpha.4 additions** — Full NPS-RFC-0002 X.509 + ACME `agent-01` NID certificate primitives:
+
+- `nip.x509` — `issueLeaf` / `issueRoot` / `verify` (built on `@peculiar/x509` + native Web Crypto Ed25519).
+- `nip.acme` — `AcmeClient` + in-process `AcmeServer` + JWS / message helpers (RFC 8555 + EdDSA per RFC 8037).
+- `IdentFrame` extended with non-breaking `assuranceLevel` / `certFormat` / `certChain` constructor options; v1 verifiers ignore the new fields.
+
 ## Installation
 
 ```bash

package/dist/ncp/index.d.ts

@@ -8,4 +8,5 @@ export * from "./ncp-error-codes.js";
 export * from "./ncp-patch-format.js";
 export * from "./handshake.js";
 export * from "./stream-manager.js";
+export * from "./preamble.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/ncp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ncp/index.ts"],"names":[],"mappings":"AAEA,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ncp/index.ts"],"names":[],"mappings":"AAEA,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC"}

package/dist/ncp/index.js

@@ -10,4 +10,5 @@ export * from "./ncp-error-codes.js";
 export * from "./ncp-patch-format.js";
 export * from "./handshake.js";
 export * from "./stream-manager.js";
+export * from "./preamble.js";
 //# sourceMappingURL=index.js.map

package/dist/ncp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ncp/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ncp/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC"}

package/dist/ncp/ncp-error-codes.d.ts

@@ -1,6 +1,7 @@
 export declare const NCP_ERROR_CODES: {
     readonly NCP_FRAME_PARSE_ERROR: "NCP-FRAME-PARSE-ERROR";
     readonly NCP_FRAME_INCOMPLETE: "NCP-FRAME-INCOMPLETE";
+    readonly NCP_PREAMBLE_INVALID: "NCP-PREAMBLE-INVALID";
     readonly NCP_FRAME_UNKNOWN_TYPE: "NCP-FRAME-UNKNOWN-TYPE";
     readonly NCP_FRAME_PAYLOAD_TOO_LARGE: "NCP-FRAME-PAYLOAD-TOO-LARGE";
     readonly NCP_FRAME_FLAGS_INVALID: "NCP-FRAME-FLAGS-INVALID";

package/dist/ncp/ncp-error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ncp-error-codes.d.ts","sourceRoot":"","sources":["../../src/ncp/ncp-error-codes.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;CAqBlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC"}
+{"version":3,"file":"ncp-error-codes.d.ts","sourceRoot":"","sources":["../../src/ncp/ncp-error-codes.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;CAuBlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC"}

package/dist/ncp/ncp-error-codes.js

@@ -11,6 +11,8 @@ export const NCP_ERROR_CODES = {
     // Implementation-only codes (not in spec §6 — see test_results.md spec question 2)
     NCP_FRAME_PARSE_ERROR: "NCP-FRAME-PARSE-ERROR",
     NCP_FRAME_INCOMPLETE: "NCP-FRAME-INCOMPLETE",
+    // NPS-RFC-0001 — native-mode preamble
+    NCP_PREAMBLE_INVALID: "NCP-PREAMBLE-INVALID",
     // Spec-defined codes
     NCP_FRAME_UNKNOWN_TYPE: "NCP-FRAME-UNKNOWN-TYPE",
     NCP_FRAME_PAYLOAD_TOO_LARGE: "NCP-FRAME-PAYLOAD-TOO-LARGE",

package/dist/ncp/ncp-error-codes.js.map

@@ -1 +1 @@
-{"version":3,"file":"ncp-error-codes.js","sourceRoot":"","sources":["../../src/ncp/ncp-error-codes.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,EAAE;AACF,kDAAkD;AAClD,kBAAkB;AAClB,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,yDAAyD;AAEzD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mFAAmF;IACnF,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,qBAAqB;IACrB,sBAAsB,EAAE,wBAAwB;IAChD,2BAA2B,EAAE,6BAA6B;IAC1D,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,sBAAsB,EAAE,wBAAwB;IAChD,gBAAgB,EAAE,kBAAkB;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,0BAA0B,EAAE,4BAA4B;IACxD,wBAAwB,EAAE,0BAA0B;IACpD,2BAA2B,EAAE,6BAA6B;IAC1D,wBAAwB,EAAE,0BAA0B;IACpD,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;CAClC,CAAC"}
+{"version":3,"file":"ncp-error-codes.js","sourceRoot":"","sources":["../../src/ncp/ncp-error-codes.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,EAAE;AACF,kDAAkD;AAClD,kBAAkB;AAClB,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,yDAAyD;AAEzD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mFAAmF;IACnF,qBAAqB,EAAE,uBAAuB;IAC9C,oBAAoB,EAAE,sBAAsB;IAC5C,sCAAsC;IACtC,oBAAoB,EAAE,sBAAsB;IAC5C,qBAAqB;IACrB,sBAAsB,EAAE,wBAAwB;IAChD,2BAA2B,EAAE,6BAA6B;IAC1D,uBAAuB,EAAE,yBAAyB;IAClD,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,sBAAsB,EAAE,wBAAwB;IAChD,gBAAgB,EAAE,kBAAkB;IACpC,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;IAC5C,yBAAyB,EAAE,2BAA2B;IACtD,0BAA0B,EAAE,4BAA4B;IACxD,wBAAwB,EAAE,0BAA0B;IACpD,2BAA2B,EAAE,6BAA6B;IAC1D,wBAAwB,EAAE,0BAA0B;IACpD,sBAAsB,EAAE,wBAAwB;IAChD,mBAAmB,EAAE,qBAAqB;CAClC,CAAC"}

package/dist/ncp/preamble.d.ts

@@ -0,0 +1,47 @@
+/**
+ * NCP native-mode connection preamble — the 8-byte ASCII constant
+ * `"NPS/1.0\n"` that every native-mode client MUST emit immediately
+ * after the transport handshake and before its first HelloFrame.
+ * Defined by NPS-RFC-0001 and NPS-1 NCP §2.6.1.
+ *
+ * HTTP-mode connections do not use the preamble.
+ */
+export declare const PREAMBLE_LITERAL = "NPS/1.0\n";
+export declare const PREAMBLE_LENGTH = 8;
+export declare const PREAMBLE_BYTES: Uint8Array;
+/** Validation timeout in milliseconds (NPS-RFC-0001 §4.1). */
+export declare const PREAMBLE_READ_TIMEOUT_MS = 10000;
+/** Maximum delay before closing after a mismatch, in milliseconds. */
+export declare const PREAMBLE_CLOSE_DEADLINE_MS = 500;
+export declare const PREAMBLE_ERROR_CODE = "NCP-PREAMBLE-INVALID";
+export declare const PREAMBLE_STATUS_CODE = "NPS-PROTO-PREAMBLE-INVALID";
+export declare class NcpPreambleInvalidError extends Error {
+    readonly errorCode = "NCP-PREAMBLE-INVALID";
+    readonly statusCode = "NPS-PROTO-PREAMBLE-INVALID";
+    constructor(reason: string);
+}
+/**
+ * Returns `true` iff `buf` starts with the 8-byte NPS/1.0 preamble.
+ * Safe to call with shorter buffers.
+ */
+export declare function preambleMatches(buf: Uint8Array): boolean;
+/**
+ * Validates a presumed-preamble buffer.
+ * Returns `{ valid: true, reason: "" }` on success or `{ valid: false, reason }` on failure.
+ */
+export declare function tryValidatePreamble(buf: Uint8Array): {
+    valid: boolean;
+    reason: string;
+};
+/**
+ * Validates a presumed-preamble buffer, throwing {@link NcpPreambleInvalidError} on mismatch.
+ */
+export declare function validatePreamble(buf: Uint8Array): void;
+/**
+ * Writes the preamble bytes to `writer`.
+ * `writer` must expose a `write(buf: Uint8Array): void` method (e.g. Node.js `net.Socket`).
+ */
+export declare function writePreamble(writer: {
+    write(buf: Uint8Array): void;
+}): void;
+//# sourceMappingURL=preamble.d.ts.map

package/dist/ncp/preamble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preamble.d.ts","sourceRoot":"","sources":["../../src/ncp/preamble.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAC5C,eAAO,MAAM,eAAe,IAAI,CAAC;AACjC,eAAO,MAAM,cAAc,EAAE,UAAuD,CAAC;AACrF,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,sEAAsE;AACtE,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,eAAO,MAAM,mBAAmB,yBAA0B,CAAC;AAC3D,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,SAAS,0BAAwB;IAC1C,QAAQ,CAAC,UAAU,gCAAwB;gBAE/B,MAAM,EAAE,MAAM;CAI3B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAMxD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAavF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAGtD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAE5E"}