@labacacia/nps-sdk 1.0.0-alpha.4 → 1.0.0-alpha.5

package/dist/nwp/error-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-codes.js","sourceRoot":"","sources":["../../src/nwp/error-codes.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,sCAAsC;AAEtC,mFAAmF;AAEnF,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAM,8BAA8B,CAAC;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAc,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAc,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAK,+BAA+B,CAAC;AAC3E,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAQ,4BAA4B,CAAC;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAO,6BAA6B,CAAC;AAEzE,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAU,0BAA0B,CAAC;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAW,yBAAyB,CAAC;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAU,0BAA0B,CAAC;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAY,wBAAwB,CAAC;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAM,8BAA8B,CAAC;AAC1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAO,6BAA6B,CAAC;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAM,8BAA8B,CAAC;AAE1E,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAc,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAS,2BAA2B,CAAC;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAW,oBAAoB,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAM,yBAAyB,CAAC;AAEhE,iFAAiF;AACjF,MAAM,CAAC,MAAM,0BAA0B,GAAK,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAO,8BAA8B,CAAC;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAAC;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAU,2BAA2B,CAAC;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAU,2BAA2B,CAAC;AAExE,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAQ,qBAAqB,CAAC;AAC1D,MAAM,CAAC,MAAM,cAAc,GAAS,oBAAoB,CAAC;AACzD,MAAM,CAAC,MAAM,WAAW,GAAY,iBAAiB,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAO,sBAAsB,CAAC;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAI,yBAAyB,CAAC;AAE9D,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAAC;AAC/E,MAAM,CAAC,MAAM,0BAA0B,GAAK,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAK,gCAAgC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAS,2BAA2B,CAAC;AACvE,MAAM,CAAC,MAAM,0BAA0B,GAAI,gCAAgC,CAAC;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAI,gCAAgC,CAAC;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAE7E,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,CAAC"}

package/dist/nwp/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./frames.js";
 export * from "./registry.js";
 export * from "./client.js";
+export * as NwpErrorCodes from "./error-codes.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/nwp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nwp/index.ts"],"names":[],"mappings":"AAGA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nwp/index.ts"],"names":[],"mappings":"AAGA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,OAAO,KAAK,aAAa,MAAM,kBAAkB,CAAC"}

package/dist/nwp/index.js

@@ -3,4 +3,5 @@
 export * from "./frames.js";
 export * from "./registry.js";
 export * from "./client.js";
+export * as NwpErrorCodes from "./error-codes.js";
 //# sourceMappingURL=index.js.map

package/dist/nwp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nwp/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,sCAAsC;AAEtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nwp/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,sCAAsC;AAEtC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,OAAO,KAAK,aAAa,MAAM,kBAAkB,CAAC"}

package/doc/nps-sdk.nip.cn.md

@@ -19,6 +19,7 @@ NIP 是 NPS 的 TLS/PKI。本模块暴露三个身份帧
 - [`RevokeFrame` (0x22)](#revokeframe-0x22)
 - [`NipIdentity`](#nipidentity)
 - [规范化 JSON 与签名格式](#规范化-json-与签名格式)
+- [`NipErrorCodes`](#niperrorecodes)
 
 ---
 
@@ -233,3 +234,32 @@ const signed    = new IdentFrame(unsigned.nid, unsigned.pubKey, meta, signature)
 const ok = id.verify(signed.unsignedDict(), signed.signature);
 // → true
 ```
+
+---
+
+## `NipErrorCodes`
+
+NIP wire 错误码字符串常量。从 `@labacacia/nps-sdk/nip` 导入。
+
+```typescript
+import { NipErrorCodes } from "@labacacia/nps-sdk/nip";
+```
+
+| 常量 | Wire 值 | 起始版本 |
+|------|---------|----------|
+| `NipErrorCodes.IDENT_SIG_INVALID` | `"NIP-IDENT-SIG-INVALID"` | alpha.4 |
+| `NipErrorCodes.IDENT_NID_MISMATCH` | `"NIP-IDENT-NID-MISMATCH"` | alpha.4 |
+| `NipErrorCodes.IDENT_EXPIRED` | `"NIP-IDENT-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.IDENT_REVOKED` | `"NIP-IDENT-REVOKED"` | alpha.4 |
+| `NipErrorCodes.TRUST_CHAIN_BROKEN` | `"NIP-TRUST-CHAIN-BROKEN"` | alpha.4 |
+| `NipErrorCodes.TRUST_SCOPE_VIOLATION` | `"NIP-TRUST-SCOPE-VIOLATION"` | alpha.4 |
+| `NipErrorCodes.ACME_CHALLENGE_FAILED` | `"NIP-ACME-CHALLENGE-FAILED"` | alpha.4 |
+| `NipErrorCodes.ACME_ORDER_EXPIRED` | `"NIP-ACME-ORDER-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.X509_CERT_INVALID` | `"NIP-X509-CERT-INVALID"` | alpha.4 |
+| `NipErrorCodes.X509_CHAIN_UNTRUSTED` | `"NIP-X509-CHAIN-UNTRUSTED"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_LOG_UNREACHABLE` | `"NIP-REPUTATION-LOG-UNREACHABLE"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_GOSSIP_FORK` | `"NIP-REPUTATION-GOSSIP-FORK"` | **alpha.5** |
+| `NipErrorCodes.REPUTATION_GOSSIP_SIG_INVALID` | `"NIP-REPUTATION-GOSSIP-SIG-INVALID"` | **alpha.5** |
+
+`REPUTATION_GOSSIP_FORK`：跨节点 STH 一致性检查失败时返回。
+`REPUTATION_GOSSIP_SIG_INVALID`：gossip 交换中对端 STH 签名验证失败时返回。

package/doc/nps-sdk.nip.md

@@ -19,6 +19,7 @@ AES-256-GCM + PBKDF2-SHA256 key-file encryption.
 - [`RevokeFrame` (0x22)](#revokeframe-0x22)
 - [`NipIdentity`](#nipidentity)
 - [Canonical JSON & signing format](#canonical-json--signing-format)
+- [`NipErrorCodes`](#niperrorecodes)
 
 ---
 
@@ -240,3 +241,32 @@ const signed    = new IdentFrame(unsigned.nid, unsigned.pubKey, meta, signature)
 const ok = id.verify(signed.unsignedDict(), signed.signature);
 // → true
 ```
+
+---
+
+## `NipErrorCodes`
+
+String constants for NIP wire error codes. Import from `@labacacia/nps-sdk/nip`.
+
+```typescript
+import { NipErrorCodes } from "@labacacia/nps-sdk/nip";
+```
+
+| Constant | Wire value | Since |
+|----------|------------|-------|
+| `NipErrorCodes.IDENT_SIG_INVALID` | `"NIP-IDENT-SIG-INVALID"` | alpha.4 |
+| `NipErrorCodes.IDENT_NID_MISMATCH` | `"NIP-IDENT-NID-MISMATCH"` | alpha.4 |
+| `NipErrorCodes.IDENT_EXPIRED` | `"NIP-IDENT-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.IDENT_REVOKED` | `"NIP-IDENT-REVOKED"` | alpha.4 |
+| `NipErrorCodes.TRUST_CHAIN_BROKEN` | `"NIP-TRUST-CHAIN-BROKEN"` | alpha.4 |
+| `NipErrorCodes.TRUST_SCOPE_VIOLATION` | `"NIP-TRUST-SCOPE-VIOLATION"` | alpha.4 |
+| `NipErrorCodes.ACME_CHALLENGE_FAILED` | `"NIP-ACME-CHALLENGE-FAILED"` | alpha.4 |
+| `NipErrorCodes.ACME_ORDER_EXPIRED` | `"NIP-ACME-ORDER-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.X509_CERT_INVALID` | `"NIP-X509-CERT-INVALID"` | alpha.4 |
+| `NipErrorCodes.X509_CHAIN_UNTRUSTED` | `"NIP-X509-CHAIN-UNTRUSTED"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_LOG_UNREACHABLE` | `"NIP-REPUTATION-LOG-UNREACHABLE"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_GOSSIP_FORK` | `"NIP-REPUTATION-GOSSIP-FORK"` | **alpha.5** |
+| `NipErrorCodes.REPUTATION_GOSSIP_SIG_INVALID` | `"NIP-REPUTATION-GOSSIP-SIG-INVALID"` | **alpha.5** |
+
+`REPUTATION_GOSSIP_FORK` is returned when an STH consistency check fails across peers.
+`REPUTATION_GOSSIP_SIG_INVALID` is returned when a peer STH signature fails verification during a gossip exchange.

package/doc/nps-sdk.nwp.cn.md

@@ -18,6 +18,7 @@ NWP 是 AI 的 HTTP。本模块提供两个 NWP 帧
 - [`QueryFrame` (0x10)](#queryframe-0x10)
 - [`ActionFrame` (0x11)](#actionframe-0x11)
 - [`NwpClient`](#nwpclient)
+- [`NwpErrorCodes`](#nwperrorcodes)
 
 ---
 
@@ -215,3 +216,73 @@ const resp = await nwp.invoke(new ActionFrame(
 ));
 // resp 是 AsyncActionResponse
 ```
+
+---
+
+## `NwpErrorCodes`
+
+30 个 NWP wire 错误码字符串常量（alpha.5 新增）。
+
+```typescript
+import { NwpErrorCodes } from "@labacacia/nps-sdk/nwp";
+```
+
+### Auth 组（`NWP-AUTH-*`）
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.AUTH_NID_SCOPE_VIOLATION` | `"NWP-AUTH-NID-SCOPE-VIOLATION"` |
+| `NwpErrorCodes.AUTH_NID_NOT_TRUSTED` | `"NWP-AUTH-NID-NOT-TRUSTED"` |
+| `NwpErrorCodes.AUTH_NID_EXPIRED` | `"NWP-AUTH-NID-EXPIRED"` |
+| `NwpErrorCodes.AUTH_NID_REVOKED` | `"NWP-AUTH-NID-REVOKED"` |
+| `NwpErrorCodes.AUTH_SIG_INVALID` | `"NWP-AUTH-SIG-INVALID"` |
+| `NwpErrorCodes.AUTH_TOKEN_BUDGET_EXCEEDED` | `"NWP-AUTH-TOKEN-BUDGET-EXCEEDED"` |
+| `NwpErrorCodes.AUTH_RATE_LIMIT` | `"NWP-AUTH-RATE-LIMIT"` |
+
+### Query 组（`NWP-QUERY-*`）
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.QUERY_ANCHOR_NOT_FOUND` | `"NWP-QUERY-ANCHOR-NOT-FOUND"` |
+| `NwpErrorCodes.QUERY_ANCHOR_EXPIRED` | `"NWP-QUERY-ANCHOR-EXPIRED"` |
+| `NwpErrorCodes.QUERY_SCHEMA_MISMATCH` | `"NWP-QUERY-SCHEMA-MISMATCH"` |
+| `NwpErrorCodes.QUERY_LIMIT_EXCEEDED` | `"NWP-QUERY-LIMIT-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_DEPTH_EXCEEDED` | `"NWP-QUERY-DEPTH-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_FILTER_INVALID` | `"NWP-QUERY-FILTER-INVALID"` |
+| `NwpErrorCodes.QUERY_VECTOR_UNSUPPORTED` | `"NWP-QUERY-VECTOR-UNSUPPORTED"` |
+| `NwpErrorCodes.QUERY_CURSOR_INVALID` | `"NWP-QUERY-CURSOR-INVALID"` |
+
+### Action、Task、Subscribe、Infrastructure 组
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.ACTION_NOT_FOUND` | `"NWP-ACTION-NOT-FOUND"` |
+| `NwpErrorCodes.ACTION_PARAM_INVALID` | `"NWP-ACTION-PARAM-INVALID"` |
+| `NwpErrorCodes.ACTION_IDEMPOTENCY_CONFLICT` | `"NWP-ACTION-IDEMPOTENCY-CONFLICT"` |
+| `NwpErrorCodes.TASK_NOT_FOUND` | `"NWP-TASK-NOT-FOUND"` |
+| `NwpErrorCodes.TASK_ALREADY_COMPLETE` | `"NWP-TASK-ALREADY-COMPLETE"` |
+| `NwpErrorCodes.TASK_TIMEOUT` | `"NWP-TASK-TIMEOUT"` |
+| `NwpErrorCodes.TASK_CANCELLED` | `"NWP-TASK-CANCELLED"` |
+| `NwpErrorCodes.SUBSCRIBE_TOPIC_NOT_FOUND` | `"NWP-SUBSCRIBE-TOPIC-NOT-FOUND"` |
+| `NwpErrorCodes.SUBSCRIBE_ALREADY_ACTIVE` | `"NWP-SUBSCRIBE-ALREADY-ACTIVE"` |
+| `NwpErrorCodes.SUBSCRIBE_QUOTA_EXCEEDED` | `"NWP-SUBSCRIBE-QUOTA-EXCEEDED"` |
+| `NwpErrorCodes.SUBSCRIBE_FILTER_INVALID` | `"NWP-SUBSCRIBE-FILTER-INVALID"` |
+| `NwpErrorCodes.SUBSCRIBE_NOT_FOUND` | `"NWP-SUBSCRIBE-NOT-FOUND"` |
+| `NwpErrorCodes.INFRA_NODE_OVERLOADED` | `"NWP-INFRA-NODE-OVERLOADED"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_TIMEOUT` | `"NWP-INFRA-UPSTREAM-TIMEOUT"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_ERROR` | `"NWP-INFRA-UPSTREAM-ERROR"` |
+| `NwpErrorCodes.INFRA_STORAGE_ERROR` | `"NWP-INFRA-STORAGE-ERROR"` |
+| `NwpErrorCodes.INFRA_CONFIG_ERROR` | `"NWP-INFRA-CONFIG-ERROR"` |
+
+### Manifest、Topology、Reserved 组
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.MANIFEST_NOT_FOUND` | `"NWP-MANIFEST-NOT-FOUND"` |
+| `NwpErrorCodes.MANIFEST_PARSE_ERROR` | `"NWP-MANIFEST-PARSE-ERROR"` |
+| `NwpErrorCodes.MANIFEST_VERSION_MISMATCH` | `"NWP-MANIFEST-VERSION-MISMATCH"` |
+| `NwpErrorCodes.TOPOLOGY_UNAUTHORIZED` | `"NWP-TOPOLOGY-UNAUTHORIZED"` |
+| `NwpErrorCodes.TOPOLOGY_NOT_AVAILABLE` | `"NWP-TOPOLOGY-NOT-AVAILABLE"` |
+| `NwpErrorCodes.TOPOLOGY_SNAPSHOT_TOO_LARGE` | `"NWP-TOPOLOGY-SNAPSHOT-TOO-LARGE"` |
+| `NwpErrorCodes.TOPOLOGY_STREAM_INTERRUPTED` | `"NWP-TOPOLOGY-STREAM-INTERRUPTED"` |
+| `NwpErrorCodes.RESERVED_TYPE_UNSUPPORTED` | `"NWP-RESERVED-TYPE-UNSUPPORTED"` |

package/doc/nps-sdk.nwp.md

@@ -19,6 +19,7 @@ action responses.
 - [`QueryFrame` (0x10)](#queryframe-0x10)
 - [`ActionFrame` (0x11)](#actionframe-0x11)
 - [`NwpClient`](#nwpclient)
+- [`NwpErrorCodes`](#nwperrorcodes)
 
 ---
 
@@ -222,3 +223,73 @@ const resp = await nwp.invoke(new ActionFrame(
 ));
 // resp is AsyncActionResponse
 ```
+
+---
+
+## `NwpErrorCodes`
+
+String constants for the 30 NWP wire error codes (added in alpha.5).
+
+```typescript
+import { NwpErrorCodes } from "@labacacia/nps-sdk/nwp";
+```
+
+### Auth group (`NWP-AUTH-*`)
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.AUTH_NID_SCOPE_VIOLATION` | `"NWP-AUTH-NID-SCOPE-VIOLATION"` |
+| `NwpErrorCodes.AUTH_NID_NOT_TRUSTED` | `"NWP-AUTH-NID-NOT-TRUSTED"` |
+| `NwpErrorCodes.AUTH_NID_EXPIRED` | `"NWP-AUTH-NID-EXPIRED"` |
+| `NwpErrorCodes.AUTH_NID_REVOKED` | `"NWP-AUTH-NID-REVOKED"` |
+| `NwpErrorCodes.AUTH_SIG_INVALID` | `"NWP-AUTH-SIG-INVALID"` |
+| `NwpErrorCodes.AUTH_TOKEN_BUDGET_EXCEEDED` | `"NWP-AUTH-TOKEN-BUDGET-EXCEEDED"` |
+| `NwpErrorCodes.AUTH_RATE_LIMIT` | `"NWP-AUTH-RATE-LIMIT"` |
+
+### Query group (`NWP-QUERY-*`)
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.QUERY_ANCHOR_NOT_FOUND` | `"NWP-QUERY-ANCHOR-NOT-FOUND"` |
+| `NwpErrorCodes.QUERY_ANCHOR_EXPIRED` | `"NWP-QUERY-ANCHOR-EXPIRED"` |
+| `NwpErrorCodes.QUERY_SCHEMA_MISMATCH` | `"NWP-QUERY-SCHEMA-MISMATCH"` |
+| `NwpErrorCodes.QUERY_LIMIT_EXCEEDED` | `"NWP-QUERY-LIMIT-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_DEPTH_EXCEEDED` | `"NWP-QUERY-DEPTH-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_FILTER_INVALID` | `"NWP-QUERY-FILTER-INVALID"` |
+| `NwpErrorCodes.QUERY_VECTOR_UNSUPPORTED` | `"NWP-QUERY-VECTOR-UNSUPPORTED"` |
+| `NwpErrorCodes.QUERY_CURSOR_INVALID` | `"NWP-QUERY-CURSOR-INVALID"` |
+
+### Action, Task, Subscribe, Infrastructure groups
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.ACTION_NOT_FOUND` | `"NWP-ACTION-NOT-FOUND"` |
+| `NwpErrorCodes.ACTION_PARAM_INVALID` | `"NWP-ACTION-PARAM-INVALID"` |
+| `NwpErrorCodes.ACTION_IDEMPOTENCY_CONFLICT` | `"NWP-ACTION-IDEMPOTENCY-CONFLICT"` |
+| `NwpErrorCodes.TASK_NOT_FOUND` | `"NWP-TASK-NOT-FOUND"` |
+| `NwpErrorCodes.TASK_ALREADY_COMPLETE` | `"NWP-TASK-ALREADY-COMPLETE"` |
+| `NwpErrorCodes.TASK_TIMEOUT` | `"NWP-TASK-TIMEOUT"` |
+| `NwpErrorCodes.TASK_CANCELLED` | `"NWP-TASK-CANCELLED"` |
+| `NwpErrorCodes.SUBSCRIBE_TOPIC_NOT_FOUND` | `"NWP-SUBSCRIBE-TOPIC-NOT-FOUND"` |
+| `NwpErrorCodes.SUBSCRIBE_ALREADY_ACTIVE` | `"NWP-SUBSCRIBE-ALREADY-ACTIVE"` |
+| `NwpErrorCodes.SUBSCRIBE_QUOTA_EXCEEDED` | `"NWP-SUBSCRIBE-QUOTA-EXCEEDED"` |
+| `NwpErrorCodes.SUBSCRIBE_FILTER_INVALID` | `"NWP-SUBSCRIBE-FILTER-INVALID"` |
+| `NwpErrorCodes.SUBSCRIBE_NOT_FOUND` | `"NWP-SUBSCRIBE-NOT-FOUND"` |
+| `NwpErrorCodes.INFRA_NODE_OVERLOADED` | `"NWP-INFRA-NODE-OVERLOADED"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_TIMEOUT` | `"NWP-INFRA-UPSTREAM-TIMEOUT"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_ERROR` | `"NWP-INFRA-UPSTREAM-ERROR"` |
+| `NwpErrorCodes.INFRA_STORAGE_ERROR` | `"NWP-INFRA-STORAGE-ERROR"` |
+| `NwpErrorCodes.INFRA_CONFIG_ERROR` | `"NWP-INFRA-CONFIG-ERROR"` |
+
+### Manifest, Topology, Reserved groups
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.MANIFEST_NOT_FOUND` | `"NWP-MANIFEST-NOT-FOUND"` |
+| `NwpErrorCodes.MANIFEST_PARSE_ERROR` | `"NWP-MANIFEST-PARSE-ERROR"` |
+| `NwpErrorCodes.MANIFEST_VERSION_MISMATCH` | `"NWP-MANIFEST-VERSION-MISMATCH"` |
+| `NwpErrorCodes.TOPOLOGY_UNAUTHORIZED` | `"NWP-TOPOLOGY-UNAUTHORIZED"` |
+| `NwpErrorCodes.TOPOLOGY_NOT_AVAILABLE` | `"NWP-TOPOLOGY-NOT-AVAILABLE"` |
+| `NwpErrorCodes.TOPOLOGY_SNAPSHOT_TOO_LARGE` | `"NWP-TOPOLOGY-SNAPSHOT-TOO-LARGE"` |
+| `NwpErrorCodes.TOPOLOGY_STREAM_INTERRUPTED` | `"NWP-TOPOLOGY-STREAM-INTERRUPTED"` |
+| `NwpErrorCodes.RESERVED_TYPE_UNSUPPORTED` | `"NWP-RESERVED-TYPE-UNSUPPORTED"` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@labacacia/nps-sdk",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.5",
   "description": "TypeScript SDK for the Neural Protocol Suite (NPS) — NCP, NWP, NIP, NDP, NOP",
   "type": "module",
   "main": "dist/index.js",

package/src/core/status-codes.ts

@@ -27,6 +27,7 @@ export const NpsStatusCodes = {
   NPS_SERVER_UNAVAILABLE: "NPS-SERVER-UNAVAILABLE",
   NPS_SERVER_TIMEOUT: "NPS-SERVER-TIMEOUT",
   NPS_SERVER_ENCODING_UNSUPPORTED: "NPS-SERVER-ENCODING-UNSUPPORTED",
+  NPS_SERVER_UNSUPPORTED: "NPS-SERVER-UNSUPPORTED",
 
   // Stream
   NPS_STREAM_SEQ_GAP: "NPS-STREAM-SEQ-GAP",

package/src/ndp/dns-txt.ts

@@ -0,0 +1,86 @@
+// Copyright 2026 INNO LOTUS PTY LTD
+// SPDX-License-Identifier: Apache-2.0
+
+import type { NdpResolveResult } from "./frames.js";
+
+export const DNS_TXT_DEFAULT_TTL = 300;
+
+/**
+ * Extract the hostname from an NWP target URI.
+ * e.g. "nwp://api.example.com/products" → "api.example.com"
+ */
+export function extractHostFromTarget(target: string): string | undefined {
+  if (!target.startsWith("nwp://")) return undefined;
+  const rest     = target.slice("nwp://".length);
+  const slashIdx = rest.indexOf("/");
+  const host     = slashIdx === -1 ? rest : rest.slice(0, slashIdx);
+  return host.length > 0 ? host : undefined;
+}
+
+/**
+ * Parse one TXT record (array of string chunks) into an NdpResolveResult.
+ *
+ * Expected format (chunks joined with a single space):
+ *   v=nps1 type=<type> port=<port> nid=<nid> fp=sha256:<fingerprint>
+ *
+ * Rules:
+ *  - `v` MUST be present and equal to "nps1"
+ *  - `nid` MUST be present
+ *  - `port` defaults to 17433 when absent
+ *  - `fp` is mapped to certFingerprint
+ */
+export function parseNpsTxtRecord(
+  parts: string[],
+  host: string,
+): NdpResolveResult | undefined {
+  const joined = parts.join(" ");
+  const kv     = new Map<string, string>();
+
+  for (const token of joined.split(/\s+/)) {
+    const eq = token.indexOf("=");
+    if (eq === -1) continue;
+    const key = token.slice(0, eq);
+    const val = token.slice(eq + 1);
+    kv.set(key, val);
+  }
+
+  if (kv.get("v") !== "nps1") return undefined;
+
+  const nid = kv.get("nid");
+  if (!nid) return undefined;
+
+  const rawPort = kv.get("port");
+  const port    = rawPort !== undefined ? Number(rawPort) : 17433;
+  const fp      = kv.get("fp");
+
+  const result: NdpResolveResult = {
+    host,
+    port,
+    ttl: DNS_TXT_DEFAULT_TTL,
+  };
+
+  if (fp !== undefined) {
+    result.certFingerprint = fp;
+  }
+
+  return result;
+}
+
+/**
+ * Abstraction over DNS TXT lookups.
+ * The default implementation uses Node's `dns.promises`; pass a mock in tests.
+ */
+export interface DnsTxtLookup {
+  resolveTxt(hostname: string): Promise<string[][]>;
+}
+
+/**
+ * System DNS TXT resolver backed by Node's built-in `dns.promises`.
+ * The dynamic `import()` keeps browser bundles from failing at parse time.
+ */
+export class SystemDnsTxtLookup implements DnsTxtLookup {
+  async resolveTxt(hostname: string): Promise<string[][]> {
+    const { promises: dns } = await import("node:dns");
+    return dns.resolveTxt(hostname);
+  }
+}

package/src/ndp/index.ts

@@ -5,3 +5,4 @@ export * from "./frames.js";
 export * from "./registry.js";
 export * from "./ndp-registry.js";
 export * from "./validator.js";
+export * from "./dns-txt.js";

package/src/ndp/ndp-registry.ts

@@ -2,6 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 
 import type { AnnounceFrame, NdpResolveResult } from "./frames.js";
+import {
+  extractHostFromTarget,
+  parseNpsTxtRecord,
+  SystemDnsTxtLookup,
+  type DnsTxtLookup,
+} from "./dns-txt.js";
 
 interface RegistryEntry {
   frame:     AnnounceFrame;
@@ -54,6 +60,34 @@ export class InMemoryNdpRegistry {
     return result;
   }
 
+  async resolveWithDns(
+    target: string,
+    resolver: DnsTxtLookup = new SystemDnsTxtLookup(),
+  ): Promise<NdpResolveResult | undefined> {
+    // 1. Try in-memory registry first
+    const cached = this.resolve(target);
+    if (cached !== undefined) return cached;
+
+    // 2. Extract hostname and fall back to DNS TXT lookup
+    const host = extractHostFromTarget(target);
+    if (host === undefined) return undefined;
+
+    const txtHost = `_nps-node.${host}`;
+    let records: string[][];
+    try {
+      records = await resolver.resolveTxt(txtHost);
+    } catch {
+      return undefined;
+    }
+
+    for (const record of records) {
+      const result = parseNpsTxtRecord(record, host);
+      if (result !== undefined) return result;
+    }
+
+    return undefined;
+  }
+
   static nwpTargetMatchesNid(nid: string, target: string): boolean {
     // NID: urn:nps:node:{authority}:{path-segment}
     // target: nwp://{authority}/{path}

package/src/nip/assurance-level.ts

@@ -18,8 +18,13 @@ export class AssuranceLevel {
     return this.rank >= required.rank;
   }
 
+  /**
+   * Parse a wire string.  `null`, `undefined`, or `""` → `ANONYMOUS`
+   * (backward compat per NPS-RFC-0003 §5.1.1).  Any other unrecognised
+   * non-empty value throws — callers MUST surface it as `NIP-ASSURANCE-UNKNOWN`.
+   */
   static fromWire(wire: string | null | undefined): AssuranceLevel {
-    if (wire == null) return AssuranceLevel.ANONYMOUS;
+    if (!wire) return AssuranceLevel.ANONYMOUS; // null, undefined, or ""
     for (const level of [AssuranceLevel.ANONYMOUS, AssuranceLevel.ATTESTED, AssuranceLevel.VERIFIED]) {
       if (level.wire === wire) return level;
     }

package/src/nip/error-codes.ts

@@ -26,8 +26,10 @@ export const ASSURANCE_MISMATCH = "NIP-ASSURANCE-MISMATCH";
 export const ASSURANCE_UNKNOWN  = "NIP-ASSURANCE-UNKNOWN";
 
 // ── RFC-0004 (reputation log) ────────────────────────────────────────────────
-export const REPUTATION_ENTRY_INVALID    = "NIP-REPUTATION-ENTRY-INVALID";
-export const REPUTATION_LOG_UNREACHABLE  = "NIP-REPUTATION-LOG-UNREACHABLE";
+export const REPUTATION_ENTRY_INVALID      = "NIP-REPUTATION-ENTRY-INVALID";
+export const REPUTATION_LOG_UNREACHABLE    = "NIP-REPUTATION-LOG-UNREACHABLE";
+export const REPUTATION_GOSSIP_FORK        = "NIP-REPUTATION-GOSSIP-FORK";
+export const REPUTATION_GOSSIP_SIG_INVALID = "NIP-REPUTATION-GOSSIP-SIG-INVALID";
 
 // ── RFC-0002 (X.509 + ACME) ──────────────────────────────────────────────────
 export const CERT_FORMAT_INVALID       = "NIP-CERT-FORMAT-INVALID";

package/src/nop/client.ts

@@ -57,7 +57,7 @@ export class NopClient {
     const wire = this._codec.encode(frame, { overrideTier: this._tier });
     const res  = await fetch(`${this._baseUrl}/task`, {
       method:  "POST",
-      body:    wire,
+      body:    wire as BodyInit,
       headers: { "Content-Type": "application/x-nps-frame", "Accept": "application/json" },
     });
     if (!res.ok) throw new Error(`NOP /task failed: HTTP ${res.status}`);

package/src/nwp/client.ts

@@ -44,7 +44,7 @@ export class NwpClient {
     const wire = this._codec.encode(frame, { overrideTier: this._tier });
     const res  = await fetch(`${this._baseUrl}/anchor`, {
       method:  "POST",
-      body:    wire,
+      body:    wire as BodyInit,
       headers: { "Content-Type": CONTENT_TYPE, "Accept": CONTENT_TYPE },
     });
     if (!res.ok) throw new Error(`NWP /anchor failed: HTTP ${res.status}`);
@@ -54,7 +54,7 @@ export class NwpClient {
     const wire = this._codec.encode(frame, { overrideTier: this._tier });
     const res  = await fetch(`${this._baseUrl}/query`, {
       method:  "POST",
-      body:    wire,
+      body:    wire as BodyInit,
       headers: { "Content-Type": CONTENT_TYPE, "Accept": CONTENT_TYPE },
     });
     if (!res.ok) throw new Error(`NWP /query failed: HTTP ${res.status}`);
@@ -71,7 +71,7 @@ export class NwpClient {
     const wire = this._codec.encode(frame, { overrideTier: this._tier });
     const res  = await fetch(`${this._baseUrl}/stream`, {
       method:  "POST",
-      body:    wire,
+      body:    wire as BodyInit,
       headers: { "Content-Type": CONTENT_TYPE, "Accept": CONTENT_TYPE },
     });
     if (!res.ok) throw new Error(`NWP /stream failed: HTTP ${res.status}`);
@@ -95,7 +95,7 @@ export class NwpClient {
     const wire = this._codec.encode(frame, { overrideTier: this._tier });
     const res  = await fetch(`${this._baseUrl}/invoke`, {
       method:  "POST",
-      body:    wire,
+      body:    wire as BodyInit,
       headers: { "Content-Type": CONTENT_TYPE, "Accept": CONTENT_TYPE },
     });
     if (!res.ok) throw new Error(`NWP /invoke failed: HTTP ${res.status}`);

package/src/nwp/error-codes.ts

@@ -0,0 +1,62 @@
+// Copyright 2026 INNO LOTUS PTY LTD
+// SPDX-License-Identifier: Apache-2.0
+
+/** NWP error code wire constants — mirror of `spec/error-codes.md` NWP section. */
+
+// ── Auth ─────────────────────────────────────────────────────────────────────
+export const AUTH_NID_SCOPE_VIOLATION    = "NWP-AUTH-NID-SCOPE-VIOLATION";
+export const AUTH_NID_EXPIRED            = "NWP-AUTH-NID-EXPIRED";
+export const AUTH_NID_REVOKED            = "NWP-AUTH-NID-REVOKED";
+export const AUTH_NID_UNTRUSTED_ISSUER   = "NWP-AUTH-NID-UNTRUSTED-ISSUER";
+export const AUTH_NID_CAPABILITY_MISSING = "NWP-AUTH-NID-CAPABILITY-MISSING";
+export const AUTH_ASSURANCE_TOO_LOW      = "NWP-AUTH-ASSURANCE-TOO-LOW";
+export const AUTH_REPUTATION_BLOCKED     = "NWP-AUTH-REPUTATION-BLOCKED";
+
+// ── Query ─────────────────────────────────────────────────────────────────────
+export const QUERY_FILTER_INVALID        = "NWP-QUERY-FILTER-INVALID";
+export const QUERY_FIELD_UNKNOWN         = "NWP-QUERY-FIELD-UNKNOWN";
+export const QUERY_CURSOR_INVALID        = "NWP-QUERY-CURSOR-INVALID";
+export const QUERY_REGEX_UNSAFE          = "NWP-QUERY-REGEX-UNSAFE";
+export const QUERY_VECTOR_UNSUPPORTED    = "NWP-QUERY-VECTOR-UNSUPPORTED";
+export const QUERY_AGGREGATE_UNSUPPORTED = "NWP-QUERY-AGGREGATE-UNSUPPORTED";
+export const QUERY_AGGREGATE_INVALID     = "NWP-QUERY-AGGREGATE-INVALID";
+export const QUERY_STREAM_UNSUPPORTED    = "NWP-QUERY-STREAM-UNSUPPORTED";
+
+// ── Action ────────────────────────────────────────────────────────────────────
+export const ACTION_NOT_FOUND            = "NWP-ACTION-NOT-FOUND";
+export const ACTION_PARAMS_INVALID       = "NWP-ACTION-PARAMS-INVALID";
+export const ACTION_IDEMPOTENCY_CONFLICT = "NWP-ACTION-IDEMPOTENCY-CONFLICT";
+
+// ── Task ──────────────────────────────────────────────────────────────────────
+export const TASK_NOT_FOUND         = "NWP-TASK-NOT-FOUND";
+export const TASK_ALREADY_CANCELLED = "NWP-TASK-ALREADY-CANCELLED";
+export const TASK_ALREADY_COMPLETED = "NWP-TASK-ALREADY-COMPLETED";
+export const TASK_ALREADY_FAILED    = "NWP-TASK-ALREADY-FAILED";
+
+// ── Subscribe ─────────────────────────────────────────────────────────────────
+export const SUBSCRIBE_STREAM_NOT_FOUND   = "NWP-SUBSCRIBE-STREAM-NOT-FOUND";
+export const SUBSCRIBE_LIMIT_EXCEEDED     = "NWP-SUBSCRIBE-LIMIT-EXCEEDED";
+export const SUBSCRIBE_FILTER_UNSUPPORTED = "NWP-SUBSCRIBE-FILTER-UNSUPPORTED";
+export const SUBSCRIBE_INTERRUPTED        = "NWP-SUBSCRIBE-INTERRUPTED";
+export const SUBSCRIBE_SEQ_TOO_OLD        = "NWP-SUBSCRIBE-SEQ-TOO-OLD";
+
+// ── Infrastructure ────────────────────────────────────────────────────────────
+export const BUDGET_EXCEEDED      = "NWP-BUDGET-EXCEEDED";
+export const DEPTH_EXCEEDED       = "NWP-DEPTH-EXCEEDED";
+export const GRAPH_CYCLE          = "NWP-GRAPH-CYCLE";
+export const NODE_UNAVAILABLE     = "NWP-NODE-UNAVAILABLE";
+export const RATE_LIMIT_EXCEEDED  = "NWP-RATE-LIMIT-EXCEEDED";
+
+// ── Manifest ──────────────────────────────────────────────────────────────────
+export const MANIFEST_VERSION_UNSUPPORTED = "NWP-MANIFEST-VERSION-UNSUPPORTED";
+export const MANIFEST_NODE_TYPE_REMOVED   = "NWP-MANIFEST-NODE-TYPE-REMOVED";
+export const MANIFEST_NODE_TYPE_UNKNOWN   = "NWP-MANIFEST-NODE-TYPE-UNKNOWN";
+
+// ── Topology (alpha.4+) ───────────────────────────────────────────────────────
+export const TOPOLOGY_UNAUTHORIZED       = "NWP-TOPOLOGY-UNAUTHORIZED";
+export const TOPOLOGY_UNSUPPORTED_SCOPE  = "NWP-TOPOLOGY-UNSUPPORTED-SCOPE";
+export const TOPOLOGY_DEPTH_UNSUPPORTED  = "NWP-TOPOLOGY-DEPTH-UNSUPPORTED";
+export const TOPOLOGY_FILTER_UNSUPPORTED = "NWP-TOPOLOGY-FILTER-UNSUPPORTED";
+
+// ── Reserved type (alpha.5+) ─────────────────────────────────────────────────
+export const RESERVED_TYPE_UNSUPPORTED = "NWP-RESERVED-TYPE-UNSUPPORTED";

package/src/nwp/index.ts

@@ -4,3 +4,4 @@
 export * from "./frames.js";
 export * from "./registry.js";
 export * from "./client.js";
+export * as NwpErrorCodes from "./error-codes.js";