@labacacia/nps-sdk 1.0.0-alpha.4 → 1.0.0-alpha.6

package/CHANGELOG.cn.md

@@ -8,75 +8,6 @@
 
 ---
 
-## [1.0.0-alpha.4] —— 2026-04-30
-
-### 新增
-
-- **NPS-RFC-0001 Phase 2 —— NCP 连接前导（TypeScript helper 跟进）。**
-  `src/ncp/preamble.ts` 暴露 `writePreamble(stream)` /
-  `readPreamble(stream)`，往返字面量 `b"NPS/1.0\n"` 哨兵；
-  `tests/ncp/preamble.test.ts` 覆盖。让 TypeScript SDK 与 .NET /
-  Python / Go / Java 在 alpha.4 的 preamble helper 持平。
-- **NPS-RFC-0002 Phase A/B —— X.509 NID 证书 + ACME `agent-01`
-  （TypeScript 端口）。** 新增 `src/nip/` 子模块：
-  - `nip/x509/` —— X.509 NID 证书 builder + verifier
-    （`x509.Builder`、`x509.Verifier`）。
-  - `nip/acme/` —— ACME `agent-01` 客户端 + 服务端参考实现
-    （`AcmeServer`、`AcmeClient`）；按 NPS-RFC-0002 Phase B 的 JWS
-    签名 wire 包络。
-  - `nip/assurance-level.ts` —— Agent 身份保证等级
-    （`anonymous` / `attested` / `verified`），承接 NPS-RFC-0003。
-  - `nip/cert-format.ts` —— IdentFrame `cert_format` 判别器
-    （`v1` Ed25519 vs. `x509`）。
-  - `nip/error-codes.ts` —— NIP 错误码命名空间。
-  - `nip/verifier.ts` —— dual-trust IdentFrame 验证器（v1 + X.509）。
-- 20 个新测试覆盖 preamble 往返、X.509 签发 + 解析、dual-trust 验证、
-  ACME agent-01 全流程。总数：284 tests 全绿（alpha.3 时 264）。
-
-### 变更
-
-- 分发版本升至 `1.0.0-alpha.4`。
-- `src/nip/frames.ts` —— IdentFrame wire 形状扩展，可携带可选的
-  `cert_format` 判别器 + `x509_chain` 字段，与 v1 Ed25519 字段并存。
-  alpha.3 写出的 v1 IdentFrame 仍可被 alpha.4 验签。
-
-### npm 发布说明
-
-- 本仓库 / tag 是 `@labacacia/nps-sdk` `1.0.0-alpha.4` 的权威参考。
-  延续 alpha.3 的情况，npm publish 可能需要带 2FA-bypass 的 granular
-  access token —— 如果 npm registry 上的版本暂时落后于本仓库 tag，
-  以 tag 为准；下一次 registry cut 后 `npm install` 即可解析到本
-  commit。
-
-### 套件级 alpha.4 要点
-
-- **NPS-RFC-0002 X.509 + ACME** —— 完整跨 SDK 端口波（.NET / Java /
-  Python / TypeScript / Go / Rust）。
-- **NPS-CR-0002 —— Anchor Node topology 查询** —— `topology.snapshot`
-  / `topology.stream`（.NET 参考 + L2 conformance）。TypeScript 消费
-  侧 helper 后续版本跟进。
-- **`nps-registry` SQLite 实仓** + **`nps-ledger` Phase 2**
-  （RFC 9162 Merkle + STH + inclusion proof）已在 daemon 仓库交付。
-
----
-
-## [1.0.0-alpha.3] —— 2026-04-25
-
-### Changed
-
-- 版本升级至 `1.0.0-alpha.3`，与 NPS `v1.0.0-alpha.3` 套件同步。本次 TypeScript SDK 无功能变更。
-- 264 tests, ≥98% 覆盖率仍全绿。
-
-### 套件级 alpha.3 要点（各语言 helper 在 alpha.4 跟进）
-
-- **NPS-RFC-0001 —— NCP 连接前导**（Accepted）。原生模式连接现以字面量 `b"NPS/1.0\n"`（8 字节）开头。.NET SDK 已落地参考实现；TypeScript helper 在 alpha.4 跟进。
-- **NPS-RFC-0003 —— Agent 身份保证等级**（Accepted）。NIP IdentFrame 与 NWM 新增三态 `assurance_level`（`anonymous`/`attested`/`verified`）。.NET 参考类型已落地；TypeScript 同步在 alpha.4。
-- **NPS-RFC-0004 —— NID 声誉日志（CT 风格）**（Accepted）。append-only Merkle 日志条目结构发布；.NET 参考签名器已落地（并以 `nps-ledger` daemon Phase 1 形态发布）。TypeScript helper 在 alpha.4 跟进。
-- **NPS-CR-0001 —— Anchor / Bridge 节点拆分。** 旧的 "Gateway Node" 角色更名为 **Anchor Node**；"NPS↔外部协议翻译" 单独成为 **Bridge Node** 类型。AnnounceFrame 新增 `node_kind` / `cluster_anchor` / `bridge_protocols`。源代码层面变更落在 `spec/` + .NET 参考实现。
-- **6 个 NPS 常驻 daemon。** NPS-Dev 新建 `daemons/` 目录，定义 `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`；其中 `npsd` 提供 L1 功能性参考实现，其余为 Phase 1 骨架。
-
----
-
 ## [1.0.0-alpha.2] —— 2026-04-19
 
 ### Fixed
@@ -104,7 +35,5 @@
 
 作为 NPS 套件 `v1.0.0-alpha.1` 的一部分首次公开 alpha。
 
-[1.0.0-alpha.4]: https://gitee.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.4
-[1.0.0-alpha.3]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.3
-[1.0.0-alpha.2]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.2
-[1.0.0-alpha.1]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.1
+[1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
+[1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1

package/CHANGELOG.md

@@ -8,84 +8,6 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 ---
 
-## [1.0.0-alpha.4] — 2026-04-30
-
-### Added
-
-- **NPS-RFC-0001 Phase 2 — NCP connection preamble (TypeScript helper
-  parity).** `src/ncp/preamble.ts` exposes `writePreamble(stream)` and
-  `readPreamble(stream)` round-tripping the literal `b"NPS/1.0\n"`
-  sentinel; matched by `tests/ncp/preamble.test.ts`. Brings TypeScript
-  in line with the .NET / Python / Go / Java preamble helpers shipped
-  at alpha.4.
-- **NPS-RFC-0002 Phase A/B — X.509 NID certificates + ACME `agent-01`
-  (TypeScript port).** New surface under `src/nip/`:
-  - `nip/x509/` — X.509 NID certificate builder + verifier
-    (`x509.Builder`, `x509.Verifier`).
-  - `nip/acme/` — ACME `agent-01` client + server reference
-    (`AcmeServer`, `AcmeClient`); JWS-signed wire envelope per
-    NPS-RFC-0002 Phase B.
-  - `nip/assurance-level.ts` — agent identity assurance levels
-    (`anonymous` / `attested` / `verified`) per NPS-RFC-0003.
-  - `nip/cert-format.ts` — IdentFrame `cert_format` discriminator
-    (`v1` Ed25519 vs. `x509`).
-  - `nip/error-codes.ts` — NIP error code namespace strings.
-  - `nip/verifier.ts` — dual-trust IdentFrame verifier (v1 + X.509).
-- 20 new tests covering preamble round-trip, X.509 issuance + parsing,
-  dual-trust verification, and ACME agent-01 round-trip. Total: 284
-  tests green (was 264 at alpha.3).
-
-### Changed
-
-- Distribution version bumped to `1.0.0-alpha.4`.
-- `src/nip/frames.ts` — IdentFrame wire shape extended with optional
-  `cert_format` discriminator + `x509_chain` field alongside the
-  existing v1 Ed25519 fields. v1 IdentFrames written by alpha.3
-  consumers continue to verify unchanged.
-
-### Note: npm publish status
-
-- This repo / tag is the canonical `1.0.0-alpha.4` reference for
-  `@labacacia/nps-sdk`. As at the alpha.3 ship cycle, npm publish
-  may require a granular access token with 2FA-bypass enabled — if
-  the registry version lags this repo's tag, the tag is the
-  authoritative artifact and `npm install` against the next
-  registry cut will resolve to this commit.
-
-### Suite-wide highlights at alpha.4
-
-- **NPS-RFC-0002 X.509 + ACME** — full cross-SDK port wave (.NET /
-  Java / Python / TypeScript / Go / Rust). Servers can now issue
-  dual-trust IdentFrames (v1 Ed25519 + X.509 leaf cert chained to a
-  self-signed root) and self-onboard NIDs over ACME's `agent-01`
-  challenge type.
-- **NPS-CR-0002 — Anchor Node topology queries** — `topology.snapshot`
-  / `topology.stream` query types (.NET reference + L2 conformance
-  suite). TypeScript consumer-side helpers planned for a later
-  release.
-- **`nps-registry` SQLite-backed real registry** + **`nps-ledger`
-  Phase 2** (RFC 9162 Merkle + STH + inclusion proofs) shipped in the
-  daemon repos.
-
----
-
-## [1.0.0-alpha.3] — 2026-04-25
-
-### Changed
-
-- Version bump to `1.0.0-alpha.3` for suite-wide synchronization with the NPS `v1.0.0-alpha.3` release. No functional changes in the TypeScript SDK at this milestone.
-- 264 tests, ≥98% coverage still green.
-
-### Suite-wide highlights at alpha.3 (per-language helpers planned for alpha.4)
-
-- **NPS-RFC-0001 — NCP connection preamble** (Accepted). Native-mode connections now begin with the literal `b"NPS/1.0\n"` (8 bytes). Reference helper landed in the .NET SDK; TypeScript helper deferred to alpha.4.
-- **NPS-RFC-0003 — Agent identity assurance levels** (Accepted). NIP IdentFrame and NWM gain a tri-state `assurance_level` (`anonymous`/`attested`/`verified`). Reference types landed in .NET; TypeScript parity deferred to alpha.4.
-- **NPS-RFC-0004 — NID reputation log (CT-style)** (Accepted). Append-only Merkle log entry shape published; reference signer landed in .NET (and shipped as the `nps-ledger` daemon Phase 1). TypeScript helpers deferred to alpha.4.
-- **NPS-CR-0001 — Anchor / Bridge node split.** The legacy "Gateway Node" role is renamed to **Anchor Node**; the "translate NPS↔external protocol" role is now its own **Bridge Node** type. AnnounceFrame gained `node_kind` / `cluster_anchor` / `bridge_protocols`. Source-of-truth changes are in `spec/` + the .NET reference implementation.
-- **6 NPS resident daemons.** New `daemons/` tree in NPS-Dev defines `npsd` / `nps-runner` / `nps-gateway` / `nps-registry` / `nps-cloud-ca` / `nps-ledger`; `npsd` ships an L1-functional reference and the rest ship as Phase 1 skeletons.
-
----
-
 ## [1.0.0-alpha.2] — 2026-04-19
 
 ### Fixed
@@ -113,7 +35,5 @@ Until NPS reaches v1.0 stable, every repository in the suite is synchronized to
 
 First public alpha as part of the NPS suite `v1.0.0-alpha.1` release.
 
-[1.0.0-alpha.4]: https://github.com/labacacia/NPS-sdk-ts/releases/tag/v1.0.0-alpha.4
-[1.0.0-alpha.3]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.3
-[1.0.0-alpha.2]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.2
-[1.0.0-alpha.1]: https://github.com/LabAcacia/NPS-Dev/releases/tag/v1.0.0-alpha.1
+[1.0.0-alpha.2]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.2
+[1.0.0-alpha.1]: https://github.com/LabAcacia/nps/releases/tag/v1.0.0-alpha.1

package/README.cn.md

@@ -7,7 +7,7 @@
 
 ## 状态
 
-**v1.0.0-alpha.4 — RFC-0002 跨 SDK 端口波（第三棒）** · 5 个协议 · 271 个测试 · 覆盖率 ≥ 98%
+**v1.0.0-alpha.6 — RFC-0002 跨 SDK 端口波（第三棒）** · 5 个协议 · 271 个测试 · 覆盖率 ≥ 98%
 
 | 协议 | 类 | 状态 |
 |------|----|------|
@@ -17,7 +17,7 @@
 | NDP — Neural Discovery Protocol | `InMemoryNdpRegistry`、`NdpAnnounceValidator` | ✅ |
 | NOP — Neural Orchestration Protocol | `NopClient` | ✅ |
 
-**alpha.4 新增** —— 完整的 NPS-RFC-0002 X.509 + ACME `agent-01` NID 证书原语：
+**早期新增** —— 完整的 NPS-RFC-0002 X.509 + ACME `agent-01` NID 证书原语：
 
 - `nip.x509` —— `issueLeaf` / `issueRoot` / `verify`（基于 `@peculiar/x509` + 原生 Web Crypto Ed25519）。
 - `nip.acme` —— `AcmeClient` + 进程内 `AcmeServer` + JWS / messages helpers（RFC 8555 + RFC 8037 EdDSA）。
@@ -158,4 +158,4 @@ npm run build
 
 ## 许可证
 
-Apache 2.0 —— 详见 [LICENSE](../../LICENSE)。
+Apache 2.0 —— 详见 [LICENSE](https://github.com/labacacia/NPS-Dev/blob/main/LICENSE)。

package/README.md

@@ -7,7 +7,7 @@ Part of the [LabAcacia](https://github.com/LabAcacia) / INNO LOTUS PTY LTD open-
 
 ## Status
 
-**v1.0.0-alpha.4 — RFC-0002 cross-SDK port (third language)** · 5 protocols · 271 tests · ≥ 98% coverage
+**v1.0.0-alpha.6 — RFC-0002 cross-SDK port (third language)** · 5 protocols · 271 tests · ≥ 98% coverage
 
 | Protocol | Class | Status |
 |----------|-------|--------|
@@ -17,7 +17,7 @@ Part of the [LabAcacia](https://github.com/LabAcacia) / INNO LOTUS PTY LTD open-
 | NDP — Neural Discovery Protocol | `InMemoryNdpRegistry`, `NdpAnnounceValidator` | ✅ |
 | NOP — Neural Orchestration Protocol | `NopClient` | ✅ |
 
-**alpha.4 additions** — Full NPS-RFC-0002 X.509 + ACME `agent-01` NID certificate primitives:
+**Earlier additions** — Full NPS-RFC-0002 X.509 + ACME `agent-01` NID certificate primitives:
 
 - `nip.x509` — `issueLeaf` / `issueRoot` / `verify` (built on `@peculiar/x509` + native Web Crypto Ed25519).
 - `nip.acme` — `AcmeClient` + in-process `AcmeServer` + JWS / message helpers (RFC 8555 + EdDSA per RFC 8037).
@@ -158,4 +158,4 @@ node node_modules/tsup/dist/cli-default.js
 
 ## License
 
-Apache 2.0 — see [LICENSE](../../LICENSE)
+Apache 2.0 — see [LICENSE](https://github.com/labacacia/NPS-Dev/blob/main/LICENSE)

package/doc/nps-sdk.nip.cn.md

@@ -19,6 +19,7 @@ NIP 是 NPS 的 TLS/PKI。本模块暴露三个身份帧
 - [`RevokeFrame` (0x22)](#revokeframe-0x22)
 - [`NipIdentity`](#nipidentity)
 - [规范化 JSON 与签名格式](#规范化-json-与签名格式)
+- [`NipErrorCodes`](#niperrorecodes)
 
 ---
 
@@ -233,3 +234,32 @@ const signed    = new IdentFrame(unsigned.nid, unsigned.pubKey, meta, signature)
 const ok = id.verify(signed.unsignedDict(), signed.signature);
 // → true
 ```
+
+---
+
+## `NipErrorCodes`
+
+NIP wire 错误码字符串常量。从 `@labacacia/nps-sdk/nip` 导入。
+
+```typescript
+import { NipErrorCodes } from "@labacacia/nps-sdk/nip";
+```
+
+| 常量 | Wire 值 | 起始版本 |
+|------|---------|----------|
+| `NipErrorCodes.IDENT_SIG_INVALID` | `"NIP-IDENT-SIG-INVALID"` | alpha.4 |
+| `NipErrorCodes.IDENT_NID_MISMATCH` | `"NIP-IDENT-NID-MISMATCH"` | alpha.4 |
+| `NipErrorCodes.IDENT_EXPIRED` | `"NIP-IDENT-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.IDENT_REVOKED` | `"NIP-IDENT-REVOKED"` | alpha.4 |
+| `NipErrorCodes.TRUST_CHAIN_BROKEN` | `"NIP-TRUST-CHAIN-BROKEN"` | alpha.4 |
+| `NipErrorCodes.TRUST_SCOPE_VIOLATION` | `"NIP-TRUST-SCOPE-VIOLATION"` | alpha.4 |
+| `NipErrorCodes.ACME_CHALLENGE_FAILED` | `"NIP-ACME-CHALLENGE-FAILED"` | alpha.4 |
+| `NipErrorCodes.ACME_ORDER_EXPIRED` | `"NIP-ACME-ORDER-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.X509_CERT_INVALID` | `"NIP-X509-CERT-INVALID"` | alpha.4 |
+| `NipErrorCodes.X509_CHAIN_UNTRUSTED` | `"NIP-X509-CHAIN-UNTRUSTED"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_LOG_UNREACHABLE` | `"NIP-REPUTATION-LOG-UNREACHABLE"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_GOSSIP_FORK` | `"NIP-REPUTATION-GOSSIP-FORK"` | **alpha.5** |
+| `NipErrorCodes.REPUTATION_GOSSIP_SIG_INVALID` | `"NIP-REPUTATION-GOSSIP-SIG-INVALID"` | **alpha.5** |
+
+`REPUTATION_GOSSIP_FORK`：跨节点 STH 一致性检查失败时返回。
+`REPUTATION_GOSSIP_SIG_INVALID`：gossip 交换中对端 STH 签名验证失败时返回。

package/doc/nps-sdk.nip.md

@@ -19,6 +19,7 @@ AES-256-GCM + PBKDF2-SHA256 key-file encryption.
 - [`RevokeFrame` (0x22)](#revokeframe-0x22)
 - [`NipIdentity`](#nipidentity)
 - [Canonical JSON & signing format](#canonical-json--signing-format)
+- [`NipErrorCodes`](#niperrorecodes)
 
 ---
 
@@ -240,3 +241,32 @@ const signed    = new IdentFrame(unsigned.nid, unsigned.pubKey, meta, signature)
 const ok = id.verify(signed.unsignedDict(), signed.signature);
 // → true
 ```
+
+---
+
+## `NipErrorCodes`
+
+String constants for NIP wire error codes. Import from `@labacacia/nps-sdk/nip`.
+
+```typescript
+import { NipErrorCodes } from "@labacacia/nps-sdk/nip";
+```
+
+| Constant | Wire value | Since |
+|----------|------------|-------|
+| `NipErrorCodes.IDENT_SIG_INVALID` | `"NIP-IDENT-SIG-INVALID"` | alpha.4 |
+| `NipErrorCodes.IDENT_NID_MISMATCH` | `"NIP-IDENT-NID-MISMATCH"` | alpha.4 |
+| `NipErrorCodes.IDENT_EXPIRED` | `"NIP-IDENT-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.IDENT_REVOKED` | `"NIP-IDENT-REVOKED"` | alpha.4 |
+| `NipErrorCodes.TRUST_CHAIN_BROKEN` | `"NIP-TRUST-CHAIN-BROKEN"` | alpha.4 |
+| `NipErrorCodes.TRUST_SCOPE_VIOLATION` | `"NIP-TRUST-SCOPE-VIOLATION"` | alpha.4 |
+| `NipErrorCodes.ACME_CHALLENGE_FAILED` | `"NIP-ACME-CHALLENGE-FAILED"` | alpha.4 |
+| `NipErrorCodes.ACME_ORDER_EXPIRED` | `"NIP-ACME-ORDER-EXPIRED"` | alpha.4 |
+| `NipErrorCodes.X509_CERT_INVALID` | `"NIP-X509-CERT-INVALID"` | alpha.4 |
+| `NipErrorCodes.X509_CHAIN_UNTRUSTED` | `"NIP-X509-CHAIN-UNTRUSTED"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_LOG_UNREACHABLE` | `"NIP-REPUTATION-LOG-UNREACHABLE"` | alpha.4 |
+| `NipErrorCodes.REPUTATION_GOSSIP_FORK` | `"NIP-REPUTATION-GOSSIP-FORK"` | **alpha.5** |
+| `NipErrorCodes.REPUTATION_GOSSIP_SIG_INVALID` | `"NIP-REPUTATION-GOSSIP-SIG-INVALID"` | **alpha.5** |
+
+`REPUTATION_GOSSIP_FORK` is returned when an STH consistency check fails across peers.
+`REPUTATION_GOSSIP_SIG_INVALID` is returned when a peer STH signature fails verification during a gossip exchange.

package/doc/nps-sdk.nwp.cn.md

@@ -18,6 +18,7 @@ NWP 是 AI 的 HTTP。本模块提供两个 NWP 帧
 - [`QueryFrame` (0x10)](#queryframe-0x10)
 - [`ActionFrame` (0x11)](#actionframe-0x11)
 - [`NwpClient`](#nwpclient)
+- [`NwpErrorCodes`](#nwperrorcodes)
 
 ---
 
@@ -215,3 +216,73 @@ const resp = await nwp.invoke(new ActionFrame(
 ));
 // resp 是 AsyncActionResponse
 ```
+
+---
+
+## `NwpErrorCodes`
+
+30 个 NWP wire 错误码字符串常量（alpha.5 新增）。
+
+```typescript
+import { NwpErrorCodes } from "@labacacia/nps-sdk/nwp";
+```
+
+### Auth 组（`NWP-AUTH-*`）
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.AUTH_NID_SCOPE_VIOLATION` | `"NWP-AUTH-NID-SCOPE-VIOLATION"` |
+| `NwpErrorCodes.AUTH_NID_NOT_TRUSTED` | `"NWP-AUTH-NID-NOT-TRUSTED"` |
+| `NwpErrorCodes.AUTH_NID_EXPIRED` | `"NWP-AUTH-NID-EXPIRED"` |
+| `NwpErrorCodes.AUTH_NID_REVOKED` | `"NWP-AUTH-NID-REVOKED"` |
+| `NwpErrorCodes.AUTH_SIG_INVALID` | `"NWP-AUTH-SIG-INVALID"` |
+| `NwpErrorCodes.AUTH_TOKEN_BUDGET_EXCEEDED` | `"NWP-AUTH-TOKEN-BUDGET-EXCEEDED"` |
+| `NwpErrorCodes.AUTH_RATE_LIMIT` | `"NWP-AUTH-RATE-LIMIT"` |
+
+### Query 组（`NWP-QUERY-*`）
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.QUERY_ANCHOR_NOT_FOUND` | `"NWP-QUERY-ANCHOR-NOT-FOUND"` |
+| `NwpErrorCodes.QUERY_ANCHOR_EXPIRED` | `"NWP-QUERY-ANCHOR-EXPIRED"` |
+| `NwpErrorCodes.QUERY_SCHEMA_MISMATCH` | `"NWP-QUERY-SCHEMA-MISMATCH"` |
+| `NwpErrorCodes.QUERY_LIMIT_EXCEEDED` | `"NWP-QUERY-LIMIT-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_DEPTH_EXCEEDED` | `"NWP-QUERY-DEPTH-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_FILTER_INVALID` | `"NWP-QUERY-FILTER-INVALID"` |
+| `NwpErrorCodes.QUERY_VECTOR_UNSUPPORTED` | `"NWP-QUERY-VECTOR-UNSUPPORTED"` |
+| `NwpErrorCodes.QUERY_CURSOR_INVALID` | `"NWP-QUERY-CURSOR-INVALID"` |
+
+### Action、Task、Subscribe、Infrastructure 组
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.ACTION_NOT_FOUND` | `"NWP-ACTION-NOT-FOUND"` |
+| `NwpErrorCodes.ACTION_PARAM_INVALID` | `"NWP-ACTION-PARAM-INVALID"` |
+| `NwpErrorCodes.ACTION_IDEMPOTENCY_CONFLICT` | `"NWP-ACTION-IDEMPOTENCY-CONFLICT"` |
+| `NwpErrorCodes.TASK_NOT_FOUND` | `"NWP-TASK-NOT-FOUND"` |
+| `NwpErrorCodes.TASK_ALREADY_COMPLETE` | `"NWP-TASK-ALREADY-COMPLETE"` |
+| `NwpErrorCodes.TASK_TIMEOUT` | `"NWP-TASK-TIMEOUT"` |
+| `NwpErrorCodes.TASK_CANCELLED` | `"NWP-TASK-CANCELLED"` |
+| `NwpErrorCodes.SUBSCRIBE_TOPIC_NOT_FOUND` | `"NWP-SUBSCRIBE-TOPIC-NOT-FOUND"` |
+| `NwpErrorCodes.SUBSCRIBE_ALREADY_ACTIVE` | `"NWP-SUBSCRIBE-ALREADY-ACTIVE"` |
+| `NwpErrorCodes.SUBSCRIBE_QUOTA_EXCEEDED` | `"NWP-SUBSCRIBE-QUOTA-EXCEEDED"` |
+| `NwpErrorCodes.SUBSCRIBE_FILTER_INVALID` | `"NWP-SUBSCRIBE-FILTER-INVALID"` |
+| `NwpErrorCodes.SUBSCRIBE_NOT_FOUND` | `"NWP-SUBSCRIBE-NOT-FOUND"` |
+| `NwpErrorCodes.INFRA_NODE_OVERLOADED` | `"NWP-INFRA-NODE-OVERLOADED"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_TIMEOUT` | `"NWP-INFRA-UPSTREAM-TIMEOUT"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_ERROR` | `"NWP-INFRA-UPSTREAM-ERROR"` |
+| `NwpErrorCodes.INFRA_STORAGE_ERROR` | `"NWP-INFRA-STORAGE-ERROR"` |
+| `NwpErrorCodes.INFRA_CONFIG_ERROR` | `"NWP-INFRA-CONFIG-ERROR"` |
+
+### Manifest、Topology、Reserved 组
+
+| 常量 | Wire 值 |
+|------|---------|
+| `NwpErrorCodes.MANIFEST_NOT_FOUND` | `"NWP-MANIFEST-NOT-FOUND"` |
+| `NwpErrorCodes.MANIFEST_PARSE_ERROR` | `"NWP-MANIFEST-PARSE-ERROR"` |
+| `NwpErrorCodes.MANIFEST_VERSION_MISMATCH` | `"NWP-MANIFEST-VERSION-MISMATCH"` |
+| `NwpErrorCodes.TOPOLOGY_UNAUTHORIZED` | `"NWP-TOPOLOGY-UNAUTHORIZED"` |
+| `NwpErrorCodes.TOPOLOGY_NOT_AVAILABLE` | `"NWP-TOPOLOGY-NOT-AVAILABLE"` |
+| `NwpErrorCodes.TOPOLOGY_SNAPSHOT_TOO_LARGE` | `"NWP-TOPOLOGY-SNAPSHOT-TOO-LARGE"` |
+| `NwpErrorCodes.TOPOLOGY_STREAM_INTERRUPTED` | `"NWP-TOPOLOGY-STREAM-INTERRUPTED"` |
+| `NwpErrorCodes.RESERVED_TYPE_UNSUPPORTED` | `"NWP-RESERVED-TYPE-UNSUPPORTED"` |

package/doc/nps-sdk.nwp.md

@@ -19,6 +19,7 @@ action responses.
 - [`QueryFrame` (0x10)](#queryframe-0x10)
 - [`ActionFrame` (0x11)](#actionframe-0x11)
 - [`NwpClient`](#nwpclient)
+- [`NwpErrorCodes`](#nwperrorcodes)
 
 ---
 
@@ -222,3 +223,73 @@ const resp = await nwp.invoke(new ActionFrame(
 ));
 // resp is AsyncActionResponse
 ```
+
+---
+
+## `NwpErrorCodes`
+
+String constants for the 30 NWP wire error codes (added in alpha.5).
+
+```typescript
+import { NwpErrorCodes } from "@labacacia/nps-sdk/nwp";
+```
+
+### Auth group (`NWP-AUTH-*`)
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.AUTH_NID_SCOPE_VIOLATION` | `"NWP-AUTH-NID-SCOPE-VIOLATION"` |
+| `NwpErrorCodes.AUTH_NID_NOT_TRUSTED` | `"NWP-AUTH-NID-NOT-TRUSTED"` |
+| `NwpErrorCodes.AUTH_NID_EXPIRED` | `"NWP-AUTH-NID-EXPIRED"` |
+| `NwpErrorCodes.AUTH_NID_REVOKED` | `"NWP-AUTH-NID-REVOKED"` |
+| `NwpErrorCodes.AUTH_SIG_INVALID` | `"NWP-AUTH-SIG-INVALID"` |
+| `NwpErrorCodes.AUTH_TOKEN_BUDGET_EXCEEDED` | `"NWP-AUTH-TOKEN-BUDGET-EXCEEDED"` |
+| `NwpErrorCodes.AUTH_RATE_LIMIT` | `"NWP-AUTH-RATE-LIMIT"` |
+
+### Query group (`NWP-QUERY-*`)
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.QUERY_ANCHOR_NOT_FOUND` | `"NWP-QUERY-ANCHOR-NOT-FOUND"` |
+| `NwpErrorCodes.QUERY_ANCHOR_EXPIRED` | `"NWP-QUERY-ANCHOR-EXPIRED"` |
+| `NwpErrorCodes.QUERY_SCHEMA_MISMATCH` | `"NWP-QUERY-SCHEMA-MISMATCH"` |
+| `NwpErrorCodes.QUERY_LIMIT_EXCEEDED` | `"NWP-QUERY-LIMIT-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_DEPTH_EXCEEDED` | `"NWP-QUERY-DEPTH-EXCEEDED"` |
+| `NwpErrorCodes.QUERY_FILTER_INVALID` | `"NWP-QUERY-FILTER-INVALID"` |
+| `NwpErrorCodes.QUERY_VECTOR_UNSUPPORTED` | `"NWP-QUERY-VECTOR-UNSUPPORTED"` |
+| `NwpErrorCodes.QUERY_CURSOR_INVALID` | `"NWP-QUERY-CURSOR-INVALID"` |
+
+### Action, Task, Subscribe, Infrastructure groups
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.ACTION_NOT_FOUND` | `"NWP-ACTION-NOT-FOUND"` |
+| `NwpErrorCodes.ACTION_PARAM_INVALID` | `"NWP-ACTION-PARAM-INVALID"` |
+| `NwpErrorCodes.ACTION_IDEMPOTENCY_CONFLICT` | `"NWP-ACTION-IDEMPOTENCY-CONFLICT"` |
+| `NwpErrorCodes.TASK_NOT_FOUND` | `"NWP-TASK-NOT-FOUND"` |
+| `NwpErrorCodes.TASK_ALREADY_COMPLETE` | `"NWP-TASK-ALREADY-COMPLETE"` |
+| `NwpErrorCodes.TASK_TIMEOUT` | `"NWP-TASK-TIMEOUT"` |
+| `NwpErrorCodes.TASK_CANCELLED` | `"NWP-TASK-CANCELLED"` |
+| `NwpErrorCodes.SUBSCRIBE_TOPIC_NOT_FOUND` | `"NWP-SUBSCRIBE-TOPIC-NOT-FOUND"` |
+| `NwpErrorCodes.SUBSCRIBE_ALREADY_ACTIVE` | `"NWP-SUBSCRIBE-ALREADY-ACTIVE"` |
+| `NwpErrorCodes.SUBSCRIBE_QUOTA_EXCEEDED` | `"NWP-SUBSCRIBE-QUOTA-EXCEEDED"` |
+| `NwpErrorCodes.SUBSCRIBE_FILTER_INVALID` | `"NWP-SUBSCRIBE-FILTER-INVALID"` |
+| `NwpErrorCodes.SUBSCRIBE_NOT_FOUND` | `"NWP-SUBSCRIBE-NOT-FOUND"` |
+| `NwpErrorCodes.INFRA_NODE_OVERLOADED` | `"NWP-INFRA-NODE-OVERLOADED"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_TIMEOUT` | `"NWP-INFRA-UPSTREAM-TIMEOUT"` |
+| `NwpErrorCodes.INFRA_UPSTREAM_ERROR` | `"NWP-INFRA-UPSTREAM-ERROR"` |
+| `NwpErrorCodes.INFRA_STORAGE_ERROR` | `"NWP-INFRA-STORAGE-ERROR"` |
+| `NwpErrorCodes.INFRA_CONFIG_ERROR` | `"NWP-INFRA-CONFIG-ERROR"` |
+
+### Manifest, Topology, Reserved groups
+
+| Constant | Wire value |
+|----------|------------|
+| `NwpErrorCodes.MANIFEST_NOT_FOUND` | `"NWP-MANIFEST-NOT-FOUND"` |
+| `NwpErrorCodes.MANIFEST_PARSE_ERROR` | `"NWP-MANIFEST-PARSE-ERROR"` |
+| `NwpErrorCodes.MANIFEST_VERSION_MISMATCH` | `"NWP-MANIFEST-VERSION-MISMATCH"` |
+| `NwpErrorCodes.TOPOLOGY_UNAUTHORIZED` | `"NWP-TOPOLOGY-UNAUTHORIZED"` |
+| `NwpErrorCodes.TOPOLOGY_NOT_AVAILABLE` | `"NWP-TOPOLOGY-NOT-AVAILABLE"` |
+| `NwpErrorCodes.TOPOLOGY_SNAPSHOT_TOO_LARGE` | `"NWP-TOPOLOGY-SNAPSHOT-TOO-LARGE"` |
+| `NwpErrorCodes.TOPOLOGY_STREAM_INTERRUPTED` | `"NWP-TOPOLOGY-STREAM-INTERRUPTED"` |
+| `NwpErrorCodes.RESERVED_TYPE_UNSUPPORTED` | `"NWP-RESERVED-TYPE-UNSUPPORTED"` |

package/nip-ca-server/README.md

@@ -25,7 +25,7 @@ docker compose up -d
 
 ## API
 
-Same endpoints as all other NIP CA Server implementations — see [NPS-3 §8](../../spec/NPS-3-NIP.md).
+Same endpoints as all other NIP CA Server implementations — see [NPS-3 §8](https://github.com/labacacia/NPS-Release/blob/main/spec/NPS-3-NIP.md).
 
 ## Local Development
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@labacacia/nps-sdk",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.6",
   "description": "TypeScript SDK for the Neural Protocol Suite (NPS) — NCP, NWP, NIP, NDP, NOP",
   "type": "module",
   "main": "dist/index.js",

package/src/core/status-codes.ts

@@ -27,6 +27,7 @@ export const NpsStatusCodes = {
   NPS_SERVER_UNAVAILABLE: "NPS-SERVER-UNAVAILABLE",
   NPS_SERVER_TIMEOUT: "NPS-SERVER-TIMEOUT",
   NPS_SERVER_ENCODING_UNSUPPORTED: "NPS-SERVER-ENCODING-UNSUPPORTED",
+  NPS_SERVER_UNSUPPORTED: "NPS-SERVER-UNSUPPORTED",
 
   // Stream
   NPS_STREAM_SEQ_GAP: "NPS-STREAM-SEQ-GAP",