@opennodes/registry 0.1.2 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opennodes/registry",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "OpenNodes (ONP) reference registry: node registration with proof-of-resource qualification (Stage A/B/C), transparent ranking, enforceable estimates, catalog importers (OpenRouter, Hugging Face, models.dev, Ollama), MCP surface, and the web app (catalog, chat, advisor, Node Builder)",
   "license": "Apache-2.0",
   "type": "module",

package/src/server.js

@@ -100,6 +100,22 @@ export async function startRegistry({
     return { card, sigOk };
   }
 
+  /**
+   * Re-index a registered node's card when its origin serves a newer revision (restart,
+   * reprice, config change). Probes pin the revision they hold; without this a restarted
+   * node answers 409 to every probe and would look like an identity mismatch.
+   */
+  async function refreshCard(nodeId) {
+    try {
+      const node = await store.getNode(nodeId);
+      if (!node?.card_url || node.source === 'import') return;
+      const current = await store.latestCard(nodeId);
+      const fresh = await fetchCard(node.card_url);
+      if (current && fresh.revision === current.revision) return;
+      await indexCard(nodeId, node.card_url);
+    } catch { /* unreachable or invalid: probes will record the failure themselves */ }
+  }
+
   const app = createApp([
     ['POST', '/v0/nodes', async (req, res) => {
       const { card_url } = await readJson(req);
@@ -172,8 +188,12 @@ export async function startRegistry({
       if (node.state !== 'community' && node.state !== 'verified') {
         return problem(res, 409, 'wrong-state', `Stage B requires community tier, node is ${node.state}`);
       }
+      await refreshCard(params.id);
       const card = await store.latestCard(params.id);
       const stageB = await runStageB(store, params.id, card, { safeFetch, capacity: stageBCapacity });
+      if (stageB.stale) {
+        return problem(res, 409, 'stale-card', 'the node changed its card revision during the battery; retry');
+      }
       if (stageB.identityFailed) {
         await store.setState(params.id, 'disputed', 'Stage B identity fingerprint mismatch');
       } else if (stageB.ok) {
@@ -372,7 +392,7 @@ export async function startRegistry({
     ...exportRoutes(store, registryKeys),
   ], { cors: true }); // public read API: third-party web clients may call it directly
 
-  const stageCHandle = stageC ? startStageC(store, { safeFetch, ...stageC }) : null;
+  const stageCHandle = stageC ? startStageC(store, { safeFetch, refreshCard, ...stageC }) : null;
   const reimportHandle = reimport ? startReimport(store, { safeFetch, ...reimport }) : null;
   const actualPort = await listen(app, port, host);
   return {

package/src/stageb.js

@@ -52,13 +52,14 @@ export async function captureFingerprints(safeFetch, card, offering) {
 
 /** DS-ADM-02: identity check against stored references. */
 async function probeIdentity(safeFetch, card, offering, refs) {
-  let matches = 0;
+  let matches = 0, stale = false;
   for (const ref of refs) {
     const { status, text } = await chatOnce(safeFetch, card, offering, ref.prompt);
+    if (status === 409) stale = true;   // pinned revision is no longer current: not evidence about identity
     if (status === 200 && text !== null && sha256(text) === ref.expected_hash) matches++;
   }
   // Deterministic battery: require all prompts to match the reference distribution.
-  return { ok: matches === refs.length, matches, total: refs.length };
+  return { ok: matches === refs.length, matches, total: refs.length, ...(stale ? { stale: true } : {}) };
 }
 
 /** A needle counts as retrieved if the reply carries the full token or just its digits (small models drop the prefix). */
@@ -145,6 +146,10 @@ export async function runStageB(store, nodeId, card, { safeFetch, capacity = {}
     const refs = await store.getFingerprints(offering.model.artifact);
     if (refs.length) {
       verdict.identity = await probeIdentity(safeFetch, card, offering, refs);
+      if (verdict.identity.stale) {
+        // The node rejected our pinned revision (409). Abort without judging: the caller re-indexes and retries.
+        return { ok: false, identityFailed: false, stale: true, verdicts: [...verdicts, verdict] };
+      }
       await store.recordProbe(nodeId, offering.offering_id, 'B', 'identity', verdict.identity.ok,
         `${verdict.identity.matches}/${verdict.identity.total} reference matches`);
     } else {

package/src/stagec.js

@@ -9,6 +9,7 @@ const OBSERVED_STATES = ['community', 'verified', 'attested'];
 
 export function startStageC(store, {
   safeFetch,
+  refreshCard = null,             // re-index a node's card when its revision moved (restart / reprice)
   livenessIntervalMs = 300_000,   // spec: <=5 min; tests shorten this
   blindIntervalMs = 3_600_000,
   failThreshold = 3,
@@ -47,6 +48,7 @@ export function startStageC(store, {
   async function blindSweep() {
     for (const node of await store.allNodes()) {
       if (!OBSERVED_STATES.includes(node.state)) continue;
+      await refreshCard?.(node.id);
       const card = await store.latestCard(node.id);
       if (!card) continue;
       const chatOfferings = card.offerings.filter((o) => o.binding.profile === 'onp.openai.chat/v1');
@@ -66,6 +68,7 @@ export function startStageC(store, {
             max_tokens: 32,
           }),
         }, 30_000);
+        if (status === 409) { await refreshCard?.(node.id); continue; }   // stale pin, not a failure of the node
         const usage = body?.usage;
         const ok = status === 200 && Number.isFinite(usage?.prompt_tokens) && Number.isFinite(usage?.completion_tokens);
         await store.recordProbe(node.id, offering.offering_id, 'C', 'blind', ok,