@opennodes/registry 0.1.4 → 0.1.6

package/bin.js

@@ -10,6 +10,9 @@ const registry = await startRegistry({
   // Persistent signing identity: explicit path, or derived from a file db; pg deployments set ONP_REGISTRY_KEY.
   keyPath: process.env.ONP_REGISTRY_KEY ?? (persistent ? `${dbPath}.key.pem` : (dbPath.startsWith('postgres') ? 'onp-registry-key.pem' : null)),
   allowPrivateTargets: process.env.ONP_ALLOW_PRIVATE === '1', // dev only: permit localhost nodes
+  registerPerHour: Number(process.env.ONP_REGISTER_PER_HOUR ?? 30),          // per client address
+  admitCooldownMs: Number(process.env.ONP_ADMIT_COOLDOWN_MS ?? 30 * 60_000),  // Stage B per node
+  trustProxy: process.env.ONP_TRUST_PROXY === '1',                            // behind Caddy / a CDN
   adminToken: process.env.ONP_ADMIN_TOKEN ?? null,
   stageC: process.env.ONP_STAGE_C === '0' ? null : {
     livenessIntervalMs: Number(process.env.ONP_LIVENESS_MS ?? 300_000),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opennodes/registry",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "OpenNodes (ONP) reference registry: node registration with proof-of-resource qualification (Stage A/B/C), transparent ranking, enforceable estimates, catalog importers (OpenRouter, Hugging Face, models.dev, Ollama), MCP surface, and the web app (catalog, chat, advisor, Node Builder)",
   "license": "Apache-2.0",
   "type": "module",

package/src/namespace.js

@@ -0,0 +1,39 @@
+// Namespace binding (ONP-3 §4): a node id is a reverse-DNS name, and only a host that
+// controls that DNS name may register it. Without this an HTTP challenge proves control of
+// *some* server, not of the namespace being claimed.
+
+/** org.example.ai.box -> box.ai.example.org */
+export const domainForNodeId = (nodeId) => String(nodeId).split('.').reverse().join('.').toLowerCase();
+
+/**
+ * True when `host` may serve the card and HTTP challenge for `nodeId`: the id's domain is the
+ * host itself or a name beneath it (the owner of example.org controls org.example.*).
+ * A *child* host never controls its parent's namespace (alice.github.io cannot claim io.github).
+ */
+export function hostControlsNamespace(host, nodeId) {
+  const h = String(host).toLowerCase().replace(/\.$/, '');
+  const domain = domainForNodeId(nodeId);
+  if (!h.includes('.')) return false;                       // a bare TLD / single label controls nothing
+  return domain === h || domain.endsWith('.' + h);
+}
+
+/** Loopback / private literal hosts: only acceptable in dev mode (allowPrivateTargets). */
+export function isPrivateHost(host) {
+  const h = String(host).toLowerCase().replace(/^\[|\]$/g, '');
+  return h === 'localhost' || h === '::1' || /^127\./.test(h) || /^10\./.test(h)
+    || /^192\.168\./.test(h) || /^172\.(1[6-9]|2\d|3[01])\./.test(h);
+}
+
+/** Fixed-window in-memory rate limiter keyed by client address. limit <= 0 disables it. */
+export function makeRateLimiter(limit, windowMs = 3_600_000) {
+  const hits = new Map();
+  return (key) => {
+    if (!(limit > 0)) return true;
+    const now = Date.now();
+    const rec = hits.get(key);
+    if (!rec || now - rec.start > windowMs) { hits.set(key, { start: now, n: 1 }); return true; }
+    rec.n += 1;
+    if (hits.size > 10_000) for (const [k, v] of hits) if (now - v.start > windowMs) hits.delete(k);
+    return rec.n <= limit;
+  };
+}

package/src/server.js

@@ -17,6 +17,7 @@ import { startReimport } from './reimport.js';
 import { makeSafeFetch } from './safefetch.js';
 import { searchOfferings, searchOfferingsPaged, collectOfferings, RANK_COMPONENTS } from './search.js';
 import { mcpRoutes } from './mcp.js';
+import { hostControlsNamespace, isPrivateHost, makeRateLimiter } from './namespace.js';
 import { exportRoutes } from './export.js';
 import {
   importModelsDev, importHuggingFace, importOpenRouter,
@@ -33,6 +34,10 @@ export async function startRegistry({
   reimport = null,                      // { intervalMs, sources } to keep imported catalogs fresh
   adminToken = null,                    // bearer for admin routes; without it, loopback-only
   keyPath = null,                       // PEM file for a persistent signing identity; null = ephemeral
+  enforceNamespace = null,              // null = enforce except for private hosts in dev mode; true/false to force
+  registerPerHour = 0,                  // per-client cap on register/verify calls (0 = unlimited; set in production)
+  admitCooldownMs = 0,                  // minimum gap between Stage B runs per node (0 = none; set in production)
+  trustProxy = false,                   // read the client address from X-Forwarded-For (behind Caddy / a CDN)
 } = {}) {
   const store = await createStore(dbPath); // sqlite path/:memory: or postgres:// URL
   const safeFetch = makeSafeFetch({ allowPrivate: allowPrivateTargets });
@@ -76,10 +81,23 @@ export async function startRegistry({
   /** node.id is reverse-DNS: org.opennodes.fixture -> fixture.opennodes.org */
   const domainForNodeId = (nodeId) => nodeId.split('.').reverse().join('.');
 
+  /** May `originUrl`'s host register `nodeId`? (ONP-3 §4: the host must control the id's DNS namespace.) */
+  const namespaceOk = (originUrl, nodeId) => {
+    const host = new URL(originUrl).hostname;
+    if (enforceNamespace === false) return true;
+    if (enforceNamespace !== true && allowPrivateTargets && isPrivateHost(host)) return true;   // dev / e2e on loopback
+    return hostControlsNamespace(host, nodeId);
+  };
+  const registerLimiter = makeRateLimiter(registerPerHour);
+  const clientOf = (req) => (trustProxy && req.headers['x-forwarded-for']?.split(',')[0].trim()) || req.socket.remoteAddress || 'unknown';
+  const isAdmin = (req) => Boolean(adminToken) && req.headers.authorization === `Bearer ${adminToken}`;
+
   async function challengeSatisfied(node, challenge) {
-    try { // HTTP method
-      const resp = await safeFetch(`${node.origin}/.well-known/onp-challenge/${challenge.token}`, {}, 10_000);
-      if (resp.ok) return { ok: true, method: 'http' };
+    try { // HTTP method — only from a host that controls the id's namespace
+      if (namespaceOk(node.origin, node.id)) {
+        const resp = await safeFetch(`${node.origin}/.well-known/onp-challenge/${challenge.token}`, {}, 10_000);
+        if (resp.ok) return { ok: true, method: 'http' };
+      }
     } catch { /* fall through to DNS */ }
     try { // DNS TXT method: _onp-challenge.{domain} TXT "{token}"
       const records = await dnsResolveTxt(`_onp-challenge.${domainForNodeId(node.id)}`);
@@ -118,6 +136,7 @@ export async function startRegistry({
 
   const app = createApp([
     ['POST', '/v0/nodes', async (req, res) => {
+      if (!registerLimiter(clientOf(req))) return problem(res, 429, 'rate-limited', 'too many registration attempts from this address; try again later');
       const { card_url } = await readJson(req);
       if (!card_url) return problem(res, 400, 'missing-card-url', 'body must be {"card_url": "..."}');
       let card;
@@ -127,13 +146,22 @@ export async function startRegistry({
 
       const nodeId = card.node.id;
       const origin = new URL(card_url).origin;
+      // The card must be served by a host that controls the claimed id (reverse-DNS). Otherwise anyone
+      // could host a card naming someone else's node and pass the HTTP challenge on their own server.
+      if (!namespaceOk(origin, nodeId)) {
+        return problem(res, 403, 'namespace-mismatch',
+          `node id ${nodeId} maps to ${domainForNodeId(nodeId)}; its card must be served from that host or a parent domain, not ${new URL(origin).hostname}`);
+      }
+      const existing = await store.getNode(nodeId);
+      const listed = existing && !['challenged', 'submitted'].includes(existing.state) && existing.source !== 'import';
       await store.upsertNode(nodeId, origin, card_url, 'challenged');
-      await store.setState(nodeId, 'challenged', 'registration received');
+      // Re-registration of a listed node issues a fresh challenge but never delists it: state moves at /verify.
+      if (!listed) await store.setState(nodeId, 'challenged', 'registration received');
       const token = randomUUID();
       await store.setChallenge(nodeId, token);
       sendJson(res, 202, {
         node_id: nodeId,
-        state: 'challenged',
+        state: listed ? existing.state : 'challenged',
         challenge: {
           methods: {
             http: `${origin}/.well-known/onp-challenge/${token}`,
@@ -146,6 +174,7 @@ export async function startRegistry({
     }],
 
     ['POST', '/v0/nodes/:id/verify', async (req, res, { params }) => {
+      if (!registerLimiter(clientOf(req))) return problem(res, 429, 'rate-limited', 'too many verification attempts from this address; try again later');
       const node = await store.getNode(params.id);
       if (!node) return problem(res, 404, 'unknown-node', params.id);
       const challenge = await store.getChallenge(params.id);
@@ -188,6 +217,13 @@ export async function startRegistry({
       if (node.state !== 'community' && node.state !== 'verified') {
         return problem(res, 409, 'wrong-state', `Stage B requires community tier, node is ${node.state}`);
       }
+      if (admitCooldownMs > 0 && !isAdmin(req)) {
+        const lastB = (await store.probesFor(params.id)).find((p) => p.stage === 'B');
+        const age = lastB ? Date.now() - Date.parse(lastB.at) : Infinity;
+        if (age < admitCooldownMs) {
+          return problem(res, 429, 'admission-cooldown', `Stage B ran ${Math.round(age / 60000)} min ago; next run allowed in ${Math.ceil((admitCooldownMs - age) / 60000)} min`);
+        }
+      }
       await refreshCard(params.id);
       const card = await store.latestCard(params.id);
       const stageB = await runStageB(store, params.id, card, { safeFetch, capacity: stageBCapacity });

package/src/web/index.html

@@ -396,8 +396,13 @@
             <button class="btn sec" id="sc-load" style="padding:0.35rem 0.7rem; font-size:0.74rem">Load</button>
             <button class="btn sec" id="sc-del" style="padding:0.35rem 0.7rem; font-size:0.74rem" title="delete">✕</button>
           </div>
-          <button class="btn sec" id="sc-export" style="margin-top:0.4rem; padding:0.35rem 0.7rem; font-size:0.74rem">Export as ONP-6 Scenario JSON</button>
-          <p class="prov" id="sc-note" style="margin:0.35rem 0 0">saved in your browser; export produces the portable ONP-6 §5 format</p>
+          <div style="display:flex; gap:0.4rem; margin-top:0.4rem; flex-wrap:wrap">
+            <button class="btn sec" id="sc-export" style="padding:0.35rem 0.7rem; font-size:0.74rem">Export JSON</button>
+            <button class="btn sec" id="sc-import" style="padding:0.35rem 0.7rem; font-size:0.74rem">Import JSON</button>
+            <button class="btn sec" id="sc-share" style="padding:0.35rem 0.7rem; font-size:0.74rem">Copy share link</button>
+            <input type="file" id="sc-file" accept=".json,application/json" hidden>
+          </div>
+          <p class="prov" id="sc-note" style="margin:0.35rem 0 0">Saved in your browser — no account. Export/import use the portable ONP-6 §5 format; a share link carries the whole scenario in the URL (never your API keys).</p>
         </details>
         <label class="f">API key <span style="font-weight:400">(per host, kept in your browser)</span></label>
         <input class="wide mono" id="ch-key" type="password" placeholder="optional" style="font-size:0.76rem">
@@ -1002,7 +1007,7 @@ async function loadChatTargets() {
         + (local.length ? `<optgroup label="On your machine — needs a local Ollama with this model pulled">${local.map((o, i) => opt(o, ready.length + i)).join('')}</optgroup>` : '')
         + (imports.length ? `<optgroup label="Imported catalogs — your own API key required">${imports.map((o, i) => opt(o, ready.length + local.length + i)).join('')}</optgroup>` : '')
         + '<option value="custom">custom endpoint (local Ollama / any OpenAI server)</option>';
-      if (!chat.roster.length && ready.length && !sessionStorage.getItem('onp-advisor-handoff')) {
+      if (!chat.roster.length && ready.length && !sessionStorage.getItem('onp-advisor-handoff') && !/[?&]s=/.test(location.hash)) {
         chat.roster.push({ offering: ready[0] });   // a newcomer can just type
         renderRoster();
         const log = $('#ch-log');
@@ -1011,6 +1016,7 @@ async function loadChatTargets() {
     } catch { $('#ch-add').innerHTML = '<option value="custom">custom endpoint</option>'; }
   }
   await applyAdvisorHandoff();
+  await applySharedScenario();
 }
 
 /** The catalog advisor hands its shortlist to the chat roster via sessionStorage. */
@@ -1404,38 +1410,47 @@ $('#sc-save').addEventListener('click', () => {
   scRefreshList(); $('#sc-list').value = name;
   $('#sc-note').textContent = `saved "${name}"`;
 });
-$('#sc-load').addEventListener('click', async () => {
-  const sc = scAll()[$('#sc-list').value];
-  if (!sc) return;
-  await loadChatTargets();
+/** Apply a scenario snapshot to the chat (roster, mode, instructions). Used by Load, Import, and share links. */
+async function scApply(sc, verb = 'loaded') {
   chat.roster = [];
   const missing = [];
-  for (const entry of sc.roster) {
-    if (entry.custom) chat.roster.push({ custom: entry.custom });
-    else {
-      const [nodeId, offId] = entry.pin.split('/');
-      const o = chat.offerings.find((x) => x.node_id === nodeId && x.offering_id === offId);
-      if (o) chat.roster.push({ offering: o }); else missing.push(entry.pin);
+  for (const entry of sc.roster ?? []) {
+    if (entry.custom) { chat.roster.push({ custom: entry.custom }); continue; }
+    let o = null;
+    if (entry.pin) {
+      const [nodeId, ...rest] = entry.pin.split('/'); const offId = rest.join('/');
+      o = chat.offerings.find((x) => x.node_id === nodeId && x.offering_id === offId);
+      if (!o) { try { o = await api(`/v0/offerings/${encodeURIComponent(nodeId)}/${encodeURIComponent(offId)}`); } catch { o = null; } }
+    } else if (entry.select) {            // ONP-6 late binding: resolve the requirement against this registry now
+      try { o = (await api('/v0/offerings?limit=1&' + new URLSearchParams(entry.select))).offerings[0] ?? null; } catch { o = null; }
     }
+    if (o) chat.roster.push({ offering: o }); else missing.push(entry.pin ?? JSON.stringify(entry.select));
   }
-  $('#ch-mode').value = sc.mode; $('#ch-mode').dispatchEvent(new Event('change'));
+  const MODES = ['single', 'compare', 'jury', 'pipeline', 'iterative'];
+  $('#ch-mode').value = MODES.includes(sc.mode) ? sc.mode : 'single'; $('#ch-mode').dispatchEvent(new Event('change'));
   $('#ch-rounds').value = String(sc.rounds || 2);
   $('#ch-seqprompt').value = sc.instructions?.pipeline ?? $('#ch-seqprompt').value;
   $('#ch-juryprompt').value = sc.instructions?.jury ?? $('#ch-juryprompt').value;
   $('#ch-revprompt').value = sc.instructions?.revise ?? $('#ch-revprompt').value;
   renderRoster();
   if (sc.judge < chat.roster.length) $('#ch-judge').value = String(sc.judge);
+  if (sc.name) $('#sc-name').value = sc.name;
   $('#sc-note').textContent = missing.length
-    ? `loaded; ${missing.length} pinned offering(s) no longer listed: ${missing.join(', ')}`
-    : `loaded "${sc.name}"`;
+    ? `${verb}; ${missing.length} model(s) could not be resolved here: ${missing.join(', ')}`
+    : `${verb} "${sc.name ?? 'scenario'}" — ${chat.roster.length} model(s), mode ${$('#ch-mode').value}`;
+}
+$('#sc-load').addEventListener('click', async () => {
+  const sc = scAll()[$('#sc-list').value];
+  if (!sc) return;
+  await loadChatTargets();
+  await scApply(sc);
 });
 $('#sc-del').addEventListener('click', () => {
   const all = scAll(); delete all[$('#sc-list').value];
   localStorage.setItem(SC_STORE, JSON.stringify(all)); scRefreshList();
 });
-$('#sc-export').addEventListener('click', () => {
-  // Bridge to the portable ONP-6 §5 Scenario document
-  const s = scSnapshot($('#sc-name').value.trim() || $('#sc-list').value || 'chat-scenario');
+/** Snapshot -> portable ONP-6 §5 Scenario document. */
+function scToDoc(s) {
   const roles = {};
   s.roster.forEach((r, i) => { roles['m' + (i + 1)] = r.pin ? { pin: r.pin } : { custom: r.custom }; });
   let steps = [];
@@ -1450,7 +1465,78 @@ $('#sc-export').addEventListener('click', () => {
       steps.push({ id: 'verdict', role: roleIds[Math.min(s.judge, roleIds.length - 1)], merge: 'judge', instruction: s.instructions.jury });
     }
   }
-  const doc = { onp_scenario: '0.1', name: s.name, roles, steps, policy: {} };
+  return { onp_scenario: '0.1', name: s.name, roles, steps, policy: {} };
+}
+
+/** ONP-6 Scenario document (or a native snapshot) -> snapshot the chat can apply. */
+function scFromDoc(doc) {
+  if (!doc || typeof doc !== 'object') throw new Error('not a JSON object');
+  if (Array.isArray(doc.roster) && doc.mode) return doc;                      // already a native snapshot
+  if (!doc.onp_scenario || !doc.roles || !Array.isArray(doc.steps)) throw new Error('not an ONP-6 scenario (needs onp_scenario, roles, steps)');
+  const roleIds = Object.keys(doc.roles);
+  const roster = roleIds.map((id) => {
+    const r = doc.roles[id] ?? {};
+    if (r.custom) return { custom: r.custom };
+    if (r.pin) return { pin: r.pin };
+    if (r.node_id && r.offering_id) return { pin: `${r.node_id}/${r.offering_id}` };
+    if (r.select) return { select: r.select };
+    return { select: {} };
+  });
+  const fan = doc.steps.find((st) => st.mode === 'parallel');
+  const verdict = doc.steps.find((st) => st.merge === 'judge' || st.merge?.role);
+  let mode = 'single';
+  if (fan) mode = fan.rounds ? 'iterative' : (verdict ? 'jury' : 'compare');
+  else if (doc.steps.length > 1) mode = 'pipeline';
+  const judgeRole = verdict?.role ?? verdict?.merge?.role;
+  return {
+    name: doc.name ?? 'imported-scenario', mode,
+    rounds: fan?.rounds ?? 2,
+    judge: Math.max(0, roleIds.indexOf(judgeRole)),
+    roster,
+    instructions: {
+      pipeline: doc.steps.find((st) => st.instruction && !st.merge)?.instruction ?? doc.steps.find((st) => st.prompt && st.input && st.input !== '$user')?.prompt,
+      jury: verdict?.instruction,
+      revise: fan?.revise_instruction,
+    },
+  };
+}
+const b64u = {
+  enc: (str) => btoa(String.fromCharCode(...new TextEncoder().encode(str))).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, ''),
+  dec: (b) => new TextDecoder().decode(Uint8Array.from(atob(b.replace(/-/g, '+').replace(/_/g, '/')), (c) => c.charCodeAt(0))),
+};
+const scCurrentDoc = () => scToDoc(scSnapshot($('#sc-name').value.trim() || $('#sc-list').value || 'chat-scenario'));
+
+$('#sc-import').addEventListener('click', () => $('#sc-file').click());
+$('#sc-file').addEventListener('change', async (e) => {
+  const file = e.target.files[0]; e.target.value = '';
+  if (!file) return;
+  try {
+    const sc = scFromDoc(JSON.parse(await file.text()));
+    await loadChatTargets();
+    await scApply(sc, 'imported');
+  } catch (err) { $('#sc-note').textContent = 'import failed: ' + err.message; }
+});
+$('#sc-share').addEventListener('click', async () => {
+  if (!chat.roster.length) { $('#sc-note').textContent = 'add at least one model before sharing'; return; }
+  const url = `${location.origin}${location.pathname}#/chat?s=${b64u.enc(JSON.stringify(scCurrentDoc()))}`;
+  try { await navigator.clipboard.writeText(url); $('#sc-note').textContent = `share link copied (${url.length} chars) — it contains the roster, mode and instructions, never API keys`; }
+  catch { prompt('Copy this share link:', url); }
+});
+/** A #/chat?s=… link carries a whole scenario; apply it once, then clean the address bar. */
+async function applySharedScenario() {
+  const m = location.hash.match(/[?&]s=([A-Za-z0-9_-]+)/);
+  if (!m) return;
+  history.replaceState(null, '', location.pathname + '#/chat');
+  try {
+    await scApply(scFromDoc(JSON.parse(b64u.dec(m[1]))), 'opened shared scenario');
+    const log = $('#ch-log');
+    if (log && !chat.history.length) log.innerHTML = `<p class="sub" style="margin:0">Shared scenario <b>${esc($('#sc-name').value || 'scenario')}</b> loaded: ${chat.roster.length} model(s), mode <b>${esc($('#ch-mode').value)}</b>. Review the roster on the right, then say something.</p>`;
+  } catch (err) { $('#sc-note').textContent = 'could not open the shared scenario: ' + err.message; }
+}
+
+$('#sc-export').addEventListener('click', () => {
+  const doc = scCurrentDoc();
+  const s = { name: doc.name };
   const a = document.createElement('a');
   a.href = URL.createObjectURL(new Blob([JSON.stringify(doc, null, 2)], { type: 'application/json' }));
   a.download = s.name.replace(/[^a-z0-9._-]+/gi, '-') + '.onp-scenario.json';