botfights

361 Commits 3 Branches 0 Tags

3 Commits

Author	SHA1	Message	Date
DorianandClaude Fable 5	0511b97cb9	feat(09-01): arena-proxy survives SSE, client-IP forwarding, upstream-down CI / check (push) Has been cancelled Details - Forward client IP via x-forwarded-for/x-real-ip so the canonical arena's per-IP rate limiting isn't collapsed to one bucket per node. - 30s AbortSignal.timeout on non-stream requests; SSE fight streams (/api/fights/:id/stream) are exempt (long-lived by design). - On upstream fetch failure, log and return 502 {error} instead of a buffered hang or a 500 stack trace. - fights.ts: set X-Accel-Buffering: no on the SSE stream response so an nginx-fronted arena (nginx-proxy-manager) doesn't buffer live fight events. - docker-compose.yml: document ARENA_UPSTREAM_URL / TRUSTED_PROXY (commented, no active value set here — the canonical arena gets its own compose file in a later plan). TDD: added the SSE/XFF/502 tests, confirmed the 502 test failed against the prior implementation, then implemented to green (9/9 arena-proxy tests, 17/17 combined with rate-limit.test.ts). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:32:57 -04:00
DorianandClaude Fable 5	143ca808e8	feat(09-01): arena-proxy middleware — REST forwarding to canonical arena CI / check (push) Has been cancelled Details Hono middleware that forwards /api/* to ARENA_UPSTREAM_URL when set, with standalone mode (env unset) and /api/health untouched. Verified end-to-end against a real second HTTP server: register a bot upstream, read it back through the proxy, method/query/JSON body forwarded unchanged, inbound Host header dropped, response content-encoding/content-length stripped. TDD: 6 tests written first and confirmed failing (module didn't exist), then implemented to green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:30:24 -04:00
DorianandClaude Fable 5	e4b82fd7e9	feat(09-04): deploy canonical BotFights arena on VPS2 CI / check (push) Has been cancelled Details Adds docker-compose.arena.yml (registry image only, no build, no payment env, no TRUSTED_PROXY since no reverse proxy fronts it) and docs/arena-deployment.md (full runbook: host paths, port, secret handling, seed decision, NPM/TLS upgrade path, teardown) for the one canonical public arena at http://146.59.87.168:9100 (user decision 2026-07-30: no DNS/TLS this phase, plain HTTP on the raw port; TLS is a later env-only upgrade). Deployed + verified on VPS2: healthy on-host and off-host, seeded with a full read-only copy of archi-dev-box's botfights.db (115 bots/102,440 fights; source untouched, mtime verified unchanged). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:22:21 -04:00

Author

SHA1

Message

Date

DorianandClaude Fable 5

0511b97cb9

feat(09-01): arena-proxy survives SSE, client-IP forwarding, upstream-down

CI / check (push) Has been cancelled

Details

- Forward client IP via x-forwarded-for/x-real-ip so the canonical arena's
  per-IP rate limiting isn't collapsed to one bucket per node.
- 30s AbortSignal.timeout on non-stream requests; SSE fight streams
  (/api/fights/:id/stream) are exempt (long-lived by design).
- On upstream fetch failure, log and return 502 {error} instead of a
  buffered hang or a 500 stack trace.
- fights.ts: set X-Accel-Buffering: no on the SSE stream response so an
  nginx-fronted arena (nginx-proxy-manager) doesn't buffer live fight events.
- docker-compose.yml: document ARENA_UPSTREAM_URL / TRUSTED_PROXY (commented,
  no active value set here — the canonical arena gets its own compose file
  in a later plan).

TDD: added the SSE/XFF/502 tests, confirmed the 502 test failed against the
prior implementation, then implemented to green (9/9 arena-proxy tests,
17/17 combined with rate-limit.test.ts).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-30 21:32:57 -04:00

DorianandClaude Fable 5

143ca808e8

feat(09-01): arena-proxy middleware — REST forwarding to canonical arena

CI / check (push) Has been cancelled

Details

Hono middleware that forwards /api/* to ARENA_UPSTREAM_URL when set, with
standalone mode (env unset) and /api/health untouched. Verified end-to-end
against a real second HTTP server: register a bot upstream, read it back
through the proxy, method/query/JSON body forwarded unchanged, inbound Host
header dropped, response content-encoding/content-length stripped.

TDD: 6 tests written first and confirmed failing (module didn't exist),
then implemented to green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-30 21:30:24 -04:00

DorianandClaude Fable 5

e4b82fd7e9

feat(09-04): deploy canonical BotFights arena on VPS2

CI / check (push) Has been cancelled

Details

Adds docker-compose.arena.yml (registry image only, no build, no payment
env, no TRUSTED_PROXY since no reverse proxy fronts it) and
docs/arena-deployment.md (full runbook: host paths, port, secret handling,
seed decision, NPM/TLS upgrade path, teardown) for the one canonical public
arena at http://146.59.87.168:9100 (user decision 2026-07-30: no DNS/TLS
this phase, plain HTTP on the raw port; TLS is a later env-only upgrade).

Deployed + verified on VPS2: healthy on-host and off-host, seeded with a
full read-only copy of archi-dev-box's botfights.db (115 bots/102,440
fights; source untouched, mtime verified unchanged).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-30 21:22:21 -04:00