botfights

6 Commits

Author	SHA1	Message	Date
DorianandClaude Fable 5	cfafc22c62	fix(frontend): clipboard polyfill for HTTP (non-secure) contexts — copy buttons threw writeText-of-undefined on nodes CI / check (push) Failing after 6m9s Details Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:46:17 -04:00
DorianandClaude Fable 5	4d285f8e93	arena: switch canonical URL to https://botfights.archipelago-foundation.org (NPM+LE live), enable TRUSTED_PROXY CI / check (push) Has been cancelled Details Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:44:10 -04:00
DorianandClaude Fable 5	a95cadaf9e	test(09-01): verify x-forwarded-for over a real socket, not just presence CI / check (push) Failing after 6m14s Details The prior test drove the proxying app via Hono's in-process app.request() harness, which has no real Node socket — so it could only assert the header was non-empty-or-absent, not that the real client IP round-trips. Spin the proxying app up with @hono/node-server (real loopback socket) and assert the upstream actually receives 127.0.0.1/::1, exercising the same remoteAddress lookup arenaProxy uses in production. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:34:13 -04:00
DorianandClaude Fable 5	0511b97cb9	feat(09-01): arena-proxy survives SSE, client-IP forwarding, upstream-down CI / check (push) Has been cancelled Details - Forward client IP via x-forwarded-for/x-real-ip so the canonical arena's per-IP rate limiting isn't collapsed to one bucket per node. - 30s AbortSignal.timeout on non-stream requests; SSE fight streams (/api/fights/:id/stream) are exempt (long-lived by design). - On upstream fetch failure, log and return 502 {error} instead of a buffered hang or a 500 stack trace. - fights.ts: set X-Accel-Buffering: no on the SSE stream response so an nginx-fronted arena (nginx-proxy-manager) doesn't buffer live fight events. - docker-compose.yml: document ARENA_UPSTREAM_URL / TRUSTED_PROXY (commented, no active value set here — the canonical arena gets its own compose file in a later plan). TDD: added the SSE/XFF/502 tests, confirmed the 502 test failed against the prior implementation, then implemented to green (9/9 arena-proxy tests, 17/17 combined with rate-limit.test.ts). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:32:57 -04:00
DorianandClaude Fable 5	143ca808e8	feat(09-01): arena-proxy middleware — REST forwarding to canonical arena CI / check (push) Has been cancelled Details Hono middleware that forwards /api/* to ARENA_UPSTREAM_URL when set, with standalone mode (env unset) and /api/health untouched. Verified end-to-end against a real second HTTP server: register a bot upstream, read it back through the proxy, method/query/JSON body forwarded unchanged, inbound Host header dropped, response content-encoding/content-length stripped. TDD: 6 tests written first and confirmed failing (module didn't exist), then implemented to green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:30:24 -04:00
DorianandClaude Fable 5	e4b82fd7e9	feat(09-04): deploy canonical BotFights arena on VPS2 CI / check (push) Has been cancelled Details Adds docker-compose.arena.yml (registry image only, no build, no payment env, no TRUSTED_PROXY since no reverse proxy fronts it) and docs/arena-deployment.md (full runbook: host paths, port, secret handling, seed decision, NPM/TLS upgrade path, teardown) for the one canonical public arena at http://146.59.87.168:9100 (user decision 2026-07-30: no DNS/TLS this phase, plain HTTP on the raw port; TLS is a later env-only upgrade). Deployed + verified on VPS2: healthy on-host and off-host, seeded with a full read-only copy of archi-dev-box's botfights.db (115 bots/102,440 fights; source untouched, mtime verified unchanged). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 21:22:21 -04:00