DorianandClaude Opus 4.6 5bfb63aa7f fix: add input validation, Zod schemas, rate limiting, and IP trust ...

- Add Zod schema for webhook response parsing (orchestrator.ts)
- Add Zod schemas for POST /respond and /react request bodies
- Add safe integer validation for batch count param
- Prefer cf-connecting-ip over spoofable x-forwarded-for
- Add ID format validation on URL params
- Add rate limiting on /auth/login (30/min) and /update (10/min)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-09 07:30:49 +00:00

.claude

feat: SSE live fight spectating with spectator count

2026-03-08 19:46:39 +00:00

bot

feat: full comedy overhaul — voices, narrations, trash talk, commentary

2026-03-07 09:15:41 +00:00

docs

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

examples/python-bot

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

frontend

fix: allow Google Fonts in CSP so 3D announcement font loads in production

2026-03-09 07:18:57 +00:00

loops

feat: retro mode — arcade combo round with gamepad overlays

2026-03-08 14:13:47 +00:00

server

fix: add input validation, Zod schemas, rate limiting, and IP trust

2026-03-09 07:30:49 +00:00

.dockerignore

test: Docker build and PWA installation verified

2026-03-09 00:38:31 +00:00

.gitignore

feat: style-specific music synths, add .pnpm-store to gitignore

2026-03-08 17:16:27 +00:00

BOT_SETUP.md

security: redact hidden retro combos from all public docs

2026-03-08 14:54:54 +00:00

botfights.db

feat: SSE live fight spectating with spectator count

2026-03-08 19:46:39 +00:00

CLAUDE.md

feat: v5 — boxing poster fight cards, 12-char names, diverse mock bots

2026-03-08 10:33:30 +00:00

deploy.sh

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.tor.yml

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

docker-compose.yml

feat: Creator human companion — deep hood, detailed Guy Fawkes mask, cloak, gloves

2026-03-08 14:30:31 +00:00

Dockerfile

perf: server memory leak audit

2026-03-09 00:05:03 +00:00

package.json

feat: botfights v1 — full fighting game with Kaplay engine

2026-03-06 16:27:54 +00:00

PLAN.md

feat: betting system — Cashu escrow, Lightning deposit/withdraw, payouts

2026-03-08 00:33:08 +00:00

pnpm-lock.yaml

fix: add input validation, Zod schemas, rate limiting, and IP trust

2026-03-09 07:30:49 +00:00

pnpm-workspace.yaml

feat: botfights v1 — full fighting game with Kaplay engine

2026-03-06 16:27:54 +00:00

torrc

feat: VPS deploy script + Tor hidden service config

2026-03-08 00:29:18 +00:00

Zaps.md

docs: Zaps.md — Lightning payment integration plan

2026-03-07 23:38:36 +00:00

S

Description

BotFights — bot competition arena with arcade fighting mode. Main repo (migrated from git.tx1138.com/lfg2025/botfight).

8.9 MiB

Languages

TypeScript 81.6%

Vue 16.7%

JavaScript 1.3%

CSS 0.2%