Evan 5fb7f75f3d Server-side WebSocket message rate limiting & size enforcement (#3424) ...

## Description:

* Adds ClientMsgRateLimiter — a per-client token-bucket rate limiter
that gates all incoming WebSocket messages. Returns "ok", "limit"
(drop), or "kick" based on the violation type.

* Intent messages are capped at 500 bytes each (they are stored in turn
history for the game duration, so oversized intents
accumulate in server RAM). Violations kick the client.

* Winner messages bypass the byte rate limit (they include stats for all
players and can be 100s of KB) but are strictly capped at one per client
— a second winner message kicks the client.

* All other messages go through the standard per-second (10/s) and
per-minute (150/min) rate limits. Violations drop the message; byte
budget exhaustion kicks the client.

* WebSocket maxPayload set to 2 MB on game workers.
Invalid (unparseable) messages now immediately kick the client rather
than being silently dropped.
Unit tests added for all rate limiting behaviors.

## Please complete the following:

- [x] I have added screenshots for all UI updates
- [x] I process any text displayed to the user through translateText()
and I've added it to the en.json file
- [x] I have added relevant tests to the test directory
- [x] I confirm I have thoroughly tested these changes and take full
responsibility for any bugs introduced

## Please put your Discord username so you can be contacted if a bug or
regression is found:

evan

2026-03-13 21:15:10 -07:00

..

ClientMsgRateLimiter.test.ts

Server-side WebSocket message rate limiting & size enforcement (#3424)

2026-03-13 21:15:10 -07:00

GameLifecycle.test.ts

feat: Prevent GameServer from restarting after ending by introducin… (#2923)

2026-01-20 19:54:57 -08:00

MasterLobbyServiceHealth.test.ts

feat(server): add health api endpoint for increased observability (#3264)

2026-02-21 16:52:47 -06:00

PollingLoop.test.ts

fix: replace setInterval with recursive setTimeout in Master.ts to pr… (#2869)

2026-01-14 09:50:43 -08:00