2 Commits

Author	SHA1	Message	Date
daniel-c-harvey	622ee940f4	fix(phase-16): forward X-Forwarded-For from EventProxyController so the API rate limiter partitions per client IP ... Proxy chains any inbound XFF with the connection IP before relaying upstream; UseForwardedHeaders resolves it to the limiter's partition key. Documents the EventRepository first-play counter race (unique index is the backstop).	2026-06-19 13:09:21 -04:00
daniel-c-harvey	dbd90ee52a	feat(phase-16): anonymous play & share telemetry substrate (wave 16.1) ... Player-service play-session tracker (floor + 3-bucket classify), SharePopover share tracker with debounce, sendBeacon interop, proxied rate-limited POST api/event/{play,share}, append-only event logs + incremental play_counter with server-side release resolution. Migration authored, not applied. No anonId, no read surface.	2026-06-19 12:59:00 -04:00