Files
Wizard/wizard_server
marvinandClaude Opus 5.5 87dfcd55b7 Add resource limits, abuse protection and overload handling
Running games always continue; new work is refused when there is no
capacity; abuse is rejected immediately.

- Docker: CPU/memory/pids caps per container (overridable in .env);
  uvicorn message size, queue and concurrency limits
- Server abuse limits: connections total/per IP (close 1013), message
  rate per connection (token bucket, close 1008 on floods), lobby
  creation rate per IP
- Load monitor: event loop lag, CPU of the own cgroup quota and
  throttling, with hysteresis (normal/busy/overloaded, severe lag
  overloads immediately)
- Admission control: create_lobby and start_game refused while
  overloaded or MAX_ACTIVE_GAMES are running; server_status message
  broadcast on changes; /health reports load but stays ok
- AI bridge: timeout sent with requests, in-flight cap, circuit breaker
- AI service: bounded workers and queue ("overloaded"), drops expired
  requests, degrades to the heuristic agent when busy or too slow
- Website: busy notices, Create/Start disabled when not accepting
  games, slow retry when the server is full
- Tests for limiters, load levels, admission control and AI service
  limits; docs updated

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-27 12:51:46 +02:00
..
2026-09-27 09:52:00 +02:00
2026-09-27 09:52:00 +02:00
2026-09-27 09:52:00 +02:00
2026-09-27 09:52:00 +02:00
2026-09-27 09:52:00 +02:00

wizard_server

FastAPI game server. It manages sessions, lobbies and games, and talks to the AI service.

  • game_logic/ — the standalone rules engine (pip install ./game_logic, see its README).
  • app/main.py — routes: GET /health, WS /ws (browsers), WS /internal/ai (AI service, refused when the request came through the reverse proxy)
  • app/protocol.py — client message schema
  • app/service.py — dispatches client messages, reconnects sessions, cleanup
  • app/lobby.py — lobbies, seats, host actions, running games and AI turns
  • app/ai_bridge.py — request/response protocol with the AI service, random-move fallback
  • app/sessions.py — sessions (token based, survive reloads) and ordered websocket sending

Configuration (environment): AI_SHARED_SECRET, AI_DECISION_TIMEOUT (5s), AI_MOVE_DELAY (0.8s), TRICK_PAUSE (1.8s), SESSION_TTL (1800s), MAX_LOBBIES (1000), ALLOWED_ORIGINS, LOG_LEVEL.

pip install -r requirements-dev.txt
uvicorn app.main:app --reload
pytest