feat(security): divert bot traffic

Author: RavelloH

.husky/pre-commit

@@ -1,2 +1,2 @@
 #!/bin/sh
-npx lint-staged
+npm run check:no-build

package-lock.json

@@ -23,6 +23,7 @@
     "check:openapi": "npm run generate:openapi && npm run generate:skills && tsx scripts/check-openapi-contract.ts && git diff --exit-code docs/openapi.json docs/openapi.yaml docs/skills.json",
     "check:skills": "npm run generate:skills && tsx scripts/check-openapi-contract.ts && git diff --exit-code docs/skills.json",
     "check": "tsx scripts/check.ts",
+    "check:no-build": "tsx scripts/check.ts --skip-build",
     "check:verbose": "tsx scripts/check.ts --verbose",
     "check:dry": "npm run check",
     "prepare": "npm run build:sdk && husky",
@@ -68,6 +69,7 @@
     "@noble/hashes": "^2.2.0",
     "@number-flow/react": "^0.6.0",
     "@remixicon/react": "^4.9.0",
+    "asn-blocklist": "^1.20260703.2",
     "boring-avatars": "^2.0.4",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package.json

@@ -25,6 +25,11 @@ interface TaskResult extends StepResult {
   failedStep?: string;
 }
 
+interface CheckOptions {
+  verbose: boolean;
+  skipBuild: boolean;
+}
+
 export const rlog = createScriptLogger({
   silent: true,
 });
@@ -163,33 +168,43 @@ async function runTask(task: CheckTask, verbose: boolean): Promise<TaskResult> {
   };
 }
 
-function parseArgs(argv: string[]): { verbose: boolean } {
-  const knownArgs = new Set(["--verbose", "--help", "-h"]);
+function parseArgs(argv: string[]): CheckOptions {
+  const knownArgs = new Set([
+    "--verbose",
+    "--skip-build",
+    "--no-build",
+    "--help",
+    "-h",
+  ]);
   const unknownArgs = argv.filter((arg) => !knownArgs.has(arg));
 
   if (argv.includes("--help") || argv.includes("-h")) {
-    rlog.info("Usage: tsx scripts/check.ts [--verbose]");
+    rlog.info("Usage: tsx scripts/check.ts [--verbose] [--skip-build]");
     rlog.info(
-      "Runs the same quality, coverage, spec, and build checks used by CI.",
+      "Runs the same quality, coverage, spec, and build checks used by CI. Use --skip-build for commit-time checks.",
     );
     process.exit(0);
   }
 
   if (unknownArgs.length > 0) {
     rlog.error(`Unknown option: ${unknownArgs.join(", ")}`);
-    rlog.info("Usage: tsx scripts/check.ts [--verbose]");
+    rlog.info("Usage: tsx scripts/check.ts [--verbose] [--skip-build]");
     process.exit(1);
   }
 
   return {
     verbose: argv.includes("--verbose"),
+    skipBuild: argv.includes("--skip-build") || argv.includes("--no-build"),
   };
 }
 
 export async function runCli(argv = process.argv.slice(2)): Promise<void> {
-  const { verbose } = parseArgs(argv);
+  const { verbose, skipBuild } = parseArgs(argv);
+  const selectedTasks = skipBuild
+    ? tasks.filter((task) => task.name !== "Build")
+    : tasks;
   const results = await Promise.all(
-    tasks.map((task) => runTask(task, verbose)),
+    selectedTasks.map((task) => runTask(task, verbose)),
   );
   const failures = results.filter((result) => !result.ok);
 

scripts/check-runner/cli.ts

@@ -0,0 +1,37 @@
+import { notFound } from "next/navigation";
+
+import { BotProtectionClient } from "@/components/dashboard/bot-protection-client";
+import { getDashboardProfile } from "@/lib/dashboard/server";
+import { resolveLocale } from "@/lib/i18n/config";
+import { getMessages } from "@/lib/i18n/messages";
+
+interface BotProtectionPageProps {
+  params: Promise<{
+    locale: string;
+  }>;
+}
+
+export async function generateMetadata({ params }: BotProtectionPageProps) {
+  const { locale } = await params;
+  const resolvedLocale = resolveLocale(locale);
+  const messages = getMessages(resolvedLocale);
+
+  return {
+    title: messages.botProtection.title,
+  };
+}
+
+export default async function BotProtectionPage({
+  params,
+}: BotProtectionPageProps) {
+  const { locale } = await params;
+  const resolvedLocale = resolveLocale(locale);
+  const messages = getMessages(resolvedLocale);
+  const profile = await getDashboardProfile();
+
+  if (!profile || profile.user.systemRole !== "admin") {
+    notFound();
+  }
+
+  return <BotProtectionClient locale={resolvedLocale} messages={messages} />;
+}

src/app/[locale]/app/(root)/manage/bot-protection/page.tsx

@@ -1,6 +1,7 @@
 import { notFound } from "next/navigation";
 
 import { PageHeading } from "@/components/dashboard/page-heading";
+import { BotAnalyticsSettingsClient } from "@/components/dashboard/system-settings/bot-analytics-settings-client";
 import { LoginTurnstileSettingsClient } from "@/components/dashboard/system-settings/login-turnstile-settings-client";
 import { NotificationEmailSettingsClient } from "@/components/dashboard/system-settings/notification-email-settings-client";
 import { getDashboardProfile } from "@/lib/dashboard/server";
@@ -41,6 +42,7 @@ export default async function SystemSettingsPage({
         title={messages.systemSettings.title}
         subtitle={messages.systemSettings.subtitle}
       />
+      <BotAnalyticsSettingsClient messages={messages} />
       <LoginTurnstileSettingsClient messages={messages} />
       <NotificationEmailSettingsClient
         locale={resolvedLocale}