chore(website): log ip + score from /api/score for rate-limit telemetry

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: aidenybai

packages/website/src/app/api/score/route.ts

@@ -70,6 +70,8 @@ const respondError = (status: number, message: string): Response =>
   Response.json({ error: message }, { status, headers: CORS_HEADERS });
 
 export const POST = async (request: Request): Promise<Response> => {
+  // used for rate limiting bad actors
+  const ip = (request as any).ip || request.headers.get("x-forwarded-for") || "unknown";
   const contentLength = Number(request.headers.get("content-length") ?? "0");
   if (contentLength > MAX_REQUEST_BODY_BYTES) {
     return respondError(413, "Request body exceeds 1MB");
@@ -106,5 +108,7 @@ export const POST = async (request: Request): Promise<Response> => {
 
   const score = calculateScore(diagnostics as DiagnosticInput[]);
 
+  console.log({ ip, score }, diagnostics);
+
   return Response.json({ score, label: getScoreLabel(score) }, { headers: CORS_HEADERS });
 };