feat(platform): add Discord onboarding and Velocity gate

packages/network/test/client-ip.test.ts

@@ -0,0 +1,27 @@
+import { describe, expect, it } from "vitest";
+import { getClientIp, NoopIpIntelligenceProvider } from "../src/index";
+
+describe("client IP extraction", () => {
+  it("ignores spoofable forwarding headers unless a trusted proxy is configured", () => {
+    const headers = new Headers({ "x-forwarded-for": "203.0.113.1" });
+    expect(getClientIp(headers, false)).toBeNull();
+  });
+
+  it("uses the first valid address supplied by a trusted proxy", () => {
+    const headers = new Headers({ "x-forwarded-for": "203.0.113.1, 10.0.0.2" });
+    expect(getClientIp(headers, true)).toBe("203.0.113.1");
+  });
+
+  it("rejects malformed proxy values", () => {
+    expect(getClientIp(new Headers({ "x-forwarded-for": "not-an-ip" }), true)).toBeNull();
+  });
+});
+
+describe("VPN intelligence", () => {
+  it("explicitly reports unknown when no provider is configured", async () => {
+    await expect(new NoopIpIntelligenceProvider().classify("203.0.113.1")).resolves.toEqual({
+      classification: "unknown",
+      provider: null,
+    });
+  });
+});