@termix-ssh/plugin-sdk 1.0.7 → 1.0.8

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.0.8
+
+### Added
+
+- `publicRateLimit` on `ctx.http.router()`, for a plugin whose public routes serve a proxied page
+
 ## 1.0.7
 
 ### Fixed

package/PLUGIN-GUIDE.md

@@ -1,6 +1,6 @@
 # Termix plugin guide
 
-SDK 1.0.7 | Plugin API 1.2.0
+SDK 1.0.8 | Plugin API 1.2.0
 
 This guide is for anyone, person or AI coding tool, building a Termix plugin. It ships inside
 `@termix-ssh/plugin-sdk`, so the copy in your `node_modules` always matches the SDK you have installed.
@@ -283,7 +283,8 @@ router.post("/notes", async (req, res) => {
 - The `@openapi` path is the full path, starting with `/plugin-api/<id>/`. `build` turns these into
   `dist/openapi.json` and the docs site renders them.
 - `ctx.http.router({ public: ["/webhook/:token"], bodyLimit: "20mb", rawBody: false })`. Public routes
-  have no actor: check their token yourself and rate limit them.
+  have no actor: check their token yourself. Core allows 120 public requests a minute per address;
+  `publicRateLimit` raises that for a proxied page that loads its own assets.
 - `ctx.http.baseUrl(req)` is the public address, for callback URLs.
 - `ctx.ws.route("/live", (socket, conn) => ...)`. Long lived sockets should check
   `conn.isDataUnlocked()` per message.

package/dist/backend.d.ts

@@ -303,6 +303,13 @@ export interface PluginRouterOptions {
      * (multer, a raw body for signature checking, a proxied stream).
      */
     rawBody?: boolean;
+    /**
+     * Requests per minute one address may make to this plugin's public routes.
+     * Defaults to 120, which a proxied page loading its own scripts and images
+     * can pass on its own. Capped at 10000, and an admin's
+     * TERMIX_PLUGIN_PUBLIC_RATE_LIMIT wins over it.
+     */
+    publicRateLimit?: number;
 }
 /**
  * HTTP routes, served at /plugin-api/<id>/ by the main backend server.

package/dist/host/{chunk-LKN6OILD.js → chunk-G346FUE4.js}

@@ -52016,6 +52016,8 @@ var en_default = {
         pinAppRailDesc: "Keep the left sidebar app rail always expanded instead of expanding on hover",
         expandAppRailOnHover: "Expand App Rail on Hover",
         expandAppRailOnHoverDesc: "Allow the left sidebar app rail to expand when the pointer moves over it",
+        appRailHoverPushesContent: "Push content when it expands",
+        appRailHoverPushesContentDesc: "Make room for the expanded rail instead of opening it over the page. Open sessions, like remote desktop, resize each time",
         showPinAppRailButton: "Show Pin App Rail Button",
         showPinAppRailButtonDesc: "Show a button in the app rail to pin it open. Off by default.",
         settingsNavigation: "Navigation",
@@ -53584,7 +53586,7 @@ async function pluginWsUrl(pluginId, path2, options2 = {}) {
   }
   const token = await fetchSocketTicket() ?? localStorage.getItem("jwt");
   const protocols2 = websocketAuthProtocols(token);
-  const devProxy = !define_import_meta_env_default.VITE_API_HOST && (window.location.port === "3000" || window.location.port === "5173");
+  const devProxy = !define_import_meta_env_default.VITE_API_HOST;
   const wsProtocol = window.location.protocol === "https:" ? "wss" : "ws";
   if (devProxy) {
     return {

package/dist/host/testing-host.js

@@ -40,7 +40,7 @@ import {
   setShellCallbacks,
   setShellHosts,
   setShellLayoutProvider
-} from "./chunk-LKN6OILD.js";
+} from "./chunk-G346FUE4.js";
 import {
   setPermissionsForTesting
 } from "./chunk-DIOJ3KW2.js";

package/dist/host/ui.js

@@ -139,7 +139,7 @@ import {
   useSurfaceKind,
   useTheme,
   verifySecondFactor
-} from "./chunk-LKN6OILD.js";
+} from "./chunk-G346FUE4.js";
 import "./chunk-DIOJ3KW2.js";
 import {
   TabProvider,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@termix-ssh/plugin-sdk",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "The contract between Termix core and a plugin: types, the capability catalog and the manifest schema.",
   "license": "Apache-2.0",
   "repository": {