@wraps.dev/cli 0.3.3 → 0.3.4

package/dist/cli.js

@@ -9,11 +9,11 @@ var __export = (target, all3) => {
     __defProp(target, name, { get: all3[name], enumerable: true });
 };
 
-// ../../node_modules/.pnpm/tsup@8.5.0_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.8.3/node_modules/tsup/assets/esm_shims.js
+// ../../node_modules/.pnpm/tsup@8.5.0_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js
 import path from "path";
 import { fileURLToPath } from "url";
 var init_esm_shims = __esm({
-  "../../node_modules/.pnpm/tsup@8.5.0_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.8.3/node_modules/tsup/assets/esm_shims.js"() {
+  "../../node_modules/.pnpm/tsup@8.5.0_jiti@2.6.1_postcss@8.5.6_tsx@4.20.6_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js"() {
     "use strict";
   }
 });
@@ -1536,6 +1536,7 @@ import {
   MailManagerClient as MailManagerClient2,
   StartArchiveSearchCommand
 } from "@aws-sdk/client-mailmanager";
+import DOMPurify from "isomorphic-dompurify";
 import { simpleParser } from "mailparser";
 function extractArchiveId(archiveArnOrId) {
   if (archiveArnOrId.startsWith("arn:")) {
@@ -4577,6 +4578,26 @@ async function startConsoleServer(config) {
   const app = express();
   const authToken = crypto.randomBytes(32).toString("hex");
   app.use(express.json());
+  const requestCounts = /* @__PURE__ */ new Map();
+  const RATE_LIMIT_WINDOW = 60 * 1e3;
+  const RATE_LIMIT_MAX_REQUESTS = 1e3;
+  app.use((req, res, next) => {
+    const ip = req.ip || req.socket.remoteAddress || "unknown";
+    const now = Date.now();
+    const record = requestCounts.get(ip);
+    if (!record || now > record.resetTime) {
+      requestCounts.set(ip, { count: 1, resetTime: now + RATE_LIMIT_WINDOW });
+      next();
+    } else if (record.count < RATE_LIMIT_MAX_REQUESTS) {
+      record.count++;
+      next();
+    } else {
+      res.status(429).json({
+        error: "Too many requests, please slow down",
+        retryAfter: Math.ceil((record.resetTime - now) / 1e3)
+      });
+    }
+  });
   app.use((_req, res, next) => {
     res.setHeader("X-Frame-Options", "DENY");
     res.setHeader("X-Content-Type-Options", "nosniff");