@wrongstack/webui 0.5.3 → 0.5.6

package/dist/server/index.js

@@ -302,6 +302,20 @@ async function startWebUI(opts = {}) {
   });
   const wssSecondary = wsHost === "127.0.0.1" ? new WebSocketServer({ port: wsPort, host: "::1", verifyClient }) : null;
   const clients = /* @__PURE__ */ new Map();
+  const RATE_LIMIT_MESSAGES = 60;
+  const RATE_LIMIT_WINDOW_MS = 6e4;
+  const rateLimits = /* @__PURE__ */ new Map();
+  function checkRateLimit(ws) {
+    const now = Date.now();
+    const limit = rateLimits.get(ws);
+    if (!limit || now > limit.resetAt) {
+      rateLimits.set(ws, { count: 1, resetAt: now + RATE_LIMIT_WINDOW_MS });
+      return true;
+    }
+    if (limit.count >= RATE_LIMIT_MESSAGES) return false;
+    limit.count++;
+    return true;
+  }
   let runLock = null;
   console.log(
     `[WebUI] WebSocket server running on ws://${wsHost}:${wsPort}` + (wssSecondary ? ` (and ws://[::1]:${wsPort})` : "")
@@ -415,13 +429,23 @@ async function startWebUI(opts = {}) {
     }
   }
   const handleConnection = (ws) => {
-    const client = { ws, sessionId: session.id };
+    const client = { ws, sessionId: session.id, connectedAt: Date.now() };
     clients.set(ws, client);
     console.log("[WebUI] Client connected, total:", clients.size);
     void sessionStartPayload().then((payload) => {
       send(ws, { type: "session.start", payload });
     });
     ws.on("message", async (data) => {
+      if (!checkRateLimit(ws)) {
+        send(ws, {
+          type: "error",
+          payload: {
+            phase: "rate_limit",
+            message: "Too many messages. Please wait before sending more."
+          }
+        });
+        return;
+      }
       try {
         const msg = JSON.parse(data.toString());
         await handleMessage(ws, client, msg);
@@ -431,6 +455,7 @@ async function startWebUI(opts = {}) {
     });
     ws.on("close", () => {
       clients.delete(ws);
+      rateLimits.delete(ws);
       console.log("[WebUI] Client disconnected, total:", clients.size);
       if (pendingConfirms.size > 0) {
         for (const [id, resolve] of pendingConfirms) {
@@ -1007,11 +1032,64 @@ async function startWebUI(opts = {}) {
         break;
       }
       case "todos.clear": {
-        context.todos.length = 0;
+        context.state.replaceTodos([]);
         sendResult(ws, true, "Todos cleared");
         broadcast({ type: "todos.updated", payload: { todos: [] } });
         break;
       }
+      case "plan.get": {
+        const planPath = context.meta["plan.path"];
+        if (typeof planPath === "string" && planPath) {
+          try {
+            const { loadPlan } = await import("@wrongstack/core");
+            const plan = await loadPlan(planPath);
+            send(ws, {
+              type: "plan.updated",
+              payload: { plan: plan ?? { version: 1, sessionId: session.id, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), items: [] } }
+            });
+          } catch {
+            send(ws, {
+              type: "plan.updated",
+              payload: { plan: { version: 1, sessionId: session.id, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), items: [] } }
+            });
+          }
+        } else {
+          send(ws, {
+            type: "plan.updated",
+            payload: { plan: null, error: "Plan storage is not configured for this session." }
+          });
+        }
+        break;
+      }
+      case "plan.template_use": {
+        const { template } = msg.payload;
+        const planPath = context.meta["plan.path"];
+        if (typeof planPath !== "string" || !planPath) {
+          sendResult(ws, false, "Plan storage is not configured for this session.");
+          break;
+        }
+        try {
+          const { getPlanTemplate, loadPlan, savePlan, emptyPlan, addPlanItem, formatPlan } = await import("@wrongstack/core");
+          const tpl = getPlanTemplate(template);
+          if (!tpl) {
+            sendResult(ws, false, `Unknown template "${template}".`);
+            break;
+          }
+          let plan = await loadPlan(planPath) ?? emptyPlan(session.id);
+          for (const item of tpl.items) {
+            ({ plan } = addPlanItem(plan, item.title, item.details));
+          }
+          await savePlan(planPath, plan);
+          sendResult(ws, true, `Applied template "${tpl.name}" \u2014 ${tpl.items.length} items added.`);
+          broadcast({
+            type: "plan.updated",
+            payload: { plan }
+          });
+        } catch (err) {
+          sendResult(ws, false, err instanceof Error ? err.message : String(err));
+        }
+        break;
+      }
       case "files.list": {
         const payload = msg.payload ?? {};
         const query = (payload.query ?? "").toLowerCase();