Refactored actions, 'cast a spell' task now works

app/imports/api/engine/action/methods/updateAction.ts

@@ -2,6 +2,7 @@ import { ValidatedMethod } from 'meteor/mdg:validated-method';
 import EngineActions from '/imports/api/engine/action/EngineActions';
 import { assertEditPermission } from '/imports/api/sharing/sharingPermissions';
 import { getCreature } from '/imports/api/engine/loadCreatures';
+import { RateLimiterMixin } from 'ddp-rate-limiter-mixin';
 
 export const updateAction = new ValidatedMethod({
   name: 'actions.updateAction',
@@ -11,6 +12,11 @@ export const updateAction = new ValidatedMethod({
     if (path !== 'targetIds') throw new Meteor.Error('Can only update target ids');
     if (!Array.isArray(value)) throw new Meteor.Error('TargetIds must be an array');
   },
+  mixins: [RateLimiterMixin],
+  rateLimit: {
+    numRequests: 10,
+    timeInterval: 5000,
+  },
   run: async function ({ _id, path, value }: { _id: string, path: 'targetIds', value: string[] }) {
     const action = await EngineActions.findOneAsync(_id);
     if (!action) {