Add express-rate-limit to POST /api/generate with 5 req/min per IP to prevent AI cost runaway

pook commented

2026-04-08 23:31:16 -04:00

Owner

Issue #99 (rate limiting on /api/generate) exists but has no PR and the broader scope may be why. This is a minimal implementation.

Implement:

Install express-rate-limit as a dependency
Create src/middleware/rate-limit.ts with a limiter configured for: windowMs=60000, max=5, standardHeaders=true, legacyHeaders=false
Apply ONLY to POST /api/generate route
Return 429 with JSON body: {error: 'Too many requests', retryAfter: }
Add integration test: send 6 rapid POST requests to /api/generate, assert first 5 return 200/401 (depending on auth), 6th returns 429

Acceptance criteria:

6th request within 60s window gets 429
Response includes Retry-After header
Other routes are NOT rate-limited
Rate limit resets after window expires
Test file: tests/rate-limit.test.ts

Generated by CEO Planner (priority: 2)

Issue #99 (rate limiting on /api/generate) exists but has no PR and the broader scope may be why. This is a minimal implementation. Implement: 1. Install express-rate-limit as a dependency 2. Create src/middleware/rate-limit.ts with a limiter configured for: windowMs=60000, max=5, standardHeaders=true, legacyHeaders=false 3. Apply ONLY to POST /api/generate route 4. Return 429 with JSON body: {error: 'Too many requests', retryAfter: <seconds>} 5. Add integration test: send 6 rapid POST requests to /api/generate, assert first 5 return 200/401 (depending on auth), 6th returns 429 Acceptance criteria: - 6th request within 60s window gets 429 - Response includes Retry-After header - Other routes are NOT rate-limited - Rate limit resets after window expires - Test file: tests/rate-limit.test.ts --- *Generated by CEO Planner (priority: 2)*

pook added the

agent-task

label

2026-04-08 23:31:16 -04:00

pook referenced this issue from a pull request that will close it,

2026-04-08 23:34:57 -04:00

[Agent] Issue #170: issue 99 rate limiting on apigenerate ex #172

agent-bot referenced this issue from a commit

2026-04-08 23:34:59 -04:00

feat: issue #170 issue-99-rate-limiting-on-apigenerate-ex (agent task agent-ta)

pook commented

2026-04-09 05:33:48 -04:00

Author

Owner

⚠️ Stale Task Alert — This task has been open for 6h with no associated PR.

Possible causes:

Worker failed to execute (check logs)
Claude CLI produced no changes
Task may be too complex for single-session execution

The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped.

— CEO Planner (automated)

⚠️ **Stale Task Alert** — This task has been open for 6h with no associated PR. Possible causes: - Worker failed to execute (check logs) - Claude CLI produced no changes - Task may be too complex for single-session execution The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped. *— CEO Planner (automated)*

pook commented

2026-04-09 05:45:02 -04:00

Author

Owner

⚠️ Stale Task Alert — This task has been open for 6h with no associated PR.

Possible causes:

Worker failed to execute (check logs)
Claude CLI produced no changes
Task may be too complex for single-session execution

The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped.

— CEO Planner (automated)

⚠️ **Stale Task Alert** — This task has been open for 6h with no associated PR. Possible causes: - Worker failed to execute (check logs) - Claude CLI produced no changes - Task may be too complex for single-session execution The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped. *— CEO Planner (automated)*

pook commented

2026-04-09 05:50:52 -04:00

Author

Owner

⚠️ Stale Task Alert — This task has been open for 6h with no associated PR.

Possible causes:

Worker failed to execute (check logs)
Claude CLI produced no changes
Task may be too complex for single-session execution

The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped.

— CEO Planner (automated)

⚠️ **Stale Task Alert** — This task has been open for 6h with no associated PR. Possible causes: - Worker failed to execute (check logs) - Claude CLI produced no changes - Task may be too complex for single-session execution The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped. *— CEO Planner (automated)*

pook commented

2026-04-09 06:07:00 -04:00

Author

Owner

⚠️ Stale Task Alert — This task has been open for 7h with no associated PR.

Possible causes:

Worker failed to execute (check logs)
Claude CLI produced no changes
Task may be too complex for single-session execution

The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped.

— CEO Planner (automated)

⚠️ **Stale Task Alert** — This task has been open for 7h with no associated PR. Possible causes: - Worker failed to execute (check logs) - Claude CLI produced no changes - Task may be too complex for single-session execution The CEO planner will re-evaluate this task. If it remains stale for 24h+, it will be closed and re-scoped. *— CEO Planner (automated)*

pook referenced this issue

2026-04-09 06:08:04 -04:00

Close 10 stale tasks that have matching PRs or duplicate scope #251

pook commented

2026-04-09 06:12:21 -04:00

Author

Owner

Closing as duplicate of #99 (rate limiting).

pook closed this issue

2026-04-09 06:12:21 -04:00

pook referenced this issue

2026-04-09 06:12:29 -04:00