feat: reduce limits

[karishnu]

Summary

Reduces rate limits for app creation and LLM calls to more restrictive values with 24-hour periods.

Changes

• App Creation: Reduced from 10 apps/4 hours to 3 apps/24 hours
• LLM Calls: Reduced from 500 calls/2 hours (1700 daily) to 250 calls/24 hours
• Standardized both rate limit periods to 24 hours

Motivation

Tighten rate limiting to reduce resource usage and prevent abuse.

Testing

• Verify rate limits are applied correctly for new app creation
• Verify LLM call limits work as expected
• Confirm BYOK users are still excluded from LLM rate limits

Breaking Changes

Users will experience significantly lower rate limits:

Limit Type	Before	After
App Creation	10/4h	3/24h
LLM Calls (period)	500/2h	250/24h
LLM Calls (daily)	1700	250

[github-actions]

Claude finished @karishnu's task in 1m 7s —— View job

---

Code Quality & Security Review

Recommendation: APPROVE ✅

PR Summary

Reduces rate limits for app creation and LLM calls to more restrictive values, standardizing both to 24-hour periods.

PR Description

• Updated: Yes
• Notes: Generated complete description with summary, changes, motivation, testing steps, and breaking changes table

Addressed Issues

• None identified (no linked issues)

Changes Overview

Config	Field	Before	After
appCreation	limit	10	3
appCreation	dailyLimit	10	3
appCreation	period	4 hours	24 hours
llmCalls	limit	500	250
llmCalls	dailyLimit	1700	250
llmCalls	period	2 hours	24 hours

Code Quality

• Critical: None
• High: None
• Medium: None
• Low: None

The changes are straightforward configuration value updates:

• Type safety is maintained
• Follows existing patterns in the codebase
• Indentation fixed (tabs instead of spaces for dailyLimit)

Security

• Critical: None
• High: None
• Medium: None
• Low: None

Reducing rate limits improves abuse prevention - this is a positive security change.

Testing

• Manual verification recommended:
  • Test app creation rate limiting (3 apps/24h)
  • Test LLM call rate limiting (250/24h)
  • Verify BYOK users remain excluded from LLM limits

Observation

With period now equal to 24 hours, the limit and dailyLimit fields serve similar purposes when set to the same value. This is intentional and correct behavior - limit controls the rolling window while dailyLimit is the hard daily cap.

Final Recommendation

Approve - Clean configuration change with no code quality or security issues. The significant reduction in limits is intentional per the PR title.

---

• Gather context and understand changes
• Check and update PR description
• Perform code quality review
• Perform security review
• Post final review summary

[ask-bonk]

UnknownError: TypeError: sdk.languageModel is not a function. (In 'sdk.languageModel(model.api.id)', 'sdk.languageModel' is undefined)

github run

[ask-bonk]

@karishnu Bonk workflow failed. Check the logs for details.

View workflow run · To retry, trigger Bonk again.