fix(site): raise gateway-proxy rate limit so encrypted chat works

lib/rate-limit.ts

@@ -15,7 +15,13 @@ export interface RateLimitRule {
 /** Expensive routes fan out to chains/subgraphs or relay upstream; everything
  *  else is a cheap cached read. Matched by path prefix, first hit wins. */
 export const API_RULES: { prefix: string; rule: RateLimitRule }[] = [
-  { prefix: "/api/gw/", rule: { limit: 30, windowMs: 60_000 } },
+  // The gateway proxy is the encrypted-inference HOT PATH: ONE inference makes
+  // ~5 setup calls plus a relay-token poll of up to 30 requests (1/sec until the
+  // worker is ready), and the playground retries up to 3 workers. A low cap here
+  // 429s the token poll on a slow worker and the answer never streams back (the
+  // "nothing returned" bug). Give it real headroom; the upstream gateway has its
+  // own limits, this only stops gross abuse of the open proxy.
+  { prefix: "/api/gw/", rule: { limit: 600, windowMs: 60_000 } },
   { prefix: "/api/dao-", rule: { limit: 30, windowMs: 60_000 } },
   { prefix: "/api/operator-preview", rule: { limit: 30, windowMs: 60_000 } },
   { prefix: "/api/sdk-demo", rule: { limit: 20, windowMs: 60_000 } },

tests/unit/rate-limit.test.ts

@@ -4,11 +4,14 @@ import { consume, ruleFor, resetRateLimiter, API_RULES } from "@/lib/rate-limit"
 const RULE = { limit: 3, windowMs: 60_000 };
 
 describe("ruleFor", () => {
-  it("gives the gateway proxy, DAO scans, and operator preview the tight budget", () => {
-    for (const p of ["/api/gw/mainnet/api/models", "/api/dao-proposals", "/api/operator-preview"]) {
+  it("gives DAO scans and operator preview the tight budget", () => {
+    for (const p of ["/api/dao-proposals", "/api/operator-preview"]) {
       expect(ruleFor(p)?.limit).toBe(30);
     }
   });
+  it("gives the gateway proxy real headroom (one inference is ~35 calls incl. the token poll)", () => {
+    expect(ruleFor("/api/gw/mainnet/api/models")?.limit).toBe(600);
+  });
   it("covers every other api route with the default budget and skips pages", () => {
     expect(ruleFor("/api/network")?.limit).toBe(120);
     expect(ruleFor("/build/dao")).toBeNull();