4runr-os 2.9.123 → 2.9.124

package/apps/gateway/src/middleware/ddos-protection.ts

@@ -212,6 +212,13 @@ function cleanup(): void {
 // Start cleanup interval
 setInterval(cleanup, CONFIG.CLEANUP_INTERVAL_MS);
 
+/** Lightweight probes used by CLI/TUI, load balancers, and Prometheus — must not trip per-second limits. */
+function isProbeExemptPath(method: string, rawUrl: string): boolean {
+  if (method !== 'GET') return false;
+  const path = (rawUrl.split('?')[0] || '').toLowerCase();
+  return path === '/health' || path === '/ready' || path === '/metrics';
+}
+
 /**
  * DDoS Protection Middleware
  */
@@ -219,6 +226,10 @@ export async function ddosProtection(
   request: FastifyRequest,
   reply: FastifyReply
 ): Promise<void> {
+  if (isProbeExemptPath(request.method, request.url)) {
+    return;
+  }
+
   const ip = getClientIP(request);
   const userAgent = request.headers['user-agent'] || 'unknown';
 

package/mk3-tui/src/ui/connection_portal.rs

@@ -373,9 +373,10 @@ fn render_content_area(f: &mut Frame, area: Rect, state: &AppState) {
         if !portal.activity_log.is_empty() {
             // Show error message first so user sees "port in use, try 3002", then activity log below
             use ratatui::layout::{Constraint, Direction, Layout};
+            // Give the error panel enough height so wrapped text does not visually collide with the log.
             let chunks = Layout::default()
                 .direction(Direction::Vertical)
-                .constraints([Constraint::Min(4), Constraint::Min(6)])
+                .constraints([Constraint::Min(12), Constraint::Min(6)])
                 .split(area);
             render_error(f, chunks[0], err_msg);
             render_activity_log(f, chunks[1], state);
@@ -496,6 +497,11 @@ fn render_error(f: &mut Frame, area: Rect, error: &str) {
         ("Port in use", error_msg.clone())
     } else if error_msg.contains("404") {
         ("Not the Gateway (404)", "Something is running at this URL but it did not respond as the 4Runr Gateway.\n\nThe process on this port may not be the Gateway. Stop it and start the Gateway (e.g. cd apps/gateway && npm start), or use a different URL.".to_string())
+    } else if error_msg.contains("429") || error_msg.to_lowercase().contains("too many requests") {
+        (
+            "Rate limited (429)",
+            "Something on this port returned HTTP 429 (too many requests).\n\nIf this is the 4Runr Gateway, wait a few seconds and press Enter to retry. Otherwise use another port (e.g. http://localhost:3002).".to_string(),
+        )
     } else if error_msg.contains("ECONNREFUSED") || error_msg.contains("Connection refused") {
         ("Connection Refused", "The Gateway server is not running or not accessible.\n\nStart the server and try again.".to_string())
     } else if error_msg.contains("ETIMEDOUT") || error_msg.contains("timeout") {
@@ -516,7 +522,7 @@ fn render_error(f: &mut Frame, area: Rect, error: &str) {
     let inner = block.inner(area);
     f.render_widget(block, area);
 
-    let wrap_w = inner.width.saturating_sub(4) as usize;
+    let wrap_w = inner.width.saturating_sub(2) as usize;
     let mut message_lines: Vec<Line> = Vec::new();
     for raw in display_msg.split('\n') {
         let t = raw.trim();
@@ -530,22 +536,30 @@ fn render_error(f: &mut Frame, area: Rect, error: &str) {
             )));
         }
     }
-    
-    let mut all_lines = vec![
-        Line::from(""),
-    ];
+
+    // Never draw more lines than fit inside the block (avoids garbled overlap on small panes).
+    let footer_h = 2u16;
+    let max_body = (inner.height).saturating_sub(footer_h).max(1) as usize;
+    if message_lines.len() > max_body {
+        message_lines.truncate(max_body.saturating_sub(1));
+        message_lines.push(Line::from(Span::styled(
+            "… (message truncated — resize taller or read Activity Log below)",
+            Style::default().fg(TEXT_DIM).bg(BG_PANEL),
+        )));
+    }
+
+    let mut all_lines = vec![Line::from("")];
     all_lines.extend(message_lines);
-    all_lines.extend(vec![
-        Line::from(""),
-        Line::from(Span::styled(
-            "Press Enter to retry or ESC to cancel",
-            Style::default().fg(TEXT_DIM)
-        )).alignment(Alignment::Center),
-    ]);
-    
+    all_lines.push(Line::from(""));
+    all_lines.push(Line::from(Span::styled(
+        "Press Enter to retry or ESC to cancel",
+        Style::default().fg(TEXT_DIM).bg(BG_PANEL),
+    )));
+
     let paragraph = Paragraph::new(all_lines)
         .style(Style::default().bg(BG_PANEL))
-        .alignment(Alignment::Center);
+        .alignment(Alignment::Left)
+        .wrap(Wrap { trim: true });
 
     f.render_widget(paragraph, inner);
 }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "4runr-os",
-  "version": "2.9.123",
+  "version": "2.9.124",
   "type": "module",
-  "description": "4Runr AI Agent OS - Secure terminal interface for AI agents. v2.9.123: Setup Portal preserves scan + linked banner; Connection Portal session-linked UI; Portal Monitoring /health+/ready+metrics. ⚠️ Pre-MVP / Development Phase",
+  "description": "4Runr AI Agent OS - Secure terminal interface for AI agents. v2.9.124: Gateway /health /ready /metrics exempt from DDoS rate limit; Connection Portal error UI + 429 hint. Prior: Setup soft-open, session-linked portal, monitoring health lines. ⚠️ Pre-MVP / Development Phase",
   "main": "dist/index.js",
   "bin": {
     "4runr": "dist/index.js",