neoagent 2.4.2-beta.0 → 2.4.2-beta.2

package/server/admin/index.html

@@ -819,6 +819,13 @@
         Providers
       </button>
 
+      <button class="nav-item" data-page="models" onclick="showPage('models',this)">
+        <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
+          <path fill-rule="evenodd" d="M2 10a8 8 0 1116 0 8 8 0 01-16 0zm8-6a6 6 0 100 12 6 6 0 000-12zm-3 7a1 1 0 011-1h4a1 1 0 011 1v1a1 1 0 01-1 1H8a1 1 0 01-1-1v-1z" clip-rule="evenodd"/>
+        </svg>
+        Models
+      </button>
+
       <button class="nav-item" data-page="config" onclick="showPage('config',this)">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M11.49 3.17c-.38-1.56-2.6-1.56-2.98 0a1.532 1.532 0 01-2.286.948c-1.372-.836-2.942.734-2.106 2.106.54.886.061 2.042-.947 2.287-1.561.379-1.561 2.6 0 2.978a1.532 1.532 0 01.947 2.287c-.836 1.372.734 2.942 2.106 2.106a1.532 1.532 0 012.287.947c.379 1.561 2.6 1.561 2.978 0a1.533 1.533 0 012.287-.947c1.372.836 2.942-.734 2.106-2.106a1.533 1.533 0 01.947-2.287c1.561-.379 1.561-2.6 0-2.978a1.532 1.532 0 01-.947-2.287c.836-1.372-.734-2.942-2.106-2.106a1.532 1.532 0 01-2.287-.947zM10 13a3 3 0 100-6 3 3 0 000 6z" clip-rule="evenodd"/>
@@ -828,11 +835,6 @@
     </nav>
 
     <div class="sidebar-footer">
-      <div class="sidebar-legal">
-        <a href="/legal.html#overview" target="_blank" rel="noopener">Privacy Policy</a>
-        <span>·</span>
-        <a href="/legal.html#legal-notice" target="_blank" rel="noopener">Legal Notice</a>
-      </div>
       <button class="nav-item btn-danger" onclick="signOut()">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M3 3a1 1 0 00-1 1v12a1 1 0 102 0V4a1 1 0 00-1-1zm10.293 9.293a1 1 0 001.414 1.414l3-3a1 1 0 000-1.414l-3-3a1 1 0 10-1.414 1.414L14.586 9H7a1 1 0 100 2h7.586l-1.293 1.293z" clip-rule="evenodd"/>
@@ -988,6 +990,24 @@
       </div>
     </section>
 
+    <!-- Models -->
+    <section id="page-models" class="page" aria-label="Models">
+      <div class="page-header">
+        <div>
+          <h1 class="page-title">AI Models</h1>
+          <p class="page-subtitle">Enable or disable specific AI models globally for all users.</p>
+        </div>
+      </div>
+      <div class="content">
+        <div class="card">
+          <div class="toolbar" style="margin-bottom:14px; justify-content: flex-end;">
+            <button class="btn btn-primary" onclick="saveEnabledModels(this)">Save Model Configuration</button>
+          </div>
+          <div id="models-content"><div class="empty"><span class="spinner"></span></div></div>
+        </div>
+      </div>
+    </section>
+
     <!-- Configuration -->
     <section id="page-config" class="page" aria-label="Configuration">
       <div class="page-header">

package/server/admin/users.js

@@ -71,6 +71,10 @@ function renderUsersTable(el, users) {
           <td style="font-family:var(--font-mono);font-size:12px;">${fmtBytes(u.storage_bytes)}</td>
           <td>
             <div style="display:flex;gap:6px;justify-content:flex-end;">
+              <button class="btn btn-ghost" style="padding:5px 10px;font-size:11px;"
+                onclick="editRateLimits('${esc(u.id)}','${esc(u.username)}')" title="Edit Rate Limits">
+                Limits
+              </button>
               <button class="btn btn-ghost" style="padding:5px 10px;font-size:11px;"
                 onclick="forceLogout('${esc(u.id)}','${esc(u.username)}',this)" title="Revoke all sessions">
                 Logout
@@ -145,3 +149,72 @@ function fmtDate(iso) {
     return new Date(iso).toLocaleDateString(undefined, { year: 'numeric', month: 'short', day: 'numeric' });
   } catch { return iso; }
 }
+
+async function editRateLimits(id, username) {
+  try {
+    const res = await api(`/admin/api/users/${id}/rate-limits`).then(r => r.json());
+    const limits = res.limits || {};
+    const limit4h = limits.rate_limit_4h || '';
+    const limitWeekly = limits.rate_limit_weekly || '';
+    
+    const overlay = document.createElement('div');
+    overlay.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,0.6);display:flex;align-items:center;justify-content:center;z-index:9999;backdrop-filter:blur(2px);';
+    const modal = document.createElement('div');
+    modal.className = 'card';
+    modal.style.cssText = 'width:420px;background:var(--bg-primary);box-shadow:0 10px 40px rgba(0,0,0,0.5);border:1px solid var(--border);border-radius:12px;padding:24px;';
+    modal.innerHTML = `
+      <div style="font-size:16px;font-weight:700;color:var(--text);margin-bottom:6px;">Rate Limits</div>
+      <div style="font-size:13px;color:var(--text-muted);margin-bottom:20px;">Configure token limits for <span style="color:var(--text);font-weight:600;">@${esc(username)}</span>.</div>
+      
+      <div>
+        <label style="display:block;font-size:12px;font-weight:600;margin-bottom:8px;color:var(--text);text-transform:uppercase;letter-spacing:0.05em;">4-Hour Limit (Tokens)</label>
+        <input type="number" min="0" step="1" id="limit-4h" value="${limit4h}" placeholder="e.g. 500000" style="width:100%;padding:10px 12px;margin-bottom:6px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);">
+        <div style="font-size:11px;color:var(--text-muted);margin-bottom:20px;">Leave empty for no limit</div>
+        
+        <label style="display:block;font-size:12px;font-weight:600;margin-bottom:8px;color:var(--text);text-transform:uppercase;letter-spacing:0.05em;">Weekly Limit (Tokens)</label>
+        <input type="number" min="0" step="1" id="limit-weekly" value="${limitWeekly}" placeholder="e.g. 2000000" style="width:100%;padding:10px 12px;margin-bottom:6px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);">
+        <div style="font-size:11px;color:var(--text-muted);margin-bottom:24px;">Leave empty for no limit</div>
+      </div>
+      
+      <div style="display:flex;gap:12px;justify-content:flex-end;">
+        <button class="btn btn-ghost" id="btn-cancel" style="padding:8px 16px;">Cancel</button>
+        <button class="btn btn-primary" id="btn-save" style="padding:8px 16px;">Save Limits</button>
+      </div>
+    `;
+    overlay.appendChild(modal);
+    document.body.appendChild(overlay);
+    
+    document.getElementById('btn-cancel').onclick = () => overlay.remove();
+    document.getElementById('btn-save').onclick = async () => {
+      const v4 = document.getElementById('limit-4h').value;
+      const vw = document.getElementById('limit-weekly').value;
+      const parseLimit = (v) => {
+        if (!v) return null;
+        const n = Number(v);
+        return Number.isInteger(n) && n >= 0 ? n : null;
+      };
+      const bSave = document.getElementById('btn-save');
+      bSave.disabled = true;
+      bSave.textContent = 'Saving...';
+      try {
+        const payload = {
+          rate_limit_4h: parseLimit(v4),
+          rate_limit_weekly: parseLimit(vw)
+        };
+        const putRes = await api(`/admin/api/users/${id}/rate-limits`, {
+          method: 'PUT',
+          headers: {'Content-Type': 'application/json'},
+          body: JSON.stringify(payload)
+        });
+        if (!putRes.ok) throw new Error('Save failed');
+        overlay.remove();
+      } catch (err) {
+        alert('Failed to save rate limits');
+        bSave.disabled = false;
+        bSave.textContent = 'Save Limits';
+      }
+    };
+  } catch (err) {
+    alert('Failed to fetch rate limits');
+  }
+}

package/server/db/database.js

@@ -1862,6 +1862,23 @@ function migrateUsersDisplayName() {
 }
 migrateUsersDisplayName();
 
+function migrateUserRateLimits() {
+  try {
+    const columns = db.pragma('table_info(users)');
+    const hasRateLimit4h = columns.some((c) => c.name === 'rate_limit_4h');
+    if (!hasRateLimit4h) {
+      db.exec('ALTER TABLE users ADD COLUMN rate_limit_4h INTEGER');
+    }
+    const hasRateLimitWeekly = columns.some((c) => c.name === 'rate_limit_weekly');
+    if (!hasRateLimitWeekly) {
+      db.exec('ALTER TABLE users ADD COLUMN rate_limit_weekly INTEGER');
+    }
+  } catch (err) {
+    console.warn('Could not add rate_limit columns:', err.message);
+  }
+}
+migrateUserRateLimits();
+
 function migrateIngestionDocumentsConnectionId() {
   // connection_id was initially nullable; NULL breaks the UNIQUE dedup constraint.
   // Coerce any existing NULLs to 0 so the unique index works as intended.

package/server/http/static.js

@@ -80,7 +80,6 @@ function registerStaticRoutes(app) {
   // Landing page at /
   app.use(express.static(LANDING_DIR));
   app.get('/', (req, res) => res.sendFile(path.join(LANDING_DIR, 'index.html')));
-  app.get('/legal.html', (req, res) => res.sendFile(path.join(LANDING_DIR, 'legal.html')));
 }
 
 function serveFlutterApp(req, res) {

package/server/public/.last_build_id

@@ -1 +1 @@
-fffcffcece223938c04c1b5ec10b61c5
+69851219011d2a9c760c214e28b850a0

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"c416acfeb8126e097f758c664aaa3da929e27d
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "248735873" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "3511630357" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });