neoagent 2.4.2-beta.1 → 2.4.2-beta.3

package/flutter_app/lib/main_account_settings.dart

@@ -123,7 +123,7 @@ class _PasswordStrengthIndicator extends StatelessWidget {
   }
 }
 
-enum AccountSettingsTab { account, security }
+enum AccountSettingsTab { account, usage, security }
 
 class AccountSettingsPanel extends StatefulWidget {
   const AccountSettingsPanel({
@@ -355,6 +355,8 @@ class _AccountSettingsPanelState extends State<AccountSettingsPanel> {
     switch (_selectedTab) {
       case AccountSettingsTab.account:
         return _buildAccountPanel();
+      case AccountSettingsTab.usage:
+        return _buildUsagePanel();
       case AccountSettingsTab.security:
         return _buildSecurityPanel();
     }
@@ -593,6 +595,133 @@ class _AccountSettingsPanelState extends State<AccountSettingsPanel> {
     );
   }
 
+  String _formatTokens(int amount) {
+    if (amount >= 1000000) {
+      final value = amount / 1000000;
+      return '${value == value.truncateToDouble() ? value.toInt() : value.toStringAsFixed(1)}M';
+    }
+    if (amount >= 1000) {
+      final value = amount / 1000;
+      return '${value == value.truncateToDouble() ? value.toInt() : value.toStringAsFixed(1)}k';
+    }
+    return amount.toString();
+  }
+
+  Widget _buildUsagePanel() {
+    if (widget.controller.isLoadingAccountSettings) {
+      return const Center(
+        child: Padding(
+          padding: EdgeInsets.all(40),
+          child: CircularProgressIndicator(),
+        ),
+      );
+    }
+    
+    final usage = widget.controller.usageAndLimits;
+    if (usage == null) {
+      return Center(
+        child: Padding(
+          padding: const EdgeInsets.all(40),
+          child: Column(
+            mainAxisSize: MainAxisSize.min,
+            children: <Widget>[
+              Icon(Icons.error_outline, size: 48, color: _textSecondary),
+              const SizedBox(height: 16),
+              const Text('Could not load usage data.'),
+              const SizedBox(height: 16),
+              FilledButton(
+                onPressed: widget.controller.refreshAccountSettings,
+                child: const Text('Retry'),
+              ),
+            ],
+          ),
+        ),
+      );
+    }
+
+    Widget buildStatBox(String label, int current, int? limit) {
+      final double progress = limit != null
+          ? (limit <= 0 ? 1.0 : (current / limit).clamp(0.0, 1.0))
+          : 0.0;
+      final bool nearLimit = progress > 0.8;
+      
+      return Container(
+        width: double.infinity,
+        padding: const EdgeInsets.all(20),
+        decoration: BoxDecoration(
+          color: _bgSecondary,
+          borderRadius: BorderRadius.circular(16),
+          border: Border.all(color: nearLimit ? _warning.withValues(alpha: 0.5) : _borderLight),
+        ),
+        child: Column(
+          crossAxisAlignment: CrossAxisAlignment.start,
+          children: <Widget>[
+            Text(
+              label,
+              style: TextStyle(fontSize: 16, fontWeight: FontWeight.w600),
+            ),
+            const SizedBox(height: 12),
+            Row(
+              children: <Widget>[
+                Text(
+                  _formatTokens(current),
+                  style: TextStyle(
+                    fontSize: 28,
+                    fontWeight: FontWeight.w800,
+                    color: nearLimit ? _warning : null,
+                  ),
+                ),
+                Text(
+                  ' tokens used',
+                  style: TextStyle(color: _textSecondary, fontSize: 14),
+                ),
+                const Spacer(),
+                if (limit != null)
+                  Text(
+                    'Limit: ${_formatTokens(limit)}',
+                    style: TextStyle(color: _textMuted, fontSize: 13),
+                  )
+                else
+                  Text(
+                    'No limit set',
+                    style: TextStyle(color: _textMuted, fontSize: 13),
+                  ),
+              ],
+            ),
+            if (limit != null) ...<Widget>[
+              const SizedBox(height: 16),
+              ClipRRect(
+                borderRadius: BorderRadius.circular(999),
+                child: LinearProgressIndicator(
+                  minHeight: 8,
+                  value: progress,
+                  backgroundColor: _border,
+                  valueColor: AlwaysStoppedAnimation<Color>(nearLimit ? _warning : _accent),
+                ),
+              ),
+            ],
+          ],
+        ),
+      );
+    }
+
+    return Column(
+      crossAxisAlignment: CrossAxisAlignment.start,
+      children: <Widget>[
+        const _SectionTitle('Usage & Limits'),
+        const SizedBox(height: 12),
+        Text(
+          'Keep track of your AI usage. Limits are enforced to ensure fair usage across the platform.',
+          style: TextStyle(color: _textSecondary, height: 1.4),
+        ),
+        const SizedBox(height: 24),
+        buildStatBox('Recent Usage (4 Hours)', usage.fourHourUsage, usage.fourHourLimit),
+        const SizedBox(height: 16),
+        buildStatBox('Weekly Usage', usage.weeklyUsage, usage.weeklyLimit),
+      ],
+    );
+  }
+
   Widget _buildSecurityPanel() {
     final controller = widget.controller;
     final twoFactorEnabled = controller.accountTwoFactor['enabled'] == true;
@@ -958,6 +1087,7 @@ class _AccountSettingsTabs extends StatelessWidget {
   Widget build(BuildContext context) {
     final buttons = <Widget>[
       _tabButton(AccountSettingsTab.account, Icons.person_outline, 'Account'),
+      _tabButton(AccountSettingsTab.usage, Icons.data_usage_outlined, 'Usage & Limits'),
       _tabButton(
         AccountSettingsTab.security,
         Icons.security_outlined,

package/flutter_app/lib/main_controller.dart

@@ -134,6 +134,7 @@ class NeoAgentController extends ChangeNotifier {
   Map<String, dynamic>? user;
   Map<String, dynamic> accountTwoFactor = const <String, dynamic>{};
   List<AccountSessionItem> accountSessions = const <AccountSessionItem>[];
+  AccountUsageAndLimits? usageAndLimits;
   List<AuthProviderCatalogItem> authProviders =
       const <AuthProviderCatalogItem>[];
   List<LinkedAuthProviderItem> linkedAuthProviders =
@@ -1658,6 +1659,7 @@ class NeoAgentController extends ChangeNotifier {
     user = null;
     accountTwoFactor = const <String, dynamic>{};
     accountSessions = const <AccountSessionItem>[];
+    usageAndLimits = null;
     linkedAuthProviders = const <LinkedAuthProviderItem>[];
     settings = const <String, dynamic>{};
     chatMessages = const <ChatEntry>[];
@@ -4924,6 +4926,9 @@ class NeoAgentController extends ChangeNotifier {
         backendUrl,
       );
       _applyAccountResponse(sessionsResponse);
+      usageAndLimits = AccountUsageAndLimits.fromJson(
+        await _backendClient.fetchAccountUsage(backendUrl),
+      );
     } catch (error) {
       errorMessage = _friendlyErrorMessage(error);
     } finally {

package/flutter_app/lib/main_models.dart

@@ -4077,3 +4077,27 @@ class ChatRichPayload {
   final List<ChatPayloadOption> options;
 }
 
+class AccountUsageAndLimits {
+  const AccountUsageAndLimits({
+    this.fourHourLimit,
+    this.weeklyLimit,
+    this.fourHourUsage = 0,
+    this.weeklyUsage = 0,
+  });
+
+  factory AccountUsageAndLimits.fromJson(Map<String, dynamic> json) {
+    final limits = json['limits'] is Map ? json['limits'] as Map : const {};
+    final usage = json['usage'] is Map ? json['usage'] as Map : const {};
+    return AccountUsageAndLimits(
+      fourHourLimit: int.tryParse(limits['fourHour']?.toString() ?? ''),
+      weeklyLimit: int.tryParse(limits['weekly']?.toString() ?? ''),
+      fourHourUsage: _asInt(usage['fourHour']),
+      weeklyUsage: _asInt(usage['weekly']),
+    );
+  }
+
+  final int? fourHourLimit;
+  final int? weeklyLimit;
+  final int fourHourUsage;
+  final int weeklyUsage;
+}

package/flutter_app/lib/src/backend_client.dart

@@ -224,6 +224,10 @@ class BackendClient {
     return getMap(baseUrl, '/api/account');
   }
 
+  Future<Map<String, dynamic>> fetchAccountUsage(String baseUrl) async {
+    return getMap(baseUrl, '/api/account/usage');
+  }
+
   Future<Map<String, dynamic>> updateAccountEmail({
     required String baseUrl,
     required String email,

package/landing/index.html

@@ -762,18 +762,6 @@ p { margin: 0; text-wrap: pretty; }
 .feature-list .chk { width: 22px; height: 22px; border-radius: 50%; flex-shrink: 0; display: grid; place-items: center; background: rgba(95,168,151,0.16); color: var(--teal); }
 .feature-list .chk svg { width: 13px; height: 13px; }
 
-/* ---------- privacy ---------- */
-.privacy-card { border-radius: 26px; background: var(--wash-b); border: 1px solid var(--line); padding: clamp(30px, 5vw, 64px); display: grid; grid-template-columns: 1.05fr 1fr; gap: clamp(28px, 4vw, 48px); align-items: center; }
-.privacy-card h2 { font-size: clamp(28px, 4vw, 46px); font-weight: 450; margin: 14px 0 16px; }
-.privacy-card > div > p { color: var(--ink-2); font-size: 17px; margin-bottom: 22px; }
-.privacy-list { display: grid; gap: 12px; }
-.privacy-list .row { display: flex; gap: 14px; align-items: flex-start; padding: 16px 18px; border-radius: 15px; background: var(--surface); border: 1px solid var(--line); transition: transform .25s var(--ease), box-shadow .25s var(--ease); }
-.privacy-list .row:hover { transform: translateX(4px); box-shadow: var(--shadow-sm); }
-.privacy-list .ico { width: 34px; height: 34px; flex-shrink: 0; border-radius: 10px; display: grid; place-items: center; background: rgba(95,168,151,0.16); color: var(--teal); }
-.privacy-list .ico svg { width: 18px; height: 18px; }
-.privacy-list b { display: block; font-weight: 700; font-size: 15.5px; margin-bottom: 3px; color: var(--ink); }
-.privacy-list span { font-size: 14px; color: var(--ink-3); }
-
 /* ---------- final CTA ---------- */
 .final { position: relative; text-align: center; overflow: hidden; border-radius: 30px; background: var(--wash-a); border: 1px solid var(--line); padding: clamp(52px, 9vw, 110px) var(--gutter); }
 .final h2 { font-size: clamp(32px, 5.4vw, 70px); font-weight: 440; margin-bottom: 20px; }
@@ -789,9 +777,9 @@ p { margin: 0; text-wrap: pretty; }
 .footer-left { flex: 1; min-width: 180px; }
 .footer-left .brand { margin-bottom: 10px; }
 .footer-left p { color: var(--ink-3); font-size: 14px; max-width: 220px; }
-.footer-nav, .footer-legal { display: flex; flex-direction: column; gap: 9px; }
-.footer-nav a, .footer-legal a { font-size: 14.5px; color: var(--ink-2); transition: color .2s; }
-.footer-nav a:hover, .footer-legal a:hover { color: var(--gold); }
+.footer-nav { display: flex; flex-direction: column; gap: 9px; }
+.footer-nav a { font-size: 14.5px; color: var(--ink-2); transition: color .2s; }
+.footer-nav a:hover { color: var(--gold); }
 .footer-bar { display: flex; justify-content: space-between; align-items: center; gap: 16px; flex-wrap: wrap; padding-top: 20px; border-top: 1px solid var(--line); font-size: 13px; color: var(--ink-3); }
 .footer-bar .ops { display: inline-flex; align-items: center; gap: 7px; color: var(--green); font-weight: 500; }
 .footer-bar .ops .d { width: 7px; height: 7px; border-radius: 50%; background: var(--green); }
@@ -832,7 +820,6 @@ p { margin: 0; text-wrap: pretty; }
   .mobile-menu .btn { margin-top: 12px; justify-content: center; }
   .split { grid-template-columns: 1fr; gap: 32px; }
   .split.rev .split-visual { order: 0; }
-  .privacy-card { grid-template-columns: 1fr; }
   .hero { padding-top: 120px; }
 }
 @media (max-width: 620px) {
@@ -900,7 +887,6 @@ p { margin: 0; text-wrap: pretty; }
       <a href="#features">Features</a>
       <a href="#channels">Channels</a>
       <a href="#how">How it works</a>
-      <a href="#privacy">Privacy</a>
     </nav>
     <div class="nav-right">
       <a class="signin" href="/app">Sign in</a>
@@ -914,7 +900,6 @@ p { margin: 0; text-wrap: pretty; }
     <a href="#features">Features</a>
     <a href="#channels">Channels</a>
     <a href="#how">How it works</a>
-    <a href="#privacy">Privacy</a>
     <a class="btn btn-primary" href="#cta">Get early access</a>
   </div>
 </header>
@@ -1066,14 +1051,12 @@ p { margin: 0; text-wrap: pretty; }
   </div>
   <div class="mtrack rev" style="--mdur:52s">
     <div class="mrow">
-      <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10Z"></path></svg>Privacy-first</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="2" y="3" width="20" height="15" rx="2"></rect><path d="M8 21h8M12 18v3" stroke-linecap="round"></path></svg>Remote browser</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="m12 3 2.2 5.8L20 11l-5.8 2.2L12 19l-2.2-5.8L4 11l5.8-2.2L12 3Z" stroke-linejoin="round"></path></svg>Automations</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 3a5 5 0 0 0-5 5c0 1-1 1.5-1 3a4 4 0 0 0 4 4v3M12 3a5 5 0 0 1 5 5c0 1 1 1.5 1 3a4 4 0 0 1-4 4v3" stroke-linecap="round"></path></svg>Memory</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="5" cy="12" r="2"></circle><circle cx="19" cy="5" r="2"></circle><circle cx="19" cy="19" r="2"></circle><path d="m7 12 10-6M7 12l10 6" stroke-linecap="round"></path></svg>Skills</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M14 7a4 4 0 0 0-5.4 5.4L4 17l3 3 4.6-4.6A4 4 0 0 0 17 10l-2.5 2.5L12 10l2.5-2.5Z" stroke-linejoin="round"></path></svg>Tools &amp; MCP</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M5 12h14M13 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round"></path></svg>Recordings</span>
-      <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10Z"></path></svg>Privacy-first</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="2" y="3" width="20" height="15" rx="2"></rect><path d="M8 21h8M12 18v3" stroke-linecap="round"></path></svg>Remote browser</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="m12 3 2.2 5.8L20 11l-5.8 2.2L12 19l-2.2-5.8L4 11l5.8-2.2L12 3Z" stroke-linejoin="round"></path></svg>Automations</span>
       <span class="chip"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 3a5 5 0 0 0-5 5c0 1-1 1.5-1 3a4 4 0 0 0 4 4v3M12 3a5 5 0 0 1 5 5c0 1 1 1.5 1 3a4 4 0 0 1-4 4v3" stroke-linecap="round"></path></svg>Memory</span>
@@ -1210,27 +1193,6 @@ p { margin: 0; text-wrap: pretty; }
   </div>
 </section>
 
-<!-- =================== PRIVACY =================== -->
-<section class="section-tight" id="privacy" data-screen-label="privacy">
-  <div class="wrap">
-    <div class="privacy-card reveal">
-      <div>
-        <span class="eyebrow" style="display:block;margin-bottom:14px;">Private by design</span>
-        <h2>Your data. Your rules.</h2>
-        <p>Run NeoAgent in our EU cloud or host it yourself — either way it's GDPR-first from the ground up. Nothing leaves your control unless you allow it.</p>
-        <a class="btn btn-soft" href="legal.html" style="margin-top:4px;">Read our privacy &amp; legal notice
-          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M5 12h14M13 6l6 6-6 6" stroke-linecap="round" stroke-linejoin="round"></path></svg>
-        </a>
-      </div>
-      <div class="privacy-list">
-        <div class="row reveal" data-d="1"><span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 3 4 6v6c0 5 3.4 8 8 9 4.6-1 8-4 8-9V6l-8-3Z" stroke-linejoin="round"></path></svg></span><div><b>Cloud or self-hosted</b><span>EU cloud or your own hardware — your choice.</span></div></div>
-        <div class="row reveal" data-d="2"><span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="4" y="10" width="16" height="10" rx="2"></rect><path d="M8 10V7a4 4 0 0 1 8 0v3" stroke-linecap="round"></path></svg></span><div><b>GDPR-first</b><span>Access, portability, and the right to erasure built in.</span></div></div>
-        <div class="row reveal" data-d="3"><span class="ico"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M12 3v18M5 8l7-5 7 5M5 8v8l7 5 7-5V8" stroke-linejoin="round"></path></svg></span><div><b>Transparent</b><span>Every action logged. No hidden behavior.</span></div></div>
-      </div>
-    </div>
-  </div>
-</section>
-
 <!-- =================== FINAL CTA =================== -->
 <section class="section-tight" id="cta" data-screen-label="cta">
   <div class="wrap">
@@ -1275,8 +1237,6 @@ p { margin: 0; text-wrap: pretty; }
         <a href="https://neolabs-systems.github.io/NeoAgent/docs/">Documentation</a>
       </nav>
       <nav class="footer-legal">
-        <a href="legal.html#overview">Privacy Policy</a>
-        <a href="legal.html#legal-notice">Legal Notice</a>
         <a href="#">Contact</a>
       </nav>
     </div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.4.2-beta.1",
+  "version": "2.4.2-beta.3",
   "description": "Proactive personal AI agent with no limits",
   "license": "AGPL-3.0-only",
   "main": "server/index.js",

package/server/admin/admin.js

@@ -16,7 +16,7 @@ function showPage(page, btn) {
   if (btn) btn.classList.add('active');
   currentPage = page;
 
-  const loaders = { overview: loadHealth, logs: loadLogs, updates: loadVersion, config: loadConfig, providers: loadProviders, analytics: loadAnalytics, users: loadUsers, sql: loadSql, access: loadAccess };
+  const loaders = { overview: loadHealth, logs: loadLogs, updates: loadVersion, config: loadConfig, providers: loadProviders, models: loadModels, analytics: loadAnalytics, users: loadUsers, sql: loadSql, access: loadAccess };
   loaders[page]?.();
 }
 
@@ -326,6 +326,93 @@ async function clearProvider(key, btn) {
   }
 }
 
+// ── Models ─────────────────────────────────────────────────────────────────
+
+async function loadModels() {
+  const el = document.getElementById('models-content');
+  if (!el) return;
+  try {
+    const data = await api('/admin/api/models').then((r) => r.json());
+    const models = data.models || [];
+    const enabledModels = data.enabledModels || [];
+    
+    if (!models.length) { el.innerHTML = '<div class="empty">No models found</div>'; return; }
+    
+    // Sort models by provider, then label
+    models.sort((a, b) => {
+      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
+      return a.label.localeCompare(b.label);
+    });
+    
+    let html = `<table class="users-table">
+      <thead><tr>
+        <th style="width:40px;">Enabled</th>
+        <th>Model Name</th>
+        <th>Provider</th>
+        <th>Purpose</th>
+        <th>Price Tier</th>
+      </tr></thead>
+      <tbody>`;
+    
+    for (const m of models) {
+      // Checked if it's in the enabledModels list, OR if the list is empty (all enabled)
+      const isChecked = enabledModels.length === 0 || enabledModels.includes(m.id);
+      const rowOpacity = isChecked ? '1' : '0.5';
+      html += `
+        <tr style="opacity: ${rowOpacity}">
+          <td style="text-align:center;">
+            <input type="checkbox" class="model-cb" value="${esc(m.id)}" ${isChecked ? 'checked' : ''} onchange="this.closest('tr').style.opacity = this.checked ? '1' : '0.5'">
+          </td>
+          <td style="font-weight:600;color:var(--text);">${esc(m.label)}</td>
+          <td>${esc(m.provider)}</td>
+          <td><span class="badge badge-idle">${esc(m.purpose)}</span></td>
+          <td><span class="badge ${m.priceTier === 'free' ? 'badge-ok' : 'badge-idle'}">${esc(m.priceTier)}</span></td>
+        </tr>
+      `;
+    }
+    
+    html += \`</tbody></table>\`;
+    el.innerHTML = html;
+  } catch (err) {
+    if (err.message !== 'unauthorized') {
+      el.innerHTML = '<div class="empty">Failed to load models</div>';
+    }
+  }
+}
+
+async function saveEnabledModels(btn) {
+  const cbs = document.querySelectorAll('.model-cb');
+  if (!cbs.length) return;
+  
+  // If all are checked, we can save an empty list to mean "all enabled"
+  const allChecked = Array.from(cbs).every(cb => cb.checked);
+  const enabledModels = allChecked ? [] : Array.from(cbs).filter(cb => cb.checked).map(cb => cb.value);
+  
+  btn.disabled = true;
+  const original = btn.textContent;
+  btn.textContent = 'Saving…';
+  
+  try {
+    const res = await api('/admin/api/models/enabled', {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ enabledModels }),
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      alert(body.error || 'Failed to save');
+    } else {
+      btn.textContent = 'Saved!';
+      setTimeout(() => { btn.textContent = original; btn.disabled = false; }, 2000);
+      return;
+    }
+  } catch (err) {
+    if (err.message !== 'unauthorized') alert('Network error');
+  }
+  btn.disabled = false;
+  btn.textContent = original;
+}
+
 // ── Auto-refresh ───────────────────────────────────────────────────────────
 
 function startPolling() {

package/server/admin/index.html

@@ -819,6 +819,13 @@
         Providers
       </button>
 
+      <button class="nav-item" data-page="models" onclick="showPage('models',this)">
+        <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
+          <path fill-rule="evenodd" d="M2 10a8 8 0 1116 0 8 8 0 01-16 0zm8-6a6 6 0 100 12 6 6 0 000-12zm-3 7a1 1 0 011-1h4a1 1 0 011 1v1a1 1 0 01-1 1H8a1 1 0 01-1-1v-1z" clip-rule="evenodd"/>
+        </svg>
+        Models
+      </button>
+
       <button class="nav-item" data-page="config" onclick="showPage('config',this)">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M11.49 3.17c-.38-1.56-2.6-1.56-2.98 0a1.532 1.532 0 01-2.286.948c-1.372-.836-2.942.734-2.106 2.106.54.886.061 2.042-.947 2.287-1.561.379-1.561 2.6 0 2.978a1.532 1.532 0 01.947 2.287c-.836 1.372.734 2.942 2.106 2.106a1.532 1.532 0 012.287.947c.379 1.561 2.6 1.561 2.978 0a1.533 1.533 0 012.287-.947c1.372.836 2.942-.734 2.106-2.106a1.533 1.533 0 01.947-2.287c1.561-.379 1.561-2.6 0-2.978a1.532 1.532 0 01-.947-2.287c.836-1.372-.734-2.942-2.106-2.106a1.532 1.532 0 01-2.287-.947zM10 13a3 3 0 100-6 3 3 0 000 6z" clip-rule="evenodd"/>
@@ -828,11 +835,6 @@
     </nav>
 
     <div class="sidebar-footer">
-      <div class="sidebar-legal">
-        <a href="/legal.html#overview" target="_blank" rel="noopener">Privacy Policy</a>
-        <span>·</span>
-        <a href="/legal.html#legal-notice" target="_blank" rel="noopener">Legal Notice</a>
-      </div>
       <button class="nav-item btn-danger" onclick="signOut()">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M3 3a1 1 0 00-1 1v12a1 1 0 102 0V4a1 1 0 00-1-1zm10.293 9.293a1 1 0 001.414 1.414l3-3a1 1 0 000-1.414l-3-3a1 1 0 10-1.414 1.414L14.586 9H7a1 1 0 100 2h7.586l-1.293 1.293z" clip-rule="evenodd"/>
@@ -988,6 +990,24 @@
       </div>
     </section>
 
+    <!-- Models -->
+    <section id="page-models" class="page" aria-label="Models">
+      <div class="page-header">
+        <div>
+          <h1 class="page-title">AI Models</h1>
+          <p class="page-subtitle">Enable or disable specific AI models globally for all users.</p>
+        </div>
+      </div>
+      <div class="content">
+        <div class="card">
+          <div class="toolbar" style="margin-bottom:14px; justify-content: flex-end;">
+            <button class="btn btn-primary" onclick="saveEnabledModels(this)">Save Model Configuration</button>
+          </div>
+          <div id="models-content"><div class="empty"><span class="spinner"></span></div></div>
+        </div>
+      </div>
+    </section>
+
     <!-- Configuration -->
     <section id="page-config" class="page" aria-label="Configuration">
       <div class="page-header">

package/server/admin/users.js

@@ -71,6 +71,10 @@ function renderUsersTable(el, users) {
           <td style="font-family:var(--font-mono);font-size:12px;">${fmtBytes(u.storage_bytes)}</td>
           <td>
             <div style="display:flex;gap:6px;justify-content:flex-end;">
+              <button class="btn btn-ghost" style="padding:5px 10px;font-size:11px;"
+                onclick="editRateLimits('${esc(u.id)}','${esc(u.username)}')" title="Edit Rate Limits">
+                Limits
+              </button>
               <button class="btn btn-ghost" style="padding:5px 10px;font-size:11px;"
                 onclick="forceLogout('${esc(u.id)}','${esc(u.username)}',this)" title="Revoke all sessions">
                 Logout
@@ -145,3 +149,72 @@ function fmtDate(iso) {
     return new Date(iso).toLocaleDateString(undefined, { year: 'numeric', month: 'short', day: 'numeric' });
   } catch { return iso; }
 }
+
+async function editRateLimits(id, username) {
+  try {
+    const res = await api(`/admin/api/users/${id}/rate-limits`).then(r => r.json());
+    const limits = res.limits || {};
+    const limit4h = limits.rate_limit_4h || '';
+    const limitWeekly = limits.rate_limit_weekly || '';
+    
+    const overlay = document.createElement('div');
+    overlay.style.cssText = 'position:fixed;inset:0;background:rgba(0,0,0,0.6);display:flex;align-items:center;justify-content:center;z-index:9999;backdrop-filter:blur(2px);';
+    const modal = document.createElement('div');
+    modal.className = 'card';
+    modal.style.cssText = 'width:420px;background:var(--bg-primary);box-shadow:0 10px 40px rgba(0,0,0,0.5);border:1px solid var(--border);border-radius:12px;padding:24px;';
+    modal.innerHTML = `
+      <div style="font-size:16px;font-weight:700;color:var(--text);margin-bottom:6px;">Rate Limits</div>
+      <div style="font-size:13px;color:var(--text-muted);margin-bottom:20px;">Configure token limits for <span style="color:var(--text);font-weight:600;">@${esc(username)}</span>.</div>
+      
+      <div>
+        <label style="display:block;font-size:12px;font-weight:600;margin-bottom:8px;color:var(--text);text-transform:uppercase;letter-spacing:0.05em;">4-Hour Limit (Tokens)</label>
+        <input type="number" min="0" step="1" id="limit-4h" value="${limit4h}" placeholder="e.g. 500000" style="width:100%;padding:10px 12px;margin-bottom:6px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);">
+        <div style="font-size:11px;color:var(--text-muted);margin-bottom:20px;">Leave empty for no limit</div>
+        
+        <label style="display:block;font-size:12px;font-weight:600;margin-bottom:8px;color:var(--text);text-transform:uppercase;letter-spacing:0.05em;">Weekly Limit (Tokens)</label>
+        <input type="number" min="0" step="1" id="limit-weekly" value="${limitWeekly}" placeholder="e.g. 2000000" style="width:100%;padding:10px 12px;margin-bottom:6px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);">
+        <div style="font-size:11px;color:var(--text-muted);margin-bottom:24px;">Leave empty for no limit</div>
+      </div>
+      
+      <div style="display:flex;gap:12px;justify-content:flex-end;">
+        <button class="btn btn-ghost" id="btn-cancel" style="padding:8px 16px;">Cancel</button>
+        <button class="btn btn-primary" id="btn-save" style="padding:8px 16px;">Save Limits</button>
+      </div>
+    `;
+    overlay.appendChild(modal);
+    document.body.appendChild(overlay);
+    
+    document.getElementById('btn-cancel').onclick = () => overlay.remove();
+    document.getElementById('btn-save').onclick = async () => {
+      const v4 = document.getElementById('limit-4h').value;
+      const vw = document.getElementById('limit-weekly').value;
+      const parseLimit = (v) => {
+        if (!v) return null;
+        const n = Number(v);
+        return Number.isInteger(n) && n >= 0 ? n : null;
+      };
+      const bSave = document.getElementById('btn-save');
+      bSave.disabled = true;
+      bSave.textContent = 'Saving...';
+      try {
+        const payload = {
+          rate_limit_4h: parseLimit(v4),
+          rate_limit_weekly: parseLimit(vw)
+        };
+        const putRes = await api(`/admin/api/users/${id}/rate-limits`, {
+          method: 'PUT',
+          headers: {'Content-Type': 'application/json'},
+          body: JSON.stringify(payload)
+        });
+        if (!putRes.ok) throw new Error('Save failed');
+        overlay.remove();
+      } catch (err) {
+        alert('Failed to save rate limits');
+        bSave.disabled = false;
+        bSave.textContent = 'Save Limits';
+      }
+    };
+  } catch (err) {
+    alert('Failed to fetch rate limits');
+  }
+}

package/server/db/database.js

@@ -1862,6 +1862,23 @@ function migrateUsersDisplayName() {
 }
 migrateUsersDisplayName();
 
+function migrateUserRateLimits() {
+  try {
+    const columns = db.pragma('table_info(users)');
+    const hasRateLimit4h = columns.some((c) => c.name === 'rate_limit_4h');
+    if (!hasRateLimit4h) {
+      db.exec('ALTER TABLE users ADD COLUMN rate_limit_4h INTEGER');
+    }
+    const hasRateLimitWeekly = columns.some((c) => c.name === 'rate_limit_weekly');
+    if (!hasRateLimitWeekly) {
+      db.exec('ALTER TABLE users ADD COLUMN rate_limit_weekly INTEGER');
+    }
+  } catch (err) {
+    console.warn('Could not add rate_limit columns:', err.message);
+  }
+}
+migrateUserRateLimits();
+
 function migrateIngestionDocumentsConnectionId() {
   // connection_id was initially nullable; NULL breaks the UNIQUE dedup constraint.
   // Coerce any existing NULLs to 0 so the unique index works as intended.

package/server/http/static.js

@@ -80,7 +80,6 @@ function registerStaticRoutes(app) {
   // Landing page at /
   app.use(express.static(LANDING_DIR));
   app.get('/', (req, res) => res.sendFile(path.join(LANDING_DIR, 'index.html')));
-  app.get('/legal.html', (req, res) => res.sendFile(path.join(LANDING_DIR, 'legal.html')));
 }
 
 function serveFlutterApp(req, res) {

package/server/public/.last_build_id

@@ -1 +1 @@
-51db7b9df84b3e5c1c7c8099ea37acf8
+376fa02eacafdcb41cb88d165edcb99a

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"c416acfeb8126e097f758c664aaa3da929e27d
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "2675250729" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "2813237698" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });