Fix question counter daily reset, rate-limit timer, and founding member pricing clarity

- chat-widget: session.count now resets on new UTC day (keeps client in sync with server's daily quota reset)
- chat-widget: fix rate-limit timer — wrong element IDs (neuron-demo-msgs → neuron-demo-messages) and wrong class (.neuron-msg-ai → .demo-msg-ai) meant the countdown never updated
- chat-widget: remove btn.disabled=false that immediately re-enabled the send button after rate-limiting
- main.el: add POST /api/admin/reset-rate-limits endpoint (requires NEURON_ADMIN_TOKEN, deletes all demo_rate_limits rows)
- pricing.el: clarify founding member card — software updates are free forever, inference is pay-per-use at founding member rate

.gitea/workflows/stage.yaml

@@ -82,7 +82,12 @@ jobs:
           echo "Changed files:"
           echo "$CHANGED"
           NON_ASSET=$(echo "$CHANGED" | grep -v '^src/assets/' | grep -v '^src/shares/' | grep -v '^src/index\.html' | grep -v '^src/about\.html' | grep -v '^src/terms\.html' | grep -v '^src/enterprise-terms\.html' | grep -v '^src/llms\.txt' | grep -v '^migrations/' | grep -v '^scripts/' | grep -v '^tests/' | grep -v '^\.gitea/' | grep -v '^$' || true)
-          if [ -z "$NON_ASSET" ] && [ "$CHANGED" != "unknown" ]; then
+          if [ -z "$CHANGED" ] || [ "$CHANGED" = "unknown" ]; then
+            # No diff (workflow_dispatch with no new commits, or git error).
+            # Registry may not have a stage-latest base image, so force full build.
+            echo "asset_only=false" >> "$GITHUB_OUTPUT"
+            echo "=> No changed files detected (workflow_dispatch?), forcing full build"
+          elif [ -z "$NON_ASSET" ]; then
             echo "asset_only=true" >> "$GITHUB_OUTPUT"
             echo "=> Asset-only change detected, will use fast path"
           else

Dockerfile.stage

@@ -9,6 +9,7 @@
 #
 # CI pre-build steps (in stage.yaml):
 #   - neuron-web: built by `elb build` → dist/neuron-landing
+# Last rebuilt: 2026-05-11
 
 FROM ubuntu:24.04
 

dist/elhtml_impl.c

@@ -1,3 +1,4 @@
+// elhtml_impl.c — El HTML element stubs.
 #include <stdint.h>
 #include <stdlib.h>
 #include "el_runtime.h"
@@ -19,11 +20,11 @@ el_val_t el_li(el_val_t attrs, el_val_t children);
 el_val_t el_p(el_val_t attrs, el_val_t children);
 el_val_t el_span(el_val_t attrs, el_val_t children);
 el_val_t el_form(el_val_t attrs, el_val_t children);
-el_val_t el_h1(el_val_t attrs, el_val_t text);
-el_val_t el_h2(el_val_t attrs, el_val_t text);
-el_val_t el_h3(el_val_t attrs, el_val_t text);
-el_val_t el_h4(el_val_t attrs, el_val_t text);
-el_val_t el_button(el_val_t attrs, el_val_t label);
+el_val_t el_h1(el_val_t attrs, el_val_t children);
+el_val_t el_h2(el_val_t attrs, el_val_t children);
+el_val_t el_h3(el_val_t attrs, el_val_t children);
+el_val_t el_h4(el_val_t attrs, el_val_t children);
+el_val_t el_button(el_val_t attrs, el_val_t children);
 el_val_t el_a(el_val_t href, el_val_t attrs, el_val_t children);
 el_val_t el_input(el_val_t type_attr, el_val_t attrs);
 el_val_t el_textarea(el_val_t attrs, el_val_t value);
@@ -176,43 +177,43 @@ el_val_t el_form(el_val_t attrs, el_val_t children) {
   return 0;
 }
 
-el_val_t el_h1(el_val_t attrs, el_val_t text) {
+el_val_t el_h1(el_val_t attrs, el_val_t children) {
   if (str_eq(attrs, EL_STR(""))) {
-    return el_str_concat(el_str_concat(EL_STR("<h1>"), el_escape(text)), EL_STR("</h1>"));
+    return el_str_concat(el_str_concat(EL_STR("<h1>"), children), EL_STR("</h1>"));
   }
-  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h1 "), attrs), EL_STR(">")), el_escape(text)), EL_STR("</h1>"));
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h1 "), attrs), EL_STR(">")), children), EL_STR("</h1>"));
   return 0;
 }
 
-el_val_t el_h2(el_val_t attrs, el_val_t text) {
+el_val_t el_h2(el_val_t attrs, el_val_t children) {
   if (str_eq(attrs, EL_STR(""))) {
-    return el_str_concat(el_str_concat(EL_STR("<h2>"), el_escape(text)), EL_STR("</h2>"));
+    return el_str_concat(el_str_concat(EL_STR("<h2>"), children), EL_STR("</h2>"));
   }
-  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h2 "), attrs), EL_STR(">")), el_escape(text)), EL_STR("</h2>"));
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h2 "), attrs), EL_STR(">")), children), EL_STR("</h2>"));
   return 0;
 }
 
-el_val_t el_h3(el_val_t attrs, el_val_t text) {
+el_val_t el_h3(el_val_t attrs, el_val_t children) {
   if (str_eq(attrs, EL_STR(""))) {
-    return el_str_concat(el_str_concat(EL_STR("<h3>"), el_escape(text)), EL_STR("</h3>"));
+    return el_str_concat(el_str_concat(EL_STR("<h3>"), children), EL_STR("</h3>"));
   }
-  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h3 "), attrs), EL_STR(">")), el_escape(text)), EL_STR("</h3>"));
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h3 "), attrs), EL_STR(">")), children), EL_STR("</h3>"));
   return 0;
 }
 
-el_val_t el_h4(el_val_t attrs, el_val_t text) {
+el_val_t el_h4(el_val_t attrs, el_val_t children) {
   if (str_eq(attrs, EL_STR(""))) {
-    return el_str_concat(el_str_concat(EL_STR("<h4>"), el_escape(text)), EL_STR("</h4>"));
+    return el_str_concat(el_str_concat(EL_STR("<h4>"), children), EL_STR("</h4>"));
   }
-  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h4 "), attrs), EL_STR(">")), el_escape(text)), EL_STR("</h4>"));
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<h4 "), attrs), EL_STR(">")), children), EL_STR("</h4>"));
   return 0;
 }
 
-el_val_t el_button(el_val_t attrs, el_val_t label) {
+el_val_t el_button(el_val_t attrs, el_val_t children) {
   if (str_eq(attrs, EL_STR(""))) {
-    return el_str_concat(el_str_concat(EL_STR("<button type=\"button\">"), el_escape(label)), EL_STR("</button>"));
+    return el_str_concat(el_str_concat(EL_STR("<button type=\"button\">"), children), EL_STR("</button>"));
   }
-  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<button type=\"button\" "), attrs), EL_STR(">")), el_escape(label)), EL_STR("</button>"));
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("<button type=\"button\" "), attrs), EL_STR(">")), children), EL_STR("</button>"));
   return 0;
 }
 

runtime/el_runtime.c

@@ -77,6 +77,23 @@ static _Thread_local int     _tl_arena_active = 0;
  * Allows serving PNGs and other binary files without strlen truncation. */
 static _Thread_local size_t  _tl_fs_read_len  = 0;
 
+/* Binary body side-channel for http_response().
+ *
+ * http_response() normally JSON-encodes the body via jb_emit_escaped(), which
+ * stops at the first null byte (C-string semantics). Binary files like PNGs
+ * contain null bytes as early as byte 8 (IHDR chunk length), causing truncation.
+ *
+ * When _tl_fs_read_len > 0 at the time http_response() is called, we skip
+ * JSON-encoding and instead:
+ *   1. malloc-copy the raw bytes here
+ *   2. write the sentinel string "__el_binary__" into the envelope body field
+ *   3. In http_send_response(), detect the sentinel and use these raw bytes
+ *
+ * Thread-local so each worker thread has independent storage.
+ * Lifecycle: set by http_response(), consumed (and freed) by http_send_response(). */
+static _Thread_local char*   _tl_binary_body = NULL;
+static _Thread_local size_t  _tl_binary_size = 0;
+
 static void el_arena_track(char* p) {
     if (!_tl_arena_active || !p) return;
     if (_tl_arena.count >= _tl_arena.cap) {
@@ -1536,10 +1553,22 @@ static void http_send_response(int fd, const char* body) {
     }
 
     const char* eff_body = is_envelope ? env_body : body;
+    int binary_side_channel = 0;
+
+    /* Binary side-channel: if the envelope body is the sentinel "__el_binary__",
+     * http_response() stored the real bytes in _tl_binary_body/_tl_binary_size.
+     * Substitute them here so http_send_all() sends the correct binary payload. */
+    if (is_envelope && env_body && strcmp(env_body, "__el_binary__") == 0
+            && _tl_binary_body && _tl_binary_size > 0) {
+        eff_body = _tl_binary_body;
+        binary_side_channel = 1;
+    }
+
     /* Use the real byte count from fs_read if available (handles binary files
      * with embedded null bytes — PNG, WOFF2, etc.). Fall back to strlen for
      * normal text/JSON responses where _tl_fs_read_len is 0. */
-    size_t blen = (_tl_fs_read_len > 0) ? _tl_fs_read_len : strlen(eff_body);
+    size_t blen = binary_side_channel ? _tl_binary_size
+                : (_tl_fs_read_len > 0) ? _tl_fs_read_len : strlen(eff_body);
     _tl_fs_read_len = 0;  /* consume — one-shot per response */
     int head_only = _tl_http_head_only;
 
@@ -1587,6 +1616,13 @@ static void http_send_response(int fd, const char* body) {
     if (env_parsed_root) el_release(env_parsed_root);
     free(env_body);
     free(hdrs.buf);
+
+    /* Release binary side-channel if it was used (or left over from an error). */
+    if (_tl_binary_body) {
+        free(_tl_binary_body);
+        _tl_binary_body = NULL;
+        _tl_binary_size = 0;
+    }
 }
 
 typedef struct {
@@ -1961,6 +1997,14 @@ el_val_t http_response(el_val_t status, el_val_t headers_json, el_val_t body) {
     const char* b = EL_CSTR(body);
     if (!b) b = "";
 
+    /* Capture binary length BEFORE clearing _tl_fs_read_len.
+     * If the body came from fs_read(), _tl_fs_read_len holds the real byte
+     * count. jb_emit_escaped() stops at the first NUL byte, so we cannot
+     * JSON-encode binary data directly. Instead we copy it to a thread-local
+     * side-channel and write the sentinel "__el_binary__" into the envelope.
+     * http_send_response() detects the sentinel and uses the side-channel. */
+    size_t binary_len = _tl_fs_read_len;
+
     /* Clear the fs_read binary-length hint: the envelope we're about to build
      * is a fresh JSON string, not the raw file bytes.  Without this reset,
      * http_worker would use the stale _tl_fs_read_len (= original file size)
@@ -1968,6 +2012,18 @@ el_val_t http_response(el_val_t status, el_val_t headers_json, el_val_t body) {
      * http_send_response and http_parse_envelope.                            */
     _tl_fs_read_len = 0;
 
+    if (binary_len > 0) {
+        /* Binary body path: store raw bytes in thread-local, emit sentinel. */
+        free(_tl_binary_body);        /* discard any stale binary from a prior error path */
+        _tl_binary_body = malloc(binary_len);
+        if (_tl_binary_body) {
+            memcpy(_tl_binary_body, b, binary_len);
+            _tl_binary_size = binary_len;
+        } else {
+            _tl_binary_size = 0;      /* malloc failed — fall through to empty body */
+        }
+    }
+
     JsonBuf out; jb_init(&out);
     jb_puts(&out, EL_HTTP_RESPONSE_TAG);  /* {"el_http_response":1 */
     jb_puts(&out, ",\"status\":");
@@ -1977,7 +2033,12 @@ el_val_t http_response(el_val_t status, el_val_t headers_json, el_val_t body) {
     jb_puts(&out, ",\"headers\":");
     jb_puts(&out, hj);
     jb_puts(&out, ",\"body\":");
-    jb_emit_escaped(&out, b);
+    if (binary_len > 0 && _tl_binary_body) {
+        /* Sentinel: http_send_response() will substitute the real bytes. */
+        jb_puts(&out, "\"__el_binary__\"");
+    } else {
+        jb_emit_escaped(&out, b);
+    }
     jb_putc(&out, '}');
     return el_wrap_str(out.buf);
 }

src/account.el

@@ -800,17 +800,11 @@ fn account_download_card() -> String {
     el_div(
         "class=\"card-dark\" style=\"border-top:3px solid var(--navy)\"",
         el_p("class=\"card-label\"", "Download") +
-        el_p("class=\"download-status\" style=\"color:var(--navy)\"", "Available now — macOS") +
-        el_p("class=\"download-title\"", "Neuron for Mac") +
-        el_p("class=\"download-body\"", "The macOS build (Apple Silicon) is ready to download now. Windows and Linux are coming soon. Your license key is in your launch email.") +
-        el_div(
-            "style=\"display:flex;gap:.75rem;flex-wrap:wrap;align-items:center\"",
-            el_a(
-                "https://downloads.neurontechnologies.ai/installers/Neuron-1.1.0-macos-arm64.dmg",
-                "class=\"btn-primary\" download",
-                account_signin_svg_download() + " Download for macOS"
-            ) +
-            el_a("/downloads", "class=\"btn-ghost\"", "All platforms →")
+        el_p("class=\"download-status\" style=\"color:var(--navy)\"", "Shipping within 30 days") +
+        el_p("class=\"download-title\"", "Neuron for Mac & Windows") +
+        el_p("class=\"download-body\"", "macOS and Windows simultaneously. You'll receive a download link and license key by email the moment it ships. Nothing to do right now.") +
+        el_button("type=\"button\" class=\"download-btn-disabled\" disabled aria-disabled=\"true\"",
+            account_signin_svg_download() + " Download arriving soon"
         )
     )
 }

src/checkout.el

@@ -98,7 +98,7 @@ fn checkout_page(plan: String, pub_key: String) -> String {
         el_li("", "Persistent memory - never resets")
         + el_li("", "Local inference via Ollama (coming)")
         + el_li("", "Bring your own API keys")
-        + el_li("", "Plugin marketplace access (coming soon)")
+        + el_li("", "3 marketplace plugins included")
         + el_li("", "Core built-in capabilities")
         + el_li("", "2 devices included")
     } else {
@@ -345,7 +345,31 @@ fn checkout_page(plan: String, pub_key: String) -> String {
 }
 
 fn checkout_style_html() -> String {
-    let css: String = ".checkout-plan-name {
+    let css: String = ".checkout-shell {
+  max-width: 980px;
+  margin: 0 auto;
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 4rem;
+  align-items: start;
+}
+.checkout-summary {
+  position: sticky;
+  top: 2rem;
+}
+.checkout-form-wrap {
+  min-width: 0;
+}
+@media (max-width: 860px) {
+  .checkout-shell {
+    grid-template-columns: 1fr;
+    gap: 2.5rem;
+  }
+  .checkout-summary {
+    position: static;
+  }
+}
+.checkout-plan-name {
   font-family: var(--head);
   font-size: clamp(1.5rem, 3vw, 2rem);
   font-weight: 600;

src/downloads.el

@@ -1,148 +0,0 @@
-// components/downloads.el - Public downloads page.
-//
-// Landing-styled inner page (page_open_seo + nav + content + footer +
-// page_close, assembled by main.el). Client-side OS detection via
-// navigator.platform highlights the visitor's platform and updates the
-// detected-OS banner. macOS is the shipping build; Windows and Linux are
-// linked but clearly marked "coming soon" per the current product state
-// (Windows chat not yet enabled, Linux soul backend not yet complete).
-
-from nav    import { nav }
-from footer import { footer }
-
-extern fn el_section(attrs: String, children: String) -> String
-extern fn el_div(attrs: String, children: String) -> String
-extern fn el_span(attrs: String, children: String) -> String
-extern fn el_h1(attrs: String, text: String) -> String
-extern fn el_p(attrs: String, children: String) -> String
-extern fn el_a(href: String, attrs: String, children: String) -> String
-
-// Scoped presentation. Uses the landing stylesheet's CSS variables
-// (--navy, --head, --body, --t2, --t3) so it inherits the site palette.
-// No # colors or quoted font names inline — routed through vars to stay
-// clear of the elc CSS tokenizer edge cases.
-fn dl_style() -> String {
-    "<style>" +
-    ".dl-wrap{max-width:960px}" +
-    ".dl-detected{font-size:.85rem;font-weight:500;color:var(--navy);margin:1.5rem 0 2.5rem;min-height:1.2em}" +
-    ".dl-card{padding:2rem}" +
-    ".dl-featured{border-top:3px solid var(--navy)}" +
-    ".dl-grid{display:grid;grid-template-columns:1fr 1fr;gap:1.5rem;margin-top:1.5rem}" +
-    "@media (max-width:720px){.dl-grid{grid-template-columns:1fr}}" +
-    ".dl-badge{display:inline-block;font-size:.6rem;font-weight:700;letter-spacing:.18em;text-transform:uppercase;padding:.35rem .7rem;border-radius:999px;margin-bottom:1rem}" +
-    ".dl-badge-ready{color:var(--navy);background:rgba(0,82,160,.10)}" +
-    ".dl-badge-soon{color:var(--t3);background:rgba(0,0,0,.05)}" +
-    ".dl-title{font-family:var(--head);font-size:1.4rem;font-weight:600;margin-bottom:.4rem}" +
-    ".dl-sub{font-family:var(--body);font-weight:300;font-size:.9rem;color:var(--t2);line-height:1.6;margin-bottom:1.25rem}" +
-    ".dl-note{font-size:.78rem;color:var(--t3);line-height:1.6;margin-top:1rem}" +
-    ".dl-btnrow{display:flex;gap:.75rem;flex-wrap:wrap;align-items:center}" +
-    "[data-detected=true]{box-shadow:0 0 0 2px rgba(0,82,160,.45);border-radius:2px}" +
-    "</style>"
-}
-
-fn dl_header() -> String {
-    el_p("class=\"label reveal\"", "Download") +
-    el_h1("class=\"display-lg reveal\" style=\"margin-top:.75rem\"", "Get Neuron.") +
-    el_div("class=\"navy-line-left reveal\" style=\"width:4rem;margin:1.5rem 0 2rem\"", "") +
-    el_p(
-        "class=\"dl-sub reveal\" style=\"max-width:34rem;font-size:1rem\"",
-        "Your AI that remembers you, running on your own machine. macOS is available to download today. Windows and Linux are on the way."
-    ) +
-    el_p("id=\"os-detected\" class=\"dl-detected reveal\"", "Detecting your platform&#8230;")
-}
-
-fn dl_mac_card() -> String {
-    el_div(
-        "id=\"card-mac\" class=\"card-dark dl-card dl-featured reveal\"",
-        el_span("class=\"dl-badge dl-badge-ready\"", "Available now") +
-        el_p("class=\"dl-title\"", "Neuron for macOS") +
-        el_p("class=\"dl-sub\"", "Apple Silicon (M1&#8211;M4). macOS 13 Ventura or later.") +
-        el_div(
-            "class=\"dl-btnrow\"",
-            el_a(
-                "https://downloads.neurontechnologies.ai/installers/Neuron-1.1.0-macos-arm64.dmg",
-                "class=\"btn-primary\" download",
-                "Download for macOS &#8594;"
-            )
-        ) +
-        el_p("class=\"dl-note\"", "Version 1.1.0 &middot; Apple Silicon &middot; .dmg")
-    )
-}
-
-fn dl_windows_card() -> String {
-    el_div(
-        "id=\"card-windows\" class=\"card-dark dl-card reveal\"",
-        el_span("class=\"dl-badge dl-badge-soon\"", "Coming soon") +
-        el_p("class=\"dl-title\"", "Neuron for Windows") +
-        el_p("class=\"dl-sub\"", "Windows 10 and 11 (x64).") +
-        el_div(
-            "class=\"dl-btnrow\"",
-            el_a(
-                "https://downloads.neurontechnologies.ai/installers/Neuron-1.1.0-windows-x64.msi",
-                "class=\"btn-ghost\" download",
-                "Download .msi"
-            )
-        ) +
-        el_p(
-            "class=\"dl-note\"",
-            "The Windows build is still landing &mdash; this link may not be live yet. Chat is not enabled on Windows in this release."
-        )
-    )
-}
-
-fn dl_linux_card() -> String {
-    el_div(
-        "id=\"card-linux\" class=\"card-dark dl-card reveal\"",
-        el_span("class=\"dl-badge dl-badge-soon\"", "Coming soon") +
-        el_p("class=\"dl-title\"", "Neuron for Linux") +
-        el_p("class=\"dl-sub\"", "Debian / Ubuntu (.deb) or portable (.AppImage), x64.") +
-        el_div(
-            "class=\"dl-btnrow\"",
-            el_a(
-                "https://downloads.neurontechnologies.ai/installers/Neuron-1.1.0-linux-x64.deb",
-                "class=\"btn-ghost\" download",
-                "Download .deb"
-            ) +
-            el_a(
-                "https://downloads.neurontechnologies.ai/installers/Neuron-1.1.0-linux-x64.AppImage",
-                "class=\"btn-ghost\" download",
-                "Download .AppImage"
-            )
-        ) +
-        el_p(
-            "class=\"dl-note\"",
-            "Linux packages install today, but the on-device soul backend is still being finished. Full support is coming soon."
-        )
-    )
-}
-
-fn dl_fineprint() -> String {
-    el_p(
-        "class=\"dl-note reveal\" style=\"margin-top:2.5rem\"",
-        "All installers are served from downloads.neurontechnologies.ai. After checkout your license key arrives by email &mdash; manage it from your " +
-        el_a("/account", "style=\"color:var(--navy)\"", "account") +
-        "."
-    )
-}
-
-// Inline OS detection. CSP allows script-src 'unsafe-inline'. Single-quoted
-// JS, ASCII only, no // comments — keeps the .el string simple and avoids
-// tokenizer surprises.
-fn dl_script() -> String {
-    "<script>(function(){var p=(navigator.platform||'')+' '+(navigator.userAgent||'');var os='mac';if(/Win/i.test(p)){os='windows';}else if(/Linux|X11/i.test(p)&&!/Android/i.test(p)){os='linux';}else if(/Mac/i.test(p)){os='mac';}var L={mac:'macOS',windows:'Windows',linux:'Linux'};var b=document.getElementById('os-detected');if(b){b.textContent=(os==='mac')?'We detected macOS on this device. You are ready to download.':('We detected '+L[os]+'. '+L[os]+' support is coming soon; macOS is available to download today.');}var c=document.getElementById('card-'+os);if(c){c.setAttribute('data-detected','true');}})();</script>"
-}
-
-fn downloads_content() -> String {
-    let grid: String = el_div("class=\"dl-grid\"", dl_windows_card() + dl_linux_card())
-    el_section(
-        "id=\"downloads\" aria-label=\"Download Neuron\"",
-        el_div(
-            "class=\"container dl-wrap\"",
-            dl_header() + dl_mac_card() + grid + dl_fineprint()
-        )
-    )
-}
-
-fn downloads_page() -> String {
-    return nav() + dl_style() + downloads_content() + footer() + dl_script()
-}

src/js/chat-widget.el

@@ -142,14 +142,27 @@ fn main() -> Void {
     }
   }
 
+  function _todayUTC() { return Math.floor(Date.now() / 86400000); }
   function loadSession() {
     try {
       var s = localStorage.getItem('neuron_demo_session');
-      return s ? JSON.parse(s) : { messages: [], count: 0, context: '' };
+      var parsed = s ? JSON.parse(s) : { messages: [], count: 0, context: '' };
+      // Reset count (and conversation) on new UTC day — keeps client in sync with server
+      var today = _todayUTC();
+      if (parsed.day !== today) {
+        parsed.count = 0;
+        parsed.messages = [];
+        parsed.greeted = false;
+        parsed.day = today;
+      }
+      return parsed;
     } catch(e) { return { messages: [], count: 0, context: '' }; }
   }
   function saveSession(session) {
-    try { localStorage.setItem('neuron_demo_session', JSON.stringify(session)); } catch(e) {}
+    try {
+      if (!session.day) session.day = _todayUTC();
+      localStorage.setItem('neuron_demo_session', JSON.stringify(session));
+    } catch(e) {}
   }
   function clearSession() {
     try { localStorage.removeItem('neuron_demo_session'); } catch(e) {}
@@ -525,34 +538,33 @@ fn main() -> Void {
       // Server-side rate limit — show a live countdown to reset
       if (d.rate_limited && d.reset_at) {
         var _showRateTimer = function() {
-          var now    = Math.floor(Date.now() / 1000);
+          var now      = Math.floor(Date.now() / 1000);
           var secsLeft = Math.max(0, d.reset_at - now);
-          var hh   = Math.floor(secsLeft / 3600);
-          var mm   = Math.floor((secsLeft % 3600) / 60);
-          var ss   = secsLeft % 60;
-          var pad  = function(n) { return n < 10 ? '0' + n : '' + n; };
-          var ts   = hh > 0 ? (hh + ':' + pad(mm) + ':' + pad(ss)) : (pad(mm) + ':' + pad(ss));
-          return \"You've had 10 conversations today. Come back in \" + ts + \".\";
+          var hh  = Math.floor(secsLeft / 3600);
+          var mm  = Math.floor((secsLeft % 3600) / 60);
+          var ss  = secsLeft % 60;
+          var pad = function(n) { return n < 10 ? '0' + n : '' + n; };
+          return \"You've reached today's limit. Resets in \" + hh + ':' + pad(mm) + ':' + pad(ss) + '.';
         };
         addMsg('ai', _showRateTimer());
-        // Update the last ai message with a live ticker
+        // Update the bubble text with a live ticker
         var _timerInterval = setInterval(function() {
-          var thMsgsInner = document.getElementById('neuron-demo-msgs');
-          if (!thMsgsInner) { clearInterval(_timerInterval); return; }
-          var aiMsgs = thMsgsInner.querySelectorAll('.neuron-msg-ai');
-          var lastAi = aiMsgs[aiMsgs.length - 1];
-          if (lastAi) { lastAi.textContent = _showRateTimer(); }
+          var msgsEl = document.getElementById('neuron-demo-messages');
+          if (!msgsEl) { clearInterval(_timerInterval); return; }
+          var aiMsgs   = msgsEl.querySelectorAll('.demo-msg-ai');
+          var lastAi   = aiMsgs[aiMsgs.length - 1];
+          var lastBubble = lastAi ? lastAi.querySelector('.demo-msg-bubble') : null;
+          if (lastBubble) { lastBubble.textContent = _showRateTimer(); }
           if (Math.floor(Date.now() / 1000) >= d.reset_at) {
             clearInterval(_timerInterval);
-            if (lastAi) { lastAi.textContent = \"You're all set — conversations reset. Say hello!\"; }
-            if (input)  { input.disabled = false; input.placeholder = 'Ask me anything...'; }
-            if (btn)    { btn.disabled = false; }
+            if (lastBubble) { lastBubble.textContent = \"You're all set — conversations reset. Say hello!\"; }
+            if (input) { input.disabled = false; input.placeholder = 'Ask me anything...'; }
+            if (btn)   { btn.disabled = false; }
+            msgCount = 0; session.count = 0; session.day = _todayUTC(); saveSession(session); updateCountdown();
           }
         }, 1000);
         if (input) { input.disabled = true; input.placeholder = 'Come back tomorrow...'; }
         if (btn)   { btn.disabled = true; }
-        if (btn)   { btn.disabled = false; }
-        if (input) { input.focus(); }
         return;
       }
 

src/js/checkout-free.el

@@ -1,20 +1,6 @@
-// checkout-free.el -- Free plan: show success panel after auth completes.
-// Watches the auth-badge element; when it becomes visible, hides the auth
-// section and shows the free-success panel. No card required for free tier.
-// Compiled with: elc --target=js --bundle --minify --obfuscate
+// checkout-free.el -- RETIRED. Free plan now uses the standard Stripe
+// payment flow (checkout-stripe.el) with a $0 PaymentIntent for age
+// verification. This file is no longer compiled or loaded.
 
 fn main() -> Void {
-    native_js("(function() {
-  var success = document.getElementById('free-success');
-  var auth = document.getElementById('auth-section');
-  if (!success) return;
-  var timer = setInterval(function() {
-    var badge = document.getElementById('auth-badge');
-    if (badge && badge.offsetParent !== null) {
-      if (auth) auth.style.display = 'none';
-      success.style.display = '';
-      clearInterval(timer);
-    }
-  }, 150);
-})()")
 }

src/js/checkout-stripe.el

@@ -31,8 +31,8 @@ fn main() -> Void {
     if (spinner) spinner.style.display = loading ? ''     : 'none';
   }
 
-  // Free plan has no payment form — bail out entirely.
-  if (str_eq(PLAN, 'free')) return;
+  // Free plan: Stripe SetupIntent for age verification (card saved, never charged).
+  // Falls through to the same Stripe init path — server returns setup_mode=true for free.
 
   window._neuronMode = 'payment';
   var paymentEl = null;
@@ -101,7 +101,7 @@ fn main() -> Void {
       if (submitLabel) {
         submitLabel.textContent = window._neuronMode === 'setup'
           ? 'Save my card - no charge today →'
-          : 'Complete purchase →';
+          : PLAN === 'free' ? 'Verify age & get started →' : 'Complete purchase →';
       }
       waitForStripe(function() {
         if (!stripe) stripe = Stripe(STRIPE_PK);

src/main.el

@@ -87,7 +87,6 @@ from checkout        import { checkout_page }
 from safety          import { safety }
 from gallery         import { gallery_page }
 from account         import { account_page }
-from downloads       import { downloads_page }
 
 // ── Share-card HTML allowlist ─────────────────────────────────────────────────
 //
@@ -638,7 +637,7 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
             "Secure your Founding Member spot. Pay once, $199 lifetime — Neuron inference included at launch, priced below the major APIs. First 1,000 only."
         } else {
             if str_eq(plan, "free") {
-                "Create your free Neuron account. No credit card required. Your AI that remembers you — runs on your machine, never resets."
+                "Create your free Neuron account. A card verifies you're 18+ — you won't be charged. Your AI that remembers you, runs on your machine, never resets."
             } else {
                 "Subscribe to Neuron Professional for $19/month. The AI that remembers you — persistent memory, runs locally, bring your own API keys."
             }
@@ -698,23 +697,21 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
             }
         }
 
-        // Free tier: creates a SetupIntent for age verification (18+ requirement).
-        // No charge — but the user must provide a valid payment method.
+        // Free tier: $0 PaymentIntent for age verification (18+ requirement).
+        // Verifies card is valid. No charge, no capture.
+        // Note: setup_future_usage cannot be used with amount=0.
         if str_eq(plan, "free") {
-            let free_si_body: String = "automatic_payment_methods[enabled]=true"
-                + "&usage=off_session"
+            let free_pi_body: String = "amount=0"
+                + "&currency=usd"
+                + "&payment_method_types[]=card"
                 + "&metadata[plan]=free"
                 + "&metadata[purpose]=age_verification"
-            let free_si_body = if !str_eq(pi_cus_id, "") { free_si_body + "&customer=" + pi_cus_id } else { free_si_body }
-            let free_si_resp: String = http_post_form_auth(
-                "https://api.stripe.com/v1/setup_intents",
-                free_si_body,
+            let free_pi_body = if !str_eq(pi_cus_id, "") { free_pi_body + "&customer=" + pi_cus_id } else { free_pi_body }
+            let free_pi_resp: String = http_post_form_auth(
+                "https://api.stripe.com/v1/payment_intents",
+                free_pi_body,
                 auth_header)
-            if str_starts_with(free_si_resp, "{") {
-                let inner: String = str_slice(free_si_resp, 1, str_len(free_si_resp))
-                return "{\"setup_mode\":true,\"plan\":\"free\"," + inner
-            }
-            return free_si_resp
+            return free_pi_resp
         }
 
         // Setup-mode path: save payment method, do not charge. Only valid
@@ -876,6 +873,32 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
         return "{\"rows\":" + ac_resp + "}"
     }
 
+    // ── Admin: reset all demo rate limits ────────────────────────────────────
+    // POST { "admin_token": "<NEURON_ADMIN_TOKEN>" }
+    // Deletes all rows from demo_rate_limits — resets every user's daily quota.
+    if str_eq(path, "/api/admin/reset-rate-limits") {
+        if !str_eq(method, "POST") {
+            return "{\"__status__\":405,\"error\":\"POST required\"}"
+        }
+        let rrl_token_in:  String = json_get(body, "admin_token")
+        let rrl_token_exp: String = env("NEURON_ADMIN_TOKEN")
+        if str_eq(rrl_token_exp, "") {
+            return "{\"__status__\":503,\"error\":\"admin_token_not_configured\"}"
+        }
+        if !str_eq(rrl_token_in, rrl_token_exp) {
+            return "{\"__status__\":401,\"error\":\"unauthorized\"}"
+        }
+        let rrl_sb_url:  String = state_get("__supabase_project_url__")
+        let rrl_sb_key:  String = state_get("__supabase_service_key__")
+        if str_eq(rrl_sb_url, "") || str_eq(rrl_sb_key, "") {
+            return "{\"__status__\":503,\"error\":\"supabase_not_configured\"}"
+        }
+        // DELETE /rest/v1/demo_rate_limits?uid=not.is.null  (all rows)
+        let rrl_url: String = rrl_sb_url + "/rest/v1/demo_rate_limits?uid=not.is.null"
+        let _rrl_resp: String = http_delete_auth(rrl_url, rrl_sb_key, rrl_sb_key)
+        return "{\"ok\":true,\"message\":\"rate limits cleared\"}"
+    }
+
     // ── My plan: server-side waitlist read with JWT verification ─────────────
     // POST { "access_token": "<user_jwt>" }. We verify the JWT via Supabase
     // /auth/v1/user, extract the email, then read the waitlist row with the
@@ -1972,15 +1995,6 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
         ) + badge_css + success_body + page_close()
     }
 
-    // ── Downloads ─────────────────────────────────────────────────────────────
-    // Public installer page. macOS ships today; Windows/Linux linked but marked
-    // coming soon. Live-rendered like /about (page shell wraps downloads_page()).
-    if str_starts_with(path, "/downloads") {
-        let dl_title: String = "Download Neuron - macOS, Windows & Linux"
-        let dl_desc: String = "Download Neuron for macOS. Your AI that remembers you, running on your own machine. Windows and Linux support is on the way."
-        return page_open_seo(dl_title, dl_desc, "/downloads", dl_desc, "false") + downloads_page() + page_close()
-    }
-
     // ── Account dashboard ─────────────────────────────────────────────────────
     // Use prefix match so OAuth/email-confirmation redirects with query strings still hit.
     if str_starts_with(path, "/account") {

src/marketplace.el

@@ -77,7 +77,7 @@ fn marketplace_categories() -> String {
 
     el_div(
         "class=\"marketplace-categories reveal\" style=\"transition-delay:320ms\"",
-        marketplace_tags_block("Connectors (rolling out)", connectors) +
+        marketplace_tags_block("Connectors - day one", connectors) +
         marketplace_tags_block("Following launch", following) +
         el_div(
             "",

src/pricing.el

@@ -36,7 +36,7 @@ fn pricing_free_features() -> String {
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Local inference via Ollama (coming)")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Neuron Inference included when it launches - Q3 2026")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Unlimited projects")) +
-    el_li("", el_span("class=\"dash\"", "-") + el_span("", "Plugin marketplace access (coming soon)")) +
+    el_li("", el_span("class=\"dash\"", "-") + el_span("", "3 marketplace plugins included")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Core built-in capabilities"))
 }
 
@@ -51,9 +51,9 @@ fn pricing_pro_features() -> String {
 }
 
 fn pricing_founding_features() -> String {
-    el_li("", el_span("class=\"dash\"", "-") + el_span("", "Neuron Inference (Q3 2026) - founding member rate, priced below the major APIs")) +
+    el_li("", el_span("class=\"dash\"", "-") + el_span("", "Neuron Inference (Q3 2026) - pay-per-use at the founding member rate, below the major APIs")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Everything in Professional - forever")) +
-    el_li("", el_span("class=\"dash\"", "-") + el_span("", "Never pay again - lifetime updates included")) +
+    el_li("", el_span("class=\"dash\"", "-") + el_span("", "No subscription — software updates are free forever")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Founding member badge in the app")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Private founding member community")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Shape the roadmap - your votes carry more weight")) +
@@ -91,7 +91,7 @@ fn pricing(sold: Int, total: Int) -> String {
             el_span("class=\"pricing-price\"", "$0") +
             el_span("class=\"pricing-cadence\"", "forever")
         ) +
-        el_p("class=\"pricing-tagline\"", "Start building your memory. No card required.") +
+        el_p("class=\"pricing-tagline\"", "Start building your memory. Card required for age verification — you won't be charged.") +
         el_ul("class=\"pricing-features\"", pricing_free_features()) +
         el_div("style=\"flex:1\"", "") +
         el_div(
@@ -125,7 +125,7 @@ fn pricing(sold: Int, total: Int) -> String {
             el_span("class=\"pricing-price\"", "$199") +
             el_span("class=\"pricing-cadence\"", "lifetime")
         ) +
-        el_p("class=\"pricing-tagline\"", "Pay once. Everything, forever. Including Neuron Inference when it launches.") +
+        el_p("class=\"pricing-tagline\"", "Pay once for the platform — free software updates, forever. Inference is pay-per-use at your founding member rate.") +
         spots_html +
         el_ul("class=\"pricing-features\"", pricing_founding_features()) +
         el_div("style=\"flex:1\"", "") +

src/styles.el

@@ -78,7 +78,7 @@ fn page_head() -> String {
     return page_head_base()
         + page_seo_block(
             "Neuron — The AI That Remembers You",
-            "Every AI resets when you close the tab. Neuron doesn't. Runs on your machine. Remembers everything. Start free — no credit card required.",
+            "Every AI resets when you close the tab. Neuron doesn't. Runs on your machine. Remembers everything. Start free.",
             "/",
             "Every other AI forgets you. Neuron doesn't. Runs on your machine, builds a persistent memory over time, and gets sharper the longer you use it. Free tier available."
         )