feat: display secondary rate limit window (weekly cap) in dashboard

Add secondary_rate_limit to CodexQuota type and map secondary_window
from Codex usage API. Dashboard now shows both primary (hourly) and
secondary (weekly) quota bars with independent progress and reset times.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

README.md

@@ -36,62 +36,124 @@
 
 ## 🚀 快速开始 (Quick Start)
 
-### 桌面应用（最简单）
+> **前置条件**：你需要一个 ChatGPT 账号（免费账号即可）。如果还没有，先去 [chat.openai.com](https://chat.openai.com) 注册一个。
 
-从 [GitHub Releases](https://github.com/icebear0828/codex-proxy/releases) 下载安装包，开箱即用：
+---
+
+### 方式一：桌面应用（推荐新手，最简单）
+
+像安装 QQ、微信一样，下载 → 安装 → 打开就能用。
+
+**第 1 步：下载安装包**
+
+打开 👉 [下载页面](https://github.com/icebear0828/codex-proxy/releases)，找到最新版本，根据你的电脑系统下载对应文件：
+
+| 你的电脑系统 | 下载哪个文件 | 怎么判断系统 |
+|-------------|-------------|-------------|
+| Windows | `Codex Proxy Setup x.x.x.exe` | 大部分人用的就是 Windows |
+| macOS（苹果电脑） | `Codex Proxy-x.x.x.dmg` | 带苹果 logo 的笔记本/台式机 |
+| Linux | `Codex Proxy-x.x.x.AppImage` | 你如果用 Linux 你肯定知道 |
+
+**第 2 步：安装**
+
+- **Windows**：双击下载的 `.exe` 文件，一路点"下一步"直到安装完成
+- **macOS**：双击 `.dmg` 文件，把图标拖到 Applications 文件夹里
+
+**第 3 步：打开并登录**
+
+1. 打开刚装好的「Codex Proxy」应用
+2. 点击页面上的登录按钮，用你的 ChatGPT 账号登录
+3. 登录成功后，代理服务就已经在运行了
 
-| 平台 | 安装包 |
-|------|--------|
-| Windows | `Codex Proxy Setup x.x.x.exe` |
-| macOS | `Codex Proxy-x.x.x.dmg` |
-| Linux | `Codex Proxy-x.x.x.AppImage` |
+**第 4 步：验证是否成功**
 
-安装后打开应用，使用 ChatGPT 账号登录即可。桌面端默认监听 `127.0.0.1:8080`，仅本机访问。
+打开浏览器，在地址栏输入 `http://localhost:8080`，如果能看到控制面板页面，说明一切正常。
 
-### CLI / 服务器部署
+> 桌面端默认只允许本机访问（`127.0.0.1:8080`），你电脑上的 AI 客户端可以直接连。
+
+---
+
+### 方式二：Docker 部署（推荐服务器 / 进阶用户）
+
+Docker 就像一个"打包好的盒子"，不需要你自己装各种依赖，一条命令就能跑起来。
+
+**前置条件**：电脑上已安装 Docker。如果没有，先去 [docker.com](https://www.docker.com/products/docker-desktop/) 下载安装 Docker Desktop。
+
+**第 1 步：下载项目代码**
+
+打开终端（Windows 搜索"cmd"或"PowerShell"；macOS 搜索"终端"），输入：
 
 ```bash
 git clone https://github.com/icebear0828/codex-proxy.git
 cd codex-proxy
 ```
 
-### Docker（推荐，所有平台通用）
+> 如果提示 `git` 不是命令，需要先安装 Git：去 [git-scm.com](https://git-scm.com/) 下载安装。
+
+**第 2 步：创建配置文件并启动**
 
 ```bash
-cp .env.example .env       # 创建环境变量文件（可编辑配置）
-docker compose up -d
-# 打开 http://localhost:8080 登录
+cp .env.example .env       # 复制一份配置模板
+docker compose up -d        # 启动服务（后台运行）
 ```
 
-数据持久化通过 volume 映射：`data/`（账号、Cookie）和 `config/`（配置文件）。
+**第 3 步：登录**
+
+打开浏览器，访问 `http://localhost:8080`，用 ChatGPT 账号登录。
+
+> 你的账号数据会保存在项目的 `data/` 文件夹里，重启不会丢失。
+>
+> **其他 Docker 容器要连本服务？** 用你电脑的局域网 IP（如 `http://192.168.x.x:8080/v1`），不要用 `localhost`。
+
+---
+
+### 方式三：源码运行（开发者 / 想改代码的用户）
+
+直接从源代码启动，适合想自己修改或调试的人。
 
-> **跨容器访问提示**：如果其他 Docker 容器（如 OpenClaw、Cursor Server 等）需要连接 codex-proxy，建议使用宿主机的局域网 IP（如 `http://192.168.x.x:8080/v1`）而非 `host.docker.internal`，以避免 Docker DNS 解析问题。
+**前置条件**：已安装 [Node.js](https://nodejs.org/) 18 或更高版本。安装时一路默认选项即可。
+
+**第 1 步：下载项目代码**
+
+```bash
+git clone https://github.com/icebear0828/codex-proxy.git
+cd codex-proxy
+```
 
-### macOS / Linux
+**第 2 步：安装依赖**
 
 ```bash
-npm install                # 安装后端依赖 + 自动下载 curl-impersonate
-cd web && npm install && cd ..   # 安装前端依赖
-npm run dev                # 开发模式（热重载）
-# 或：npm run build && npm start  # 生产模式
+npm install                        # 安装后端依赖
+cd web && npm install && cd ..     # 安装前端依赖
 ```
 
-> 也支持 `pnpm` 或 `bun`，将上方 `npm` 替换即可。
+> macOS / Linux 会自动下载 curl-impersonate（用于 Chrome TLS 伪装）。
+> Windows 下不可用，会自动降级为系统 curl，建议搭配本地代理或改用 Docker。
+
+**第 3 步：启动服务**
+
+```bash
+npm run dev          # 开发模式（改了代码自动重启，适合调试）
+```
 
-### Windows
+或者，如果你要正式使用：
 
 ```bash
-npm install                # 安装后端依赖
-cd web && npm install && cd ..   # 安装前端依赖
-npm run dev                # 开发模式（热重载）
+npm run build        # 先编译
+npm start            # 再启动（性能更好）
 ```
 
-> Windows 下 curl-impersonate 暂不可用，自动降级为系统 curl（无 Chrome TLS 伪装）。建议搭配本地代理使用，或通过 Docker / WSL 部署以获得完整 TLS 伪装能力。
+**第 4 步：登录**
 
-### 验证
+打开浏览器，访问 `http://localhost:8080`，用 ChatGPT 账号登录。
+
+---
+
+### ✅ 验证服务是否正常
+
+登录成功后，打开终端，复制粘贴以下命令并回车：
 
 ```bash
-# 打开 http://localhost:8080 使用 ChatGPT 账号登录，然后：
 curl http://localhost:8080/v1/chat/completions \
   -H "Content-Type: application/json" \
   -d '{
@@ -101,6 +163,8 @@ curl http://localhost:8080/v1/chat/completions \
   }'
 ```
 
+如果看到一串 AI 回复的文字流出来，恭喜你，部署成功！接下来可以去 [客户端接入](#-客户端接入-client-setup) 章节，把它连到你常用的 AI 工具上。
+
 ## 🌟 核心功能 (Features)
 
 ### 1. 🔌 全协议兼容 (Multi-Protocol API)

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "codex-proxy",
-  "version": "1.0.0",
+  "version": "1.0.28",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-proxy",
-      "version": "1.0.0",
+      "version": "1.0.28",
       "hasInstallScript": true,
       "dependencies": {
         "@hono/node-server": "^1.0.0",
@@ -19,6 +19,7 @@
         "@electron/asar": "^3.2.0",
         "@types/js-yaml": "^4.0.0",
         "@types/node": "^22.0.0",
+        "@vitest/coverage-v8": "^3.2.4",
         "electron-to-chromium": "^1.5.302",
         "js-beautify": "^1.15.0",
         "tsx": "^4.0.0",
@@ -29,6 +30,80 @@
         "koffi": "^2.15.1"
       }
     },
+    "node_modules/@ampproject/remapping": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmmirror.com/@ampproject/remapping/-/remapping-2.3.0.tgz",
+      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.27.1",
+      "resolved": "https://registry.npmmirror.com/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
+      "integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.28.5",
+      "resolved": "https://registry.npmmirror.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz",
+      "integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/parser": {
+      "version": "7.29.0",
+      "resolved": "https://registry.npmmirror.com/@babel/parser/-/parser-7.29.0.tgz",
+      "integrity": "sha512-IyDgFV5GeDUVX4YdF/3CPULtVGSXXMLh1xVIgdCgxApktqnQV0r7/8Nqthg+8YLGaAtdyIlo2qIdZrbCv4+7ww==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.0"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.29.0",
+      "resolved": "https://registry.npmmirror.com/@babel/types/-/types-7.29.0.tgz",
+      "integrity": "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.27.1",
+        "@babel/helper-validator-identifier": "^7.28.5"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@bcoe/v8-coverage": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmmirror.com/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz",
+      "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@electron/asar": {
       "version": "3.4.1",
       "resolved": "https://registry.npmmirror.com/@electron/asar/-/asar-3.4.1.tgz",
@@ -519,6 +594,37 @@
         "node": ">=12"
       }
     },
+    "node_modules/@istanbuljs/schema": {
+      "version": "0.1.3",
+      "resolved": "https://registry.npmmirror.com/@istanbuljs/schema/-/schema-0.1.3.tgz",
+      "integrity": "sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
     "node_modules/@jridgewell/sourcemap-codec": {
       "version": "1.5.5",
       "resolved": "https://registry.npmmirror.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
@@ -526,6 +632,17 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
     "node_modules/@one-ini/wasm": {
       "version": "0.1.1",
       "resolved": "https://registry.npmmirror.com/@one-ini/wasm/-/wasm-0.1.1.tgz",
@@ -936,6 +1053,40 @@
         "undici-types": "~6.21.0"
       }
     },
+    "node_modules/@vitest/coverage-v8": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmmirror.com/@vitest/coverage-v8/-/coverage-v8-3.2.4.tgz",
+      "integrity": "sha512-EyF9SXU6kS5Ku/U82E259WSnvg6c8KTjppUncuNdm5QHpe17mwREHnjDzozC8x9MZ0xfBUFSaLkRv4TMA75ALQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@ampproject/remapping": "^2.3.0",
+        "@bcoe/v8-coverage": "^1.0.2",
+        "ast-v8-to-istanbul": "^0.3.3",
+        "debug": "^4.4.1",
+        "istanbul-lib-coverage": "^3.2.2",
+        "istanbul-lib-report": "^3.0.1",
+        "istanbul-lib-source-maps": "^5.0.6",
+        "istanbul-reports": "^3.1.7",
+        "magic-string": "^0.30.17",
+        "magicast": "^0.3.5",
+        "std-env": "^3.9.0",
+        "test-exclude": "^7.0.1",
+        "tinyrainbow": "^2.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@vitest/browser": "3.2.4",
+        "vitest": "3.2.4"
+      },
+      "peerDependenciesMeta": {
+        "@vitest/browser": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@vitest/expect": {
       "version": "3.2.4",
       "resolved": "https://registry.npmmirror.com/@vitest/expect/-/expect-3.2.4.tgz",
@@ -1103,6 +1254,25 @@
         "node": ">=12"
       }
     },
+    "node_modules/ast-v8-to-istanbul": {
+      "version": "0.3.12",
+      "resolved": "https://registry.npmmirror.com/ast-v8-to-istanbul/-/ast-v8-to-istanbul-0.3.12.tgz",
+      "integrity": "sha512-BRRC8VRZY2R4Z4lFIL35MwNXmwVqBityvOIwETtsCSwvjl0IdgFsy9NhdaA6j74nUdtJJlIypeRhpDam19Wq3g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.31",
+        "estree-walker": "^3.0.3",
+        "js-tokens": "^10.0.0"
+      }
+    },
+    "node_modules/ast-v8-to-istanbul/node_modules/js-tokens": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmmirror.com/js-tokens/-/js-tokens-10.0.0.tgz",
+      "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/balanced-match": {
       "version": "1.0.2",
       "resolved": "https://registry.npmmirror.com/balanced-match/-/balanced-match-1.0.2.tgz",
@@ -1486,6 +1656,16 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/has-flag": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmmirror.com/has-flag/-/has-flag-4.0.0.tgz",
+      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/hono": {
       "version": "4.11.9",
       "resolved": "https://registry.npmmirror.com/hono/-/hono-4.11.9.tgz",
@@ -1495,6 +1675,13 @@
         "node": ">=16.9.0"
       }
     },
+    "node_modules/html-escaper": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmmirror.com/html-escaper/-/html-escaper-2.0.2.tgz",
+      "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/inflight": {
       "version": "1.0.6",
       "resolved": "https://registry.npmmirror.com/inflight/-/inflight-1.0.6.tgz",
@@ -1538,6 +1725,60 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/istanbul-lib-coverage": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmmirror.com/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz",
+      "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/istanbul-lib-report": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmmirror.com/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz",
+      "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "istanbul-lib-coverage": "^3.0.0",
+        "make-dir": "^4.0.0",
+        "supports-color": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/istanbul-lib-source-maps": {
+      "version": "5.0.6",
+      "resolved": "https://registry.npmmirror.com/istanbul-lib-source-maps/-/istanbul-lib-source-maps-5.0.6.tgz",
+      "integrity": "sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.23",
+        "debug": "^4.1.1",
+        "istanbul-lib-coverage": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/istanbul-reports": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmmirror.com/istanbul-reports/-/istanbul-reports-3.2.0.tgz",
+      "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "html-escaper": "^2.0.0",
+        "istanbul-lib-report": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/jackspeak": {
       "version": "3.4.3",
       "resolved": "https://registry.npmmirror.com/jackspeak/-/jackspeak-3.4.3.tgz",
@@ -1687,6 +1928,34 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
+    "node_modules/magicast": {
+      "version": "0.3.5",
+      "resolved": "https://registry.npmmirror.com/magicast/-/magicast-0.3.5.tgz",
+      "integrity": "sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.25.4",
+        "@babel/types": "^7.25.4",
+        "source-map-js": "^1.2.0"
+      }
+    },
+    "node_modules/make-dir": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmmirror.com/make-dir/-/make-dir-4.0.0.tgz",
+      "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.5.3"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/minimatch": {
       "version": "3.1.2",
       "resolved": "https://registry.npmmirror.com/minimatch/-/minimatch-3.1.2.tgz",
@@ -2131,6 +2400,127 @@
         "url": "https://github.com/sponsors/antfu"
       }
     },
+    "node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmmirror.com/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/test-exclude": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmmirror.com/test-exclude/-/test-exclude-7.0.2.tgz",
+      "integrity": "sha512-u9E6A+ZDYdp7a4WnarkXPZOx8Ilz46+kby6p1yZ8zsGTz9gYa6FIS7lj2oezzNKmtdyyJNNmmXDppga5GB7kSw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "@istanbuljs/schema": "^0.1.2",
+        "glob": "^10.4.1",
+        "minimatch": "^10.2.2"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/test-exclude/node_modules/balanced-match": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmmirror.com/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
+    "node_modules/test-exclude/node_modules/brace-expansion": {
+      "version": "5.0.4",
+      "resolved": "https://registry.npmmirror.com/brace-expansion/-/brace-expansion-5.0.4.tgz",
+      "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
+    "node_modules/test-exclude/node_modules/glob": {
+      "version": "10.4.5",
+      "resolved": "https://registry.npmmirror.com/glob/-/glob-10.4.5.tgz",
+      "integrity": "sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "foreground-child": "^3.1.0",
+        "jackspeak": "^3.1.2",
+        "minimatch": "^9.0.4",
+        "minipass": "^7.1.2",
+        "package-json-from-dist": "^1.0.0",
+        "path-scurry": "^1.11.1"
+      },
+      "bin": {
+        "glob": "dist/esm/bin.mjs"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/test-exclude/node_modules/glob/node_modules/balanced-match": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmmirror.com/balanced-match/-/balanced-match-1.0.2.tgz",
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/test-exclude/node_modules/glob/node_modules/brace-expansion": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmmirror.com/brace-expansion/-/brace-expansion-2.0.2.tgz",
+      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0"
+      }
+    },
+    "node_modules/test-exclude/node_modules/glob/node_modules/minimatch": {
+      "version": "9.0.9",
+      "resolved": "https://registry.npmmirror.com/minimatch/-/minimatch-9.0.9.tgz",
+      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^2.0.2"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/test-exclude/node_modules/minimatch": {
+      "version": "10.2.4",
+      "resolved": "https://registry.npmmirror.com/minimatch/-/minimatch-10.2.4.tgz",
+      "integrity": "sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "brace-expansion": "^5.0.2"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
     "node_modules/tinybench": {
       "version": "2.9.0",
       "resolved": "https://registry.npmmirror.com/tinybench/-/tinybench-2.9.0.tgz",

package.json

@@ -34,6 +34,7 @@
     "@electron/asar": "^3.2.0",
     "@types/js-yaml": "^4.0.0",
     "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^3.2.4",
     "electron-to-chromium": "^1.5.302",
     "js-beautify": "^1.15.0",
     "tsx": "^4.0.0",

shared/i18n/translations.ts

@@ -24,6 +24,7 @@ export const translations = {
     totalAll: "Total",
     windowLabel: "window",
     rateLimit: "Rate Limit",
+    secondaryRateLimit: "Weekly Limit",
     limitReached: "Limit Reached",
     used: "Used",
     ok: "OK",
@@ -196,6 +197,7 @@ export const translations = {
     totalAll: "\u7d2f\u8ba1",
     windowLabel: "\u7a97\u53e3",
     rateLimit: "\u901f\u7387\u9650\u5236",
+    secondaryRateLimit: "\u5468\u9650\u5236",
     limitReached: "\u5df2\u8fbe\u4e0a\u9650",
     used: "\u5df2\u4f7f\u7528",
     ok: "\u6b63\u5e38",

shared/types.d.ts

@@ -0,0 +1,59 @@
+export interface AccountQuotaWindow {
+    used_percent?: number | null;
+    limit_reached?: boolean;
+    reset_at?: number | null;
+    limit_window_seconds?: number | null;
+}
+export interface AccountQuota {
+    rate_limit?: AccountQuotaWindow;
+    /** Secondary rate limit window (e.g. weekly cap). */
+    secondary_rate_limit?: AccountQuotaWindow | null;
+}
+export interface Account {
+    id: string;
+    email: string;
+    status: string;
+    planType?: string;
+    usage?: {
+        request_count?: number;
+        input_tokens?: number;
+        output_tokens?: number;
+        window_request_count?: number;
+        window_input_tokens?: number;
+        window_output_tokens?: number;
+    };
+    quota?: AccountQuota;
+    proxyId?: string;
+    proxyName?: string;
+}
+export interface ProxyHealthInfo {
+    exitIp: string | null;
+    latencyMs: number;
+    lastChecked: string;
+    error: string | null;
+}
+export interface ProxyEntry {
+    id: string;
+    name: string;
+    url: string;
+    status: "active" | "unreachable" | "disabled";
+    health: ProxyHealthInfo | null;
+    addedAt: string;
+}
+export interface ProxyAssignment {
+    accountId: string;
+    proxyId: string;
+}
+export type DiagnosticStatus = "pass" | "fail" | "skip";
+export interface DiagnosticCheck {
+    name: string;
+    status: DiagnosticStatus;
+    latencyMs: number;
+    detail: string | null;
+    error: string | null;
+}
+export interface TestConnectionResult {
+    checks: DiagnosticCheck[];
+    overall: DiagnosticStatus;
+    timestamp: string;
+}

shared/types.js

@@ -0,0 +1 @@
+export {};

src/auth/__tests__/account-pool.test.ts

@@ -1,292 +0,0 @@
-/**
- * Tests for AccountPool core scheduling logic.
- *
- * Uses vi.mock to stub filesystem and JWT utilities so tests run
- * without actual data files or valid JWT tokens.
- */
-
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-// Mock fs before importing AccountPool
-vi.mock("fs", () => ({
-  readFileSync: vi.fn(() => { throw new Error("ENOENT"); }),
-  writeFileSync: vi.fn(),
-  renameSync: vi.fn(),
-  existsSync: vi.fn(() => false),
-  mkdirSync: vi.fn(),
-}));
-
-// Mock config
-vi.mock("../../config.js", () => ({
-  getConfig: vi.fn(() => ({
-    auth: {
-      jwt_token: null,
-      rotation_strategy: "least_used",
-      rate_limit_backoff_seconds: 60,
-    },
-    server: {
-      proxy_api_key: null,
-    },
-  })),
-}));
-
-// Mock JWT utilities — all tokens are "valid"
-vi.mock("../jwt-utils.js", () => ({
-  decodeJwtPayload: vi.fn(() => ({ exp: Math.floor(Date.now() / 1000) + 3600 })),
-  extractChatGptAccountId: vi.fn((token: string) => `acct-${token.slice(0, 8)}`),
-  extractUserProfile: vi.fn((token: string) => ({
-    email: `${token.slice(0, 4)}@test.com`,
-    chatgpt_plan_type: "free",
-  })),
-  isTokenExpired: vi.fn(() => false),
-}));
-
-// Mock jitter to return the exact value (no randomness in tests)
-vi.mock("../../utils/jitter.js", () => ({
-  jitter: vi.fn((val: number) => val),
-}));
-
-import { AccountPool } from "../account-pool.js";
-import { getConfig } from "../../config.js";
-import { isTokenExpired } from "../jwt-utils.js";
-
-describe("AccountPool", () => {
-  let pool: AccountPool;
-
-  beforeEach(() => {
-    // Reset mock implementations to defaults (clearAllMocks only clears call history)
-    vi.mocked(isTokenExpired).mockReturnValue(false);
-    vi.mocked(getConfig).mockReturnValue({
-      auth: {
-        jwt_token: null,
-        rotation_strategy: "least_used",
-        rate_limit_backoff_seconds: 60,
-      },
-      server: { proxy_api_key: null },
-    } as ReturnType<typeof getConfig>);
-    pool = new AccountPool();
-  });
-
-  afterEach(() => {
-    pool.destroy();
-  });
-
-  describe("addAccount + acquire", () => {
-    it("adds an account and acquires it", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire();
-      expect(acquired).not.toBeNull();
-      expect(acquired!.token).toBe("token-aaa");
-    });
-
-    it("deduplicates by accountId", () => {
-      const id1 = pool.addAccount("token-aaa");
-      const id2 = pool.addAccount("token-aaa"); // same prefix → same accountId
-
-      expect(id1).toBe(id2);
-    });
-
-    it("returns null when no accounts exist", () => {
-      expect(pool.acquire()).toBeNull();
-    });
-  });
-
-  describe("least_used rotation", () => {
-    it("selects the account with lowest request_count", () => {
-      pool.addAccount("token-aaa");
-      pool.addAccount("token-bbb");
-
-      // Use account A once
-      const first = pool.acquire()!;
-      pool.release(first.entryId, { input_tokens: 10, output_tokens: 5 });
-
-      // Next acquire should pick the other account (0 requests)
-      const second = pool.acquire()!;
-      expect(second.entryId).not.toBe(first.entryId);
-    });
-  });
-
-  describe("round_robin rotation", () => {
-    it("cycles through accounts in order", () => {
-      vi.mocked(getConfig).mockReturnValue({
-        auth: {
-          jwt_token: null,
-          rotation_strategy: "round_robin",
-          rate_limit_backoff_seconds: 60,
-        },
-        server: { proxy_api_key: null },
-      } as ReturnType<typeof getConfig>);
-
-      // Create a fresh pool with round_robin config
-      const rrPool = new AccountPool();
-      rrPool.addAccount("token-aaa");
-      rrPool.addAccount("token-bbb");
-
-      const a1 = rrPool.acquire()!;
-      rrPool.release(a1.entryId);
-
-      const a2 = rrPool.acquire()!;
-      rrPool.release(a2.entryId);
-
-      const a3 = rrPool.acquire()!;
-      rrPool.release(a3.entryId);
-
-      // a3 should wrap around to same as a1
-      expect(a3.entryId).toBe(a1.entryId);
-      expect(a1.entryId).not.toBe(a2.entryId);
-
-      rrPool.destroy();
-    });
-  });
-
-  describe("release", () => {
-    it("increments request_count and token usage", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-      pool.release(acquired.entryId, { input_tokens: 100, output_tokens: 50 });
-
-      const accounts = pool.getAccounts();
-      expect(accounts[0].usage.request_count).toBe(1);
-      expect(accounts[0].usage.input_tokens).toBe(100);
-      expect(accounts[0].usage.output_tokens).toBe(50);
-      expect(accounts[0].usage.last_used).not.toBeNull();
-    });
-
-    it("unlocks account after release", () => {
-      pool.addAccount("token-aaa");
-
-      const a1 = pool.acquire()!;
-      // While locked, acquire returns null (only 1 account)
-      expect(pool.acquire()).toBeNull();
-
-      pool.release(a1.entryId);
-      // After release, can acquire again
-      expect(pool.acquire()).not.toBeNull();
-    });
-  });
-
-  describe("markRateLimited", () => {
-    it("marks account as rate_limited and skips it in acquire", () => {
-      pool.addAccount("token-aaa");
-      pool.addAccount("token-bbb");
-
-      const first = pool.acquire()!;
-      pool.markRateLimited(first.entryId);
-
-      // Pool summary should show 1 rate_limited
-      const summary = pool.getPoolSummary();
-      expect(summary.rate_limited).toBe(1);
-      expect(summary.active).toBe(1);
-
-      // Next acquire should skip the rate-limited account
-      const second = pool.acquire()!;
-      expect(second.entryId).not.toBe(first.entryId);
-    });
-
-    it("countRequest option increments usage on 429", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-      pool.markRateLimited(acquired.entryId, { countRequest: true });
-
-      const accounts = pool.getAccounts();
-      expect(accounts[0].usage.request_count).toBe(1);
-    });
-
-    it("auto-recovers after rate_limit_until passes", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-      // Set rate limit to already expired
-      pool.markRateLimited(acquired.entryId, { retryAfterSec: -1 });
-
-      // refreshStatus should detect the expired rate_limit_until
-      const summary = pool.getPoolSummary();
-      expect(summary.active).toBe(1);
-      expect(summary.rate_limited).toBe(0);
-    });
-  });
-
-  describe("stale lock auto-release", () => {
-    it("releases locks older than 5 minutes", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-
-      // Manually backdate the lock by manipulating the acquireLocks map
-      // Access private field for testing — unavoidable for TTL tests
-      const locks = (pool as unknown as { acquireLocks: Map<string, number> }).acquireLocks;
-      locks.set(acquired.entryId, Date.now() - 6 * 60 * 1000); // 6 minutes ago
-
-      // Next acquire should auto-release the stale lock and return the same account
-      const reacquired = pool.acquire()!;
-      expect(reacquired).not.toBeNull();
-      expect(reacquired.entryId).toBe(acquired.entryId);
-    });
-  });
-
-  describe("expired tokens", () => {
-    it("skips expired accounts in acquire", () => {
-      vi.mocked(isTokenExpired).mockReturnValue(true);
-      pool.addAccount("token-expired");
-
-      expect(pool.acquire()).toBeNull();
-      expect(pool.getPoolSummary().expired).toBe(1);
-    });
-  });
-
-  describe("removeAccount", () => {
-    it("removes an account and clears its lock", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-      pool.removeAccount(acquired.entryId);
-
-      expect(pool.getPoolSummary().total).toBe(0);
-      expect(pool.acquire()).toBeNull();
-    });
-  });
-
-  describe("resetUsage", () => {
-    it("resets counters to zero", () => {
-      pool.addAccount("token-aaa");
-
-      const acquired = pool.acquire()!;
-      pool.release(acquired.entryId, { input_tokens: 100, output_tokens: 50 });
-      pool.resetUsage(acquired.entryId);
-
-      const accounts = pool.getAccounts();
-      expect(accounts[0].usage.request_count).toBe(0);
-      expect(accounts[0].usage.input_tokens).toBe(0);
-      expect(accounts[0].usage.output_tokens).toBe(0);
-    });
-  });
-
-  describe("validateProxyApiKey", () => {
-    it("validates per-account proxy API key", () => {
-      pool.addAccount("token-aaa");
-
-      const accounts = pool.getAccounts();
-      // Each account gets a generated proxyApiKey — we can't predict it,
-      // but we can read it and validate
-      const entry = pool.getEntry(accounts[0].id)!;
-      expect(pool.validateProxyApiKey(entry.proxyApiKey)).toBe(true);
-      expect(pool.validateProxyApiKey("wrong-key")).toBe(false);
-    });
-
-    it("validates config-level proxy API key", () => {
-      vi.mocked(getConfig).mockReturnValue({
-        auth: {
-          jwt_token: null,
-          rotation_strategy: "least_used",
-          rate_limit_backoff_seconds: 60,
-        },
-        server: { proxy_api_key: "global-key-123" },
-      } as ReturnType<typeof getConfig>);
-
-      expect(pool.validateProxyApiKey("global-key-123")).toBe(true);
-    });
-  });
-});

src/auth/types.ts

@@ -56,16 +56,24 @@ export interface AccountInfo {
   quota?: CodexQuota;
 }
 
+/** A single rate limit window (primary or secondary). */
+export interface CodexQuotaWindow {
+  used_percent: number | null;
+  reset_at: number | null;
+  limit_window_seconds: number | null;
+}
+
 /** Official Codex quota from /backend-api/codex/usage */
 export interface CodexQuota {
   plan_type: string;
-  rate_limit: {
+  rate_limit: CodexQuotaWindow & {
     allowed: boolean;
     limit_reached: boolean;
-    used_percent: number | null;
-    reset_at: number | null;
-    limit_window_seconds: number | null;
   };
+  /** Secondary rate limit window (e.g. weekly cap). Null when backend doesn't report one. */
+  secondary_rate_limit: CodexQuotaWindow & {
+    limit_reached: boolean;
+  } | null;
   code_review_rate_limit: {
     allowed: boolean;
     limit_reached: boolean;

src/proxy/__tests__/codex-api.test.ts

@@ -1,201 +0,0 @@
-/**
- * Tests for CodexApi SSE parsing.
- *
- * parseStream() is the most fragile code path — it processes real-time
- * byte streams from curl where chunks can split at any boundary.
- */
-
-import { describe, it, expect } from "vitest";
-import { CodexApi, type CodexSSEEvent } from "../codex-api.js";
-
-/** Create a Response whose body emits the given string chunks sequentially. */
-function mockResponse(...chunks: string[]): Response {
-  const encoder = new TextEncoder();
-  let idx = 0;
-  const stream = new ReadableStream<Uint8Array>({
-    pull(controller) {
-      if (idx < chunks.length) {
-        controller.enqueue(encoder.encode(chunks[idx]));
-        idx++;
-      } else {
-        controller.close();
-      }
-    },
-  });
-  return new Response(stream);
-}
-
-/** Collect all events from parseStream into an array. */
-async function collectEvents(api: CodexApi, response: Response): Promise<CodexSSEEvent[]> {
-  const events: CodexSSEEvent[] = [];
-  for await (const evt of api.parseStream(response)) {
-    events.push(evt);
-  }
-  return events;
-}
-
-// CodexApi constructor requires a token — value is irrelevant for parsing tests
-function createApi(): CodexApi {
-  return new CodexApi("test-token", null);
-}
-
-describe("CodexApi.parseStream", () => {
-  it("parses a complete SSE event in a single chunk", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"Hello"}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].event).toBe("response.output_text.delta");
-    expect(events[0].data).toEqual({ delta: "Hello" });
-  });
-
-  it("handles multiple events in a single chunk", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.created\ndata: {"response":{"id":"resp_1"}}\n\n' +
-      'event: response.output_text.delta\ndata: {"delta":"Hi"}\n\n' +
-      'event: response.completed\ndata: {"response":{"id":"resp_1","usage":{"input_tokens":10,"output_tokens":5}}}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(3);
-    expect(events[0].event).toBe("response.created");
-    expect(events[1].event).toBe("response.output_text.delta");
-    expect(events[2].event).toBe("response.completed");
-  });
-
-  it("reassembles events split across chunk boundaries", async () => {
-    const api = createApi();
-    // Split in the middle of the JSON data
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"del',
-      'ta":"world"}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].data).toEqual({ delta: "world" });
-  });
-
-  it("handles chunk split at \\n\\n boundary", async () => {
-    const api = createApi();
-    // First chunk ends with first \n, second starts with second \n
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"a"}\n',
-      '\nevent: response.output_text.delta\ndata: {"delta":"b"}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(2);
-    expect(events[0].data).toEqual({ delta: "a" });
-    expect(events[1].data).toEqual({ delta: "b" });
-  });
-
-  it("handles many small single-character chunks", async () => {
-    const api = createApi();
-    const full = 'event: response.output_text.delta\ndata: {"delta":"x"}\n\n';
-    // Split into individual characters
-    const chunks = full.split("");
-    const response = mockResponse(...chunks);
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].data).toEqual({ delta: "x" });
-  });
-
-  it("skips [DONE] marker without crashing", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"hi"}\n\n' +
-      "data: [DONE]\n\n",
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].data).toEqual({ delta: "hi" });
-  });
-
-  it("returns raw string when data is not valid JSON", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: not-json-at-all\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].data).toBe("not-json-at-all");
-  });
-
-  it("handles malformed JSON (unclosed brace) gracefully", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"unclosed\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    // Should not throw — falls through to raw string
-    expect(typeof events[0].data).toBe("string");
-  });
-
-  it("skips empty blocks between events", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"a"}\n\n' +
-      "\n\n" + // empty block
-      'event: response.output_text.delta\ndata: {"delta":"b"}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(2);
-  });
-
-  it("processes remaining buffer after stream ends", async () => {
-    const api = createApi();
-    // No trailing \n\n — the event is only in the residual buffer
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":"last"}',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    expect(events[0].data).toEqual({ delta: "last" });
-  });
-
-  it("handles multi-line data fields", async () => {
-    const api = createApi();
-    const response = mockResponse(
-      'event: response.output_text.delta\ndata: {"delta":\n' +
-      'data: "multi-line"}\n\n',
-    );
-
-    const events = await collectEvents(api, response);
-    expect(events).toHaveLength(1);
-    // data lines are joined with \n: '{"delta":\n"multi-line"}'
-    expect(events[0].data).toEqual({ delta: "multi-line" });
-  });
-
-  it("returns null body error", async () => {
-    const api = createApi();
-    // Create a response with null body
-    const response = new Response(null);
-
-    await expect(async () => {
-      await collectEvents(api, response);
-    }).rejects.toThrow("Response body is null");
-  });
-
-  it("throws on buffer overflow (>10MB)", async () => {
-    const api = createApi();
-    // Create a chunk that exceeds the 10MB SSE buffer limit
-    const hugeData = "x".repeat(11 * 1024 * 1024);
-    const response = mockResponse(hugeData);
-
-    await expect(async () => {
-      await collectEvents(api, response);
-    }).rejects.toThrow("SSE buffer exceeded");
-  });
-});

src/routes/accounts.ts

@@ -26,6 +26,7 @@ import type { CookieJar } from "../proxy/cookie-jar.js";
 import type { ProxyPool } from "../proxy/proxy-pool.js";
 
 function toQuota(usage: CodexUsageResponse): CodexQuota {
+  const sw = usage.rate_limit.secondary_window;
   return {
     plan_type: usage.plan_type,
     rate_limit: {
@@ -35,6 +36,14 @@ function toQuota(usage: CodexUsageResponse): CodexQuota {
       reset_at: usage.rate_limit.primary_window?.reset_at ?? null,
       limit_window_seconds: usage.rate_limit.primary_window?.limit_window_seconds ?? null,
     },
+    secondary_rate_limit: sw
+      ? {
+          limit_reached: usage.rate_limit.limit_reached,
+          used_percent: sw.used_percent ?? null,
+          reset_at: sw.reset_at ?? null,
+          limit_window_seconds: sw.limit_window_seconds ?? null,
+        }
+      : null,
     code_review_rate_limit: usage.code_review_rate_limit
       ? {
           allowed: usage.code_review_rate_limit.allowed,

src/translation/__tests__/codex-event-extractor.test.ts

@@ -1,182 +0,0 @@
-/**
- * Tests for parseCodexEvent — the shared event type parser.
- *
- * Tests the discriminated union mapping from raw SSE events to typed events.
- * This is the IR hub of the hub-and-spoke translation architecture.
- */
-
-import { describe, it, expect } from "vitest";
-import { parseCodexEvent } from "../../types/codex-events.js";
-import type { CodexSSEEvent } from "../../proxy/codex-api.js";
-
-describe("parseCodexEvent", () => {
-  it("parses response.created with id", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.created",
-      data: { response: { id: "resp_abc123" } },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.created");
-    if (typed.type === "response.created") {
-      expect(typed.response.id).toBe("resp_abc123");
-    }
-  });
-
-  it("parses response.in_progress", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.in_progress",
-      data: { response: { id: "resp_abc123" } },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.in_progress");
-    if (typed.type === "response.in_progress") {
-      expect(typed.response.id).toBe("resp_abc123");
-    }
-  });
-
-  it("parses response.output_text.delta", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.output_text.delta",
-      data: { delta: "Hello, world!" },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.output_text.delta");
-    if (typed.type === "response.output_text.delta") {
-      expect(typed.delta).toBe("Hello, world!");
-    }
-  });
-
-  it("parses response.output_text.done", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.output_text.done",
-      data: { text: "Complete response text" },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.output_text.done");
-    if (typed.type === "response.output_text.done") {
-      expect(typed.text).toBe("Complete response text");
-    }
-  });
-
-  it("parses response.completed with usage", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.completed",
-      data: {
-        response: {
-          id: "resp_abc123",
-          usage: { input_tokens: 150, output_tokens: 42 },
-        },
-      },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.completed");
-    if (typed.type === "response.completed") {
-      expect(typed.response.id).toBe("resp_abc123");
-      expect(typed.response.usage).toEqual({
-        input_tokens: 150,
-        output_tokens: 42,
-      });
-    }
-  });
-
-  it("parses response.completed without usage", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.completed",
-      data: { response: { id: "resp_abc123" } },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.completed");
-    if (typed.type === "response.completed") {
-      expect(typed.response.usage).toBeUndefined();
-    }
-  });
-
-  it("returns unknown for unrecognized event types", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.some_future_event",
-      data: { foo: "bar" },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-    if (typed.type === "unknown") {
-      expect(typed.raw).toEqual({ foo: "bar" });
-    }
-  });
-
-  it("returns unknown when response.created has no response object", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.created",
-      data: "not an object",
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-  });
-
-  it("returns unknown when response.created data has no response field", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.created",
-      data: { something_else: true },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-  });
-
-  it("returns unknown when delta is not a string", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.output_text.delta",
-      data: { delta: 123 },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-  });
-
-  it("handles empty delta string", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.output_text.delta",
-      data: { delta: "" },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.output_text.delta");
-    if (typed.type === "response.output_text.delta") {
-      expect(typed.delta).toBe("");
-    }
-  });
-
-  it("defaults usage token counts to 0 for non-numeric values", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.completed",
-      data: {
-        response: {
-          id: "resp_1",
-          usage: { input_tokens: "not a number", output_tokens: null },
-        },
-      },
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("response.completed");
-    if (typed.type === "response.completed") {
-      expect(typed.response.usage).toEqual({
-        input_tokens: 0,
-        output_tokens: 0,
-      });
-    }
-  });
-
-  it("handles null data", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.created",
-      data: null,
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-  });
-
-  it("handles array data", () => {
-    const raw: CodexSSEEvent = {
-      event: "response.output_text.delta",
-      data: [1, 2, 3],
-    };
-    const typed = parseCodexEvent(raw);
-    expect(typed.type).toBe("unknown");
-  });
-});

web/src/components/AccountCard.tsx

@@ -66,7 +66,7 @@ export function AccountCard({ account, index, onDelete, proxies, onProxyChange }
     if (err) alert(err);
   }, [account.id, onDelete, t]);
 
-  // Quota
+  // Quota — primary window
   const q = account.quota;
   const rl = q?.rate_limit;
   const pct = rl?.used_percent != null ? Math.round(rl.used_percent) : null;
@@ -82,6 +82,23 @@ export function AccountCard({ account, index, onDelete, proxies, onProxyChange }
           : "text-primary";
   const resetAt = rl?.reset_at ? formatResetTime(rl.reset_at, lang === "zh") : null;
 
+  // Quota — secondary window (e.g. weekly)
+  const srl = q?.secondary_rate_limit;
+  const sPct = srl?.used_percent != null ? Math.round(srl.used_percent) : null;
+  const sBarColor =
+    sPct == null ? "bg-indigo-500" : sPct >= 90 ? "bg-red-500" : sPct >= 60 ? "bg-amber-500" : "bg-indigo-500";
+  const sPctColor =
+    sPct == null
+      ? "text-indigo-500"
+      : sPct >= 90
+        ? "text-red-500"
+        : sPct >= 60
+          ? "text-amber-600 dark:text-amber-500"
+          : "text-indigo-500";
+  const sResetAt = srl?.reset_at ? formatResetTime(srl.reset_at, lang === "zh") : null;
+  const sWindowSec = srl?.limit_window_seconds;
+  const sWindowDur = sWindowSec ? formatWindowDuration(sWindowSec, lang === "zh") : null;
+
   return (
     <div class="bg-white dark:bg-card-dark border border-gray-200 dark:border-border-dark rounded-xl p-4 shadow-sm hover:shadow-md transition-all hover:border-primary/30 dark:hover:border-primary/50">
       {/* Header */}
@@ -158,37 +175,77 @@ export function AccountCard({ account, index, onDelete, proxies, onProxyChange }
         </div>
       )}
 
-      {/* Quota bar */}
-      {rl && (
-        <div class="pt-3 mt-3 border-t border-slate-100 dark:border-border-dark">
-          <div class="flex justify-between text-[0.78rem] mb-1.5">
-            <span class="text-slate-500 dark:text-text-dim">{t("rateLimit")}</span>
-            {rl.limit_reached ? (
-              <span class="px-2 py-0.5 rounded-full bg-red-100 dark:bg-red-900/20 text-red-600 dark:text-red-400 text-xs font-medium">
-                {t("limitReached")}
-              </span>
-            ) : pct != null ? (
-              <span class={`font-medium ${pctColor}`}>
-                {pct}% {t("used")}
-              </span>
-            ) : (
-              <span class="font-medium text-primary">{t("ok")}</span>
-            )}
-          </div>
-          {pct != null && (
-            <div class="w-full bg-slate-100 dark:bg-border-dark rounded-full h-2 overflow-hidden">
-              <div class={`${barColor} h-2 rounded-full transition-all`} style={{ width: `${pct}%` }} />
+      {/* Quota bars */}
+      {(rl || srl) && (
+        <div class="pt-3 mt-3 border-t border-slate-100 dark:border-border-dark space-y-3">
+          {/* Primary window */}
+          {rl && (
+            <div>
+              <div class="flex justify-between text-[0.78rem] mb-1.5">
+                <span class="text-slate-500 dark:text-text-dim">
+                  {t("rateLimit")}
+                  {windowDur && (
+                    <span class="ml-1 text-slate-400 dark:text-text-dim/70 text-[0.65rem]">({windowDur})</span>
+                  )}
+                </span>
+                {rl.limit_reached ? (
+                  <span class="px-2 py-0.5 rounded-full bg-red-100 dark:bg-red-900/20 text-red-600 dark:text-red-400 text-xs font-medium">
+                    {t("limitReached")}
+                  </span>
+                ) : pct != null ? (
+                  <span class={`font-medium ${pctColor}`}>
+                    {pct}% {t("used")}
+                  </span>
+                ) : (
+                  <span class="font-medium text-primary">{t("ok")}</span>
+                )}
+              </div>
+              {pct != null && (
+                <div class="w-full bg-slate-100 dark:bg-border-dark rounded-full h-2 overflow-hidden">
+                  <div class={`${barColor} h-2 rounded-full transition-all`} style={{ width: `${pct}%` }} />
+                </div>
+              )}
+              {resetAt && (
+                <p class="text-xs text-slate-400 dark:text-text-dim mt-1">
+                  {t("resetsAt")} {resetAt}
+                </p>
+              )}
             </div>
           )}
-          {resetAt && (
-            <p class="text-xs text-slate-400 dark:text-text-dim mt-1">
-              {t("resetsAt")} {resetAt}
-              {windowDur && (
-                <span class="ml-1 text-slate-400 dark:text-text-dim/70">
-                  ({t("windowLabel")} {windowDur})
+
+          {/* Secondary window (e.g. weekly) */}
+          {srl && (
+            <div>
+              <div class="flex justify-between text-[0.78rem] mb-1.5">
+                <span class="text-slate-500 dark:text-text-dim">
+                  {t("secondaryRateLimit")}
+                  {sWindowDur && (
+                    <span class="ml-1 text-slate-400 dark:text-text-dim/70 text-[0.65rem]">({sWindowDur})</span>
+                  )}
                 </span>
+                {srl.limit_reached ? (
+                  <span class="px-2 py-0.5 rounded-full bg-red-100 dark:bg-red-900/20 text-red-600 dark:text-red-400 text-xs font-medium">
+                    {t("limitReached")}
+                  </span>
+                ) : sPct != null ? (
+                  <span class={`font-medium ${sPctColor}`}>
+                    {sPct}% {t("used")}
+                  </span>
+                ) : (
+                  <span class="font-medium text-indigo-500">{t("ok")}</span>
+                )}
+              </div>
+              {sPct != null && (
+                <div class="w-full bg-slate-100 dark:bg-border-dark rounded-full h-2 overflow-hidden">
+                  <div class={`${sBarColor} h-2 rounded-full transition-all`} style={{ width: `${sPct}%` }} />
+                </div>
               )}
-            </p>
+              {sResetAt && (
+                <p class="text-xs text-slate-400 dark:text-text-dim mt-1">
+                  {t("resetsAt")} {sResetAt}
+                </p>
+              )}
+            </div>
           )}
         </div>
       )}

web/src/hooks/use-accounts.ts

@@ -1,12 +1,16 @@
 import { useState, useEffect, useCallback } from "preact/hooks";
 
+export interface AccountQuotaWindow {
+  used_percent?: number | null;
+  limit_reached?: boolean;
+  reset_at?: number | null;
+  limit_window_seconds?: number | null;
+}
+
 export interface AccountQuota {
-  rate_limit?: {
-    used_percent?: number | null;
-    limit_reached?: boolean;
-    reset_at?: number | null;
-    limit_window_seconds?: number | null;
-  };
+  rate_limit?: AccountQuotaWindow;
+  /** Secondary rate limit window (e.g. weekly cap). */
+  secondary_rate_limit?: AccountQuotaWindow | null;
 }
 
 export interface Account {