zevairouter 1.0.119 → 1.0.121

package/cli/app/.openclaude/worktrees/agent-a54d8692/src/lib/terminal/ptyBridge.py

@@ -0,0 +1,163 @@
+#!/usr/bin/env python3
+"""
+Minimal PTY bridge for ZevaiRouter web terminal.
+
+stdin  -> PTY master (keystrokes)
+stdout <- PTY master (shell output), raw binary
+stderr  = control / errors (utf-8 text lines)
+
+Optional control on a side channel is not needed: resize arrives as
+OSC-like escape on stdin:  \\x1b]9999;<cols>;<rows>\\x07
+"""
+from __future__ import annotations
+
+import errno
+import fcntl
+import os
+import select
+import signal
+import struct
+import sys
+import termios
+
+
+def set_winsize(fd: int, rows: int, cols: int) -> None:
+    try:
+        packed = struct.pack("HHHH", max(5, rows), max(20, cols), 0, 0)
+        fcntl.ioctl(fd, termios.TIOCSWINSZ, packed)
+    except Exception:
+        pass
+
+
+def main() -> int:
+    cols = int(sys.argv[1]) if len(sys.argv) > 1 else 120
+    rows = int(sys.argv[2]) if len(sys.argv) > 2 else 40
+    shell = os.environ.get("SHELL") or ("/bin/bash" if os.path.exists("/bin/bash") else "/bin/sh")
+    cwd = os.path.expanduser("~")
+
+    pid, master = pty_fork = _fork_pty()
+    if pid == 0:
+        # child
+        try:
+            os.chdir(cwd)
+        except Exception:
+            pass
+        os.environ.setdefault("TERM", "xterm-256color")
+        os.environ.setdefault("COLORTERM", "truecolor")
+        os.environ.setdefault("FORCE_COLOR", "1")
+        try:
+            os.execv(shell, [shell, "-il"])
+        except Exception:
+            os.execv("/bin/sh", ["/bin/sh", "-i"])
+        return 1
+
+    set_winsize(master, rows, cols)
+
+    # Non-blocking master + stdin
+    for fd in (master, sys.stdin.fileno()):
+        fl = fcntl.fcntl(fd, fcntl.F_GETFL)
+        fcntl.fcntl(fd, fcntl.F_SETFL, fl | os.O_NONBLOCK)
+
+    # Binary stdout
+    stdout = sys.stdout.buffer
+    stdin = sys.stdin.buffer
+
+    resize_buf = b""
+
+    def handle_resize_escape(chunk: bytes) -> bytes:
+        """Strip and apply embedded resize escapes, return remaining bytes."""
+        nonlocal resize_buf
+        data = resize_buf + chunk
+        out = bytearray()
+        i = 0
+        while i < len(data):
+            # ESC ] 9999 ; cols ; rows BEL
+            if data[i] == 0x1B and data[i : i + 6] == b"\x1b]9999;":
+                end = data.find(b"\x07", i + 6)
+                if end < 0:
+                    resize_buf = data[i:]
+                    return bytes(out)
+                payload = data[i + 6 : end].decode("ascii", "ignore")
+                try:
+                    c_s, r_s = payload.split(";", 1)
+                    set_winsize(master, int(r_s), int(c_s))
+                except Exception:
+                    pass
+                i = end + 1
+                resize_buf = b""
+                continue
+            out.append(data[i])
+            i += 1
+        resize_buf = b""
+        return bytes(out)
+
+    alive = True
+
+    def on_chld(signum, frame):  # noqa: ARG001
+        nonlocal alive
+        alive = False
+
+    signal.signal(signal.SIGCHLD, on_chld)
+
+    try:
+        while alive:
+            try:
+                r, _, _ = select.select([master, sys.stdin.fileno()], [], [], 0.25)
+            except InterruptedError:
+                continue
+
+            if master in r:
+                try:
+                    data = os.read(master, 8192)
+                except OSError as e:
+                    if e.errno in (errno.EIO, errno.EAGAIN, errno.EWOULDBLOCK):
+                        data = b""
+                    else:
+                        break
+                if not data:
+                    # EIO often means child exited
+                    if not alive:
+                        break
+                else:
+                    stdout.write(data)
+                    stdout.flush()
+
+            if sys.stdin.fileno() in r:
+                try:
+                    data = stdin.read(8192)
+                except Exception:
+                    data = b""
+                if data is None:
+                    data = b""
+                if data == b"" and not alive:
+                    break
+                if data:
+                    cleaned = handle_resize_escape(data)
+                    if cleaned:
+                        try:
+                            os.write(master, cleaned)
+                        except OSError:
+                            break
+    finally:
+        try:
+            os.close(master)
+        except Exception:
+            pass
+        try:
+            os.waitpid(pid, 0)
+        except Exception:
+            pass
+    return 0
+
+
+def _fork_pty():
+    import pty
+
+    return pty.fork()
+
+
+if __name__ == "__main__":
+    try:
+        raise SystemExit(main())
+    except KeyboardInterrupt:
+        raise SystemExit(0)

package/cli/app/.openclaude/worktrees/agent-aa0a3950/src/lib/terminal/ptyBridge.py

@@ -0,0 +1,163 @@
+#!/usr/bin/env python3
+"""
+Minimal PTY bridge for ZevaiRouter web terminal.
+
+stdin  -> PTY master (keystrokes)
+stdout <- PTY master (shell output), raw binary
+stderr  = control / errors (utf-8 text lines)
+
+Optional control on a side channel is not needed: resize arrives as
+OSC-like escape on stdin:  \\x1b]9999;<cols>;<rows>\\x07
+"""
+from __future__ import annotations
+
+import errno
+import fcntl
+import os
+import select
+import signal
+import struct
+import sys
+import termios
+
+
+def set_winsize(fd: int, rows: int, cols: int) -> None:
+    try:
+        packed = struct.pack("HHHH", max(5, rows), max(20, cols), 0, 0)
+        fcntl.ioctl(fd, termios.TIOCSWINSZ, packed)
+    except Exception:
+        pass
+
+
+def main() -> int:
+    cols = int(sys.argv[1]) if len(sys.argv) > 1 else 120
+    rows = int(sys.argv[2]) if len(sys.argv) > 2 else 40
+    shell = os.environ.get("SHELL") or ("/bin/bash" if os.path.exists("/bin/bash") else "/bin/sh")
+    cwd = os.path.expanduser("~")
+
+    pid, master = pty_fork = _fork_pty()
+    if pid == 0:
+        # child
+        try:
+            os.chdir(cwd)
+        except Exception:
+            pass
+        os.environ.setdefault("TERM", "xterm-256color")
+        os.environ.setdefault("COLORTERM", "truecolor")
+        os.environ.setdefault("FORCE_COLOR", "1")
+        try:
+            os.execv(shell, [shell, "-il"])
+        except Exception:
+            os.execv("/bin/sh", ["/bin/sh", "-i"])
+        return 1
+
+    set_winsize(master, rows, cols)
+
+    # Non-blocking master + stdin
+    for fd in (master, sys.stdin.fileno()):
+        fl = fcntl.fcntl(fd, fcntl.F_GETFL)
+        fcntl.fcntl(fd, fcntl.F_SETFL, fl | os.O_NONBLOCK)
+
+    # Binary stdout
+    stdout = sys.stdout.buffer
+    stdin = sys.stdin.buffer
+
+    resize_buf = b""
+
+    def handle_resize_escape(chunk: bytes) -> bytes:
+        """Strip and apply embedded resize escapes, return remaining bytes."""
+        nonlocal resize_buf
+        data = resize_buf + chunk
+        out = bytearray()
+        i = 0
+        while i < len(data):
+            # ESC ] 9999 ; cols ; rows BEL
+            if data[i] == 0x1B and data[i : i + 6] == b"\x1b]9999;":
+                end = data.find(b"\x07", i + 6)
+                if end < 0:
+                    resize_buf = data[i:]
+                    return bytes(out)
+                payload = data[i + 6 : end].decode("ascii", "ignore")
+                try:
+                    c_s, r_s = payload.split(";", 1)
+                    set_winsize(master, int(r_s), int(c_s))
+                except Exception:
+                    pass
+                i = end + 1
+                resize_buf = b""
+                continue
+            out.append(data[i])
+            i += 1
+        resize_buf = b""
+        return bytes(out)
+
+    alive = True
+
+    def on_chld(signum, frame):  # noqa: ARG001
+        nonlocal alive
+        alive = False
+
+    signal.signal(signal.SIGCHLD, on_chld)
+
+    try:
+        while alive:
+            try:
+                r, _, _ = select.select([master, sys.stdin.fileno()], [], [], 0.25)
+            except InterruptedError:
+                continue
+
+            if master in r:
+                try:
+                    data = os.read(master, 8192)
+                except OSError as e:
+                    if e.errno in (errno.EIO, errno.EAGAIN, errno.EWOULDBLOCK):
+                        data = b""
+                    else:
+                        break
+                if not data:
+                    # EIO often means child exited
+                    if not alive:
+                        break
+                else:
+                    stdout.write(data)
+                    stdout.flush()
+
+            if sys.stdin.fileno() in r:
+                try:
+                    data = stdin.read(8192)
+                except Exception:
+                    data = b""
+                if data is None:
+                    data = b""
+                if data == b"" and not alive:
+                    break
+                if data:
+                    cleaned = handle_resize_escape(data)
+                    if cleaned:
+                        try:
+                            os.write(master, cleaned)
+                        except OSError:
+                            break
+    finally:
+        try:
+            os.close(master)
+        except Exception:
+            pass
+        try:
+            os.waitpid(pid, 0)
+        except Exception:
+            pass
+    return 0
+
+
+def _fork_pty():
+    import pty
+
+    return pty.fork()
+
+
+if __name__ == "__main__":
+    try:
+        raise SystemExit(main())
+    except KeyboardInterrupt:
+        raise SystemExit(0)

package/cli/app/.openclaude/worktrees/agent-aeb70241/src/lib/terminal/ptyBridge.py

@@ -0,0 +1,163 @@
+#!/usr/bin/env python3
+"""
+Minimal PTY bridge for ZevaiRouter web terminal.
+
+stdin  -> PTY master (keystrokes)
+stdout <- PTY master (shell output), raw binary
+stderr  = control / errors (utf-8 text lines)
+
+Optional control on a side channel is not needed: resize arrives as
+OSC-like escape on stdin:  \\x1b]9999;<cols>;<rows>\\x07
+"""
+from __future__ import annotations
+
+import errno
+import fcntl
+import os
+import select
+import signal
+import struct
+import sys
+import termios
+
+
+def set_winsize(fd: int, rows: int, cols: int) -> None:
+    try:
+        packed = struct.pack("HHHH", max(5, rows), max(20, cols), 0, 0)
+        fcntl.ioctl(fd, termios.TIOCSWINSZ, packed)
+    except Exception:
+        pass
+
+
+def main() -> int:
+    cols = int(sys.argv[1]) if len(sys.argv) > 1 else 120
+    rows = int(sys.argv[2]) if len(sys.argv) > 2 else 40
+    shell = os.environ.get("SHELL") or ("/bin/bash" if os.path.exists("/bin/bash") else "/bin/sh")
+    cwd = os.path.expanduser("~")
+
+    pid, master = pty_fork = _fork_pty()
+    if pid == 0:
+        # child
+        try:
+            os.chdir(cwd)
+        except Exception:
+            pass
+        os.environ.setdefault("TERM", "xterm-256color")
+        os.environ.setdefault("COLORTERM", "truecolor")
+        os.environ.setdefault("FORCE_COLOR", "1")
+        try:
+            os.execv(shell, [shell, "-il"])
+        except Exception:
+            os.execv("/bin/sh", ["/bin/sh", "-i"])
+        return 1
+
+    set_winsize(master, rows, cols)
+
+    # Non-blocking master + stdin
+    for fd in (master, sys.stdin.fileno()):
+        fl = fcntl.fcntl(fd, fcntl.F_GETFL)
+        fcntl.fcntl(fd, fcntl.F_SETFL, fl | os.O_NONBLOCK)
+
+    # Binary stdout
+    stdout = sys.stdout.buffer
+    stdin = sys.stdin.buffer
+
+    resize_buf = b""
+
+    def handle_resize_escape(chunk: bytes) -> bytes:
+        """Strip and apply embedded resize escapes, return remaining bytes."""
+        nonlocal resize_buf
+        data = resize_buf + chunk
+        out = bytearray()
+        i = 0
+        while i < len(data):
+            # ESC ] 9999 ; cols ; rows BEL
+            if data[i] == 0x1B and data[i : i + 6] == b"\x1b]9999;":
+                end = data.find(b"\x07", i + 6)
+                if end < 0:
+                    resize_buf = data[i:]
+                    return bytes(out)
+                payload = data[i + 6 : end].decode("ascii", "ignore")
+                try:
+                    c_s, r_s = payload.split(";", 1)
+                    set_winsize(master, int(r_s), int(c_s))
+                except Exception:
+                    pass
+                i = end + 1
+                resize_buf = b""
+                continue
+            out.append(data[i])
+            i += 1
+        resize_buf = b""
+        return bytes(out)
+
+    alive = True
+
+    def on_chld(signum, frame):  # noqa: ARG001
+        nonlocal alive
+        alive = False
+
+    signal.signal(signal.SIGCHLD, on_chld)
+
+    try:
+        while alive:
+            try:
+                r, _, _ = select.select([master, sys.stdin.fileno()], [], [], 0.25)
+            except InterruptedError:
+                continue
+
+            if master in r:
+                try:
+                    data = os.read(master, 8192)
+                except OSError as e:
+                    if e.errno in (errno.EIO, errno.EAGAIN, errno.EWOULDBLOCK):
+                        data = b""
+                    else:
+                        break
+                if not data:
+                    # EIO often means child exited
+                    if not alive:
+                        break
+                else:
+                    stdout.write(data)
+                    stdout.flush()
+
+            if sys.stdin.fileno() in r:
+                try:
+                    data = stdin.read(8192)
+                except Exception:
+                    data = b""
+                if data is None:
+                    data = b""
+                if data == b"" and not alive:
+                    break
+                if data:
+                    cleaned = handle_resize_escape(data)
+                    if cleaned:
+                        try:
+                            os.write(master, cleaned)
+                        except OSError:
+                            break
+    finally:
+        try:
+            os.close(master)
+        except Exception:
+            pass
+        try:
+            os.waitpid(pid, 0)
+        except Exception:
+            pass
+    return 0
+
+
+def _fork_pty():
+    import pty
+
+    return pty.fork()
+
+
+if __name__ == "__main__":
+    try:
+        raise SystemExit(main())
+    except KeyboardInterrupt:
+        raise SystemExit(0)

package/cli/app/CHANGELOG.md

@@ -1,3 +1,51 @@
+# v1.0.120 (2026-07-24)
+
+## Improvements
+- **Dashboard UX and accessibility**: improved responsive layouts, loading/error/retry feedback, keyboard and screen-reader semantics, modal focus management, and light/dark consistency across Playground, Endpoint, Console Log, and Terminal workflows.
+- **Refined ZevaiRouter identity**: polished the existing Z mark across the dashboard, favicon, PWA icons, and desktop tray assets.
+
+## Security
+- **Safe Playground Markdown**: assistant-rendered Markdown is sanitized before insertion into the page.
+
+# v1.0.119 (2026-07-24)
+
+## Security
+- **API-key hardening**: stored secrets are masked in dashboard/API responses, trusted server consumers must explicitly request them, and newly created or rotated secrets are shown only once.
+- **Per-key policy enforcement**: API keys can restrict allowed models, requests per minute, and daily/monthly budgets. Budget accounting fails closed and concurrent budgeted requests are serialized to prevent limit bypasses.
+
+## Fixes
+- **Request lifecycle safety**: client disconnects now cancel upstream provider work, discarded retry bodies are closed, SSE admission slots release on completion/error/cancellation, and combo routing keeps the final error paired with its actual HTTP status.
+- **Durable shutdown and sql.js ownership**: signal shutdown flushes pending request details, stops quota timers, and serializes database closure. sql.js now prevents concurrent process ownership and safely reclaims stale PID locks.
+- **Provider alerts**: provider-down and quota alerts now fire on the canonical account cooldown transition instead of once per failed request, avoiding notification spam.
+
+## Features
+- **Operational probes**: added `/api/health/ready` for database/provider readiness and authenticated `/api/metrics` Prometheus output for traffic, tokens, cost, active work, provider connections, and cache statistics.
+
+# v1.0.118 (2026-07-24)
+
+## Fixes
+- **Automation job serialization**: bulk-import providers now reject overlapping active jobs, including interrupted jobs restored from persisted state, with a structured `BULK_IMPORT_ACTIVE` response.
+
+# v1.0.117 (2026-07-24)
+
+## Fixes
+- **Streaming and fallback robustness**: SSE parsing now handles arbitrary chunk boundaries, split UTF-8 characters, and final unterminated events. Provider/account fallback uses accurate retry timestamps and immediately fails over on gateway/service failures.
+- **Upstream lifecycle**: streaming inactivity timeouts cancel stalled upstream work, token counting uses structured events, and request validation rejects malformed input before provider execution.
+- **Dashboard reliability**: CLI-tool status detection now reports installed and running tools consistently.
+
+# v1.0.116 (2026-07-24)
+
+## Security
+- **Outbound request hardening**: URL validation blocks private and special-address targets, pins resolved DNS addresses to prevent rebinding, rejects redirects, and enforces response-size limits.
+
+## Fixes
+- **Data directory migration safety**: explicit `DATA_DIR` configurations no longer trigger ambiguous or unsafe automatic migration behavior.
+
+# v1.0.115 (2026-07-23)
+
+## Chores
+- **Release flow**: added a safe ordered release command so verification, packaging, version synchronization, commit, push, and publish happen in a predictable sequence.
+
 # v1.0.114 (2026-07-23)
 
 ## Fixes

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.119",
+  "version": "1.0.121",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "./cli/cli.js"

package/cli/app/public/favicon.svg

@@ -1,12 +1,16 @@
 <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
   <defs>
-    <linearGradient id="zg" x1="0" y1="0" x2="32" y2="32" gradientUnits="userSpaceOnUse">
-      <stop stop-color="#FF8A3D"/>
-      <stop offset="1" stop-color="#E0531F"/>
+    <linearGradient id="zg" x1="5" y1="3" x2="27" y2="29" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FF9A52"/>
+      <stop offset="0.48" stop-color="#F56A2A"/>
+      <stop offset="1" stop-color="#D94716"/>
+    </linearGradient>
+    <linearGradient id="shine" x1="8" y1="6" x2="23" y2="25" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FFFFFF" stop-opacity="0.22"/>
+      <stop offset="1" stop-color="#FFFFFF" stop-opacity="0"/>
     </linearGradient>
   </defs>
-  <rect width="32" height="32" rx="7" fill="url(#zg)"/>
-  <path d="M9.5 11H22.5L9.5 21H22.5" fill="none" stroke="#ffffff" stroke-width="2.8" stroke-linecap="round" stroke-linejoin="round"/>
-  <circle cx="9.5" cy="11" r="2.5" fill="#ffffff"/>
-  <circle cx="22.5" cy="21" r="2.5" fill="#ffffff"/>
+  <rect x="1" y="1" width="30" height="30" rx="8" fill="url(#zg)"/>
+  <rect x="1.5" y="1.5" width="29" height="29" rx="7.5" stroke="url(#shine)"/>
+  <path d="M9 10H23L9 22H23" stroke="white" stroke-width="3.25" stroke-linecap="round" stroke-linejoin="round"/>
 </svg>

package/cli/app/public/icons/icon-192.svg

@@ -1,12 +1,16 @@
 <svg width="192" height="192" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
   <defs>
-    <linearGradient id="zg" x1="0" y1="0" x2="32" y2="32" gradientUnits="userSpaceOnUse">
-      <stop stop-color="#FF8A3D"/>
-      <stop offset="1" stop-color="#E0531F"/>
+    <linearGradient id="zg" x1="5" y1="3" x2="27" y2="29" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FF9A52"/>
+      <stop offset="0.48" stop-color="#F56A2A"/>
+      <stop offset="1" stop-color="#D94716"/>
+    </linearGradient>
+    <linearGradient id="shine" x1="8" y1="6" x2="23" y2="25" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FFFFFF" stop-opacity="0.22"/>
+      <stop offset="1" stop-color="#FFFFFF" stop-opacity="0"/>
     </linearGradient>
   </defs>
-  <rect width="32" height="32" rx="7" fill="url(#zg)"/>
-  <path d="M9.5 11H22.5L9.5 21H22.5" fill="none" stroke="#ffffff" stroke-width="2.8" stroke-linecap="round" stroke-linejoin="round"/>
-  <circle cx="9.5" cy="11" r="2.5" fill="#ffffff"/>
-  <circle cx="22.5" cy="21" r="2.5" fill="#ffffff"/>
+  <rect x="1" y="1" width="30" height="30" rx="8" fill="url(#zg)"/>
+  <rect x="1.5" y="1.5" width="29" height="29" rx="7.5" stroke="url(#shine)"/>
+  <path d="M9 10H23L9 22H23" stroke="white" stroke-width="3.25" stroke-linecap="round" stroke-linejoin="round"/>
 </svg>

package/cli/app/public/icons/icon-512.svg

@@ -1,12 +1,16 @@
 <svg width="512" height="512" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">
   <defs>
-    <linearGradient id="zg" x1="0" y1="0" x2="32" y2="32" gradientUnits="userSpaceOnUse">
-      <stop stop-color="#FF8A3D"/>
-      <stop offset="1" stop-color="#E0531F"/>
+    <linearGradient id="zg" x1="5" y1="3" x2="27" y2="29" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FF9A52"/>
+      <stop offset="0.48" stop-color="#F56A2A"/>
+      <stop offset="1" stop-color="#D94716"/>
+    </linearGradient>
+    <linearGradient id="shine" x1="8" y1="6" x2="23" y2="25" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#FFFFFF" stop-opacity="0.22"/>
+      <stop offset="1" stop-color="#FFFFFF" stop-opacity="0"/>
     </linearGradient>
   </defs>
-  <rect width="32" height="32" rx="7" fill="url(#zg)"/>
-  <path d="M9.5 11H22.5L9.5 21H22.5" fill="none" stroke="#ffffff" stroke-width="2.8" stroke-linecap="round" stroke-linejoin="round"/>
-  <circle cx="9.5" cy="11" r="2.5" fill="#ffffff"/>
-  <circle cx="22.5" cy="21" r="2.5" fill="#ffffff"/>
+  <rect x="1" y="1" width="30" height="30" rx="8" fill="url(#zg)"/>
+  <rect x="1.5" y="1.5" width="29" height="29" rx="7.5" stroke="url(#shine)"/>
+  <path d="M9 10H23L9 22H23" stroke="white" stroke-width="3.25" stroke-linecap="round" stroke-linejoin="round"/>
 </svg>

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.119",
+  "version": "1.0.121",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/open-sse/services/accountFallback.js

@@ -23,6 +23,36 @@ export function isNonAccountError(status, errorText) {
   return status === 400 && NON_ACCOUNT_ERROR_TEXTS.some(text => lowerError.includes(text));
 }
 
+export function extractProviderErrorCode(errorText) {
+  if (!errorText) return null;
+  const text = typeof errorText === "string" ? errorText : JSON.stringify(errorText);
+  try {
+    const parsed = JSON.parse(text);
+    const code = parsed?.code ?? parsed?.error?.code;
+    if (Number.isInteger(Number(code))) return Number(code);
+  } catch { /* use text fallback */ }
+  const match = text.match(/(?:"code"\s*:\s*|\bcode\s+)(\d{4,6})\b/i);
+  return match ? Number(match[1]) : null;
+}
+
+export function getQuotaResetAt(usage) {
+  const resets = Object.values(usage?.quotas || {})
+    .map(quota => Date.parse(quota?.resetAt))
+    .filter(timestamp => Number.isFinite(timestamp) && timestamp > Date.now());
+  return resets.length ? Math.min(...resets) : null;
+}
+
+export function getQuotaExhaustedUntil(usage) {
+  const quotas = Object.values(usage?.quotas || {});
+  const known = quotas.filter(quota =>
+    Number.isFinite(quota?.remaining) || Number.isFinite(quota?.remainingPercentage)
+  );
+  if (!known.length || known.length !== quotas.length || known.some(quota =>
+    (Number.isFinite(quota.remaining) ? quota.remaining : quota.remainingPercentage) > 0
+  )) return null;
+  return getQuotaResetAt(usage);
+}
+
 /**
  * Calculate exponential backoff cooldown for rate limits (429)
  * Level 1: 1s, Level 2: 2s, Level 3: 4s... → max 4 min