feat: notify on unexpected quota resets

backend/internal/store/store.go

@@ -39,16 +39,50 @@ CREATE TABLE IF NOT EXISTS sessions (token_hash TEXT PRIMARY KEY, expires_at INT
 CREATE TABLE IF NOT EXISTS daily_usage (date TEXT PRIMARY KEY, total_tokens INTEGER NOT NULL, fetched_at INTEGER NOT NULL);
 CREATE TABLE IF NOT EXISTS limit_snapshots (id INTEGER PRIMARY KEY AUTOINCREMENT, limit_id TEXT NOT NULL, window_type TEXT NOT NULL, used_percent REAL NOT NULL, duration_mins INTEGER NOT NULL, resets_at INTEGER NOT NULL, fetched_at INTEGER NOT NULL);
 CREATE INDEX IF NOT EXISTS idx_limits_time ON limit_snapshots(fetched_at);
-CREATE TABLE IF NOT EXISTS notifications (dedupe_key TEXT PRIMARY KEY, channel TEXT NOT NULL, kind TEXT NOT NULL, status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, last_error TEXT, scheduled_at INTEGER NOT NULL, sent_at INTEGER);
+CREATE TABLE IF NOT EXISTS notifications (dedupe_key TEXT PRIMARY KEY, channel TEXT NOT NULL, kind TEXT NOT NULL, status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, last_error TEXT, scheduled_at INTEGER NOT NULL, sent_at INTEGER, body TEXT NOT NULL DEFAULT '');
 CREATE TABLE IF NOT EXISTS telegram_updates (id INTEGER PRIMARY KEY CHECK(id=1), offset INTEGER NOT NULL DEFAULT 0);
 INSERT OR IGNORE INTO telegram_updates(id,offset) VALUES(1,0);
 `)
 	if err != nil {
 		return err
 	}
+	if err = s.ensureNotificationBody(); err != nil {
+		return err
+	}
 	return s.migrateAccounts()
 }
 
+func (s *Store) ensureNotificationBody() error {
+	rows, err := s.DB.Query("PRAGMA table_info(notifications)")
+	if err != nil {
+		return err
+	}
+	hasBody := false
+	for rows.Next() {
+		var cid, notnull, pk int
+		var name, typ string
+		var def any
+		if err = rows.Scan(&cid, &name, &typ, &notnull, &def, &pk); err != nil {
+			rows.Close()
+			return err
+		}
+		hasBody = hasBody || name == "body"
+	}
+	if err = rows.Close(); err != nil {
+		return err
+	}
+	if hasBody {
+		return nil
+	}
+	// Legacy unsent rows have no recoverable message body. Remove them so the
+	// reminder scheduler can recreate every still-applicable retry from the
+	// current dashboard instead of having INSERT OR IGNORE collide with an
+	// empty-body row. Sent rows remain as dedupe records.
+	_, err = s.DB.Exec(`ALTER TABLE notifications ADD COLUMN body TEXT NOT NULL DEFAULT '';
+		DELETE FROM notifications WHERE status != 'sent';`)
+	return err
+}
+
 func (s *Store) migrateAccounts() error {
 	tx, err := s.DB.Begin()
 	if err != nil {

backend/internal/store/store_test.go

@@ -174,6 +174,44 @@ func TestPopulatedLegacyLimitSnapshotsMigrateToDefaultAccount(t *testing.T) {
 	}
 }
 
+func TestLegacyNotificationsGainBodyColumn(t *testing.T) {
+	dir := t.TempDir()
+	db, err := sql.Open("sqlite", filepath.Join(dir, "codex-helper.db"))
+	if err != nil {
+		t.Fatal(err)
+	}
+	_, err = db.Exec(`CREATE TABLE notifications (
+		dedupe_key TEXT PRIMARY KEY, channel TEXT NOT NULL, kind TEXT NOT NULL,
+		status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, last_error TEXT,
+		scheduled_at INTEGER NOT NULL, sent_at INTEGER
+	);
+	INSERT INTO notifications(dedupe_key,channel,kind,status,scheduled_at)
+		VALUES('pending-key','configured','after','pending',1);
+	INSERT INTO notifications(dedupe_key,channel,kind,status,scheduled_at,sent_at)
+		VALUES('sent-key','configured','after','sent',1,2);`)
+	if err != nil {
+		t.Fatal(err)
+	}
+	_ = db.Close()
+
+	s, err := Open(dir)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer s.DB.Close()
+	var count int
+	if err = s.DB.QueryRow("SELECT COUNT(*) FROM notifications WHERE dedupe_key='pending-key'").Scan(&count); err != nil || count != 0 {
+		t.Fatalf("legacy pending notification was not removed: count=%d err=%v", count, err)
+	}
+	if err = s.DB.QueryRow("SELECT COUNT(*) FROM notifications WHERE dedupe_key='sent-key'").Scan(&count); err != nil || count != 1 {
+		t.Fatalf("sent dedupe notification was not preserved: count=%d err=%v", count, err)
+	}
+	if _, err = s.DB.Exec(`INSERT INTO notifications
+		(dedupe_key,channel,kind,status,scheduled_at,body) VALUES('key','configured','after','pending',1,'message')`); err != nil {
+		t.Fatalf("body column was not added: %v", err)
+	}
+}
+
 func TestBackupIncludesCommittedWALData(t *testing.T) {
 	dir := t.TempDir()
 	s, err := Open(dir)