@jsonstudio/rcc 0.89.1562 → 0.89.1803

package/dist/docs/daemon-admin-ui.html

@@ -557,6 +557,40 @@
         color: rgba(255, 255, 255, 0.82);
       }
 
+
+      .auth-selection-summary {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 8px;
+        margin-top: 6px;
+      }
+
+      .auth-mode-panels {
+        border: 1px solid var(--border);
+        border-radius: 12px;
+        padding: 10px;
+        background: rgba(0, 0, 0, 0.16);
+        margin-bottom: 10px;
+      }
+
+      .auth-mode-panel .section-sub {
+        margin-bottom: 8px;
+      }
+
+      .auth-verify-url {
+        margin: 8px 0;
+        white-space: pre-wrap;
+        word-break: break-all;
+      }
+
+      .auth-mode-tabs {
+        margin: 10px 0;
+      }
+
+      .auth-mode-tabs .tab {
+        min-width: 120px;
+      }
+
       .log {
         white-space: pre-wrap;
         font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono",
@@ -604,6 +638,7 @@
           <div class="statusline">
             <div class="pill"><span id="statusDot" class="dot"></span><span id="statusText">connecting…</span></div>
             <div class="pill"><span class="mono" id="serverId">serverId: —</span></div>
+            <div class="pill"><span class="mono" id="serverVersion">version: —</span></div>
             <button id="restartRuntimeBtn" class="primary">Restart runtime</button>
           </div>
         </header>
@@ -660,13 +695,105 @@
         </div>
 
         <div class="tabs">
+          <button class="tab" data-tab="control">Control</button>
           <button class="tab active" data-tab="providers">Provider Pool</button>
+          <button class="tab" data-tab="stats">Stats</button>
           <button class="tab" data-tab="tokens">Token Stats</button>
           <button class="tab" data-tab="credentials">Auth Provider Pool</button>
           <button class="tab" data-tab="quota">Quota Pool</button>
           <button class="tab" data-tab="routing">Runtime Routing Pool</button>
         </div>
 
+        <section id="panelControl" data-panel="control" style="display:none;">
+          <div class="grid grid-wide-left">
+            <div class="card" style="box-shadow: none;">
+              <p class="section-title">Control plane (single entry)</p>
+              <p class="section-sub">
+                This panel uses <span class="mono">/daemon/control/snapshot</span> and <span class="mono">/daemon/control/mutate</span>
+                to manage all local servers (broadcast restart) and quota operations from one port.
+              </p>
+              <div class="row" style="margin-bottom: 10px;">
+                <button id="controlRefreshBtn" class="primary">Refresh</button>
+                <button id="controlRestartAllBtn" class="danger">Restart all servers</button>
+                <button id="controlQuotaRefreshBtn">Refresh quota</button>
+                <span id="controlHint" class="muted" style="margin-left:auto; font-size:12px;"></span>
+              </div>
+              <div class="table-wrap">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>port</th>
+                      <th>version</th>
+                      <th>ready</th>
+                      <th>pids</th>
+                    </tr>
+                  </thead>
+                  <tbody id="controlServersTbody"></tbody>
+                </table>
+              </div>
+              <p class="section-title" style="margin-top: 12px;">Routing hits (llmswitch-core)</p>
+              <div class="table-wrap">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>route</th>
+                      <th>hits</th>
+                    </tr>
+                  </thead>
+                  <tbody id="controlHitsTbody"></tbody>
+                </table>
+              </div>
+              <div id="controlOpLog" class="log" style="margin-top: 10px; display:none;"></div>
+            </div>
+
+            <div class="card" style="box-shadow: none;">
+              <p class="section-title">Quota actions</p>
+              <p class="section-sub">
+                Offline/Recover/Reset are executed by control plane (no direct writes from UI).
+              </p>
+              <div class="row" style="margin-bottom: 10px;">
+                <label for="controlQuotaKeyInput">providerKey</label>
+                <input id="controlQuotaKeyInput" type="text" placeholder="tab.key1.gpt-5.2-codex" style="flex: 1; min-width: 320px;" />
+              </div>
+              <div class="row" style="margin-bottom: 10px;">
+                <label for="controlQuotaModeSelect">mode</label>
+                <select id="controlQuotaModeSelect" style="width: 140px;">
+                  <option value="cooldown" selected>cooldown</option>
+                  <option value="blacklist">blacklist</option>
+                </select>
+                <label for="controlQuotaDurationSelect">time</label>
+                <select id="controlQuotaDurationSelect" style="width: 160px;">
+                  <option value="5">5m</option>
+                  <option value="15">15m</option>
+                  <option value="30">30m</option>
+                  <option value="60" selected>1h</option>
+                  <option value="180">3h</option>
+                  <option value="360">6h</option>
+                  <option value="720">12h</option>
+                  <option value="1440">24h</option>
+                </select>
+                <button id="controlQuotaOfflineBtn" class="danger">Offline</button>
+                <button id="controlQuotaRecoverBtn">Recover</button>
+                <button id="controlQuotaResetBtn">Reset</button>
+              </div>
+              <div class="table-wrap">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerKey</th>
+                      <th>inPool</th>
+                      <th>reason</th>
+                      <th>cooldownUntil</th>
+                      <th>blacklistUntil</th>
+                    </tr>
+                  </thead>
+                  <tbody id="controlQuotaProvidersTbody"></tbody>
+                </table>
+              </div>
+            </div>
+          </div>
+        </section>
+
         <section id="panelProviders" data-panel="providers">
           <div class="grid grid-wide-left">
             <div class="card" style="box-shadow: none;">
@@ -801,6 +928,132 @@
           </div>
         </section>
 
+        <section id="panelStats" data-panel="stats" style="display:none;">
+          <div class="grid">
+            <div class="card" style="box-shadow:none;">
+              <p class="section-title">Stats (session)</p>
+              <p class="section-sub">
+                Real-time request/error counters aggregated from in-memory buckets (counts provider attempts, including failover retries). Resets on server restart.
+              </p>
+              <div class="row" style="margin-bottom: 10px;">
+                <button id="refreshStatsBtn" class="primary">Refresh</button>
+                <label class="muted" style="display:inline-flex; align-items:center; gap:8px;">
+                  <input id="statsAutoRefresh" type="checkbox" checked />
+                  auto refresh (2s)
+                </label>
+                <span class="mono muted" id="statsLastUpdated"></span>
+              </div>
+              <div class="notice mono" id="statsSessionTotalsBox" style="white-space: pre-wrap;"></div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerId</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsSessionProvidersTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerRuntime</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsSessionRuntimesTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>model</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsSessionModelsTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerKey</th>
+                      <th>model</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsSessionErrorsTbody"></tbody>
+                </table>
+              </div>
+            </div>
+
+            <div class="card" style="box-shadow:none;">
+              <p class="section-title">Stats (historical)</p>
+              <p class="section-sub">
+                Aggregated from <span class="mono">~/.routecodex/logs/provider-stats.jsonl</span> (best-effort).
+              </p>
+              <div class="notice mono" id="statsHistoricalTotalsBox" style="white-space: pre-wrap;"></div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerId</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsHistoricalProvidersTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerRuntime</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsHistoricalRuntimesTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>model</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsHistoricalModelsTbody"></tbody>
+                </table>
+              </div>
+              <div class="table-wrap" style="margin-top: 10px;">
+                <table class="table">
+                  <thead>
+                    <tr>
+                      <th>providerKey</th>
+                      <th>model</th>
+                      <th>req</th>
+                      <th>err</th>
+                    </tr>
+                  </thead>
+                  <tbody id="statsHistoricalErrorsTbody"></tbody>
+                </table>
+              </div>
+            </div>
+          </div>
+        </section>
+
         <section id="panelTokens" data-panel="tokens" style="display:none;">
           <div class="grid">
             <div class="card" style="box-shadow:none;">
@@ -833,9 +1086,9 @@
         </section>
 
         <section id="panelCredentials" data-panel="credentials" style="display:none;">
-          <div class="grid">
+          <div class="grid grid-wide-right">
             <div class="card" style="box-shadow:none;">
-              <p class="section-title">Credentials</p>
+              <p class="section-title">Auth Inventory</p>
               <p class="section-sub">
                 Token files + API key authfiles in <span class="mono">~/.routecodex/auth</span>.
               </p>
@@ -860,10 +1113,11 @@
             </div>
 
             <div class="card" style="box-shadow:none;">
-              <p class="section-title">OAuth / Browser settings</p>
+              <p class="section-title">Auth Workbench</p>
               <p class="section-sub">
-                Set <span class="mono">ROUTECODEX_OAUTH_BROWSER</span> via config so “Authorize” can auto-open with Camoufox.
+                Manual and Auto flows are isolated. Use Manual for explicit user-driven login; use Auto only for provider auto-mode replay.
               </p>
+
               <div class="row" style="margin-bottom: 10px;">
                 <label for="oauthBrowserSelect">oauthBrowser</label>
                 <select id="oauthBrowserSelect">
@@ -873,8 +1127,8 @@
                 <button id="saveOauthBrowserBtn" class="primary">Save</button>
               </div>
 
-              <p class="section-title" style="margin-top: 10px;">Authorize OAuth</p>
-              <div class="row" style="margin-bottom: 10px;">
+              <p class="section-title" style="margin-top: 10px;">Auth Context</p>
+              <div class="row" style="margin-bottom: 8px;">
                 <label for="oauthProviderSelect">provider</label>
                 <select id="oauthProviderSelect">
                   <option value="qwen">qwen</option>
@@ -885,13 +1139,52 @@
                 <label for="oauthAuthAliasInput">alias</label>
                 <input id="oauthAuthAliasInput" type="text" placeholder="default" style="width: 240px;" />
               </div>
+              <div class="auth-selection-summary" style="margin-bottom: 10px;">
+                <span id="oauthSelectionStatusPill" class="pill">status: —</span>
+                <span id="oauthSelectionExpiryPill" class="pill">expires: —</span>
+                <span id="oauthSelectionIssuePill" class="pill">issue: —</span>
+              </div>
+
+              <div class="tabs auth-mode-tabs">
+                <button id="oauthModeManualBtn" class="tab active" type="button">Manual Auth</button>
+                <button id="oauthModeAutoBtn" class="tab" type="button">Auto Auth</button>
+              </div>
+
+              <div class="auth-mode-panels">
+                <div id="oauthManualPanel" class="auth-mode-panel">
+                  <p class="section-sub">Pure manual mode (no auto selector / no auto confirm injection).</p>
+                  <div class="row" style="margin-bottom: 6px;">
+                    <label><input id="oauthManualOpenBrowser" type="checkbox" checked /> open browser</label>
+                    <label><input id="oauthManualForceReauth" type="checkbox" checked /> force reauthorize</label>
+                    <label><input id="oauthManualHeadful" type="checkbox" checked /> headed window</label>
+                    <button id="oauthAuthorizeManualBtn" class="primary" type="button">Start Manual Auth</button>
+                  </div>
+                </div>
+                <div id="oauthAutoPanel" class="auth-mode-panel" style="display:none;">
+                  <p class="section-sub">Auto mode (provider-specific Camoufox auto-mode, fallback handled by runtime).</p>
+                  <div class="row" style="margin-bottom: 6px;">
+                    <label><input id="oauthAutoOpenBrowser" type="checkbox" checked /> open browser</label>
+                    <label><input id="oauthAutoForceReauth" type="checkbox" checked /> force reauthorize</label>
+                    <label><input id="oauthAutoHeadful" type="checkbox" /> debug headful</label>
+                    <button id="oauthAuthorizeAutoBtn" class="primary" type="button">Run Auto Auth</button>
+                  </div>
+                </div>
+              </div>
+
               <div id="oauthAuthIssueHint" class="notice" style="display:none; margin-bottom: 10px; white-space: pre-wrap;"></div>
-              <div class="row" style="margin-bottom: 10px;">
-                <label><input id="oauthOpenBrowser" type="checkbox" checked /> open browser</label>
-                <label><input id="oauthForceReauth" type="checkbox" /> force reauthorize</label>
-                <button id="oauthAuthorizeBtn" class="primary">Authorize</button>
+
+              <div id="oauthVerifyCenter" class="notice" style="display:none; margin-bottom: 10px;">
+                <p class="section-title" style="margin-bottom: 4px;">Verify Center</p>
+                <p class="section-sub" style="margin-bottom: 6px;">If upstream requires account verification, complete it here before re-authorizing.</p>
+                <div id="oauthVerifyUrl" class="mono auth-verify-url">—</div>
+                <div class="row">
+                  <button id="oauthVerifyOpenBtn" type="button">Open Verify in Camoufox</button>
+                  <button id="oauthVerifyCopyBtn" type="button">Copy Verify URL</button>
+                  <button id="oauthVerifyRecheckBtn" type="button">Recheck Status</button>
+                </div>
               </div>
 
+              <p class="section-title" style="margin-top: 10px;">Run Console</p>
               <div id="credentialOpLog" class="log" style="display:none;"></div>
             </div>
           </div>
@@ -905,16 +1198,20 @@
                 VirtualRouter consumes this via <span class="mono">quotaView</span>. When
                 <span class="mono">inPool=false</span>, the provider is treated as removed from the route pool.
 	              </p>
-	              <div class="row" style="margin-bottom: 10px;">
-	                <label for="quotaFilterInput">filter</label>
-	                <input id="quotaFilterInput" type="text" placeholder="providerKey contains…" style="width: 320px;" />
-	                <label><input id="quotaHideOkToggle" type="checkbox" /> hide ok</label>
-	                <label><input id="quotaOnlyRoutedTargetsToggle" type="checkbox" checked /> only routed targets</label>
-	                <span class="muted" style="font-size:12px;">Tip: click a row to fill the offline box.</span>
-	              </div>
-	              <div class="row" style="margin-bottom: 10px;">
-	                <label for="quotaKeyInput">providerKey</label>
-	                <input id="quotaKeyInput" type="text" placeholder="tab.key1.gpt-5.2-codex" style="width: 420px;" />
+		              <div class="row" style="margin-bottom: 10px;">
+		                <label for="quotaFilterInput">filter</label>
+		                <input id="quotaFilterInput" type="text" placeholder="providerKey contains…" style="width: 320px;" />
+		                <label><input id="quotaHideOkToggle" type="checkbox" /> hide ok</label>
+		                <label><input id="quotaOnlyRoutedTargetsToggle" type="checkbox" checked /> only routed targets</label>
+                    <button id="quotaSelectVisibleBtn">Select visible</button>
+                    <button id="quotaClearSelectionBtn">Clear selection</button>
+                    <label><input id="quotaAutoRefreshToggle" type="checkbox" checked /> auto refresh</label>
+                    <span id="quotaSelectionHint" class="muted" style="font-size:12px;">selected 0</span>
+		                <span class="muted" style="font-size:12px;">Tip: click a row to fill the offline box.</span>
+		              </div>
+		              <div class="row" style="margin-bottom: 10px;">
+		                <label for="quotaKeyInput">providerKey</label>
+		                <input id="quotaKeyInput" type="text" placeholder="tab.key1.gpt-5.2-codex" style="width: 420px;" />
 	                <label for="quotaModeSelect">offline mode</label>
 	                <select id="quotaModeSelect" style="width: 140px;">
 	                  <option value="cooldown">cooldown</option>
@@ -934,25 +1231,28 @@
 	                <button id="quotaApplyDisableBtn" class="danger">Offline</button>
 	                <button id="quotaApplyRecoverBtn">Recover</button>
 	                <button id="quotaApplyResetBtn">Reset</button>
-	              </div>
+		              </div>
                 <div class="muted" style="font-size:12px; margin: -6px 0 10px;">
                   Offline removes the provider from the route pool for the selected minutes. Recover brings it back online immediately.
+                  If selection is non-empty, actions apply to selected providerKeys.
                 </div>
-	              <div class="row" style="margin-bottom: 10px;">
-	                <button id="refreshQuotaBtn" class="primary">Refresh provider pool</button>
-	                <button id="refreshQuotaSnapshotBtn" class="primary">Refresh antigravity snapshot</button>
-	                <button id="resetQuotaBtn" class="danger">Reset provider-quota module</button>
+		              <div class="row" style="margin-bottom: 10px;">
+		                <button id="refreshQuotaBtn" class="primary">Refresh provider pool</button>
+		                <button id="refreshQuotaSnapshotBtn" class="primary">Refresh antigravity snapshot</button>
+		                <button id="resetQuotaBtn" class="danger">Reset provider-quota module</button>
               </div>
               <div class="table-wrap">
-                <table class="table">
-                  <thead>
-                    <tr>
-                      <th>provider</th>
-                      <th>key</th>
-                      <th>model</th>
-                      <th>inPool</th>
-                      <th>reason</th>
-                      <th>until</th>
+	                <table class="table">
+	                  <thead>
+	                    <tr>
+	                      <th style="width: 34px;">
+                        <input id="quotaSelectAllVisibleToggle" type="checkbox" title="Select all visible" />
+                      </th>
+	                      <th>key</th>
+	                      <th>model</th>
+	                      <th>inPool</th>
+	                      <th>reason</th>
+	                      <th>until</th>
                       <th>errCount</th>
                       <th></th>
                     </tr>
@@ -1056,19 +1356,26 @@
 
     <script>
       const $ = (id) => document.getElementById(id);
-		      const UI = {
-		        selectedProviderId: "",
-		        lastUnauthorizedToastAt: 0,
-		        adminAuth: null,
-		        quotaProviders: [],
-		        quotaProvidersUpdatedAt: 0,
-		        quotaProviderMap: null,
-		        routingTargets: null,
-		        routingTargetsUpdatedAt: 0,
-		        routingSources: [],
-		        routingSourcesUpdatedAt: 0,
-		        routingLocation: "virtualrouter.routing"
-		      };
+			      const UI = {
+              selectedProviderId: "",
+              lastUnauthorizedToastAt: 0,
+              adminAuth: null,
+              controlSnapshot: null,
+              controlSnapshotUpdatedAt: 0,
+              quotaProviders: [],
+              quotaProvidersUpdatedAt: 0,
+              quotaProviderMap: null,
+              quotaSelection: new Set(),
+              quotaRenderedVisibleKeys: [],
+              quotaRenderedGroups: new Map(),
+              routingTargets: null,
+              routingTargetsUpdatedAt: 0,
+              routingSources: [],
+              routingSourcesUpdatedAt: 0,
+              routingLocation: "virtualrouter.routing",
+              credentials: [],
+              oauthMode: "manual"
+            };
       let toastTimer = null;
 
       function toast(msg, kind = "err") {
@@ -1157,7 +1464,9 @@
           btn.classList.toggle("active", btn.getAttribute("data-tab") === name);
         });
         const panels = [
+          { name: "control", el: $("panelControl") },
           { name: "providers", el: $("panelProviders") },
+          { name: "stats", el: $("panelStats") },
           { name: "tokens", el: $("panelTokens") },
           { name: "credentials", el: $("panelCredentials") },
           { name: "quota", el: $("panelQuota") },
@@ -1167,6 +1476,7 @@
 
         // Light auto-refresh on tab switch to avoid showing stale "Unauthorized" after login.
         void maybeRefreshTab(name);
+        syncStatsAutoRefresh();
       }
 
       function getActiveTab() {
@@ -1176,7 +1486,9 @@
       }
 
       const tabLastRefreshedAt = {
+        control: 0,
         providers: 0,
+        stats: 0,
         tokens: 0,
         credentials: 0,
         quota: 0,
@@ -1192,6 +1504,8 @@
         tabLastRefreshedAt[key] = now;
         try {
           if (key === "providers") await refreshProviders();
+          else if (key === "control") await refreshControl();
+          else if (key === "stats") await refreshStats();
           else if (key === "tokens") await refreshTokens();
           else if (key === "credentials") await refreshCredentials();
 	          else if (key === "quota") {
@@ -1207,6 +1521,32 @@
         }
       }
 
+      let statsAutoRefreshTimer = null;
+      function syncStatsAutoRefresh() {
+        if (statsAutoRefreshTimer) {
+          try { clearInterval(statsAutoRefreshTimer); } catch {}
+          statsAutoRefreshTimer = null;
+        }
+        const active = getActiveTab();
+        if (active !== "stats") {
+          return;
+        }
+        const checkbox = $("statsAutoRefresh");
+        const enabled = checkbox && checkbox.checked;
+        if (!enabled) {
+          return;
+        }
+        if (UI && UI.adminAuth && UI.adminAuth.authenticated === false) {
+          return;
+        }
+        statsAutoRefreshTimer = setInterval(() => {
+          if (getActiveTab() !== "stats") return;
+          const checkboxNow = $("statsAutoRefresh");
+          if (!checkboxNow || !checkboxNow.checked) return;
+          void refreshStats();
+        }, 2000);
+      }
+
       function textOf(value) {
         if (value === null || value === undefined) return "";
         return String(value);
@@ -1231,6 +1571,16 @@
         return tr;
       }
 
+      function createInfoRow(colSpan, message) {
+        const tr = document.createElement("tr");
+        const td = document.createElement("td");
+        td.colSpan = colSpan;
+        td.className = "mono muted";
+        td.textContent = textOf(message);
+        tr.appendChild(td);
+        return tr;
+      }
+
       function setSelectedProviderId(id) {
         UI.selectedProviderId = textOf(id || "");
         const tbody = $("providersTbody");
@@ -1751,6 +2101,14 @@
       }
 
       async function refreshStatus() {
+        // /health is public; use it to always show version even before admin login.
+        try {
+          const res = await fetch("/health");
+          const data = res && res.ok ? await res.json().catch(() => null) : null;
+          $("serverVersion").textContent = `version: ${data && data.version ? data.version : "—"}`;
+        } catch {
+          $("serverVersion").textContent = "version: —";
+        }
         try {
           const data = await apiFetch("/daemon/status");
           $("serverId").textContent = `serverId: ${data.serverId || "—"}`;
@@ -1761,9 +2119,136 @@
           $("statusText").textContent = e && e.status === 401 ? "401 (set API key above)" : "disconnected";
           $("statusDot").classList.remove("ok");
           $("statusDot").classList.add("err");
+          $("serverId").textContent = "serverId: —";
         }
       }
 
+      function formatTs(ms) {
+        if (ms === null || ms === undefined) return "—";
+        const n = Number(ms);
+        if (!Number.isFinite(n) || n <= 0) return "—";
+        try {
+          return new Date(n).toLocaleString();
+        } catch {
+          return String(n);
+        }
+      }
+
+      function renderControlSnapshot() {
+        const snap = UI.controlSnapshot;
+        const serversBody = $("controlServersTbody");
+        const hitsBody = $("controlHitsTbody");
+        const quotaBody = $("controlQuotaProvidersTbody");
+        if (serversBody) serversBody.replaceChildren();
+        if (hitsBody) hitsBody.replaceChildren();
+        if (quotaBody) quotaBody.replaceChildren();
+        if (!snap || typeof snap !== "object") {
+          if (serversBody) serversBody.appendChild(createErrorRow(4, "No snapshot"));
+          if (hitsBody) hitsBody.appendChild(createErrorRow(2, "No snapshot"));
+          if (quotaBody) quotaBody.appendChild(createErrorRow(5, "No snapshot"));
+          return;
+        }
+        const servers = Array.isArray(snap.servers) ? snap.servers : [];
+        if (!servers.length) {
+          if (serversBody) serversBody.appendChild(createErrorRow(4, "No local servers discovered"));
+        } else if (serversBody) {
+          for (const s of servers) {
+            const tr = document.createElement("tr");
+            tr.appendChild(createCell("td", String(s.port ?? "—"), "mono"));
+            tr.appendChild(createCell("td", textOf(s.version || "—"), "mono"));
+            tr.appendChild(createCell("td", s.ready === true ? "true" : s.ready === false ? "false" : "—", ""));
+            tr.appendChild(createCell("td", Array.isArray(s.pids) ? s.pids.join(" ") : "", "mono"));
+            serversBody.appendChild(tr);
+          }
+        }
+
+        try {
+          const llms = snap.llmsStats && typeof snap.llmsStats === "object" ? snap.llmsStats : null;
+          const routeHits =
+            llms && llms.router && llms.router.global && llms.router.global.routeHitCount
+              ? llms.router.global.routeHitCount
+              : null;
+          const entries = routeHits && typeof routeHits === "object" ? Object.entries(routeHits) : [];
+          entries.sort((a, b) => Number(b[1] || 0) - Number(a[1] || 0));
+          const top = entries.slice(0, 20);
+          if (!top.length) {
+            if (hitsBody) hitsBody.appendChild(createErrorRow(2, "No routing hits recorded yet"));
+          } else if (hitsBody) {
+            for (const [route, count] of top) {
+              const tr = document.createElement("tr");
+              tr.appendChild(createCell("td", String(route || "—"), "mono"));
+              tr.appendChild(createCell("td", String(count ?? 0), "mono"));
+              hitsBody.appendChild(tr);
+            }
+          }
+        } catch {
+          if (hitsBody) hitsBody.appendChild(createErrorRow(2, "Failed to read routing hits"));
+        }
+
+        const quota = snap.quota && typeof snap.quota === "object" ? snap.quota : null;
+        const providers = quota && Array.isArray(quota.providers) ? quota.providers : [];
+        const list = providers
+          .map((p) => ({
+            providerKey: textOf(p.providerKey),
+            inPool: Boolean(p.inPool),
+            reason: textOf(p.reason),
+            cooldownUntil: p.cooldownUntil ?? null,
+            blacklistUntil: p.blacklistUntil ?? null
+          }))
+          .filter((p) => p.providerKey);
+        list.sort((a, b) => a.providerKey.localeCompare(b.providerKey));
+        const max = 60;
+        const visible = list.slice(0, max);
+        if (!visible.length) {
+          if (quotaBody) quotaBody.appendChild(createErrorRow(5, "No quota providers"));
+        } else if (quotaBody) {
+          for (const p of visible) {
+            const tr = document.createElement("tr");
+            tr.appendChild(createCell("td", p.providerKey, "mono truncate", { title: true }));
+            tr.appendChild(createCell("td", p.inPool ? "true" : "false", p.inPool ? "" : "danger"));
+            tr.appendChild(createCell("td", p.reason || "—", "mono truncate", { title: true }));
+            tr.appendChild(createCell("td", formatTs(p.cooldownUntil), "mono"));
+            tr.appendChild(createCell("td", formatTs(p.blacklistUntil), "mono"));
+            quotaBody.appendChild(tr);
+          }
+          if (list.length > max) {
+            const tr = document.createElement("tr");
+            const td = document.createElement("td");
+            td.colSpan = 5;
+            td.className = "muted";
+            td.textContent = `… ${list.length - max} more hidden`;
+            tr.appendChild(td);
+            quotaBody.appendChild(tr);
+          }
+        }
+
+        const hint = $("controlHint");
+        if (hint) {
+          hint.textContent = `servers: ${servers.length} · quota keys: ${list.length} · updated: ${formatTs(snap.nowMs)}`;
+        }
+      }
+
+      async function refreshControl() {
+        setLog("controlOpLog", "");
+        try {
+          const snap = await apiFetch("/daemon/control/snapshot");
+          UI.controlSnapshot = snap;
+          UI.controlSnapshotUpdatedAt = Date.now();
+          renderControlSnapshot();
+        } catch (e) {
+          if (e && e.status === 401) notifyUnauthorizedOnce("control");
+          setLog("controlOpLog", `Control snapshot failed: ${e.message || e}`);
+        }
+      }
+
+      async function controlMutate(action, payload = {}) {
+        const out = await apiFetch("/daemon/control/mutate", {
+          method: "POST",
+          body: JSON.stringify({ action, ...payload })
+        });
+        return out;
+      }
+
       async function refreshProviders() {
         const body = $("providersTbody");
         body.replaceChildren();
@@ -1976,27 +2461,150 @@
         return null;
       }
 
+      function findCredentialForSelection(providerRaw, aliasRaw) {
+        const provider = textOf(providerRaw || "").trim().toLowerCase();
+        const alias = textOf(aliasRaw || "default").trim().toLowerCase() || "default";
+        const list = Array.isArray(UI.credentials) ? UI.credentials : [];
+        for (const item of list) {
+          const itemProvider = textOf(item && item.provider ? item.provider : "").trim().toLowerCase();
+          const itemAlias = textOf(item && item.alias ? item.alias : "default").trim().toLowerCase() || "default";
+          const kind = textOf(item && item.kind ? item.kind : "").trim().toLowerCase();
+          if (kind !== "oauth") continue;
+          if (itemProvider === provider && itemAlias === alias) {
+            return item;
+          }
+        }
+        return null;
+      }
+
+      function formatCredentialExpiry(cred) {
+        if (!cred || cred.expiresInSec == null) return "—";
+        const sec = Number(cred.expiresInSec);
+        if (!Number.isFinite(sec)) return "—";
+        if (sec <= 0) return "expired";
+        if (sec < 60) return `${sec}s`;
+        const min = Math.round(sec / 60);
+        if (min < 60) return `${min}m`;
+        const hour = Math.round(min / 60);
+        return `${hour}h`;
+      }
+
+      function setOauthMode(modeRaw) {
+        const mode = modeRaw === "auto" ? "auto" : "manual";
+        UI.oauthMode = mode;
+        const manualBtn = $("oauthModeManualBtn");
+        const autoBtn = $("oauthModeAutoBtn");
+        const manualPanel = $("oauthManualPanel");
+        const autoPanel = $("oauthAutoPanel");
+        if (manualBtn) manualBtn.classList.toggle("active", mode === "manual");
+        if (autoBtn) autoBtn.classList.toggle("active", mode === "auto");
+        if (manualPanel) manualPanel.style.display = mode === "manual" ? "block" : "none";
+        if (autoPanel) autoPanel.style.display = mode === "auto" ? "block" : "none";
+      }
+
       function updateOauthAuthIssueHint() {
-        const el = $("oauthAuthIssueHint");
-        if (!el) return;
+        const issueHint = $("oauthAuthIssueHint");
+        const verifyCenter = $("oauthVerifyCenter");
+        const verifyUrlEl = $("oauthVerifyUrl");
         const provider = textOf($("oauthProviderSelect").value || "").trim().toLowerCase();
-        const alias = textOf($("oauthAuthAliasInput").value || "default").trim().toLowerCase();
+        const alias = textOf($("oauthAuthAliasInput").value || "default").trim().toLowerCase() || "default";
         const issue = findAuthIssueForProviderAlias(provider, alias);
+        const cred = findCredentialForSelection(provider, alias);
+
+        const statusPill = $("oauthSelectionStatusPill");
+        const expiryPill = $("oauthSelectionExpiryPill");
+        const issuePill = $("oauthSelectionIssuePill");
+        if (statusPill) {
+          statusPill.textContent = `status: ${cred ? textOf(cred.status || "—") : "not found"}`;
+          statusPill.className = "pill";
+          const statusRaw = textOf(cred && cred.status ? cred.status : "").trim().toLowerCase();
+          if (statusRaw === "valid") statusPill.classList.add("ok");
+          else if (statusRaw === "expired" || statusRaw === "invalid") statusPill.classList.add("bad");
+          else if (statusRaw) statusPill.classList.add("warn");
+        }
+        if (expiryPill) {
+          expiryPill.textContent = `expires: ${formatCredentialExpiry(cred)}`;
+          expiryPill.className = "pill";
+          const exp = Number(cred && cred.expiresInSec != null ? cred.expiresInSec : NaN);
+          if (Number.isFinite(exp) && exp > 0 && exp < 600) {
+            expiryPill.classList.add("warn");
+          }
+        }
+        if (issuePill) {
+          const hasIssue = Boolean(issue);
+          issuePill.textContent = hasIssue ? "issue: verify required" : "issue: —";
+          issuePill.className = `pill${hasIssue ? " bad" : ""}`;
+        }
+
         if (!issue) {
-          el.style.display = "none";
-          el.textContent = "";
-          return;
+          if (issueHint) {
+            issueHint.style.display = "none";
+            issueHint.textContent = "";
+          }
+          if (verifyCenter) verifyCenter.style.display = "none";
+          if (verifyUrlEl) verifyUrlEl.textContent = "—";
+          return null;
         }
+
         if (issue.kind === "google_account_verification") {
-          const url = issue.url ? `\n\nOpen: ${issue.url}` : "";
-          el.textContent =
-            `⚠ Google requires account verification for alias \"${alias}\".\n` +
-            `Complete the browser verification flow, then click Authorize again.${url}`;
-          el.style.display = "block";
+          if (issueHint) {
+            issueHint.textContent =
+              `⚠ Google requires account verification for alias "${alias}".\n` +
+              `Use Verify Center to open the exact verify URL in Camoufox, then re-run auth.`;
+            issueHint.style.display = "block";
+          }
+          if (verifyCenter) verifyCenter.style.display = "block";
+          if (verifyUrlEl) verifyUrlEl.textContent = issue.url || "(missing verify url from quota state)";
+          return issue;
+        }
+
+        if (issueHint) {
+          issueHint.style.display = "none";
+          issueHint.textContent = "";
+        }
+        if (verifyCenter) verifyCenter.style.display = "none";
+        if (verifyUrlEl) verifyUrlEl.textContent = "—";
+        return issue;
+      }
+
+      async function openAuthIssueInCamoufox(provider, alias, url) {
+        setLog("credentialOpLog", "");
+        try {
+          await apiFetch("/daemon/oauth/open", {
+            method: "POST",
+            body: JSON.stringify({ provider, alias, url })
+          });
+          setLog("credentialOpLog", `Opened verification URL in Camoufox for ${provider}.${alias}.`);
+        } catch (e) {
+          setLog("credentialOpLog", `Open failed: ${e.message}`);
+        }
+      }
+
+      async function openSelectedVerifyUrl() {
+        const provider = textOf($("oauthProviderSelect").value || "").trim().toLowerCase();
+        const alias = textOf($("oauthAuthAliasInput").value || "default").trim().toLowerCase() || "default";
+        const issue = findAuthIssueForProviderAlias(provider, alias);
+        if (!issue || !issue.url) {
+          setLog("credentialOpLog", "No verify URL available for current provider/alias.");
+          return;
+        }
+        await openAuthIssueInCamoufox(provider, alias, issue.url);
+      }
+
+      async function copySelectedVerifyUrl() {
+        const provider = textOf($("oauthProviderSelect").value || "").trim().toLowerCase();
+        const alias = textOf($("oauthAuthAliasInput").value || "default").trim().toLowerCase() || "default";
+        const issue = findAuthIssueForProviderAlias(provider, alias);
+        if (!issue || !issue.url) {
+          setLog("credentialOpLog", "No verify URL available for current provider/alias.");
           return;
         }
-        el.style.display = "none";
-        el.textContent = "";
+        try {
+          await navigator.clipboard.writeText(issue.url);
+          setLog("credentialOpLog", "Verify URL copied.");
+        } catch (e) {
+          setLog("credentialOpLog", `Copy failed: ${e && e.message ? e.message : String(e)}`);
+        }
       }
 
       function listAntigravityProviderKeysByAlias(aliasRaw) {
@@ -2045,6 +2653,7 @@
         body.replaceChildren();
         try {
           const items = await apiFetch("/daemon/credentials");
+          UI.credentials = Array.isArray(items) ? items : [];
           // Best-effort: load quota provider state so we can surface upstream auth issues (e.g. Google verify required).
           try {
             const quota = await apiFetch("/quota/providers");
@@ -2056,7 +2665,6 @@
             // ignore
           }
 
-          updateOauthAuthIssueHint();
           for (const c of items || []) {
             const tr = document.createElement("tr");
             const exp = c.expiresInSec == null ? "—" : `${c.expiresInSec}s`;
@@ -2072,11 +2680,13 @@
               if (issue.url) {
                 statusTd.appendChild(document.createTextNode(" "));
                 const a = document.createElement("a");
-                a.href = issue.url;
-                a.target = "_blank";
-                a.rel = "noreferrer";
+                a.href = "#";
                 a.textContent = "open";
                 a.className = "mono";
+                a.addEventListener("click", (ev) => {
+                  ev.preventDefault();
+                  void openAuthIssueInCamoufox(c.provider, c.alias, issue.url);
+                });
                 statusTd.appendChild(a);
               }
             }
@@ -2085,8 +2695,10 @@
             tr.appendChild(createCell("td", c.secretRef || "—", "mono"));
             body.appendChild(tr);
           }
+          updateOauthAuthIssueHint();
         } catch (e) {
           body.appendChild(createErrorRow(6, e && e.message ? e.message : e));
+          updateOauthAuthIssueHint();
         }
       }
 
@@ -2112,37 +2724,45 @@
         }
       }
 
-	      async function authorizeOauth() {
-	        setLog("credentialOpLog", "");
-	        const provider = $("oauthProviderSelect").value;
-	        const alias = ($("oauthAuthAliasInput").value || "default").trim() || "default";
-	        updateOauthAuthIssueHint();
-	        const openBrowser = $("oauthOpenBrowser").checked;
-	        const forceReauthorize = $("oauthForceReauth").checked;
-	        try {
-	          const out = await apiFetch("/daemon/oauth/authorize", {
-	            method: "POST",
-	            body: JSON.stringify({ provider, alias, openBrowser, forceReauthorize })
-	          });
-	          setLog("credentialOpLog", `OK. tokenFile: ${out.tokenFile || "—"}`);
-	          await refreshCredentials();
-	          // If OAuth was blocked by Google account verification and the user just completed it,
-	          // attempt to recover the alias back into the pool.
-	          if (textOf(provider).trim().toLowerCase() === "antigravity") {
-	            try {
-	              await recoverAntigravityAliasIfAuthVerify(alias);
-	            } catch {}
-	            try {
-	              await refreshQuota();
-	              await refreshCredentials();
-	            } catch {}
-	          }
-	        } catch (e) {
-	          setLog("credentialOpLog", `Authorize failed: ${e.message}`);
-	        }
-	      }
+      async function authorizeOauth(mode = "manual") {
+        const safeMode = mode === "auto" ? "auto" : "manual";
+        setLog("credentialOpLog", "");
+        const provider = $("oauthProviderSelect").value;
+        const alias = ($("oauthAuthAliasInput").value || "default").trim() || "default";
+        updateOauthAuthIssueHint();
+
+        const openBrowser = safeMode === "auto"
+          ? Boolean($("oauthAutoOpenBrowser") && $("oauthAutoOpenBrowser").checked)
+          : Boolean($("oauthManualOpenBrowser") && $("oauthManualOpenBrowser").checked);
+        const forceReauthorize = safeMode === "auto"
+          ? Boolean($("oauthAutoForceReauth") && $("oauthAutoForceReauth").checked)
+          : Boolean($("oauthManualForceReauth") && $("oauthManualForceReauth").checked);
+        const headful = safeMode === "auto"
+          ? Boolean($("oauthAutoHeadful") && $("oauthAutoHeadful").checked)
+          : Boolean($("oauthManualHeadful") && $("oauthManualHeadful").checked);
 
-	      const routingEditorState = {
+        try {
+          const out = await apiFetch("/daemon/oauth/authorize", {
+            method: "POST",
+            body: JSON.stringify({ provider, alias, openBrowser, forceReauthorize, mode: safeMode, headful })
+          });
+          setLog("credentialOpLog", `[${safeMode}] OK. tokenFile: ${out.tokenFile || "—"}`);
+          await refreshCredentials();
+          if (textOf(provider).trim().toLowerCase() === "antigravity") {
+            try {
+              await recoverAntigravityAliasIfAuthVerify(alias);
+            } catch {}
+            try {
+              await refreshQuota();
+              await refreshCredentials();
+            } catch {}
+          }
+        } catch (e) {
+          setLog("credentialOpLog", `[${safeMode}] Authorize failed: ${e.message}`);
+        }
+      }
+
+      const routingEditorState = {
 	        value: {},
 	        dirty: false
 	      };
@@ -2799,13 +3419,14 @@
         }
       }
 
-      async function refreshQuota() {
-        const body = $("quotaTbody");
-        body.replaceChildren();
-        setLog("quotaOpLog", "");
-        try {
-          // Load routing targets so we can filter out providers not referenced by routing pools.
-          await refreshRoutingTargets();
+	      async function refreshQuota() {
+	        const body = $("quotaTbody");
+	        body.replaceChildren();
+	        setLog("quotaOpLog", "");
+          clearQuotaRenderedGroups();
+	        try {
+	          // Load routing targets so we can filter out providers not referenced by routing pools.
+	          await refreshRoutingTargets();
           // Force refresh quota first so UI doesn't show stale pool state.
           try {
             await apiFetch("/daemon/modules/quota/refresh", { method: "POST" });
@@ -2824,23 +3445,119 @@
           const out = await apiFetch("/quota/providers");
           UI.quotaProviders = Array.isArray(out.providers) ? out.providers : [];
           UI.quotaProvidersUpdatedAt = Date.now();
-          UI.quotaProviderMap = new Map(UI.quotaProviders.map((q) => [textOf(q.providerKey), q]));
-          updateOauthAuthIssueHint();
-          renderQuotaProviders();
-        } catch (e) {
-          if (e && e.status === 401) notifyUnauthorizedOnce("quota");
-          else toast(e && e.message ? e.message : String(e || "quota refresh failed"));
-          body.appendChild(createErrorRow(8, e && e.message ? e.message : e));
+	          UI.quotaProviderMap = new Map(UI.quotaProviders.map((q) => [textOf(q.providerKey), q]));
+	          updateOauthAuthIssueHint();
+	          renderQuotaProviders();
+            updateQuotaSelectionSummary();
+	        } catch (e) {
+	          if (e && e.status === 401) notifyUnauthorizedOnce("quota");
+	          else toast(e && e.message ? e.message : String(e || "quota refresh failed"));
+	          body.appendChild(createErrorRow(8, e && e.message ? e.message : e));
+	        }
+	      }
+
+        function normalizeProviderKeyList(value) {
+          if (Array.isArray(value)) {
+            return value.map((k) => textOf(k)).map((k) => k.trim()).filter(Boolean);
+          }
+          const single = textOf(value || "").trim();
+          return single ? [single] : [];
         }
-      }
 
-      function renderQuotaProviders() {
-        const body = $("quotaTbody");
-        body.replaceChildren();
+        function clearQuotaRenderedGroups() {
+          UI.quotaRenderedVisibleKeys = [];
+          UI.quotaRenderedGroups = new Map();
+        }
 
-        const filter = textOf($("quotaFilterInput").value || "").trim().toLowerCase();
-        const hideOk = Boolean($("quotaHideOkToggle").checked);
-        const onlyRoutedTargets = Boolean($("quotaOnlyRoutedTargetsToggle").checked);
+        function computeSelectionState(keys) {
+          const sel = UI.quotaSelection instanceof Set ? UI.quotaSelection : new Set();
+          let any = false;
+          let all = true;
+          for (const k of keys) {
+            const hit = sel.has(k);
+            if (hit) any = true;
+            else all = false;
+          }
+          return { any, all };
+        }
+
+        function setGroupCheckboxState(checkbox, keys) {
+          if (!checkbox) return;
+          const { any, all } = computeSelectionState(keys);
+          checkbox.indeterminate = Boolean(any && !all);
+          checkbox.checked = Boolean(all && keys.length > 0);
+        }
+
+        function syncQuotaRowCheckboxes() {
+          const sel = UI.quotaSelection instanceof Set ? UI.quotaSelection : new Set();
+          const body = $("quotaTbody");
+          if (!body) return;
+          body.querySelectorAll("input[data-select-key]").forEach((el) => {
+            const key = el.getAttribute("data-select-key");
+            if (!key) return;
+            el.checked = sel.has(key);
+          });
+        }
+
+        function updateQuotaSelectionSummary() {
+          syncQuotaRowCheckboxes();
+          const hint = $("quotaSelectionHint");
+          if (hint) {
+            const n = UI.quotaSelection instanceof Set ? UI.quotaSelection.size : 0;
+            hint.textContent = `selected ${n}`;
+          }
+          const master = $("quotaSelectAllVisibleToggle");
+          if (master) {
+            setGroupCheckboxState(master, Array.isArray(UI.quotaRenderedVisibleKeys) ? UI.quotaRenderedVisibleKeys : []);
+          }
+          if (UI.quotaRenderedGroups instanceof Map) {
+            for (const entry of UI.quotaRenderedGroups.values()) {
+              if (!entry || !entry.checkbox || !Array.isArray(entry.keys)) continue;
+              setGroupCheckboxState(entry.checkbox, entry.keys);
+            }
+          }
+        }
+
+        function setQuotaSelection(keys, selected) {
+          if (!(UI.quotaSelection instanceof Set)) UI.quotaSelection = new Set();
+          for (const k of keys) {
+            if (!k) continue;
+            if (selected) UI.quotaSelection.add(k);
+            else UI.quotaSelection.delete(k);
+          }
+          updateQuotaSelectionSummary();
+        }
+
+        function clearQuotaSelection() {
+          if (UI.quotaSelection instanceof Set) UI.quotaSelection.clear();
+          updateQuotaSelectionSummary();
+        }
+
+        function resolveQuotaActionTargets() {
+          const selected = UI.quotaSelection instanceof Set ? Array.from(UI.quotaSelection) : [];
+          if (selected.length) return selected;
+          return normalizeProviderKeyList($("quotaKeyInput")?.value);
+        }
+
+        let quotaRefreshTimer = null;
+        function scheduleQuotaRefresh() {
+          const auto = $("quotaAutoRefreshToggle");
+          if (auto && auto.checked === false) return;
+          if (quotaRefreshTimer) clearTimeout(quotaRefreshTimer);
+          quotaRefreshTimer = setTimeout(() => {
+            quotaRefreshTimer = null;
+            void refreshQuota();
+          }, 550);
+        }
+
+	      function renderQuotaProviders() {
+	        const body = $("quotaTbody");
+	        body.replaceChildren();
+          clearQuotaRenderedGroups();
+
+	        const filter = textOf($("quotaFilterInput").value || "").trim().toLowerCase();
+	        const hideOk = Boolean($("quotaHideOkToggle").checked);
+	        const onlyRoutedTargets = Boolean($("quotaOnlyRoutedTargetsToggle").checked);
         const routedProviderKeys = onlyRoutedTargets ? resolveRoutedProviderKeys(UI.routingTargets, UI.quotaProviders) : null;
 
         const list = Array.isArray(UI.quotaProviders) ? UI.quotaProviders : [];
@@ -2854,20 +3571,13 @@
           })
           .slice();
 
-        next.sort((a, b) => {
-          const aIn = a && a.inPool === true ? 1 : 0;
-          const bIn = b && b.inPool === true ? 1 : 0;
-          if (aIn !== bIn) return aIn - bIn; // inPool=false first
-          const aUntil = Math.max(Number(a?.blacklistUntil || 0), Number(a?.cooldownUntil || 0));
-          const bUntil = Math.max(Number(b?.blacklistUntil || 0), Number(b?.cooldownUntil || 0));
-          if (aUntil !== bUntil) return bUntil - aUntil;
-          return textOf(a?.providerKey).localeCompare(textOf(b?.providerKey));
-        });
+        // Keep order stable across polling refreshes: avoid health-based sorting which makes the table jump.
+        next.sort((a, b) => textOf(a?.providerKey).localeCompare(textOf(b?.providerKey)));
 
-        if (!next.length) {
-          body.appendChild(createErrorRow(8, "No providers matched filter."));
-          return;
-        }
+	        if (!next.length) {
+	          body.appendChild(createErrorRow(8, "No providers matched filter."));
+	          return;
+	        }
 
         function splitProviderKey(providerKey) {
           const raw = textOf(providerKey || "");
@@ -2891,52 +3601,86 @@
           byAlias.get(authAlias).push({ q, pk, providerId, authAlias, model });
         }
 
-        const providerIds = Array.from(byProvider.keys()).sort((a, b) => a.localeCompare(b));
-        const groupCols = 8;
-
-        const appendGroupRow = (label, indent = false) => {
-          const tr = document.createElement("tr");
-          tr.className = "group-row";
-          const td = document.createElement("td");
-          td.colSpan = groupCols;
-          td.textContent = label;
-          if (indent) td.className = "indent";
-          tr.appendChild(td);
-          body.appendChild(tr);
-        };
-
-        for (const providerId of providerIds) {
-          const byAlias = byProvider.get(providerId);
-          let modelsCount = 0;
-          for (const v of byAlias.values()) modelsCount += v.length;
-          appendGroupRow(`${providerId} (${modelsCount})`);
-
-          const aliases = Array.from(byAlias.keys()).sort((a, b) => a.localeCompare(b));
-          for (const alias of aliases) {
-            const items = byAlias.get(alias);
+	        const providerIds = Array.from(byProvider.keys()).sort((a, b) => a.localeCompare(b));
+	        const groupCols = 8;
+
+	        const appendGroupRow = (label, opts = {}) => {
+	          const tr = document.createElement("tr");
+	          tr.className = "group-row";
+            const keys = Array.isArray(opts.keys) ? opts.keys : [];
+            const canSelect = Boolean(keys.length);
+            const td0 = document.createElement("td");
+            td0.className = "check-cell";
+            if (canSelect) {
+              const cb = document.createElement("input");
+              cb.type = "checkbox";
+              cb.title = "Select group";
+              cb.addEventListener("change", () => setQuotaSelection(keys, cb.checked));
+              td0.appendChild(cb);
+              if (UI.quotaRenderedGroups instanceof Map && typeof opts.groupId === "string" && opts.groupId) {
+                UI.quotaRenderedGroups.set(opts.groupId, { checkbox: cb, keys });
+              }
+              setGroupCheckboxState(cb, keys);
+            }
+            tr.appendChild(td0);
+
+	          const td = document.createElement("td");
+	          td.colSpan = groupCols - 1;
+	          td.textContent = label;
+	          if (opts.indent) td.className = "indent";
+	          tr.appendChild(td);
+	          body.appendChild(tr);
+	        };
+
+	        for (const providerId of providerIds) {
+	          const byAlias = byProvider.get(providerId);
+	          let modelsCount = 0;
+	          for (const v of byAlias.values()) modelsCount += v.length;
+            const providerKeys = Array.from(byAlias.values()).flatMap((items) => items.map((it) => it.pk));
+	          appendGroupRow(`${providerId} (${modelsCount})`, { keys: providerKeys, groupId: `provider:${providerId}` });
+
+	          const aliases = Array.from(byAlias.keys()).sort((a, b) => a.localeCompare(b));
+	          for (const alias of aliases) {
+	            const items = byAlias.get(alias);
             const fpSuffix = (() => {
               if (providerId !== "antigravity") return "";
               if (!items || !items.length) return "";
               const q0 = items[0] && items[0].q ? items[0].q : null;
               const suffix = textOf(q0 && (q0.fpSuffix || q0.fingerprintSuffix) ? (q0.fpSuffix || q0.fingerprintSuffix) : "");
               return suffix;
-            })();
-            const fpTag = fpSuffix ? ` · fp=${fpSuffix}` : "";
-            appendGroupRow(`${alias || "(no-key)"} (${items.length})${fpTag}`, true);
-
-            for (const item of items) {
-              const q = item.q;
-              const tr = document.createElement("tr");
-              tr.className = "provider-row";
-              tr.setAttribute("data-provider-key", item.pk);
-
-              tr.appendChild(createCell("td", "", "mono"));
-              tr.appendChild(createCell("td", "", "mono"));
-              tr.appendChild(createCell("td", item.model || item.pk, "mono indent", { title: true }));
-
-              const inPool = Boolean(q.inPool);
-              const inTd = document.createElement("td");
-              inTd.appendChild(pill(inPool ? "true" : "false", inPool ? "ok" : "bad"));
+	            })();
+	            const fpTag = fpSuffix ? ` · fp=${fpSuffix}` : "";
+              const aliasKeys = Array.isArray(items) ? items.map((it) => it.pk) : [];
+	            appendGroupRow(`${alias || "(no-key)"} (${items.length})${fpTag}`, {
+                indent: true,
+                keys: aliasKeys,
+                groupId: `alias:${providerId}.${alias || "(no-key)"}`
+              });
+
+	            for (const item of items) {
+	              const q = item.q;
+	              const tr = document.createElement("tr");
+	              tr.className = "provider-row";
+	              tr.setAttribute("data-provider-key", item.pk);
+
+                const selTd = document.createElement("td");
+                selTd.className = "check-cell";
+                const cb = document.createElement("input");
+                cb.type = "checkbox";
+                cb.setAttribute("data-select-key", item.pk);
+                cb.checked = UI.quotaSelection instanceof Set ? UI.quotaSelection.has(item.pk) : false;
+                cb.addEventListener("change", () => {
+                  setQuotaSelection([item.pk], cb.checked);
+                });
+                selTd.appendChild(cb);
+                tr.appendChild(selTd);
+	              tr.appendChild(createCell("td", "", "mono"));
+	              tr.appendChild(createCell("td", item.model || item.pk, "mono indent", { title: true }));
+                UI.quotaRenderedVisibleKeys.push(item.pk);
+
+	              const inPool = Boolean(q.inPool);
+	              const inTd = document.createElement("td");
+	              inTd.appendChild(pill(inPool ? "true" : "false", inPool ? "ok" : "bad"));
               tr.appendChild(inTd);
 
               const reason = textOf(q.reason || "");
@@ -2993,11 +3737,12 @@
               actionsTd.appendChild(box);
               tr.appendChild(actionsTd);
 
-              body.appendChild(tr);
-            }
-          }
-        }
-      }
+	              body.appendChild(tr);
+	            }
+	          }
+	        }
+          updateQuotaSelectionSummary();
+	      }
 
       function formatRemainingFraction(v) {
         if (typeof v !== "number" || !Number.isFinite(v)) return "—";
@@ -3097,6 +3842,166 @@
         return `${label}: requests=${req} (err=${err}) tokens in/out/total=${inTok}/${outTok}/${totTok}`;
       }
 
+      function summarizeStatsRows(rows) {
+        const byProvider = new Map();
+        const byRuntime = new Map();
+        const byModel = new Map();
+        let totalReq = 0;
+        let totalErr = 0;
+        for (const r of rows) {
+          if (!r || !r.providerKey) continue;
+          const providerKey = textOf(r.providerKey);
+          const providerId = (providerKey.split(".")[0] || providerKey).trim() || providerKey;
+          const runtime = (() => {
+            const parts = providerKey.split(".").filter(Boolean);
+            if (parts.length >= 2) return `${parts[0]}.${parts[1]}`;
+            return providerKey;
+          })();
+          const model = textOf(r.model || "");
+          const req = typeof r.requestCount === "number" ? r.requestCount : 0;
+          const err = typeof r.errorCount === "number" ? r.errorCount : 0;
+          totalReq += req;
+          totalErr += err;
+          const p = byProvider.get(providerId) || { providerId, requestCount: 0, errorCount: 0 };
+          p.requestCount += req;
+          p.errorCount += err;
+          byProvider.set(providerId, p);
+          const rt = byRuntime.get(runtime) || { runtime, requestCount: 0, errorCount: 0 };
+          rt.requestCount += req;
+          rt.errorCount += err;
+          byRuntime.set(runtime, rt);
+          const mKey = model || "—";
+          const m = byModel.get(mKey) || { model: mKey, requestCount: 0, errorCount: 0 };
+          m.requestCount += req;
+          m.errorCount += err;
+          byModel.set(mKey, m);
+        }
+        return {
+          totalReq,
+          totalErr,
+          byProvider: Array.from(byProvider.values()).sort((a, b) => b.requestCount - a.requestCount),
+          byRuntime: Array.from(byRuntime.values()).sort((a, b) => b.requestCount - a.requestCount),
+          byModel: Array.from(byModel.values()).sort((a, b) => b.requestCount - a.requestCount)
+        };
+      }
+
+      function renderStatsTable(bodyEl, rows, colCount, emptyMsg) {
+        bodyEl.replaceChildren();
+        if (!rows.length) {
+          bodyEl.appendChild(createInfoRow(colCount, emptyMsg));
+          return;
+        }
+        for (const r of rows) {
+          const tr = document.createElement("tr");
+          for (const cell of r) {
+            tr.appendChild(createCell("td", cell, "mono truncate", { title: true }));
+          }
+          bodyEl.appendChild(tr);
+        }
+      }
+
+      async function refreshStats() {
+        $("statsSessionTotalsBox").textContent = "";
+        $("statsHistoricalTotalsBox").textContent = "";
+        const sessionProvidersBody = $("statsSessionProvidersTbody");
+        const sessionRuntimesBody = $("statsSessionRuntimesTbody");
+        const sessionModelsBody = $("statsSessionModelsTbody");
+        const sessionErrorsBody = $("statsSessionErrorsTbody");
+        const histProvidersBody = $("statsHistoricalProvidersTbody");
+        const histRuntimesBody = $("statsHistoricalRuntimesTbody");
+        const histModelsBody = $("statsHistoricalModelsTbody");
+        const histErrorsBody = $("statsHistoricalErrorsTbody");
+        sessionProvidersBody.replaceChildren();
+        sessionRuntimesBody.replaceChildren();
+        sessionModelsBody.replaceChildren();
+        sessionErrorsBody.replaceChildren();
+        histProvidersBody.replaceChildren();
+        histRuntimesBody.replaceChildren();
+        histModelsBody.replaceChildren();
+        histErrorsBody.replaceChildren();
+
+        try {
+          const out = await apiFetch("/daemon/stats");
+          const session = out && out.session ? out.session : null;
+          const historical = out && out.historical ? out.historical : null;
+          const sessionRows = session && Array.isArray(session.totals) ? session.totals : [];
+          const histRows = historical && Array.isArray(historical.totals) ? historical.totals : [];
+
+          const s = summarizeStatsRows(sessionRows);
+          const h = summarizeStatsRows(histRows);
+
+          $("statsSessionTotalsBox").textContent = `ALL (session): requests=${formatInt(s.totalReq)} (err=${formatInt(s.totalErr)})`;
+          $("statsHistoricalTotalsBox").textContent = `ALL (historical): requests=${formatInt(h.totalReq)} (err=${formatInt(h.totalErr)})`;
+
+          renderStatsTable(
+            sessionProvidersBody,
+            s.byProvider.map((p) => [p.providerId, formatInt(p.requestCount), formatInt(p.errorCount)]),
+            3,
+            "No provider stats recorded in this session."
+          );
+          renderStatsTable(
+            sessionRuntimesBody,
+            s.byRuntime.map((r) => [r.runtime, formatInt(r.requestCount), formatInt(r.errorCount)]),
+            3,
+            "No runtime stats recorded in this session."
+          );
+          renderStatsTable(
+            sessionModelsBody,
+            s.byModel.map((m) => [m.model, formatInt(m.requestCount), formatInt(m.errorCount)]),
+            3,
+            "No model stats recorded in this session."
+          );
+
+          renderStatsTable(
+            histProvidersBody,
+            h.byProvider.map((p) => [p.providerId, formatInt(p.requestCount), formatInt(p.errorCount)]),
+            3,
+            "No historical stats recorded."
+          );
+          renderStatsTable(
+            histRuntimesBody,
+            h.byRuntime.map((r) => [r.runtime, formatInt(r.requestCount), formatInt(r.errorCount)]),
+            3,
+            "No historical stats recorded."
+          );
+          renderStatsTable(
+            histModelsBody,
+            h.byModel.map((m) => [m.model, formatInt(m.requestCount), formatInt(m.errorCount)]),
+            3,
+            "No historical stats recorded."
+          );
+
+          const toProviderKeys = (rows) =>
+            rows
+              .filter((r) => r && r.providerKey)
+              .map((r) => ({
+                providerKey: textOf(r.providerKey),
+                model: textOf(r.model || "—") || "—",
+                req: typeof r.requestCount === "number" ? r.requestCount : 0,
+                err: typeof r.errorCount === "number" ? r.errorCount : 0
+              }))
+              .sort((a, b) => b.req - a.req || b.err - a.err || a.providerKey.localeCompare(b.providerKey))
+              .slice(0, 50)
+              .map((x) => [x.providerKey, x.model, formatInt(x.req), formatInt(x.err)]);
+
+          renderStatsTable(sessionErrorsBody, toProviderKeys(sessionRows), 4, "No provider stats recorded in this session.");
+          renderStatsTable(histErrorsBody, toProviderKeys(histRows), 4, "No historical provider stats recorded.");
+
+          $("statsLastUpdated").textContent = `updated ${formatEpochMs(Date.now())}`;
+        } catch (e) {
+          if (e && e.status === 401) notifyUnauthorizedOnce("stats");
+          const msg = e && e.message ? e.message : e;
+          renderStatsTable(sessionProvidersBody, [], 3, textOf(msg));
+          renderStatsTable(sessionRuntimesBody, [], 3, textOf(msg));
+          renderStatsTable(sessionModelsBody, [], 3, textOf(msg));
+          renderStatsTable(sessionErrorsBody, [], 4, textOf(msg));
+          renderStatsTable(histProvidersBody, [], 3, textOf(msg));
+          renderStatsTable(histRuntimesBody, [], 3, textOf(msg));
+          renderStatsTable(histModelsBody, [], 3, textOf(msg));
+          renderStatsTable(histErrorsBody, [], 4, textOf(msg));
+        }
+      }
+
       async function refreshTokens() {
         const body = $("tokensTbody");
         body.replaceChildren();
@@ -3198,47 +4103,59 @@
         }
       }
 
-      async function quotaAction(kind, providerKey) {
-        setLog("quotaOpLog", "");
-        if (!providerKey) {
-          setLog("quotaOpLog", "providerKey required");
-          toast("providerKey required");
-          return;
-        }
-        try {
-          if (kind === "recover") {
-            await apiFetch(`/quota/providers/${encodeURIComponent(providerKey)}/recover`, { method: "POST" });
-            await refreshQuota();
-            toast("Recovered.", "ok");
-            return;
-          }
-          if (kind === "reset") {
-            await apiFetch(`/quota/providers/${encodeURIComponent(providerKey)}/reset`, { method: "POST" });
-            await refreshQuota();
-            toast("Reset.", "ok");
-            return;
-          }
-          if (kind === "disable") {
-            const minutes = Number.parseFloat(textOf($("quotaDurationSelect").value || "60"));
-            if (!Number.isFinite(minutes) || minutes <= 0) {
-              throw new Error("Invalid minutes");
+	      async function quotaAction(kind, providerKeys) {
+	        setLog("quotaOpLog", "");
+          const keys = normalizeProviderKeyList(providerKeys);
+	        if (!keys.length) {
+	          setLog("quotaOpLog", "providerKey required (or select rows)");
+	          toast("providerKey required (or select rows)");
+	          return;
+	        }
+	        try {
+            const many = keys.length > 1;
+            if (many) {
+              const ok = confirm(`${kind} on ${keys.length} providerKeys?`);
+              if (!ok) return;
             }
-            const modeRaw = (textOf($("quotaModeSelect").value) || "cooldown").trim().toLowerCase();
-            const mode = modeRaw === "blacklist" ? "blacklist" : "cooldown";
-            await apiFetch(`/quota/providers/${encodeURIComponent(providerKey)}/disable`, {
-              method: "POST",
-              body: JSON.stringify({ mode, durationMinutes: minutes })
-            });
-            await refreshQuota();
-            toast("Applied.", "ok");
-            return;
-          }
-        } catch (e) {
-          if (e && e.status === 401) notifyUnauthorizedOnce("quota action");
-          setLog("quotaOpLog", `Action failed: ${e && e.message ? e.message : e}`);
-          toast(`Action failed: ${e && e.message ? e.message : String(e)}`);
-        }
-      }
+	          if (kind === "recover") {
+              for (const key of keys) {
+	              await apiFetch(`/quota/providers/${encodeURIComponent(key)}/recover`, { method: "POST" });
+              }
+	            scheduleQuotaRefresh();
+	            toast(many ? `Recovered (${keys.length}).` : "Recovered.", "ok");
+	            return;
+	          }
+	          if (kind === "reset") {
+              for (const key of keys) {
+	              await apiFetch(`/quota/providers/${encodeURIComponent(key)}/reset`, { method: "POST" });
+              }
+	            scheduleQuotaRefresh();
+	            toast(many ? `Reset (${keys.length}).` : "Reset.", "ok");
+	            return;
+	          }
+	          if (kind === "disable") {
+	            const minutes = Number.parseFloat(textOf($("quotaDurationSelect").value || "60"));
+	            if (!Number.isFinite(minutes) || minutes <= 0) {
+	              throw new Error("Invalid minutes");
+	            }
+	            const modeRaw = (textOf($("quotaModeSelect").value) || "cooldown").trim().toLowerCase();
+	            const mode = modeRaw === "blacklist" ? "blacklist" : "cooldown";
+              for (const key of keys) {
+	              await apiFetch(`/quota/providers/${encodeURIComponent(key)}/disable`, {
+	                method: "POST",
+	                body: JSON.stringify({ mode, durationMinutes: minutes })
+	              });
+              }
+	            scheduleQuotaRefresh();
+	            toast(many ? `Applied (${keys.length}).` : "Applied.", "ok");
+	            return;
+	          }
+	        } catch (e) {
+	          if (e && e.status === 401) notifyUnauthorizedOnce("quota action");
+	          setLog("quotaOpLog", `Action failed: ${e && e.message ? e.message : e}`);
+	          toast(`Action failed: ${e && e.message ? e.message : String(e)}`);
+	        }
+	      }
 
       async function resetQuotaModule() {
         setLog("quotaOpLog", "");
@@ -3410,7 +4327,73 @@
 	        }
       });
 
+      $("controlRefreshBtn").addEventListener("click", refreshControl);
+      $("controlRestartAllBtn").addEventListener("click", async () => {
+        setLog("controlOpLog", "");
+        if (!confirm("Broadcast restart all local RouteCodex servers now?")) return;
+        try {
+          const out = await controlMutate("servers.restart", {});
+          setLog("controlOpLog", `Restart requested.\n${JSON.stringify(out, null, 2)}`);
+          await refreshControl();
+          await refreshStatus();
+        } catch (e) {
+          setLog("controlOpLog", `Restart failed: ${e.message || e}`);
+        }
+      });
+      $("controlQuotaRefreshBtn").addEventListener("click", async () => {
+        setLog("controlOpLog", "");
+        try {
+          const out = await controlMutate("quota.refresh", {});
+          setLog("controlOpLog", `Quota refresh requested.\n${JSON.stringify(out, null, 2)}`);
+          await refreshControl();
+        } catch (e) {
+          setLog("controlOpLog", `Quota refresh failed: ${e.message || e}`);
+        }
+      });
+      $("controlQuotaOfflineBtn").addEventListener("click", async () => {
+        setLog("controlOpLog", "");
+        const providerKey = ($("controlQuotaKeyInput").value || "").trim();
+        if (!providerKey) return toast("providerKey required");
+        const mode = $("controlQuotaModeSelect").value === "blacklist" ? "blacklist" : "cooldown";
+        const minutes = Number($("controlQuotaDurationSelect").value || 0);
+        const durationMs = Number.isFinite(minutes) && minutes > 0 ? minutes * 60 * 1000 : 0;
+        if (!durationMs) return toast("duration required");
+        try {
+          const out = await controlMutate("quota.disable", { providerKey, mode, durationMs });
+          setLog("controlOpLog", `Offline requested.\n${JSON.stringify(out, null, 2)}`);
+          await refreshControl();
+        } catch (e) {
+          setLog("controlOpLog", `Offline failed: ${e.message || e}`);
+        }
+      });
+      $("controlQuotaRecoverBtn").addEventListener("click", async () => {
+        setLog("controlOpLog", "");
+        const providerKey = ($("controlQuotaKeyInput").value || "").trim();
+        if (!providerKey) return toast("providerKey required");
+        try {
+          const out = await controlMutate("quota.recover", { providerKey });
+          setLog("controlOpLog", `Recover requested.\n${JSON.stringify(out, null, 2)}`);
+          await refreshControl();
+        } catch (e) {
+          setLog("controlOpLog", `Recover failed: ${e.message || e}`);
+        }
+      });
+      $("controlQuotaResetBtn").addEventListener("click", async () => {
+        setLog("controlOpLog", "");
+        const providerKey = ($("controlQuotaKeyInput").value || "").trim();
+        if (!providerKey) return toast("providerKey required");
+        try {
+          const out = await controlMutate("quota.reset", { providerKey });
+          setLog("controlOpLog", `Reset requested.\n${JSON.stringify(out, null, 2)}`);
+          await refreshControl();
+        } catch (e) {
+          setLog("controlOpLog", `Reset failed: ${e.message || e}`);
+        }
+      });
+
       $("refreshProvidersBtn").addEventListener("click", refreshProviders);
+      $("refreshStatsBtn").addEventListener("click", refreshStats);
+      $("statsAutoRefresh").addEventListener("change", syncStatsAutoRefresh);
       $("refreshTokensBtn").addEventListener("click", refreshTokens);
       $("newProviderBtn").addEventListener("click", () => {
         $("providerEditorTitle").textContent = "Provider editor (new)";
@@ -3472,33 +4455,58 @@
 
       $("refreshCredentialsBtn").addEventListener("click", refreshCredentials);
       $("saveOauthBrowserBtn").addEventListener("click", saveSettings);
-      $("oauthAuthorizeBtn").addEventListener("click", authorizeOauth);
+      $("oauthModeManualBtn").addEventListener("click", () => setOauthMode("manual"));
+      $("oauthModeAutoBtn").addEventListener("click", () => setOauthMode("auto"));
+      $("oauthAuthorizeManualBtn").addEventListener("click", () => void authorizeOauth("manual"));
+      $("oauthAuthorizeAutoBtn").addEventListener("click", () => void authorizeOauth("auto"));
+      $("oauthVerifyOpenBtn").addEventListener("click", () => void openSelectedVerifyUrl());
+      $("oauthVerifyCopyBtn").addEventListener("click", () => void copySelectedVerifyUrl());
+      $("oauthVerifyRecheckBtn").addEventListener("click", async () => {
+        try {
+          await refreshQuota();
+          await refreshCredentials();
+          setLog("credentialOpLog", "Rechecked quota/credential state.");
+        } catch (e) {
+          setLog("credentialOpLog", `Recheck failed: ${e && e.message ? e.message : String(e)}`);
+        }
+      });
       $("oauthProviderSelect").addEventListener("change", updateOauthAuthIssueHint);
       $("oauthAuthAliasInput").addEventListener("input", updateOauthAuthIssueHint);
-
-      $("refreshQuotaBtn").addEventListener("click", refreshQuota);
-      $("refreshQuotaSnapshotBtn").addEventListener("click", refreshQuotaSnapshotNow);
-      $("quotaFilterInput").addEventListener("input", renderQuotaProviders);
-      $("quotaHideOkToggle").addEventListener("change", renderQuotaProviders);
-      $("quotaOnlyRoutedTargetsToggle").addEventListener("change", renderQuotaProviders);
-      $("quotaApplyDisableBtn").addEventListener("click", () => void quotaAction("disable", $("quotaKeyInput").value));
-      $("quotaApplyRecoverBtn").addEventListener("click", () => void quotaAction("recover", $("quotaKeyInput").value));
-      $("quotaApplyResetBtn").addEventListener("click", () => void quotaAction("reset", $("quotaKeyInput").value));
-      $("quotaTbody").addEventListener("click", (ev) => {
-        const tr = ev.target.closest("tr");
-        if (tr && tr.getAttribute) {
-          const pk = tr.getAttribute("data-provider-key");
+      setOauthMode("manual");
+
+	      $("refreshQuotaBtn").addEventListener("click", refreshQuota);
+	      $("refreshQuotaSnapshotBtn").addEventListener("click", refreshQuotaSnapshotNow);
+	      $("quotaFilterInput").addEventListener("input", renderQuotaProviders);
+	      $("quotaHideOkToggle").addEventListener("change", renderQuotaProviders);
+	      $("quotaOnlyRoutedTargetsToggle").addEventListener("change", renderQuotaProviders);
+        $("quotaSelectVisibleBtn").addEventListener("click", () => {
+          const keys = Array.isArray(UI.quotaRenderedVisibleKeys) ? UI.quotaRenderedVisibleKeys : [];
+          setQuotaSelection(keys, true);
+        });
+        $("quotaClearSelectionBtn").addEventListener("click", clearQuotaSelection);
+        $("quotaSelectAllVisibleToggle").addEventListener("change", () => {
+          const master = $("quotaSelectAllVisibleToggle");
+          const keys = Array.isArray(UI.quotaRenderedVisibleKeys) ? UI.quotaRenderedVisibleKeys : [];
+          setQuotaSelection(keys, Boolean(master && master.checked));
+        });
+	      $("quotaApplyDisableBtn").addEventListener("click", () => void quotaAction("disable", resolveQuotaActionTargets()));
+	      $("quotaApplyRecoverBtn").addEventListener("click", () => void quotaAction("recover", resolveQuotaActionTargets()));
+	      $("quotaApplyResetBtn").addEventListener("click", () => void quotaAction("reset", resolveQuotaActionTargets()));
+	      $("quotaTbody").addEventListener("click", (ev) => {
+	        const tr = ev.target.closest("tr");
+	        if (tr && tr.getAttribute) {
+	          const pk = tr.getAttribute("data-provider-key");
           if (pk) $("quotaKeyInput").value = pk;
         }
         const el = ev.target.closest("button");
         if (!el) return;
-        const action = el.getAttribute("data-action");
-        const key = el.getAttribute("data-key");
-        if (key) $("quotaKeyInput").value = key;
-        if (action === "quota-recover") void quotaAction("recover", key);
-        else if (action === "quota-reset") void quotaAction("reset", key);
-        else if (action === "quota-disable") void quotaAction("disable", key);
-      });
+	        const action = el.getAttribute("data-action");
+	        const key = el.getAttribute("data-key");
+	        if (key) $("quotaKeyInput").value = key;
+	        if (action === "quota-recover") void quotaAction("recover", [key]);
+	        else if (action === "quota-reset") void quotaAction("reset", [key]);
+	        else if (action === "quota-disable") void quotaAction("disable", [key]);
+	      });
       $("resetQuotaBtn").addEventListener("click", resetQuotaModule);
 
       $("loadRoutingBtn").addEventListener("click", loadRouting);