pi-antigravity-rotator 1.12.0 → 1.12.2

package/CHANGELOG.md

@@ -1,7 +1,20 @@
 # Changelog
 
+## [1.12.2] - 2026-05-18
+
+### Fixed
+- **Gemini Flash/Pro regression (`INVALID_ARGUMENT`)**: The `id` field added to `functionCall` and `functionResponse` history parts for Claude multi-turn support was also being sent to Gemini native models, which reject it. The field is now only included when the model is Claude (`/^claude-/i`).
+
+## [1.12.1] - 2026-05-18
+
+### Fixed
+- **Claude tool schema compatibility (JSON Schema Draft 2020-12)**: When routing requests to Claude models (`claude-sonnet-4-6`, `claude-opus-4-6-thinking`) through Gemini's API, a new `sanitizeClaudeViaGeminiSchema` function is used instead of the Gemini-native sanitizer. It only removes fields that Gemini's outer API layer rejects (e.g. `$ref`, `$defs`, `if/then/else`) and converts `const` → `enum`, while preserving valid Draft 2020-12 keywords (`minimum`, `maximum`, `pattern`, `minLength`, `title`, `default`, etc.) that Claude requires.
+- **Claude `anyOf [{type,const}]` → flat `enum` collapse**: Schemas with `anyOf` items of the form `[{"type":"string","const":"fact"},{"type":"string","const":"lesson"}]` are now correctly collapsed into `{"type":"string","enum":["fact","lesson"]}`. Previously this produced a redundant `anyOf` with single-element enums that Claude rejected as invalid.
+- **Claude multi-turn tool call IDs (`tool_use.id: Field required`)**: When replaying tool-call history for Claude models, the OpenAI tool call `id` (e.g. `call_xxx`) is now included in the Gemini `functionCall.id` field, and the `tool_call_id` from tool response messages is included in the Gemini `functionResponse.id` field. Gemini passes these through to Claude as `tool_use.id` / `tool_use_id`, fixing the "Field required" error on multi-turn agentic conversations.
+
 ## [1.12.0] - 2026-05-17
 
+
 ### Added
 - **Native Reasoning/Thinking Support**: Interleaved thinking blocks from Gemini 3.1 Pro, Gemini 3 Flash, and Claude models are now properly exposed to OpenAI and Anthropic compatible clients as `reasoning_content` and `thinking_delta` chunks.
 - **Model & Project Circuit Breaker Reset**: Added manual reset buttons on the dashboard for all circuit breakers, allowing operators to bypass the cooldown period when desired.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-antigravity-rotator",
-  "version": "1.12.0",
+  "version": "1.12.2",
   "description": "Multi-account rotation proxy for Google Antigravity with per-model routing, real-time quota tracking, and infringement detection",
   "license": "MIT",
   "type": "module",

package/src/compat.ts

@@ -234,15 +234,116 @@ function sanitizeGeminiSchema(schema: unknown): unknown {
 	return out;
 }
 
+/**
+ * Lighter sanitization for Claude models routed through Gemini's API.
+ * Gemini's outer API still validates schemas before routing to Claude, so
+ * we must remove fields Gemini's protobuf doesn't know about (like `const`,
+ * `$ref`, etc.). However, unlike the Gemini-native sanitizer, we KEEP
+ * standard JSON Schema Draft 2020-12 keywords (minimum, maximum, pattern,
+ * etc.) that Claude requires and that Gemini's API does pass through.
+ */
+function sanitizeClaudeViaGeminiSchema(schema: unknown): unknown {
+	if (!isRecord(schema)) return schema;
+
+	// Only remove fields that Gemini's API layer truly rejects at the network level.
+	// We keep Draft 2020-12 keywords like minimum/maximum/pattern/title/etc.
+	const UNSUPPORTED = new Set([
+		"$schema", "$id", "$ref", "$defs", "definitions",
+		"if", "then", "else", "not",
+		"patternProperties", "unevaluatedProperties", "unevaluatedItems",
+		"contentEncoding", "contentMediaType",
+	]);
+
+	const out: Record<string, unknown> = {};
+	for (const [key, value] of Object.entries(schema)) {
+		if (UNSUPPORTED.has(key)) continue;
+
+		// `const` is not supported by Gemini's API — convert to a single-value enum
+		if (key === "const") {
+			out["enum"] = [value];
+			continue;
+		}
+
+		if (key === "anyOf" || key === "oneOf" || key === "allOf") {
+			if (Array.isArray(value)) {
+				// Case 1: all items are pure {const: value} — convert to flat enum.
+				const allPureConst = value.every(
+					(item) => isRecord(item) && Object.keys(item).length === 1 && "const" in item,
+				);
+				if (allPureConst) {
+					out["enum"] = value.map((item) => (item as Record<string, unknown>)["const"]);
+					if (value.every((item) => typeof (item as Record<string, unknown>)["const"] === "string")) {
+						if (!out["type"]) out["type"] = "string";
+					}
+					continue;
+				}
+
+				// Case 2: all items are {type: T, const: V} (same type, each with a const).
+				// e.g. [{type:"string",const:"fact"},{type:"string",const:"lesson"}]
+				// Merge into a single flat {type: T, enum: [V1, V2, ...]} — avoids
+				// the redundant anyOf-with-single-enum pattern that Claude rejects.
+				const allTypeConst = value.every(
+					(item) =>
+						isRecord(item) &&
+						Object.keys(item).length === 2 &&
+						"type" in item &&
+						"const" in item,
+				);
+				if (allTypeConst) {
+					const firstType = (value[0] as Record<string, unknown>)["type"];
+					const allSameType = value.every((item) => (item as Record<string, unknown>)["type"] === firstType);
+					if (allSameType) {
+						if (!out["type"]) out["type"] = firstType;
+						out["enum"] = value.map((item) => (item as Record<string, unknown>)["const"]);
+						continue;
+					}
+				}
+
+				// General case: recurse and sanitize each variant.
+				const cleaned = value.map(sanitizeClaudeViaGeminiSchema).filter(
+					(v) => isRecord(v) && Object.keys(v).length > 0,
+				);
+				if (cleaned.length === 1) {
+					Object.assign(out, cleaned[0]);
+				} else if (cleaned.length > 1) {
+					out[key] = cleaned;
+				}
+				// cleaned.length === 0: skip entirely
+			}
+			continue;
+		}
+
+		if (key === "properties" && isRecord(value)) {
+			out[key] = Object.fromEntries(
+				Object.entries(value).map(([k, v]) => [k, sanitizeClaudeViaGeminiSchema(v)]),
+			);
+			continue;
+		}
+
+		if (key === "items") {
+			out[key] = sanitizeClaudeViaGeminiSchema(value);
+			continue;
+		}
+
+		out[key] = isRecord(value) ? sanitizeClaudeViaGeminiSchema(value) : value;
+	}
+	return out;
+}
+
 /** Convert OpenAI tools array to Gemini functionDeclarations */
-function convertOpenAIToolsToGemini(tools: OpenAITool[]): { functionDeclarations: GeminiFunctionDeclaration[] }[] {
+function convertOpenAIToolsToGemini(tools: OpenAITool[], isClaude: boolean = false): { functionDeclarations: GeminiFunctionDeclaration[] }[] {
 	const decls: GeminiFunctionDeclaration[] = tools
 		.filter((t) => t.type === "function" && isNonEmptyString(t.function?.name))
-		.map((t) => ({
-			name: t.function.name,
-			...(t.function.description ? { description: t.function.description } : {}),
-			...(t.function.parameters ? { parameters: sanitizeGeminiSchema(t.function.parameters) as Record<string, unknown> } : {}),
-		}));
+		.map((t) => {
+			const sanitized = t.function.parameters
+				? (isClaude ? sanitizeClaudeViaGeminiSchema(t.function.parameters) : sanitizeGeminiSchema(t.function.parameters)) as Record<string, unknown>
+				: undefined;
+			return {
+				name: t.function.name,
+				...(t.function.description ? { description: t.function.description } : {}),
+				...(sanitized ? { parameters: sanitized } : {}),
+			};
+		});
 	return decls.length > 0 ? [{ functionDeclarations: decls }] : [];
 }
 
@@ -307,6 +408,9 @@ export function openAIToAntigravityBody(input: OpenAIChatCompletionRequest): Req
 	// part when replaying multi-turn tool conversations. Since we receive
 	// We always use native Gemini functionCall parts for all tool calls in the history.
 
+	// Determine if model is Claude — affects schema sanitization and tool call ID handling
+	const isClaude = /^claude-/i.test(input.model);
+
 	const contents: GeminiContent[] = [];
 	for (let i = 0; i < conversationMessages.length; i++) {
 		const msg = conversationMessages[i];
@@ -329,13 +433,14 @@ export function openAIToAntigravityBody(input: OpenAIChatCompletionRequest): Req
 						const cachedSig = isFirstInMessage ? thoughtSignatureCache.get(tc.id) : undefined;
 						parts.push({
 							...(cachedSig ? { thoughtSignature: cachedSig } : {}),
-							functionCall: { name: tc.function.name, args },
+							// Include id only for Claude — Gemini native models reject the id field
+							functionCall: { ...(isClaude ? { id: tc.id } : {}), name: tc.function.name, args },
 						});
 					} catch {
 						const cachedSig = isFirstInMessage ? thoughtSignatureCache.get(tc.id) : undefined;
 						parts.push({
 							...(cachedSig ? { thoughtSignature: cachedSig } : {}),
-							functionCall: { name: tc.function.name, args: {} },
+							functionCall: { ...(isClaude ? { id: tc.id } : {}), name: tc.function.name, args: {} },
 						});
 					}
 					isFirstInMessage = false;
@@ -346,10 +451,12 @@ export function openAIToAntigravityBody(input: OpenAIChatCompletionRequest): Req
 			const prevMsg = conversationMessages[i - 1];
 			const responseText = typeof msg.content === "string" ? msg.content : extractText(msg.content);
 			const fnName = msg.name || "unknown";
-			// Current result: use native Gemini functionResponse part
+			// Include tool_call_id so Gemini can pass it as tool_use_id to Claude
+			const toolCallId = msg.tool_call_id;
 			let responseData: unknown;
 			try { responseData = JSON.parse(responseText); } catch { responseData = { output: responseText }; }
-			contents.push({ role: "user", parts: [{ functionResponse: { name: fnName, response: responseData } }] });
+			// Include id only for Claude — Gemini native models reject the id field in functionResponse
+			contents.push({ role: "user", parts: [{ functionResponse: { ...(isClaude && toolCallId ? { id: toolCallId } : {}), name: fnName, response: responseData } }] });
 		} else {
 			// user message
 			const msgParts = extractParts(msg.content);
@@ -362,7 +469,7 @@ export function openAIToAntigravityBody(input: OpenAIChatCompletionRequest): Req
 
 	// Build tools / toolConfig if present
 	const inputTools = Array.isArray(input.tools) ? (input.tools as OpenAITool[]) : [];
-	const geminiTools = convertOpenAIToolsToGemini(inputTools);
+	const geminiTools = convertOpenAIToolsToGemini(inputTools, isClaude);
 	const geminiToolConfig = input.tool_choice !== undefined ? convertToolChoiceToGemini(input.tool_choice) : undefined;
 
 	// Map OpenAI reasoning_effort → Gemini thinkingLevel

package/src/dashboard.ts

@@ -1168,6 +1168,192 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
   .notif-bell-dot {
     background: var(--yellow);
   }
+
+  /* ── List View ── */
+  .view-toggle-bar {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+    margin-bottom: 16px;
+  }
+
+  .view-tab {
+    font-size: 12px;
+    font-weight: 600;
+    padding: 5px 14px;
+    border-radius: 999px;
+    border: 1px solid var(--border);
+    background: transparent;
+    color: var(--text-dim);
+    cursor: pointer;
+    font-family: var(--font);
+    transition: background 0.2s, color 0.2s, border-color 0.2s;
+  }
+
+  .view-tab.active {
+    background: rgba(124, 92, 252, 0.14);
+    border-color: rgba(124, 92, 252, 0.35);
+    color: var(--text);
+  }
+
+  .view-tab:hover:not(.active) {
+    background: rgba(255,255,255,0.04);
+    color: var(--text);
+  }
+
+  .list-panel {
+    background: var(--surface);
+    border: 1px solid var(--border);
+    border-radius: var(--radius);
+    overflow: hidden;
+    margin-bottom: 24px;
+  }
+
+  .list-toolbar {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    padding: 12px 16px;
+    border-bottom: 1px solid var(--border);
+    flex-wrap: wrap;
+  }
+
+  .list-toolbar-label {
+    font-size: 11px;
+    text-transform: uppercase;
+    letter-spacing: 0.6px;
+    color: var(--text-dim);
+    margin-right: auto;
+  }
+
+  .list-search {
+    background: rgba(255,255,255,0.04);
+    border: 1px solid var(--border);
+    color: var(--text);
+    padding: 4px 10px;
+    border-radius: 6px;
+    font-size: 12px;
+    font-family: var(--font);
+    width: 180px;
+    outline: none;
+    transition: border-color 0.2s;
+  }
+
+  .list-search:focus {
+    border-color: rgba(124, 92, 252, 0.4);
+  }
+
+  .list-sort-btn {
+    font-size: 11px;
+    padding: 4px 10px;
+    border: 1px solid var(--border);
+    background: transparent;
+    color: var(--text-dim);
+    border-radius: 6px;
+    cursor: pointer;
+    font-family: var(--font);
+    font-weight: 600;
+    transition: background 0.2s, color 0.2s;
+  }
+
+  .list-sort-btn.active {
+    border-color: rgba(124, 92, 252, 0.35);
+    color: var(--accent);
+    background: rgba(124, 92, 252, 0.08);
+  }
+
+  .list-table {
+    width: 100%;
+    border-collapse: collapse;
+  }
+
+  .list-table th {
+    font-size: 10px;
+    font-weight: 700;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+    color: var(--text-dim);
+    padding: 8px 14px;
+    text-align: left;
+    border-bottom: 1px solid var(--border);
+    background: rgba(255,255,255,0.02);
+    white-space: nowrap;
+    cursor: pointer;
+    user-select: none;
+  }
+
+  .list-table th:hover { color: var(--text); }
+
+  .list-table th .sort-arrow {
+    display: inline-block;
+    margin-left: 4px;
+    opacity: 0.4;
+    font-size: 9px;
+  }
+
+  .list-table th.sort-active .sort-arrow { opacity: 1; color: var(--accent); }
+
+  .list-table td {
+    padding: 9px 14px;
+    font-size: 12px;
+    border-bottom: 1px solid rgba(255,255,255,0.04);
+    vertical-align: middle;
+  }
+
+  .list-table tr:last-child td { border-bottom: none; }
+
+  .list-table tr.list-row {
+    cursor: pointer;
+    transition: background 0.15s;
+  }
+
+  .list-table tr.list-row:hover td {
+    background: rgba(124, 92, 252, 0.05);
+  }
+
+  .list-row-label {
+    font-weight: 600;
+    font-size: 13px;
+  }
+
+  .list-row-email {
+    font-family: 'JetBrains Mono', monospace;
+    font-size: 10px;
+    color: var(--text-dim);
+    margin-top: 2px;
+  }
+
+  .list-quota-bar {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+  }
+
+  .list-quota-bar-bg {
+    width: 60px;
+    height: 5px;
+    background: rgba(255,255,255,0.07);
+    border-radius: 3px;
+    overflow: hidden;
+    flex-shrink: 0;
+  }
+
+  .list-quota-bar-fill {
+    height: 100%;
+    border-radius: 3px;
+  }
+
+  .list-highlight td {
+    background: rgba(124, 92, 252, 0.12) !important;
+    transition: background 0.8s ease-out !important;
+  }
+
+  .list-empty {
+    text-align: center;
+    color: var(--text-dim);
+    padding: 32px;
+    font-size: 13px;
+  }
 </style>
 </head>
 <body>
@@ -1210,6 +1396,11 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
   </div>
 </div>
 
+<div class="view-toggle-bar">
+  <button class="view-tab active" id="viewTabGrid" onclick="switchView('grid')">⊞ Grid</button>
+  <button class="view-tab" id="viewTabList" onclick="switchView('list')">☰ List</button>
+</div>
+
 <div class="routing-panel state-stopped" id="routingHealth"></div>
 
 <div class="routing-panel" id="tokenUsagePanel" style="margin-top:12px">
@@ -1246,6 +1437,18 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
 
 <div class="accounts-grid" id="accounts"></div>
 
+<div class="list-panel" id="listPanel" style="display:none">
+  <div class="list-toolbar">
+    <span class="list-toolbar-label">Installations</span>
+    <input class="list-search" id="listSearch" placeholder="Search…" oninput="renderListView()" />
+    <button class="list-sort-btn" id="lsort-requests" onclick="setListSort('requests')">Requests ↕</button>
+    <button class="list-sort-btn" id="lsort-quota" onclick="setListSort('quota')">Quota ↕</button>
+    <button class="list-sort-btn" id="lsort-tokens" onclick="setListSort('tokens')">Tokens ↕</button>
+    <button class="list-sort-btn" id="lsort-status" onclick="setListSort('status')">Status ↕</button>
+  </div>
+  <div id="listTableWrap"></div>
+</div>
+
 <div class="routing-panel" id="heatmapPanel" style="margin-top:12px;display:none">
   <div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:8px">
     <strong>Activity Heatmap (last 60d)</strong>
@@ -1602,7 +1805,7 @@ function renderAccounts(data) {
       return '<span class="badge badge-model">' + escapeHtml(m.split('-').slice(0, 2).join('-')) + '</span>';
     }).join('');
 
-    return '<div class="account-card ' + escapeHtml(a.status) + '">' +
+    return '<div class="account-card ' + escapeHtml(a.status) + '" data-account-email="' + escapeHtml(a.email) + '">' +
       '<div class="card-header">' +
         '<div class="card-label">' + escapeHtml(maskText(a.label)) + '</div>' +
         '<div class="card-badges">' +
@@ -1651,6 +1854,189 @@ function renderAccounts(data) {
   renderProAdvisor(data.proAdvisor);
 }
 
+
+// ── List View ─────────────────────────────────────────────────────────────
+var CURRENT_VIEW = 'grid';
+var LIST_SORT = 'requests';
+var LIST_SORT_DIR = -1; // -1 = desc, 1 = asc
+
+function switchView(view) {
+  CURRENT_VIEW = view;
+  document.getElementById('viewTabGrid').className = 'view-tab' + (view === 'grid' ? ' active' : '');
+  document.getElementById('viewTabList').className = 'view-tab' + (view === 'list' ? ' active' : '');
+  document.getElementById('accounts').style.display = view === 'grid' ? '' : 'none';
+  document.getElementById('listPanel').style.display = view === 'list' ? '' : 'none';
+  if (view === 'list' && window.__lastData) renderListView();
+}
+
+function setListSort(col) {
+  if (LIST_SORT === col) {
+    LIST_SORT_DIR = -LIST_SORT_DIR;
+  } else {
+    LIST_SORT = col;
+    LIST_SORT_DIR = -1;
+  }
+  ['requests','quota','tokens','status'].forEach(function(c) {
+    var btn = document.getElementById('lsort-' + c);
+    if (btn) btn.className = 'list-sort-btn' + (c === LIST_SORT ? ' active' : '');
+  });
+  renderListView();
+}
+
+function renderListView() {
+  if (!window.__lastData) return;
+  var data = window.__lastData;
+  var wrap = document.getElementById('listTableWrap');
+  var query = ((document.getElementById('listSearch') || {}).value || '').toLowerCase();
+
+  var rows = data.accounts.slice();
+
+  // Filter by search
+  if (query) {
+    rows = rows.filter(function(a) {
+      return (a.label || '').toLowerCase().indexOf(query) !== -1 ||
+             (a.email || '').toLowerCase().indexOf(query) !== -1 ||
+             (a.status || '').toLowerCase().indexOf(query) !== -1;
+    });
+  }
+
+  // Aggregate token totals per account (from tokensByAccount in usage data if present,
+  // otherwise fall back to account-level totalTokens if server exposes it)
+  var tokensByAccount = {};
+  var tokenUsage = data.tokenUsage || {};
+  ['minutes','hours','days','months'].forEach(function(tier) {
+    (tokenUsage[tier] || []).forEach(function(b) {
+      if (!b.byAccount) return;
+      Object.keys(b.byAccount).forEach(function(acct) {
+        var d = b.byAccount[acct] || {};
+        if (!tokensByAccount[acct]) tokensByAccount[acct] = { input: 0, output: 0 };
+        tokensByAccount[acct].input  += d.inputTokens  || 0;
+        tokensByAccount[acct].output += d.outputTokens || 0;
+      });
+    });
+  });
+
+  // Fallback: use per-account token fields exposed directly on the account object
+  rows.forEach(function(a) {
+    if (!tokensByAccount[a.email] && (a.totalInputTokens || a.totalOutputTokens)) {
+      tokensByAccount[a.email] = {
+        input:  a.totalInputTokens  || 0,
+        output: a.totalOutputTokens || 0
+      };
+    }
+  });
+
+  // Sort
+  rows.sort(function(a, b) {
+    var av, bv;
+    if (LIST_SORT === 'requests') {
+      av = a.totalRequests || 0;
+      bv = b.totalRequests || 0;
+    } else if (LIST_SORT === 'quota') {
+      av = a.quota && a.quota.length ? a.quota.reduce(function(s, q) { return s + q.percentRemaining; }, 0) / a.quota.length : -1;
+      bv = b.quota && b.quota.length ? b.quota.reduce(function(s, q) { return s + q.percentRemaining; }, 0) / b.quota.length : -1;
+    } else if (LIST_SORT === 'tokens') {
+      var ta = tokensByAccount[a.email] || { input: 0, output: 0 };
+      var tb = tokensByAccount[b.email] || { input: 0, output: 0 };
+      av = ta.input + ta.output;
+      bv = tb.input + tb.output;
+    } else if (LIST_SORT === 'status') {
+      var statusOrder = { active: 0, ready: 1, cooldown: 2, exhausted: 3, error: 4, disabled: 5, flagged: 6 };
+      av = statusOrder[a.status] !== undefined ? statusOrder[a.status] : 9;
+      bv = statusOrder[b.status] !== undefined ? statusOrder[b.status] : 9;
+    } else {
+      av = 0; bv = 0;
+    }
+    if (av < bv) return LIST_SORT_DIR;
+    if (av > bv) return -LIST_SORT_DIR;
+    return 0;
+  });
+
+  if (rows.length === 0) {
+    wrap.innerHTML = '<div class="list-empty">No accounts match the filter.</div>';
+    return;
+  }
+
+  var arrowFor = function(col) {
+    if (LIST_SORT !== col) return '<span class="sort-arrow">\u2195</span>';
+    return '<span class="sort-arrow">' + (LIST_SORT_DIR === -1 ? '\u2193' : '\u2191') + '</span>';
+  };
+
+  var html = '<table class="list-table"><thead><tr>' +
+    '<th>Account</th>' +
+    '<th onclick="setListSort(&apos;status&apos;)" class="' + (LIST_SORT === 'status' ? 'sort-active' : '') + '">Status' + arrowFor('status') + '</th>' +
+    '<th onclick="setListSort(&apos;requests&apos;)" class="' + (LIST_SORT === 'requests' ? 'sort-active' : '') + '">Total Reqs' + arrowFor('requests') + '</th>' +
+    '<th>This Rotation</th>' +
+    '<th onclick="setListSort(&apos;quota&apos;)" class="' + (LIST_SORT === 'quota' ? 'sort-active' : '') + '">Avg Quota' + arrowFor('quota') + '</th>' +
+    '<th onclick="setListSort(&apos;tokens&apos;)" class="' + (LIST_SORT === 'tokens' ? 'sort-active' : '') + '">Tokens (in/out)' + arrowFor('tokens') + '</th>' +
+    '<th>Last Used</th>' +
+    '<th>Type</th>' +
+  '</tr></thead><tbody>';
+
+  rows.forEach(function(a) {
+    var avgQuota = a.quota && a.quota.length > 0
+      ? Math.round(a.quota.reduce(function(s, q) { return s + q.percentRemaining; }, 0) / a.quota.length)
+      : null;
+    var quotaColor = avgQuota === null ? 'var(--text-dim)' : avgQuota > 50 ? 'var(--green)' : avgQuota > 20 ? 'var(--yellow)' : 'var(--red)';
+
+    var statusColors = {
+      active: 'var(--green)', ready: 'var(--text-dim)', cooldown: 'var(--yellow)',
+      exhausted: 'var(--red)', error: 'var(--orange)', disabled: '#888', flagged: '#ff4444'
+    };
+    var statusColor = statusColors[a.status] || 'var(--text-dim)';
+
+    var ta = tokensByAccount[a.email] || { input: 0, output: 0 };
+    var totalTokens = ta.input + ta.output;
+
+    var lastUsed = a.lastUsed ? formatTime(a.lastUsed) : '--';
+    var tierBadge = a.proDetected
+      ? '<span class="badge badge-pro" style="font-size:9px">PRO</span>'
+      : '<span class="badge badge-free" style="font-size:9px">FREE</span>';
+    if (a.familyManager) tierBadge += '<span class="badge badge-fmgr" style="font-size:9px">FMGR</span>';
+
+    var quotaCell = avgQuota === null
+      ? '<span style="color:var(--text-dim)">--</span>'
+      : '<div class="list-quota-bar">' +
+          '<div class="list-quota-bar-bg"><div class="list-quota-bar-fill" style="width:' + avgQuota + '%;background:' + quotaColor + '"></div></div>' +
+          '<span style="font-family:JetBrains Mono,monospace;font-size:11px;color:' + quotaColor + '">' + avgQuota + '%</span>' +
+        '</div>';
+
+    var tokensCell = totalTokens > 0
+      ? '<span style="font-family:JetBrains Mono,monospace">' + formatTokenCount(ta.input) + '\u00a0/\u00a0' + formatTokenCount(ta.output) + '</span>'
+      : '<span style="color:var(--text-dim)">--</span>';
+
+    html += '<tr class="list-row" onclick="jumpToAccount(&apos;' + jsString(a.email) + '&apos;)">' +
+      '<td>' +
+        '<div class="list-row-label">' + escapeHtml(maskText(a.label)) + '</div>' +
+        '<div class="list-row-email">' + escapeHtml(maskEmail(a.email)) + '</div>' +
+      '</td>' +
+      '<td><span style="color:' + statusColor + ';font-weight:600;font-size:11px;text-transform:uppercase;letter-spacing:0.4px">' + escapeHtml(a.status) + '</span></td>' +
+      '<td style="font-family:JetBrains Mono,monospace;font-weight:700">' + (a.totalRequests || 0) + '</td>' +
+      '<td style="font-family:JetBrains Mono,monospace;color:var(--text-dim)">' + (a.requestsSinceRotation || 0) + '</td>' +
+      '<td>' + quotaCell + '</td>' +
+      '<td>' + tokensCell + '</td>' +
+      '<td style="font-family:JetBrains Mono,monospace;font-size:11px;color:var(--text-dim)">' + lastUsed + '</td>' +
+      '<td>' + tierBadge + '</td>' +
+    '</tr>';
+  });
+
+  html += '</tbody></table>';
+  wrap.innerHTML = html;
+}
+
+function jumpToAccount(email) {
+  // Switch to grid first
+  switchView('grid');
+  setTimeout(function() {
+    var target = document.querySelector('[data-account-email="' + email.replace(/"/g, '\\"') + '"]');
+    if (target) {
+      target.scrollIntoView({ behavior: 'smooth', block: 'center' });
+      target.classList.add('list-highlight');
+      setTimeout(function() { target.classList.remove('list-highlight'); }, 2000);
+    }
+  }, 80);
+}
+
 function renderHealthPill(label, value) {
   return '<div class="health-pill"><span class="label">' + escapeHtml(label) + '</span><span class="value">' + escapeHtml(value) + '</span></div>';
 }

package/src/proxy.ts

@@ -412,9 +412,16 @@ export async function withRotation<T>(
 
 		try {
 			const jitterMs = rotator.getSafetyJitterMs(account);
-			if (jitterMs > 0) {
-				log(`[${requestId}] Safety slow-mode jitter ${jitterMs}ms for account/project daily budget pressure`, rotator, "warn");
-				await sleep(jitterMs);
+			const globalDelayMs = rotator.getGlobalDelayMs();
+			const totalDelayMs = jitterMs + globalDelayMs;
+			if (totalDelayMs > 0) {
+				if (jitterMs > 0) {
+					log(`[${requestId}] Safety slow-mode jitter ${jitterMs}ms for account/project daily budget pressure`, rotator, "warn");
+				}
+				if (globalDelayMs > 0) {
+					log(`[${requestId}] Global request delay ${globalDelayMs}ms applied to slow down requests`, rotator, "info");
+				}
+				await sleep(totalDelayMs);
 			}
 
 			rotator.recordUpstreamAttempt(account);
@@ -690,9 +697,16 @@ async function handleProxyRequest(
 
 		try {
 			const jitterMs = rotator.getSafetyJitterMs(account);
-			if (jitterMs > 0) {
-				proxyLog(`[${requestId}] Safety slow-mode jitter ${jitterMs}ms for account/project daily budget pressure`, "warn");
-				await sleep(jitterMs);
+			const globalDelayMs = rotator.getGlobalDelayMs();
+			const totalDelayMs = jitterMs + globalDelayMs;
+			if (totalDelayMs > 0) {
+				if (jitterMs > 0) {
+					proxyLog(`[${requestId}] Safety slow-mode jitter ${jitterMs}ms for account/project daily budget pressure`, "warn");
+				}
+				if (globalDelayMs > 0) {
+					proxyLog(`[${requestId}] Global request delay ${globalDelayMs}ms applied to slow down requests`, "info");
+				}
+				await sleep(totalDelayMs);
 			}
 			rotator.recordUpstreamAttempt(account);
 			const forwarded = await forwardRequest(account, { ...body }, flattenHeaders(req.headers));

package/src/rotator.ts

@@ -1185,6 +1185,11 @@ export class AccountRotator {
 		return Math.floor(min + Math.random() * (max - min + 1));
 	}
 
+	getGlobalDelayMs(): number {
+		return this.config.globalRequestDelayMs ?? 0;
+	}
+
+
 	markError(account: AccountRuntime, error: string): void {
 		account.lastError = error;
 			account.consecutiveErrors++;

package/src/types.ts

@@ -29,6 +29,8 @@ export interface Config {
 	maxConcurrentRequestsPerAccount?: number;
 	// Hard cap on parallel requests per projectId/model. Conservative default is 1.
 	maxConcurrentRequestsPerProjectModel?: number;
+	// Global delay in ms added to every request to slow down traffic and avoid rate limits.
+	globalRequestDelayMs?: number;
 	// Pause projectId/model when several accounts hit provider 429 in a short window. Defaults: 3 hits / 10min / 60min pause.
 	projectCircuitBreaker429Threshold?: number;
 	projectCircuitBreakerWindowMs?: number;

package/tools/telemetry-receiver/receiver.js

@@ -343,6 +343,90 @@ function buildFilterOptions(events, flagEvents) {
 	};
 }
 
+
+// ── Per-install list ─────────────────────────────────────────────────
+// Returns one summary row per unique installId based on their latest
+// heartbeat/boot event + flag count over the same filtered window.
+function computeInstallList(filters = {}) {
+	const { events: allEvents, flagEvents: allFlagEvents } = loadAllEvents();
+
+	// Apply same filters as computeStats
+	const events = allEvents.filter(({ ev, file }) => {
+		if (filters.installId && ev.installId !== filters.installId) return false;
+		if (filters.version   && ev.version   !== filters.version)   return false;
+		if (filters.os        && ev.os        !== filters.os)        return false;
+		if (filters.model     && !(ev.modelsUsed || []).includes(filters.model)) return false;
+		const date = file.replace('.jsonl', '');
+		if (filters.from && date < filters.from) return false;
+		if (filters.to   && date > filters.to)   return false;
+		return true;
+	});
+
+	const flagEvents = allFlagEvents.filter(({ fl, file }) => {
+		if (filters.installId && fl.installId !== filters.installId) return false;
+		const date = file.replace('-flags.jsonl', '');
+		if (filters.from && date < filters.from) return false;
+		if (filters.to   && date > filters.to)   return false;
+		return true;
+	});
+
+	// Latest heartbeat snapshot per install
+	const latest = {}; // installId -> ev
+	for (const { ev } of events) {
+		const prev = latest[ev.installId];
+		if (!prev || ev.ts >= prev.ts) latest[ev.installId] = ev;
+	}
+
+	// First seen per install
+	const firstSeen = {};
+	for (const { ev } of events) {
+		if (!firstSeen[ev.installId] || ev.ts < firstSeen[ev.installId])
+			firstSeen[ev.installId] = ev.ts;
+	}
+
+	// Flag counts per install
+	const flagsByInstall = {};
+	for (const { fl } of flagEvents) {
+		flagsByInstall[fl.installId] = (flagsByInstall[fl.installId] || 0) + 1;
+	}
+
+	// Total requests per install (max across all events — it's cumulative)
+	const maxRequests = {};
+	for (const { ev } of events) {
+		const cur = maxRequests[ev.installId] || 0;
+		if ((ev.totalRequests || 0) > cur) maxRequests[ev.installId] = ev.totalRequests || 0;
+	}
+
+	const list = Object.values(latest).map((ev) => {
+		const tokens = ev.tokensByModel && typeof ev.tokensByModel === 'object'
+			? ev.tokensByModel : {};
+		const savings = calculateSavings(tokens);
+		return {
+			installId:          ev.installId,
+			version:            ev.version || '?',
+			os:                 ev.os || '?',
+			arch:               ev.arch || '?',
+			accountCount:       ev.accountCount || 0,
+			totalRequests:      maxRequests[ev.installId] || 0,
+			routingHealthState: ev.routingHealthState || 'unknown',
+			flaggedCount:       ev.flaggedCount || 0,
+			disabledCount:      ev.disabledCount || 0,
+			proCount:           ev.proCount || 0,
+			freeCount:          ev.freeCount || 0,
+			tokensByModel:      tokens,
+			savingsUsd:         savings.totalUsd,
+			flagEvents:         flagsByInstall[ev.installId] || 0,
+			lastSeen:           ev.ts,
+			firstSeen:          firstSeen[ev.installId] || ev.ts,
+			featuresUsed:       ev.featuresUsed || {},
+		};
+	});
+
+	// Sort by totalRequests desc by default
+	list.sort((a, b) => b.totalRequests - a.totalRequests);
+	return list;
+}
+
 function computeStats(filters = {}) {
 	const { events: allEvents, flagEvents: allFlagEvents, allFiles } = loadAllEvents();
 
@@ -577,6 +661,37 @@ tr:last-child td{border-bottom:none}
 .savings-sub{font-size:12px;color:#718096;margin-bottom:14px}
 .error{background:#2d1515;border:1px solid #742a2a;border-radius:8px;padding:12px;color:#fc8181;margin-bottom:14px}
 .empty{color:#4a5568;font-size:12px;padding:20px;text-align:center}
+
+/* ── View toggle ── */
+.view-tabs{display:flex;gap:8px;padding:12px 24px;background:#141820;border-bottom:1px solid #2d3748}
+.view-tab{font-size:12px;font-weight:600;padding:5px 14px;border-radius:999px;border:1px solid #2d3748;background:transparent;color:#718096;cursor:pointer;font-family:inherit;transition:all .2s}
+.view-tab.active{background:rgba(66,153,225,.15);border-color:rgba(66,153,225,.4);color:#63b3ed}
+.view-tab:hover:not(.active){background:rgba(255,255,255,.04);color:#e2e8f0}
+
+/* ── Installs list ── */
+.install-toolbar{display:flex;align-items:center;gap:10px;margin-bottom:14px;flex-wrap:wrap}
+.install-search{background:#0f1117;border:1px solid #2d3748;border-radius:6px;padding:6px 12px;color:#e2e8f0;font-size:12px;font-family:inherit;width:200px;outline:none;transition:border-color .2s}
+.install-search:focus{border-color:#4299e1}
+.sort-btn{font-size:11px;padding:4px 10px;border:1px solid #2d3748;background:transparent;color:#718096;border-radius:6px;cursor:pointer;font-family:inherit;font-weight:600;transition:all .2s}
+.sort-btn.active{border-color:rgba(66,153,225,.4);color:#63b3ed;background:rgba(66,153,225,.08)}
+.install-table{width:100%;border-collapse:collapse}
+.install-table th{font-size:10px;font-weight:700;text-transform:uppercase;letter-spacing:.05em;color:#718096;padding:8px 12px;text-align:left;border-bottom:1px solid #2d3748;background:rgba(255,255,255,.02);white-space:nowrap;cursor:pointer;user-select:none}
+.install-table th:hover{color:#e2e8f0}
+.install-table th .arr{display:inline-block;margin-left:3px;opacity:.35;font-size:9px}
+.install-table th.sort-active .arr{opacity:1;color:#63b3ed}
+.install-table td{padding:9px 12px;font-size:12px;border-bottom:1px solid #1f2535;vertical-align:middle}
+.install-table tr:last-child td{border-bottom:none}
+.install-row{cursor:pointer;transition:background .15s}
+.install-row:hover td{background:rgba(66,153,225,.05)}
+.install-row.selected td{background:rgba(66,153,225,.1)}
+.install-id{font-family:monospace;font-size:11px;color:#718096}
+.install-id strong{color:#63b3ed;display:block;font-size:12px;margin-bottom:1px}
+.mini-bar{display:flex;align-items:center;gap:5px}
+.mini-bar-bg{width:50px;height:4px;background:rgba(255,255,255,.08);border-radius:2px;overflow:hidden;flex-shrink:0}
+.mini-bar-fill{height:100%;border-radius:2px}
+.health-dot{display:inline-block;width:7px;height:7px;border-radius:50%;margin-right:5px;flex-shrink:0}
+.install-list-panel{background:#1a1f2e;border:1px solid #2d3748;border-radius:10px;padding:18px}
+.install-list-panel h2{font-size:11px;font-weight:700;color:#718096;text-transform:uppercase;letter-spacing:.08em;margin-bottom:14px}
 </style>
 </head>
 <body>
@@ -589,6 +704,7 @@ tr:last-child td{border-bottom:none}
   <button onclick="load()">Load Stats</button>
 </div>
 
+<div class="view-tabs" id="viewTabs" style="display:none"><button class="view-tab active" id="vtAgg" onclick="switchView(&apos;agg&apos;)">■ Aggregated</button><button class="view-tab" id="vtList" onclick="switchView(&apos;list&apos;)">☰ Installations</button></div>
 <div class="filter-bar" id="filterBar" style="display:none">
   <div class="filter-group">
     <label>Install ID</label>
@@ -707,6 +823,7 @@ async function go(filters){
     $('err').style.display='none';
     $('app').style.display='block';
     $('filterBar').style.display='flex';
+    $('viewTabs').style.display='flex';
     $('ts').textContent='Updated '+new Date().toLocaleTimeString();
     render(d,filters);
   }catch(e){showErr(e.message);}
@@ -804,8 +921,134 @@ function render(d, filters={}){
 
 const saved=localStorage.getItem('st');
 if(saved){_token=saved;$('tok').value=saved;go({});}
+
+// ── Installs list view ───────────────────────────────────────────────
+var CURRENT_VIEW = 'agg';
+var INSTALL_SORT = 'requests';
+var INSTALL_SORT_DIR = -1;
+var _installs = [];
+
+function switchView(view) {
+  CURRENT_VIEW = view;
+  $('vtAgg').className  = 'view-tab' + (view === 'agg'  ? ' active' : '');
+  $('vtList').className = 'view-tab' + (view === 'list' ? ' active' : '');
+  $('filterBar').style.display = view === 'agg'  ? 'flex' : 'none';
+  var ae = $('app'); if(ae) ae.style.display = view === 'agg' ? 'block' : 'none';
+  var le = $('installsView'); if(le) le.style.display = view === 'list' ? 'block' : 'none';
+  if (view === 'list') loadInstalls();
+}
+
+async function loadInstalls() {
+  console.log('[installs] token=', _token ? _token.slice(0,8)+'...' : 'EMPTY');
+  if (!_token) { console.log('[installs] abort: no token'); return; }
+  try {
+    var r = await fetch('/v1/installs', { headers: { 'Authorization': 'Bearer ' + _token } });
+    console.log('[installs] status=', r.status);
+    if (!r.ok) { showErr('Failed to load installs: ' + r.status); return; }
+    _installs = await r.json();
+    console.log('[installs] rows=', _installs.length, _installs[0]);
+    renderInstallList();
+  } catch(e) { console.error('[installs] error:', e); showErr(e.message); }
+}
+
+function setInstallSort(col) {
+  if (INSTALL_SORT === col) { INSTALL_SORT_DIR = -INSTALL_SORT_DIR; }
+  else { INSTALL_SORT = col; INSTALL_SORT_DIR = -1; }
+  ['requests','savings','accounts','flags','lastseen'].forEach(function(c) {
+    var b = $('isort-' + c);
+    if (b) b.className = 'sort-btn' + (c === INSTALL_SORT ? ' active' : '');
+  });
+  renderInstallList();
+}
+
+function renderInstallList() {
+  var wrap = $('installTableWrap');
+  if (!wrap) return;
+  var q = (($('installSearch')||{}).value||'').toLowerCase();
+  var rows = _installs.slice().filter(function(r) {
+    if (!q) return true;
+    return r.installId.toLowerCase().indexOf(q)!==-1 ||
+           (r.version||'').toLowerCase().indexOf(q)!==-1 ||
+           (r.os||'').toLowerCase().indexOf(q)!==-1;
+  });
+  rows.sort(function(a,b) {
+    var av,bv;
+    if      (INSTALL_SORT==='requests') {av=a.totalRequests;bv=b.totalRequests;}
+    else if (INSTALL_SORT==='savings')  {av=a.savingsUsd;bv=b.savingsUsd;}
+    else if (INSTALL_SORT==='accounts') {av=a.accountCount;bv=b.accountCount;}
+    else if (INSTALL_SORT==='flags')    {av=a.flagEvents;bv=b.flagEvents;}
+    else if (INSTALL_SORT==='lastseen') {av=a.lastSeen;bv=b.lastSeen;}
+    else {av=0;bv=0;}
+    if(av<bv) return INSTALL_SORT_DIR;
+    if(av>bv) return -INSTALL_SORT_DIR;
+    return 0;
+  });
+  if (rows.length===0) { wrap.innerHTML='<div class="empty">No installs found.</div>'; return; }
+  var HC={healthy:'#68d391',cooldown_wait:'#f6e05e',busy:'#63b3ed',paused:'#fc8181',stopped:'#fc8181'};
+  function ar(col) {
+    if(INSTALL_SORT!==col) return '<span class="arr">&#8597;</span>';
+    return '<span class="arr">'+(INSTALL_SORT_DIR===-1?'&#8595;':'&#8593;')+'</span>';
+  }
+  var html='<table class="install-table"><thead><tr>'+
+    '<th>Install ID</th>'+
+    '<th onclick="setInstallSort(&apos;requests&apos;)" class="'+(INSTALL_SORT==='requests'?'sort-active':'')+'">Requests'+ar('requests')+'</th>'+
+    '<th onclick="setInstallSort(&apos;accounts&apos;)" class="'+(INSTALL_SORT==='accounts'?'sort-active':'')+'">Accounts'+ar('accounts')+'</th>'+
+    '<th onclick="setInstallSort(&apos;savings&apos;)"  class="'+(INSTALL_SORT==='savings' ?'sort-active':'')+'">Savings' +ar('savings') +'</th>'+
+    '<th onclick="setInstallSort(&apos;flags&apos;)"    class="'+(INSTALL_SORT==='flags'   ?'sort-active':'')+'">Flags'   +ar('flags')   +'</th>'+
+    '<th>Health</th>'+
+    '<th>Version / OS</th>'+
+    '<th onclick="setInstallSort(&apos;lastseen&apos;)" class="'+(INSTALL_SORT==='lastseen'?'sort-active':'')+'">Last Seen'+ar('lastseen')+'</th>'+
+    '<th></th>'+
+    '</tr></thead><tbody>';
+  rows.forEach(function(r) {
+    var hc=HC[r.routingHealthState]||'#718096';
+    var shortId=r.installId.slice(0,8)+'…';
+    var ls=r.lastSeen?new Date(r.lastSeen).toLocaleString():'—';
+    var fc=r.flagEvents>0?'#fc8181':'#718096';
+    var pf='';
+    if(r.proCount>0||r.freeCount>0)
+      pf='<span style="color:#68d391;font-size:10px">P:'+r.proCount+'</span> <span style="color:#718096;font-size:10px">F:'+r.freeCount+'</span>';
+    html+='<tr class="install-row" onclick="drillDown(&apos;'+r.installId+'&apos;)">'+
+      '<td><div class="install-id"><strong>'+shortId+'</strong>'+r.installId.slice(8)+'</div></td>'+
+      '<td style="font-family:monospace;font-weight:700">'+fmt(r.totalRequests)+'</td>'+
+      '<td>'+r.accountCount+(pf?'<br>'+pf:'')+'</td>'+
+      '<td style="color:#68d391;font-family:monospace;font-weight:700">'+usd(r.savingsUsd)+'</td>'+
+      '<td style="color:'+fc+';font-weight:700;font-family:monospace">'+r.flagEvents+'</td>'+
+      '<td><span class="health-dot" style="background:'+hc+'"></span><span style="font-size:11px;color:'+hc+'">'+escI(r.routingHealthState||'?')+'</span></td>'+
+      '<td style="font-size:11px"><span style="color:#63b3ed">v'+escI(r.version)+'</span> <span style="color:#718096">'+escI(r.os)+'/'+escI(r.arch)+'</span></td>'+
+      '<td style="font-size:11px;color:#718096;font-family:monospace">'+ls+'</td>'+
+      '<td><button class="sort-btn" style="padding:3px 8px;font-size:10px" onclick="event.stopPropagation();drillDown(&apos;'+r.installId+'&apos;)">Filter &#8594;</button></td>'+
+      '</tr>';
+  });
+  html+='</tbody></table>';
+  wrap.innerHTML=html;
+}
+
+function drillDown(installId) {
+  switchView('agg');
+  var sel=$('fInstall');
+  if(sel) { sel.value=installId; }
+  applyFilters();
+}
+
+function escI(s){if(!s)return '';return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');}
+
 setInterval(()=>{if(_token){const f={};const i=$('fInstall').value;if(i)f.installId=i;const v=$('fVersion').value;if(v)f.version=v;const o=$('fOS').value;if(o)f.os=o;const m=$('fModel').value;if(m)f.model=m;const fr=$('fFrom').value;if(fr)f.from=fr;const to=$('fTo').value;if(to)f.to=to;go(f);}},60000);
 </script>
+<div class="main" id="installsView" style="display:none">
+  <div class="install-list-panel">
+    <h2>✶ Installations</h2>
+    <div class="install-toolbar">
+      <input class="install-search" id="installSearch" placeholder="Search…" oninput="renderInstallList()" />
+      <button class="sort-btn" id="isort-requests" onclick="setInstallSort(&apos;requests&apos;)">Requests ↕</button>
+      <button class="sort-btn" id="isort-savings" onclick="setInstallSort(&apos;savings&apos;)">Savings ↕</button>
+      <button class="sort-btn" id="isort-accounts" onclick="setInstallSort(&apos;accounts&apos;)">Accounts ↕</button>
+      <button class="sort-btn" id="isort-flags" onclick="setInstallSort(&apos;flags&apos;)">Flags ↕</button>
+      <button class="sort-btn" id="isort-lastseen" onclick="setInstallSort(&apos;lastseen&apos;)">Last Seen ↕</button>
+    </div>
+    <div id="installTableWrap"></div>
+  </div>
+</div>
 </body></html>`;
 }
 
@@ -966,7 +1209,7 @@ tr:last-child td{border-bottom:none}
 </div>
 
 <script>
-var _token = '';
+
 var _notifications = [];
 
 function $(i) { return document.getElementById(i); }
@@ -1318,6 +1561,36 @@ const server = createServer(async (req, res) => {
 		return;
 	}
 
+	// Installs list (protected)
+	if (method === "GET" && url.startsWith("/v1/installs")) {
+		if (!STATS_TOKEN) {
+			res.writeHead(403, { "Content-Type": "application/json" });
+			res.end(JSON.stringify({ error: "STATS_TOKEN not configured" }));
+			return;
+		}
+		const auth = req.headers.authorization || "";
+		if (auth !== `Bearer ${STATS_TOKEN}`) {
+			res.writeHead(401, { "Content-Type": "application/json" });
+			res.end(JSON.stringify({ error: "Unauthorized" }));
+			return;
+		}
+		try {
+			const q = parseQueryString(url);
+			const filters = {};
+			if (q.from)    filters.from    = q.from;
+			if (q.to)      filters.to      = q.to;
+			if (q.version) filters.version = q.version;
+			if (q.os)      filters.os      = q.os;
+			const list = computeInstallList(filters);
+			res.writeHead(200, { "Content-Type": "application/json" });
+			res.end(JSON.stringify(list));
+		} catch (err) {
+			res.writeHead(500, { "Content-Type": "application/json" });
+			res.end(JSON.stringify({ error: "Failed to compute install list" }));
+		}
+		return;
+	}
+
 	// Stats (protected)
 	if (method === "GET" && url.startsWith("/v1/stats")) {
 		if (!STATS_TOKEN) {