@echomem/mcp 1.4.14 → 1.4.16

package/dist/billing-alert.js

@@ -0,0 +1,39 @@
+import fs from "node:fs";
+import path from "node:path";
+import { echoConfigDir } from "./keystore.js";
+const ALERT_FILE = "billing-alert.json";
+const DEFAULT_MAX_AGE_MS = 31 * 24 * 60 * 60 * 1000;
+function alertPath() {
+    return path.join(echoConfigDir(), ALERT_FILE);
+}
+export function writeBillingAlert(alert) {
+    try {
+        fs.mkdirSync(echoConfigDir(), { recursive: true, mode: 0o700 });
+        fs.writeFileSync(alertPath(), JSON.stringify({ ...alert, updatedAt: new Date().toISOString() }, null, 2), { mode: 0o600 });
+    }
+    catch {
+        /* best-effort: billing UI should never break search */
+    }
+}
+export function readBillingAlert(maxAgeMs = DEFAULT_MAX_AGE_MS) {
+    try {
+        const alert = JSON.parse(fs.readFileSync(alertPath(), "utf8"));
+        const updatedAt = Date.parse(alert.updatedAt || "");
+        if (!updatedAt || Date.now() - updatedAt > maxAgeMs)
+            return null;
+        if (!alert.message || !alert.pricingUrl)
+            return null;
+        return alert;
+    }
+    catch {
+        return null;
+    }
+}
+export function clearBillingAlert() {
+    try {
+        fs.unlinkSync(alertPath());
+    }
+    catch {
+        /* absent is fine */
+    }
+}

package/dist/hud/diagnostics.js

@@ -0,0 +1,135 @@
+import fs from "node:fs";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { echoConfigDir, KeyStore } from "../keystore.js";
+const API_BASE = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
+const EVENTS_TAIL_LINES = 400;
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function number(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+function text(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+function briefError(error) {
+    const message = error instanceof Error ? error.message : String(error || "Connection failed");
+    return message
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/gi, "Bearer [redacted]")
+        .replace(/ec_[A-Za-z0-9._-]+/g, "ec_[redacted]")
+        .replace(/\s+/g, " ")
+        .slice(0, 180);
+}
+function normalizePlan(value) {
+    const plan = text(value)?.toLowerCase();
+    return plan && ["free", "pro", "power", "team", "enterprise"].includes(plan) ? plan : undefined;
+}
+/** Parse the account bootstrap contract without importing app-only code into the npm package. */
+export function accountDiagnosticsFromBootstrap(payload) {
+    const root = record(payload) ?? {};
+    const usage = record(root.usage) ?? {};
+    const quota = record(root.memorySearchQuota) ?? {};
+    const weeklySearchLimit = number(quota.limit);
+    const searchesThisWeek = number(quota.used);
+    const searchesRemaining = quota.remaining === null ? null : number(quota.remaining);
+    return {
+        plan: normalizePlan(root.plan),
+        weeklySearchLimit,
+        searchesThisWeek,
+        searchesRemaining,
+        resetAt: text(quota.resetAt),
+        memoryCount: number(usage.memories),
+        sourceCount: number(usage.sources),
+    };
+}
+/** Read only the latest memory-search trace; never return a query, token, or memory content. */
+export function latestSearchTraceFromEvents(lines) {
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+        try {
+            const event = record(JSON.parse(lines[index] || ""));
+            if (!event || event.type !== "tool_call" || event.tool !== "search_memories")
+                continue;
+            const at = text(event.ts);
+            if (!at)
+                continue;
+            return {
+                at,
+                ok: typeof event.ok === "boolean" ? event.ok : undefined,
+                requestId: text(event.request_id),
+                endpoint: text(event.endpoint),
+                httpStatus: number(event.http_status),
+                errorCode: text(event.error_code),
+                errorKind: text(event.error_kind),
+                latencyMs: number(event.latency_ms),
+            };
+        }
+        catch {
+            // A concurrently appended partial line or old malformed record is safely ignored.
+        }
+    }
+    return undefined;
+}
+function loadLatestSearchTrace() {
+    try {
+        const file = path.join(echoConfigDir(), "events.jsonl");
+        return latestSearchTraceFromEvents(fs.readFileSync(file, "utf8").split("\n").slice(-EVENTS_TAIL_LINES));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Read-only, local HUD diagnostics. Credentials are used only in the Authorization header to
+ * EchoMem's authenticated account endpoint; this never sends transcripts, queries, or memories.
+ */
+export async function loadHudDiagnostics() {
+    const updatedAt = new Date().toISOString();
+    const lastSearch = loadLatestSearchTrace();
+    const token = new KeyStore().getToken();
+    if (!token) {
+        return { updatedAt, account: { state: "not_logged_in" }, accountRequest: {}, lastSearch };
+    }
+    const requestId = `hud-account-${randomUUID()}`;
+    const startedAt = Date.now();
+    try {
+        const response = await fetch(`${API_BASE}/api/extension/account/bootstrap`, {
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "X-EchoMem-Request-Id": requestId,
+            },
+        });
+        const payload = await response.json().catch(() => ({}));
+        const telemetry = record(payload)?.telemetry;
+        const echoedRequestId = text(record(telemetry)?.requestId) ?? requestId;
+        const accountRequest = {
+            requestId: echoedRequestId,
+            httpStatus: response.status,
+            elapsedMs: Date.now() - startedAt,
+        };
+        if (!response.ok) {
+            return {
+                updatedAt,
+                account: { state: "error", error: `Account check returned HTTP ${response.status}` },
+                accountRequest,
+                lastSearch,
+            };
+        }
+        return {
+            updatedAt,
+            account: { state: "connected", ...accountDiagnosticsFromBootstrap(payload) },
+            accountRequest,
+            lastSearch,
+        };
+    }
+    catch (error) {
+        return {
+            updatedAt,
+            account: { state: "error", error: briefError(error) },
+            accountRequest: { requestId, elapsedMs: Date.now() - startedAt },
+            lastSearch,
+        };
+    }
+}

package/dist/hud/server.js

@@ -6,10 +6,13 @@ import { fileURLToPath } from "node:url";
 import { HudMonitor } from "./monitor.js";
 import { HUD_HTML } from "./web.js";
 import { buildCapsuleText } from "./capsule.js";
+import { loadHudDiagnostics } from "./diagnostics.js";
 import { homePath, newestFile, walkFiles } from "./fs.js";
 import { KeyStore } from "../keystore.js";
 import { assembleCodex, assembleClaude } from "../migrate.js";
+import { readBillingAlert } from "../billing-alert.js";
 const API_BASE = (process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app").replace(/\/$/, "");
+const PRICING_URL = (process.env.ECHO_PRICING_URL || "https://echoknows.com/pricing").replace(/\/$/, "");
 export async function createHudServer(opts = {}) {
     const mode = opts.mode || "auto";
     const port = opts.port ?? 17377;
@@ -42,6 +45,50 @@ export async function createHudServer(opts = {}) {
             res.end(JSON.stringify(latest, null, 2));
             return;
         }
+        if (url.pathname === "/billing-status") {
+            handleBillingStatus(res).catch((error) => {
+                if (res.writableEnded)
+                    return;
+                res.writeHead(200, { "content-type": "application/json" });
+                res.end(JSON.stringify({ ok: false, state: "unknown", reason: error instanceof Error ? error.message : "billing status failed" }));
+            });
+            return;
+        }
+        if (url.pathname === "/open-external") {
+            const target = url.searchParams.get("url") || "";
+            let ok = false;
+            try {
+                const parsed = new URL(target);
+                if ((parsed.protocol === "https:" || parsed.protocol === "http:") && typeof opts.onOpenExternal === "function") {
+                    opts.onOpenExternal(parsed.toString());
+                    ok = true;
+                }
+            }
+            catch {
+                ok = false;
+            }
+            res.writeHead(200, { "content-type": "application/json" });
+            res.end(JSON.stringify({ ok, reason: ok ? undefined : opts.onOpenExternal ? "invalid_url" : "no_desktop" }));
+            return;
+        }
+        if (url.pathname === "/diagnostics") {
+            loadHudDiagnostics().then((diagnostics) => {
+                if (res.writableEnded)
+                    return;
+                res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+                res.end(JSON.stringify(diagnostics));
+            }).catch(() => {
+                if (res.writableEnded)
+                    return;
+                res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+                res.end(JSON.stringify({
+                    updatedAt: new Date().toISOString(),
+                    account: { state: "error", error: "Diagnostics unavailable" },
+                    accountRequest: {},
+                }));
+            });
+            return;
+        }
         if (url.pathname === "/select") {
             const id = url.searchParams.get("id");
             monitor.pin(id && id !== "auto" ? id : null);
@@ -245,6 +292,69 @@ export async function createHudServer(opts = {}) {
         }),
     };
 }
+async function handleBillingStatus(res) {
+    const respond = (obj) => {
+        if (res.writableEnded)
+            return;
+        res.writeHead(200, { "content-type": "application/json" });
+        res.end(JSON.stringify(obj));
+    };
+    const pricingUrl = appendSource(PRICING_URL, "hud");
+    const alert = readBillingAlert();
+    const token = new KeyStore().getToken();
+    if (!token) {
+        return respond({ ok: false, state: "not_connected", pricingUrl });
+    }
+    let plan = "unknown";
+    let paid = false;
+    try {
+        const response = await fetch(`${API_BASE}/api/extension/account/bootstrap`, {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        const data = (await response.json().catch(() => ({})));
+        if (response.ok) {
+            plan = typeof data.plan === "string" ? data.plan.toLowerCase() : "free";
+            paid = ["pro", "power", "team", "enterprise"].includes(plan);
+        }
+    }
+    catch {
+        /* Local alert still gives the HUD something useful. */
+    }
+    if (alert && (alert.kind === "quota_exceeded" || !paid)) {
+        return respond({
+            ok: true,
+            state: alert.kind,
+            plan: alert.plan || plan,
+            message: alert.kind === "quota_exceeded" ? "Recall limit reached." : "Recall needs a plan.",
+            detail: alert.message,
+            code: alert.code,
+            pricingUrl: appendSource(alert.pricingUrl || pricingUrl, "hud"),
+            updatedAt: alert.updatedAt,
+        });
+    }
+    if (!paid && plan === "free") {
+        return respond({
+            ok: true,
+            state: "plan_required",
+            plan,
+            message: "Recall needs a plan.",
+            detail: "Search and recall require Echo Pro or Power. Saving conversations keeps working.",
+            pricingUrl,
+        });
+    }
+    respond({ ok: true, state: "ok", plan, paid, pricingUrl });
+}
+function appendSource(url, source) {
+    try {
+        const parsed = new URL(url);
+        if (!parsed.searchParams.has("source"))
+            parsed.searchParams.set("source", source);
+        return parsed.toString();
+    }
+    catch {
+        return url;
+    }
+}
 async function handleCheckpointStatus(latest, res) {
     const respond = (obj) => {
         if (res.writableEnded)

package/dist/hud/web.js

@@ -16,6 +16,10 @@ export const HUD_HTML = String.raw `<!doctype html>
         --brick: #c7372f;
         --green: #43d17a;
         --amber: #e9b949;
+        --billing-free-bg: #fff8d9;
+        --billing-free-border: rgba(190, 128, 19, 0.36);
+        --billing-free: #c08412;
+        --billing-free-dark: #87560d;
         --line: rgba(26, 58, 143, 0.22);
         --track: rgba(26, 58, 143, 0.1);
         --shadow: drop-shadow(0 2px 7px rgba(26, 58, 143, 0.12));
@@ -217,6 +221,32 @@ export const HUD_HTML = String.raw `<!doctype html>
         cursor: grab;
       }
       #hud.open .details { display: block; }
+      .diagnostics {
+        margin: 10px 0 0;
+        padding: 10px 11px;
+        border: 1px solid rgba(26, 58, 143, 0.18);
+        border-radius: 10px;
+        background: rgba(255, 255, 255, 0.72);
+      }
+      .diagnostics-head { display: flex; align-items: center; justify-content: space-between; gap: 8px; }
+      .diagnostics-title { font-size: 10px; font-weight: 820; letter-spacing: .02em; color: var(--blue); }
+      .diagnostics-refresh {
+        border: 0;
+        padding: 0;
+        background: transparent;
+        color: var(--faint);
+        font-family: inherit;
+        font-size: 10px;
+        font-weight: 730;
+        cursor: pointer;
+      }
+      .diagnostics-refresh:hover { color: var(--blue); }
+      .diagnostics-body { display: grid; gap: 5px; margin-top: 7px; }
+      .diagnostics-line { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; font-size: 10px; line-height: 1.25; }
+      .diagnostics-k { flex: 0 0 auto; color: var(--faint); font-weight: 650; }
+      .diagnostics-v { min-width: 0; overflow: hidden; text-align: right; text-overflow: ellipsis; white-space: nowrap; color: var(--muted); font-family: "JetBrains Mono", ui-monospace, monospace; font-size: 9.5px; font-weight: 650; }
+      .diagnostics-v.bad { color: var(--brick); }
+      .diagnostics-v.wrap { white-space: normal; overflow-wrap: anywhere; }
       /* The current session is the one object every number and action belongs to — one card. */
       .now-card {
         border: 1px solid rgba(26, 58, 143, 0.24);
@@ -504,6 +534,75 @@ export const HUD_HTML = String.raw `<!doctype html>
         background: rgba(199, 55, 47, 0.07);
         color: #7a241e;
       }
+      .billing-banner {
+        display: none;
+        margin: 0 0 12px;
+        border: 1.4px solid var(--billing-free-border);
+        border-radius: 12px;
+        background: linear-gradient(180deg, var(--billing-free-bg), #fff);
+        padding: 10px;
+        color: var(--muted);
+        box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.82);
+      }
+      .billing-banner.limit {
+        border-color: rgba(255, 95, 87, 0.45);
+        background: linear-gradient(180deg, #fff3f2, #fff);
+      }
+      .billing-top {
+        display: flex;
+        align-items: center;
+        gap: 8px;
+      }
+      .billing-dot {
+        width: 10px;
+        height: 10px;
+        flex: 0 0 auto;
+        border-radius: 999px;
+        background: var(--billing-free);
+        box-shadow: 0 0 0 4px rgba(190, 128, 19, 0.12);
+      }
+      .billing-banner.limit .billing-dot {
+        background: #ff5f57;
+        box-shadow: 0 0 0 4px rgba(255, 95, 87, 0.12);
+      }
+      .billing-title {
+        min-width: 0;
+        flex: 1;
+        color: var(--billing-free-dark);
+        font-size: 13px;
+        font-weight: 900;
+        line-height: 1.15;
+      }
+      .billing-banner.limit .billing-title { color: #7a241e; }
+      .billing-copy {
+        display: block;
+        margin: 8px 0 0 18px;
+        font-size: 11.5px;
+        line-height: 1.35;
+        font-weight: 650;
+      }
+      .billing-link {
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        min-height: 28px;
+        border: 1px solid var(--billing-free-dark);
+        border-radius: 999px;
+        background: var(--billing-free);
+        color: #fff;
+        padding: 0 13px;
+        font-family: inherit;
+        font-size: 11px;
+        font-weight: 900;
+        cursor: pointer;
+        box-shadow: 0 12px 20px -16px rgba(135, 86, 13, 0.95);
+      }
+      .billing-banner.limit .billing-link {
+        border-color: #7a241e;
+        background: #7a241e;
+        box-shadow: 0 12px 20px -16px rgba(122, 36, 30, 0.95);
+      }
+      .billing-link:hover { filter: brightness(0.96); }
       button.renew-btn {
         display: none;
         width: 100%;
@@ -671,6 +770,14 @@ export const HUD_HTML = String.raw `<!doctype html>
             <button class="pin-chip" id="pinchip" type="button" title="Return to auto-follow">pinned x</button>
             <button class="jump-chip" id="jumpchip" type="button" title="Open this conversation">&#8599;</button>
           </div>
+          <div class="billing-banner" id="billingbanner">
+            <div class="billing-top">
+              <span class="billing-dot"></span>
+              <strong class="billing-title" id="billingtitle"></strong>
+              <button class="billing-link" id="billinglink" type="button">Open pricing</button>
+            </div>
+            <span class="billing-copy" id="billingcopy"></span>
+          </div>
           <div class="state-row">
             <span class="state-dot" id="stateDot"></span>
             <span class="state-word" id="stateWord">--%</span>
@@ -690,6 +797,10 @@ export const HUD_HTML = String.raw `<!doctype html>
             </div>
           </div>
         </div>
+        <section class="diagnostics" aria-label="Memory access diagnostics">
+          <div class="diagnostics-head"><span class="diagnostics-title">Memory access</span><button class="diagnostics-refresh" id="diagnosticsrefresh" type="button">Refresh</button></div>
+          <div class="diagnostics-body" id="diagnosticsbody"><span class="diagnostics-v">Open this panel to check account status.</span></div>
+        </section>
         <div class="tabs" id="tabs"></div>
         <div class="meta-row"><span class="meta-line" id="metaline"></span><button class="switchbtn agent-switch" id="switchbtn" title="Switch agent" style="display:none" type="button"></button></div>
         <div class="path" id="path"></div>
@@ -715,6 +826,10 @@ export const HUD_HTML = String.raw `<!doctype html>
       const whyBtn = document.getElementById("whybtn");
       const evidence = document.getElementById("evidence");
       const nudge = document.getElementById("nudge");
+      const billingBanner = document.getElementById("billingbanner");
+      const billingTitle = document.getElementById("billingtitle");
+      const billingCopy = document.getElementById("billingcopy");
+      const billingLink = document.getElementById("billinglink");
       const renewBtn = document.getElementById("renewbtn");
       const renewResult = document.getElementById("renewresult");
       const renewMsg = document.getElementById("renewmsg");
@@ -730,6 +845,8 @@ export const HUD_HTML = String.raw `<!doctype html>
       const switchBtn = document.getElementById("switchbtn");
       const revealEl = document.getElementById("reveal");
       const missing = document.getElementById("missing");
+      const diagnosticsBody = document.getElementById("diagnosticsbody");
+      const diagnosticsRefresh = document.getElementById("diagnosticsrefresh");
       let prevTurnState = null;
       let lastCapsule = "";
       let renewResultSessionKey = "";
@@ -741,6 +858,9 @@ export const HUD_HTML = String.raw `<!doctype html>
       let renewStartMs = 0;
       let renewEta = null;
       let renewEstimateSeq = 0;
+      let billingStatus = null;
+      let diagnosticsLoaded = false;
+      let diagnosticsInFlight = false;
       const CHECKPOINT_CACHE_KEY = "echomemHudCheckpointCacheV2";
       const CHECKPOINT_CACHE_LIMIT = 24;
       const CHECKPOINT_CACHE_TTL_MS = 7 * 24 * 60 * 60 * 1000;
@@ -753,6 +873,86 @@ export const HUD_HTML = String.raw `<!doctype html>
       // viewing", so the user can always point the HUD at the right session. Flip false to show the viewer.
       const DEMO_CLEAN = true;
 
+      function diagnosticsLine(label, value, bad, wrap) {
+        return '<span class="diagnostics-line"><span class="diagnostics-k">' + esc(label) + '</span><span class="diagnostics-v' + (bad ? ' bad' : '') + (wrap ? ' wrap' : '') + '">' + esc(value) + '</span></span>';
+      }
+
+      function requestLabel(requestId) {
+        return requestId ? requestId : "not available";
+      }
+
+      function planLabel(plan) {
+        if (!plan) return "connected";
+        return plan.slice(0, 1).toUpperCase() + plan.slice(1);
+      }
+
+      function renderDiagnostics(data) {
+        if (!diagnosticsBody) return;
+        const account = (data && data.account) || {};
+        const accountRequest = (data && data.accountRequest) || {};
+        const lines = [];
+        if (account.state === "connected") {
+          lines.push(diagnosticsLine("account", planLabel(account.plan) + " · authenticated"));
+          if (typeof account.searchesThisWeek === "number" && typeof account.weeklySearchLimit === "number") {
+            const limit = account.weeklySearchLimit < 0 ? "Unlimited" : String(account.weeklySearchLimit);
+            const remaining = account.searchesRemaining === null ? "" : (typeof account.searchesRemaining === "number" ? " · " + account.searchesRemaining + " left" : "");
+            lines.push(diagnosticsLine("searches", account.searchesThisWeek + " / " + limit + " UTC week" + remaining));
+            if (account.resetAt) lines.push(diagnosticsLine("resets", account.resetAt));
+          } else {
+            lines.push(diagnosticsLine("searches", "weekly quota not reported"));
+          }
+        } else if (account.state === "not_logged_in") {
+          lines.push(diagnosticsLine("account", "not logged in", true));
+        } else {
+          lines.push(diagnosticsLine("account", account.error || "unavailable", true));
+        }
+        const accountStatus = typeof accountRequest.httpStatus === "number"
+          ? "HTTP " + accountRequest.httpStatus + (typeof accountRequest.elapsedMs === "number" ? " · " + accountRequest.elapsedMs + "ms" : "")
+          : "not sent";
+        lines.push(diagnosticsLine("account check", accountStatus, account.state === "error"));
+        if (accountRequest.requestId) lines.push(diagnosticsLine("account request", requestLabel(accountRequest.requestId), false, true));
+
+        const last = data && data.lastSearch;
+        if (!last) {
+          lines.push(diagnosticsLine("last search", "no local trace yet"));
+        } else {
+          const outcome = last.ok === false ? "failed" : last.ok === true ? "succeeded" : "recorded";
+          const status = typeof last.httpStatus === "number" ? "HTTP " + last.httpStatus : outcome;
+          const errorLabel = last.errorCode || (last.errorKind && last.errorKind !== "none" ? last.errorKind : "");
+          const detail = [status, errorLabel].filter(Boolean).join(" · ");
+          lines.push(diagnosticsLine("last search", detail || outcome, last.ok === false));
+          if (last.requestId) lines.push(diagnosticsLine("search request", requestLabel(last.requestId), last.ok === false, true));
+        }
+        diagnosticsBody.innerHTML = lines.join("");
+        diagnosticsLoaded = true;
+        syncHeight();
+      }
+
+      async function refreshDiagnostics() {
+        if (!diagnosticsBody || diagnosticsInFlight) return;
+        diagnosticsInFlight = true;
+        diagnosticsBody.innerHTML = diagnosticsLine("memory access", "checking…");
+        if (diagnosticsRefresh) diagnosticsRefresh.disabled = true;
+        try {
+          const response = await fetch("/diagnostics");
+          renderDiagnostics(await response.json());
+        } catch (_) {
+          renderDiagnostics({ account: { state: "error", error: "local diagnostic fetch failed" }, accountRequest: {} });
+        } finally {
+          diagnosticsInFlight = false;
+          if (diagnosticsRefresh) diagnosticsRefresh.disabled = false;
+        }
+      }
+
+      function maybeLoadDiagnostics() {
+        if (!diagnosticsLoaded && !diagnosticsInFlight) refreshDiagnostics();
+      }
+
+      if (diagnosticsRefresh) diagnosticsRefresh.addEventListener("click", (event) => {
+        event.stopPropagation();
+        refreshDiagnostics();
+      });
+
       // Mini mode: resting state is a small pill; opening the panel shows the full layout, closing
       // returns to the pill. Preference persists (localStorage here, window size in main's bounds file).
       const miniBtn = document.getElementById("minibtn");
@@ -871,6 +1071,19 @@ export const HUD_HTML = String.raw `<!doctype html>
         e.stopPropagation();
         selectSession("auto");
       });
+      if (billingLink) billingLink.addEventListener("click", (e) => {
+        e.stopPropagation();
+        const url = billingStatus && billingStatus.pricingUrl;
+        if (!url) return;
+        fetch("/open-external?url=" + encodeURIComponent(url))
+          .then((res) => res.json())
+          .then((data) => {
+            if (!data || !data.ok) window.open(url, "_blank", "noopener");
+          })
+          .catch(() => {
+            try { window.open(url, "_blank", "noopener"); } catch {}
+          });
+      });
       function selectSession(id) {
         if (!id) return;
         fetch("/select?id=" + encodeURIComponent(id))
@@ -889,6 +1102,7 @@ export const HUD_HTML = String.raw `<!doctype html>
         }
         if (event.target instanceof HTMLElement && (event.target.closest(".switchbtn") || event.target.closest(".cornerbtn"))) return;
         hud.classList.toggle("open");
+        if (hud.classList.contains("open")) maybeLoadDiagnostics();
         syncHeight();
       });
 
@@ -1365,6 +1579,19 @@ export const HUD_HTML = String.raw `<!doctype html>
         const events = new EventSource("/events");
         events.onmessage = (event) => render(JSON.parse(event.data));
         fetch("/state").then((r) => r.json()).then(render).catch(() => {});
+        refreshBillingStatus();
+        setInterval(refreshBillingStatus, 30000);
+      }
+
+      async function refreshBillingStatus() {
+        try {
+          const res = await fetch("/billing-status");
+          billingStatus = await res.json();
+        } catch {
+          billingStatus = null;
+        }
+        renderBillingStatus();
+        syncHeight();
       }
 
       function render(state) {
@@ -1422,6 +1649,7 @@ export const HUD_HTML = String.raw `<!doctype html>
           jumpChip.style.display = activeId ? "inline-block" : "none";
         }
         renderWhy(score, oldPct, repeatCount, sat, health, color);
+        renderBillingStatus();
         pathEl.textContent = "";
         currentSrc = score.sourcePath || null;
         if (revealEl) revealEl.style.display = !DEMO_CLEAN && currentSrc ? "inline-block" : "none";
@@ -1482,6 +1710,7 @@ export const HUD_HTML = String.raw `<!doctype html>
         whyOpen = false;
         hud.classList.remove("show-why");
         nudge.style.display = "none";
+        renderBillingStatus();
         if (renewBtn) renewBtn.style.display = "none";
         clearRenewResult();
         pathEl.textContent = "";
@@ -1503,6 +1732,27 @@ export const HUD_HTML = String.raw `<!doctype html>
         if (mrepoLine) mrepoLine.style.display = repo ? "flex" : "none";
       }
 
+      function renderBillingStatus() {
+        if (!billingBanner) return;
+        const state = billingStatus && billingStatus.state;
+        const blocked = state === "plan_required" || state === "quota_exceeded" || state === "billing_attention";
+        billingBanner.style.display = blocked ? "block" : "none";
+        billingBanner.classList.toggle("limit", state === "quota_exceeded");
+        if (!blocked) return;
+        const title = state === "quota_exceeded"
+          ? "Recall limit reached"
+          : state === "plan_required"
+            ? "Recall paused · Free plan"
+            : billingStatus.message || "Billing needs attention";
+        const detail = state === "quota_exceeded"
+          ? "You used all Pro searches this month. Upgrade or wait for reset."
+          : state === "plan_required"
+            ? "Search memory requires Pro or Power. Saving still works."
+            : billingStatus.detail || "Open pricing to restore memory search.";
+        if (billingTitle) billingTitle.textContent = title;
+        if (billingCopy) billingCopy.textContent = detail;
+      }
+
       function renderWhy(score, oldPct, repeatCount, sat, health, color) {
         const rows = [];
         if (sat > 0) rows.push(["context", score.modelContextWindow ? sat + "% full · " + fmt(score.ctTokens) : fmt(score.ctTokens) + " tokens"]);