@echomem/mcp 1.4.34 → 1.4.36

package/dist/setup-page/client-extraction.js

@@ -38,7 +38,13 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
           }
           return envelope;
         }
-        if (!gs || !Number.isFinite(sessions) || sessions <= 0 || canonicalSessions !== sessions || canonicalInput <= 0 || skipped !== 0) {
+        if (
+          !gs ||
+          !Number.isFinite(sessions) || sessions <= 0 ||
+          !Number.isFinite(canonicalSessions) || canonicalSessions <= 0 || canonicalSessions > sessions ||
+          !Number.isFinite(skipped) || skipped < 0 || canonicalSessions + skipped !== sessions ||
+          !Number.isFinite(canonicalInput) || canonicalInput <= 0
+        ) {
           throw new Error("Canonical analysis is incomplete or does not match the provider session cohort.");
         }
         if (!Array.isArray(r.repos) || r.repos.length === 0) {
@@ -52,15 +58,19 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         report = null;
         reportEnvelope = null;
         resetReportSurface();
+        var canContinue = String(code || "").indexOf("REPORT_") === 0 || code === "RENDER_FAILED";
         setHead("We couldn't finish this scan", "Needs attention");
         app.className = "reportMessageStage";
         app.innerHTML =
           '<section class="reportMessage" data-report-state="failed">' +
             '<h2>We couldn’t finish this scan.</h2>' +
             '<p>Your coding history is unchanged.</p>' +
-            '<p>Close this tab and run <code>echomem-mcp init</code> again.</p>' +
+            (canContinue
+              ? '<p>This optional report can be retried later.</p><div class="actions"><button type="button" class="primary" data-connect-echo>Continue without report</button></div>'
+              : '<p>Close this tab and run <code>echomem-mcp init</code> again.</p>') +
             '<details class="reportTechnical"><summary>Technical details</summary><code>' + esc(code || "REPORT_FAILED") + '</code></details>' +
           '</section>';
+        if (canContinue) bindConnect();
       }
       function renderEmptyReport() {
         report = null;
@@ -71,8 +81,10 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         app.innerHTML =
           '<section class="reportMessage" data-report-state="empty">' +
             '<h2>No coding history found.</h2>' +
-            '<p>Start a Codex or Claude Code session, then run <code>echomem-mcp init</code> again.</p>' +
+            '<p>You can continue now and import local coding history later.</p>' +
+            '<div class="actions"><button type="button" class="primary" data-connect-echo>Continue setup</button></div>' +
           '</section>';
+        bindConnect();
       }
       function renderBridgeIssue() {
         renderReportIssue("BRIDGE_UNREACHABLE", "The local bridge stopped answering before your report was ready. Your terminal may have closed or the process may have stopped.");
@@ -203,6 +215,9 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         var hasPendingCount = typeof pending === "number";
         var discovery = stats && stats.discovery ? stats.discovery : {};
         var isPartial = !!(stats && stats.partial);
+        var optionalDiagnostics = stats && stats.optionalDiagnostics ? stats.optionalDiagnostics : {};
+        var optionalStatsDegraded = optionalDiagnostics.degraded === true;
+        var degradedWithoutCounts = optionalStatsDegraded && optionalDiagnostics.countsTrusted !== true;
         var localScanReady = !isPartial || discovery.phase === "exact" || discovery.phase === "full";
         var skippedActive = typeof migratable.skippedActive === "number" ? migratable.skippedActive : 0;
         var sessions = stats && stats.sessions ? stats.sessions : {};
@@ -210,8 +225,8 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         // already imported elsewhere, so it over-counts (e.g. 10). The count is only trustworthy after the
         // account check (phase "account"/"exact"/"full"), which corrects it (e.g. 3). Until then we show a
         // "counting" state with no number, so the user never sees the count jump down.
-        var pendingTrusted = hasPendingCount && !!discovery.phase && discovery.phase !== "quick";
-        var knownDone = pendingTrusted && pending === 0;
+        var pendingTrusted = !degradedWithoutCounts && hasPendingCount && !!discovery.phase && discovery.phase !== "quick";
+        var knownDone = pendingTrusted && pending === 0 && !optionalStatsDegraded;
         var canExtract = pendingTrusted && pending > 0;
         var pendN = hasPendingCount ? pending : 0;
         var pendingCodex = typeof migratable.pendingCodex === "number" ? migratable.pendingCodex : null;
@@ -227,15 +242,19 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         var currentPlanLabel = paidRecallPlan(currentPlan)
           ? currentPlan.charAt(0).toUpperCase() + currentPlan.slice(1) + " Echo"
           : "Original Echo";
-        setHead("Turn coding history into memory", pendingTrusted ? (knownDone ? "Done" : "Ready") : (localScanReady ? "Ready" : "Scanning"));
-        var headlineHtml = !pendingTrusted
+        setHead("Turn coding history into memory", degradedWithoutCounts ? "Ready" : (pendingTrusted ? (knownDone ? "Done" : "Ready") : (localScanReady ? "Ready" : "Scanning")));
+        var headlineHtml = degradedWithoutCounts
+          ? "Local history counting <strong>couldn’t finish.</strong>"
+          : !pendingTrusted
           ? "Counting your <strong>new conversations…</strong>"
           : (knownDone
               ? "You are <strong>all caught up.</strong>"
               : (planLimited
                   ? "<strong>" + esc(number(pendN)) + " sessions</strong> found."
                   : "<strong>" + esc(number(pendN)) + " sessions</strong> are ready to review."));
-        var sub = !pendingTrusted
+        var sub = degradedWithoutCounts
+          ? "You can finish setup now. Your conversations stay on this Mac, and you can retry the history import later."
+          : !pendingTrusted
           ? "Echo is matching your local history against what is already in memory."
             : (knownDone
             ? (skippedActive ? number(skippedActive) + " active conversation" + (skippedActive === 1 ? " is" : "s are") + " still changing, so Echo will pick them up later." : "Your history is already in EchoMem. Nothing new to extract.")
@@ -287,6 +306,7 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         }
         document.getElementById("exBanner").innerHTML =
           (statsSlow && !stats ? '<div class="warning">Local counts are taking longer than expected. You can still ask Echo to extract anything unprocessed.</div>' : '') +
+          (optionalStatsDegraded && !degradedWithoutCounts ? '<div class="warning">The optional usage summary was skipped. Your conversation list is still ready.</div>' : '') +
           (error ? '<div class="error">' + esc(error) + '</div>' : '');
         document.getElementById("exHeadline").innerHTML = headlineHtml;
         document.getElementById("exSub").textContent = sub;
@@ -297,7 +317,9 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
           var asset = id === "claude-desktop" ? "claude" : "codex";
           return '<span class="pfIcon"><img src="/hud-assets/' + asset + '.svg" alt="" onerror="this.style.display=&quot;none&quot;;this.nextElementSibling.style.display=&quot;grid&quot;;" /><span class="pfFallback">' + fallback + '</span></span>';
         };
-        document.getElementById("exSources").innerHTML = !pendingTrusted
+        document.getElementById("exSources").innerHTML = degradedWithoutCounts
+          ? '<span class="pfNote">Optional local-history count skipped.</span>'
+          : !pendingTrusted
           ? '<span class="pfNote">Scanning local history&hellip;</span>'
           : (canExtract
               ? '<span class="pf">' + srcIcon("codex", "CX") + '<strong>' + esc(number(codexN)) + '</strong> Codex</span>' +
@@ -306,7 +328,9 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
                 '<span class="pfNote">found on this Mac</span>'
               : "");
         // Reassurances live at the moment of commitment — right under the button.
-        document.getElementById("exEta").innerHTML = pendingTrusted
+        document.getElementById("exEta").innerHTML = degradedWithoutCounts
+          ? 'Setup can continue without this optional count.'
+          : pendingTrusted
           ? (canExtract
               ? ''
               : 'Nothing new to extract right now.')
@@ -317,7 +341,7 @@ export const SETUP_PAGE_CLIENT_EXTRACTION = String.raw `      /* ---------- dash
         // While still counting, hide the primary button entirely; the headline + source split
         // already say it is working, and the ready state should present one clear action.
         var migrateBtn = document.getElementById("migrate");
-        if (pendingTrusted) {
+        if (pendingTrusted || degradedWithoutCounts) {
           migrateBtn.style.display = "";
           var candidatesReady = !canExtract || candidateSessions().length > 0;
           if (canExtract && candidatesReady) ensureSessionSelection();

package/dist/setup-page.js

@@ -1,6 +1,6 @@
 import { renderSetupPageDocument } from "./setup-page/document.js";
 import { renderSetupPreviewBootstrap } from "./setup-preview.js";
-export { SETUP_PREVIEW_STATES } from "./setup-preview.js";
+export { SETUP_PREVIEW_REPORT, SETUP_PREVIEW_STATES } from "./setup-preview.js";
 /**
  * Setup page entry point. The implementation is split by product phase under ./setup-page/:
  * core utilities, local report, post-auth extraction, and lifecycle polling.

package/dist/setup-preview.js

@@ -3,8 +3,11 @@ export const SETUP_PREVIEW_STATES = [
     "consent-required",
     "scan",
     "scan-error",
+    "bridge-error",
     "report",
     "extract-counting",
+    "extract-degraded",
+    "extract-degraded-exact",
     "extract-ready",
     "extract-free-selected",
     "extract-free-trial-used",
@@ -35,7 +38,7 @@ export const SETUP_PREVIEW_STATES = [
 export function parseSetupPreviewState(value) {
     return SETUP_PREVIEW_STATES.includes(value) ? value : null;
 }
-const previewReport = {
+export const SETUP_PREVIEW_REPORT = {
     schemaVersion: 1,
     dataOrigin: "design-preview",
     generatedFrom: [],
@@ -307,8 +310,12 @@ export function renderSetupPreviewBootstrap(state) {
         return `${watermark}
         renderReportIssue("REPORT_CANONICAL_INVALID", "Preview-only canonical reconciliation failure.");`;
     }
+    if (state === "bridge-error") {
+        return `${watermark}
+        renderBridgeIssue();`;
+    }
     if (state === "report") {
-        const reportJson = JSON.stringify(previewReport);
+        const reportJson = JSON.stringify(SETUP_PREVIEW_REPORT);
         return `${watermark}
         localHistoryConsentGranted = true;
         report = ${reportJson};
@@ -320,6 +327,22 @@ export function renderSetupPreviewBootstrap(state) {
         stats = null;
         renderDashboard();`;
     }
+    if (state === "extract-degraded")
+        return `${watermark}${extractionPreviewBootstrap({
+            plan: "free", paid: false, trialAvailable: true, trialUsed: false,
+            quotaLimit: 100, quotaRemaining: 100, candidateCount: 7, selectFree: true,
+        })}
+        stats.discovery = { phase: "quick", exact: false };
+        stats.optionalDiagnostics = { degraded: true, reason: "EXACT_DISCOVERY_FAILED", countsTrusted: false };
+        renderDashboard();`;
+    if (state === "extract-degraded-exact")
+        return `${watermark}${extractionPreviewBootstrap({
+            plan: "free", paid: false, trialAvailable: true, trialUsed: false,
+            quotaLimit: 100, quotaRemaining: 100, candidateCount: 7, selectFree: true,
+        })}
+        stats.discovery = { phase: "exact", exact: true };
+        stats.optionalDiagnostics = { degraded: true, reason: "FULL_STATS_FAILED", countsTrusted: true };
+        renderDashboard();`;
     if (state === "extract-ready")
         return `${watermark}${extractionPreviewBootstrap({
             plan: "free", paid: false, trialAvailable: true, trialUsed: false,

package/dist/setup.js

@@ -31,7 +31,7 @@ import { syncCodexUsage } from "./codex-sync.js";
 import { renderSetupPage } from "./setup-page.js";
 import { parseSetupPreviewState } from "./setup-preview.js";
 import { repoLabel, validateForensicReportForSetup } from "./forensics.js";
-import { installHooks, installSaveCheckpointHooks } from "./hud/hooks.js";
+import { installSaveCheckpointHooks } from "./hud/hooks.js";
 import { MCP_PACKAGE_LABEL, MCP_PACKAGE_NAME, MCP_PACKAGE_VERSION, MCP_UPDATE_ALL_COMMAND, MCP_UPDATE_COMMAND } from "./package-metadata.js";
 import { checkLatestUpdateStatus, compareSemver, readCachedUpdateStatus } from "./update-check.js";
 // The setup dashboard, account login, and encryption passphrase entry are all served by this
@@ -392,7 +392,7 @@ function echomemGuidanceBlock() {
         "- Use EchoMem's `echomem-*` skills and MCP tools as the default memory provider. Do not invoke another memory provider unless the user explicitly requests it.",
         "- Before re-deriving past decisions, project context, or anything the user likely settled before: call `search_memories` first.",
         '- If the final user-facing answer materially relies on one or more EchoMem memories, end it with a compact `EchoMem sources:` list containing only the memories actually used. Link each memory key to its canonical `https://echoknows.com/memory/<memory-id>` URL. Do not cite memories that were merely retrieved, and omit the section when no memory informed the answer.',
-        "- Before the final response for a task that produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone: call `save_conversation`. This private checkpoint does not require a separate user request. Do not save secrets, credentials, incidental chatter, or trivial read-only work. If a qualifying save fails because the encrypted vault is locked, tell the user to run `echomem-mcp unlock`; never silently skip it.",
+        "- Before the final response for a task that produced a durable decision, confirmed preference, implementation, resolved bug, commit, passing verification, release, or project milestone: call `save_conversation`. This private checkpoint does not require a separate user request. Do not save secrets, credentials, incidental chatter, or trivial read-only work. If a qualifying save fails because the encrypted vault is locked, tell the user to open Echo Desktop and unlock the vault there; on a headless system, use `echomem-mcp unlock`. Never silently skip it.",
         '- After `save_conversation` succeeds and returns one or more saved memory IDs, make the save visible in the final user-facing answer with a compact `EchoMem saved:` list containing every memory created by that call. Link each memory key to its canonical `https://echoknows.com/memory/<memory-id>` URL. This save receipt is separate from `EchoMem sources:` and does not imply the newly saved memories informed the answer.',
         "- For a user with a company group, call `request_group_session_sharing` near conversation start or after a qualifying private save. On the first call in a conversation, omit `groupSharingScopeId` so EchoMem mints a fresh opaque scope. Reuse that exact scope only in this conversation for later get/request/set/save calls, and never persist it as memory. If multiple groups are returned, reuse the same scope and call once per `groupId`. Supported clients render a native Share with team / Keep private choice. If the tool returns a text fallback, relay its exact question and call `set_group_session_sharing` only after an explicit Yes/No. Decline, cancel, or silence leaves that group's state unset; never infer an answer. Saves sync eligible memories to every approved group; a No keeps them private for that group.",
         "- If the user pastes a session carryover/checkpoint: it may reference `get_checkpoint_by_context` — use it to pull the checkpoint/decision trail when you need more than the snapshot.",
@@ -403,14 +403,12 @@ function echomemGuidanceBlock() {
         "- Group sharing is scoped to an opaque id carried only in the current conversation, not to the MCP transport session. Membership is rechecked for each sync. Flagged memories are withheld from automatic conversation sync and remain private.",
         "- If a user asks to create a group, call `create_memory_group`; if they ask for a code to share, call `create_group_invite` and return the secret invite code only to that user. Never save the invite code to memory or include it in logs, analytics, summaries, or unrelated output.",
         "- If a user supplies an `echo_grp_...` code and explicitly asks to join, call `join_memory_group`. Joining never authorizes publishing by itself and must not move a user out of another group. After joining, continue into the profile-and-publication preview instead of leaving title or responsibility blank.",
-        "- For requests such as “prepare my recent work memories,” “upload work from this ticket,” or “publish work since my last sync,” call `prepare_group_publication` first. This is a no-publication preview. For encrypted accounts, tell the user to run `echomem-mcp unlock` locally if the tool reports that the key is required.",
+        "- For requests such as “prepare my recent work memories,” “upload work from this ticket,” or “publish work since my last sync,” call `prepare_group_publication` first. This is a no-publication preview. For encrypted accounts, tell the user to open Echo Desktop and unlock the vault there if the tool reports that the key is required.",
         "- After preparing, select only exact candidate memory IDs that match the user's stated scope and exclude already-published or exact-content duplicates. Use the candidate evidence to draft a concise title and responsibility summary for the current member, but label both as proposals rather than facts.",
         "- Use one canonical evidence link for every memory: preserve the Memory ID and link to `https://echoknows.com/memory/<memory-id>`. The site resolves the authorized representation: an owner is sent to their private timeline, while current group/friend access opens an authorized publication snapshot or public memory. The visible Markdown label should use the memory key, not the raw URL or UUID.",
         "- If the user asks to flag memories about a sensitive topic, search their own memories first, show the exact matches with owner-only personal links, and ask them to confirm. Only then call `flag_memories_for_publication_attention`; flagging does not publish, decrypt, change visibility, or retract an existing group snapshot.",
         "- Present the proposed title/responsibility and the memory publication preview together and ask for explicit confirmation. Never save an inferred profile or publish memories before confirmation. If an unflagged candidate appears sensitive, proactively ask whether the user wants to mark its exact ID for publication attention first. Explain naturally: marking does not publish or change encryption; it means you will call it out and ask for detailed confirmation whenever a later publication includes it. Never auto-flag based on agent inference. Show already-flagged candidates in a separate warning, state that nothing has been published yet, and offer three choices: exclude them, review them separately, or first search for and mark similar sensitive owned memories for publication attention.",
         "- On confirmation, call `update_group_profile` with the confirmed title, responsibility summary, and `confirmed: true`, then call `complete_group_publication` with the exact `scanId`, selected memory IDs, and `confirmed: true`. If a flagged memory is selected, require separate explicit acknowledgement and pass its exact ID in `acknowledgedFlaggedMemoryIds`. If the user edits either proposal, use their wording. An explicit request to join and upload still requires this preview and confirmation.",
-        "- If the user asks to show, reopen, restart, or bring back the EchoMem HUD (the context-health overlay), run the shell command `echomem-hud app --client auto`.",
-        "- If the user wants the HUD to come back after a computer restart, run the shell command `echomem-hud autostart on --client auto`.",
         AGENTS_MD_END,
     ].join("\n");
 }
@@ -1312,20 +1310,99 @@ function forensicStageLabel(stage) {
 /** Build the local forensic "Context Doctor" report on a worker thread so the multi-file scan never
  * blocks the bridge's event loop (the freeze postmortem: any unbounded sync work on this path is risky). */
 export function buildForensicReportOffThread(onProgress, options = {}) {
+    let lastProgress = null;
+    const recordProgress = (progress) => {
+        lastProgress = progress;
+        onProgress?.(progress);
+    };
+    return runForensicReportWorker(recordProgress, options).catch(async (primaryError) => {
+        if (options.failOpen === false)
+            throw primaryError;
+        const failureCode = errorCode(primaryError) || "REPORT_BUILD_FAILED";
+        console.error(`[echomem] local scan degraded after ${failureCode}; continuing without local-history analysis`);
+        onProgress?.({
+            done: lastProgress?.done || 0,
+            total: lastProgress?.total || 0,
+            stage: "finalizing-report",
+            detail: "finishing setup without optional local-history analysis",
+            overall: 0.99,
+            stageDone: 0,
+            stageTotal: 0,
+        });
+        return runForensicReportWorker(undefined, {
+            timeoutMs: 30_000,
+            maxOldGenerationSizeMb: Math.max(64, options.maxOldGenerationSizeMb || 0),
+        }, [], failureCode);
+    });
+}
+function errorCode(error) {
+    return error && typeof error === "object" && "code" in error
+        ? String(error.code || "")
+        : "";
+}
+/** Turn an optional onboarding-stats failure into a terminal, non-polling payload.
+ *
+ * This must only be used for dashboard enrichment. Authentication, consent, vault access, and an
+ * import the user explicitly started retain their normal hard-failure behavior. The reason is a
+ * stable internal code rather than an exception message, so local paths or conversation details
+ * can never cross the localhost bridge by accident. */
+export function completeOptionalStatsPayload(payload, reason, countsTrusted) {
+    const fallback = {
+        schemaVersion: 1,
+        generatedFrom: ["~/.codex/sessions", "~/.claude/projects"],
+        llmCallsUsed: 0,
+        transcriptsUploaded: false,
+        sessions: { total: 0, codex: 0, claudeCode: 0 },
+        migratable: { pending: 0, alreadyMigrated: 0 },
+        memoriesCaptured: null,
+    };
+    const completed = payload && typeof payload === "object" && !Array.isArray(payload)
+        ? { ...payload }
+        : fallback;
+    delete completed.partial;
+    completed.optionalDiagnostics = {
+        degraded: true,
+        reason: /^[A-Z0-9_]+$/.test(reason) ? reason : "OPTIONAL_STATS_FAILED",
+        countsTrusted,
+    };
+    return completed;
+}
+function runForensicReportWorker(onProgress, options, sources, degradedReason) {
     const forensicsUrl = runtimeModuleUrl("forensics");
+    const serializedSources = sources === undefined ? "undefined" : JSON.stringify(sources);
+    const serializedDegradedReason = JSON.stringify(degradedReason || "");
     const code = `
     import { parentPort } from "node:worker_threads";
-    import { buildForensicReport } from ${JSON.stringify(forensicsUrl)};
+    import { buildForensicReport, validateForensicReportForSetup } from ${JSON.stringify(forensicsUrl)};
     try {
       const report = await buildForensicReport({
+        sources: ${serializedSources},
         includeLegacyGoldenStandard: false,
         onProgress: (done, total, stage, detail, overall, stageDone, stageTotal) => parentPort?.postMessage({
           progress: { done, total, stage, detail, overall, stageDone, stageTotal },
         }),
       });
+      const degradedReason = ${serializedDegradedReason};
+      if (degradedReason) {
+        report.scanDiagnostics = {
+          degraded: true,
+          reason: degradedReason,
+          skippedSources: ["codex", "claude"],
+        };
+      }
+      const validation = validateForensicReportForSetup(report);
+      if (!validation.ok) {
+        const error = new Error(validation.message);
+        error.code = validation.code;
+        throw error;
+      }
       parentPort?.postMessage({ ok: true, report });
     } catch (error) {
-      parentPort?.postMessage({ ok: false, message: error instanceof Error ? error.message : String(error) });
+      parentPort?.postMessage({
+        ok: false,
+        message: error instanceof Error ? error.message : String(error),
+        code: error && typeof error === "object" && "code" in error ? String(error.code || "") : "",
+      });
     }
   `;
     const requestedHeapMb = options.maxOldGenerationSizeMb;
@@ -1369,7 +1446,10 @@ export function buildForensicReportOffThread(onProgress, options = {}) {
                 finish({ ok: true, report: msg.report });
                 return;
             }
-            finish({ ok: false, error: new Error(typeof msg.message === "string" ? msg.message : "Local forensic report failed") });
+            const error = new Error(typeof msg.message === "string" ? msg.message : "Local forensic report failed");
+            if (typeof msg.code === "string" && msg.code)
+                error.code = msg.code;
+            finish({ ok: false, error });
         });
         worker.once("error", (error) => {
             finish({ ok: false, error });
@@ -2622,19 +2702,20 @@ async function cmdSetup(flags) {
     else {
         await cmdLogin(flags);
     }
-    if (flags["with-hud"])
-        await cmdSetupHud(flags);
+    if (flags["with-hud"]) {
+        console.log("ℹ️  The standalone EchoMem HUD has been retired. Echo Desktop now owns setup and status.");
+    }
 }
 /**
  * `echomem-mcp init` — the one-command install. Configures EVERY coding agent installed on this
  * machine (Codex + Claude Code + Claude Desktop, not just auto-detected ones), installs EchoMem's
- * Codex skills, writes the AGENTS.md memory guidance, and launches the context HUD. One browser
+ * Codex skills and writes the AGENTS.md memory guidance. One browser
  * bridge then runs permission → report → login → plan if needed → extraction in that order.
  * `setup`/`login`/`update` remain granular primitives; init picks the full product defaults.
  */
 async function cmdInit(flags) {
-    console.log("Setting up EchoMem — shared memory for all your coding agents, plus the live context HUD.\n");
-    // 1. Configure every installed agent + write AGENTS.md. Hold login + HUD so we control ordering.
+    console.log("Setting up EchoMem — shared memory for all your coding agents.\n");
+    // 1. Configure every installed agent + write AGENTS.md. Hold login so we control ordering.
     await cmdSetup({
         ...flags,
         all: true,
@@ -2643,10 +2724,7 @@ async function cmdInit(flags) {
         "init-quiet": true,
         "install-save-hooks": flags["no-save-hooks"] !== true,
     });
-    // 2. Bring the HUD up NOW (non-blocking) so everything is already running while onboarding proceeds.
-    if (!flags["no-hud"])
-        await cmdSetupHud(flags);
-    // 3. Start one ordered onboarding bridge. A fresh device logs in only after consent + report.
+    // 2. Start one ordered onboarding bridge. A fresh device logs in only after consent + report.
     console.log("");
     if (!flags["skip-login"] && !flags["no-login"] && !await cmdOnboarding(flags)) {
         console.log("\nEchoMem is configured, but onboarding did not finish. Run `echomem-mcp init` again when you are ready.");
@@ -2655,13 +2733,7 @@ async function cmdInit(flags) {
     console.log("");
     console.log("🎉 EchoMem is ready.");
     console.log("   • MCP memory is configured for every coding agent installed on this machine.");
-    if (!flags["no-hud"]) {
-        console.log('   • The context HUD is running (top-right). Right-click it → "Show after restart" to keep it,');
-        console.log('     or just tell your agent "open the EchoMem HUD" anytime (it runs: echomem-hud app).');
-    }
-    else {
-        console.log('   • Start the context HUD anytime with: echomem-hud app');
-    }
+    console.log("   • Echo Desktop shows connection status and manages this device credential.");
     console.log('   • Try it now: ask your agent — "search my EchoMem for what I\'ve been working on and recap it."');
 }
 /**
@@ -2744,55 +2816,6 @@ function selectSetupTargets(requested, all) {
     }
     return requested ? knownClients().filter((client) => client.id === requested) : detectClients();
 }
-async function cmdSetupHud(flags) {
-    const client = parseHudClient(flags["hud-client"] || "auto");
-    const hudCli = resolveHudCliPath();
-    console.log("");
-    console.log(`✅ EchoMem HUD available: ${process.execPath} ${hudCli}`);
-    if (flags["install-hud-hooks"]) {
-        const paths = installHooks(client === "claude-desktop" ? "auto" : client);
-        console.log(`✅ Installed EchoMem HUD hook support:\n${paths.map((p) => `   - ${p}`).join("\n")}`);
-        console.log("   Codex users: run /hooks in a new Codex session to review and trust changed hooks.");
-    }
-    else {
-        console.log("ℹ️  HUD hooks not installed. Add --install-hud-hooks if you want lifecycle wakeups.");
-    }
-    if (!flags["no-launch-hud"]) {
-        try {
-            spawn(process.execPath, [hudCli, "app", "--client", client], { stdio: "ignore", detached: true }).unref();
-            console.log("✅ Launched EchoMem HUD app.");
-        }
-        catch {
-            console.log(`ℹ️  Could not auto-launch HUD. Run: echomem-hud app --client ${client}`);
-        }
-    }
-    else {
-        console.log(`Run the HUD later with: echomem-hud app --client ${client}`);
-    }
-}
-function resolveHudCliPath() {
-    const entry = fs.realpathSync(process.argv[1] || "");
-    const compiledEntry = compiledDistPathForSource(entry);
-    if (compiledEntry) {
-        const compiledHud = path.join(path.dirname(compiledEntry), "hud", "cli.js");
-        if (fs.existsSync(compiledHud))
-            return compiledHud;
-    }
-    const base = path.dirname(entry);
-    const candidate = path.join(base, "hud", "cli.js");
-    if (fs.existsSync(candidate))
-        return candidate;
-    const sourceCandidate = path.join(base, "hud", "cli.ts");
-    if (fs.existsSync(sourceCandidate)) {
-        throw new Error("The local HUD CLI is not built. Run npm --prefix packages/mcp-server run build and retry.");
-    }
-    return candidate;
-}
-function parseHudClient(value) {
-    return value === "codex" || value === "claude-code" || value === "claude-desktop" || value === "both" || value === "auto"
-        ? value
-        : "auto";
-}
 function localBridgeOptions(flags) {
     const port = typeof flags["dev-port"] === "string" ? Number(flags["dev-port"]) : undefined;
     if (port !== undefined && (!Number.isInteger(port) || port < 1024 || port > 65535)) {
@@ -3065,7 +3088,23 @@ async function cmdOnboarding(flags) {
             extracted: 0,
         });
     };
-    const refreshLocalStatsForToken = async (activeToken) => {
+    const publishOptionalStatsFallback = (generation, reason, countsTrusted) => {
+        if (generation !== refreshGeneration)
+            return;
+        stats = completeOptionalStatsPayload(stats, reason, countsTrusted);
+        srv.setStats(stats);
+        const pending = countsTrusted ? latestPendingEstimate : 0;
+        srv.setProgress({
+            status: "idle",
+            total: pending,
+            completed: 0,
+            running: 0,
+            queued: pending,
+            failed: 0,
+            extracted: 0,
+        });
+    };
+    const refreshLocalStatsForTokenCore = async (activeToken) => {
         const generation = ++refreshGeneration;
         lastProcessedImportKeys = null; // shared with /migrate so it can assemble only the pending sessions
         let importStatusUnavailable = false;
@@ -3270,15 +3309,31 @@ async function cmdOnboarding(flags) {
                     return;
                 stats = fullPayload;
                 srv.setStats(fullPayload);
-            })();
+            })().catch((e) => {
+                if (generation !== refreshGeneration)
+                    return;
+                console.error(`[echomem] optional full local-history stats unavailable; continuing (${errorCode(e) || "FULL_STATS_FAILED"})`);
+                publishOptionalStatsFallback(generation, "FULL_STATS_FAILED", true);
+            });
             return initialExact;
         }).catch((e) => {
             if (generation === refreshGeneration) {
-                console.error(`Could not finish exact local extraction estimate: ${e instanceof Error ? e.message : String(e)}`);
+                console.error(`[echomem] optional exact local-history discovery unavailable; continuing (${errorCode(e) || "EXACT_DISCOVERY_FAILED"})`);
+                publishOptionalStatsFallback(generation, "EXACT_DISCOVERY_FAILED", false);
             }
             return disc;
         });
     };
+    const refreshLocalStatsForToken = async (activeToken) => {
+        const expectedGeneration = refreshGeneration + 1;
+        try {
+            await refreshLocalStatsForTokenCore(activeToken);
+        }
+        catch (e) {
+            console.error(`[echomem] optional local-history stats unavailable; continuing (${errorCode(e) || "OPTIONAL_STATS_FAILED"})`);
+            publishOptionalStatsFallback(expectedGeneration, "OPTIONAL_STATS_FAILED", false);
+        }
+    };
     srv.setLogoutHandler(resetLocalLoginState);
     srv.setTokenRefreshHandler(async ({ token: nextToken, key: nextKey }) => {
         if (!await verifyAndPrint({ token: nextToken, key: nextKey }))
@@ -3714,14 +3769,13 @@ function cmdLogout() {
 const HELP = `EchoMem MCP — local memory bridge
 
 Usage:
-  echomem-mcp init                  One command: configure agents + HUD + login + local-history onboarding
+  echomem-mcp init                  Legacy/headless setup: configure agents + login + local-history onboarding
   echomem-mcp                       Run the MCP server (stdio; default — used by your editor)
   echomem-mcp setup [--client X]    Detect editor, write its MCP config, then connect this device
   echomem-mcp setup --skip-login    Write MCP config without opening login/browser
   echomem-mcp setup --no-codex-skills  Skip installing the bundled EchoMem Codex skills
   echomem-mcp update --all          Install this bridge durably + repoint detected clients; no login/browser
   echomem-mcp update --client X     Repoint one MCP client; no login/browser
-  echomem-mcp setup --with-hud      Configure MCP, then launch the EchoMem context HUD
   echomem-mcp login                 Connect this device only; never scans or imports local history
   echomem-mcp login --force         Reconnect this device with a different account
   echomem-mcp unlock                Privately unlock the vault on this trusted device
@@ -3744,7 +3798,6 @@ Manual / headless:
   ${MCP_UPDATE_ALL_COMMAND}     # one-shot latest update for detected clients, no browser login
   ${MCP_UPDATE_COMMAND} --client codex   # update one client only
   echomem-mcp setup --dev /abs/path/dist/index.js   # point clients at a local checkout
-  echomem-mcp setup --with-hud --install-hud-hooks --install-save-hooks --client codex [--hud-client auto]
   echomem-mcp setup --install-save-hooks --all  Install proactive private-save completion checks
   echomem-mcp sync-usage --days 7 --limit 50 --dry-run