@modelstatus/cli 0.1.84 → 0.1.86

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelstatus/cli",
-  "version": "0.1.84",
+  "version": "0.1.86",
   "description": "Track which AI models you use, where, and never get surprised by a retirement. Free offline model-health for any repo (mm status), browser sign-in for cloud inventory + alerts.",
   "keywords": [
     "llm",

package/src/api.js

@@ -90,7 +90,7 @@ export function createClient({ apiBase, apiKey }) {
     listNotifications: (params) => req("GET", `/notifications${qs(params)}`),
     readNotification: (id) => req("POST", `/notifications/${id}/read`),
 
-    // billing
-    checkout: () => req("POST", "/billing/checkout"),
+    // billing — plan: undefined → Pro ($5/yr subscription); "lifetime" → $29 one-time
+    checkout: (plan) => req("POST", `/billing/checkout${plan ? `?plan=${encodeURIComponent(plan)}` : ""}`),
   };
 }

package/src/changelog-data.js

@@ -1,6 +1,26 @@
 /* GENERATED by scripts/gen-changelog.mjs from apps/web/lib/changelog.json — do not edit.
  * Release notes baked into the binary (in-TUI + the on-load what's-new card). */
 export const CHANGELOG = [
+  {
+    "version": "0.1.86",
+    "date": "2026-06-16",
+    "title": "Search the What's New feed",
+    "items": [
+      "The What's New tab now has `/` search, like Scan and Inventory. Filter the registry feed, alerts, fixes, and releases by typing — e.g. `deprecated` to see just the deprecations, or a model or provider name to jump to a specific change.",
+      "Press `/` to start filtering, `esc` to clear; the count of matches shows as you type."
+    ]
+  },
+  {
+    "version": "0.1.85",
+    "date": "2026-06-14",
+    "title": "Command polish + safer billing",
+    "items": [
+      "`mm upgrade --lifetime` starts the one-time Lifetime checkout from the CLI (plain `mm upgrade` is still the $5/yr Pro plan).",
+      "`mm <command> --help` now prints per-command usage and flags; an unknown command exits non-zero instead of silently printing the help.",
+      "`mm clear` requires an explicit `--yes`/`--force` — it will no longer wipe your cloud inventory on `--ci` alone. `mm logout` no longer claims it removed a key when you weren't signed in, and warns if an env-var key still authenticates you.",
+      "Billing safety: checkout won't start a duplicate charge for an account that's already on Pro or Lifetime."
+    ]
+  },
   {
     "version": "0.1.84",
     "date": "2026-06-14",

package/src/index.js

@@ -72,7 +72,7 @@ if (process.argv[2] === "__bench_frames") {
   const p = runGame({
     width: 80, height: 24, scanStore: scan,
     _inject: {
-      out, inp: input, proc: process, now,
+      out, inp: input, proc: process, now, noPersist: true, // bench: never write dkHighScore
       schedule: (fn, ms) => setTimeout(() => { const t = now(); if (prev != null) emit({ t: "frame", dtMs: t - prev }); prev = t; fn(); }, ms),
       cancel: (h) => clearTimeout(h),
     },
@@ -181,8 +181,14 @@ async function cmdSignup(_positional, flags) {
 }
 
 function cmdLogout() {
+  const had = !!loadConfig().apiKey;
   clearAuth();
-  console.log("✓ Signed out (API key removed). Run `mm login` to sign back in.");
+  if (had) console.log("✓ Signed out (saved API key removed). Run `mm login` to sign back in.");
+  else console.log("Not signed in — no saved API key to remove.");
+  // clearAuth only touches the config file; an env key still authenticates.
+  if (process.env.LLMSTATUS_API_KEY || process.env.MM_API_KEY) {
+    console.log("Note: an API key is still set via LLMSTATUS_API_KEY/MM_API_KEY — unset it to fully sign out.");
+  }
 }
 
 async function cmdUpgrade(_positional, flags) {
@@ -193,7 +199,9 @@ async function cmdUpgrade(_positional, flags) {
   }
   const client = createClient({ apiBase, apiKey });
   const { upgradeViaBrowser } = await import("./upgrade.js");
-  const plan = await upgradeViaBrowser({ client });
+  // --lifetime opens the one-time $29 checkout; default is the $5/yr Pro subscription.
+  const checkoutPlan = flags.lifetime ? "lifetime" : undefined;
+  const plan = await upgradeViaBrowser({ client, plan: checkoutPlan });
   if (!plan) {
     console.error("Upgrade not detected (timed out). Run `mm upgrade` again if you completed checkout.");
     process.exit(1);
@@ -554,9 +562,13 @@ async function cmdClear(_positional, flags) {
   }
   const all = !!flags.all;
   const scope = all ? "ALL usages, projects, alert rules + the in-app feed" : "ALL usages";
-  if (!flags.yes && !flags.force) {
+  // A destructive delete requires an EXPLICIT --yes/--force. `--ci` implies --yes
+  // for scan/fix non-interactivity, but it must NOT silently skip the safety
+  // prompt here — so check the raw argv, not the --ci-derived flags.yes.
+  const explicitConfirm = process.argv.includes("--yes") || process.argv.includes("--force");
+  if (!explicitConfirm) {
     if (!process.stdin.isTTY) {
-      console.error(`Refusing to delete ${scope} without confirmation. Re-run with --yes.`);
+      console.error(`Refusing to delete ${scope} without confirmation. Re-run with --yes (or --force).`);
       process.exit(1);
     }
     const ok = await confirm(`Delete ${scope} from your account? This cannot be undone. [y/N] `);
@@ -856,7 +868,7 @@ Usage:
   mm integrations          Manage live integrations (list | enable <id> | disable <id> | env <id> <tag>)
   mm clear                 Delete all tracked usages from your inventory (--all also wipes projects/rules; --yes to skip the prompt)
   mm update                Update to the latest version now and relaunch (or add --update to any command)
-  mm upgrade               Open Stripe checkout and poll until Pro is active (the paid plan, not the binary)
+  mm upgrade               Open Stripe checkout and poll until active (--lifetime for the one-time plan; this is the paid plan, not the binary)
   mm play [dir]            Play Donkey Kong while a background scan walks the dir (just for fun)
   mm tui                   Force-launch the TUI (needs an interactive terminal)
 
@@ -875,7 +887,82 @@ Flags: --update · --api <url> · --key <key> · --project <id|name> · --dir <p
        --sources <list> · --region <r> · --namespace <ns> · --kube-context <c> · --db <dsn> · --sql-table <t>
        --vercel-project <p> · --vercel-team <t> · --gh-repo <owner/name> · --supabase-ref <ref>
 
-Get started: \`mm login\` (opens your browser).`;
+Get started: \`mm login\` (opens your browser).
+
+Per-command help: \`mm <command> --help\` (e.g. \`mm ci --help\`).`;
+
+/** Per-command usage. `mm <cmd> --help` / `mm help <cmd>` prints these; anything
+ * not listed falls back to the global HELP. Keep flags here in sync with parseArgs. */
+const COMMAND_HELP = {
+  status: `mm status [dir]   Offline, account-less model-health check (free).
+
+  Pulls the signed registry, scans the dir locally, prints each model in use with
+  its health + replacement, then the custom/unrecognized ids. Always exits 0 (it
+  informs; use \`mm ci\` to gate a build).
+
+  --json            machine-readable {registry, scanned, references, files, models[], custom[], needs_attention}
+  --offline         use the cached registry only (no network)
+  --sources <list>  detection sources (default: filesystem + enabled integrations; "all" for everything)
+  --dir <path>      directory to scan (alternative to the positional arg)`,
+  fix: `mm fix [dir]   Rewrite dying model ids to their registry replacement, in place.
+
+  Boundary-safe, style-preserving, chain-resolved. Only filesystem refs with a known
+  replacement are touched. Asks before writing (a non-TTY needs --yes).
+
+  --dry-run         preview the rewrites, write nothing
+  --json            machine output ({planned, dryRun} for --dry-run; {applied, stale, failed} on apply)
+  --yes             skip the confirmation prompt
+  --model <slug>    only fix this one model (full provider/slug)
+  --offline         use the cached registry only`,
+  ci: `mm ci [dir]   CI gate: fail the build on deprecated/retiring models.
+
+  Exits non-zero when a finding is at/above --fail-on. Emits GitHub annotations +
+  a step summary under GITHUB_ACTIONS. Offline-capable, no account.
+
+  --fail-on <none|deprecating|retiring|retired>   threshold (default: retired)
+  --json            print the full report to stdout
+  --json-out <file> write clean findings JSON to a file (stdout stays annotations-only)
+  --diff <base>     limit findings to files changed vs base (auto on PRs via GITHUB_BASE_REF)
+  --report          (Pro) sync this run's usages + a CI-run row to your account
+  --offline         use the cached registry only`,
+  scan: `mm scan [dir]   Scan for model usage and upload to your account's inventory (needs login).
+
+  On a TTY with no flags it opens the interactive Scan tab. --ci/--json/--yes run
+  non-interactively.
+
+  --dry-run         show exactly what WOULD upload, upload nothing
+  --json / --ci     machine output (--ci implies --yes + --json)
+  --yes             upload without the interactive TUI
+  --project <id|name>  route everything to one project (created if the name is new)
+  --sources <list>  detection sources ("all" for everything)
+  --dir <path>      directory to scan`,
+  clear: `mm clear   Delete tracked usages from your cloud inventory (DESTRUCTIVE, needs login).
+
+  Requires an explicit --yes or --force (it will NOT proceed on --ci alone).
+
+  --all             also wipe projects, alert rules + the in-app feed (a full reset)
+  --yes / --force   confirm the delete (required on a non-TTY)
+  --json            print the result counts`,
+  upgrade: `mm upgrade   Open Stripe checkout and poll until your plan is active (needs login).
+
+  --lifetime        buy the one-time Lifetime plan ($29) instead of Pro ($5/yr)`,
+  integrations: `mm integrations [list | enable <id> | disable <id> | env <id> <tag>]
+
+  Manage the local on/off state of the live integrations (the gate for what
+  \`mm scan\`/\`mm status\` run by default). Ids: aws-lambda, vercel, supabase-edge,
+  github-actions. \`env <id> <prod|staging|dev|unknown>\` sets a declared env.
+
+  --json            (list only) machine-readable integration state`,
+  config: `mm config [analytics on|off]   View or change local settings.
+
+  Bare \`mm config\` lists settings (analytics, update channel, config path).
+  \`mm config analytics on|off\` toggles anonymous usage analytics (also honored:
+  MM_NO_ANALYTICS=1, DO_NOT_TRACK=1, CI=1).`,
+  login: `mm login [api_key]   Sign in. With no key, opens the browser and polls; or paste a key.
+
+  --key <key>       paste an API key directly
+  --api <url>       override the API base`,
+};
 
 /** Awaits the updater promise; prints a one-liner if an update completed. Never throws. */
 async function maybePrintUpdate(promise) {
@@ -932,8 +1019,10 @@ async function main() {
 
   // --help / -h / help: print usage + exit. MUST come before the no-arg → TUI
   // fallthrough below (a bare `mm` launches the TUI, but `mm --help` must not).
+  // `mm <cmd> --help` and `mm help <cmd>` print per-command usage when we have it.
   if (cmd === "help" || flags.help || flags.h) {
-    console.log(HELP);
+    const topic = cmd === "help" ? positional[1] : cmd;
+    console.log((topic && COMMAND_HELP[topic]) || HELP);
     return;
   }
 
@@ -1007,8 +1096,13 @@ async function main() {
       flags.dir = cmd;
       await launchTui(positional[1], flags);
     }
-    else if (cmd === "help" || flags.help) console.log(HELP);
-    else console.log(HELP);
+    else {
+      // Unknown command / non-existent path: name it on stderr + exit non-zero so
+      // a typo in a script fails loudly instead of silently printing help.
+      console.error(`Unknown command or path: ${cmd}\n`);
+      console.log(HELP);
+      process.exit(1);
+    }
   } catch (e) {
     console.error(`Error: ${e?.message ?? e}`);
     await maybePrintUpdate(updatePromise);

package/src/tui/game/loop.js

@@ -139,7 +139,9 @@ export function runGame({ width, height, level = 1, scanStore = null, onExit, in
       if (highSaved) return;
       highSaved = true;
       const score = (game && Math.max(game.best || 0, game.score || 0)) || 0;
-      if (score > best) {
+      // _inject.noPersist (the __bench_frames seam) keeps a measurement run from
+      // writing dkHighScore to the user's config.
+      if (score > best && !_inject.noPersist) {
         try { setConfigValue("dkHighScore", score); best = score; } catch { /* best effort */ }
       }
     }

package/src/tui/views/whatsnew.js

@@ -7,6 +7,7 @@ import React from "react";
 import { Box, Text, useInput } from "ink";
 import {
   h, C, GLYPH, SubTabs, ListRow, StateLine, cellE, clampCursor, SPINNER, useTick, useAsync,
+  useSearch, SearchBar,
 } from "../ui.js";
 import { collectFrom } from "../../sources/index.js";
 import { loadConfig, setConfigValue } from "../../config.js";
@@ -21,11 +22,11 @@ const TABS = ["Registry", "Alerts", "Drift", "Fixes", "Releases"];
 // Notifications: mark read · Drift: rescan + archive). Published via ui.setKeys()
 // so the keybar never advertises a key that's dead on the current section.
 const TAB_KEYS = [
-  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "m", label: "mark all seen" }, { k: "g", label: "refresh" }],
-  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "o", label: "mark read" }, { k: "g", label: "refresh" }],
-  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "r", label: "rescan" }, { k: "a", label: "archive" }],
-  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "o", label: "open in editor" }, { k: "g", label: "refresh" }],
-  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "/", label: "search" }, { k: "m", label: "mark all seen" }, { k: "g", label: "refresh" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "/", label: "search" }, { k: "o", label: "mark read" }, { k: "g", label: "refresh" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "/", label: "search" }, { k: "r", label: "rescan" }, { k: "a", label: "archive" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "/", label: "search" }, { k: "o", label: "open in editor" }, { k: "g", label: "refresh" }],
+  [{ k: "←→", label: "section" }, { k: "↑↓", label: "nav" }, { k: "/", label: "search" }],
 ];
 
 // The static fallback must match the default (Registry) section exactly —
@@ -35,8 +36,12 @@ export const meta = { keys: TAB_KEYS[0] };
 export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14 }) {
   const [tab, setTab] = React.useState(0);
   const [cursor, setCursor] = React.useState(0);
+  const search = useSearch();
   const lastSeen = loadConfig().lastEventsSeenAt || null;
   React.useEffect(() => { ui?.setKeys?.(TAB_KEYS[tab]); }, [tab, ui]);
+  // Re-window from the top whenever the filter changes so the cursor never sits
+  // below the (now shorter) visible list.
+  React.useEffect(() => { setCursor(0); }, [search.query]);
 
   const reg = useAsync(async () => {
     const [ev, m, p] = await Promise.all([
@@ -89,11 +94,46 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
     }
   }
 
+  // One `/` filter, applied per-section over the fields each row actually shows
+  // (so e.g. typing "deprecated" on Registry narrows to model_deprecated events,
+  // "claude" to a provider's models). Computed once here and reused by both the
+  // key handler — so m/o/a act on the row you can SEE — and the render below.
+  const q = search.query.toLowerCase().trim();
+  const regEvents = reg.data?.events || [];
+  const regName = (e) => (e.model_id ? reg.data?.models.get(e.model_id) : reg.data?.provs.get(e.provider_id)) || "";
+  const regFiltered = q ? regEvents.filter((e) => `${e.event_type} ${regName(e)} ${String(e.published_at || "").slice(0, 10)}`.toLowerCase().includes(q)) : regEvents;
+  const notifAll = notif.data || [];
+  const notifFiltered = q ? notifAll.filter((n) => `${n.title} ${String(n.when || "").slice(0, 10)}`.toLowerCase().includes(q)) : notifAll;
+  const fixesFiltered = q ? fixes.filter((f) => `${path.basename(f.dir)} ${f.file} ${f.from} ${f.to}`.toLowerCase().includes(q)) : fixes;
+  const relFiltered = q ? CHANGELOG.filter((e) => `v${e.version} ${e.date} ${e.title} ${(e.items || []).join(" ")}`.toLowerCase().includes(q)) : CHANGELOG;
+  const driftAdded = q && drift?.added ? drift.added.filter((c) => `${c.display || c.model_string} ${c.location_label || ""}`.toLowerCase().includes(q)) : drift?.added || [];
+  const driftGone = q && drift?.gone ? drift.gone.filter((u) => `${u.model_display || u.custom_model_name || ""} ${u.source_path || ""}`.toLowerCase().includes(q)) : drift?.gone || [];
+
   useInput(
     (input, key) => {
       if (!active) return;
-      if (key.leftArrow) return (setTab((t) => (t + TABS.length - 1) % TABS.length), setCursor(0));
-      if (key.rightArrow) return (setTab((t) => (t + 1) % TABS.length), setCursor(0));
+      // While typing a filter, keys feed the query — not the section commands.
+      // No trailing return: ↑↓ still scroll the filtered list as you refine it
+      // (matches the Scan/Inventory search feel). Mirrors the useSearch ref guard.
+      if (search.isSearchingNow()) {
+        if (key.escape) { search.clear(); ui?.setCapturing?.(false); return; }
+        if (key.return) { search.confirm(); ui?.setCapturing?.(false); return; }
+        if (key.backspace || key.delete) return search.backspace();
+        if (input && !key.ctrl && !key.meta && !key.leftArrow && !key.rightArrow) return search.type(input);
+      }
+      // "/" opens the filter (any trailing chars typed in the same burst seed it).
+      if (typeof input === "string" && input.startsWith("/")) {
+        search.open();
+        ui?.setCapturing?.(true);
+        const rest = input.slice(1);
+        if (rest) search.type(rest);
+        return;
+      }
+      if (key.leftArrow) return (setTab((t) => (t + TABS.length - 1) % TABS.length), setCursor(0), search.clear());
+      if (key.rightArrow) return (setTab((t) => (t + 1) % TABS.length), setCursor(0), search.clear());
+      // esc / backspace drops a confirmed filter (when not mid-typing — that's
+      // handled above) before falling through to the section commands.
+      if ((key.escape || key.backspace || key.delete) && search.query) return search.clear();
       if (key.downArrow || input === "j") return setCursor((c) => c + 1);
       if (key.upArrow || input === "k") return setCursor((c) => Math.max(0, c - 1));
       // g refreshes whichever section is showing — the universal retry across tabs
@@ -111,7 +151,7 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
           ui.showToast("marked all as seen");
         }
       } else if (tab === 1) {
-        const list = notif.data || [];
+        const list = notifFiltered;
         const cur = list[clampCursor(cursor, list.length)];
         if (input === "o" && cur)
           client.readNotification(cur.id).then(() => {
@@ -119,14 +159,14 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
             notif.reload();
           }).catch((e) => ui.showToast(e.message, "red"));
       } else if (tab === 3) {
-        const cur = fixes[clampCursor(cursor, fixes.length)];
+        const cur = fixesFiltered[clampCursor(cursor, fixesFiltered.length)];
         if (input === "o" && cur) {
           openLocation(path.resolve(cur.dir, cur.file), cur.line);
           ui.showToast(`opened ${cur.file}:${cur.line}`);
         }
       } else if (tab === 2) {
         if (input === "r") return runDrift();
-        const gone = drift?.gone || [];
+        const gone = driftGone;
         // Same visible-rows clamp as the render — archive only what's on screen.
         const cur = gone[clampCursor(cursor, Math.min(gone.length, 7))];
         if (input === "a" && cur)
@@ -157,8 +197,8 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
     if (reg.loading) body = h(StateLine, { kind: "loading", spin, text: "loading registry changes…" });
     else if (reg.error) body = h(StateLine, { kind: "error", text: `couldn't load registry changes — ${reg.error}`, hint: "g retries" });
     else {
-      const events = reg.data.events;
-      if (!events.length) body = h(Text, { color: C.FG_DIM }, "  No registry changes recorded yet.");
+      const events = regFiltered;
+      if (!events.length) body = h(Text, { color: C.FG_DIM }, q ? `  No changes match "${search.query}".` : "  No registry changes recorded yet.");
       else {
         const start = clampCursor(cursor, events.length);
         body = h(
@@ -181,10 +221,10 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
       }
     }
   } else if (tab === 1) {
-    const list = notif.data || [];
+    const list = notifFiltered;
     if (notif.loading) body = h(StateLine, { kind: "loading", spin, text: "loading alerts…" });
     else if (notif.error) body = h(StateLine, { kind: "error", text: `couldn't load alerts — ${notif.error}`, hint: "g retries" });
-    else if (!list.length) body = h(Text, { color: C.FG_DIM }, "  No alerts yet. Press 6 to set up alert rules.");
+    else if (!list.length) body = h(Text, { color: C.FG_DIM }, q ? `  No alerts match "${search.query}".` : "  No alerts yet. Press 6 to set up alert rules.");
     else {
       // Window the list around the cursor so ↑↓ can reach every row — a fixed
       // slice(0, ROWS) lets the selection walk below the visible page and `o`
@@ -206,14 +246,15 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
       );
     }
   } else if (tab === 3) {
-    if (!fixes.length) {
-      body = h(Text, { color: C.FG_DIM }, "  No fixes applied yet. Press f on the Here tab (or run mm fix) to rewrite dying model ids.");
+    if (!fixesFiltered.length) {
+      body = h(Text, { color: C.FG_DIM }, q ? `  No fixes match "${search.query}".` : "  No fixes applied yet. Press f on the Here tab (or run mm fix) to rewrite dying model ids.");
     } else {
       // Windowed like the Alerts section so ↑↓ reaches every row — minus 4 rows
       // reserved for the selected fix's diff underneath.
+      const fixesV = fixesFiltered;
       const FROWS = Math.max(3, ROWS - 4);
-      const cur = clampCursor(cursor, fixes.length);
-      const start = Math.max(0, Math.min(cur - FROWS + 1, fixes.length - FROWS));
+      const cur = clampCursor(cursor, fixesV.length);
+      const start = Math.max(0, Math.min(cur - FROWS + 1, fixesV.length - FROWS));
       const ago = (ts) => {
         const m = Math.max(0, Math.round((Date.now() - ts) / 60000));
         if (m < 1) return "now";
@@ -225,7 +266,7 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
       body = h(
         Box,
         { flexDirection: "column" },
-        ...fixes.slice(start, start + FROWS).map((f, i) => {
+        ...fixesV.slice(start, start + FROWS).map((f, i) => {
           const cells = [
             { text: `${GLYPH.check} `, color: "#16a34a" },
             { text: cellE(`${path.basename(f.dir)} · ${f.file}:${f.line}`, 38), color: C.FG },
@@ -238,7 +279,7 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
         // The selected fix's diff — same red/green visual as the f preview + the fix PR.
         h(Text, { key: "drule" }, ""),
         ...(() => {
-          const sel = fixes[cur];
+          const sel = fixesV[cur];
           if (!sel) return [];
           if (!sel.before || !sel.after) return [h(Text, { key: "dnone", color: C.FG_DIM }, "  (diff not recorded for this entry — older fix)")];
           const w = Math.max(20, width - 4);
@@ -251,14 +292,17 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
       );
     }
   } else if (tab === 4) {
+    const relV = relFiltered;
+    if (!relV.length) { body = h(Text, { color: C.FG_DIM }, `  No releases match "${search.query}".`); }
+    else {
     const RROWS = Math.max(3, ROWS - 5); // reserve rows for the selected entry's bullets
-    const cur = clampCursor(cursor, CHANGELOG.length);
-    const start = Math.max(0, Math.min(cur - RROWS + 1, CHANGELOG.length - RROWS));
-    const sel = CHANGELOG[cur];
+    const cur = clampCursor(cursor, relV.length);
+    const start = Math.max(0, Math.min(cur - RROWS + 1, relV.length - RROWS));
+    const sel = relV[cur];
     body = h(
       Box,
       { flexDirection: "column" },
-      ...CHANGELOG.slice(start, start + RROWS).map((e, i) => {
+      ...relV.slice(start, start + RROWS).map((e, i) => {
         const cells = [
           { text: cellE(`v${e.version}`, 16), color: C.ACCENT },
           { text: cellE(e.date, 12), color: C.FG_FAINT },
@@ -272,12 +316,14 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
             h(Text, { key: `rb${i}`, color: C.FG_DIM }, cellE(`  • ${it.replace(/\`/g, "")}`, Math.max(24, width - 2))))
         : []),
     );
+    }
   } else {
     if (!drift) body = h(Text, { color: C.FG_DIM }, `  Press r to scan ${dir} and compare against tracked usages.`);
     else if (drift.loading) body = h(StateLine, { kind: "loading", spin, text: "scanning for drift…" });
     else if (drift.error) body = h(StateLine, { kind: "error", text: `drift scan failed — ${drift.error}`, hint: "r rescans" });
     else {
-      const gone = drift.gone || [];
+      const added = driftAdded;
+      const gone = driftGone;
       // Clamp the archive cursor to the VISIBLE rows — `a` must never act on a
       // row below the 7 shown.
       const curGone = clampCursor(cursor, Math.min(gone.length, 7));
@@ -287,12 +333,13 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
         h(
           Text,
           {},
-          h(Text, { color: "#16a34a" }, `${drift.added.length} new in code`),
+          h(Text, { color: "#16a34a" }, `${added.length} new in code`),
           h(Text, { color: C.FG_DIM }, `  ·  ${drift.present} still present  ·  `),
           h(Text, { color: "#dc2626" }, `${gone.length} gone from code`),
+          q ? h(Text, { color: C.FG_FAINT }, `  ·  filter "${search.query}"`) : null,
         ),
         h(Text, {}, ""),
-        ...drift.added.slice(0, 5).map((c, i) => {
+        ...added.slice(0, 5).map((c, i) => {
           const cells = [
             { text: "+ ", color: "#16a34a" },
             { text: cellE(c.display || c.model_string, 24), color: "#16a34a" },
@@ -301,7 +348,7 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
           ];
           return h(ListRow, { key: "a" + i, active: false, cells, width });
         }),
-        drift.added.length > 5 ? h(Text, { color: C.FG_DIM }, `  … ${drift.added.length - 5} more new`) : null,
+        added.length > 5 ? h(Text, { color: C.FG_DIM }, `  … ${added.length - 5} more new`) : null,
         ...gone.slice(0, 7).map((u, i) => {
           const cells = [
             { text: "- ", color: "#dc2626" },
@@ -316,11 +363,18 @@ export function WhatsNewView({ client, dir, ui, active, width = 78, height = 14
     }
   }
 
+  const visibleCount = tab === 0 ? regFiltered.length
+    : tab === 1 ? notifFiltered.length
+    : tab === 2 ? driftAdded.length + driftGone.length
+    : tab === 3 ? fixesFiltered.length
+    : relFiltered.length;
+
   return h(
     Box,
     { flexDirection: "column" },
     h(SubTabs, { idx: tab, tabs: TABS }),
     h(Text, {}, ""),
     body,
+    search.active ? h(SearchBar, { searching: search.searching, query: search.query, count: visibleCount }) : null,
   );
 }

package/src/upgrade.js

@@ -4,8 +4,8 @@ const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 
 /** Open Stripe checkout and poll /me until the plan flips off "free". Mirrors
  * the browser-login poll UX. Returns the new plan, or null on timeout. */
-export async function upgradeViaBrowser({ client, log = console.error, onTick }) {
-  const { url } = await client.checkout();
+export async function upgradeViaBrowser({ client, plan, log = console.error, onTick }) {
+  const { url } = await client.checkout(plan);
   if (!url) throw new Error("Could not start checkout.");
   log(`\n  Opening checkout in your browser…`);
   log(`  If it doesn't open, visit:\n    ${url}\n`);