linksee-memory 0.11.4 → 0.11.5

package/README.md

@@ -618,7 +618,7 @@ Use both.
 linksee-memory runs locally and is built to read — and send — as little as possible.
 
 - **Local-first.** Memory is one SQLite file at `~/.linksee-memory/memory.db`. No account, no cloud, no API key.
-- **Telemetry is opt-in and OFF by default.** Nothing is sent unless you set `LINKSEE_TELEMETRY=basic`. Even then it never sends your source code, file contents, prompts, conversation, entity/project names, or the memory DB — only anonymous counters ([details](#telemetry-opt-in-off-by-default)).
+- **Telemetry is opt-in and OFF by default.** `setup` asks once; nothing is sent unless you agree there (or set `LINKSEE_TELEMETRY=basic`). Even then it never sends your source code, file contents, prompts, conversation, entity/project names, or the memory DB — only anonymous counters ([details](#telemetry-opt-in-off-by-default)).
 - **No automatic repo crawling.** linksee reads: memory you explicitly save, your `map.yaml`, the specific files a map reality-check points at, the local SQLite DB, and — when the Stop hook fires — your Claude Code session transcript (locally, to capture what happened). It does **not** crawl your repo, read `.env`/secrets/`node_modules`, or touch your home directory on its own.
 - **Clean MCP transport.** The server writes only JSON-RPC to stdout; all logs go to stderr.
 - **Hooks are documented and removable.** `setup` adds a Stop hook (session capture) and an optional guard hook. They make no network calls by default, are time-bounded, fail-open (a hook error never breaks your session), and are listed under [Uninstall](#uninstall).
@@ -636,6 +636,8 @@ linksee-memory ships with **opt-in** anonymous telemetry that helps us understan
 ```bash
 export LINKSEE_TELEMETRY=basic     # opt in
 export LINKSEE_TELEMETRY=off       # opt out (or just unset the variable)
+# `linksee-memory setup` also asks once and records your choice in
+# ~/.linksee-memory/telemetry-consent (delete that file to be asked again).
 ```
 
 ### Exactly what gets sent (Level 1 contract)

package/dist/bin/setup.js

@@ -70,6 +70,9 @@ const GUARD_COMMAND = 'npx -y linksee-memory guard';
 const PROJECT_DIR = process.cwd();
 const PROJECT_CLAUDE_DIR = join(PROJECT_DIR, '.claude');
 const PROJECT_SETTINGS_PATH = join(PROJECT_CLAUDE_DIR, 'settings.json');
+// Opt-in telemetry consent recorded at setup time (read by telemetry.ts getTelemetryMode).
+const TELEMETRY_DIR = process.env.LINKSEE_MEMORY_DIR ?? join(HOME, '.linksee-memory');
+const TELEMETRY_CONSENT_FILE = join(TELEMETRY_DIR, 'telemetry-consent');
 const CHECK = '\x1b[32m✓\x1b[0m';
 const SKIP = '\x1b[33m○\x1b[0m';
 const FAIL = '\x1b[31m✗\x1b[0m';
@@ -225,13 +228,15 @@ const GUARD_HOOKS = {
 function guardWiredFor(s, ev) {
     return (s.hooks?.[ev] ?? []).some((entry) => entry?.hooks?.some((h) => typeof h?.command === 'string' && h.command.includes('linksee-memory-guard')));
 }
-function askYesNo(question) {
+function askYesNo(question, defaultYes = true) {
     return new Promise((resolve) => {
         const rl = createInterface({ input: process.stdin, output: process.stdout });
-        rl.question(`${question} [Y/n] `, (ans) => {
+        rl.question(`${question} ${defaultYes ? '[Y/n]' : '[y/N]'} `, (ans) => {
             rl.close();
             const a = ans.trim().toLowerCase();
-            resolve(a === '' || a === 'y' || a === 'yes'); // default = yes
+            if (a === '')
+                return resolve(defaultYes);
+            resolve(a === 'y' || a === 'yes');
         });
     });
 }
@@ -288,13 +293,58 @@ async function configureGuard() {
 }
 const guardConfigured = await configureGuard();
 console.log('');
+// ── Telemetry consent (opt-in, anonymous, off unless you agree) ──────────
+async function configureTelemetryConsent() {
+    console.log(`${BOLD}Anonymous usage stats${RESET} ${DIM}(optional)${RESET}`);
+    const env = (process.env.LINKSEE_TELEMETRY || '').toLowerCase().trim();
+    if (env) {
+        console.log(`  ${SKIP} Controlled by LINKSEE_TELEMETRY=${env} ${DIM}(env overrides)${RESET}`);
+        return;
+    }
+    if (existsSync(TELEMETRY_CONSENT_FILE)) {
+        let cur = 'off';
+        try {
+            cur = (readFileSync(TELEMETRY_CONSENT_FILE, 'utf8').trim().toLowerCase()) || 'off';
+        }
+        catch { /* ignore */ }
+        console.log(`  ${SKIP} Already chosen: ${cur === 'basic' ? 'on' : 'off'} ${DIM}(edit ${TELEMETRY_CONSENT_FILE} to change)${RESET}`);
+        return;
+    }
+    if (dryRun) {
+        console.log(`  ${DIM}[dry-run] Would ask whether to share anonymous usage stats${RESET}`);
+        return;
+    }
+    const dnt = process.env.DO_NOT_TRACK === '1' || process.env.DO_NOT_TRACK === 'true';
+    if (dnt || autoYes || !process.stdin.isTTY) {
+        try {
+            mkdirSync(TELEMETRY_DIR, { recursive: true });
+            writeFileSync(TELEMETRY_CONSENT_FILE, 'off');
+        }
+        catch { /* best-effort */ }
+        const why = dnt ? 'DO_NOT_TRACK' : autoYes ? '--yes → off' : 'non-interactive';
+        console.log(`  ${SKIP} Left off ${DIM}(${why})${RESET}`);
+        return;
+    }
+    console.log(`  ${DIM}Helps us see which workflows actually work. Anonymous counts only —`);
+    console.log(`  never your memory, code, prompts, file contents, entity names, or paths.`);
+    console.log(`  Off unless you say yes; change anytime with LINKSEE_TELEMETRY=off.${RESET}`);
+    const ok = await askYesNo('  Share anonymous usage stats?', false);
+    try {
+        mkdirSync(TELEMETRY_DIR, { recursive: true });
+        writeFileSync(TELEMETRY_CONSENT_FILE, ok ? 'basic' : 'off');
+    }
+    catch { /* best-effort */ }
+    console.log(`  ${ok ? CHECK : SKIP} Telemetry ${ok ? 'enabled — thank you!' : 'left off'}`);
+}
+await configureTelemetryConsent();
+console.log('');
 // ── Summary ──────────────────────────────────────────────
 console.log(`${BOLD}Setup complete!${RESET}`);
 console.log('');
 console.log('How it works:');
 console.log(`  ${DIM}• Every session is auto-captured (decisions, caveats, learnings)${RESET}`);
 console.log(`  ${DIM}• Agent auto-recalls past context when starting a task${RESET}`);
-console.log(`  ${DIM}• Memory is local-first (nothing leaves your machine)${RESET}`);
+console.log(`  ${DIM}• Memory is local-first (your memory never leaves your machine)${RESET}`);
 console.log(`  ${DIM}• Works across Claude Code, Cursor, Windsurf, Codex, Gemini (cross-agent)${RESET}`);
 if (guardConfigured) {
     console.log(`  ${DIM}• Re-injection guard re-surfaces this project's accepted decisions before edits${RESET}`);

package/dist/lib/telemetry.js

@@ -29,6 +29,19 @@ export function getTelemetryMode() {
     const v = (process.env.LINKSEE_TELEMETRY || '').toLowerCase().trim();
     if (v === 'basic' || v === 'on' || v === '1' || v === 'true')
         return 'basic';
+    if (v)
+        return 'off'; // any explicit env value (off/0/false/no/…) always wins
+    // No env override → use the consent recorded at setup time. Stays off if absent,
+    // so "off by default" holds: nothing is sent unless the user agreed at setup.
+    try {
+        const consentFile = join(TELEMETRY_DIR, 'telemetry-consent');
+        if (existsSync(consentFile)) {
+            const c = readFileSync(consentFile, 'utf8').trim().toLowerCase();
+            if (c === 'basic' || c === 'on')
+                return 'basic';
+        }
+    }
+    catch { /* ignore */ }
     return 'off';
 }
 export function getOrCreateAnonId() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linksee-memory",
-  "version": "0.11.4",
+  "version": "0.11.5",
   "mcpName": "io.github.michielinksee/linksee-memory",
   "description": "Local-first agent memory MCP — cross-agent brain with drift detection, 6-layer structured memory + token-saving file diff cache",
   "type": "module",