memgineering 0.15.1 → 0.16.0

package/CHANGELOG.md

@@ -11,6 +11,30 @@ language the reader wants. The bilingual rule the monorepo applies to
 
 ## [Unreleased]
 
+## [0.16.0] — 2026-08-30
+
+### Added
+
+- **Opt-in anonymized error reporting.** When the CLI itself breaks — the
+  server unreachable, the server's own 500, or an unhandled crash — it can
+  send an anonymous report: error kind, CLI/Node version, platform, and a
+  sanitized message excerpt (paths, tokens, and identifiers stripped;
+  200-character cap). Never note content, never commands, never identity —
+  the server table has no columns identity could land in, and expected
+  refusals (like `no vault is linked`) are never reported. Off by default:
+  `memgineering setup` asks once in a terminal, `--error-telemetry on|off`
+  answers by flag, and `MEMGINEERING_NO_TELEMETRY=1` overrides everything.
+  Reports are deleted after 90 days. The privacy policy
+  (api.memgineering.com/privacy, effective 2026-08-30) documents all of it.
+
+### Agent guidance
+
+- `memgineering-setup` explains the telemetry question and both
+  off-switches, so an agent running setup for someone can relay the decision
+  instead of guessing it. Setup never prompts without a terminal — an
+  unanswered question stays `undecided`, which behaves as off. Restart your
+  agent session after upgrading so the refreshed skill is what gets read.
+
 ## [0.15.1] — 2026-08-29
 
 ### Fixed

package/assets/MEMGINEERING.md

@@ -2,7 +2,7 @@
 name: memgineering
 description: Use whenever the user refers to something they told you before, asks what was decided, tells you something worth keeping, or settles something that should hold next time. The memory lives in their own folder and outlives this session; check it before answering from guesswork, and write to it when you learn something durable.
 type: skill
-version: 0.15.1
+version: 0.16.0
 ---
 
 # memgineering

package/assets/memgineering-setup/SKILL.md

@@ -33,7 +33,8 @@ that can read it.
 memgineering setup --agent \
   --tools claude,codex \        # default: everything detected
   --auto-update on \            # default: on, and recommended
-  --hook on                     # session-start summary + rules before an edit
+  --hook on \                   # session-start summary + rules before an edit
+  --error-telemetry on          # anonymized crash reports; unset = undecided (off)
 ```
 
 `--dry-run` reports what would change without changing it.
@@ -60,6 +61,17 @@ terminal at all.
 itself; `--hook on` means note summaries and their standing rules reach an agent
 unasked. Recommend both, but they are theirs to decide.
 
+**Error telemetry is theirs to decide too, and defaults to off.** With
+`--error-telemetry on`, the CLI sends an anonymous report when it ITSELF
+breaks: error kind, CLI/Node version, platform, and a sanitized message
+excerpt — never note content, commands, or anything naming them, and the
+server has no columns identity could land in. Unset leaves it `undecided`
+(behaves as off) so a person can be asked later; a terminal `setup` asks
+once; without a terminal it never prompts. Two off-switches at any time:
+`memgineering setup --error-telemetry off`, or `MEMGINEERING_NO_TELEMETRY=1`
+in the environment. Deleted server-side after 90 days; the full contract is
+at api.memgineering.com/privacy.
+
 **`--hook off` removes them**, it does not merely decline to add them, so it is
 the answer when someone already has the callbacks and has decided they do not
 want them. Only groups memgineering wrote are taken out; anything else in that