memgineering 0.4.1 → 0.4.2

package/CHANGELOG.md

@@ -11,6 +11,28 @@ language the reader wants. The bilingual rule the monorepo applies to
 
 ## [Unreleased]
 
+## [0.4.2] — 2026-08-10
+
+### Fixed
+
+- **`setup --web` no longer prints the install key where it will be kept.** The
+  URL carries the key that authorizes reading your folders and writing into
+  `~/.claude`, and it was printed on every run — including under `--json`, so a
+  copy landed in the transcript of the agent that ran the command, which may be
+  stored, synced, or sent somewhere. It is now shown only when it is the way
+  in: the browser did not open, or you asked for it with `--print-url`.
+
+  **If you parse `--json`:** `url` is now present only when `opened` is
+  `false`. `port` and `opened` are always there. This is a smaller promise than
+  before and it is deliberate — the alternative was to keep handing out the key
+  to avoid changing a field.
+
+- **The link is no longer described as working "only once".** It never did: the
+  key is single-use for applying the setup and reusable for reading, so a
+  person told "only once" and then able to reload had been told something
+  untrue about the thing protecting their machine. It now says what actually
+  ends it — applying, closing the tab, or an hour.
+
 ## [0.4.1] — 2026-08-10
 
 Security fixes in `setup --web`, from the 2026-08-09 audit

package/dist/index.js

@@ -4122,6 +4122,7 @@ var init_setup_web_page = __esm({
 var setup_web_exports = {};
 __export(setup_web_exports, {
   browserOpener: () => browserOpener,
+  disclosure: () => disclosure,
   runSetupWeb: () => runSetupWeb,
   startSetupWebServer: () => startSetupWebServer
 });
@@ -4212,18 +4213,32 @@ async function runSetupWeb(opts) {
   const server = await startSetupWebServer({ detected: opts.detected });
   const opened = opts.printUrl ? false : await openBrowser(server.url);
   printDual({
-    json: { url: server.url, port: server.port, opened },
+    // The URL carries the key that authorizes reading folders and writing into
+    // `~/.claude`, and it was printed on every run — in `--json` too, so it
+    // landed in the transcript of the agent that ran the command, which may be
+    // stored, synced or sent somewhere. That is a different exposure from the
+    // one everybody thinks of with a local token: not a process on this machine
+    // that could read those files anyway, but a copy of the key leaving it.
+    //
+    // So it is emitted only when it is the way in — the browser did not open,
+    // or `--print-url` asked for it. When the browser DID open, the person is
+    // already looking at the screen and nobody needs the string.
+    json: disclosure(server.url, server.port, opened),
     human: () => {
       if (opened) {
         printHuman("Opened setup in your browser.\n");
-        printHuman(c.gray(`  If nothing appeared: ${server.url}`));
+        printHuman(
+          c.gray(
+            "  Nothing appeared? Run `memgineering setup --web --print-url` and open\n  the link yourself \u2014 it is not printed here on purpose, because it\n  carries the key that authorizes the install."
+          )
+        );
       } else {
         printHuman("Open this in a browser to finish setting up:\n");
         printHuman(`  ${server.url}`);
       }
       printHuman(
         c.gray(
-          "\n  The link only works on this machine and only once \u2014 it carries a\n  one-time key, and this screen closes when you are done.\n  Ctrl-C to stop waiting."
+          "\n  The link works only on this machine, and only until this screen\n  closes \u2014 applying the setup, closing the tab, or an hour, whichever\n  comes first. Ctrl-C to stop waiting."
         )
       );
     }
@@ -4240,6 +4255,9 @@ async function runSetupWeb(opts) {
   else printHuman(`
 ${reason === "applied" ? c.green(ending[reason]) : c.gray(ending[reason])}`);
 }
+function disclosure(url, port, opened) {
+  return opened ? { port, opened } : { port, opened, url };
+}
 async function handle(req, res, state, origin, touch = () => {
 }) {
   const url = new URL(req.url ?? "/", origin);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memgineering",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "private": false,
   "description": "One memory for the AI you connect. Recall, remember, and revise a brain your agents share — stored in your own folder.",
   "license": "Apache-2.0",