memgineering 0.7.2 → 0.7.4

package/CHANGELOG.md

@@ -11,6 +11,42 @@ language the reader wants. The bilingual rule the monorepo applies to
 
 ## [Unreleased]
 
+## [0.7.4] — 2026-08-19
+
+### Changed
+
+- **Signing in now asks the person to agree, and an account is not created until
+  they do.** The approval screen carries three required consents — the terms,
+  the handling of personal data, and being 14 or older — as three separate
+  boxes, because they are three separate statements. An agent can run every
+  other step of a setup; it cannot answer these, and `login` now says so in both
+  its human output and its `next` hint so the agent stops and hands the question
+  over.
+
+- **The terms and the privacy policy exist**, served by the brain server at
+  `/terms` and `/privacy` and linked from the approval screen. The privacy
+  policy was written against the database schema rather than from a template:
+  it names what is stored, what is not (IP addresses, request URLs, auth
+  headers), that the embedding model runs on the server so notes reach no third
+  party, and that recall queries are kept for 90 days. A test fails if a table
+  holding something a person wrote stops being described there.
+
+  This arrives with the server, not with this package — an older CLI reaches the
+  same screen and gets the same gate.
+
+## [0.7.3] — 2026-08-18
+
+### Fixed
+
+- **The "not set up yet" notice now reaches `--version`, `--help`, and a bare
+  `memgineering`.** It was on every verb and none of those, which is backwards:
+  a fresh agent session, given only "install memgineering", installed it and then
+  ran `memgineering --version` to check its own work — the first thing anybody
+  does after an install, and the one path the notice missed. It reported success
+  and stopped, having never been told setup exists. `--version` still prints
+  nothing but the version to stdout; the notice is on stderr, and it is printed
+  once per run however many paths would have said it.
+
 ## [0.7.2] — 2026-08-18
 
 Everyone who runs this CLI is an agent, and an agent can only act on what a

package/assets/MEMGINEERING.md

@@ -2,7 +2,7 @@
 name: memgineering
 description: Use whenever the user refers to something they told you before, asks what was decided, tells you something worth keeping, or settles something that should hold next time. The memory lives in their own folder and outlives this session; check it before answering from guesswork, and write to it when you learn something durable.
 type: skill
-version: 0.7.2
+version: 0.7.4
 ---
 
 # memgineering

package/dist/index.js

@@ -4864,7 +4864,7 @@ function emit(pending, ctx) {
       browser_opened: ctx.opened,
       api_url: ctx.base,
       waiting: ctx.blocking,
-      next: ctx.blocking ? "Waiting for approval in the browser." : "SHOW user_code to the user in your reply, then run any memgineering command \u2014 the token is claimed automatically once they approve."
+      next: ctx.blocking ? "Waiting for approval in the browser." : "SHOW user_code to the user in your reply, then run any memgineering command \u2014 the token is claimed automatically once they approve. The approval screen asks THEM to agree to the terms and the privacy policy and to confirm they are 14 or older; you cannot answer that for them, and an account is not created until they do."
     },
     human: () => {
       printHuman("Show this code to whoever is signing in:\n");
@@ -4876,6 +4876,11 @@ function emit(pending, ctx) {
         printHuman("Open this to approve:\n");
         printHuman(`  ${c.cyan(stripControl(pending.verification_url))}`);
       }
+      printHuman(
+        c.gray(
+          "\nThey agree to the terms and the privacy policy there, and confirm they are 14 or older.\nNo account is created until they do."
+        )
+      );
       if (ctx.opened && ctx.showUrl) {
         printHuman(c.gray(`  ${stripControl(pending.verification_url)}`));
       }
@@ -14218,10 +14223,13 @@ function buildProgram() {
   return program;
 }
 var WITHOUT_NEXT_STEP = /* @__PURE__ */ new Set(["setup", "login", "logout", "whoami", "update", "guard"]);
+var announced = false;
 async function announceNextStep(commandName) {
+  if (announced) return;
   if (WITHOUT_NEXT_STEP.has(commandName)) return;
   const step = await currentNextStep();
   if (step === null) return;
+  announced = true;
   process.stderr.write(`
 ${step.markdown}
 
@@ -14247,9 +14255,14 @@ function makeParseErrorsActionable(program) {
   };
   decorate(program);
 }
+function answersWithoutAction(argv) {
+  const first = argv[2];
+  return first === void 0 || first.startsWith("-");
+}
 async function run3(argv) {
   const program = buildProgram();
   const cleaned = argv.filter((a, i) => !(a === "--" && i >= 2));
+  if (answersWithoutAction(cleaned)) await announceNextStep("");
   await program.parseAsync(cleaned);
   if (argv[2] !== "update") await backgroundUpdateNotice();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memgineering",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "private": false,
   "description": "One memory for the AI you connect. Recall, remember, and revise a brain your agents share — stored in your own folder.",
   "license": "Apache-2.0",