memgineering 0.7.3 → 0.7.4

package/CHANGELOG.md

@@ -11,6 +11,29 @@ language the reader wants. The bilingual rule the monorepo applies to
 
 ## [Unreleased]
 
+## [0.7.4] — 2026-08-19
+
+### Changed
+
+- **Signing in now asks the person to agree, and an account is not created until
+  they do.** The approval screen carries three required consents — the terms,
+  the handling of personal data, and being 14 or older — as three separate
+  boxes, because they are three separate statements. An agent can run every
+  other step of a setup; it cannot answer these, and `login` now says so in both
+  its human output and its `next` hint so the agent stops and hands the question
+  over.
+
+- **The terms and the privacy policy exist**, served by the brain server at
+  `/terms` and `/privacy` and linked from the approval screen. The privacy
+  policy was written against the database schema rather than from a template:
+  it names what is stored, what is not (IP addresses, request URLs, auth
+  headers), that the embedding model runs on the server so notes reach no third
+  party, and that recall queries are kept for 90 days. A test fails if a table
+  holding something a person wrote stops being described there.
+
+  This arrives with the server, not with this package — an older CLI reaches the
+  same screen and gets the same gate.
+
 ## [0.7.3] — 2026-08-18
 
 ### Fixed

package/assets/MEMGINEERING.md

@@ -2,7 +2,7 @@
 name: memgineering
 description: Use whenever the user refers to something they told you before, asks what was decided, tells you something worth keeping, or settles something that should hold next time. The memory lives in their own folder and outlives this session; check it before answering from guesswork, and write to it when you learn something durable.
 type: skill
-version: 0.7.3
+version: 0.7.4
 ---
 
 # memgineering

package/dist/index.js

@@ -4864,7 +4864,7 @@ function emit(pending, ctx) {
       browser_opened: ctx.opened,
       api_url: ctx.base,
       waiting: ctx.blocking,
-      next: ctx.blocking ? "Waiting for approval in the browser." : "SHOW user_code to the user in your reply, then run any memgineering command \u2014 the token is claimed automatically once they approve."
+      next: ctx.blocking ? "Waiting for approval in the browser." : "SHOW user_code to the user in your reply, then run any memgineering command \u2014 the token is claimed automatically once they approve. The approval screen asks THEM to agree to the terms and the privacy policy and to confirm they are 14 or older; you cannot answer that for them, and an account is not created until they do."
     },
     human: () => {
       printHuman("Show this code to whoever is signing in:\n");
@@ -4876,6 +4876,11 @@ function emit(pending, ctx) {
         printHuman("Open this to approve:\n");
         printHuman(`  ${c.cyan(stripControl(pending.verification_url))}`);
       }
+      printHuman(
+        c.gray(
+          "\nThey agree to the terms and the privacy policy there, and confirm they are 14 or older.\nNo account is created until they do."
+        )
+      );
       if (ctx.opened && ctx.showUrl) {
         printHuman(c.gray(`  ${stripControl(pending.verification_url)}`));
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memgineering",
-  "version": "0.7.3",
+  "version": "0.7.4",
   "private": false,
   "description": "One memory for the AI you connect. Recall, remember, and revise a brain your agents share — stored in your own folder.",
   "license": "Apache-2.0",