fix: Add telemetry opt-out via installer prompt and env var

Sentry error reporting can now be disabled by:
1. Declining during the interactive installer (sets CODEGRAPH_TELEMETRY=off
   in the MCP server config env)
2. Setting CODEGRAPH_TELEMETRY=off in your shell environment

README updated with a Telemetry section documenting what is collected
and how to opt out.

Closes #68

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/installer/config-writer.ts

@@ -100,18 +100,22 @@ function writeJsonFile(filePath: string, data: Record<string, any>): void {
 /**
  * Get the MCP server configuration
  */
-function getMcpServerConfig(): Record<string, any> {
-  return {
+function getMcpServerConfig(options?: { telemetry?: boolean }): Record<string, any> {
+  const config: Record<string, any> = {
     type: 'stdio',
     command: 'codegraph',
     args: ['serve', '--mcp'],
   };
+  if (options?.telemetry === false) {
+    config.env = { CODEGRAPH_TELEMETRY: 'off' };
+  }
+  return config;
 }
 
 /**
  * Write the MCP server configuration to claude.json
  */
-export function writeMcpConfig(location: InstallLocation): void {
+export function writeMcpConfig(location: InstallLocation, options?: { telemetry?: boolean }): void {
   const claudeJsonPath = getClaudeJsonPath(location);
   const config = readJsonFile(claudeJsonPath);
 
@@ -121,7 +125,7 @@ export function writeMcpConfig(location: InstallLocation): void {
   }
 
   // Add or update codegraph server
-  config.mcpServers.codegraph = getMcpServerConfig();
+  config.mcpServers.codegraph = getMcpServerConfig(options);
 
   writeJsonFile(claudeJsonPath, config);
 }

src/installer/index.ts

@@ -51,9 +51,25 @@ export async function runInstaller(): Promise<void> {
     const location = await promptInstallLocation();
     console.log();
 
-    // Step 3: Write MCP configuration (always uses npx for reliability)
+    // Step 3: Ask about auto-allow permissions
+    const autoAllow = await promptAutoAllow();
+    console.log();
+
+    // Step 4: Ask about anonymous error reporting
+    console.log(chalk.bold('  Send anonymous error reports?') + chalk.dim(' (Helps fix bugs — no source code collected)'));
+    console.log();
+    const enableTelemetry = await promptConfirm('Enable anonymous error reporting', true);
+
+    if (!enableTelemetry) {
+      info('Telemetry disabled');
+    } else {
+      success('Anonymous error reporting enabled');
+    }
+    console.log();
+
+    // Step 5: Write MCP configuration (includes telemetry env if opted out)
     const alreadyHasMcp = hasMcpConfig(location);
-    writeMcpConfig(location);
+    writeMcpConfig(location, { telemetry: enableTelemetry });
 
     if (alreadyHasMcp) {
       success(`Updated MCP server in ${location === 'global' ? '~/.claude.json' : './.claude.json'}`);
@@ -61,10 +77,6 @@ export async function runInstaller(): Promise<void> {
       success(`Added MCP server to ${location === 'global' ? '~/.claude.json' : './.claude.json'}`);
     }
 
-    // Step 4: Ask about auto-allow permissions
-    const autoAllow = await promptAutoAllow();
-    console.log();
-
     if (autoAllow) {
       const alreadyHasPerms = hasPermissions(location);
       writePermissions(location);
@@ -76,7 +88,7 @@ export async function runInstaller(): Promise<void> {
       }
     }
 
-    // Step 5: Write auto-sync hooks
+    // Step 6: Write auto-sync hooks
     const alreadyHasHooks = hasHooks(location);
     writeHooks(location);
 
@@ -86,7 +98,7 @@ export async function runInstaller(): Promise<void> {
       success(`Added auto-sync hooks to ${location === 'global' ? '~/.claude/settings.json' : './.claude/settings.json'}`);
     }
 
-    // Step 6: Write CLAUDE.md instructions
+    // Step 7: Write CLAUDE.md instructions
     const claudeMdResult = writeClaudeMd(location);
     const claudeMdPath = location === 'global' ? '~/.claude/CLAUDE.md' : './.claude/CLAUDE.md';
 

src/sentry.ts

@@ -19,12 +19,19 @@ let _tags: Record<string, string> = {};
 /**
  * Initialize Sentry error reporting.
  * Safe to call multiple times — subsequent calls update tags/release.
+ *
+ * Opt out by setting the environment variable CODEGRAPH_TELEMETRY=off
  */
 export function initSentry({ processName, version }: { processName: string; version?: string }) {
   // Skip in development/test environments
   if (process.env.NODE_ENV === 'development' || process.env.NODE_ENV === 'test' || process.env.VITEST) {
     return;
   }
+  // Respect user opt-out
+  const telemetry = process.env.CODEGRAPH_TELEMETRY?.toLowerCase();
+  if (telemetry === 'off' || telemetry === '0' || telemetry === 'false') {
+    return;
+  }
   _enabled = true;
   _release = `codegraph@${version ?? process.env.npm_package_version ?? 'unknown'}`;
   _tags = { processName };