docs: add telemetry section to ARCHITECTURE.md and ABSTRACTIONS.md

Also adds Playwright smoke test for consent dialog and mock handler
for reinit_telemetry command.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs/ABSTRACTIONS.md

@@ -589,3 +589,19 @@ interface Settings {
 ```
 
 Managed by `useSettings` hook and `SettingsPanel` component.
+
+## Telemetry
+
+### Components
+- **`TelemetryConsentDialog`** — First-launch dialog asking user to opt in to anonymous crash reporting. Two buttons: accept (sets `telemetry_consent: true`, generates `anonymous_id`) or decline.
+- **`TelemetryToggle`** — Checkbox component in `SettingsPanel` for crash reporting and analytics toggles.
+
+### Hooks
+- **`useTelemetry(settings, loaded)`** — Reactively initializes/tears down Sentry and PostHog based on settings. Called once in `App`.
+
+### Libraries
+- **`src/lib/telemetry.ts`** — `initSentry()`, `teardownSentry()`, `initPostHog()`, `teardownPostHog()`, `trackEvent()`. Path scrubber via `beforeSend` hook. DSN/key from `VITE_SENTRY_DSN` / `VITE_POSTHOG_KEY` env vars.
+- **`src-tauri/src/telemetry.rs`** — Rust-side Sentry init with `beforeSend` path scrubber. `init_sentry_from_settings()` reads settings and conditionally initializes. `reinit_sentry()` for runtime toggle.
+
+### Tauri Commands
+- **`reinit_telemetry`** — Re-reads settings and toggles Rust Sentry on/off. Called from frontend when user changes crash reporting setting.

docs/ARCHITECTURE.md

@@ -808,3 +808,44 @@ App startup (3s delay)
         → ready → "Restart to apply" + Restart Now
     → network error → fail silently
 ```
+
+### Telemetry (Opt-in)
+
+Anonymous crash reporting (Sentry) and usage analytics (PostHog), both **opt-in only**.
+
+```mermaid
+sequenceDiagram
+    participant User
+    participant App
+    participant Settings
+    participant Sentry
+    participant PostHog
+
+    Note over App: First launch or upgrade
+    App->>User: TelemetryConsentDialog
+    alt Accept
+        User->>Settings: telemetry_consent=true, anonymous_id=UUID
+        Settings->>Sentry: init(DSN, anonymous_id)
+        Settings->>PostHog: init(key, anonymous_id)
+    else Decline
+        User->>Settings: telemetry_consent=false
+        Note over Sentry,PostHog: Zero network requests
+    end
+
+    Note over App: Settings panel toggle change
+    User->>Settings: crash_reporting_enabled=false
+    Settings->>Sentry: teardown()
+    Settings->>App: reinit_telemetry (Tauri cmd)
+```
+
+**Privacy guarantees:**
+- No vault content, note titles, or file paths in payloads (regex scrubber in `beforeSend`)
+- `anonymous_id` is a locally-generated UUID, never tied to identity
+- `send_default_pii: false` on both SDKs
+- PostHog: `autocapture: false`, `persistence: 'memory'`, no cookies
+
+**Architecture:**
+- **Rust:** `sentry` crate initialized in `lib.rs::setup()` via `telemetry::init_sentry_from_settings()`
+- **JS:** `@sentry/browser` + `posthog-js` initialized lazily by `useTelemetry` hook
+- **Settings:** `telemetry_consent`, `crash_reporting_enabled`, `analytics_enabled`, `anonymous_id` in `Settings` struct
+- **Consent:** `TelemetryConsentDialog` shown when `telemetry_consent === null`