chore(release): 0.13.0 — ThinkFleet Memory Bridge

[rrader26]

Summary

Cuts @thinkfleet/agentmark@0.13.0. Bundles everything from #44 + #47 into a single shipping release: env-aware memory backend, the --env + --skill install flags, the canonical thinkfleet-memory skill, and the new public helper exports.

After this merges, publish:

```bash
cd /Users/ryanrader/Dev/_code/agentmark
git checkout main && git pull
npm run build
npm publish --access public
```

Once 0.13.0 is on the registry, ThinkFleet Desktop bumps automatically (its dep pin ^0.12.0 already matches 0.13.0), and end users of the next desktop release get the bundled-and-skilled memory bridge baked in.

What's in this release

Memory backend

• Memory plugin now in the default plugin set — installs always get agentmark_memory_* tools
• detectMemoryBackend() picks ActivepiecesMemoryBackend when THINKFLEET_BASE_URL/PROJECT_ID/API_KEY are set, falls back to LocalFileMemoryBackend otherwise
• Refuses partial creds (loud MemoryBackendConfigError) so a typo doesn't silently demote a user to local-only memory
• Rejects malformed API keys (no sk- prefix), truncates to first 4 chars in errors so secrets don't leak to logs
• New exports: detectMemoryBackend, describeMemoryBackend, MemoryBackendConfigError

Install CLI

• agentmark-mcp install --env=KEY=VALUE writes env block into client MCP configs; strict validation (no shell metacharacters, 4KiB cap, no null bytes)
• agentmark-mcp install --skill=<name> installs an instruction packet alongside the MCP entry; native targets (Claude Code/Desktop) write whole files, rules-file targets (Cursor/Windsurf/Codex) scaffolded via upsertManagedBlock
• Duplicate---env warnings contain key name but never values

Skill

• Canonical thinkfleet-memory skill ships with the package
• Teaches the agent to call memory at session start, save preferences without being asked, search before guessing about environment, pick the right scope, and avoid common pitfalls

Test plan

• Typecheck clean
• npx vitest run — 586 passed, 10 skipped (596 total, no failures)
• CHANGELOG follows the project's Keep a Changelog format
• Reviewer sanity check that the version bump is the right tier (0.12 → 0.13 for additive features, no breaking changes)

After publish

Once on npm:

• ThinkFleet Desktop's npm install pulls 0.13.0 (pin is ^0.12.0)
• Production .dmg/.msi/.AppImage bundles 0.13 inside the app — no PATH dependency, no npx -y download
• End-user flow: install desktop → sign in → memory + skill auto-wired into every detected AI tool

🤖 Generated with Claude Code