release: v0.8.13 发布准备

[modusensus]

v0.8.13 发布准备：版本号（dsh-mneme/package.json + package-lock.json 两处）→ 0.8.13，
双 README 测试数 → 1523（本轮全量实测），CHANGELOG 的 [Unreleased] 小节承接为本版发布说明。

本版内容（自 v0.8.12 以来）

• 新增：写入边界的密钥 / PII 判据（sensitiveScanEnabled，默认关；PR feat(admission): 写入边界的密钥/PII 判据（#164 A2 → #254 第 1 级） #354）
• 新增：memory_save 指引补 scope 声明规则（PR feat(guide): memory_save 指引补 scope 声明规则（#249 第二批） #355）
• 修复：密钥 / PII 判据三处加固（PR fix(admission): A2 判据三处加固——回溯上界 / 环境变量名漏放 / 身份证校验位 #356）
• 修复：strictScope 硬过滤被 entity: / attr: 前缀检索绕过（issue [Bug] strictScope 硬过滤被 entity: / attr: 前缀检索绕过：显式他者 scope 的记忆仍可读出 #357 / PR fix(scope): strictScope 硬过滤补到 entity: / attr: 前缀检索（显式他者 scope 曾被绕过） #358）

已在本地验证

• 全量 npm test：1523 tests / 1522 pass / 0 fail / 1 skip
• check-sync：src ↔ lib 一致（52 文件）
• release.yml 的两条前置已就位：tag 将与 package.json 一致；CHANGELOG.md 含 ^## [0.8.13] 小节

合并后

按 CONTRIBUTING 的流程：先本机 npm publish（2FA），再推 v0.8.13 tag——顺序反了
release.yml 的 publish 步会真跑去发、然后因 2FA 失败让 run 变红。

备注

本版 CHANGELOG 小节是人工补的：scripts/release-prep.mjs 用 /^(# Changelog\n\n)/
匹配文件头，而 CRLF 检出上这个正则命中不了 → replace 退化成空操作（脚本仍打印 ✓），
CI 跑在 ubuntu 上是 LF 所以从未暴露。它第 4 步的 README 版本表占位行也已是死代码（两张表
不存在）。修法另议。

Summary by CodeRabbit

• 文档
  • 更新 0.8.13 版本的变更记录，涵盖密钥与个人信息判据加固、严格范围前缀检索过滤修复，以及写入边界敏感信息扫描。
  • 补充 memory_save 的范围指引、相关问题与拉取请求编号，并完善贡献者致谢和发布说明。
• 版本
  • 将软件包版本号更新至 0.8.13。

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: slow-stack/mneme/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: a2204154-860d-40bb-8392-e508488d245f

📥 Commits

Reviewing files that changed from the base of the PR and between 650675a and 333ac7e.

⛔ Files ignored due to path filters (1)

• dsh-mneme/package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json

📒 Files selected for processing (2)

• dsh-mneme/CHANGELOG.md
• dsh-mneme/package.json

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.

---

📝 Walkthrough

Walkthrough

本次变更新增 0.8.13 发布记录，涵盖修复、功能、工程事项和贡献者信息，并将 package 版本号从 0.8.12 更新为 0.8.13。

Changes

0.8.13 发布更新

Layer / File(s)	Summary
发布记录与版本号 dsh-mneme/CHANGELOG.md, dsh-mneme/package.json	变更记录新增敏感信息判据与 strictScope 修复、写入边界扫描和 memory_save scope 指引，以及工程事项和贡献者信息。package 版本号更新为 0.8.13。

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: heptaspirit

Merge Risk: ⚪ Minimal · up to 333ac

This updates the package’s 0.8.13 release metadata. No actionable merge-blocking issue is established; proceed with normal release checks.

Architecture Summary

Architecture risk: 🔵 Low · up to 333ac

The change affects 1 system.

Changed systems: dsh-mneme

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — dsh-mneme (service) was modified; 2 changed files map to changed impact.

Before / after behavior

• observed — Modified behavior in dsh-mneme/CHANGELOG.md: 新增 0.8.13 发布标题与修复记录，记载敏感信息判据的回溯上界、赋值规则左边界和身份证校验位调整，以及 strictScope 过滤对 entity: / attr: 检索路径的覆盖；旧的 [Unreleased] 标题被版本标题取代，并补入相关 issue / PR 编号。
• observed — Modified behavior in dsh-mneme/CHANGELOG.md: 新增两项功能记录：写入边界的敏感信息扫描及其默认关闭、与 writeAdmission.enforce 的职责区分；以及 memory_save 的 workspace / agent scope 声明指引。条目补入对应 PR 编号。
• observed — Modified behavior in dsh-mneme/CHANGELOG.md: 新增工程记录，说明发版条目清理非公开单号与实验代号、新增贡献者小节，以及 CONTRIBUTING 增补发版惯例。
• observed — Modified behavior in dsh-mneme/CHANGELOG.md: 新增 贡献者 / Thanks 小节，并记录 @heptaspirit 对敏感信息扫描和 memory_save scope 指引的贡献。

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	标题“release: v0.8.13 发布准备”简洁明确，准确概括了本次发布准备的主要变更。
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!