agent-procedures 0.2.0 → 0.3.1

package/README.md

@@ -52,13 +52,26 @@ The key gets checked before it's saved, so a typo fails right away instead of a
 ```
 .reflex/
   config.json        # settings, not memory
-  procedures.jsonl   # what it remembered
+  procedures.jsonl   # stable memory (commit this)
   runs.jsonl         # optional run outcomes
-  engine/            # the runtime
+  runtime.js         # the engine, one bundled file — do not edit
+  pending.jsonl      # ingest buffer (local, gitignored)
+  processing.jsonl   # batch the groomer is reviewing right now (local)
+  groomer.lock       # single-flight guard for the groomer (local)
   traces/            # scratch for the current turn
 ```
 
-`traces/` gets added to `.gitignore`. **Commit everything else**, including `.claude/settings.json` (the hook wiring), so anyone who clones the repo gets the same memory. If you upgrade the package, run `init` again to refresh the engine.
+The hot path only appends to `pending.jsonl`. A background groomer renames that buffer to `processing.jsonl`, reviews it, and merges keepers into `procedures.jsonl`. Recall reads all three, so memory works before grooming finishes.
+
+Init ignores everything under `.reflex/` except `config.json`, `procedures.jsonl`, `runs.jsonl`, and `runtime.js`. **Commit those four files**, plus `.claude/settings.json` (the hook wiring), so anyone who clones the repo gets the same memory. If you upgrade the package, run `init` again. That overwrites `runtime.js`.
+
+## Secrets
+
+Reflex sanitizes prompts and tool targets before writing traces. Inline credentials it can identify are promoted to environment requirements, so a stored procedure keeps `npm run migrate` and records that it needs `DATABASE_URL` instead of storing the URL value. Recall tells the agent which variables must already be set.
+
+Reflex also checks for common provider credentials using signatures ported from Gitleaks. If it detects a secret that it cannot safely parameterize, it drops that turn instead of writing a procedure or sending it to the groomer.
+
+Secret detection is defense in depth, not a guarantee. Do not put credentials directly in prompts or command lines; use environment variables or a secret manager.
 
 ## Adding a harness
 

package/bin/cli.js

@@ -25,7 +25,7 @@ if (command === "init") {
     console.log(`  .reflex/config.json       ${results.config}`);
     console.log(`  .reflex/procedures.jsonl  ${results.procedures}`);
     console.log(`  .reflex/runs.jsonl        ${results.runs}`);
-    console.log(`  .reflex/engine/           ${results.engine}`);
+    console.log(`  .reflex/runtime.js        ${results.runtime}`);
     console.log(`  .gitignore                ${results.gitignore}`);
     console.log(`  hooks (${harness || "claude"})            ${results.hooks}`);
     process.exit(0);