audrey 1.1.0 → 1.1.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.1.1 - 2026-07-10
+
+### npm 12 install compatibility
+
+- Documents and emits a least-privilege global install command that explicitly allows only Audrey's four required dependency lifecycle scripts. This keeps SQLite and local inference working under npm 12's new default-deny install-script policy without enabling arbitrary package scripts.
+- Adds pinned project-level npm 12 approvals for Audrey's current native/runtime dependencies and regression coverage for the CLI guidance.
+- Pins the trusted npm publisher to npm 11.14.1 so the immutable 1.1.0 tag can be recovered safely after npm 12 withheld `better-sqlite3`'s native binding during its first publish attempt.
+
 ## 1.1.0 - 2026-07-09
 
 ### Audrey Autopilot

package/README.md

@@ -34,10 +34,12 @@ The model does not have to remember that a memory tool exists. That is the point
 Install Audrey once, review the hooks once, and then use Codex or Claude Code normally.
 
 ```bash
-npm install -g audrey
+npm install -g audrey --allow-scripts=better-sqlite3,onnxruntime-node,sharp,protobufjs
 audrey install --host auto
 ```
 
+The explicit install-script list is for npm 12's safer dependency policy. It permits only the four packages Audrey needs for SQLite, local inference, and their generated runtime files. With npm 11 or earlier, the shorter `npm install -g audrey` is equivalent.
+
 `auto` configures whichever supported CLIs are installed. You can choose one explicitly:
 
 ```bash
@@ -76,7 +78,7 @@ This is more useful than “the vector search found a vaguely similar error.”
 Try the complete loop without an API key or network call:
 
 ```bash
-npx audrey demo --scenario repeated-failure
+audrey demo --scenario repeated-failure
 ```
 
 ## What Audrey remembers
@@ -127,12 +129,10 @@ Vector candidates are partitioned by agent before nearest-neighbor ranking, so o
 ## See it before installing anything
 
 ```bash
-npx audrey doctor
-npx audrey demo
-npx audrey install --host auto --dry-run
+npm exec --yes --package=audrey --allow-scripts=better-sqlite3,onnxruntime-node,sharp,protobufjs -- audrey demo --scenario repeated-failure
 ```
 
-The dry run prints the MCP and lifecycle-hook configuration for both hosts without changing files.
+That command runs from the npm cache, exercises the full SQLite-backed Guard loop, and leaves host configuration unchanged.
 
 <div align="center">
   <img src="docs/assets/audrey-feature-grid.jpg" alt="Audrey memory continuity, recall, evidence, local storage, and memory-before-action" width="760">
@@ -165,6 +165,13 @@ npm install audrey
 pip install audrey-memory
 ```
 
+For a project install with npm 12, approve Audrey's reviewed dependency scripts in the project root and rebuild once if npm reported that it blocked them:
+
+```bash
+npm install-scripts approve better-sqlite3 onnxruntime-node sharp protobufjs
+npm rebuild
+```
+
 For Autopilot, prefer a global or otherwise stable installation. Hook and MCP configuration pins the actual Node executable and Audrey entrypoint; an ephemeral `npx` cache is not a durable production runtime.
 
 ### Host configuration
@@ -381,7 +388,7 @@ npm run pack:check
 GuardBench currently contains ten local, deterministic pre-action scenarios covering repeated failures, procedures, scope changes, recovery, redaction, conflicting instructions, and noisy stores. The checked-in v1 methodology uses a mock 64-dimensional embedding provider and exists to catch regressions. A perfect local pass is not a claim about real-provider latency or production false-positive rates.
 
 <!-- guardbench-summary:start -->
-Latest local result in this checkout: 10/10 scenarios passed, 100% prevention rate, 0% false-block rate, 0 raw secret leaks, 0 published artifact leaks, and 3.501ms / 20.658ms p50/p95 Guard latency under the mock-provider methodology.
+Latest local result in this checkout: 10/10 scenarios passed, 100% prevention rate, 0% false-block rate, 0 raw secret leaks, 0 published artifact leaks, and 3.075ms / 17.056ms p50/p95 Guard latency under the mock-provider methodology.
 <!-- guardbench-summary:end -->
 
 `benchmarks/perf-snapshot.js` measures encode and hybrid-recall p50/p95/p99 at configurable corpus sizes with machine and provider provenance. Run it on the hardware and embedding provider you plan to operate; hosted-provider latency is dominated by its network round trip.

package/benchmarks/output/adapter-self-test/guardbench-adapter-self-test.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench adapter self-test",
-  "generatedAt": "2026-07-10T15:00:46.455Z",
+  "generatedAt": "2026-07-10T15:19:16.097Z",
   "ok": true,
   "adapter": {
     "name": "Example Allow Adapter",
@@ -27,9 +27,9 @@
     "evidenceRecall": 0.1,
     "redactionLeaks": 0,
     "latency": {
-      "p50Ms": 0.01,
-      "p95Ms": 0.042,
-      "maxMs": 0.042
+      "p50Ms": 0.015,
+      "p95Ms": 0.036,
+      "maxMs": 0.036
     }
   },
   "contract": {

package/benchmarks/output/external/guardbench-external-dry-run.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench external adapter dry-run matrix",
-  "generatedAt": "2026-07-10T15:00:47.009Z",
+  "generatedAt": "2026-07-10T15:19:16.549Z",
   "ok": true,
   "registry": "benchmarks/adapters/registry.json",
   "outRoot": "benchmarks/output/external",

package/benchmarks/output/external/guardbench-external-evidence.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench external evidence verification",
-  "generatedAt": "2026-07-10T15:00:47.285Z",
+  "generatedAt": "2026-07-10T15:19:16.769Z",
   "ok": true,
   "allowPending": true,
   "registry": "benchmarks/adapters/registry.json",

package/benchmarks/output/guardbench-conformance-card.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
   "suite": "GuardBench conformance card",
-  "generatedAt": "2026-07-10T15:00:42.135Z",
+  "generatedAt": "2026-07-10T15:18:56.703Z",
   "sourceDir": "benchmarks/output",
   "manifestVersion": "0.2.0",
   "suiteId": "guardbench-local-comparative",
@@ -25,9 +25,9 @@
     "evidenceRecall": 1,
     "redactionLeaks": 0,
     "latency": {
-      "p50Ms": 3.501,
-      "p95Ms": 20.658,
-      "maxMs": 20.658
+      "p50Ms": 3.075,
+      "p95Ms": 17.056,
+      "maxMs": 17.056
     }
   },
   "conformance": {
@@ -39,21 +39,21 @@
   "integrity": {
     "artifactHashes": {
       "guardbench-manifest.json": "57636ce19fdaa6e50fc3fc961d9e499a9f43632f588c713a9fefe8e8a6fa724c",
-      "guardbench-summary.json": "88cd54e091e5aa89e7ef873a2e440430b3c35eb3f4664d963a56d197cc3691e9",
-      "guardbench-raw.json": "1888c8524d54f10bb403ef09b923cec63376518bf6d202ef271ba895811d37d8"
+      "guardbench-summary.json": "420c3d8188cdc636459ad034d6e5ee3836bdf9e649aa3febe5ce087d681a98bb",
+      "guardbench-raw.json": "46026c7bd5add25bf7aed89357b958b012bcd46549dc7dd6d31362cef0a0e00f"
     },
     "externalRunMetadataHash": null
   },
   "provenance": {
-    "generatedAt": "2026-07-10T15:00:41.781Z",
-    "gitSha": "af2534b9dc5b980fb879e88ca63afd502480dd24",
+    "generatedAt": "2026-07-10T15:18:56.391Z",
+    "gitSha": "27632f13e6231ed526303640247343bb60af86a9",
     "gitDirty": false,
     "node": "v24.18.0",
     "v8": "13.6.233.17-node.50",
     "platform": "linux",
     "arch": "x64",
     "osRelease": "6.17.0-1018-azure",
-    "cpuModel": "AMD EPYC 9V74 80-Core Processor",
+    "cpuModel": "INTEL(R) XEON(R) PLATINUM 8573C",
     "cpuCount": 4,
     "totalMemoryGb": 15.61,
     "embeddingProvider": "mock",