Evilander/Audrey

npm install -g audrey --allow-scripts=better-sqlite3,onnxruntime-node,sharp,protobufjs
audrey install --host auto
pip install audrey-memory

Usage

• •Install once, review hooks once, restart the host, then use Codex or Claude Code normally; Codex asks to trust non-managed hooks once via /hooks.
• •Audrey's PreToolUse Guard races an internal timeout ahead of the 30s host deadline and is fail-open by default; set AUDREY_HOOK_FAIL_CLOSED=1 to deny on failure.
• •Try the full loop without any API key: `audrey demo --scenario repeated-failure`.
• •For production, run the REST sidecar (`AUDREY_AGENT=... audrey serve`) behind your own auth and rate limiting.

Key features

• ✓Exact action-failure Guard receipts: a failure only blocks the same fingerprint until the exact action succeeds, avoiding broad 'one Bash failure means all Bash is suspect' behavior.
• ✓Episode/semantic/procedural memory with confidence, provenance, contradiction detection, decay and consolidation.
• ✓Local-first: SQLite + FTS5 + sqlite-vec store with local 384-dim embeddings by default; cloud embedding/LLM optional.
• ✓22 MCP tools plus a REST sidecar (encode/recall/capsule/preflight/guard/dream) with JavaScript and Python clients.
• ✓Agent-scoped vector partitions and final-only retrieval bookkeeping so hidden candidates don't reinforce themselves.

Best for

Teams that want cross-session agent continuity plus a preventable-action Guard on Codex and Claude Code, with memory staying on local hardware.

Caveats

• ⚠At-rest encryption, tenant authorization, rate limiting and regulated retention are deployment responsibilities, not built-in.
• ⚠Admin export/import/forget/promote surfaces are disabled unless AUDREY_ENABLE_ADMIN_TOOLS=1.
• ⚠Codex hook interception is a guardrail, not a complete shell-policy boundary (some unified_exec paths are not intercepted).
• ⚠Exact npm12 install needs an explicit install-script allowlist (better-sqlite3, onnxruntime-node, sharp, protobufjs).
• ⚠MIT licensed.