
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
aether-agents
Advanced tools
Open-source terminal coding agent for hosted models or local Ollama, with repository-aware tools, operator-controlled execution, and verified results.
Aether Agent is an open-source terminal coding agent that edits your repository, runs your chosen checks, and reports verified results through hosted models or local Ollama.
Quickstart · Choose a model route · Why Aether · Commands · Security · Docs
Requires 0.3.2 or newer. Check the installed CLI with
aether --version.
From the repository you want Aether to work on:
npm install -g aether-agents@latest --ignore-scripts
aether auth login
aether agent --test-cmd "npm test" "fix the failing test"
Prefer Python tooling? pipx install aether-agent installs the same CLI and forwards
every command to it, so aether-agent code "..." and aether code "..." do the same
work. See packages/pypi-cli.
The third command gives Aether one task and one verification command. The local
host runs npm test; its real exit code determines whether the result is verified.
Both routes keep workspace tools, permission decisions, session records, and verification on the CLI host. The difference is where model inference runs.
Sign in, then inspect the models available to your account:
aether auth login
aether models
Hosted runs send the task and context you provide to the Aether API. Repository tools and verification still execute in your checkout. Hosted coding is account- and capability-dependent; if the service cannot provide the required local- authority protocol, the CLI refuses the run instead of silently moving tool execution to the server.
Install Ollama, start it, then prepare and select a model:
aether setup --local
aether local pull qwen2.5-coder:7b --yes
aether local use qwen2.5-coder:7b --yes
aether agent --local --test-cmd "npm test" "fix the failing test"
This route requires no Aether account. With Ollama on the default
http://localhost:11434 endpoint, inference can stay on the machine after Ollama
and the model are downloaded. If OLLAMA_HOST points elsewhere, prompts go to
that configured endpoint. Network-capable tools remain separate, permissioned
actions.
--test-cmd so completion is tied to a real
command and exit code; later repository changes make that evidence stale.The dated public snapshot marks Aether Neo, DeepSeek V4, GPT-5.4/5.5/5.6, and
Claude 4.5/4.8/5 text entries as available at the catalogue level. That is not an
account entitlement: aether models is the authoritative live result for the
signed-in account. Kimi K2.6/K3 and Gemma 4 are catalogued but marked
unavailable in the current snapshot, so they are not presented here as usable.
Local Ollama availability is independent of that hosted catalogue and depends on the models installed at the configured Ollama endpoint.
A dated, sanitized offline fallback snapshot is available as HTML, JSON, and Markdown. It was generated at 2026-08-23T00:00:00.000Z from Cloud public projection model-catalogue-v1 with verified digest sha256:80ba3ba1144d301e2cca407ceced74cb2b371f1da6e3982b87305ff12a3d4712. Listed availability is not an account entitlement; use aether models while signed in.
| Command | Purpose |
|---|---|
aether auth login | Sign in for hosted model access. |
aether agent [task] | Run the coding agent or open its REPL. |
aether agent --local [task] | Run through the configured Ollama endpoint. |
aether models | Show the hosted models visible to the signed-in account. |
aether local doctor|models|use|pull | Diagnose and manage local Ollama. |
aether sessions | Inspect and continue project-scoped sessions. |
aether review | Inspect changes and current verification evidence. |
aether mcp | List, diagnose, or repair configured MCP servers. |
aether doctor | Diagnose the configured environment. |
aether ship | Preview and approve branch and pull-request publication. |
Use aether help <command> or the generated
command reference for flags, slash commands,
environment variables, and exit codes.
aether ship prints its branch, commit, destination, and pull-request plan
before acting. --yes alone does not grant publication authority.Read SECURITY.md for supported versions, the security boundary, and private vulnerability reporting.
Other Aether web and desktop products are separate surfaces; this CLI does not claim cross-product session continuation.
The repository and published package are versioned independently. Use the live
badge or npm view aether-agents version for the npm latest dist-tag, and
aether --version for the installed CLI.
The release record, release notes, and operator packet preserve detailed release and package evidence.
For a source build, Node.js 24 or newer is required:
git clone https://github.com/AetherAI3/aether-agent.git
cd aether-agent
npm ci --ignore-scripts
npm run build
npm link
npm ci --ignore-scripts
npm run typecheck
npm test
npm run smoke
npm run verify:production
npm run docs:check
npm run release:truth
npm pack --dry-run
See CONTRIBUTING.md before opening a pull request. The package has no runtime dependencies; TypeScript and Node types are development-only.
Apache-2.0 — use it, fork it, and ship it. The license covers the code, not the Aether name or hosted service (LICENSE · NOTICE.md).
FAQs
Open-source terminal coding agent for hosted models or local Ollama, with repository-aware tools, operator-controlled execution, and verified results.
We found that aether-agents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.