Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

aiden-runtime

Package Overview
Dependencies
Maintainers
1
Versions
33
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
Potential malware was recently detected in this package.

Affected versions:

3.16.03.16.13.16.23.17.03.18.0
+6 more

aiden-runtime

Autonomous AI Operating System — Local, Private, Free. Runs on your machine with Ollama.

Source
npmnpm
Version
3.18.0
Version published
Weekly downloads
165
54.21%
Maintainers
1
Weekly downloads
 
Created
Source
█████╗  ██╗██████╗ ███████╗███╗   ██╗
██╔══██╗██║██╔══██╗██╔════╝████╗  ██║
███████║██║██║  ██║█████╗  ██╔██╗ ██║
██╔══██║██║██║  ██║██╔══╝  ██║╚██╗██║
██║  ██║██║██████╔╝███████╗██║ ╚████║
╚═╝  ╚═╝╚═╝╚═════╝ ╚══════╝╚═╝  ╚═══╝

Autonomous AI Operating System

1,500+ Skills • 89+ Tools • 14+ Providers • AGPL-3.0

Windows • Linux • WSL • macOS (API Mode)

Self-Healing • Browser Automation • Terminal Control • Persistent Memory

Latest version Downloads Discord License: AGPL-3.0 Stars npm

Website  ·  Contact  ·  Discord  ·  Download

v3.18 — live dropdown UX · real PC control · smart model failover · anti-confabulation Type / for 63 commands or @ for 61 tools with instant dropdown. Open/close apps, change volume, and control your PC for real — no more fake responses. Smart per-model failover with free-tier defaults. See changelog below.

Why Aiden

Most AI agents answer questions. Aiden executes work.

  • Runs on your machine — local-first, no telemetry, no cloud required
  • Controls your desktop — vision loop, mouse, keyboard, window management
  • Automates any browser — navigate, click, extract via playwright-cli
  • Learns from every session — writes skills from successes, lessons from failures
  • Works fully offline — Ollama support, zero cloud dependency
  • One command to startnpx aiden-os installs, configures, runs everything

Aiden is a local-first AI operating system. It runs entirely on your machine — no cloud account required, no telemetry, no data leaving your hardware unless you configure a cloud provider. It ships with a signed Windows installer, and runs in headless API mode on Linux, WSL, and macOS. Features: 1,400+ composable skills, 80+ built-in tools, a 6-layer memory architecture, self-healing provider routing, and the ability to control your screen, browse the web, run code, send emails, manage files, and hold a full conversation — offline via Ollama.

Platform support

PlatformGUI appAPI + CLISkills available
Windows 10/11✅ signed installerAll 1,400+ (including Windows-only skills)
Linux✅ headless~1380 (Windows-only skills auto-skipped)
WSL 2✅ headless~1380 (Windows-only skills auto-skipped)
macOS✅ headless~1380 (Windows-only skills auto-skipped)

Windows-only skills (clipboard history, Defender, OneNote, Outlook COM, registry, etc.) are tagged platform: windows and are silently skipped on other platforms at load time.

Quick Start

Fastest — npx (no install needed)

npx aiden-os

That's it. Node.js 18+ is the only prerequisite. On first run it asks which AI provider you want (Groq is free), validates your key, saves config to ~/.aiden/app/, and starts both the server and CLI together in one terminal. Subsequent runs skip the wizard and go straight to the assistant.

Or install globally for the aiden command:

npm install -g aiden-os
aiden

Prerequisites (for installer / manual builds)

  • Node.js 18+
  • Git
  • Ollama (optional, for offline mode): ollama.ai

Windows — signed installer

irm aiden.taracod.com/install.ps1 | iex

Or download the signed installer manually. Windows 10/11, 64-bit, ~500 MB disk space.

Linux / WSL / macOS — one-line install

curl -fsSL aiden.taracod.com/install.sh | bash

Manual install (all platforms)

git clone https://github.com/taracodlabs/aiden.git
cd aiden
npm install
cp .env.example .env
# Edit .env — add at minimum one API key (Groq is free: console.groq.com)

Run (manual install)

# Terminal 1 — build and start server
npm run build
npm start

# Terminal 2 — start CLI
npm run cli

After pulling updates (manual install)

git pull
npm run build
npm start

Uninstall

Windows Open Settings → Apps (or Control Panel → Programs) and uninstall Aiden. To also remove user data:

Remove-Item -Recurse -Force "$env:APPDATA\aiden"
Remove-Item -Recurse -Force "$env:LOCALAPPDATA\aiden"

Linux / macOS / WSL

curl -fsSL aiden.taracod.com/uninstall.sh | bash

Or manually:

rm -rf ~/.local/share/aiden ~/.config/aiden
npm uninstall -g devos-ai   # if installed via npm

Minimum .env to get started

GROQ_API_KEY=your_key_here   # free at console.groq.com/keys

Set AIDEN_HEADLESS=true to suppress the Electron GUI when running the packaged app.

Troubleshooting

"Cannot find module" or TypeScript errors

npm run build   # always rebuild after git pull

"npm run serve" not found There is no serve script. Use npm start instead.

Server not responding

# Check if server is running on port 4200
netstat -ano | findstr :4200   # Windows
lsof -i :4200                  # Linux/macOS

Ollama not connecting

ollama serve             # make sure Ollama is running
ollama pull qwen2.5:7b   # pull your chosen model

Changing Ollama model or inference settings (no recompile needed — edit .env):

OLLAMA_MODEL=qwen2.5:7b
OLLAMA_TEMPERATURE=0.3
OLLAMA_CONTEXT_LENGTH=4096
OLLAMA_NUM_GPU=99

Use with any OpenAI client (Open WebUI, Chatbox, Cursor, etc.)

Base URL:  http://localhost:4200
API Key:   none required
Model:     aiden-3.13

Screenshots

Terminal (TUI)

TUI

Full command palette, 1,400+ skills, 89+ tools, automatic provider routing (Groq → OpenRouter → Ollama). Runs in any terminal.

Desktop app

Desktop

Full chat interface with live activity panel. Local-first, connects to Ollama or any of 15+ cloud providers via your own API key.

Memory graph

Memory graph

6-layer memory visualized — every conversation, task, and learned pattern becomes a node in the knowledge graph. Fully local, persisted to disk, searchable.

Features

CategoryWhat Aiden does
Inference & providersLocal Ollama (Llama 3, Mistral, Qwen, Gemma, Phi…) with optional cloud fallback to OpenAI, Anthropic, Groq, Cerebras, NVIDIA NIM, OpenRouter, and more — 15+ providers including custom OpenAI-compatible endpoints
80+ toolsWeb search, file read/write, shell execution, Playwright browser automation (open_browser, browser_click, browser_type, browser_extract, browser_get_url), screen capture & OCR, calendar, email (IMAP/SMTP), code execution sandbox, clipboard, LocalSend LAN transfer, system info
1,400+ skillsComposable plugins each with a SKILL.md prompt, tool implementations, and optional sandbox runner — install per-session or globally. Includes: LocalSend (AirDrop-style LAN transfer), Decepticon security scanner (opt-in), and more
Subagent swarmSpawn N parallel agents on any task; vote, merge, or pick the best result automatically
6-layer memoryEpisodic (in-context), BM25 keyword, vector semantic, procedural (skill), goal tracking, and LESSONS.md permanent-failure moat that grows every session
VoiceSpeech-to-text (Groq → OpenAI → local Whisper.cpp) + text-to-speech (Edge TTS → ElevenLabs → Windows SAPI); full offline voice loop
Channel adaptersDiscord, Slack, Telegram, WhatsApp, Email, Webhook, Twilio — any channel triggers the same agent loop
Computer useScreenshots, screen state reader, GUI automation via keyboard/mouse when asked — full OS control mode

Aiden vs alternatives

FeatureAidenHermesOpenClaw
Windows native installer
Desktop OS control✅ vision + mouse + keyboard
One-command installnpx aiden-os
OpenAI-compatible API/v1/chat/completions
agentskills.io skills✅ 1500+✅ 13K+
Offline (Ollama)
Local web dashboard
Pro license system
Zero CVEs
LicenseAGPL-3.0MITMIT

Architecture

User input (any channel)
        │
        ▼
  ┌─────────────┐
  │  Planner    │  ← breaks task into steps
  └──────┬──────┘
         │
         ▼
  ┌─────────────┐     ┌──────────────────┐
  │  Agent loop │────▶│  Tool dispatcher │──▶ 80+ tools
  │  agentLoop  │     └──────────────────┘
  └──────┬──────┘
         │
         ▼
  ┌─────────────────────────────────┐
  │  Memory (6 layers)              │
  │  episodic · BM25 · vector ·     │
  │  procedural · goal · LESSONS.md │
  └─────────────────────────────────┘
         │
         ▼
  ┌─────────────┐
  │  Provider   │  ← self-healing chain, 15+ providers
  │  router     │
  └─────────────┘
         │
         ▼
     Response (streamed to originating channel)

See ARCHITECTURE.md for a full layer-by-layer breakdown, data flow diagrams, and the skill system design.

Configuration

Copy .env.example to .env in the Aiden data directory.

cp .env.example .env

Key environment variables:

VariableDefaultNotes
OLLAMA_HOSThttp://127.0.0.1:11434Override if Ollama runs on a different host/port
OLLAMA_MODELmistral-nemo:12bDefault chat model
ANTHROPIC_API_KEYOptional cloud fallback
OPENAI_API_KEYOptional cloud fallback
GROQ_API_KEYFree tier: fast Llama 3 inference
DAILY_BUDGET_USD5.00Hard cap on daily cloud API spend

See .env.example for the full list of ~90 variables covering voice, messaging integrations, search, computer use, and more.

Use with any OpenAI client

Aiden exposes an OpenAI-compatible API at localhost:4200. Point any OpenAI client at Aiden to get the full 89-tool agent instead of raw GPT:

SettingValue
Base URLhttp://localhost:4200
API Key(none required locally)
Modelaiden-3.13

Works with: Open WebUI · LibreChat · Chatbox · Continue.dev · Cursor · TypingMind · any app using the OpenAI SDK.

# Python example — zero config
from openai import OpenAI
client = OpenAI(base_url="http://localhost:4200", api_key="none")
response = client.chat.completions.create(
    model="aiden-3.13",
    messages=[{"role": "user", "content": "search news about AI agents"}]
)
print(response.choices[0].message.content)

Optional: set AIDEN_API_KEY=your-secret in .env to require Bearer token authentication.

Security & Sandbox

Aiden includes an opt-in Docker sandbox backend that runs shell_exec and run_python tool calls inside isolated containers instead of directly on the host.

Requirements

Modes

AIDEN_SANDBOX_MODEBehaviour
off (default)Tools run on the host — no Docker required
autoTry Docker first; silently fall back to host if Docker is unavailable
strictRequire Docker — error if Docker is not available

Enable

# In .env
AIDEN_SANDBOX_MODE=auto

Or toggle live from the Aiden CLI without restarting:

/sandbox auto     # switch to auto mode
/sandbox strict   # require Docker
/sandbox off      # disable
/sandbox status   # show current mode + Docker availability
/sandbox build    # pre-build the container image

What the container provides

  • --network=none — no outbound network access (configurable per-call)
  • --memory=512m --cpus=1 — hard resource caps
  • --read-only --tmpfs /tmp — immutable FS, only /tmp is writable
  • --rm — container removed immediately after each tool call
  • Host workspace/ bind-mounted at /workspace so results are accessible

Commands

Start Aiden

CommandDescription
npx aiden-osInstall, configure, and start (recommended)
npm startStart API server (port 4200)
npm run cliStart TUI (connect to running server)
npm run buildRebuild after source changes
aiden --reconfigureRe-run setup wizard, change providers

In-chat commands

CommandDescription
/helpShow all commands
/switch <provider>Change primary provider live
/budgetShow daily token spend + remaining
/budget set <n>Set daily limit in USD
/memoryView distilled facts and memory stats
/memory search <q>Search remembered facts
/profileView structured user profile
/failed [reason]Teach Aiden from a wrong answer
/skillsList loaded skills
/install <skill>Install from community registry
/publish <skill>Publish skill to registry
/skills validate <n>Validate agentskills.io compliance
/sandbox statusDocker sandbox mode
/sandbox autoEnable sandboxed shell/python
/permissionsView permission mode
/permissions askRequire approval for destructive ops
/permissions allowAllow all operations silently
/retryRetry last query
/exitSave memory and exit

Contributing

Contributions are welcome — see CONTRIBUTING.md for the full guide.

  • Bug fixes and new skills are the easiest entry points
  • All contributors sign the CLA once via PR comment
  • Follow Conventional Commits
  • Run npx tsc --noEmit before opening a PR

Resources

Download installerLatest release
Releases & changeloggithub.com/taracodlabs/aiden-releases
LicenseAGPL-3.0 core · Apache-2.0 skills

Changelog

v3.18.0 — 2026-04-30

Live dropdown UX (Hermes-style)

  • Type / for instant command dropdown (63 commands)
  • Type @ for tool dropdown (61 tools)
  • Prefix-match filter, arrow nav, Tab to select, Esc to close

Real PC control

  • close chrome / spotify / notepad → actually closes via taskkill
  • increase/decrease volume by N → actually changes
  • mute/unmute → actually toggles
  • 30+ app name → exe map
  • system_volume detects intent from any natural input

YouTube auto-plays

  • play X on youtube → opens browser, auto-clicks first result
  • Bypasses fast-path that was blocking it

Anti-confabulation rules

  • SOUL.md updated: never claim actions completed without tool calls
  • InstantAction shortcuts that faked actions removed
  • Honest fallback messages when providers fail

Smart provider failover

  • 3-strike rule: provider disabled for 15 min after 3 rate limits
  • Permanent disable on 401/403 (invalid key)
  • All cloud failed → automatic Ollama fallback

Smart model selection

  • Free tier defaults per provider (Llama 70B free, Gemini 2.5 Flash, etc.)
  • Per-model failover within provider before marking provider rate-limited
  • Override with PROVIDER_MODEL env var
  • /models command shows per-provider table with FREE/PAID badges

Server logs no longer leak into chat

  • console.log redirected to stderr
  • CLI output is clean even with both in same terminal

Skill loader fix

  • 1,484 skills now load (was blocking 1,445 due to overly broad patterns)

Known issues — fixing in v3.19

  • Cross-provider failover not always reliable (Groq may not try other providers)
  • Real-time state queries (now playing, open tabs) need dedicated tools
  • YouTube auto-click occasionally fails on slow-loading pages

v3.17.0 — 2026-04-28

Local web dashboard

  • Browser UI at localhost:4200/ui — no terminal needed
  • Chat, Providers, Memory, Skills panels
  • Live SSE streaming, markdown rendering

Plugin system

  • Drop workspace/plugins/.js → auto-loads
  • preTool/postTool hooks, custom tool registration
  • Session lifecycle hooks (onSessionStart/onSessionEnd)
  • Hot-reload with /plugins reload
  • Examples: audit-log.js, hello-tool.js

MCP server mode

  • Expose Aiden's tools to Claude Code, Cursor, VS Code
  • Run: node dist-bundle/cli.js mcp
  • 28 safe tools exposed by default
  • MCP_ALLOW_DESTRUCTIVE=true for full tool access
  • Config examples in docs/mcp/

Bug fixes

  • Dashboard chat showed "(no response)" for every message — SSE event field names in the browser client (ev.type) didn't match the server's wire format (ev.token, ev.done, ev.tool). All event handlers rewritten to match actual shapes.
  • SOUL.md provider honesty: removed stale BayOfAssets reference, added explicit rule against claiming Ollama when running on Groq/OpenRouter.

v3.16.0 — 2026-04-28

One-command install

  • npx aiden-os — zero-install launcher; works on Windows, macOS, Linux (Node.js 18+)
  • aiden-os npm package bootstraps aiden-runtime automatically, no git clone needed
  • Setup wizard on first run with --reconfigure flag to re-run anytime

Security

  • Shell blocklist — dangerous commands flagged before execution
  • Permission mode — explicit user approval gate for destructive actions
  • Token budget enforcement — per-request ceiling to prevent runaway loops

Memory

  • Conflict resolution — contradictory memories detected and reconciled automatically
  • /memory command — inspect, edit, and prune the memory store from the CLI

UX

  • Aiden branded banner replaces DevOS; orange #FF6B35 identity throughout CLI
  • --reconfigure flag to re-run first-time setup without reinstalling

v3.15.0 — 2026-04-28

Browser & Automation

  • Centralised Playwright session (core/playwrightBridge.ts) — single persistent Chromium context shared across all browser tools, idle auto-close after 5 min, clean shutdown on SIGINT/SIGTERM
  • browser_get_url — new tool to read the URL currently loaded in the browser
  • All browser tools now in ALLOWED_TOOLS and NO_RETRY_TOOLS; send_file_local / receive_file_local added to planner allow-list

Community & OSS

  • CONTRIBUTING.md, issue templates (bug, feature, skill submission), CLA workflow
  • Public roadmap (docs/ROADMAP.md), architecture docs (docs/ARCHITECTURE.md), skill development guide
  • GitHub labels automated + 5 good-first-issues pinned

New skills

  • LocalSend — AirDrop-style LAN file transfer (send_file_local / receive_file_local); works over WiFi with no cloud
  • Security scanner — opt-in Decepticon integration with safety guards for scanning your own servers

Security

  • 9 npm audit vulnerabilities resolved (safe + vitest chain)
  • Security headers + rate limiting on aiden.taracod.com landing worker (CSP, HSTS, X-Frame-Options)

v3.14.0 — 2026-04-27

Ecosystem & Interoperability

  • OpenAI-compatible API — /v1/chat/completions + /v1/models. Point Open WebUI, LibreChat, Cursor, or any OpenAI SDK at localhost:4200 and get Aiden's full 89-tool agent (not just raw LLM inference)
  • agentskills.io compatibility — skills now ship with skill.json manifest. Compatible with Hermes, OpenClaw, and any agentskills.io agent. 1,515 existing skills backfilled automatically
  • Streaming tool output — shell commands, Python scripts, and browser extraction stream live progress lines as they execute. Set AIDEN_SHOW_TOOL_OUTPUT=false to suppress

v3.13.0 — 2026-04-27

Community & Intelligence

  • Public skill registry — /install <skill> pulls from skills.taracod.com; browse with /skills registry <query>; publish with /publish <skill>
  • Deep GEPA — learns from failures, not just successes; /failed analyzes the exchange trace, writes a permanent lesson to LESSONS.md, degrades responsible skill confidence; skills failing 3× are auto-deprecated
  • Honcho user modeling — structured cross-session profile (identity, projects, goals, preferences); only the relevant slice injected per query; view and edit with /profile
  • Docker sandbox — opt-in sandboxed shell_exec and run_python execution; AIDEN_SANDBOX_MODE=auto|strict|off; containers run --network=none --memory=512m --cpus=1 --read-only
  • GitHub CI/CD — TypeScript type-check + full build + secret scan on every PR to main
  • CODEOWNERS — sensitive files auto-request maintainer review on every PR
  • Sponsor button — Razorpay + GitHub Sponsors

v3.12.0 — 2026-04-26

Memory & Agents

  • Post-task skill writer (GEPA-lite) — writes a new skill after every multi-step success
  • Session-end memory distillation — 5–15 durable facts extracted per session
  • Progressive token budget — tool names only; schema loaded on demand
  • Real parallel subagents — isolated context, LLM synthesis pass
  • Streaming verbs — "Pondering…", "Hunting…" in real time
  • Real scheduler — remind me in N minutes actually waits
  • Path C-lite — YouTube/Google/DDG/Bing search + click first result
  • Electron auto-updater
  • Identity honesty — transparent about inference provider
  • Capacity fallback — auto-switches provider on 503/rate-limit

v3.11.0 — 2026-04-25

Custom provider routing

  • Full support for custom OpenAI-compatible endpoints via customProviders in devos.config.json — add any endpoint with a baseUrl, apiKey, and model; no code changes required
  • Fixed silent Groq fallback bug in callLLM: custom providers now correctly route to their configured baseUrl instead of falling back to the Groq URL
  • Fixed raceProviders pin-first logic: primaryProvider is now resolved from customProviders list when not found in providers.apis
  • Fixed health/status endpoint (/api/providers) to include custom providers in the returned list, tier-sorted

BayOfAssets Claude Haiku 4.5 as default primary

  • Swapped default primary provider to BayOfAssets Claude Haiku 4.5 (claude-haiku-4-5) at tier 1
  • Groq and Gemini remain as tier-2 fallback chain

Memory & greeting

  • Fixed buildGreetingPreamble double-label bug: "Active goals: Active goals:\n..." → compact single-line goal titles
  • Added empty-string guard on greeting reply: blank preamble no longer produces "Currently tracking: . What do you need?"

v3.10.0 — 2026-04-09

See releases page for older changelogs.

Sponsors

Aiden is built and maintained by one person. If it saves you time, consider sponsoring:

Sponsor on GitHub Donate via Razorpay

License

ComponentLicense
Core (src/, cli/, api/, core/, providers/, dashboard-next/)AGPL-3.0-only
Skills (skills/)Apache-2.0

Commercial use

Aiden's core is AGPL-3.0. You can self-host, modify, and study it freely. Embedding it in a commercial product or offering it as a hosted service requires either releasing your modifications under AGPL-3.0 or purchasing a commercial license.

Skills in skills/ are Apache-2.0 and can be used in commercial products without copyleft obligations.

For commercial licensing and enterprise deployments: aiden.taracod.com/contact?type=enterprise

Built by Taracod · Built by Shiva Deore · AGPL-3.0

Keywords

ai

FAQs

Package last updated on 29 Apr 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts