aiden-runtime 4.0.0 → 4.0.1

package/README.md

@@ -59,7 +59,7 @@ Local-first · Self-healing routing · Browser & terminal control · Persistent
 <p align="center">
   <img src="https://img.shields.io/badge/Vitest-4-6e9f18?logo=vitest&logoColor=white&style=for-the-badge" alt="Vitest 4" />
   <img src="https://img.shields.io/badge/esbuild-bundler-ffcf00?logo=esbuild&logoColor=black&style=for-the-badge" alt="esbuild" />
-  <img src="https://img.shields.io/badge/electron--builder-NSIS-47848f?style=for-the-badge" alt="electron-builder" />
+  <img src="https://img.shields.io/badge/install-npm%20global-cb3837?logo=npm&logoColor=white&style=for-the-badge" alt="npm install -g aiden-runtime" />
 </p>
 
 <p align="center">
@@ -139,7 +139,7 @@ Most AI agents answer questions. Aiden runs work end-to-end on your machine.
 - **Plugin extension** — drop a plugin into `<aiden-home>/plugins/` and call `ctx.commandRegistry.register()` to add slash commands without touching core
 - **Open source** — AGPL-3.0 core, Apache-2.0 skills. Read every line, modify anything, contribute back.
 
-Aiden is a local-first AI operating system. It runs entirely on your machine — no cloud account required, no telemetry, no data leaving your hardware unless you configure a cloud provider. It ships with a signed Windows installer, Linux AppImage and .deb, and runs in headless API mode on macOS. Features: 68 bundled skills, 42 built-in tools across 11 categories, multi-layer memory architecture, self-healing provider routing across 19 providers, the ability to control your screen, browse the web, run code, send emails and messages, manage files, and hold a full conversation — offline via Ollama.
+Aiden is a local-first AI operating system. It runs entirely on your machine — no cloud account required, no telemetry, no data leaving your hardware unless you configure a cloud provider. It installs as a global npm package (`aiden-runtime`, ~16 MB) on Windows, Linux, WSL, and macOS — Node.js 18+ is the only prerequisite. Features: 68 bundled skills, 42 built-in tools across 11 categories, multi-layer memory architecture, self-healing provider routing across 19 providers, the ability to control your screen, browse the web, run code, send emails and messages, manage files, and hold a full conversation — offline via Ollama.
 
 ---
 
@@ -164,12 +164,14 @@ For commercial deployments with support and indemnification, see [aiden.taracod.
 
 ## Platform support
 
-| Platform | GUI app | API + CLI | Skills available |
-|---|---|---|---|
-| **Windows 10/11** | ✅ signed installer | ✅ | All 68 (including Windows-only skills) |
-| **Linux** | ✅ AppImage / .deb | ✅ headless | ~62 (Windows-only skills auto-skipped) |
-| **WSL 2** | — | ✅ headless | ~62 (Windows-only skills auto-skipped) |
-| **macOS** | — | ✅ headless | ~62 (Windows-only skills auto-skipped) |
+All platforms use the same npm-based install path. Node.js 18+ is the only prerequisite.
+
+| Platform | Install | Skills available |
+|---|---|---|
+| **Windows 10/11** | ✅ `npm install -g aiden-runtime` | All 68 (including Windows-only skills) |
+| **Linux** | ✅ `npm install -g aiden-runtime` | ~62 (Windows-only skills auto-skipped) |
+| **WSL 2** | ✅ `npm install -g aiden-runtime` | ~62 (Windows-only skills auto-skipped) |
+| **macOS** | ✅ `npm install -g aiden-runtime` | ~62 (Windows-only skills auto-skipped) |
 
 Windows-only skills (clipboard history, Defender, OneNote, Outlook COM, registry, Task Scheduler, etc.) are tagged `platform: windows` and silently skipped on other platforms at load time.
 
@@ -224,18 +226,18 @@ npm install -g aiden-runtime
 aiden
 ```
 
-### Prerequisites (for installer / manual builds)
+### Prerequisites (all platforms)
 - Node.js 18+
-- Git
+- Git (only for the manual install path below)
 - Ollama (optional, for offline mode): [ollama.ai](https://ollama.ai)
 
-### Windows — signed installer
+### Windows — one-line install
 
 ```powershell
 irm aiden.taracod.com/install.ps1 | iex
 ```
 
-Or [download the signed installer](https://github.com/taracodlabs/aiden-releases/releases/latest) manually. Windows 10/11, 64-bit, ~500 MB disk space.
+The installer verifies Node.js 18+ then runs `npm install -g aiden-runtime`. Same package as `npx aiden-runtime` above; just adds the `aiden` command to your PATH so you can launch from any terminal.
 
 ### Linux / WSL / macOS — one-line install
 
@@ -648,7 +650,7 @@ Both the terminal CLI and the browser dashboard (`localhost:4200/ui`) expose the
 
 - **TypeScript 5.9** — strict mode, full typing across core, providers, CLI, API.
 - **Node.js 18+** — runtime; `node-fetch` not needed (built-in `fetch`).
-- **Electron 41** — Windows NSIS installer, Linux AppImage + .deb.
+- **Electron 41** — optional desktop wrapper; primary install is npm-based.
 - **Next.js (app router)** — `dashboard-next/` for the browser UI.
 - **React 18** — dashboard component model.
 - **Playwright 1.58** — browser automation backbone.
@@ -658,7 +660,7 @@ Both the terminal CLI and the browser dashboard (`localhost:4200/ui`) expose the
 - **croner** — cron scheduler.
 - **discord.js**, **@slack/web-api**, **whatsapp-web.js**, **twilio**, **nodemailer**, **imap-simple** — channel adapters.
 - **Vitest 4** — test runner; ~1,500 unit + integration tests.
-- **esbuild** + **electron-builder** — build pipeline.
+- **esbuild** — bundler for the npm package; **electron-builder** — optional desktop wrapper.
 - **Cloudflare Workers** — landing page + license server + install-script proxy.
 
 ---

package/dist/core/permissionSystem.js

@@ -53,7 +53,7 @@ exports.permissionSystem = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const js_yaml_1 = __importDefault(require("js-yaml"));
-const minimatch_1 = __importDefault(require("minimatch"));
+const minimatch_1 = require("minimatch");
 // ── PermissionSystem ──────────────────────────────────────────
 class PermissionSystem {
     constructor() {
@@ -136,7 +136,7 @@ class PermissionSystem {
             if (!p.includes('*') && !p.includes('?') && !p.includes('[')) {
                 return normalized.toLowerCase().startsWith(p.toLowerCase().replace(/\s*$/, ''));
             }
-            return (0, minimatch_1.default)(normalized, p, { dot: true, matchBase: true, nocase: true });
+            return (0, minimatch_1.minimatch)(normalized, p, { dot: true, matchBase: true, nocase: true });
         });
     }
     // ── Audit ────────────────────────────────────────────────────

package/dist/core/toolRegistry.js

@@ -68,7 +68,7 @@ const paths_1 = require("./paths");
 const computerControl_1 = require("./computerControl");
 const webSearch_1 = require("./webSearch");
 const conversationMemory_1 = require("./conversationMemory");
-const minimatch_1 = __importDefault(require("minimatch"));
+const minimatch_1 = require("minimatch");
 const morningBriefing_1 = require("./morningBriefing");
 const marketDataTool_1 = require("./tools/marketDataTool");
 const companyFilingsTool_1 = require("./tools/companyFilingsTool");
@@ -124,7 +124,7 @@ const DENIED_PATHS = [
 ];
 function isPathDenied(filePath) {
     const normalized = normalizeFilePath(filePath);
-    return DENIED_PATHS.some(pattern => (0, minimatch_1.default)(normalized, pattern, { dot: true }));
+    return DENIED_PATHS.some(pattern => (0, minimatch_1.minimatch)(normalized, pattern, { dot: true }));
 }
 // ── Command deny rules ────────────────────────────────────────
 const DENIED_COMMANDS = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aiden-runtime",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "publishConfig": {
     "access": "public"
   },
@@ -61,9 +61,9 @@
     "dev": "electron electron/main.js",
     "build": "tsc --outDir dist && npm run build:cli && npm run build:api",
     "prebuild:cli": "node scripts/inject-version.js",
-    "build:cli": "esbuild cli/aiden.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/cli.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core",
+    "build:cli": "esbuild cli/aiden.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/cli.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core --external:@aws-sdk/client-s3",
     "prebuild:api": "node scripts/inject-version.js",
-    "build:api": "esbuild api/entry.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/index.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core",
+    "build:api": "esbuild api/entry.ts --bundle --platform=node --target=node18 --outfile=dist-bundle/index.js --external:electron --external:cpu-features --external:ssh2 --external:bcrypt --external:playwright --external:playwright-core --external:@aws-sdk/client-s3",
     "prepublishOnly": "npm run typecheck && npm run build",
     "typecheck": "tsc --noEmit",
     "publish:beta": "npm publish --tag beta",
@@ -233,7 +233,7 @@
     "@types/twilio": "^3.19.2",
     "@types/ws": "^8.18.1",
     "archiver": "^7.0.1",
-    "axios": "^1.13.5",
+    "axios": "^1.15.2",
     "bcrypt": "^6.0.0",
     "better-sqlite3": "^12.9.0",
     "blessed": "^0.1.81",
@@ -255,7 +255,7 @@
     "kleur": "^4.1.5",
     "marked": "^15.0.12",
     "marked-terminal": "^7.3.0",
-    "multer": "^1.4.5-lts.2",
+    "multer": "^2.1.1",
     "nodemailer": "^8.0.3",
     "open": "^11.0.0",
     "ora": "^9.3.0",
@@ -272,12 +272,20 @@
     "whatsapp-web.js": "^1.26.0",
     "ws": "^8.20.0"
   },
+  "overrides": {
+    "basic-ftp": "^5.3.1",
+    "ip-address": "^10.1.1",
+    "semver": "^7.5.2",
+    "postcss": "^8.5.10",
+    "hono": "^4.12.16",
+    "minimatch": "^9.0.9"
+  },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
     "@types/blessed": "^0.1.27",
     "@types/dockerode": "^4.0.1",
     "@types/js-yaml": "^4.0.9",
-    "@types/multer": "^1.4.12",
+    "@types/multer": "^2.0.0",
     "@types/node": "^25.3.0",
     "@types/nodemailer": "^7.0.11",
     "@types/pdf-parse": "^1.1.4",