Aiden Recent Updates

[shivadeore111-design]

We’ve been feeding Aiden a little too much coffee lately.

Here’s what shipped:

v3.17.0 is live

→ MCP server mode
Claude Code, Cursor, and VS Code can now borrow Aiden’s tools instead of pretending they can do everything alone

→ Local dashboard improvements (/ui)
Chat, memory, providers, skills — still beta, but now less emotionally unstable

→ Plugin system upgrades
Hot-load .js plugins from workspace/plugins/

→ Dashboard fix
“No response” bug fixed
Aiden has decided to communicate again

→ Provider honesty improvements
Updated SOUL.md so providers stop acting like they’re all equally innocent

Permission System v1 🔒

This one is big.

Added:

→ permissions.yaml
→ shell allow/deny rules
→ filesystem scopes
→ browser restrictions
→ file access controls
→ audit logging
→ hot reload support

New commands:

/permissions
/permissions reload
/permissions audit
/permissions edit

Basically:
less “YOLO, run it”
more “maybe let’s not delete production”

Security Hardening

→ default bind is now 127.0.0.1
→ dangerous endpoints are localhost-only
→ CORS tightened
→ safer execution defaults
→ plugin safety improvements

Turns out “it works on my machine” is not a security policy.

So we fixed that.

Plugin System Cleanup

→ pluginLoader wins
→ old plugin system gently sent to retirement
→ hot reload support
→ cleaner lifecycle hooks
→ less chaos

Architectural therapy is going well.

Skill Registry is Live 🔥

→ skills.taracod.com/skills

Currently empty, which is perfect because every great marketplace starts with mild existential silence

We’re fixing that next.

Landing Page Improvements

Updated aiden.taracod.com

npm + Release Shipping

Published:

→ aiden-runtime@3.17.0
→ aiden-os@3.17.0

GitHub: https://github.com/taracodlabs/aiden