v4.12.0 — MCP client, browser depth, and breadth
Aiden can now integrate with the outside world and operate with more control, honesty, and safety. This is a large release: two major arcs (MCP client, browser depth) plus a wave of breadth and safety work.
🔌 MCP client
Aiden can now connect out to external MCP servers and call their tools.
- Connect over stdio and Streamable HTTP
- Full OAuth 2.0 flow — discovery, dynamic client registration, PKCE, and token refresh
- Per-server resilience: automatic reconnect, circuit breaker, config-driven tuning
- Curated server catalog with one-command install
- MCP tools are model-callable but approval-gated, with results redacted and fenced as untrusted input
🌐 Browser depth
A real state-aware browser layer, built local-first.
- Accessibility-tree snapshots with stable numbered element handles
- Act-by-reference (click / type / fill) with semantic re-resolution when elements go stale
- Destructive-action guard — vanished actions are never blindly retried
- Screenshot-to-vision path for visual page understanding
- Attach to an existing local browser or launch one; multi-tab and dialog handling
- Exfiltration-aware guardrails: secrets are never exposed to the model, private-URL navigation is policed, and destructive actions require confirmation
⚙️ Breadth & safety
- Cross-session search — full-text search over your past sessions
- Posture-aware narrowing of skills and tools to cut prompt size
- Tool-output caps with truncate-then-redact ordering (a secret split across the truncation boundary can't leak)
- Per-session budget enforcement with graceful, zero-overspend finalization
- Honest execution-policy model — file guardrails are advisory, not containment; real containment requires Docker, and Aiden now says so plainly
- Process manager — tracked spawns, reliable tree-kill with no orphans, redacted process listing, reaped on shutdown
- New
/home(live working directory) and/activity(session roll-up) commands - Unified per-turn delivery context across messaging platforms; Discord long-message chunking
🐛 Fixes
- Windows process tree-kill no longer orphans child processes — this also fixes a latent orphan in the MCP transport
Install: npm install -g aiden-runtime · Requires Node 18+ · Windows-first, local-first