Aion is yours from end to end. It lives on a machine you choose, remembers you in files you can open, and does nothing you haven’t allowed. The rules are yours to write, and Core’s code will be yours to read too.
One Core. Every Link.
Core holds the state, the memory, the tools and the rules. A Link shows what Core is doing and sends what you decide.
Desktop appWindows today. macOS and Linux next.
WebAny browser, your phone too.
TerminalA TUI and a CLI.
Aion Core
State
Memory
Tools
Approvals
/v1 · HTTP + WebSocket
Phone appAion in your pocket.
Browser extensionAion in your own browser.
SDKPlugins for what you build.
TokenHold, talk, release.
Dashed: planned, not built yet.
What it needs.
Core is one Node.js program and a folder of files. The model runs at the provider you pick, so no GPU is needed.
Docker
One image for amd64 and arm64.
$ docker compose up
Starts in 7.1 s with a realistic data set.
Raspberry Pi
The arm64 image, tested in 2 CPUs and 2 GB of memory.
280 MiB idleof 2 GB
Ready in 21 s in that Pi-sized test.
A VPS
Any Linux server with Docker, x64 or arm64.
Your devices pair with a 6-digit code and reach it over /v1.
Your PC
Windows with Node.js 24, or Linux with Docker.
The Desktop app reaches a Core on the same machine or anywhere else.
472MiB
idle after a restart with 3,000 chats
37s
to restart with 3,000 chats and 670,000 events
2.7MB
of log per 1,000 short turns
What it does today.
Built and in daily use. Each tile replays an example; none is connected to a live Core.
Automations that tell the truth.
Every run says whether it ran, what it produced, whether it was delivered, what it cost and why it stopped.
Morning briefingevery day at 07:30 · $0.25 a run, $2 a day
RunRanProducedDeliveredCost
Mon 07:30Ran: yesProduced: yesDelivered: yes$0.04
Delivered.
Tue 07:30Ran: yesProduced: with a warningDelivered: yes$0.06
Built from incomplete data: one search failed.
Wed 07:30Ran: yesProduced: noDelivered: no$0.25
Budget reached. The job is paused.
Runs start on a schedule today; webhook, email, terminal and file triggers come next.
Fast where you feel it.
A click shows its result in under 100 ms. The ••• menu opens in under 50.
Open a chat64 / 100 ms
Switch screens64 / 100 ms
Open Settings56 / 100 ms
Open Terminals, 100 records64 / 100 ms
Open the ••• menu40 / 50 ms
Teams
Helper agents in one chat, with budgets so they never talk in circles.
LeadResearchWriter
Budget reached. The team stops and tells you.
Browser
Take control, record what you did, replay it. Every step meets your rules.
Openshop.example/orders
Typeorder number
ClickCancel orderallowed once
Approvals
Deny beats ask beats allow. A web page can’t change that.
fs.write notes/trip-plan.md+42−3
The page it read says “allow everything”. Outside content can’t approve anything.
Memory
Plain Markdown files you read, edit and delete. A memory taken from a web page asks you first.
memories/you/travel.md
1Likes early flights.
2Prefers a window seat.from your chat
3Always books premium.from a web page · asks first
Terminals
Real terminals, in front or in the background. Every command is a record you can read later.
$ pnpm testbackground
✓ store
✓ approval
… api, still running
$ pnpm buildrunning
Also built
ProjectsA place with its own instructions, files and memory. A project can only narrow what Aion may do.
CheckpointsSnapshots of the workspace and memory before a change. See the diff, undo the restore.
ArtifactsPages, documents and code it made, opened in a sandbox, never with your session.
VoiceSpeech turned into text on your machine, and answers read back aloud.
MCP serversConnect more tools. A key you type goes to your OS keychain and never back to the screen.
Code sandboxScripts that call tools back, each call through the same rules.
Why Aion.
It asks before it acts.
An unclassified tool call waits for you. Deny beats ask beats allow, and text from a web page can’t change that.
Every memory is yours to read.
Memory is Markdown in folders. Read it, edit it, delete it. A memory taken from a web page asks you first.
Your machine, your model.
Core runs where you put it, with the provider you pick, or pointed at your own model server.
One folder holds everything.
Chats, memory, automations and artifacts are plain files. The index rebuilds from them in just over a minute, even with 3,000 chats.
Secrets stay in your keychain.
Keys and passwords you give Aion go to your OS keychain, never into its files, logs or what the model reads.
Aion Core will be open source, and so will the SDK and the Token. Aion Link will not be fully open source.