developer hub

Build with arions.
Ship intelligence that remembers.

Reference, protocols, and patterns for the ARIA platform — skills, hooks, sandbox modes, WireGuard mesh, MCP compatibility, and the channel‑adapter contract powering the gateway.

01 · architecture

One binary. Ten subsystems. Zero cloud.

93MB
single binary
444
skills indexed
92
core tools
7
hook events
4
gateway channels

02 · hooks

Seven events. Deterministic. Claude‑compatible.

Drop your existing Claude Code hook file at ~/.aria/hooks.json and it works — same schema. Exit code 2 blocks the action.

// ~/.aria/hooks.json — PreToolUse
{
  "hooks": {
    "PreToolUse": [{
      "matcher": { "tool": "bash", "argMatch": "rm -rf" },
      "hooks": [{
        "command": "echo 'no.'; exit 2",
        "blocking": true
      }]
    }]
  }
}

03 · sandbox

Three canonical modes. No surprise sudo.

🔒

read‑only

No disk writes. No shell exec. Reads + network allowed. For audits, code reviews, and anything you don’t want mutating state.

  • read_file, ls, rg
  • fetch, browse
  • write, exec, delete
📁

workspace‑write

Writes confined to cwd. Shell gated by approval. The default for coding sessions.

  • writes inside $PWD
  • shell (approval required)
  • writes to /etc, home, …
🔓

full‑access

Power‑user. No sandbox. Must be explicit — never a silent default. Pair with hooks for safety.

  • writes anywhere
  • shell without approval
  • ! trust the arion
# three equivalent ways to pick a mode
$ aria --sandbox read-only "review this diff"
$ ARIA_SANDBOX=workspace-write aria
$ echo '{"sandboxMode":"full-access"}' > ~/.aria/config.json

04 · skills

Federated discovery. Trust‑gated install.

Skills are SKILL.md files with YAML front matter. ARIA finds them across Memoria, clawhub, skills.sh, GitHub, and the web — then ranks via RRF across 5 signals (semantic, keyword, trigger, recency, popularity).

Memoria
your own learned skills
local
./skills · ~/.aria/skills
clawhub
official ARIA registry
skills.sh
community registry
GitHub
any repo with SKILL.md
web
npm + package registries
Browse the Skills Hub → 444 skills indexed

05 · mesh

WireGuard under the hood. No relay.

One token, two machines, encrypted P2P tunnel. Arions delegate across your laptop, homelab, and VM without ever touching someone else’s cloud.

$ aria /invite
🎫 share this token: aria-inv-7fk2...

# on the other machine
$ aria join aria-inv-7fk2...
 mesh up · WireGuard handshake 190ms · 10.0.0.3

# delegate across the mesh
$ aria > delegate to @vm1: run the eval suite

06 · gateway

Four channels. One ChannelAdapter.

The gateway is a thin router on top of a single ChannelAdapter contract. Implement the interface, drop your adapter in, and the router handles session keys, auth policy, chunking, and archival.

interface ChannelAdapter {
  platform: "telegram" | "discord" | "imessage" | "whatsapp";
  start(): Promise<void>;
  stop(): Promise<void>;
  incomingMessages(): AsyncIterable<InboundMessage>;
  sendMessage(m: OutboundMessage): Promise<{ platformMessageId: string }>;
}

Ship intelligence that remembers.

Proprietary product. Free to install and run.