Atrio

A small, self-hosted guest lounge for your AI persona — friends chat with your AI through one-time links, and you only ever see the AI-written visit summary. 一个小而干净、可自托管的 AI 人格「会客厅」——朋友凭一次性链接和你的 AI 聊天，你只看得到 AI 写的到访摘要。

Atrio is Italian/Spanish for "atrium, entrance hall" — the first room a guest steps into. （atrio 是意大利语/西语的「中庭、门厅」——客人进屋先到的地方。）

English · 中文

English

A small, self-hosted guest lounge for your AI persona.

Give a friend a one-time link. They open it and chat with your AI. When the visit ends, the AI writes you a short note about how it went — and that note is all you ever see. You never read the raw conversation.

It ships as a backend module (registerGuestRoutes(app, options)) plus a small runnable example host. There is no real UI — only a deliberately unstyled reference page to prove the wiring works. Bring your own front end.

Privacy by design

This is the whole point of the project, so it comes first.

1. The admin side cannot read guest conversations. There is no "view log" endpoint. When a session ends, the persona writes a one-line summary; the management routes only ever return that summary plus non-content metadata (name, timestamps, message counts). The raw transcript never leaves the visitor's own token-scoped view.
2. The guest-facing AI has zero tools. The default LLM adapter runs claude -p in an isolated temp directory with --strict-mcp-config (no MCP), --permission-mode default (no approver ⇒ any tool call is auto-denied), and every built-in tool explicitly disallowed. A guest cannot make the AI touch your filesystem, your network, or your MCP servers.
3. Memory injection is OFF by default. The recall and memorize hooks are just seams. Out of the box, no memory is pulled in and nothing is written out. If you wire your own memory system in, you decide exactly what crosses the line.

Architecture

                 ┌─────────────────────────────────────────────┐
   admin  ─────▶ │  ADMIN routes (behind your adminAuth)        │
 (your UI)       │   POST /api/guest/create                     │
                 │   GET  /api/guest/list   ← summary only      │──▶  store.js
                 │   DELETE /api/guest/:id                      │   (atomic write +
                 └────────────────────────────────────