autolith

mcp
Security Audit
Pass
Health Pass
  • License — License: ISC
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 227 GitHub stars
Code Pass
  • Code scan — Scanned 3 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Autolith is a self-modifiable general purpose Lisp AI agent

README.md

#+TITLE: Autolith
#+SUBTITLE: A live, self-modifying Common Lisp terminal agent
#+STARTUP: content

#+begin_src

:::.      :::        AUTOLITH v0.40.1

;;;; ;;; ───────────────────────────────────────── ,[[ '[[, [[[ model gpt-5.6-terra (effort high) c$$$cc$$$c $$' workspace ~/src/autolith/ 888 888,o88oo,.__ YMM "" """"YUMMM

Autolith executes model-generated code with your user privileges.
Sandboxing is no substitute for human oversight

Tip: (ste) toggles short, direct Simple Technical English replies.

❯ Ask Autolith anything. Type (help) for operations.

#+end_src

Autolith, or AL, is a terminal agent inside a live Common Lisp image. It can
observe, self-modify, discover, introspect its own code, its live state and what
it's doing. This lets Autolith adapt to the user's preferences or to what is needed
for the task. This may sound unstable, but Autolith creates generations of this
image your or it can rollback to. Even a full frontal lobotomy is not a showstopper
as AL will just reload into a recovery image and diagnose and optionally fix the
issue.

Autolith has a moderate focus on good ergonomics, good visuals, following XDG
standards and similar, and minimal intrusiveness. It is not a "small game engine",
but it is pretty close to a Lisp Machine.

Autolith supports the following platforms

  • Linux (x86_64 + aarch64)
  • MacOS (x86_64 + aarch64)
  • FreeBSD (x86_64)
  • NetBSD (x86_64)
  • OpenBSD (x86_64)

Adding more platform support is always welcome!

Autolith questions and issues can be discussed on the
[[https://zulip.lambda-symbolics.com][Lambda Symbolics Zulip]]. Account confirmation emails are likely to land
in spam.

  • Sections
  • [[file:docs/guide.org][Guide]]
  • [[file:docs/architecture.org][Architecture]]
  • [[file:docs/skills.org][Skills]]
  • [[file:docs/mcp.org][MCP]]
  • [[file:docs/rlm.org][RLM]]
  • [[file:AGENTS.md][Contributor rules]]
  • Install

Autolith supports Linux, MacOS and the BSDs via standalone binary releases
and Nix.

The curl-into-sh installer installs or updates the packaged release for your
platform. Inspect the [[https://sh.lambda-symbolics.com/autolith][installer script]] before piping it into a shell, or trust
us with your life, hehe.

#+BEGIN_SRC sh
curl -fsSL https://sh.lambda-symbolics.com/autolith | sh
#+END_SRC

Nix also supplies the complete runtime:

#+BEGIN_SRC sh
nix run github:lambda-symbolics/autolith
#+END_SRC

To build from a source checkout instead, follow the
[[file:docs/guide.org][guide]]'s Source checkout section.

Authenticate providers either with web flows or API keys:

#+BEGIN_SRC sh
autolith auth chatgpt
autolith auth grok
autolith auth nous
autolith auth anthropic
autolith auth fireworks
autolith auth opencode
autolith auth openrouter
autolith auth mistral
#+END_SRC

Then start Autolith:

#+BEGIN_SRC sh
autolith
#+END_SRC

  • Some features

** The prompt input is the REPL

In Autolith, the message window is just a LISP repl with familiar interactivity,
you can make prompts in regular prose, or you can enter a form when you need an exact
local action or a computed prompt.

#+BEGIN_SRC lisp
(describe 'application)
(resource.read :uri "workspace:.")
(prompt (read-file "review-notes.org"))
#+END_SRC

The form runs in the active image.

** Tools for self modification and ephemeral Lisp REPLs
Autolith has a well organized suite of self tools for inspecting and modifying itself live.
You would think that doing live brain surgery on yourself would be catastrophic, but
Autolith can triage and revert changes.

Similar set of lisp tools let Autolith avoid littering temporary Python3 scripts, instead
doing these things in its bundled Common Lisp runtime, but in REPLs that are pristine and
separate from the agent's image. That's one less system dependency, and it also lets Autolith
observe its scripts better.

Autolith can decide if it wants to keep the same Lisp REPL alive or to create a pristine one,
and can maintain multiple.

#+BEGIN_SRC lisp
(lisp.eval :form "(+ 20 22)" :repl "scratch")
(lisp.describe :designator "APPLICATION" :target "self")
(self.status)
#+END_SRC

=lisp.= uses named, heap-isolated SBCL workers and can target read-only active
inspection explicitly. =self.
= changes or reports the active Autolith image.

** Recursive inference

Autolith can treat a large input as an environment instead of a prompt. =infer= runs one
bounded inference over context you pass explicitly, returns a Lisp value, and never touches
your conversation:

#+BEGIN_SRC lisp
(infer "List the invariants this file maintains."
:context (list #p"src/conversation/store.lisp"))
#+END_SRC

Frames recurse, fan out through =rlm-map=, and return validated data instead of prose when you
give them a JSON Schema contract. Calls, tokens, and recursion depth come out of one shared
budget, so a fan-out cannot outspend its allocation, and the private frame conversations cannot
pollute yours or your prompt cache.

=rlm-complete= is the full form: the input is interned as a content-addressed object, the root
model sees only its label, size, and digest, and it writes Lisp in an isolated environment to
slice, search and sub-infer over it. Inputs larger than the provider context window are processed
this way.

#+BEGIN_SRC lisp
(rlm-complete "Summarize every incident in this log."
:context #p"/var/log/huge.log")
#+END_SRC

The model reaches the same operations through the =rlm.infer=, =rlm.map= and =rlm.complete= tools.
Every frame persists its own trace under =data/inferences/=, readable afterwards through
=inference:= URIs, so you can still ask why an inference concluded what it did.

See [[file:docs/rlm.org][RLM]] for contracts, budgets, policies and the design decisions.

** Messages are just syntax sugar
When you type a message like:
#+BEGIN_SRC lisp
Hello Autolith! How do you do?
#+END_SRC

It is just syntactic sugar for:

#+BEGIN_SRC lisp
(prompt "Hello Autolith! how do you do?")
#+END_SRC

This omits the default value for the :to parameter:

#+BEGIN_SRC lisp
(prompt :to 'autolith "Hello Autolith! how do you do?")
#+END_SRC

So if you ask Autolith to delegate work (it is likely to do it on its own with mostmodels), so it can keep working
while the children run, you can talk to them as well.
If one visible child is named =test-review=, you steer the sub-agent by prompting it:

#+BEGIN_SRC lisp
(prompt :to 'test-review
"Run the focused tests and report only failures.")
#+END_SRC

As a convenience, its next useful verbal response returns to
the primary terminal.

  • Update
    If you want to pull an update, you can do so easily:

#+BEGIN_SRC lisp
(update)
#+END_SRC

Or do autolith update in your shell.

  • Autolith differences from other agents

** Lisp-first control
Plain text, callable commands, tools, and explicit Common Lisp share
Autolith's REPL (or prompt window/input, as you may know it from other agents).
This means that you can construct scripts easily, and you can call tools just
like the clanker does it.

Exact forms can compute prompts or return results, and the model will see them.

For example, if you put your prompt to a file, you can just do:

#+BEGIN_SRC lisp
(prompt (read-file "path"))
#+END_SRC

You could do templating, too, if you like.

** Responsive and inobtrusive terminal work
Autolith is not a fullscreen TUI application and it generally defers to the base 16
colors your terminal sets, therefore, it should look pretty good no matter what your
terminal color scheme is, so long as you like it.

Autolith also emits prompt markers, so if your terminal can scroll jump between shell prompts,
it can also scroll between messages to Autolith.

The line editor is the fairly powerful [[https://github.com/luciusmagn/clinedi][clinedi]], it should support all the editing niceties
and shortcuts you are used to.

** State and recovery
Conversations use append-only readable files.

Steering messages and follow-ups survive active-image crashes and abrupt shutdowns in a conversation-scoped vault. The vault is (intentionally) not resubmitted automatically,
since you may want to diagnose a crash before you resume your previous work.

You can use the following commands to interact with the vault:
#+BEGIN_SRC lisp
(vault) ; see what's in da vault
(vault-restore) ; re-submit follow-ups and steering messages in the vault
(vault-discard) ; delete vault contents
#+END_SRC

Finally, checkpoints, private mutation commits, generations, and a pristine recovery image keep
live work reconstructible, so it's hard to terminally lobotomize AL.

  • License
    Autolith is ISC licensed. See [[file:LICENSE][LICENSE]].

Reviews (0)

No results found