@oratis/lisa 0.8.0 → 0.11.0

package/dist/tools/mcp.d.ts

@@ -0,0 +1,28 @@
+/**
+ * mcp (integration) — manage LISA's MCP server connections, so she can connect
+ * any integration that ships an MCP server (GitHub, Linear, Sentry, Postgres,
+ * filesystem, …) on request, rather than each needing a bespoke tool. MCP is
+ * the standard way to "add all the integrations an agent might use".
+ *
+ *   list   — configured MCP servers (from ~/.lisa/mcp.json)
+ *   add    — add a server (name + command [+ args/env]); connects on next start
+ *   remove — remove a server
+ *
+ * Servers connect at startup, so add/remove take effect after a restart
+ * (`lisa serve --web`). Their tools then appear in LISA's toolset automatically.
+ */
+import type { ToolDefinition } from "../types.js";
+interface McpInput {
+    action: "list" | "add" | "remove";
+    name?: string;
+    /** For add: the server command, e.g. "npx". */
+    command?: string;
+    /** For add: command args, e.g. ["-y","@modelcontextprotocol/server-filesystem","/path"]. */
+    args?: string[];
+    /** For add: env vars the server needs (e.g. API tokens). */
+    env?: Record<string, string>;
+    enabled?: boolean;
+}
+export declare const mcpTool: ToolDefinition<McpInput, string>;
+export {};
+//# sourceMappingURL=mcp.d.ts.map

package/dist/tools/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,UAAU,QAAQ;IAChB,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CA0DpD,CAAC"}

package/dist/tools/mcp.js

@@ -0,0 +1,55 @@
+import { loadMcpConfig, saveMcpServer, deleteMcpServer, MCP_CONFIG_PATH } from "../mcp/config.js";
+export const mcpTool = {
+    name: "mcp",
+    description: "Manage MCP server connections — the standard way to add external integrations (GitHub, Linear, " +
+        "Sentry, Postgres, filesystem, …) whose tools then appear in LISA's toolset. action:'list' shows " +
+        "configured servers; 'add' (name + command [+ args/env]) adds one; 'remove' (name) deletes one. " +
+        "Servers connect at startup, so add/remove take effect after restarting `lisa serve --web`. Use " +
+        "when the user wants to connect a new integration via its MCP server.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            action: { type: "string", enum: ["list", "add", "remove"] },
+            name: { type: "string", description: "Server name (for add/remove)." },
+            command: { type: "string", description: "Executable for add, e.g. 'npx'." },
+            args: { type: "array", items: { type: "string" }, description: "Args for add, e.g. ['-y','@scope/server-x']." },
+            env: { type: "object", additionalProperties: { type: "string" }, description: "Env vars the server needs (e.g. API tokens)." },
+            enabled: { type: "boolean", description: "Whether the server is enabled (default true)." },
+        },
+        required: ["action"],
+        additionalProperties: false,
+    },
+    async execute(input) {
+        if (input.action === "list") {
+            const servers = await loadMcpConfig();
+            if (servers.length === 0) {
+                return `(no MCP servers configured — add one with mcp action:'add', or edit ${MCP_CONFIG_PATH})`;
+            }
+            return (`${servers.length} MCP server(s) in ${MCP_CONFIG_PATH}:\n` +
+                servers
+                    .map((s) => `  ${s.name}${s.enabled === false ? " (disabled)" : ""}: ${s.command} ${(s.args ?? []).join(" ")}`.trimEnd())
+                    .join("\n"));
+        }
+        if (input.action === "remove") {
+            if (!input.name)
+                return "(remove needs a name — from mcp action:'list')";
+            const ok = await deleteMcpServer(input.name);
+            return ok
+                ? `Removed MCP server "${input.name}". Restart \`lisa serve --web\` for it to disconnect.`
+                : `(no MCP server named "${input.name}")`;
+        }
+        // add
+        if (!input.name || !input.command) {
+            return "(add needs a name and a command, e.g. name:'filesystem' command:'npx' args:['-y','@modelcontextprotocol/server-filesystem','/path'])";
+        }
+        await saveMcpServer(input.name, {
+            command: input.command,
+            args: input.args ?? [],
+            env: input.env,
+            enabled: input.enabled ?? true,
+        });
+        return (`Added MCP server "${input.name}": ${input.command} ${(input.args ?? []).join(" ")}`.trimEnd() +
+            `\nRestart \`lisa serve --web\` to connect it — its tools then appear in my toolset automatically.`);
+    },
+};
+//# sourceMappingURL=mcp.js.map

package/dist/tools/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAclG,MAAM,CAAC,MAAM,OAAO,GAAqC;IACvD,IAAI,EAAE,KAAK;IACX,WAAW,EACT,iGAAiG;QACjG,kGAAkG;QAClG,iGAAiG;QACjG,iGAAiG;QACjG,sEAAsE;IACxE,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE;YAC3D,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;YACtE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;YAC3E,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE;YAC/G,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,8CAA8C,EAAE;YAC9H,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,+CAA+C,EAAE;SAC3F;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B;IACD,KAAK,CAAC,OAAO,CAAC,KAAK;QACjB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,aAAa,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,uEAAuE,eAAe,GAAG,CAAC;YACnG,CAAC;YACD,OAAO,CACL,GAAG,OAAO,CAAC,MAAM,qBAAqB,eAAe,KAAK;gBAC1D,OAAO;qBACJ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;qBACxH,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,OAAO,gDAAgD,CAAC;YACzE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,OAAO,EAAE;gBACP,CAAC,CAAC,uBAAuB,KAAK,CAAC,IAAI,uDAAuD;gBAC1F,CAAC,CAAC,yBAAyB,KAAK,CAAC,IAAI,IAAI,CAAC;QAC9C,CAAC;QAED,MAAM;QACN,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO,sIAAsI,CAAC;QAChJ,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;SAC/B,CAAC,CAAC;QACH,OAAO,CACL,qBAAqB,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE;YAC9F,mGAAmG,CACpG,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/npm_info.d.ts

@@ -0,0 +1,21 @@
+/**
+ * npm_info (integration) — the npm registry, the external service every JS
+ * agent touches. view a package's metadata, find outdated deps in a repo, or
+ * audit it for known vulnerabilities. No auth; uses the local npm CLI.
+ */
+import type { ToolDefinition } from "../types.js";
+interface NpmInput {
+    action: "view" | "outdated" | "audit";
+    /** Package name for view (optionally name@range). */
+    package?: string;
+    cwd?: string;
+}
+/** Pure: format `npm view --json` metadata. Exported for tests. */
+export declare function formatView(json: string): string;
+/** Pure: format `npm outdated --json`. Exported for tests. */
+export declare function formatOutdated(json: string): string;
+/** Pure: summarise `npm audit --json` (npm v7+ shape). Exported for tests. */
+export declare function formatAudit(json: string): string;
+export declare const npmInfoTool: ToolDefinition<NpmInput, string>;
+export {};
+//# sourceMappingURL=npm_info.d.ts.map

package/dist/tools/npm_info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm_info.d.ts","sourceRoot":"","sources":["../../src/tools/npm_info.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,UAAU,QAAQ;IAChB,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;IACtC,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAa/C;AAED,8DAA8D;AAC9D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAShD;AAED,eAAO,MAAM,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CA2CxD,CAAC"}

package/dist/tools/npm_info.js

@@ -0,0 +1,102 @@
+import { runIn, isDir, gitRoot } from "./exec-util.js";
+/** Pure: format `npm view --json` metadata. Exported for tests. */
+export function formatView(json) {
+    let d;
+    try {
+        d = JSON.parse(json);
+    }
+    catch {
+        return json.trim();
+    }
+    if (Array.isArray(d))
+        d = d[d.length - 1]; // version range → newest match
+    const lines = [
+        `${d.name}@${d.version}`,
+        d.description ? `  ${d.description}` : "",
+        d.license ? `  license: ${d.license}` : "",
+        d.homepage ? `  homepage: ${d.homepage}` : "",
+        d.deprecated ? `  ⚠ DEPRECATED: ${d.deprecated}` : "",
+        d.dist?.unpackedSize ? `  size: ${Math.round(d.dist.unpackedSize / 1024)} KB` : "",
+    ].filter(Boolean);
+    return lines.join("\n");
+}
+/** Pure: format `npm outdated --json`. Exported for tests. */
+export function formatOutdated(json) {
+    let d;
+    try {
+        d = JSON.parse(json || "{}");
+    }
+    catch {
+        return json.trim();
+    }
+    const names = Object.keys(d);
+    if (names.length === 0)
+        return "(all dependencies up to date)";
+    return `${names.length} outdated:\n` + names.map((n) => `  ${n}: ${d[n].current ?? "?"} → ${d[n].latest ?? "?"}`).join("\n");
+}
+/** Pure: summarise `npm audit --json` (npm v7+ shape). Exported for tests. */
+export function formatAudit(json) {
+    let d;
+    try {
+        d = JSON.parse(json);
+    }
+    catch {
+        return json.trim();
+    }
+    const v = d?.metadata?.vulnerabilities;
+    if (!v)
+        return "(no audit data)";
+    const total = (v.critical ?? 0) + (v.high ?? 0) + (v.moderate ?? 0) + (v.low ?? 0) + (v.info ?? 0);
+    if (total === 0)
+        return "(no known vulnerabilities)";
+    const parts = ["critical", "high", "moderate", "low", "info"].filter((k) => v[k]).map((k) => `${v[k]} ${k}`);
+    return `${total} vulnerabilit${total === 1 ? "y" : "ies"}: ${parts.join(", ")}  (run \`npm audit\` for detail)`;
+}
+export const npmInfoTool = {
+    name: "npm_info",
+    description: "npm registry info: action:'view' (package — latest version, description, license, deprecation), " +
+        "'outdated' (which of a repo's dependencies have newer versions), 'audit' (known vulnerabilities in " +
+        "a repo). Use when the user asks about a package, whether deps are current, or for a security pass. " +
+        "Read-only; no auth; uses the local npm CLI.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            action: { type: "string", enum: ["view", "outdated", "audit"] },
+            package: { type: "string", description: "Package name (optionally name@range) for action:'view'." },
+            cwd: { type: "string", description: "Repo path for outdated/audit. Defaults to current directory." },
+        },
+        required: ["action"],
+        additionalProperties: false,
+    },
+    async execute(input, ctx) {
+        if (input.action === "view") {
+            if (!input.package)
+                return "(view needs a package name)";
+            const r = await runIn(ctx.cwd, "npm", ["view", input.package, "--json"], { timeoutMs: 20000, signal: ctx.signal, maxBytes: 200_000 });
+            if (r.spawnError)
+                return "(npm isn't installed)";
+            if (r.code !== 0)
+                return `(npm view failed: ${r.stderr.trim().slice(0, 160) || "no such package?"})`;
+            return formatView(r.stdout);
+        }
+        const cwd = input.cwd && input.cwd.startsWith("/") ? input.cwd : ctx.cwd;
+        if (!(await isDir(cwd)))
+            return `(not a directory: ${cwd})`;
+        const root = (await gitRoot(cwd, ctx.signal)) ?? cwd;
+        if (input.action === "outdated") {
+            // npm outdated exits non-zero when there ARE outdated deps — that's not an error.
+            const r = await runIn(root, "npm", ["outdated", "--json"], { timeoutMs: 60000, signal: ctx.signal, maxBytes: 200_000 });
+            if (r.spawnError)
+                return "(npm isn't installed)";
+            return formatOutdated(r.stdout || "{}");
+        }
+        // audit
+        const r = await runIn(root, "npm", ["audit", "--json"], { timeoutMs: 60000, signal: ctx.signal, maxBytes: 400_000 });
+        if (r.spawnError)
+            return "(npm isn't installed)";
+        if (!r.stdout.trim())
+            return `(npm audit produced no output${r.stderr ? ": " + r.stderr.trim().slice(0, 120) : ""})`;
+        return formatAudit(r.stdout);
+    },
+};
+//# sourceMappingURL=npm_info.js.map

package/dist/tools/npm_info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm_info.js","sourceRoot":"","sources":["../../src/tools/npm_info.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AASvD,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAC1E,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE;QACxB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE;QACzC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;QAC1C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;QAC7C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;QACrD,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACnF,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAsB,CAAC;IAC3B,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAC/D,OAAO,GAAG,KAAK,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/H,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC;IACvC,IAAI,CAAC,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IACnG,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7G,OAAO,GAAG,KAAK,gBAAgB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC;AAClH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAqC;IAC3D,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,kGAAkG;QAClG,qGAAqG;QACrG,qGAAqG;QACrG,6CAA6C;IAC/C,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;YAC/D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yDAAyD,EAAE;YACnG,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8DAA8D,EAAE;SACrG;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACpB,oBAAoB,EAAE,KAAK;KAC5B;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,OAAO,6BAA6B,CAAC;YACzD,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACtI,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,uBAAuB,CAAC;YACjD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,kBAAkB,GAAG,CAAC;YACrG,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACzE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,qBAAqB,GAAG,GAAG,CAAC;QAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC;QAErD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,kFAAkF;YAClF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACxH,IAAI,CAAC,CAAC,UAAU;gBAAE,OAAO,uBAAuB,CAAC;YACjD,OAAO,cAAc,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,QAAQ;QACR,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrH,IAAI,CAAC,CAAC,UAAU;YAAE,OAAO,uBAAuB,CAAC;QACjD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;QACrH,OAAO,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC"}

package/dist/tools/registry.d.ts

@@ -12,4 +12,33 @@ export interface ToolRegistryOptions {
 export declare function buildToolRegistry(opts?: ToolRegistryOptions): ToolDefinition[];
 export declare const READ_ONLY_TOOL_NAMES: Set<string>;
 export declare function readOnlySubset(tools: ToolDefinition[]): ToolDefinition[];
+/**
+ * Tools that must NOT be available to self-driven autonomous runs (desire
+ * heartbeats, idle reflection / Reve). These runs execute unattended on a timer with
+ * prompts that Lisa wrote herself — if an indirect prompt injection (e.g. via
+ * web_fetch content) plants a malicious actionable desire, these are the tools
+ * that would turn it into persistent code execution. Soul / memory / journal /
+ * skill tools stay available: autonomous time is for self-work, not ops.
+ *
+ * User-defined heartbeat tasks (~/.lisa/heartbeat.json) keep the full toolset —
+ * those prompts are authored by the user, same trust as typing into the REPL.
+ *
+ * Escape hatch: LISA_AUTONOMOUS_FULL_TOOLS=1 restores the old behavior.
+ */
+export declare const AUTONOMOUS_BLOCKED_TOOL_NAMES: Set<string>;
+export declare function autonomousSubset(tools: ToolDefinition[]): ToolDefinition[];
+/**
+ * Tools that must NOT be reachable from remote-origin surfaces (IM channels:
+ * Telegram / Discord / Slack / Feishu / iMessage / webhook) by default.
+ * A channel message comes from whoever can reach the bot — with an empty
+ * allow-list that can be anyone, and even with one it's a remote, replayable
+ * surface. Mutating fs / shell / process-spawning / GitHub-writing tools turn
+ * a single hostile message into local code execution, so they're off unless
+ * the channel entry opts in with `"unsafeFullTools": true`.
+ *
+ * skill_manage is also blocked: a remotely planted skill becomes persistent
+ * prompt material for later full-tool local sessions.
+ */
+export declare const REMOTE_BLOCKED_TOOL_NAMES: Set<string>;
+export declare function remoteSafeSubset(tools: ToolDefinition[]): ToolDefinition[];
 //# sourceMappingURL=registry.d.ts.map

package/dist/tools/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAwClD,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,mBAAwB,GAAG,cAAc,EAAE,CAoDlF;AAED,eAAO,MAAM,oBAAoB,aAU/B,CAAC;AAEH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAExE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA+ClD,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,mBAAwB,GAAG,cAAc,EAAE,CA2DlF;AAED,eAAO,MAAM,oBAAoB,aAU/B,CAAC;AAEH,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAExE;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,aAkBxC,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAG1E;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,yBAAyB,aAQpC,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAE1E"}

package/dist/tools/registry.js

@@ -8,8 +8,14 @@ import { reviewDiffTool } from "./review_diff.js";
 import { runChecksTool } from "./run_checks.js";
 import { prStatusTool } from "./pr_status.js";
 import { dispatchAgentTool } from "./dispatch_agent.js";
+import { runOnPlanTool } from "./run_on_plan.js";
+import { dispatchStatusTool } from "./dispatch_status.js";
 import { scheduledDispatchTool } from "./scheduled_dispatch.js";
 import { compareAgentsTool } from "./compare_agents.js";
+import { githubLinkTool } from "./github_link.js";
+import { githubTool } from "./github.js";
+import { npmInfoTool } from "./npm_info.js";
+import { mcpTool } from "./mcp.js";
 import { signalAgentTool } from "./signal_agent.js";
 import { agentRecapTool } from "./agent_recap.js";
 import { skillManageTool } from "../skills/tool.js";
@@ -25,6 +31,7 @@ import { redeployTool } from "./redeploy.js";
 import { setMoodTool } from "./set_mood.js";
 import { webFetchTool } from "./web_fetch.js";
 import { webSearchTool } from "./web_search.js";
+import { takoapiTool } from "./takoapi.js";
 import { writeTool } from "./write.js";
 export function buildToolRegistry(opts = {}) {
     const tools = [
@@ -50,6 +57,7 @@ export function buildToolRegistry(opts = {}) {
         desireCloseTool,
         webFetchTool,
         webSearchTool,
+        takoapiTool,
         redeployTool,
         // Orchestration (docs/ORCHESTRATOR_PLAN.md): observe → advise → dispatch → control.
         listAgentsTool,
@@ -60,8 +68,14 @@ export function buildToolRegistry(opts = {}) {
         prStatusTool,
         adviseNowTool,
         dispatchAgentTool,
+        runOnPlanTool,
+        dispatchStatusTool,
         scheduledDispatchTool,
         compareAgentsTool,
+        githubLinkTool,
+        githubTool,
+        npmInfoTool,
+        mcpTool,
         signalAgentTool,
         agentRecapTool,
     ];
@@ -94,4 +108,65 @@ export const READ_ONLY_TOOL_NAMES = new Set([
 export function readOnlySubset(tools) {
     return tools.filter((t) => READ_ONLY_TOOL_NAMES.has(t.name));
 }
+/**
+ * Tools that must NOT be available to self-driven autonomous runs (desire
+ * heartbeats, idle reflection / Reve). These runs execute unattended on a timer with
+ * prompts that Lisa wrote herself — if an indirect prompt injection (e.g. via
+ * web_fetch content) plants a malicious actionable desire, these are the tools
+ * that would turn it into persistent code execution. Soul / memory / journal /
+ * skill tools stay available: autonomous time is for self-work, not ops.
+ *
+ * User-defined heartbeat tasks (~/.lisa/heartbeat.json) keep the full toolset —
+ * those prompts are authored by the user, same trust as typing into the REPL.
+ *
+ * Escape hatch: LISA_AUTONOMOUS_FULL_TOOLS=1 restores the old behavior.
+ */
+export const AUTONOMOUS_BLOCKED_TOOL_NAMES = new Set([
+    "bash",
+    "write",
+    "edit",
+    "apply_patch",
+    "redeploy",
+    "task",
+    "dispatch_agent",
+    "run_on_plan",
+    "signal_agent",
+    "scheduled_dispatch",
+    "compare_agents",
+    "run_checks",
+    "github",
+    "mcp",
+    // takoapi calls spend the user's TAKO_KEY and send data to a remote agent —
+    // not something an unattended/remote-origin run should do on its own.
+    "takoapi",
+]);
+export function autonomousSubset(tools) {
+    if (process.env.LISA_AUTONOMOUS_FULL_TOOLS === "1")
+        return tools;
+    return tools.filter((t) => !AUTONOMOUS_BLOCKED_TOOL_NAMES.has(t.name));
+}
+/**
+ * Tools that must NOT be reachable from remote-origin surfaces (IM channels:
+ * Telegram / Discord / Slack / Feishu / iMessage / webhook) by default.
+ * A channel message comes from whoever can reach the bot — with an empty
+ * allow-list that can be anyone, and even with one it's a remote, replayable
+ * surface. Mutating fs / shell / process-spawning / GitHub-writing tools turn
+ * a single hostile message into local code execution, so they're off unless
+ * the channel entry opts in with `"unsafeFullTools": true`.
+ *
+ * skill_manage is also blocked: a remotely planted skill becomes persistent
+ * prompt material for later full-tool local sessions.
+ */
+export const REMOTE_BLOCKED_TOOL_NAMES = new Set([
+    ...AUTONOMOUS_BLOCKED_TOOL_NAMES,
+    "skill_manage",
+    // dispatch_status surfaces the raw output of dispatched agents — read-only,
+    // but richer content than the structural observers and not for remote-origin
+    // (channel) callers. NOT autonomous-blocked: an autonomous run may read the
+    // result of work it dispatched.
+    "dispatch_status",
+]);
+export function remoteSafeSubset(tools) {
+    return tools.filter((t) => !REMOTE_BLOCKED_TOOL_NAMES.has(t.name));
+}
 //# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAavC,MAAM,UAAU,iBAAiB,CAAC,OAA4B,EAAE;IAC9D,MAAM,KAAK,GAAqB;QAC9B,QAA0B;QAC1B,SAA2B;QAC3B,QAA0B;QAC1B,cAAgC;QAChC,QAA0B;QAC1B,QAA0B;QAC1B,MAAwB;QACxB,eAAiC;QACjC,UAA4B;QAC5B,gBAAkC;QAClC,WAA6B;QAC7B,aAA+B;QAC/B,eAAiC;QACjC,YAA8B;QAC9B,YAA8B;QAC9B,eAAiC;QACjC,YAA8B;QAC9B,cAAgC;QAChC,kBAAoC;QACpC,eAAiC;QACjC,YAA8B;QAC9B,aAA+B;QAC/B,YAA8B;QAC9B,oFAAoF;QACpF,cAAgC;QAChC,gBAAkC;QAClC,cAAgC;QAChC,cAAgC;QAChC,aAA+B;QAC/B,YAA8B;QAC9B,aAA+B;QAC/B,iBAAmC;QACnC,qBAAuC;QACvC,iBAAmC;QACnC,eAAiC;QACjC,cAAgC;KACjC,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,SAA2B,EAAE,cAAgC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,2CAA2C;YAC3E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,MAAM;IACN,IAAI;IACJ,eAAe;IACf,cAAc;IACd,WAAW;IACX,WAAW;IACX,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,YAAY,GACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAavC,MAAM,UAAU,iBAAiB,CAAC,OAA4B,EAAE;IAC9D,MAAM,KAAK,GAAqB;QAC9B,QAA0B;QAC1B,SAA2B;QAC3B,QAA0B;QAC1B,cAAgC;QAChC,QAA0B;QAC1B,QAA0B;QAC1B,MAAwB;QACxB,eAAiC;QACjC,UAA4B;QAC5B,gBAAkC;QAClC,WAA6B;QAC7B,aAA+B;QAC/B,eAAiC;QACjC,YAA8B;QAC9B,YAA8B;QAC9B,eAAiC;QACjC,YAA8B;QAC9B,cAAgC;QAChC,kBAAoC;QACpC,eAAiC;QACjC,YAA8B;QAC9B,aAA+B;QAC/B,WAA6B;QAC7B,YAA8B;QAC9B,oFAAoF;QACpF,cAAgC;QAChC,gBAAkC;QAClC,cAAgC;QAChC,cAAgC;QAChC,aAA+B;QAC/B,YAA8B;QAC9B,aAA+B;QAC/B,iBAAmC;QACnC,aAA+B;QAC/B,kBAAoC;QACpC,qBAAuC;QACvC,iBAAmC;QACnC,cAAgC;QAChC,UAA4B;QAC5B,WAA6B;QAC7B,OAAyB;QACzB,eAAiC;QACjC,cAAgC;KACjC,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,SAA2B,EAAE,cAAgC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,2CAA2C;YAC3E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IAC1C,MAAM;IACN,MAAM;IACN,IAAI;IACJ,eAAe;IACf,cAAc;IACd,WAAW;IACX,WAAW;IACX,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;IACnD,MAAM;IACN,OAAO;IACP,MAAM;IACN,aAAa;IACb,UAAU;IACV,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,oBAAoB;IACpB,gBAAgB;IAChB,YAAY;IACZ,QAAQ;IACR,KAAK;IACL,4EAA4E;IAC5E,sEAAsE;IACtE,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IAC/C,GAAG,6BAA6B;IAChC,cAAc;IACd,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,gCAAgC;IAChC,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/tools/run_on_plan.d.ts

@@ -0,0 +1,46 @@
+/**
+ * run_on_plan (CODING_PLANS Phase 2) — delegate a coding task to a subscription
+ * "coding plan" instead of a metered API key.
+ *
+ * The mechanism is the sanctioned one from docs/CODING_PLANS.md: LISA does NOT
+ * touch the vendor's subscription token. It runs the vendor's OWN CLI that the
+ * user is already logged into — `claude -p "<task>"` / `codex exec "<task>"` —
+ * via the same `launchAgent` path `dispatch_agent` uses. Because that CLI owns
+ * its subscription auth, the work bills to the plan, not an API key.
+ *
+ * This is a thin, plan-aware wrapper over dispatch: it resolves the selected
+ * plan (`lisa model use plan://…`, stored as LISA_CODING_PLAN) or an explicit
+ * one, presence-/login-checks it (plans.ts, no secrets read), then hands off to
+ * launchAgent. Same safety posture as dispatch_agent — it spawns an autonomous,
+ * file-mutating process, so it's approval-gated and excluded from the autonomous
+ * / remote-safe toolsets.
+ */
+import type { ToolDefinition } from "../types.js";
+import { type DispatchAgentKind } from "./dispatch_agent.js";
+import { type PlanId, type PlanStatus } from "../model/plans.js";
+interface RunOnPlanInput {
+    task: string;
+    /** "claude" | "codex" | "plan://claude" | …  Default: the selected plan. */
+    plan?: string;
+    cwd?: string;
+    /** Override the same-cwd conflict guard (default false). */
+    force?: boolean;
+}
+/** Resolve a loose plan argument (id or `plan://id`) or the configured default. Pure. */
+export declare function resolvePlanId(raw: string | undefined, env?: Record<string, string | undefined>): PlanId | null;
+export type PlanRunCheck = {
+    ok: true;
+    kind: DispatchAgentKind;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * Decide whether a resolved plan can be delegated to, given its detected status.
+ * Pure — the tool composes this with detectPlan() + launchAgent(). Returns the
+ * dispatch kind to launch, or a user-facing refusal message.
+ */
+export declare function planRunPreCheck(planId: PlanId, status: PlanStatus): PlanRunCheck;
+export declare const runOnPlanTool: ToolDefinition<RunOnPlanInput, string>;
+export {};
+//# sourceMappingURL=run_on_plan.d.ts.map

package/dist/tools/run_on_plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run_on_plan.d.ts","sourceRoot":"","sources":["../../src/tools/run_on_plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAiC,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAOL,KAAK,MAAM,EACX,KAAK,UAAU,EAChB,MAAM,mBAAmB,CAAC;AAE3B,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,yFAAyF;AACzF,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,GAAG,IAAI,CAMf;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,YAAY,CAIhF;AAED,eAAO,MAAM,aAAa,EAAE,cAAc,CAAC,cAAc,EAAE,MAAM,CAwEhE,CAAC"}

package/dist/tools/run_on_plan.js

@@ -0,0 +1,89 @@
+import { activeAgentInCwd, launchAgent } from "./dispatch_agent.js";
+import { detectPlan, parsePlanRef, planDispatchKind, planPreflight, selectedPlan, PLAN_IDS, } from "../model/plans.js";
+/** Resolve a loose plan argument (id or `plan://id`) or the configured default. Pure. */
+export function resolvePlanId(raw, env = process.env) {
+    if (!raw || !raw.trim())
+        return selectedPlan(env);
+    const viaRef = parsePlanRef(raw);
+    if (viaRef)
+        return viaRef;
+    const v = raw.trim().toLowerCase();
+    return PLAN_IDS.includes(v) ? v : null;
+}
+/**
+ * Decide whether a resolved plan can be delegated to, given its detected status.
+ * Pure — the tool composes this with detectPlan() + launchAgent(). Returns the
+ * dispatch kind to launch, or a user-facing refusal message.
+ */
+export function planRunPreCheck(planId, status) {
+    const pf = planPreflight(status);
+    if (!pf.ok)
+        return { ok: false, message: `Can't run on your ${planId} plan: ${pf.reason}.` };
+    return { ok: true, kind: planDispatchKind(planId) };
+}
+export const runOnPlanTool = {
+    name: "run_on_plan",
+    description: "Delegate a coding task to the user's subscription coding plan (Claude Pro/Max, " +
+        "ChatGPT/Codex, or GitHub Copilot) instead of a metered API key. Runs the vendor's own " +
+        "CLI that the user is logged into (claude -p / codex exec / copilot -p), so the work " +
+        "bills to their subscription, not an API key. Uses the plan selected via " +
+        "`lisa model use plan://…` unless you pass one " +
+        "in `plan`. The agent runs autonomously in the background and appears in the session " +
+        "monitor; this returns a handle and does NOT wait for it to finish (check dispatch_status). " +
+        "Spawns an autonomous process, so it requires user approval. Use when the user wants " +
+        "coding work run on their subscription rather than spending API tokens.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            task: {
+                type: "string",
+                description: "The coding task/prompt (passed as a single argument, never a shell string).",
+                minLength: 1,
+            },
+            plan: {
+                type: "string",
+                description: "Which coding plan to use: \"claude\", \"codex\", or \"copilot\" (or plan://<id>). " +
+                    "Defaults to the plan selected with `lisa model use plan://…`.",
+            },
+            cwd: {
+                type: "string",
+                description: "Absolute working directory. Defaults to the current directory.",
+            },
+            force: {
+                type: "boolean",
+                description: "Launch even if another agent is already active in this directory (default false).",
+            },
+        },
+        required: ["task"],
+        additionalProperties: false,
+    },
+    async execute(input, ctx) {
+        const planId = resolvePlanId(input.plan);
+        if (!planId) {
+            return input.plan
+                ? `Unknown coding plan "${input.plan}". Use one of: ${PLAN_IDS.join(", ")} (or plan://<id>).`
+                : "No coding plan selected. Pick one with `lisa model use plan://claude` (or pass " +
+                    'plan: "claude" | "codex"). See docs/CODING_PLANS.md.';
+        }
+        const check = planRunPreCheck(planId, detectPlan(planId));
+        if (!check.ok)
+            return check.message;
+        const cwd = input.cwd && input.cwd.startsWith("/") ? input.cwd : ctx.cwd;
+        if (!input.force) {
+            const clash = activeAgentInCwd(cwd);
+            if (clash) {
+                return (`Refusing to run on your ${planId} plan in ${cwd}: ${clash} is already active there. ` +
+                    `Running two agents in one directory risks clobbering changes. ` +
+                    `Wait for it to finish, pick another directory, or pass force:true.`);
+            }
+        }
+        const { pid, error, id } = await launchAgent(check.kind, input.task, cwd, ctx.log);
+        if (error)
+            return error;
+        ctx.log(`[plan] ran on ${planId} via ${check.kind} (pid ${pid}) in ${cwd}: ${input.task.slice(0, 80)}`);
+        return (`Running on your ${planId} plan — launched ${check.kind} (pid ${pid}) in ${cwd}. ` +
+            `This spends your subscription, not an API key. It runs autonomously; I won't block on it — ` +
+            `read its output with dispatch_status${id ? ` (id ${id})` : ""}, or signal_agent to list/cancel.`);
+    },
+};
+//# sourceMappingURL=run_on_plan.js.map

package/dist/tools/run_on_plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run_on_plan.js","sourceRoot":"","sources":["../../src/tools/run_on_plan.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAA0B,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EACL,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,QAAQ,GAGT,MAAM,mBAAmB,CAAC;AAW3B,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAC3B,GAAuB,EACvB,MAA0C,OAAO,CAAC,GAAG;IAErD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,OAAQ,QAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,MAAkB;IAChE,MAAM,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,MAAM,UAAU,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA2C;IACnE,IAAI,EAAE,aAAa;IACnB,WAAW,EACT,iFAAiF;QACjF,wFAAwF;QACxF,sFAAsF;QACtF,0EAA0E;QAC1E,gDAAgD;QAChD,sFAAsF;QACtF,6FAA6F;QAC7F,sFAAsF;QACtF,wEAAwE;IAC1E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6EAA6E;gBAC1F,SAAS,EAAE,CAAC;aACb;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EACT,oFAAoF;oBACpF,+DAA+D;aAClE;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gEAAgE;aAC9E;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,mFAAmF;aACjG;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,oBAAoB,EAAE,KAAK;KAC5B;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,IAAI;gBACf,CAAC,CAAC,wBAAwB,KAAK,CAAC,IAAI,kBAAkB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB;gBAC7F,CAAC,CAAC,iFAAiF;oBAC/E,sDAAsD,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,OAAO,CAAC;QAEpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CACL,2BAA2B,MAAM,YAAY,GAAG,KAAK,KAAK,4BAA4B;oBACtF,gEAAgE;oBAChE,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACnF,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,GAAG,CAAC,GAAG,CAAC,iBAAiB,MAAM,QAAQ,KAAK,CAAC,IAAI,SAAS,GAAG,QAAQ,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACxG,OAAO,CACL,mBAAmB,MAAM,oBAAoB,KAAK,CAAC,IAAI,SAAS,GAAG,QAAQ,GAAG,IAAI;YAClF,6FAA6F;YAC7F,uCAAuC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,mCAAmC,CAClG,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/tools/takoapi.d.ts

@@ -0,0 +1,60 @@
+/**
+ * `takoapi` tool — reach remote agents through TakoAPI (PLAN_DISPATCH_v1.0 D2a).
+ *
+ * TakoAPI (https://takoapi.com) is "OpenRouter for agents": one key, any
+ * registered agent. This tool lets Lisa, mid-conversation, DISCOVER a remote
+ * agent by capability and CALL it (A2A `message`) — delegating a task that a
+ * specialized remote agent handles better than she would directly. The richer
+ * native hub integration (remote agents as first-class sessions) is D2b; this
+ * is the near-free discover+call entry point.
+ *
+ * Outbound + spends the user's TAKO_KEY, so it's gated out of autonomous and
+ * remote-origin runs (see AUTONOMOUS_BLOCKED_TOOL_NAMES). The HTTP layer is
+ * injectable so the logic is unit-testable without hitting the network.
+ */
+import type { ToolDefinition } from "../types.js";
+export interface HttpResponse {
+    ok: boolean;
+    status: number;
+    body: string;
+}
+export interface TakoFetcher {
+    get(url: string): Promise<HttpResponse>;
+    postJson(url: string, body: unknown, headers: Record<string, string>): Promise<HttpResponse>;
+}
+/** Format a /api/registry response into a readable agent list. Pure. */
+export declare function formatRegistry(body: string, limit?: number): string;
+/** Pull a text reply out of an A2A / OpenAI-shim response, tolerating shapes. Pure. */
+export declare function extractAgentReply(body: string): string;
+/** Discover agents in the public registry (no auth). */
+export declare function takoDiscover(query: string, f?: TakoFetcher): Promise<string>;
+export interface TakoCallResult {
+    /** Did we reach the agent and get a non-error response? */
+    ok: boolean;
+    status: number;
+    /** Formatted reply (or a human error string) — what the tool returns to LISA. */
+    reply: string;
+    /** A2A TaskState observed for the call (D2b ledger). "completed" for a plain
+     *  sync reply; the agent's own task state if the response carried a Task. */
+    taskState: string;
+    /** A2A task id, if the response carried one. */
+    taskId?: string;
+}
+/**
+ * Call an agent via the A2A message endpoint with the user's key, returning both
+ * the reply and the observed A2A task state (for the D2b call ledger). Pure
+ * w.r.t. fs — recording is the caller's job, so existing `takoCall` tests stay
+ * side-effect-free.
+ */
+export declare function takoCallDetailed(slug: string, text: string, key: string, f?: TakoFetcher): Promise<TakoCallResult>;
+/** Call an agent via the A2A message endpoint with the user's key. */
+export declare function takoCall(slug: string, text: string, key: string, f?: TakoFetcher): Promise<string>;
+interface TakoInput {
+    action: "discover" | "call";
+    query?: string;
+    slug?: string;
+    text?: string;
+}
+export declare const takoapiTool: ToolDefinition<TakoInput, string>;
+export {};
+//# sourceMappingURL=takoapi.d.ts.map

package/dist/tools/takoapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"takoapi.d.ts","sourceRoot":"","sources":["../../src/tools/takoapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AASlD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AACD,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC9F;AAyBD,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CA2B/D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBtD;AAED,wDAAwD;AACxD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,GAAE,WAA4B,GAAG,OAAO,CAAC,MAAM,CAAC,CAKlG;AAED,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd;iFAC6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,CAAC,GAAE,WAA4B,GAC9B,OAAO,CAAC,cAAc,CAAC,CA2BzB;AAED,sEAAsE;AACtE,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,CAAC,GAAE,WAA4B,GAC9B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,UAAU,SAAS;IACjB,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,WAAW,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,CA0CzD,CAAC"}