Built-in Tool Reference

Wayland Core ships a built-in tool registry of ~60+ tools. A universal core is always present (Read/Write/Edit, Bash, Grep/Glob, plus orchestration: Delegate, ToolSearch, Spawn) alongside around 40 more covering git, SQL, web fetch, cloud CLI wrappers, API integrations, media, scheduling, and memory. Around 15 integration tools are availability-gated under a NO-STUBS contract: they appear only when their key, binary, or feature is present.

The 8 tools the old docs listed (Read/Write/Edit/Bash/Grep/Glob/Delegate/ToolSearch) are the primary file, shell, search, and orchestration core. They are never the total.

Source: wcore-agent/src/bootstrap.rs (registry.register calls), wcore-tools/src/ (tool implementations).

Core tools (always present)

These are registered unconditionally on every session start (bootstrap.rs:426-435).

Tool name	Source file	Notes
`Read`	`read.rs`	Read a file with line numbers; `offset`/`limit` for slices; binary detection; mtime dedup via file cache.
`Write`	`write.rs`	Atomic file write (temp file + rename); parent directories created automatically.
`Edit`	`edit.rs`	Targeted string replacement in a file; must be unique unless `replace_all` is set.
`Bash`	`bash.rs`	Shell command execution; runs inside the OS-native sandbox; network denied by default; default timeout 120 s, max 600 s.
`Grep`	`grep.rs`	Regex search over file contents; uses `rg` when available, falls back to `grep -rn`; caps at 250 lines.
`Glob`	`glob.rs`	Filesystem glob matching (e.g. `*/.rs`); sorted newest-first; caps at 100 files.

Orchestration tools (always present)

Tool name	Source	Notes
`Delegate`	`delegate.rs`	Structured single-task or batch delegation; up to 5 tasks, 50 turns each; produces structured JSON output; accepts per-task `toolsets` allowlist.
`Spawn`	`spawn_tool.rs`	Multi-agent fan-out with registry-resolved named agents; OutputSink relay back to parent; FleetDispatcher used when agent count exceeds `DEFAULT_SHARD_SIZE`.
`Workflow`	`workflow_tool.rs`	Run an inline RON-format ForgeFlow workflow; parses RON → GraphConfig IR → WorkflowRunner; Agent/Pipeline/Parallel steps.
`ToolSearch`	`tool_search.rs`	Load full schemas for deferred tools (MCP tools are name-only by default); substring match on name+description; no result cap.

Broader built-in catalog

All tools below are registered unconditionally at bootstrap.rs:437-714 unless noted. Tools with a backend seam degrade gracefully on missing credentials.

File and data tools

Tool name	Source	What it does
`Jsonl`	`jsonl_tool.rs`	Streaming JSON Lines range/filter/count for large log files without loading the whole file.
`sql_query`	`sql_query_tool.rs`	Read-only SQLite queries via rusqlite; no writes permitted.
`pdf_extract`	`pdf_tool.rs`	Read-only PDF text extraction; pure-Rust `pdf-extract`; degrades to a typed error when built without the `pdf` feature.
`Archive`	`archive_tool.rs`	Read-only zip/tar/tar.gz inspection; zip-slip path rejection.
`markdown_table`	`markdown_tool.rs`	Markdown table format and lint.
`image_inspect`	`image_inspect_tool.rs`	Image metadata (dimensions, EXIF); reads metadata only, never decodes full pixel data.
`email_parse`	`email_parse_tool.rs`	Parse `.eml`/`.mbox` files: headers and text body only; no attachment content.
`RepoMap`	`repomap.rs`	Repo symbol index for the current working directory; enabled by default via `builtin_tools.repomap.enabled`.

Shell, git, and CLI tools

Tool name	Source	What it does
`Git`	`git.rs`	Typed wrapper over git ops; read-only ops (log, diff, status) are concurrency-safe; mutating ops (add, commit, checkout, stash) require explicit invocation.
`kubectl`	`kubectl_tool.rs`	`kubectl get/describe/logs/...` read-only wrapper; write ops are not in the allowlist.
`gcloud`	`gcloud_tool.rs`	`gcloud list/describe/get-*` read-only wrapper.
`aws_cli`	`aws_cli_tool.rs`	`aws <service> <op>` read-only wrapper.

Web tools

Tool name	Source	What it does
`WebFetch`	`web_fetch.rs`	Plain HTTP GET with readability extraction for HTML; zero runtime dependencies; SSRF-safe via `url_safety::is_safe_url`. Works on every install without a sidecar.
`web`	`web_tools.rs`	Web search, extract, and crawl. Backend selected at boot: Tavily (`TAVILY_API_KEY`) → Brave (`BRAVE_SEARCH_API_KEY`) → DuckDuckGo HTML scrape (no key required).

Communication and messaging

Tool name	Source	What it does
`send_message`	`send_message.rs`	Cross-channel message dispatch; registered with a fail-loud null transport by default; a real transport (Telegram, Discord, Slack, etc.) must be wired by the host.

Planning and session tools

Tool name	Source	What it does
`todo`	`todo.rs`	In-session planning and task list; state is per-session (one list per agent bootstrap).
`clarify`	`clarify.rs`	Structured user-clarification prompt; the host layer intercepts tool calls named `clarify` to perform the real UI interaction.
`AskUserQuestion`	`ask_user_question.rs`	Structured multi-choice question; answer routed back via the approval channel (`ToolApprove` answer field).
`session_search`	`session_search.rs`	Full-text cross-session recall via the memory API. Returns empty results when memory is disabled rather than erroring.

Memory write tools (present when `memory.enabled = true`)

These two tools are registered only when persistent memory is enabled. With NullMemory they would advertise capabilities the model cannot exercise.

Tool name	Source	What it does
`record_episode`	`record_episode.rs`	Log an event to P2 episodic memory (partition 2 of the 5-partition store).
`assert_fact`	`assert_fact.rs`	Write a durable (subject, predicate, object) fact to P3 semantic memory.

Introspection tools

Tool name	Source	What it does
`wayland_status`	`wayland_introspection.rs`	Read current session state (model, mode, context usage, active tools). Name confirmed by `assert_eq!(WAYLAND_STATUS_TOOL_NAME, "wayland_status")`.
`wayland_telemetry_query`	`wayland_introspection.rs`	Query per-session telemetry. Name confirmed by `assert_eq!(WAYLAND_TELEMETRY_QUERY_TOOL_NAME, "wayland_telemetry_query")`.

Skill tool (always present)

Tool name	Source	What it does
`Skill`	`skill_tool.rs` (in `wcore-agent`)	Invoke a named skill from the catalog; per-skill permission checker; telemetry sink feeds the procedural-memory loop when memory is enabled.

Availability-gated tools and the NO-STUBS contract

Tools without their required credential, binary, or device return Tool::is_available() == false at boot. The LLM never sees a tool it cannot call. Every tool with a backend seam ships a NullXxxBackend that fails loudly (not silently) when called without wiring.

Evidence: bootstrap.rs:557-711 - every env-gated registration is wrapped in if let Some(b) = build_xxx_backend() { registry.register(...) }. A missing env var means the tool is absent from the registry entirely, not present and broken.

API and service integrations

Tool name	Gating condition	What it does
`github_api`	`GITHUB_TOKEN`	GitHub REST: issues, PRs, file reads, comment posts.
`gitlab_api`	`GITLAB_TOKEN`	GitLab REST v4.
`linear_api`	`LINEAR_API_KEY`	Linear GraphQL: issues, projects, cycles.
`notion_api`	`NOTION_API_KEY`	Notion block reads and page creation.
`discord_server`	`DISCORD_BOT_TOKEN`	Discord server operations via bot.
`homeassistant`	`HOME_ASSISTANT_URL` + `HOME_ASSISTANT_TOKEN`	Home Assistant entity reads and service calls.
`postgres_schema`	`POSTGRES_URL` or `DATABASE_URL`	Live Postgres schema introspection via `tokio-postgres`.

Google Meet (5 tools, shared OAuth backend)

All 5 tools are hidden when GOOGLE_CLIENT_ID is absent or PKCE OAuth has not been completed.

Tool name	What it does
`meet_join`	Join a Meet session.
`meet_status`	Get current session status.
`meet_transcript`	Retrieve meeting transcript.
`meet_leave`	Leave the current session.
`meet_say`	In-call TTS.

Media tools

Tool name	Gating condition	What it does
`image_generate`	`OPENAI_API_KEY`, `FAL_KEY`, `GEMINI_API_KEY`, or `HUGGINGFACE_API_KEY`	Image generation via DALL-E 3, FAL, Gemini Imagen, or HuggingFace. First available key wins.
`vision_analyze`	Anthropic, OpenAI, or Gemini key	LLM-based image analysis; Anthropic preferred, OpenAI/Gemini auto-fallback.
`transcribe_audio`	`GROQ_API_KEY` or `OPENAI_API_KEY`	Audio transcription via Groq Whisper (preferred) or OpenAI Whisper.
`text_to_speech`	`OPENAI_API_KEY` or `ELEVENLABS_API_KEY`	Text-to-speech via OpenAI or ElevenLabs; optional `piper` feature-gated local backend.
`voice_mode`	Default audio input device present	Full voice loop: cpal recorder + STT bridge. Hidden in headless/container/SSH environments where cpal cannot bind a default input device.
`video_analyze`	`ffmpeg` in PATH + Anthropic/OpenAI/Gemini key	ffmpeg probe + LLM vision analysis of video files.

Scheduling

Tool name	Gating condition	What it does
`cronjob`	cron store path resolvable	Create, list, update, and delete cron jobs; backed by `WaylandCronScheduler` over `FileCronStore`.

Browser and computer control (plugin-loaded)

These tools are registered by the wayland-browser and wayland-cua plugins, not directly from wcore-tools. They appear in the registry when the plugins are discovered and loaded at boot.

Tool group	Plugin	Gating
Browser tool (18 ops: Navigate, Snapshot, Read, Click, Fill, Press, Select, Upload, Download, Screenshot, GetState, WaitFor, NetworkLog, Console, NewTab, CloseTab, Back, Forward)	`wayland-browser`	Camoufox sidecar at `localhost:9377`, or `WAYLAND_BROWSER_HINT=chromium` with Chromium installed, or `BROWSERBASE_API_KEY` + `BROWSERBASE_PROJECT_ID`.
Computer-use tools (11 ops: LeftClick, RightClick, DoubleClick, MouseMove, Scroll, Type, Key, Screenshot, AxTree, Wait, FrontmostApp)	`wayland-cua`	macOS, Linux X11, Linux Wayland (permissive compositor only), or Windows.

Spotify (7 tools)

Spotify tools register with default backends in the current build. Gating on SPOTIFY_CLIENT_ID/SPOTIFY_ACCESS_TOKEN is planned for v0.9.1.

Tool name	What it does
`spotify_playback`	Current playback state and controls.
`spotify_devices`	List available devices.
`spotify_queue`	View and modify playback queue.
`spotify_search`	Search tracks, albums, artists, playlists.
`spotify_playlists`	List and inspect playlists.
`spotify_albums`	List and inspect albums.
`spotify_library`	Saved library access.

Other integrations

Tool name	Notes
`yuanbao`	Tencent Yuanbao toolset; registers with default backend.

Plan mode tools (conditional)

When plan.enabled = true in config, two additional tools are registered:

EnterPlanMode - restricts the session to Info-only tools (Read, Grep, Glob, RepoMap, etc.); mutating tools are blocked.
ExitPlanMode - restores full tool access.

Script tool (conditional)

When builtin_tools.script.enabled = true, a Script tool is registered. It runs against a mini-registry containing a curated subset of the built-in tools (no Spawn, no Script, no MCP) to avoid an Arc cycle. Steps with approval_required: true route through the same approval bridge as the host.

How availability gating works

Each tool that needs a backend implement a resolver function (build_xxx_backend()). The resolver checks for the required env var or binary and returns Some(backend) or None. The if let Some(b) = build_xxx_backend() pattern in bootstrap.rs means the registry call is never reached on a None return. The tool is absent from registry.tool_names() and from the system prompt. There is no stub version the model can accidentally call.

This is distinct from MCP tools, which are registered by name and defer schema loading until ToolSearch is called.