Module tools 

Tool subsystem for agent-callable capabilities.

Re-exports

pub use cron_add::CronAddTool;

pub use cron_list::CronListTool;

pub use cron_remove::CronRemoveTool;

pub use cron_run::CronRunTool;

pub use cron_runs::CronRunsTool;

pub use cron_update::CronUpdateTool;

pub use delegate::DelegateTool;

pub use file_read::FileReadTool;

pub use model_switch::ModelSwitchTool;

pub use read_skill::ReadSkillTool;

pub use schedule::ScheduleTool;

pub use security_ops::SecurityOpsTool;

pub use send_message_to_peer::SendMessageToPeerTool;

pub use shell::ShellTool;

pub use skill_http::SkillHttpTool;

pub use skill_tool::SkillBuiltinTool;

pub use skill_tool::SkillShellTool;

pub use sop_advance::SopAdvanceTool;

pub use sop_approve::SopApproveTool;

pub use sop_execute::SopExecuteTool;

pub use sop_list::SopListTool;

pub use sop_status::SopStatusTool;

pub use sop_workshop::SopWorkshopTool;

pub use spawn_subagent::SpawnSubagentTool;

pub use todo_write::TodoWriteTool;

pub use verifiable_intent::VerifiableIntentTool;

Modules

attribution

cron_add

cron_list

cron_remove

cron_run

cron_runs

cron_update

delegate

file_read

mcp_context

Helpers that format MCP resource/prompt content for safe injection into the model context. All server-origin content is wrapped with an trust="untrusted-external" provenance marker and run through the existing secret-scrubbing/length-bounding used elsewhere for server-controlled text.

model_switch

param_options

Runtime resolution of tool parameter option domains.

read_skill

schedule

scoped

ScopedToolRegistry - the one gated seam that mints the per-agent tool set.

security_ops

Security operations tool for managed cybersecurity service (MCSS) workflows.

send_message_to_peer

Agent-loop tool that sends a message to a configured peer on a shared channel.

shell

skill_http

HTTP-based tool derived from a skill’s [[tools]] section.

skill_manage

Skill management tools for the background review fork.

skill_tool

Shell-based tool derived from a skill’s [[tools]] section.

sop_advance

sop_approve

sop_execute

sop_list

sop_status

sop_workshop

spawn_subagent

Agent-loop tool that spawns an ephemeral SubAgent inheriting the parent’s identity, security policy, and memory allowlist, runs a focused prompt, and returns the response. Cron’s JobType::Agent dispatch is the other SubAgent spawn site; both funnel through

todo_write

verifiable_intent

Verifiable Intent tool — exposes VI verification and constraint evaluation to the agent orchestration loop.

Structs

ActivatedToolSet

Per-conversation mutable state tracking which deferred tools have been activated (i.e. their full schemas have been fetched via tool_search). The agent loop consults this each iteration to decide which tool_specs to include in the LLM request.

AllToolsResult

Bundled return values from tool registry construction. Named struct to avoid an ever-growing positional tuple that’s painful to destructure across many callers.

ArcToolRef

Thin wrapper that makes an Arc<dyn Tool> usable as Box<dyn Tool>.

AskUserTool

Agent-callable tool for sending a question to a user and waiting for their response.

BackupTool

Workspace backup tool: create, list, verify, and restore timestamped backups with SHA-256 manifest integrity checking.

BrowserDelegateTool

Tool that delegates browser-based tasks to a browser-capable CLI subprocess.

BrowserOpenTool

Open approved HTTP/HTTPS URLs in the system default browser (no scraping, no DOM automation).

BrowserTool

Browser automation tool using pluggable backends.

CalculatorTool

CanvasStore

Shared canvas store — holds all active canvases. Thread-safe and cheaply cloneable (wraps Arc).

CanvasTool

CanvasTool — agent-callable tool for the Live Canvas (A2UI) system.

ChannelRoomTool

ClaudeCodeRunnerTool

ClaudeCodeTool

CloudOpsTool

Read-only cloud operations advisory tool. Actions: review_iac, assess_migration, cost_analysis, architecture_review.

CloudPatternsTool

Tool that suggests cloud patterns given a workload description.

CodexCliTool

ComposioTool

A tool that proxies actions to the Composio managed tool platform.

ComputerUseConfig

Computer-use sidecar settings.

ContentSearchTool

DataManagementTool

Workspace data lifecycle tool: retention status, time-based purge, and storage statistics.

DeferredMcpToolSet

Collection of all deferred MCP tool stubs discovered at startup. Provides keyword search for tool_search.

DiscordSearchTool

Search Discord message history stored in discord.db.

DiscoveredCli

A discovered CLI tool with metadata.

EmailReadTool

Fetch the full body of a specific email by UID. Never sets \Seen.

EmailSearchTool

Search an IMAP mailbox without touching the \Seen flag on any message.

EscalateToHumanTool

Agent-callable tool for escalating situations to a human operator with urgency routing.

FileDownloadTool

FileEditTool

FileUploadBundleTool

FileUploadTool

FileWriteTool

Write file contents with path sandboxing

GeminiCliTool

GitForgeTool

Agent-callable tool exposing forge operations as a resource/action grid plus a raw catch-all, all over the git channel’s single forge transport.

GitOperationsTool

Git operations tool for structured repository management. Provides safe, parsed git operations with JSON output.

GlobSearchTool

Search for files by glob pattern within the workspace.

GoogleWorkspaceTool

HardwareBoardInfoTool

Tool: return full board info (chip, architecture, memory map) for agent/Telegram.

HardwareMemoryMapTool

Tool: report hardware memory map for connected boards.

HardwareMemoryReadTool

Tool: read memory at address from connected Nucleo via probe-rs.

HttpRequestTool

HTTP request tool for API interactions. Supports GET, POST, PUT, DELETE methods with configurable security.

ImageGenTool

ImageInfoTool

JiraTool

KnowledgeTool

Tool for managing a knowledge graph of patterns, decisions, lessons, and experts.

LinkedInTool

LlmTaskTool

Tool that runs a single prompt through an LLM and optionally validates the response against a JSON Schema. No tools are provided to the LLM — this is a pure text-in, text-out (or JSON-out) call.

McpPromptsTool

Generic MCP prompt access tool. Routes through McpRegistry.

McpRegistry

Registry of all connected MCP servers, with a flat tool index.

McpResourcesTool

Generic MCP resource access tool. Routes through McpRegistry.

McpServer

A live connection to one MCP server (any transport).

McpToolWrapper

A zeroclaw Tool backed by an MCP server tool. The prefixed_name (e.g. filesystem__read_file) is what the agent loop sees. The registry knows how to route it to the correct server.

MemoryExportTool

Bulk-export memories as a JSON array for GDPR Art. 20 data portability.

MemoryForgetTool

Let the agent forget/delete a memory entry

MemoryPurgeTool

Let the agent bulk-delete memories by namespace or session

MemoryRecallTool

Let the agent search its own memory

MemoryStoreTool

Let the agent store memories — its own brain writes

Microsoft365Tool

ModelRoutingConfigTool

NotionTool

Tool for interacting with the Notion API — query databases, read/create/update pages, and search the workspace. Each action is gated by the appropriate security operation (Read for queries, Act for mutations).

OpenCodeCliTool

PathGuardedTool

PipelineTool

The execute_pipeline tool that runs multi-step tool chains.

PollTool

ProjectIntelTool

Project intelligence tool for consulting project management. All actions are read-only analysis/generation; nothing is modified externally.

ProxyConfigTool

PushoverTool

RateLimitedTool

ReactionTool

Agent-callable tool for adding or removing emoji reactions on messages.

ReportTemplateTool

SchemaCleanr

JSON Schema cleaner optimized for LLM tool calling.

ScreenshotTool

Tool for capturing screenshots using platform-native commands. macOS: screencapture Linux: tries gnome-screenshot, scrot, import (ImageMagick) in order.

SendViaTool

Agent-callable tool for per-turn output routing and channel fanout.

SessionDeleteTool

Permanently deletes a session and all its messages. The session key becomes invalid and must be recreated for new conversations.

SessionResetTool

Resets a session by clearing its message history. The session key remains valid for new messages. Useful for cleaning up stale conversations without deleting the session entry itself.

SessionsCurrentTool

Returns the session key and metadata for the currently active session. Reads the session key from the TOOL_LOOP_SESSION_KEY task-local, which is scoped around gateway and channel agent turns.

SessionsHistoryTool

Reads the message history of a specific session by ID.

SessionsListTool

Lists active sessions with their channel, last activity time, and message count.

SessionsSendTool

Sends a message to a specific session, enabling inter-agent communication.

TextBrowserTool

Text browser tool: renders web pages as plain text using text-based browsers (lynx, links, w3m). Ideal for headless/SSH environments where graphical browsers are unavailable.

ToolOutput

Typed tool output. The LLM-facing string is derived from the structured value exactly once, at construction, so the two can never drift. Deref to str keeps every text read site working on the rendered form.

ToolResult

Result of a tool execution

ToolSearchTool

Built-in tool that fetches full schemas for deferred MCP tools.

ToolSpec

WeatherTool

Fetches weather data from wttr.in — no API key required, global coverage.

WebFetchTool

WebSearchTool

Web search tool for searching the internet. Supports multiple model_providers: DuckDuckGo (free), Brave (requires API key), Tavily (requires API key), SearXNG (self-hosted, requires instance URL), Jina AI (requires API key), Bocha AI (requires API key, Chinese-friendly).

Enums

CleaningStrategy

Schema cleaning strategies for different LLM model_providers.

Constants

ALLOWED_CONTENT_TYPES

Allowed content types for canvas frames via the REST API.

BUILTIN_TOOL_INTEGRATIONS

MAX_CONTENT_SIZE

Maximum content size per canvas frame (256 KB).

REENTRANT_AGENT_TOOLS

Re-entrant agent-spawning tools that must never be collapsed by the per-turn duplicate-call guard: launching several with the same prompt (redundancy, sampling, fan-out) is intentional, not an accidental repeat. Unioned with config-provided exemptions in the tool-call loop.

Statics

TURN_ROUTING

Traits

Tool

Functions

all_tools

Create full tool registry including memory tools and optional Composio

all_tools_with_runtime

Create full tool registry including memory tools and optional Composio.

build_deferred_tools_section

Build the <available-deferred-tools> section for the system prompt. Lists only tool names so the LLM knows what is available without consuming context window on full schemas. Includes an instruction block that tells the LLM to call tool_search to activate them.

build_deferred_tools_section_excluding

build_deferred_tools_section_filtered

build_mcp_capability_tools

Build the two generic MCP capability tools (mcp_resources, mcp_prompts), including each only when the access policy admits its name. A None policy admits both. Returned as Arc<dyn Tool> ready to register and/or expose to delegates.

collect_mcp_elevation_arcs

default_tools

Create the default tool registry

default_tools_with_runtime

Create the default tool registry with explicit runtime adapter.

discover_cli_tools

Discover available CLI tools on the system. Scans PATH for known tools and returns metadata for each found.

register_skill_tools

register_skill_tools_with_context

Register skill-defined tools with full context for builtin kinds. unfiltered_registry provides the pre-policy tool list for kind = "builtin" delegation.

register_skill_tools_with_context_and_runtime

Type Aliases

AgentPeerGroupResolver

Resolves the peer groups that include the active agent, read live from config at call time so a config reload (membership / external_peers / channel alias / output_modality) takes effect without rebuilding the tool registry.

ChannelMapHandle

Shared handle giving tools late-bound access to the live channel map.

DelegateParentToolsHandle

Shared handle to the delegate tool’s parent-tools list. Callers can push additional tools (e.g. MCP wrappers) after construction.

PerToolChannelHandle

TurnRoutingHandle

Handle to one turn’s routing state. The orchestrator creates a fresh handle before each run_tool_call_loop call, scopes it into TURN_ROUTING for the duration of the loop, and reads it back after the loop completes.