Not stable yet. WolOS is in active development and the current ISO is a test build: try it in a virtual machine or on a spare disk, not on a computer you depend on.

WolOS
Manual contents

Under the hood

The wol command

Every wol command, what it does, and which ones helpers may call.

On this page

What it is

wol is the one command-line tool for the system: appearance, sound, displays, network, updates, boot, modules, plugins, sessions and more. The desktop, scripts and AI helpers all use the same commands, so what you can do in a terminal you can do from a script.

Why

One tree of commands means one place for help, one place for the approval gate and one place to test. A command that changes the system asks on screen; a read never does.

How

wol <command> --help shows help and never runs the command. --json prints machine-readable output and --yes confirms a prompt. The table below is the complete tree, generated from the program's own command table.

Assistants and automation · Privacy and permissions · Settings · Updates

Reference

173 commands. The last column says what a helper (wol mcp) may do with the command: it reads, changes your own settings, or asks for the administrator password; a dash means helpers cannot call it.

wol theme

CommandWhat it doesHelpers
wol themeCurrent theme id-
wol theme currentCurrent theme id-
wol theme listInstalled themesreads
wol theme set <id>Use a themechanges your settings
wol theme lightUse the light default theme-
wol theme darkUse the dark default theme-
wol theme toggleSwitch light <-> dark-
wol theme css [id]Theme as CSS variables-
wol theme getCurrent theme, appearance and accentreads

wol shell

CommandWhat it doesHelpers
wol shell toggle <panel>Toggle a shell panel-
wol shell show <panel>Show a shell panel-
wol shell hide <panel>Hide a shell panel-
wol shell reloadReload the shell-

wol update

CommandWhat it doesHelpers
wol updateList pending package upgrades-
wol update checkList pending package upgradesreads
wol update statusWhat the daily check found: package fixes, security fixes, a new release-
wol update plan [slot] [release]Commands an update would run (the other root slot)-
wol update apply [slot] [release]Update into the other root slot (root, --yes)-
wol update rollback [slot]Boot the given (or the previous) restore point next (administrator)-
wol update appsNewer versions of .wol apps; --yes installs them (administrator)-

wol encrypt

CommandWhat it doesHelpers
wol encrypt rebindFirst boot: bind the disk key to this computer's firmware state (root)-
wol encrypt resealAfter a start the chip refused: bind the disk key to the firmware state again (root)-
wol encrypt password [a]wol-admind: USER's new password (stdin) also opens the disk (root)-
wol encrypt decide [a]Disk encryption for the installer: off, tpm2 or passphrase-
wol encrypt enroll [a] [b] [c] [d]Installer: enroll TPM2 or passphrase and a recovery key (root)-
wol encrypt words [a] [b]Installer: kernel command line words that unlock the disk-
wol encrypt hooks [a]Installer: add the unlock hook to an mkinitcpio config-

wol boot

CommandWhat it doesHelpers
wol boot enrollQueue this computer's key for the firmware's key screen (root)-
wol boot passwordInstaller: the word typed on the firmware's key screen-
wol boot detect [want]Installer: the protection tier this firmware allows (yes|no: protection wanted)-
wol boot key-screen [tier]Installer: does this tier need the firmware's key screen (yes|no)-
wol boot words [tier]Installer: kernel command line words of a tier-
wol boot note [tier] [screen]Installer: what to tell the person before the restart-
wol boot statusSecure Boot, TPM, lockdown and seal state as JSON-
wol boot checkBoot check: refuse a kernel older than the slots kept-
wol boot blessAfter a good boot: raise the rollback floor and name the previous version-

wol seal

CommandWhat it doesHelpers
wol seal apply [root] [digestfile]Make a system slot read-only and record fs-verity digests (root)-
wol seal checkBoot check: the running slot matches what was sealed, else the other slot starts-
wol seal offDeveloper mode: make the system writable again and stop checking it (root)-

wol layers

CommandWhat it doesHelpers
wol layers fold [a] [b] [c]Update: copy live-installed packages into the new slot (root)-
wol layers clearBoot: remove the live layers this slot already holds (root)-

wol install

CommandWhat it doesHelpers
wol install info [plan]Installer: a plan's disk and encryption as shell assignments (root)-
wol install probe [disk]Installer: what is on a disk, as JSON; reads only (root)-
wol install check [plan]Installer: check a plan against the disk as it is now; writes nothing (root)-
wol install layout [plan] [key]Installer: partition and format as the plan says; prints where things went (root)-
wol install settings [plan] [root]Installer: language, keyboard and time zone of the new system (root)-
wol install account [plan] [root] [passfile]Installer: create the account in the new system (root)-
wol install facts [disk]Installer: a disk's facts as lines: size <bytes>, os <family>, bitlocker yes|no; reads only-
wol install mounts [disk]Installer: what of a disk is in use, as lines: mount <path> (deepest first), swap <device>-
wol install hostname [name]Installer: the computer name if valid (settings::hostname), else wolos-
wol install <app>Install a .wol file, an App Store app or a package (administrator)-

wol mirror

CommandWhat it doesHelpers
wol mirror statusPackage mirrors, CPU level and whether the [cachyos-*-v3] sections are on-
wol mirror rankProbe the mirrors in parallel, fastest first (--yes writes the order, root)-
wol mirror gateTurn the [cachyos-*-v3] sections on only where the CPU runs x86-64-v3 builds (root, --yes)-
wol mirror kernelSystem kernel package for this CPU-

wol gpu

CommandWhat it doesHelpers
wol gpu envSession GPU environment (export lines)-
wol gpu hyprconfcompositor render config fragment-

wol hw

CommandWhat it doesHelpers
wol hwHardware: every device, its driver and statusreads
wol hw listEvery device, its driver and statusreads
wol hw statusDevices that need a driver or firmware, and the fixreads
wol hw computeGPU compute for local AI: backend (cuda, rocm, vulkan or cpu), VRAM and the GPUreads
wol hw fixLoad missing drivers (administrator); --yes also installs packages-
wol hw boot [--online]Boot step: load drivers, write tunables (wolos-hw.service, root); --online installs missing packages first-

wol modules

CommandWhat it doesHelpers
wol modulesOptional modules: AI, developer, creative and console stacks, and their statereads
wol modules listEvery optional module: installed, enabled, pending or availablereads
wol modules status [id]State of one module (or all): installed, enabled, pending, what it needsreads
wol modules install <id>Install a module's packages (administrator); then wol modules enable <id>-
wol modules remove <id>Remove a module's packages (administrator) and its user-side parts-
wol modules enable <id>Finish a module's setup for this user (recipes, mise tools, post step); repeatablechanges your settings

wol sessions

CommandWhat it doesHelpers
wol sessionsTerminal and agent windows saved for the next loginreads
wol sessions listTerminal and agent windows saved for the next loginreads
wol sessions saveSave this session's terminal and agent windows (workspace, folder, zellij, claude --continue)changes your settings
wol sessions restoreReopen the saved windows in their workspaceschanges your settings

wol games

CommandWhat it doesHelpers
wol gamesGames: what Steam and Windows games need, with the fix-
wol games doctorWhat Steam and Windows games need on this machine, with the fix-
wol games steam [url]Start Steam (downloads it the first time); optional steam:// link-

wol power

CommandWhat it doesHelpers
wol powerPower: source, mode and what the policy sets-
wol power statusPower source, mode, battery and what the policy sets-
wol power mode <auto|low|high>auto follows the power source; low saves energy; high is fastest-
wol power applyApply the power policy now (root; runs by itself when the charger is plugged or unplugged, at boot and after sleep)-
wol power sleepSleep now-
wol power restartRestart now-
wol power shutdownShut down now-

wol firewall

CommandWhat it doesHelpers
wol firewallFirewall: on or off (nothing comes in unasked)-
wol firewall statusFirewall on at boot and filtering now-
wol firewall onTurn the firewall on-
wol firewall offTurn the firewall off-

wol security

CommandWhat it doesHelpers
wol securityFirewall, remote login, kernel hardening and the malware check-
wol security scan <path>Check a file, and what is packed inside it, against known malware-
wol security allow <path>Open Anyway: let a file the malware check stopped run on this computer-

wol widgets

CommandWhat it doesHelpers
wol widgetsWidgets on the desktop and the ones you can add-
wol widgets listWidgets on the desktop and the ones you can add-
wol widgets add <kind> [size]Put a widget on the desktop (clock, weather, a package id; small|medium|large)-
wol widgets remove <id>Take a widget off the desktop by its id-
wol widgets reloadReread widgets.json and the widget packages-
wol widgets validate <package>Check a widget package (id or folder): schema, source, every binding-

wol plugin

CommandWhat it doesHelpers
wol pluginShell plugins: installed, on or off, problemsreads
wol plugin listShell plugins: installed, on or off, problemsreads
wol plugin new <id> [kinds]Scaffold a plugin that passes check (kinds: menubar,widget,panel,search,dock,tile,toggle,hotkey,webapp,theme)-
wol plugin check <plugin>Check a plugin (id or folder): manifest, files, Lua loads and renders, theme, compositor linesreads
wol plugin run <plugin> <menubar|widget|panel|search> [entry] [input]Render one entry headless as JSON (input: a button number to click first, or the search text)-
wol plugin enable <id>Turn a plugin on and grant the permissions it declares-
wol plugin disable <id>Turn a plugin off-
wol plugin remove <id>Delete a user plugin folder and its state-
wol plugin add <plugin>Install a .wolplug file or a plugin folder for this account (unsigned: --yes); turn it on with enable-
wol plugin pack <plugin> [out]Make <id>-<version>.wolplug (zstd tar of the folder with its SHA256 list) next to it or at out-

wol appearance

CommandWhat it doesHelpers
wol appearanceAppearance, accent, theme and wallpaperreads
wol appearance set <light|dark|auto>Light, Dark or Auto (keeps the accent)changes your settings

wol wallpaper

CommandWhat it doesHelpers
wol wallpaperCurrent wallpaperreads
wol wallpaper set <path>Use an image file as wallpaperchanges your settings

wol audio

CommandWhat it doesHelpers
wol audioVolume, mute and outputsreads
wol audio volume <percent>Set the volume, 0-100changes your settings
wol audio muteMute the soundchanges your settings
wol audio unmuteUnmute the soundchanges your settings
wol audio doctorSound check: services, inputs above 0 dB, buffers, dropouts, OBS pieces, with the fixreads
wol audio resetForget stored sound defaults and volumes, drop Pro Audio overrides, restart PipeWire (dry run; --yes does it)-
wol audio appmix <on|off|status>OBS: the "WolOS App Mix" output and "Mic + App Mix" source (pipewire-pulse modules, on demand)-

wol display

CommandWhat it doesHelpers
wol displayBrightness and displaysreads
wol display brightness <percent>Set the brightness, 1-100changes your settings

wol wifi

CommandWhat it doesHelpers
wol wifiWi-Fi state and nearby networksreads
wol wifi onTurn Wi-Fi on (administrator)needs the administrator password
wol wifi offTurn Wi-Fi off (administrator)needs the administrator password
wol wifi join <ssid>Join a network; Wi-Fi password on stdin (administrator)needs the administrator password

wol bluetooth

CommandWhat it doesHelpers
wol bluetoothBluetooth statereads
wol bluetooth onTurn Bluetooth on (administrator)needs the administrator password
wol bluetooth offTurn Bluetooth off (administrator)needs the administrator password

wol focus

CommandWhat it doesHelpers
wol focusDo Not Disturb statereads
wol focus onTurn Do Not Disturb onchanges your settings
wol focus offTurn Do Not Disturb offchanges your settings

wol webapp

CommandWhat it doesHelpers
wol webappYour web appsreads
wol webapp listYour web appsreads
wol webapp add <name> <url> [icon]Make a web address an app with its own window and iconchanges your settings
wol webapp remove <name>Remove a web app (name or id)changes your settings

wol toggle

CommandWhat it doesHelpers
wol toggle [nightlight|night-light|nightshift|night-shift|stay-awake|idle|awake|caffeine|silence|dnd|focus] [on|off]Turn a toggle on or off; without on|off it flips; alone it lists them-
wol toggle listDesktop toggles and their statereads

wol windows

CommandWhat it doesHelpers
wol windowsOpen windowsreads
wol windows focus <window>Bring a window forward (address or app id)changes your settings

wol restore

CommandWhat it doesHelpers
wol restore listRestore points (the system copies you can start from)reads
wol restore activate <slot>Start from a restore point next boot (administrator)needs the administrator password

wol helpers

CommandWhat it doesHelpers
wol helpersHelpers: on or off, capabilities, who connected-
wol helpers onLet helpers use WolOS-
wol helpers offTurn every helper away-
wol helpers allow <read|appearance|sound|display|network|focus|apps|notify|screen-capture|window-list|files|restore|modules>Allow helpers one capability-
wol helpers deny <read|appearance|sound|display|network|focus|apps|notify|screen-capture|window-list|files|restore|modules>Deny helpers one capability-
wol helpers forget <helper>Take back every Always Allow of one helper-
wol helpers logWhat helpers did, newest first-

Single commands

CommandWhat it doesHelpers
wol aboutOS, kernel, processor, memoryreads
wol jobsBackground jobs (wold)-
wol start <label>Start a job (root)-
wol stop <label>Stop a job (root)-
wol sys [topic]System info topic: about stats disks temperatures gpu hw updatesreads
wol admin <action> [args...]One allow-listed administrator action (wol-admind; password on stdin)-
wol run <bundle> [args...]Run a .wol bundle (wol-run)-
wol port <bundle>Show which target of a bundle runs on this host-
wol base verifyBase files that changed or went missing (wolos-base manifest)-
wol pkg [args...]pacman for the sealed system: wol pkg -- -S name (installs are live at once)-
wol apiEvery command: arguments, access, approval-
wol mcpModel Context Protocol server on stdin/stdout-
wol accent set <violet|blue|pink|red|orange|yellow|green|graphite>Accent colour (keeps the appearance)changes your settings
wol batteryBattery charge and healthreads
wol networkOnline, addresses, Wi-Fi network, Bluetoothreads
wol remind <minutes> [text...]Show a reminder in <minutes> (1..1440)changes your settings
wol settingsYour desktop settingsreads
wol open <target>Open an app (id or name), a file or an http/https/mailto linkchanges your settings
wol notify <title> [body...]Show a notificationchanges your settings
wol screenshotScreenshot of the whole screen; prints the filechanges your settings
wol files tidy [plan]Sort Downloads into folders: dry run, then apply its plan idchanges your settings
wol historyRecent settings changesreads
wol undo [id]Undo the last change, or change <id>changes your settings
wol remove <app>Remove an app installed from a .wol (administrator)-
wol listApps installed from .wol packages-
wol search [term...]Search the App Store and the .wol index-
wol help [command...]Show help-

Reference synced from wonderlandos/wolos crates/controller/src/cli.rs.