The assistant is optional, off until you give it a key, and built around one rule: it may read anything you could read, but it changes nothing you have not confirmed — and whatever it changes goes through the same queue, Recycle Bin and Ctrl+Z as your own hands.
What it does
- Chat with tools. In the AI panel (Ctrl+Alt+B) the assistant can list folders, read files, search names, grep contents, stat, size a tree, find duplicates, checksum, diff two files, show git status/log/diff, and navigate, reveal or select in the panels — all on its own. Moving, copying, renaming, deleting, writing, packing, extracting and git staging/committing/stashing/branching each become a proposal with a confirm button; approved, they run through the queue with undo.
- AI Rename. From the bulk-rename tool, suggestions built from each file’s content head, EXIF date and camera, or audio tags — into the same diff table you review and apply, extension preserved, collisions flagged.
- Organise. Tools ▸ AI: Organize selection into folders… proposes named subfolders for a selection as a review table; Preview as folders shows the plan as a browsable folder tree in a panel before you apply it; applying is ordinary queued moves you can undo.
- Explain this folder. Tools ▸ Explain / ask about this folder… gives a short overview and answers follow-up questions from the folder’s listing, size and git status.
- Where did it go? The Flight Recorder’s Ask the recorder narrates cwdio’s own operation log — “Tax 2025 was moved from Desktop into D:\Archive yesterday at 14:12” — reading no file content and changing nothing.
- A second opinion before deleting. The delete confirmation shows a low/medium/high risk note from a glance at what the files appear to be; it never changes what the dialog does.
- Sweep with hints. Tools ▸ Sweep: triage this folder… steps through files one at a time with single-key verdicts (works with no AI at all); with a provider, likely junk and likely destinations are highlighted — advisory, the keystroke still decides.
- Semantic search. With an embedding model configured, the search overlay gains a Semantic mode over a per-folder index built on your machine.
- MCP, both directions. cwdio is an MCP server for the agent in its own terminal and an MCP client for external tool servers you add.
How to use it
- Open the AI panel (Ctrl+Alt+B), enter your provider’s base URL, model and key, and test the connection. The key goes into an OS-encrypted vault; the URL and model into settings.
- Ask. “What is taking space here?”, “find the invoice from March”, “rename these photos by date”. Watch the tool activity stream; approve or decline each proposal.
- For a terminal agent: Tools ▸ Connect Claude Code to this window writes a
cwdioentry into the folder’s.mcp.jsonthat survives restarts; the agent then drives this window, and a global confirm dialog (with a per-session trust option) gates every mutation.
How it stays safe
- File bytes a read tool fetches never leave the host process — they feed the model request directly. Only small results and proposals reach the interface. Content is passed to the model inside a delimited untrusted-data block, so a file’s text is data, not instructions.
- Every mutation is dispatched in exactly one place, which serves the chat agent and the MCP agent alike, so a proposal can never bypass the confirm step or the queue.
- The MCP server binds to loopback with a per-window 256-bit bearer token injected only into local terminals — an SSH terminal gets nothing.
What it deliberately does not do
- No shell tool, no code execution, no network fetch tool. The assistant works with files and git.
- No bundled model and no cwdio-side account: the intelligence is your provider’s, local or cloud, and the bill is theirs.
- The assistant does not run unprompted. Nothing indexes, classifies or “tidies” in the background; each feature starts when you start it.
Related
- Bulk rename — where AI Rename’s suggestions land.
- Search — the Semantic mode.
- Undo and the safety net — what every AI change runs through.