General local command execution

The Terminal capability is designed for ordinary command-line work rather than a fixed menu of domain actions. It can run diagnostics, scripts, builds, tests, pipelines, package managers, and other non-interactive zsh commands needed to answer the user's request.

Commands begin in the managed ~/.privateAI/workspaces/default workspace unless the user explicitly chooses another folder. Selecting a folder changes the authorized working root; terminal availability does not depend on selecting a document folder.

Visible supervision

Current limits

The current terminal phase is non-interactive. It does not support persistent detached servers, PTY applications, privileged execution, or secret input. Passwords, tokens, private keys, and other secrets must not be included in prompts or Tool arguments.

Security boundary: the managed workspace is an execution root and organizational boundary, not a security sandbox. PrivateAI does not claim process-level confinement that the operating system has not enforced.

Typical workflows

Examples include inspecting a project, running a test suite, checking a network route, invoking a compiler, processing local data, or diagnosing a process. Success is based on the real command result and final user-visible answer, not merely on the model selecting the Terminal Tool.

Download PrivateAI for Mac