ROUTINE001
The same chores come back every week.
Reports, file sorting and research repeat, and each one costs time you meant to spend on real work.
NOW ON THE MICROSOFT STORE
Deploy desktop agents for files, terminal, browser and screen. They run on your machine with your own model keys, and they ask before they act.
THE PROBLEM
ROUTINE001
Reports, file sorting and research repeat, and each one costs time you meant to spend on real work.
SILOS002
Moving results between apps, tabs and folders is work nobody counts, and it never ends.
TALK003
You still copy the answer, open the app and do the steps yourself.
CONTROL004
Without clear limits and a log, you cannot trust what ran while you were away.
MEET SHADOW
Create agents, each with its own chat, model, permissions and schedule. Give one a goal. It writes a plan, you approve it, it works, it reports. Click any agent to open its chat, and click the approval buttons yourself.
Compare three Windows automation tools for our team. Pros, cons, price.
PLAN · 3 stepsResearch
Reports\automation-tools.mdSearched 4 queries · 12 pages read
Compared 3 tools · price, limits, setup
Saved Reports\automation-tools.md
The summary is in your Reports folder. Nothing was sent anywhere.
Sort my Downloads by project.
FILES · MOVEneeds your ok
Move 148 files from Downloads into 6 project folders.
Moved 148 files into 6 folders
Skipped 3 open in another app
Logged every move, undo ready
Run this every Friday at 5 pm.
Created routine Friday sort
The api tests fail since this morning. Fix it.
TERMINAL · POWERSHELLexact command
> pytest -q tests/api
src/api/dates.py+4 −1
- return parse(value)
+ return parse(value, tz=UTC)
0/14 tests passed
GITHUB · OPEN PULL REQUESTshadow/fix-dates
Draft the release notes from this week's merged pull requests.
FILES · WRITEneeds your ok
Create Docs\launch\release-notes.md in your granted folder.
Read 12 merged pull requests
Wrote 3 sections · features, fixes, notes
Saved Docs\launch\release-notes.md
The draft is ready. I did not post it anywhere. Send it to the Launch crew? That hand-off asks you first.
Launch is Thursday. What's left?
Messages from Research and Report Writer · each hand-off approved
Research
Competitor pricing table is done. 2 changes since last week.Report Writer
Release notes are drafted inDocs\launch. Waiting for your read.Chief
Pricing Research · done
Release notes Report Writer · needs your review
Checklist me · 2 of 9 open
CHAT / 01
The agent writes a plan first. Nothing runs until you approve it. Click the button yourself.
THE DIFFERENCE
A chat assistant hands you text and leaves the steps to you. A SHADOW agent takes the steps itself, inside the limits you set, and stops to ask where it matters.
01 / CHAT ASSISTANTyou do the steps
02 / SHADOW AGENTit does the steps
HOW IT WORKS
Every run follows the same four steps, so you always know what an agent is doing and why.
STEP 01
State a goal in the agent's chat. It writes a short plan before it touches anything.
STEP 02
You approve the plan. Each risky step asks again and shows the exact command, path or message.
STEP 03
It works in the folders and apps you granted, now or on a schedule.
STEP 04
A structured report lands in the chat: what was done, counts, and what is queued but not sent.
WHAT AGENTS CAN USE
You grant tools per agent. Nothing an agent reads, from a web page, a file or another agent, can add to them.
Filesgranted folders
Read, write and edit inside folders you grant to this agent. Deletes go to a SHADOW trash.
asks beforewrite · delete
Terminalpowershell
Runs PowerShell on your PC. You see the exact command before it runs.
asks beforeevery command
Browserown profile
A browser with the agent's own profile, streamed live to the chat.
asks beforesign-in · send · pay · upload
Websearch · read
Searches and reads pages. Page text is treated as untrusted and can never trigger an action.
asks beforenothing to act on
Screenone window
Sees and uses one window you pick, for apps with no other way in. Started by you only.
asks beforetyping · risky steps
Pluginsmcp
Connect apps through MCP connectors, granted one by one.
asks beforeper plugin grant
A fixed blocklist covers system folders, other users' folders and credential stores. No grant unlocks it.
SCREEN CONTROL
For apps with no other way in, an agent can see and use one window you pick. Only you can start it. A Working overlay stays visible the whole time, and Ctrl+Alt+Esc stops it at any moment.
Press the keys, or click, to stop the agent.
SKILLS
An agent can save a working method as a skill. You can read, edit, disable, delete and roll back every one. A skill never widens permissions.
Researchv4
Search 5 sources, compare against last week, write a diff table.
Report Writerv3
Edited by you, so it is locked against the agent.
locked
File Organizerv5
Flagged: replies with this skill finish less often than replies without it.
BACKGROUND · TEAMS
ROUTINESapp closed is fine
Every few minutes, daily or weekly. A missed run executes once when your PC is back. A run that needs approval waits in the chat and notifies you. Background runs never take your mouse.
GROUPS2 to 8 agents
Agents can message each other and share one group chat. Each hand-off between agents asks you first. A loop between the same two agents is stopped with a reason.
BUILT TO BE TRUSTED
CODE AGENT WANTS TO RUNtry it
> Remove-Item .\build -Recurse
Pick one. Nothing runs from this page.
01
Folders, terminal, browser, screen, plugins. You grant each one. Nothing an agent reads can widen them.
02
They show the exact command, path, message and recipient. Allow once, always allow, or deny. Deny always wins.
03
System folders, other users' folders and credential stores are out of reach. No grant unlocks them.
04
When a sign-in is needed, the agent pauses and you type into the live window. It never sees the password.
05
Every action is logged. Deleted files go to a trash and edits keep a copy.
06
No SHADOW cloud, relay or sync. Your model keys live in the Windows keychain.
DEVELOPER PACK
The developer pack adds GitHub, Sentry and editor awareness. A code agent fixes an issue in its own git worktree, runs tests in an isolated sandbox and puts the diff, tests and scan on one card. After your tap it opens the pull request, once. Your working tree is never touched.
SHADOW cloud services
agents per user, groups included
model providers
hotkey stops screen control
MODELS
PLATFORM
TOOLS
FAQ
There is no SHADOW cloud. The prompts, files and screenshots an agent uses go only to the model provider you choose, with your own key. Use Ollama to keep text on your machine.
Only inside what you granted, and risky actions ask first. You can choose "always allow" for one specific action of one agent. A deny rule always beats an allow rule.
No. When a sign-in is needed, the agent pauses and you type it into the live window yourself.
Anthropic, OpenAI, xAI, Google or Ollama, set per agent. You pay the provider directly. Screen control works with Claude models first; other models use every other tool.
Up to 20, groups included. Each has its own chat, model, permissions, skills and schedule.
From the Microsoft Store. Microsoft signs and scans the package, and updates arrive through the Store like any other app. There is no separate installer to download.
Windows PCs. Install it from the Microsoft Store.
Every run has limits on turns, time and spend. When one is hit or a step fails, the run stops and the reason shows in the chat. Nothing is dropped silently.
DOWNLOAD
Free. Bring your own API keys. Everything runs on your computer.
Hand off files, terminal, browser and screen work to agents that plan the job and finish it in the background.
Every action that matters waits for one tap from you. You see what it will do before it does it.
Runs on your PC with your own model keys. No account, no cloud of ours, nothing leaves without your approval.
Free for Windows. Bring your own API keys.