aicomputer 0.1.14 → 0.1.15

package/dist/index.js

@@ -1,400 +1,82 @@
 #!/usr/bin/env node
+import {
+  formatMountHostInstallGuidance,
+  getMountHostValidationIssues
+} from "./chunk-OWK5N76S.js";
+import {
+  ApiError,
+  api,
+  apiWithKey,
+  clearAPIKey,
+  createBrowserAccess,
+  createComputer,
+  deleteComputer,
+  deletePublishedPort,
+  formatStatus,
+  getAPIKey,
+  getBaseURL,
+  getComputerByID,
+  getConnectionInfo,
+  getFilesystemSettings,
+  getStoredAPIKey,
+  getWebURL,
+  hasEnvAPIKey,
+  listComputers,
+  listPublishedPorts,
+  minuteSecondAgo,
+  padEnd,
+  promptForSSHComputer,
+  publishPort,
+  reconcileMounts,
+  resolveComputer,
+  setAPIKey,
+  teardownManagedSessions,
+  timeAgo,
+  vncURL,
+  webURL
+} from "./chunk-KQQUR2YX.js";
+import {
+  defaultMountServiceConfig,
+  ensureMountDirectories,
+  getMountPaths,
+  readMountConfig,
+  readMountControllerLock,
+  readMountStatusSnapshot,
+  removeMountControllerLock,
+  writeMountConfig,
+  writeMountControllerLock,
+  writeMountStatusSnapshot
+} from "./chunk-5JVJROSI.js";
 
 // src/index.ts
-import { Command as Command13 } from "commander";
-import chalk13 from "chalk";
-import { readFileSync as readFileSync4 } from "fs";
+import { Command as Command14 } from "commander";
+import chalk12 from "chalk";
+import { readFileSync as readFileSync3 } from "fs";
 import { basename as basename2 } from "path";
 
 // src/commands/access.ts
 import { Command } from "commander";
-import chalk3 from "chalk";
-import ora from "ora";
-
-// src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var CONFIG_DIR = join(homedir(), ".computer");
-var CONFIG_FILE = join(CONFIG_DIR, "config.json");
-function ensureConfigDir() {
-  if (!existsSync(CONFIG_DIR)) {
-    mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
-  }
-}
-function readConfig() {
-  ensureConfigDir();
-  if (!existsSync(CONFIG_FILE)) {
-    return {};
-  }
-  try {
-    return JSON.parse(readFileSync(CONFIG_FILE, "utf8"));
-  } catch {
-    return {};
-  }
-}
-function writeConfig(config) {
-  ensureConfigDir();
-  const tempFile = `${CONFIG_FILE}.${process.pid}.tmp`;
-  writeFileSync(tempFile, JSON.stringify(config, null, 2), { mode: 384 });
-  renameSync(tempFile, CONFIG_FILE);
-}
-function getAPIKey() {
-  const envValue = process.env.COMPUTER_API_KEY ?? process.env.AGENTCOMPUTER_API_KEY;
-  if (envValue) {
-    return envValue.trim();
-  }
-  return getStoredAPIKey();
-}
-function getStoredAPIKey() {
-  return readConfig().auth?.apiKey?.trim() || null;
-}
-function hasEnvAPIKey() {
-  return Boolean(process.env.COMPUTER_API_KEY ?? process.env.AGENTCOMPUTER_API_KEY);
-}
-function setAPIKey(apiKey) {
-  const config = readConfig();
-  config.auth = { apiKey: apiKey.trim() };
-  writeConfig(config);
-}
-function clearAPIKey() {
-  const config = readConfig();
-  delete config.auth;
-  writeConfig(config);
-}
-
-// src/lib/api.ts
-var BASE_URL = process.env.COMPUTER_API_URL ?? process.env.AGENTCOMPUTER_API_URL ?? "https://api.computer.agentcomputer.ai";
-var WEB_URL = process.env.COMPUTER_WEB_URL ?? process.env.AGENTCOMPUTER_WEB_URL ?? resolveDefaultWebURL(BASE_URL);
-var ApiError = class extends Error {
-  constructor(status, message) {
-    super(message);
-    this.status = status;
-    this.name = "ApiError";
-  }
-};
-function getBaseURL() {
-  return BASE_URL;
-}
-function getWebURL() {
-  return WEB_URL;
-}
-async function api(path, options = {}) {
-  const apiKey = getAPIKey();
-  if (!apiKey) {
-    throw new ApiError(401, "not logged in; run 'computer login' first");
-  }
-  return requestWithKey(apiKey, path, options);
-}
-function resolveDefaultWebURL(apiURL) {
-  try {
-    const parsed = new URL(apiURL);
-    if (parsed.hostname === "api.computer.agentcomputer.ai") {
-      return "https://agentcomputer.ai";
-    }
-    if (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") {
-      return `${parsed.protocol}//${parsed.hostname}:3000`;
-    }
-  } catch {
-    return "https://agentcomputer.ai";
-  }
-  return "https://agentcomputer.ai";
-}
-async function apiWithKey(apiKey, path, options = {}) {
-  return requestWithKey(apiKey, path, options);
-}
-async function requestWithKey(apiKey, path, options) {
-  const headers = {
-    Accept: "application/json",
-    ...options.headers ?? {}
-  };
-  if (options.body !== void 0) {
-    headers["Content-Type"] = "application/json";
-  }
-  if (apiKey) {
-    headers.Authorization = `Bearer ${apiKey}`;
-  }
-  const response = await fetch(`${BASE_URL}${path}`, {
-    ...options,
-    headers
-  });
-  if (!response.ok) {
-    throw new ApiError(response.status, await readErrorMessage(response));
-  }
-  if (response.status === 204) {
-    return void 0;
-  }
-  return await response.json();
-}
-async function readErrorMessage(response) {
-  const contentType = response.headers.get("content-type") ?? "";
-  if (contentType.includes("application/json")) {
-    try {
-      const payload = await response.json();
-      if (payload.error) {
-        return payload.error;
-      }
-      return JSON.stringify(payload);
-    } catch {
-      return response.statusText || "request failed";
-    }
-  }
-  const body = await response.text();
-  return body || response.statusText || "request failed";
-}
-
-// src/lib/computers.ts
-async function listComputers() {
-  const response = await api("/v1/computers");
-  return response.computers;
-}
-async function getComputerByID(id) {
-  return api(`/v1/computers/${id}`);
-}
-async function createComputer(input) {
-  return api("/v1/computers", {
-    method: "POST",
-    body: JSON.stringify(input)
-  });
-}
-async function deleteComputer(computerID) {
-  return api(`/v1/computers/${computerID}`, {
-    method: "DELETE"
-  });
-}
-async function getFilesystemSettings() {
-  return api("/v1/me/filesystem");
-}
-async function getConnectionInfo(computerID) {
-  return api(`/v1/computers/${computerID}/connection`);
-}
-async function createBrowserAccess(computerID) {
-  return api(`/v1/computers/${computerID}/access/browser`, {
-    method: "POST"
-  });
-}
-async function createTerminalAccess(computerID) {
-  return api(`/v1/computers/${computerID}/access/terminal`, {
-    method: "POST"
-  });
-}
-async function listPublishedPorts(computerID) {
-  const response = await api(`/v1/computers/${computerID}/ports`);
-  return response.ports;
-}
-async function publishPort(computerID, input) {
-  return api(`/v1/computers/${computerID}/ports`, {
-    method: "POST",
-    body: JSON.stringify(input)
-  });
-}
-async function deletePublishedPort(computerID, targetPort) {
-  return api(`/v1/computers/${computerID}/ports/${targetPort}`, {
-    method: "DELETE"
-  });
-}
-async function resolveComputer(identifier) {
-  try {
-    return await getComputerByID(identifier);
-  } catch (error) {
-    if (!(error instanceof Error) || !("status" in error)) {
-      throw error;
-    }
-    const status = Reflect.get(error, "status");
-    if (status !== 404) {
-      throw error;
-    }
-  }
-  const computers = await listComputers();
-  const exact = computers.find(
-    (computer) => computer.handle === identifier || computer.id === identifier
-  );
-  if (exact) {
-    return exact;
-  }
-  throw new Error(`computer '${identifier}' not found`);
-}
-function webURL(computer) {
-  return `https://${computer.primary_web_host}${normalizePrimaryPath(computer.primary_path)}`;
-}
-function vncURL(computer) {
-  if (!computer.vnc_enabled) {
-    return null;
-  }
-  const domain = computer.primary_web_host.replace(/^[^.]+\./, "");
-  return `https://6080--${computer.handle}.${domain}`;
-}
-function terminalURL(computer) {
-  if (computer.runtime_family !== "managed-worker") {
-    return null;
-  }
-  const domain = computer.primary_web_host.replace(/^[^.]+\./, "");
-  return `https://8788--${computer.handle}.${domain}`;
-}
-function normalizePrimaryPath(primaryPath) {
-  const trimmed = primaryPath?.trim();
-  if (!trimmed) {
-    return "/";
-  }
-  return trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
-}
-
-// src/lib/computer-picker.ts
-import { select } from "@inquirer/prompts";
-import chalk2 from "chalk";
-
-// src/lib/format.ts
 import chalk from "chalk";
-function padEnd(str, len) {
-  const visible = str.replace(/\u001b\[[0-9;]*m/g, "");
-  return str + " ".repeat(Math.max(0, len - visible.length));
-}
-function timeAgo(dateStr) {
-  const seconds = Math.floor((Date.now() - new Date(dateStr).getTime()) / 1e3);
-  if (seconds < 60) return `${seconds}s ago`;
-  const minutes = Math.floor(seconds / 60);
-  if (minutes < 60) return `${minutes}m ago`;
-  const hours = Math.floor(minutes / 60);
-  if (hours < 24) return `${hours}h ago`;
-  const days = Math.floor(hours / 24);
-  return `${days}d ago`;
-}
-function formatStatus(status) {
-  switch (status) {
-    case "running":
-      return chalk.green(status);
-    case "pending":
-    case "provisioning":
-    case "starting":
-      return chalk.yellow(status);
-    case "stopping":
-    case "stopped":
-    case "deleted":
-      return chalk.gray(status);
-    case "error":
-      return chalk.red(status);
-    default:
-      return status;
-  }
-}
-
-// src/lib/computer-picker.ts
-async function promptForSSHComputer(computers, message) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    throw new Error("computer id or handle is required when not running interactively");
-  }
-  const available = computers.filter(isSSHSelectable);
-  if (available.length === 0) {
-    if (computers.length === 0) {
-      throw new Error("no computers found");
-    }
-    throw new Error("no running computers with SSH enabled");
-  }
-  const handleWidth = Math.max(6, ...available.map((computer) => computer.handle.length));
-  const selectedID = await select({
-    message,
-    pageSize: Math.min(available.length, 10),
-    choices: available.map((computer) => ({
-      name: `${padEnd(chalk2.white(computer.handle), handleWidth + 2)}${padEnd(formatStatus(computer.status), 12)}${chalk2.dim(describeSSHChoice(computer))}`,
-      value: computer.id
-    }))
-  });
-  return available.find((computer) => computer.id === selectedID) ?? available[0];
-}
-function isSSHSelectable(computer) {
-  return computer.ssh_enabled && computer.status === "running";
-}
-function describeSSHChoice(computer) {
-  const displayName = computer.display_name.trim();
-  if (displayName && displayName !== computer.handle) {
-    return `${displayName}  ${timeAgo(computer.updated_at)}`;
-  }
-  return `${computer.runtime_family}  ${timeAgo(computer.updated_at)}`;
-}
+import ora from "ora";
 
-// src/lib/ssh-config.ts
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-import { mkdir, readFile, writeFile } from "fs/promises";
-var MANAGED_BLOCK_START = "# >>> agentcomputer ssh setup >>>";
-var MANAGED_BLOCK_END = "# <<< agentcomputer ssh setup <<<";
-async function ensureSSHAliasConfig(options) {
-  const sshDir = join2(homedir2(), ".ssh");
-  const configPath = join2(sshDir, "config");
-  await mkdir(sshDir, { recursive: true, mode: 448 });
-  let existing = "";
-  try {
-    existing = await readFile(configPath, "utf8");
-  } catch (error) {
-    if (error.code !== "ENOENT") {
-      throw error;
-    }
-  }
-  const nextBlock = renderManagedBlock(options);
-  const managedBlockPattern = new RegExp(
-    `${escapeRegex(MANAGED_BLOCK_START)}[\\s\\S]*?${escapeRegex(MANAGED_BLOCK_END)}\\n?`,
-    "m"
-  );
-  let nextContents;
-  if (managedBlockPattern.test(existing)) {
-    nextContents = existing.replace(managedBlockPattern, nextBlock);
-  } else {
-    const normalized = existing.length === 0 ? "" : existing.endsWith("\n") ? existing : `${existing}
-`;
-    nextContents = normalized.length === 0 ? nextBlock : `${normalized}
-${nextBlock}`;
-  }
-  const changed = nextContents !== existing;
-  if (changed) {
-    await writeFile(configPath, nextContents, { mode: 384 });
-  }
-  return {
-    configPath,
-    changed
-  };
-}
-function renderManagedBlock(options) {
-  const user = options.user?.trim() || "agentcomputer";
-  const identityFile = formatIdentityFilePath(options.identityFilePath);
-  return `${MANAGED_BLOCK_START}
-Host ${options.alias}
-  HostName ${options.host}
-  Port ${options.port}
-  User ${user}
-  IdentityFile ${identityFile}
-  IdentitiesOnly yes
-  ServerAliveInterval 30
-  ServerAliveCountMax 4
-${MANAGED_BLOCK_END}
-`;
-}
-function formatIdentityFilePath(path) {
-  const normalized = path.trim();
-  const homePath = `${homedir2()}/`;
-  if (normalized.startsWith(homePath)) {
-    return `~/${normalized.slice(homePath.length)}`;
-  }
-  return normalized.replaceAll(" ", "\\ ");
-}
-function escapeRegex(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+// src/lib/ssh-access.ts
+import { spawn } from "child_process";
 
 // src/lib/ssh-keys.ts
 import { basename } from "path";
-import { homedir as homedir3 } from "os";
-import { readFile as readFile2, mkdir as mkdir2 } from "fs/promises";
+import { homedir } from "os";
+import { readFile, mkdir } from "fs/promises";
 import { execFileSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
+import { existsSync } from "fs";
 var DEFAULT_PUBLIC_KEY_PATHS = [
-  `${homedir3()}/.ssh/id_ed25519.pub`,
-  `${homedir3()}/.ssh/id_ecdsa.pub`,
-  `${homedir3()}/.ssh/id_rsa.pub`
+  `${homedir()}/.ssh/id_ed25519.pub`,
+  `${homedir()}/.ssh/id_ecdsa.pub`,
+  `${homedir()}/.ssh/id_rsa.pub`
 ];
 async function ensureDefaultSSHKeyRegistered() {
   for (const path of DEFAULT_PUBLIC_KEY_PATHS) {
     try {
-      const publicKey2 = (await readFile2(path, "utf8")).trim();
+      const publicKey2 = (await readFile(path, "utf8")).trim();
       if (!publicKey2) {
         continue;
       }
@@ -418,7 +100,7 @@ async function ensureDefaultSSHKeyRegistered() {
     }
   }
   const generated = await generateSSHKey();
-  const publicKey = (await readFile2(generated.publicKeyPath, "utf8")).trim();
+  const publicKey = (await readFile(generated.publicKeyPath, "utf8")).trim();
   const key = await api("/v1/ssh-keys", {
     method: "POST",
     body: JSON.stringify({
@@ -433,9 +115,9 @@ async function ensureDefaultSSHKeyRegistered() {
   };
 }
 async function generateSSHKey() {
-  const sshDir = `${homedir3()}/.ssh`;
-  if (!existsSync2(sshDir)) {
-    await mkdir2(sshDir, { mode: 448 });
+  const sshDir = `${homedir()}/.ssh`;
+  if (!existsSync(sshDir)) {
+    await mkdir(sshDir, { mode: 448 });
   }
   const privateKeyPath = `${sshDir}/id_ed25519`;
   const publicKeyPath = `${privateKeyPath}.pub`;
@@ -447,7 +129,6 @@ async function generateSSHKey() {
 }
 
 // src/lib/ssh-access.ts
-import { spawn } from "child_process";
 async function prepareSSHConnection(computer) {
   const registered = await ensureDefaultSSHKeyRegistered();
   const info = await getConnectionInfo(computer.id);
@@ -504,6 +185,11 @@ import { constants } from "fs";
 import { access } from "fs/promises";
 import open from "open";
 var IMAGE_BROWSER_LAUNCHER = "/usr/local/bin/browser-launcher";
+var IMAGE_BROWSER_CANDIDATES = [
+  "/usr/local/bin/google-chrome",
+  "/usr/local/bin/chromium",
+  IMAGE_BROWSER_LAUNCHER
+];
 async function isExecutable(path) {
   try {
     await access(path, constants.X_OK);
@@ -518,6 +204,8 @@ function hasBrokenChromeBrowserEnv() {
     case "chrome":
     case "google-chrome":
     case "google chrome":
+    case "browser":
+    case "browser-launcher":
       return true;
     default:
       return false;
@@ -531,9 +219,12 @@ async function openBrowserURL(url) {
   if (hasBrokenChromeBrowserEnv()) {
     delete process.env.BROWSER;
   }
-  if (await isExecutable(IMAGE_BROWSER_LAUNCHER)) {
+  for (const browserPath of IMAGE_BROWSER_CANDIDATES) {
+    if (!await isExecutable(browserPath)) {
+      continue;
+    }
     try {
-      await open(url, { app: { name: IMAGE_BROWSER_LAUNCHER } });
+      await open(url, { app: { name: browserPath } });
       return;
     } catch {
     }
@@ -546,39 +237,146 @@ async function openBrowserURL(url) {
   await open(url);
 }
 
+// src/lib/ssh-config.ts
+import { homedir as homedir2 } from "os";
+import { join } from "path";
+import { mkdir as mkdir2, readFile as readFile2, writeFile } from "fs/promises";
+var MANAGED_BLOCK_START = "# >>> agentcomputer ssh setup >>>";
+var MANAGED_BLOCK_END = "# <<< agentcomputer ssh setup <<<";
+async function ensureSSHAliasConfig(options) {
+  const sshDir = join(homedir2(), ".ssh");
+  const configPath = join(sshDir, "config");
+  await mkdir2(sshDir, { recursive: true, mode: 448 });
+  let existing = "";
+  try {
+    existing = await readFile2(configPath, "utf8");
+  } catch (error) {
+    if (error.code !== "ENOENT") {
+      throw error;
+    }
+  }
+  const nextBlock = renderManagedBlock(options);
+  const managedBlockPattern = new RegExp(
+    `${escapeRegex(MANAGED_BLOCK_START)}[\\s\\S]*?${escapeRegex(MANAGED_BLOCK_END)}\\n?`,
+    "m"
+  );
+  let nextContents;
+  if (managedBlockPattern.test(existing)) {
+    nextContents = existing.replace(managedBlockPattern, nextBlock);
+  } else {
+    const normalized = existing.length === 0 ? "" : existing.endsWith("\n") ? existing : `${existing}
+`;
+    nextContents = normalized.length === 0 ? nextBlock : `${normalized}
+${nextBlock}`;
+  }
+  const changed = nextContents !== existing;
+  if (changed) {
+    await writeFile(configPath, nextContents, { mode: 384 });
+  }
+  return {
+    configPath,
+    changed
+  };
+}
+function renderManagedBlock(options) {
+  const user = options.user?.trim() || "agentcomputer";
+  const identityFile = formatIdentityFilePath(options.identityFilePath);
+  return `${MANAGED_BLOCK_START}
+Host ${options.alias}
+  HostName ${options.host}
+  Port ${options.port}
+  User ${user}
+  IdentityFile ${identityFile}
+  IdentitiesOnly yes
+  ServerAliveInterval 30
+  ServerAliveCountMax 4
+${MANAGED_BLOCK_END}
+`;
+}
+function formatIdentityFilePath(path) {
+  const normalized = path.trim();
+  const homePath = `${homedir2()}/`;
+  if (normalized.startsWith(homePath)) {
+    return `~/${normalized.slice(homePath.length)}`;
+  }
+  return normalized.replaceAll(" ", "\\ ");
+}
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// src/lib/ssh-setup.ts
+async function ensureSSHAccessConfigured(options = {}) {
+  const alias = normalizeSSHAlias(options.alias ?? "agentcomputer.ai");
+  const host = normalizeSSHHost(options.host ?? "ssh.agentcomputer.ai");
+  const port = typeof options.port === "number" ? parseSSHPort(String(options.port)) : parseSSHPort(options.port ?? "443");
+  const registered = await ensureDefaultSSHKeyRegistered();
+  const configResult = await ensureSSHAliasConfig({
+    alias,
+    host,
+    port,
+    user: "agentcomputer",
+    identityFilePath: registered.privateKeyPath
+  });
+  return {
+    alias,
+    host,
+    port,
+    configPath: configResult.configPath,
+    identityFilePath: registered.privateKeyPath,
+    changed: configResult.changed
+  };
+}
+function normalizeSSHAlias(value) {
+  const alias = value.trim();
+  if (!alias) {
+    throw new Error("ssh alias cannot be empty");
+  }
+  if (!/^[A-Za-z0-9._-]+$/.test(alias)) {
+    throw new Error(
+      "ssh alias may contain only letters, numbers, dot, dash, or underscore"
+    );
+  }
+  return alias;
+}
+function normalizeSSHHost(value) {
+  const host = value.trim();
+  if (!host) {
+    throw new Error("ssh host cannot be empty");
+  }
+  if (host.includes(" ")) {
+    throw new Error("ssh host cannot contain spaces");
+  }
+  return host;
+}
+function parseSSHPort(value) {
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isFinite(parsed) || parsed < 1 || parsed > 65535) {
+    throw new Error("ssh port must be between 1 and 65535");
+  }
+  return parsed;
+}
+
 // src/commands/access.ts
-var openCommand = new Command("open").description("Open a computer in your browser").argument("<id-or-handle>", "Computer id or handle").option("--vnc", "Open VNC desktop instead of gateway").option("--terminal", "Open the terminal surface instead of gateway").action(async (identifier, options) => {
+var openCommand = new Command("open").description("Open a computer in your browser").argument("<id-or-handle>", "Computer id or handle").option("--vnc", "Open VNC desktop instead of gateway").action(async (identifier, options) => {
   const spinner = ora("Preparing access...").start();
   try {
     const computer = await resolveComputer(identifier);
     const info = await getConnectionInfo(computer.id);
-    if (options.vnc && options.terminal) {
-      throw new Error("choose either --vnc or --terminal");
-    }
     if (options.vnc) {
       if (!info.connection.vnc_available) {
         throw new Error("VNC is not available for this computer");
       }
       const url = info.connection.vnc_url;
-      spinner.succeed(`Opening VNC for ${chalk3.bold(computer.handle)}`);
+      spinner.succeed(`Opening VNC for ${chalk.bold(computer.handle)}`);
       await openBrowserURL(url);
-      console.log(chalk3.dim(`  ${url}`));
-      return;
-    }
-    if (options.terminal) {
-      if (!info.connection.terminal_available) {
-        throw new Error("Terminal access is not available for this computer");
-      }
-      const access3 = await createTerminalAccess(computer.id);
-      spinner.succeed(`Opening terminal for ${chalk3.bold(computer.handle)}`);
-      await openBrowserURL(access3.access_url);
-      console.log(chalk3.dim(`  ${access3.access_url}`));
+      console.log(chalk.dim(`  ${url}`));
       return;
     }
     const access2 = await createBrowserAccess(computer.id);
-    spinner.succeed(`Opening ${chalk3.bold(computer.handle)}`);
+    spinner.succeed(`Opening ${chalk.bold(computer.handle)}`);
     await openBrowserURL(access2.access_url);
-    console.log(chalk3.dim(`  ${access2.access_url}`));
+    console.log(chalk.dim(`  ${access2.access_url}`));
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to open computer"
@@ -598,8 +396,8 @@ var sshCommand = new Command("ssh").description("Open an SSH session to a comput
     try {
       const computer = await resolveSSHComputer(identifier, spinner);
       const connection = await prepareSSHConnection(computer);
-      spinner.succeed(`Connecting to ${chalk3.bold(computer.handle)}`);
-      console.log(chalk3.dim(`  ${connection.command}`));
+      spinner.succeed(`Connecting to ${chalk.bold(computer.handle)}`);
+      console.log(chalk.dim(`  ${connection.command}`));
       console.log();
       await openSSHConnection(connection);
     } catch (error) {
@@ -621,24 +419,24 @@ portsCommand.command("ls").description("List published ports for a computer").ar
     spinner.stop();
     if (ports.length === 0) {
       console.log();
-      console.log(chalk3.dim("  No published ports."));
+      console.log(chalk.dim("  No published ports."));
       console.log();
       return;
     }
     const subWidth = Math.max(10, ...ports.map((p) => p.subdomain.length));
     console.log();
     console.log(
-      `  ${chalk3.dim(padEnd("Subdomain", subWidth + 2))}${chalk3.dim(padEnd("Port", 8))}${chalk3.dim("Protocol")}`
+      `  ${chalk.dim(padEnd("Subdomain", subWidth + 2))}${chalk.dim(padEnd("Port", 8))}${chalk.dim("Protocol")}`
     );
     console.log(
-      `  ${chalk3.dim("-".repeat(subWidth + 2))}${chalk3.dim("-".repeat(8))}${chalk3.dim("-".repeat(8))}`
+      `  ${chalk.dim("-".repeat(subWidth + 2))}${chalk.dim("-".repeat(8))}${chalk.dim("-".repeat(8))}`
     );
     for (const port of ports) {
       const url = `https://${port.subdomain}--${computer.handle}.computer.agentcomputer.ai`;
       console.log(
         `  ${padEnd(port.subdomain, subWidth + 2)}${padEnd(String(port.target_port), 8)}${port.protocol}`
       );
-      console.log(`  ${chalk3.dim(url)}`);
+      console.log(`  ${chalk.dim(url)}`);
     }
     console.log();
   } catch (error) {
@@ -666,9 +464,9 @@ portsCommand.command("publish").description("Publish an HTTP app port").argument
     });
     const url = `https://${published.subdomain}--${computer.handle}.computer.agentcomputer.ai`;
     spinner.succeed(
-      `Published port ${chalk3.bold(String(published.target_port))}`
+      `Published port ${chalk.bold(String(published.target_port))}`
     );
-    console.log(chalk3.dim(`  ${url}`));
+    console.log(chalk.dim(`  ${url}`));
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to publish port"
@@ -685,7 +483,7 @@ portsCommand.command("rm").description("Unpublish an app port").argument("<id-or
     }
     const computer = await resolveComputer(identifier);
     await deletePublishedPort(computer.id, targetPort);
-    spinner.succeed(`Removed port ${chalk3.bold(String(targetPort))}`);
+    spinner.succeed(`Removed port ${chalk.bold(String(targetPort))}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to remove port"
@@ -696,24 +494,14 @@ portsCommand.command("rm").description("Unpublish an app port").argument("<id-or
 async function setupSSHAlias(options) {
   const spinner = ora("Configuring global SSH access...").start();
   try {
-    const alias = normalizeSSHAlias(options.alias ?? "agentcomputer.ai");
-    const host = normalizeSSHHost(options.host ?? "ssh.agentcomputer.ai");
-    const port = parseSSHPort(options.port ?? "443");
-    const registered = await ensureDefaultSSHKeyRegistered();
-    const configResult = await ensureSSHAliasConfig({
-      alias,
-      host,
-      port,
-      user: "agentcomputer",
-      identityFilePath: registered.privateKeyPath
-    });
-    spinner.succeed(`SSH alias '${alias}' is ready`);
+    const setup = await ensureSSHAccessConfigured(options);
+    spinner.succeed(`SSH alias '${setup.alias}' is ready`);
     console.log();
-    console.log(chalk3.dim(`  SSH config: ${configResult.configPath}`));
-    console.log(chalk3.dim(`  Identity:   ${registered.privateKeyPath}`));
+    console.log(chalk.dim(`  SSH config: ${setup.configPath}`));
+    console.log(chalk.dim(`  Identity:   ${setup.identityFilePath}`));
     console.log();
-    console.log(`  ${chalk3.bold("Shell:")}   ssh ${alias}`);
-    console.log(`  ${chalk3.bold("Direct:")}  ssh <handle>@${alias}`);
+    console.log(`  ${chalk.bold("Shell:")}   ssh ${setup.alias}`);
+    console.log(`  ${chalk.bold("Direct:")}  ssh <handle>@${setup.alias}`);
     console.log();
   } catch (error) {
     spinner.fail(
@@ -722,35 +510,6 @@ async function setupSSHAlias(options) {
     process.exit(1);
   }
 }
-function normalizeSSHAlias(value) {
-  const alias = value.trim();
-  if (!alias) {
-    throw new Error("ssh alias cannot be empty");
-  }
-  if (!/^[A-Za-z0-9._-]+$/.test(alias)) {
-    throw new Error(
-      "ssh alias may contain only letters, numbers, dot, dash, or underscore"
-    );
-  }
-  return alias;
-}
-function normalizeSSHHost(value) {
-  const host = value.trim();
-  if (!host) {
-    throw new Error("ssh host cannot be empty");
-  }
-  if (host.includes(" ")) {
-    throw new Error("ssh host cannot contain spaces");
-  }
-  return host;
-}
-function parseSSHPort(value) {
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isFinite(parsed) || parsed < 1 || parsed > 65535) {
-    throw new Error("ssh port must be between 1 and 65535");
-  }
-  return parsed;
-}
 async function resolveSSHComputer(identifier, spinner) {
   const trimmed = identifier?.trim();
   if (trimmed) {
@@ -769,7 +528,7 @@ async function resolveSSHComputer(identifier, spinner) {
 }
 
 // src/commands/acp.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync } from "fs";
 import readline from "readline";
 import { Command as Command2 } from "commander";
 
@@ -845,7 +604,7 @@ async function openAgentSessionEventsStream(computerID, sessionID, options = {})
     signal: options.signal
   });
   if (!response.ok) {
-    const message = await readErrorMessage2(response);
+    const message = await readErrorMessage(response);
     throw new ApiError(response.status, message);
   }
   return response;
@@ -865,7 +624,7 @@ async function waitForSessionToSettle(computerID, sessionID, promptID, options =
     await new Promise((resolve) => setTimeout(resolve, intervalMs));
   }
 }
-async function readErrorMessage2(response) {
+async function readErrorMessage(response) {
   const contentType = response.headers.get("content-type") ?? "";
   if (contentType.includes("application/json")) {
     try {
@@ -881,7 +640,7 @@ async function readErrorMessage2(response) {
 
 // src/commands/acp.ts
 var pkg = JSON.parse(
-  readFileSync2(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync(new URL("../package.json", import.meta.url), "utf8")
 );
 function emit(message) {
   process.stdout.write(`${JSON.stringify(message)}
@@ -1112,22 +871,22 @@ acpCommand.command("serve").description("Serve a local stdio ACP bridge backed b
 
 // src/commands/agent.ts
 import { Command as Command3 } from "commander";
-import chalk4 from "chalk";
+import chalk2 from "chalk";
 import ora2 from "ora";
 function formatAgentSessionStatus(status) {
   switch (status) {
     case "idle":
-      return chalk4.green(status);
+      return chalk2.green(status);
     case "running":
-      return chalk4.blue(status);
+      return chalk2.blue(status);
     case "cancelling":
-      return chalk4.yellow(status);
+      return chalk2.yellow(status);
     case "interrupted":
-      return chalk4.yellow(status);
+      return chalk2.yellow(status);
     case "failed":
-      return chalk4.red(status);
+      return chalk2.red(status);
     case "closed":
-      return chalk4.gray(status);
+      return chalk2.gray(status);
     default:
       return status;
   }
@@ -1136,14 +895,14 @@ function printAgents(agents) {
   const idWidth = Math.max(5, ...agents.map((agent) => agent.id.length));
   console.log();
   console.log(
-    `  ${chalk4.dim(padEnd("Agent", idWidth + 2))}${chalk4.dim(padEnd("Installed", 12))}${chalk4.dim(padEnd("Creds", 8))}${chalk4.dim("Version")}`
+    `  ${chalk2.dim(padEnd("Agent", idWidth + 2))}${chalk2.dim(padEnd("Installed", 12))}${chalk2.dim(padEnd("Creds", 8))}${chalk2.dim("Version")}`
   );
   console.log(
-    `  ${chalk4.dim("-".repeat(idWidth + 2))}${chalk4.dim("-".repeat(12))}${chalk4.dim("-".repeat(8))}${chalk4.dim("-".repeat(12))}`
+    `  ${chalk2.dim("-".repeat(idWidth + 2))}${chalk2.dim("-".repeat(12))}${chalk2.dim("-".repeat(8))}${chalk2.dim("-".repeat(12))}`
   );
   for (const agent of agents) {
     console.log(
-      `  ${padEnd(agent.id, idWidth + 2)}${padEnd(agent.installed ? chalk4.green("yes") : chalk4.gray("no"), 12)}${padEnd(agent.credentialsAvailable ? chalk4.green("yes") : chalk4.yellow("no"), 8)}${agent.version ?? chalk4.dim("unknown")}`
+      `  ${padEnd(agent.id, idWidth + 2)}${padEnd(agent.installed ? chalk2.green("yes") : chalk2.gray("no"), 12)}${padEnd(agent.credentialsAvailable ? chalk2.green("yes") : chalk2.yellow("no"), 8)}${agent.version ?? chalk2.dim("unknown")}`
     );
   }
   console.log();
@@ -1151,7 +910,7 @@ function printAgents(agents) {
 function printSessions(sessions, handleByComputerID = /* @__PURE__ */ new Map()) {
   if (sessions.length === 0) {
     console.log();
-    console.log(chalk4.dim("  No agent sessions found."));
+    console.log(chalk2.dim("  No agent sessions found."));
     console.log();
     return;
   }
@@ -1160,19 +919,19 @@ function printSessions(sessions, handleByComputerID = /* @__PURE__ */ new Map())
   const statusWidth = 13;
   console.log();
   console.log(
-    `  ${chalk4.dim(padEnd("Session", 14))}${chalk4.dim(padEnd("Name", nameWidth + 2))}${chalk4.dim(padEnd("Agent", agentWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim("Location")}`
+    `  ${chalk2.dim(padEnd("Session", 14))}${chalk2.dim(padEnd("Name", nameWidth + 2))}${chalk2.dim(padEnd("Agent", agentWidth + 2))}${chalk2.dim(padEnd("Status", statusWidth + 2))}${chalk2.dim("Location")}`
   );
   console.log(
-    `  ${chalk4.dim("-".repeat(14))}${chalk4.dim("-".repeat(nameWidth + 2))}${chalk4.dim("-".repeat(agentWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(20))}`
+    `  ${chalk2.dim("-".repeat(14))}${chalk2.dim("-".repeat(nameWidth + 2))}${chalk2.dim("-".repeat(agentWidth + 2))}${chalk2.dim("-".repeat(statusWidth + 2))}${chalk2.dim("-".repeat(20))}`
   );
   for (const session of sessions) {
     const location = handleByComputerID.get(session.computer_id) ?? session.computer_id;
     console.log(
       `  ${padEnd(session.id.slice(0, 12), 14)}${padEnd(session.name || "default", nameWidth + 2)}${padEnd(session.agent, agentWidth + 2)}${padEnd(formatAgentSessionStatus(session.status), statusWidth + 2)}${location}`
     );
-    console.log(`  ${chalk4.dim(`  cwd=${session.cwd}  updated=${timeAgo(session.updated_at)}`)}`);
+    console.log(`  ${chalk2.dim(`  cwd=${session.cwd}  updated=${timeAgo(session.updated_at)}`)}`);
     if (session.last_stop_reason || session.last_error) {
-      console.log(`  ${chalk4.dim(`  ${session.last_error ? `error=${session.last_error}` : `stop=${session.last_stop_reason}`}`)}`);
+      console.log(`  ${chalk2.dim(`  ${session.last_error ? `error=${session.last_error}` : `stop=${session.last_stop_reason}`}`)}`);
     }
   }
   console.log();
@@ -1186,7 +945,7 @@ var StreamPrinter = class {
   }
   writeDim(text) {
     this.ensureBreak();
-    process.stdout.write(chalk4.dim(text));
+    process.stdout.write(chalk2.dim(text));
     this.inlineOpen = !text.endsWith("\n");
   }
   writeLine(text) {
@@ -1254,7 +1013,7 @@ function renderSSEChunk(chunk, printer, asJson) {
   try {
     envelope = JSON.parse(payload);
   } catch {
-    printer.writeLine(chalk4.dim(payload));
+    printer.writeLine(chalk2.dim(payload));
     return;
   }
   const method = typeof envelope.method === "string" ? envelope.method : "";
@@ -1281,14 +1040,14 @@ function renderSSEChunk(chunk, printer, asJson) {
       case "tool_call_update": {
         const title = typeof update?.title === "string" && update.title ? update.title : "tool";
         const status = typeof update?.status === "string" && update.status ? update.status : "in_progress";
-        printer.writeLine(chalk4.dim(`[tool:${status}] ${title}`));
+        printer.writeLine(chalk2.dim(`[tool:${status}] ${title}`));
         return;
       }
       case "plan": {
         const entries = Array.isArray(update?.entries) ? update.entries : [];
         const detail = entries.filter((entry) => typeof entry === "object" && entry !== null).map((entry) => `- [${entry.status ?? "pending"}] ${entry.content ?? ""}`).join("\n");
         if (detail) {
-          printer.writeLine(chalk4.dim(`Plan
+          printer.writeLine(chalk2.dim(`Plan
 ${detail}`));
         }
         return;
@@ -1298,7 +1057,7 @@ ${detail}`));
     }
   }
   if (method === "session/request_permission") {
-    printer.writeLine(chalk4.yellow("Permission requested by remote agent"));
+    printer.writeLine(chalk2.yellow("Permission requested by remote agent"));
     return;
   }
 }
@@ -1426,12 +1185,12 @@ agentCommand.command("prompt").description("Send a prompt to a machine agent ses
       return;
     }
     console.log();
-    console.log(`  ${chalk4.bold(session.name || "default")}  ${formatAgentSessionStatus(settled.status)}`);
+    console.log(`  ${chalk2.bold(session.name || "default")}  ${formatAgentSessionStatus(settled.status)}`);
     if (settled.last_stop_reason) {
-      console.log(chalk4.dim(`  stop_reason=${settled.last_stop_reason}`));
+      console.log(chalk2.dim(`  stop_reason=${settled.last_stop_reason}`));
     }
     if (settled.last_error) {
-      console.log(chalk4.red(`  error=${settled.last_error}`));
+      console.log(chalk2.red(`  error=${settled.last_error}`));
     }
     console.log();
   } catch (error) {
@@ -1542,7 +1301,7 @@ agentCommand.command("close").description("Close and delete a machine agent sess
 import { randomBytes as randomBytes2, createHash } from "crypto";
 import { input as textInput } from "@inquirer/prompts";
 import { Command as Command4 } from "commander";
-import chalk5 from "chalk";
+import chalk3 from "chalk";
 import ora4 from "ora";
 
 // src/lib/remote-auth.ts
@@ -1755,7 +1514,7 @@ var claudeLoginCommand = new Command4("claude-login").alias("claude-auth").descr
     await runClaudeLogin(options);
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to authenticate Claude";
-    console.error(chalk5.red(`
+    console.error(chalk3.red(`
 ${message}`));
     process.exit(1);
   }
@@ -1768,7 +1527,7 @@ async function runClaudeLogin(options) {
   let activeTodoID = "target";
   let failureMessage = null;
   console.log();
-  console.log(chalk5.cyan("Authenticating with Claude Code...\n"));
+  console.log(chalk3.cyan("Authenticating with Claude Code...\n"));
   try {
     const prepared = await prepareTargetMachine(options);
     target = prepared.computer;
@@ -1853,7 +1612,7 @@ async function runClaudeLogin(options) {
   }
   if (target) {
     console.log(
-      chalk5.green(`Claude login installed on ${chalk5.bold(target.handle)}.`)
+      chalk3.green(`Claude login installed on ${chalk3.bold(target.handle)}.`)
     );
     console.log();
   }
@@ -1894,11 +1653,11 @@ function markVerificationTodo(items, id, result, successDetail) {
 }
 function printTodoList(items) {
   console.log();
-  console.log(chalk5.dim("TODO"));
+  console.log(chalk3.dim("TODO"));
   console.log();
   for (const item of items) {
-    const marker = item.state === "done" ? chalk5.green("[x]") : item.state === "skipped" ? chalk5.yellow("[-]") : item.state === "failed" ? chalk5.red("[!]") : chalk5.dim("[ ]");
-    const detail = item.detail ? chalk5.dim(`  ${item.detail}`) : "";
+    const marker = item.state === "done" ? chalk3.green("[x]") : item.state === "skipped" ? chalk3.yellow("[-]") : item.state === "failed" ? chalk3.red("[!]") : chalk3.dim("[ ]");
+    const detail = item.detail ? chalk3.dim(`  ${item.detail}`) : "";
     console.log(`  ${marker} ${item.label}${detail ? ` ${detail}` : ""}`);
   }
   console.log();
@@ -1926,7 +1685,7 @@ async function runManualOAuthFlow() {
   try {
     await openBrowserURL(url);
   } catch {
-    console.log(chalk5.yellow("Unable to open the browser automatically."));
+    console.log(chalk3.yellow("Unable to open the browser automatically."));
   }
   console.log(
     "After completing authentication, copy the code shown on the success page."
@@ -2017,7 +1776,7 @@ function parseAuthorizationInput(value, expectedState) {
 }
 async function installClaudeAuth(target, oauth) {
   const spinner = ora4(
-    `Installing Claude auth on ${chalk5.bold(target.handle)}...`
+    `Installing Claude auth on ${chalk3.bold(target.handle)}...`
   ).start();
   try {
     const installScript = buildInstallScript(oauth.refreshToken, oauth.scope);
@@ -2027,10 +1786,10 @@ async function installClaudeAuth(target, oauth) {
       installScript
     );
     if (result.stdout.trim()) {
-      spinner.succeed(`Installed Claude auth on ${chalk5.bold(target.handle)}`);
+      spinner.succeed(`Installed Claude auth on ${chalk3.bold(target.handle)}`);
       return;
     }
-    spinner.succeed(`Installed Claude auth on ${chalk5.bold(target.handle)}`);
+    spinner.succeed(`Installed Claude auth on ${chalk3.bold(target.handle)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : `Failed to install Claude auth on ${target.handle}`
@@ -2040,11 +1799,11 @@ async function installClaudeAuth(target, oauth) {
 }
 async function verifyTargetMachine(handle, target) {
   const spinner = ora4(
-    `Verifying Claude login on ${chalk5.bold(handle)}...`
+    `Verifying Claude login on ${chalk3.bold(handle)}...`
   ).start();
   const result = await verifyStoredAuth(target);
   if (result.status === "verified") {
-    spinner.succeed(`Verified Claude login on ${chalk5.bold(handle)}`);
+    spinner.succeed(`Verified Claude login on ${chalk3.bold(handle)}`);
     return result;
   }
   spinner.warn(result.detail);
@@ -2052,7 +1811,7 @@ async function verifyTargetMachine(handle, target) {
 }
 async function verifySharedInstall(primaryHandle, primaryComputerID, sharedInstall, skip, verify) {
   const spinner = ora4(
-    `Verifying shared-home Claude login from ${chalk5.bold(primaryHandle)}...`
+    `Verifying shared-home Claude login from ${chalk3.bold(primaryHandle)}...`
   ).start();
   const result = await verifySecondaryMachine(
     primaryComputerID,
@@ -2062,7 +1821,7 @@ async function verifySharedInstall(primaryHandle, primaryComputerID, sharedInsta
   );
   if (result.status === "verified") {
     spinner.succeed(
-      `Verified shared-home Claude login on ${chalk5.bold(result.handle)}`
+      `Verified shared-home Claude login on ${chalk3.bold(result.handle)}`
     );
     return result;
   }
@@ -2146,9 +1905,9 @@ function randomSuffix2(length) {
 
 // src/commands/computers.ts
 import { Command as Command5 } from "commander";
-import chalk6 from "chalk";
+import chalk4 from "chalk";
 import ora5 from "ora";
-import { select as select2, input as textInput2, confirm } from "@inquirer/prompts";
+import { select, input as textInput2, confirm } from "@inquirer/prompts";
 
 // src/lib/machine-sources.ts
 async function getMachineSourceSettings() {
@@ -2193,48 +1952,90 @@ function summarizeMachineSource(source) {
   return parts.join(" | ");
 }
 
+// src/lib/mount-control.ts
+import { unlinkSync } from "fs";
+import net from "net";
+async function notifyMountDaemon(paths) {
+  return new Promise((resolve) => {
+    const socket = net.createConnection(paths.socketPath);
+    socket.on("connect", () => {
+      socket.end("reconcile\n");
+      resolve(true);
+    });
+    socket.on("error", () => {
+      resolve(false);
+    });
+  });
+}
+function createMountControlServer(paths, onReconcile) {
+  try {
+    unlinkSync(paths.socketPath);
+  } catch {
+  }
+  const server = net.createServer((socket) => {
+    socket.setEncoding("utf8");
+    let buffer = "";
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      if (buffer.includes("\n")) {
+        void Promise.resolve(onReconcile()).finally(() => {
+          socket.end("ok\n");
+        });
+      }
+    });
+    socket.on("error", () => {
+      socket.destroy();
+    });
+  });
+  server.on("close", () => {
+    try {
+      unlinkSync(paths.socketPath);
+    } catch {
+    }
+  });
+  return server;
+}
+
 // src/commands/computers.ts
 function isInternalCondition(value) {
   return /^[A-Z][a-zA-Z]+$/.test(value);
 }
 function printComputer(computer) {
   const vnc = vncURL(computer);
-  const terminal = terminalURL(computer);
   const ssh = computer.ssh_enabled ? formatSSHCommand2(computer.handle, computer.ssh_host, computer.ssh_port) : "disabled";
   const isCustom = computer.runtime_family === "custom-machine";
   console.log();
-  console.log(`  ${chalk6.bold.white(computer.handle)}  ${formatStatus(computer.status)}`);
+  console.log(`  ${chalk4.bold.white(computer.handle)}  ${formatStatus(computer.status)}`);
   console.log();
-  console.log(`  ${chalk6.dim("ID")}        ${computer.id}`);
-  console.log(`  ${chalk6.dim("Tier")}      ${computer.tier}`);
+  console.log(`  ${chalk4.dim("ID")}        ${computer.id}`);
+  console.log(`  ${chalk4.dim("Tier")}      ${computer.tier}`);
   if (isCustom) {
-    console.log(`  ${chalk6.dim("Runtime")}   ${computer.runtime_family}`);
-    console.log(`  ${chalk6.dim("Source")}    ${computer.source_kind}`);
-    console.log(`  ${chalk6.dim("Image")}     ${computer.image_family}`);
+    console.log(`  ${chalk4.dim("Runtime")}   ${computer.runtime_family}`);
+    console.log(`  ${chalk4.dim("Source")}    ${computer.source_kind}`);
+    console.log(`  ${chalk4.dim("Image")}     ${computer.image_family}`);
   } else {
-    console.log(`  ${chalk6.dim("Runtime")}   ${computer.runtime_family}`);
-    console.log(`  ${chalk6.dim("Launch")}    ${formatManagedWorkerLaunchSource(computer)}`);
+    console.log(`  ${chalk4.dim("Runtime")}   ${computer.runtime_family}`);
+    console.log(`  ${chalk4.dim("Launch")}    ${formatManagedWorkerLaunchSource(computer)}`);
     if (computer.user_source_id && computer.resolved_image_ref) {
-      console.log(`  ${chalk6.dim("Image")}     ${computer.resolved_image_ref}`);
+      console.log(`  ${chalk4.dim("Image")}     ${computer.resolved_image_ref}`);
     }
   }
-  console.log(`  ${chalk6.dim("Primary")}   :${computer.primary_port}${computer.primary_path}`);
-  console.log(`  ${chalk6.dim("Health")}    ${computer.healthcheck_type}${computer.healthcheck_value ? ` (${computer.healthcheck_value})` : ""}`);
+  console.log(`  ${chalk4.dim("Primary")}   :${computer.primary_port}${computer.primary_path}`);
+  console.log(`  ${chalk4.dim("Health")}    ${computer.healthcheck_type}${computer.healthcheck_value ? ` (${computer.healthcheck_value})` : ""}`);
   console.log();
-  console.log(`  ${chalk6.dim("Gateway")}   ${chalk6.cyan(webURL(computer))}`);
-  console.log(`  ${chalk6.dim("VNC")}       ${vnc ? chalk6.cyan(vnc) : chalk6.dim("not available")}`);
-  console.log(`  ${chalk6.dim("Terminal")}  ${terminal ? chalk6.cyan(terminal) : chalk6.dim("not available")}`);
-  console.log(`  ${chalk6.dim("SSH")}       ${computer.ssh_enabled ? chalk6.white(ssh) : chalk6.dim(ssh)}`);
+  console.log(`  ${chalk4.dim("Gateway")}   ${chalk4.cyan(webURL(computer))}`);
+  console.log(`  ${chalk4.dim("VNC")}       ${vnc ? chalk4.cyan(vnc) : chalk4.dim("not available")}`);
+  console.log(`  ${chalk4.dim("SSH")}       ${computer.ssh_enabled ? chalk4.white(ssh) : chalk4.dim(ssh)}`);
   if (computer.last_error) {
     console.log();
     if (isInternalCondition(computer.last_error)) {
-      console.log(`  ${chalk6.dim("Condition")} ${chalk6.dim(computer.last_error)}`);
+      console.log(`  ${chalk4.dim("Condition")} ${chalk4.dim(computer.last_error)}`);
     } else {
-      console.log(`  ${chalk6.dim("Error")}     ${chalk6.red(computer.last_error)}`);
+      console.log(`  ${chalk4.dim("Error")}     ${chalk4.red(computer.last_error)}`);
     }
   }
   console.log();
-  console.log(`  ${chalk6.dim("Created")}   ${timeAgo(computer.created_at)}`);
+  console.log(`  ${chalk4.dim("Created")}   ${timeAgo(computer.created_at)}`);
   console.log();
 }
 function formatSSHCommand2(user, host, port) {
@@ -2271,16 +2072,16 @@ function printComputerTable(computers) {
   const createdWidth = 10;
   console.log();
   console.log(
-    `  ${chalk6.dim(padEnd("Handle", handleWidth + 2))}${chalk6.dim(padEnd("Status", statusWidth + 2))}${chalk6.dim(padEnd("Created", createdWidth + 2))}${chalk6.dim("URL")}`
+    `  ${chalk4.dim(padEnd("Handle", handleWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim(padEnd("Created", createdWidth + 2))}${chalk4.dim("URL")}`
   );
   console.log(
-    `  ${chalk6.dim("-".repeat(handleWidth + 2))}${chalk6.dim("-".repeat(statusWidth + 2))}${chalk6.dim("-".repeat(createdWidth + 2))}${chalk6.dim("-".repeat(20))}`
+    `  ${chalk4.dim("-".repeat(handleWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(createdWidth + 2))}${chalk4.dim("-".repeat(20))}`
   );
   for (const computer of computers) {
     const status = formatStatus(computer.status);
-    const created = chalk6.dim(timeAgo(computer.created_at));
+    const created = chalk4.dim(timeAgo(computer.created_at));
     console.log(
-      `  ${chalk6.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${padEnd(created, createdWidth + 2)}${chalk6.cyan(webURL(computer))}`
+      `  ${chalk4.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${padEnd(created, createdWidth + 2)}${chalk4.cyan(webURL(computer))}`
     );
   }
   console.log();
@@ -2290,23 +2091,19 @@ function printComputerTableVerbose(computers) {
   const statusWidth = 10;
   console.log();
   console.log(
-    `  ${chalk6.dim(padEnd("Handle", handleWidth + 2))}${chalk6.dim(padEnd("Status", statusWidth + 2))}${chalk6.dim("URLs")}`
+    `  ${chalk4.dim(padEnd("Handle", handleWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim("URLs")}`
   );
   console.log(
-    `  ${chalk6.dim("-".repeat(handleWidth + 2))}${chalk6.dim("-".repeat(statusWidth + 2))}${chalk6.dim("-".repeat(20))}`
+    `  ${chalk4.dim("-".repeat(handleWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(20))}`
   );
   for (const computer of computers) {
     const status = formatStatus(computer.status);
     const vnc = vncURL(computer);
-    const terminal = terminalURL(computer);
-    console.log(
-      `  ${chalk6.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${chalk6.cyan(webURL(computer))}`
-    );
     console.log(
-      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk6.dim(vnc ?? "VNC not available")}`
+      `  ${chalk4.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${chalk4.cyan(webURL(computer))}`
     );
     console.log(
-      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk6.dim(terminal ?? "Terminal not available")}`
+      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk4.dim(vnc ?? "VNC not available")}`
     );
   }
   console.log();
@@ -2322,7 +2119,7 @@ var lsCommand = new Command5("ls").description("List computers").option("--json"
     }
     if (computers.length === 0) {
       console.log();
-      console.log(chalk6.dim("  No computers found."));
+      console.log(chalk4.dim("  No computers found."));
       console.log();
       return;
     }
@@ -2378,11 +2175,11 @@ var createCommand = new Command5("create").description("Create a computer").argu
       Boolean(selectedOptions.usePlatformDefault)
     );
     if (machineSourceNote) {
-      console.log(chalk6.dim(machineSourceNote));
+      console.log(chalk4.dim(machineSourceNote));
     }
     const provisioningNote = createProvisioningNote(runtimeFamily, filesystemSettings);
     if (provisioningNote) {
-      console.log(chalk6.dim(provisioningNote));
+      console.log(chalk4.dim(provisioningNote));
     }
     spinner = ora5(createSpinnerText(runtimeFamily, filesystemSettings, 0)).start();
     startTime = Date.now();
@@ -2420,7 +2217,12 @@ var createCommand = new Command5("create").description("Create a computer").argu
     }
     const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
     spinner.succeed(
-      chalk6.green(`Created ${chalk6.bold(computer.handle)} ${chalk6.dim(`[${elapsed}s]`)}`)
+      chalk4.green(`Created ${chalk4.bold(computer.handle)} ${chalk4.dim(`[${elapsed}s]`)}`)
+    );
+    await notifyMountDaemon(
+      getMountPaths((readMountConfig() ?? defaultMountServiceConfig()).rootPath)
+    ).catch(
+      () => false
     );
     printComputer(computer);
   } catch (error) {
@@ -2429,10 +2231,10 @@ var createCommand = new Command5("create").description("Create a computer").argu
     }
     const message = error instanceof Error ? error.message : "Failed to create computer";
     if (spinner) {
-      const suffix = startTime ? ` ${chalk6.dim(`[${((Date.now() - startTime) / 1e3).toFixed(1)}s]`)}` : "";
+      const suffix = startTime ? ` ${chalk4.dim(`[${((Date.now() - startTime) / 1e3).toFixed(1)}s]`)}` : "";
       spinner.fail(`${message}${suffix}`);
     } else {
-      console.error(chalk6.red(message));
+      console.error(chalk4.red(message));
     }
     process.exit(1);
   }
@@ -2444,11 +2246,11 @@ async function resolveCreateOptions(options) {
     validateCreateOptions(selectedOptions);
     return selectedOptions;
   }
-  const runtimeChoice = await select2({
+  const runtimeChoice = await select({
     message: "Select runtime",
     choices: [
       {
-        name: "managed-worker  -  default Ubuntu desktop, SSH, VNC, terminal",
+        name: "managed-worker  -  default Ubuntu desktop, SSH, and VNC",
         value: "managed-worker"
       },
       {
@@ -2464,7 +2266,7 @@ async function resolveCreateOptions(options) {
     selectedOptions.imageRef = (await textInput2({ message: "OCI image ref (required):" })).trim();
     selectedOptions.primaryPort = (await textInput2({ message: "Primary port:", default: "3000" })).trim();
     selectedOptions.primaryPath = (await textInput2({ message: "Primary path:", default: "/" })).trim();
-    selectedOptions.healthcheckType = await select2({
+    selectedOptions.healthcheckType = await select({
       message: "Healthcheck type",
       choices: [
         { name: "tcp", value: "tcp" },
@@ -2495,11 +2297,11 @@ var removeCommand = new Command5("rm").description("Delete a computer").argument
     spinner.stop();
     if (!skipConfirm && process.stdin.isTTY) {
       const confirmed = await confirm({
-        message: `Delete computer ${chalk6.bold(computer.handle)}?`,
+        message: `Delete computer ${chalk4.bold(computer.handle)}?`,
         default: false
       });
       if (!confirmed) {
-        console.log(chalk6.dim("  Cancelled."));
+        console.log(chalk4.dim("  Cancelled."));
         return;
       }
     }
@@ -2507,7 +2309,12 @@ var removeCommand = new Command5("rm").description("Delete a computer").argument
     await api(`/v1/computers/${computer.id}`, {
       method: "DELETE"
     });
-    deleteSpinner.succeed(chalk6.green(`Deleted ${chalk6.bold(computer.handle)}`));
+    deleteSpinner.succeed(chalk4.green(`Deleted ${chalk4.bold(computer.handle)}`));
+    await notifyMountDaemon(
+      getMountPaths((readMountConfig() ?? defaultMountServiceConfig()).rootPath)
+    ).catch(
+      () => false
+    );
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to delete computer"
@@ -2563,9 +2370,9 @@ function createMachineSourceNote(runtimeFamily, machineSourceSettings, usePlatfo
   return `Using managed-worker image source: ${summarizeMachineSourceSelection(machineSourceSettings)}.`;
 }
 function createSpinnerText(runtimeFamily, filesystemSettings, elapsedSeconds) {
-  const elapsedLabel = chalk6.dim(`${elapsedSeconds.toFixed(1)}s`);
+  const elapsedLabel = chalk4.dim(`${elapsedSeconds.toFixed(1)}s`);
   if (runtimeFamily === "managed-worker" && filesystemSettings?.shared_enabled && elapsedSeconds >= 5) {
-    return `Creating computer... ${elapsedLabel} ${chalk6.dim("mounting shared home")}`;
+    return `Creating computer... ${elapsedLabel} ${chalk4.dim("mounting shared home")}`;
   }
   return `Creating computer... ${elapsedLabel}`;
 }
@@ -2654,6 +2461,7 @@ _computer() {
     'open:Open in browser'
     'ssh:SSH into a computer'
     'ports:Manage published ports'
+    'mount:Mirror SSH-ready machine homes into ~/agentcomputer while running'
     'agent:Manage cloud agent sessions'
     'acp:Run a local ACP bridge for remote agent sessions'
     'rm:Delete a computer'
@@ -2677,6 +2485,11 @@ _computer() {
     'rm:Delete a machine image source'
   )
 
+  local -a mount_commands
+  mount_commands=(
+    'status:Show machine mount controller status'
+  )
+
   _arguments -C \\
     '(-h --help)'{-h,--help}'[Display help]' \\
     '(-V --version)'{-V,--version}'[Show version]' \\
@@ -2781,12 +2594,33 @@ _computer() {
         open)
           _arguments \\
             '--vnc[Open VNC desktop]' \\
-            '--terminal[Open terminal]' \\
             '1:computer:_computer_handles'
           ;;
         ssh)
           _arguments '1:computer:_computer_handles'
           ;;
+        mount)
+          _arguments -C \\
+            '--alias[SSH host alias]:alias:' \\
+            '--host[SSH gateway host]:host:' \\
+            '--port[SSH gateway port]:port:' \\
+            '--poll-interval[Reconcile interval in milliseconds]:ms:' \\
+            '--connect-timeout[SSH connect timeout for Mutagen]:seconds:' \\
+            '1:command:->mount_command' \\
+            '*::arg:->mount_args'
+          case "$state" in
+            mount_command)
+              _describe -t commands 'mount command' mount_commands
+              ;;
+            mount_args)
+              case "$words[2]" in
+                status)
+                  _arguments
+                  ;;
+              esac
+              ;;
+          esac
+          ;;
         rm)
           _arguments \\
             '(-y --yes)'{-y,--yes}'[Skip confirmation]' \\
@@ -2850,9 +2684,10 @@ var BASH_SCRIPT = `_computer() {
   local cur prev words cword
   _init_completion || return
 
-  local commands="login upgrade logout whoami claude-login claude-auth codex-login codex-auth create ls get image open ssh ports agent acp rm completion help"
+  local commands="login upgrade logout whoami claude-login claude-auth codex-login codex-auth create ls get image open ssh ports mount agent acp rm completion help"
   local ports_commands="ls publish rm"
   local image_commands="ls save default rebuild rm"
+  local mount_commands="status"
 
   if [[ $cword -eq 1 ]]; then
     COMPREPLY=($(compgen -W "$commands" -- "$cur"))
@@ -2930,11 +2765,18 @@ var BASH_SCRIPT = `_computer() {
       else
         case "$cmd" in
           get) COMPREPLY=($(compgen -W "--json" -- "$cur")) ;;
-          open) COMPREPLY=($(compgen -W "--vnc --terminal" -- "$cur")) ;;
+          open) COMPREPLY=($(compgen -W "--vnc" -- "$cur")) ;;
           rm) COMPREPLY=($(compgen -W "--yes -y" -- "$cur")) ;;
         esac
       fi
       ;;
+    mount)
+      if [[ $cword -eq 2 ]]; then
+        COMPREPLY=($(compgen -W "$mount_commands" -- "$cur"))
+      elif [[ $cword -ge 3 ]]; then
+        COMPREPLY=($(compgen -W "--alias --host --port --poll-interval --connect-timeout" -- "$cur"))
+      fi
+      ;;
     ports)
       if [[ $cword -eq 2 ]]; then
         COMPREPLY=($(compgen -W "$ports_commands" -- "$cur"))
@@ -2970,17 +2812,17 @@ var completionCommand = new Command6("completion").description("Generate shell c
 // src/commands/codex-login.ts
 import { spawn as spawn3 } from "child_process";
 import { readFile as readFile3 } from "fs/promises";
-import { homedir as homedir4 } from "os";
-import { join as join3 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join2 } from "path";
 import { Command as Command7 } from "commander";
-import chalk7 from "chalk";
+import chalk5 from "chalk";
 import ora6 from "ora";
 var codexLoginCommand = new Command7("codex-login").alias("codex-auth").description("Authenticate Codex on a computer").option("--machine <id-or-handle>", "Use a specific computer").option("--keep-helper", "Keep a temporary helper machine if one is created").option("--skip-cross-check", "Skip verification on a second shared machine").option("--verbose", "Show step-by-step auth diagnostics").action(async (options) => {
   try {
     await runCodexLogin(options);
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to authenticate Codex";
-    console.error(chalk7.red(`
+    console.error(chalk5.red(`
 ${message}`));
     process.exit(1);
   }
@@ -2993,7 +2835,7 @@ async function runCodexLogin(options) {
   let activeTodoID = "target";
   let failureMessage = null;
   console.log();
-  console.log(chalk7.cyan("Authenticating with Codex...\n"));
+  console.log(chalk5.cyan("Authenticating with Codex...\n"));
   try {
     const prepared = await prepareTargetMachine2(options);
     target = prepared.computer;
@@ -3078,7 +2920,7 @@ async function runCodexLogin(options) {
   }
   if (target) {
     console.log(
-      chalk7.green(`Codex login installed on ${chalk7.bold(target.handle)}.`)
+      chalk5.green(`Codex login installed on ${chalk5.bold(target.handle)}.`)
     );
     console.log();
   }
@@ -3119,11 +2961,11 @@ function markVerificationTodo2(items, id, result, successDetail) {
 }
 function printTodoList2(items) {
   console.log();
-  console.log(chalk7.dim("TODO"));
+  console.log(chalk5.dim("TODO"));
   console.log();
   for (const item of items) {
-    const marker = item.state === "done" ? chalk7.green("[x]") : item.state === "skipped" ? chalk7.yellow("[-]") : item.state === "failed" ? chalk7.red("[!]") : chalk7.dim("[ ]");
-    const detail = item.detail ? chalk7.dim(`  ${item.detail}`) : "";
+    const marker = item.state === "done" ? chalk5.green("[x]") : item.state === "skipped" ? chalk5.yellow("[-]") : item.state === "failed" ? chalk5.red("[!]") : chalk5.dim("[ ]");
+    const detail = item.detail ? chalk5.dim(`  ${item.detail}`) : "";
     console.log(`  ${marker} ${item.label}${detail ? ` ${detail}` : ""}`);
   }
   console.log();
@@ -3171,7 +3013,7 @@ async function getLocalCodexStatus() {
   return parseCodexStatusOutput(result.stdout, result.stderr);
 }
 async function readLocalCodexAuthFile() {
-  const authPath = join3(homedir4(), ".codex", "auth.json");
+  const authPath = join2(homedir3(), ".codex", "auth.json");
   let raw;
   try {
     raw = await readFile3(authPath, "utf8");
@@ -3234,12 +3076,12 @@ async function captureLocalCommand(command, args) {
 }
 async function installCodexAuth(target, authJSON) {
   const spinner = ora6(
-    `Installing Codex login on ${chalk7.bold(target.handle)}...`
+    `Installing Codex login on ${chalk5.bold(target.handle)}...`
   ).start();
   try {
     const installScript = buildInstallScript2(authJSON);
     await runRemoteCommand(target, ["bash", "-s"], installScript);
-    spinner.succeed(`Installed Codex login on ${chalk7.bold(target.handle)}`);
+    spinner.succeed(`Installed Codex login on ${chalk5.bold(target.handle)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : `Failed to install Codex login on ${target.handle}`
@@ -3249,11 +3091,11 @@ async function installCodexAuth(target, authJSON) {
 }
 async function verifyTargetMachine2(handle, target) {
   const spinner = ora6(
-    `Verifying Codex login on ${chalk7.bold(handle)}...`
+    `Verifying Codex login on ${chalk5.bold(handle)}...`
   ).start();
   const result = await verifyStoredCodexAuth(target);
   if (result.status === "verified") {
-    spinner.succeed(`Verified Codex login on ${chalk7.bold(handle)}`);
+    spinner.succeed(`Verified Codex login on ${chalk5.bold(handle)}`);
     return result;
   }
   spinner.warn(result.detail);
@@ -3261,7 +3103,7 @@ async function verifyTargetMachine2(handle, target) {
 }
 async function verifySharedInstall2(primaryHandle, primaryComputerID, sharedInstall, skip, verify) {
   const spinner = ora6(
-    `Verifying shared-home Codex login from ${chalk7.bold(primaryHandle)}...`
+    `Verifying shared-home Codex login from ${chalk5.bold(primaryHandle)}...`
   ).start();
   const result = await verifySecondaryMachine(
     primaryComputerID,
@@ -3271,7 +3113,7 @@ async function verifySharedInstall2(primaryHandle, primaryComputerID, sharedInst
   );
   if (result.status === "verified") {
     spinner.succeed(
-      `Verified shared-home Codex login on ${chalk7.bold(result.handle)}`
+      `Verified shared-home Codex login on ${chalk5.bold(result.handle)}`
     );
     return result;
   }
@@ -3329,9 +3171,9 @@ function firstStatusLine2(value) {
 }
 
 // src/commands/images.ts
-import { confirm as confirm2, input as textInput3, select as select3 } from "@inquirer/prompts";
+import { confirm as confirm2, input as textInput3, select as select2 } from "@inquirer/prompts";
 import { Command as Command8 } from "commander";
-import chalk8 from "chalk";
+import chalk6 from "chalk";
 import ora7 from "ora";
 var imageCommand = new Command8("image").description("Manage machine image sources");
 imageCommand.command("ls").description("List machine image sources").option("--json", "Print raw JSON").action(async (options) => {
@@ -3364,7 +3206,7 @@ imageCommand.command("save").description("Create or update a machine image sourc
       return;
     }
     console.log();
-    console.log(chalk8.green("Saved machine image source."));
+    console.log(chalk6.green("Saved machine image source."));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3403,9 +3245,9 @@ imageCommand.command("default").description("Set the default machine image sourc
     if (!usePlatformDefault) {
       const selected = settings.default_machine_source ?? void 0;
       const label = selected ? summarizeMachineSource(selected) : sourceID;
-      console.log(chalk8.green(`Selected ${chalk8.bold(label)} as the default machine image.`));
+      console.log(chalk6.green(`Selected ${chalk6.bold(label)} as the default machine image.`));
     } else {
-      console.log(chalk8.green("Using the AgentComputer platform default image."));
+      console.log(chalk6.green("Using the AgentComputer platform default image."));
     }
     printMachineSourceSettings(settings);
   } catch (error) {
@@ -3427,7 +3269,7 @@ imageCommand.command("rebuild").description("Rebuild a machine image source").ar
       return;
     }
     console.log();
-    console.log(chalk8.green(`Queued rebuild for ${chalk8.bold(sourceID)}.`));
+    console.log(chalk6.green(`Queued rebuild for ${chalk6.bold(sourceID)}.`));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3446,7 +3288,7 @@ imageCommand.command("rm").description("Delete a machine image source").argument
     if (!skipConfirm && process.stdin.isTTY) {
       const confirmed = await confirmDeletion(sourceID);
       if (!confirmed) {
-        console.log(chalk8.dim("  Cancelled."));
+        console.log(chalk6.dim("  Cancelled."));
         return;
       }
     }
@@ -3458,7 +3300,7 @@ imageCommand.command("rm").description("Delete a machine image source").argument
       return;
     }
     console.log();
-    console.log(chalk8.green(`Deleted machine image source ${chalk8.bold(sourceID)}.`));
+    console.log(chalk6.green(`Deleted machine image source ${chalk6.bold(sourceID)}.`));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3470,14 +3312,14 @@ imageCommand.command("rm").description("Delete a machine image source").argument
   }
 });
 function printMachineSourceSettings(settings) {
-  console.log(`  ${chalk8.dim("Default")}  ${chalk8.white(summarizeDefaultMachineSource(settings))}`);
+  console.log(`  ${chalk6.dim("Default")}  ${chalk6.white(summarizeDefaultMachineSource(settings))}`);
   console.log();
   if (settings.sources.length === 0) {
-    console.log(chalk8.dim("  No custom machine images configured yet."));
+    console.log(chalk6.dim("  No custom machine images configured yet."));
     console.log();
     return;
   }
-  console.log(`  ${chalk8.dim("Custom")}   ${chalk8.white(formatMachineSourceCounts(settings.sources))}`);
+  console.log(`  ${chalk6.dim("Custom")}   ${chalk6.white(formatMachineSourceCounts(settings.sources))}`);
   console.log();
   for (const source of sortMachineSources(settings.sources, settings.default_machine_source_id)) {
     printMachineSourceCard(source, settings.default_machine_source_id === source.id);
@@ -3492,17 +3334,17 @@ function printMachineSourceCard(source, isDefault) {
   ];
   const extra = machineSourceExtraParts(source);
   console.log(
-    `  ${statusLabel}${chalk8.bold(machineSourceTitle(source))}${isDefault ? chalk8.green("  default") : ""}`
+    `  ${statusLabel}${chalk6.bold(machineSourceTitle(source))}${isDefault ? chalk6.green("  default") : ""}`
   );
-  console.log(`              ${chalk8.dim(meta.concat(extra).join("  |  "))}`);
-  console.log(`              ${chalk8.dim(machineSourceStatusSummary(source))}`);
+  console.log(`              ${chalk6.dim(meta.concat(extra).join("  |  "))}`);
+  console.log(`              ${chalk6.dim(machineSourceStatusSummary(source))}`);
   if (source.resolved_image_ref) {
-    console.log(`              ${chalk8.dim("resolved")} ${source.resolved_image_ref}`);
+    console.log(`              ${chalk6.dim("resolved")} ${source.resolved_image_ref}`);
   } else if (source.last_good_resolved_image_ref) {
-    console.log(`              ${chalk8.dim("last good")} ${source.last_good_resolved_image_ref}`);
+    console.log(`              ${chalk6.dim("last good")} ${source.last_good_resolved_image_ref}`);
   }
   if (source.error) {
-    console.log(`              ${chalk8.red(source.error)}`);
+    console.log(`              ${chalk6.red(source.error)}`);
   }
   console.log();
 }
@@ -3572,13 +3414,13 @@ function formatMachineSourceStatus(status) {
   const text = status.toUpperCase();
   switch (status) {
     case "ready":
-      return chalk8.green(text);
+      return chalk6.green(text);
     case "failed":
-      return chalk8.red(text);
+      return chalk6.red(text);
     case "pending":
     case "resolving":
     case "building":
-      return chalk8.yellow(text);
+      return chalk6.yellow(text);
     default:
       return text;
   }
@@ -3687,7 +3529,7 @@ async function resolveSaveInput(options) {
   return input;
 }
 async function selectMachineSourceKind() {
-  const kind = await select3({
+  const kind = await select2({
     message: "Select machine image kind",
     choices: [
       { name: "oci-image  -  resolve an OCI image digest", value: "oci-image" },
@@ -3721,7 +3563,7 @@ async function confirmDeletion(sourceID) {
 
 // src/commands/login.ts
 import { Command as Command9 } from "commander";
-import chalk9 from "chalk";
+import chalk7 from "chalk";
 import ora8 from "ora";
 
 // src/lib/browser-login.ts
@@ -3994,7 +3836,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   if (existingKey && !options.force) {
     console.log();
     console.log(
-      chalk9.yellow("  Already logged in. Use --force to overwrite.")
+      chalk7.yellow("  Already logged in. Use --force to overwrite.")
     );
     console.log();
     return;
@@ -4003,8 +3845,8 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   const apiKey = await resolveAPIKeyInput(options.apiKey, options.stdin);
   if (!apiKey && wantsManualLogin) {
     console.log();
-    console.log(chalk9.dim("  Usage: computer login --api-key <ac_live_...>"));
-    console.log(chalk9.dim(`  API:   ${getBaseURL()}`));
+    console.log(chalk7.dim("  Usage: computer login --api-key <ac_live_...>"));
+    console.log(chalk7.dim(`  API:   ${getBaseURL()}`));
     console.log();
     process.exit(1);
   }
@@ -4014,7 +3856,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   }
   if (!apiKey.startsWith("ac_live_")) {
     console.log();
-    console.log(chalk9.red("  API key must start with ac_live_"));
+    console.log(chalk7.red("  API key must start with ac_live_"));
     console.log();
     process.exit(1);
   }
@@ -4022,7 +3864,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   try {
     const me = await apiWithKey(apiKey, "/v1/me");
     setAPIKey(apiKey);
-    spinner.succeed(`Logged in as ${chalk9.bold(me.user.email)}`);
+    spinner.succeed(`Logged in as ${chalk7.bold(me.user.email)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to validate API key"
@@ -4042,15 +3884,15 @@ async function runBrowserLogin() {
       spinner.stop();
       console.log();
       console.log(
-        chalk9.yellow("  Browser auto-open failed. Open this URL to continue:")
+        chalk7.yellow("  Browser auto-open failed. Open this URL to continue:")
       );
-      console.log(chalk9.dim(`  ${attempt.loginURL}`));
+      console.log(chalk7.dim(`  ${attempt.loginURL}`));
       console.log();
       spinner.start("Waiting for browser login...");
     }
     spinner.text = "Waiting for browser login...";
     const result = await attempt.waitForResult();
-    spinner.succeed(`Logged in as ${chalk9.bold(result.me.user.email)}`);
+    spinner.succeed(`Logged in as ${chalk7.bold(result.me.user.email)}`);
     await continueFirstLoginFlow(result);
   } catch (error) {
     spinner.fail(
@@ -4084,8 +3926,8 @@ async function continueFirstLoginFlow(result) {
   }
   console.log();
   console.log(
-    chalk9.cyan(
-      `Continuing first-time setup for ${chalk9.bold(machineHandle)}...
+    chalk7.cyan(
+      `Continuing first-time setup for ${chalk7.bold(machineHandle)}...
 `
     )
   );
@@ -4098,8 +3940,8 @@ async function continueFirstLoginFlow(result) {
     const spinner = ora8(`Preparing SSH access for ${machineHandle}...`).start();
     try {
       const connection = await prepareSSHConnectionByIdentifier(machineHandle);
-      spinner.succeed(`Connecting to ${chalk9.bold(machineHandle)}`);
-      console.log(chalk9.dim(`  ${connection.command}`));
+      spinner.succeed(`Connecting to ${chalk7.bold(machineHandle)}`);
+      console.log(chalk7.dim(`  ${connection.command}`));
       console.log();
       await openSSHConnection(connection);
     } catch (error) {
@@ -4110,19 +3952,19 @@ async function continueFirstLoginFlow(result) {
     }
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to finish first-time setup";
-    console.error(chalk9.red(`
+    console.error(chalk7.red(`
 ${message}`));
     console.log();
     if (result.provider === "claude") {
       console.log(
-        chalk9.dim(`  computer claude-login --machine ${machineHandle}`)
+        chalk7.dim(`  computer claude-login --machine ${machineHandle}`)
       );
     } else if (result.provider === "codex") {
       console.log(
-        chalk9.dim(`  computer codex-login --machine ${machineHandle}`)
+        chalk7.dim(`  computer codex-login --machine ${machineHandle}`)
       );
     }
-    console.log(chalk9.dim(`  computer ssh ${machineHandle}`));
+    console.log(chalk7.dim(`  computer ssh ${machineHandle}`));
     console.log();
     process.exit(1);
   }
@@ -4136,45 +3978,285 @@ async function runSelectedProvider(provider, machineHandle) {
     await runCodexLogin({ machine: machineHandle });
     return;
   }
-  console.log(chalk9.green(`Sandbox ${chalk9.bold(machineHandle)} is ready.`));
+  console.log(chalk7.green(`Sandbox ${chalk7.bold(machineHandle)} is ready.`));
   console.log();
 }
 function printNextStep(machineHandle) {
-  console.log(chalk9.green(`Sandbox ${chalk9.bold(machineHandle)} is ready.`));
-  console.log(chalk9.dim(`  computer ssh ${machineHandle}`));
+  console.log(chalk7.green(`Sandbox ${chalk7.bold(machineHandle)} is ready.`));
+  console.log(chalk7.dim(`  computer ssh ${machineHandle}`));
   console.log();
 }
 
-// src/commands/logout.ts
+// src/commands/mount.ts
 import { Command as Command10 } from "commander";
-import chalk10 from "chalk";
-var logoutCommand = new Command10("logout").description("Remove stored API key").action(() => {
+import chalk8 from "chalk";
+import ora9 from "ora";
+
+// src/lib/mount-daemon.ts
+import { mkdir as mkdir3 } from "fs/promises";
+function getMountControllerState(rootPath = defaultMountServiceConfig().rootPath) {
+  const lock = readMountControllerLock(rootPath);
+  if (!lock) {
+    return { running: false };
+  }
+  if (!processExists(lock.pid)) {
+    removeMountControllerLock(rootPath);
+    return { running: false };
+  }
+  return { running: true, pid: lock.pid };
+}
+async function runMountDaemon(config) {
+  const paths = getMountPaths(config.rootPath);
+  ensureMountDirectories(paths);
+  await mkdir3(paths.rootPath, { recursive: true });
+  await acquireControllerLock(config.rootPath);
+  writeMountStatusSnapshot(
+    {
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      controllerPid: process.pid,
+      running: true,
+      mounts: []
+    },
+    config.rootPath
+  );
+  await teardownManagedSessions(config, paths);
+  let running = false;
+  let queued = false;
+  let shuttingDown = false;
+  let activeRun = null;
+  const runOnce = async () => {
+    if (shuttingDown) {
+      return;
+    }
+    if (running) {
+      queued = true;
+      return activeRun ?? void 0;
+    }
+    activeRun = (async () => {
+      running = true;
+      try {
+        await reconcileMounts(config, paths, process.pid);
+      } catch (error) {
+        if (shuttingDown) {
+          return;
+        }
+        const previous = readMountStatusSnapshot(config.rootPath);
+        writeMountStatusSnapshot(
+          {
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            controllerPid: process.pid,
+            running: true,
+            lastSuccessfulSyncAt: previous?.lastSuccessfulSyncAt,
+            lastError: error instanceof Error ? error.message : "mount reconcile failed",
+            mounts: previous?.mounts ?? []
+          },
+          config.rootPath
+        );
+        console.error(
+          error instanceof Error ? error.message : "mount reconcile failed"
+        );
+      } finally {
+        running = false;
+        activeRun = null;
+        if (queued && !shuttingDown) {
+          queued = false;
+          void runOnce();
+        }
+      }
+    })();
+    return activeRun;
+  };
+  const server = createMountControlServer(paths, async () => {
+    await runOnce();
+  });
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(paths.socketPath, () => resolve());
+  });
+  const interval = setInterval(() => {
+    void runOnce();
+  }, config.pollIntervalMs);
+  const shutdown = async () => {
+    if (shuttingDown) {
+      return;
+    }
+    shuttingDown = true;
+    clearInterval(interval);
+    server.close();
+    if (activeRun) {
+      await activeRun.catch(() => {
+      });
+    }
+    await teardownManagedSessions(config, paths);
+    const previous = readMountStatusSnapshot(config.rootPath);
+    writeMountStatusSnapshot(
+      {
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        controllerPid: previous?.controllerPid,
+        running: false,
+        lastSuccessfulSyncAt: previous?.lastSuccessfulSyncAt,
+        lastError: void 0,
+        mounts: []
+      },
+      config.rootPath
+    );
+    removeMountControllerLock(config.rootPath);
+    process.exit(0);
+  };
+  process.on("SIGINT", () => {
+    void shutdown();
+  });
+  process.on("SIGTERM", () => {
+    void shutdown();
+  });
+  await runOnce();
+  await new Promise(() => {
+  });
+}
+async function acquireControllerLock(rootPath) {
+  const existing = readMountControllerLock(rootPath);
+  if (existing && processExists(existing.pid)) {
+    throw new Error(`computer mount is already running (pid ${existing.pid})`);
+  }
+  removeMountControllerLock(rootPath);
+  writeMountControllerLock(
+    {
+      pid: process.pid,
+      startedAt: (/* @__PURE__ */ new Date()).toISOString()
+    },
+    rootPath
+  );
+}
+function processExists(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) {
+    return false;
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/commands/mount.ts
+var mountCommand = new Command10("mount").description("Mirror SSH-ready machines under ~/agentcomputer while this command is running").option("--alias <alias>", "SSH host alias", "agentcomputer.ai").option("--host <host>", "SSH gateway host", "ssh.agentcomputer.ai").option("--port <port>", "SSH gateway port", "443").option("--poll-interval <ms>", "Reconcile interval in milliseconds", "5000").option("--connect-timeout <seconds>", "SSH connect timeout for Mutagen", "5").action(async (options) => {
+  const spinner = ora9("Starting machine mount controller...").start();
+  try {
+    const issues = getMountHostValidationIssues();
+    if (issues.length > 0) {
+      throw new Error(
+        [
+          ...issues.map((issue) => issue.message),
+          ...formatMountHostInstallGuidance(issues)
+        ].join("\n")
+      );
+    }
+    const sshSetup = await ensureSSHAccessConfigured(options);
+    const config = {
+      ...defaultMountServiceConfig(),
+      alias: sshSetup.alias,
+      host: sshSetup.host,
+      port: sshSetup.port,
+      pollIntervalMs: parsePositiveInt(options.pollInterval, "poll interval"),
+      connectTimeoutSeconds: parsePositiveInt(
+        options.connectTimeout,
+        "connect timeout"
+      )
+    };
+    writeMountConfig(config);
+    spinner.succeed("Machine mount controller running");
+    console.log();
+    console.log(chalk8.dim(`  Root:        ${config.rootPath}`));
+    console.log(chalk8.dim(`  SSH alias:   ${config.alias}`));
+    console.log(chalk8.dim(`  Poll:        ${config.pollIntervalMs}ms`));
+    console.log();
+    console.log(chalk8.dim("  Press Ctrl-C to stop syncing."));
+    console.log();
+    await runMountDaemon(config);
+  } catch (error) {
+    spinner.fail(
+      error instanceof Error ? error.message : "Failed to start machine mount controller"
+    );
+    process.exit(1);
+  }
+}).addCommand(
+  new Command10("status").description("Show machine mount controller status").action(() => {
+    const config = readMountConfig() ?? defaultMountServiceConfig();
+    const controller = getMountControllerState(config.rootPath);
+    const snapshot = readMountStatusSnapshot(config.rootPath);
+    console.log();
+    console.log(`  ${chalk8.bold("Machine Mounts")}`);
+    console.log();
+    console.log(
+      `  ${chalk8.dim("Running")}    ${controller.running ? chalk8.green("yes") : chalk8.dim("no")}`
+    );
+    if (controller.pid) {
+      console.log(`  ${chalk8.dim("PID")}        ${controller.pid}`);
+    }
+    console.log(`  ${chalk8.dim("Root")}       ${config.rootPath}`);
+    console.log(`  ${chalk8.dim("Alias")}      ${config.alias}`);
+    console.log(
+      `  ${chalk8.dim("Updated")}    ${snapshot?.updatedAt ? minuteSecondAgo(snapshot.updatedAt) : chalk8.dim("never")}`
+    );
+    console.log(
+      `  ${chalk8.dim("Last sync")}  ${snapshot?.lastSuccessfulSyncAt ? minuteSecondAgo(snapshot.lastSuccessfulSyncAt) : chalk8.dim("never")}`
+    );
+    if (controller.running && snapshot?.mounts.length) {
+      console.log();
+      for (const mount of snapshot.mounts) {
+        const state = mount.state === "mounted" ? chalk8.green(mount.state) : mount.state === "pending" ? chalk8.yellow(mount.state) : chalk8.red(mount.state);
+        console.log(`  ${chalk8.white(mount.handle)}  ${state}  ${chalk8.dim(mount.mountPath)}`);
+        if (mount.message) {
+          console.log(`  ${chalk8.dim(mount.message)}`);
+        }
+      }
+    }
+    if (snapshot?.lastError) {
+      console.log();
+      console.log(`  ${chalk8.dim("Last error")} ${chalk8.red(snapshot.lastError)}`);
+    }
+    console.log();
+  })
+);
+function parsePositiveInt(raw, label) {
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error(`${label} must be a positive number`);
+  }
+  return Math.round(value);
+}
+
+// src/commands/logout.ts
+import { Command as Command11 } from "commander";
+import chalk9 from "chalk";
+var logoutCommand = new Command11("logout").description("Remove stored API key").action(() => {
   if (!getStoredAPIKey()) {
     console.log();
-    console.log(chalk10.dim("  Not logged in."));
+    console.log(chalk9.dim("  Not logged in."));
     if (hasEnvAPIKey()) {
-      console.log(chalk10.dim("  Environment API key is still active in this shell."));
+      console.log(chalk9.dim("  Environment API key is still active in this shell."));
     }
     console.log();
     return;
   }
   clearAPIKey();
   console.log();
-  console.log(chalk10.green("  Logged out."));
+  console.log(chalk9.green("  Logged out."));
   if (hasEnvAPIKey()) {
-    console.log(chalk10.dim("  Environment API key is still active in this shell."));
+    console.log(chalk9.dim("  Environment API key is still active in this shell."));
   }
   console.log();
 });
 
 // src/commands/upgrade.ts
 import { spawnSync } from "child_process";
-import { readFileSync as readFileSync3, realpathSync } from "fs";
-import { Command as Command11 } from "commander";
-import chalk11 from "chalk";
-import ora9 from "ora";
+import { readFileSync as readFileSync2, realpathSync } from "fs";
+import { Command as Command12 } from "commander";
+import chalk10 from "chalk";
+import ora10 from "ora";
 var pkg2 = JSON.parse(
-  readFileSync3(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync2(new URL("../package.json", import.meta.url), "utf8")
 );
 function normalizeVersion(version) {
   return version.split("-")[0].split(".").map((part) => Number.parseInt(part, 10)).map((part) => Number.isNaN(part) ? 0 : part);
@@ -4286,10 +4368,10 @@ async function getLatestVersion(packageName) {
   }
   return payload.version;
 }
-var upgradeCommand = new Command11("upgrade").description("Update the CLI to the latest version").action(async () => {
+var upgradeCommand = new Command12("upgrade").description("Update the CLI to the latest version").action(async () => {
   const currentVersion = pkg2.version ?? "0.0.0";
   const packageName = pkg2.name ?? "aicomputer";
-  const spinner = ora9("Checking for updates...").start();
+  const spinner = ora10("Checking for updates...").start();
   let latestVersion;
   try {
     latestVersion = await getLatestVersion(packageName);
@@ -4319,16 +4401,16 @@ var upgradeCommand = new Command11("upgrade").description("Update the CLI to the
   spinner.stop();
   console.log();
   console.log(
-    chalk11.dim(`  Updating ${chalk11.bold(`v${currentVersion}`)} -> ${chalk11.bold(`v${latestVersion}`)}`)
+    chalk10.dim(`  Updating ${chalk10.bold(`v${currentVersion}`)} -> ${chalk10.bold(`v${latestVersion}`)}`)
   );
-  console.log(chalk11.dim(`  ${upgrade.label}`));
+  console.log(chalk10.dim(`  ${upgrade.label}`));
   console.log();
   const result = spawnSync(upgrade.command, upgrade.args, {
     stdio: "inherit"
   });
   if (result.status === 0) {
     console.log();
-    console.log(chalk11.green(`  Updated to v${latestVersion}.`));
+    console.log(chalk10.green(`  Updated to v${latestVersion}.`));
     console.log();
     return;
   }
@@ -4336,11 +4418,11 @@ var upgradeCommand = new Command11("upgrade").description("Update the CLI to the
 });
 
 // src/commands/whoami.ts
-import { Command as Command12 } from "commander";
-import chalk12 from "chalk";
-import ora10 from "ora";
-var whoamiCommand = new Command12("whoami").description("Show current user").option("--json", "Print raw JSON").action(async (options) => {
-  const spinner = options.json ? null : ora10("Loading user...").start();
+import { Command as Command13 } from "commander";
+import chalk11 from "chalk";
+import ora11 from "ora";
+var whoamiCommand = new Command13("whoami").description("Show current user").option("--json", "Print raw JSON").action(async (options) => {
+  const spinner = options.json ? null : ora11("Loading user...").start();
   try {
     const me = await api("/v1/me");
     spinner?.stop();
@@ -4349,14 +4431,14 @@ var whoamiCommand = new Command12("whoami").description("Show current user").opt
       return;
     }
     console.log();
-    console.log(`  ${chalk12.bold.white(me.user.display_name || me.user.email)}`);
+    console.log(`  ${chalk11.bold.white(me.user.display_name || me.user.email)}`);
     if (me.user.display_name) {
-      console.log(`  ${chalk12.dim(me.user.email)}`);
+      console.log(`  ${chalk11.dim(me.user.email)}`);
     }
     if (me.api_key.name) {
-      console.log(`  ${chalk12.dim("Key:")}  ${me.api_key.name}`);
+      console.log(`  ${chalk11.dim("Key:")}  ${me.api_key.name}`);
     }
-    console.log(`  ${chalk12.dim("API:")}  ${chalk12.dim(getBaseURL())}`);
+    console.log(`  ${chalk11.dim("API:")}  ${chalk11.dim(getBaseURL())}`);
     console.log();
   } catch (error) {
     if (spinner) {
@@ -4370,18 +4452,18 @@ var whoamiCommand = new Command12("whoami").description("Show current user").opt
 
 // src/index.ts
 var pkg3 = JSON.parse(
-  readFileSync4(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync3(new URL("../package.json", import.meta.url), "utf8")
 );
 var cliName = process.argv[1] ? basename2(process.argv[1]) : "agentcomputer";
-var program = new Command13();
+var program = new Command14();
 function appendTextSection(lines, title, values) {
   if (values.length === 0) {
     return;
   }
-  lines.push(`  ${chalk13.dim(title)}`);
+  lines.push(`  ${chalk12.dim(title)}`);
   lines.push("");
   for (const value of values) {
-    lines.push(`    ${chalk13.white(value)}`);
+    lines.push(`    ${chalk12.white(value)}`);
   }
   lines.push("");
 }
@@ -4390,10 +4472,10 @@ function appendTableSection(lines, title, entries) {
     return;
   }
   const width = Math.max(...entries.map((entry) => entry.term.length), 0) + 2;
-  lines.push(`  ${chalk13.dim(title)}`);
+  lines.push(`  ${chalk12.dim(title)}`);
   lines.push("");
   for (const entry of entries) {
-    lines.push(`    ${chalk13.white(padEnd(entry.term, width))}${chalk13.dim(entry.desc)}`);
+    lines.push(`    ${chalk12.white(padEnd(entry.term, width))}${chalk12.dim(entry.desc)}`);
   }
   lines.push("");
 }
@@ -4414,14 +4496,15 @@ function formatRootHelp(cmd) {
     ["Computers", []],
     ["Images", []],
     ["Access", []],
+    ["Mounts", []],
     ["Agents", []],
     ["Other", []]
   ];
   const otherGroup = groups.find(([name]) => name === "Other")[1];
-  lines.push(`${chalk13.bold(cliName)} ${chalk13.dim(`v${version}`)}`);
+  lines.push(`${chalk12.bold(cliName)} ${chalk12.dim(`v${version}`)}`);
   lines.push("");
   if (cmd.description()) {
-    lines.push(`  ${chalk13.dim(cmd.description())}`);
+    lines.push(`  ${chalk12.dim(cmd.description())}`);
     lines.push("");
   }
   appendTextSection(lines, "Usage", [`${cliName} <command> [options]`]);
@@ -4436,8 +4519,10 @@ function formatRootHelp(cmd) {
       groups[2][1].push(entry);
     } else if (["open", "ssh", "ports"].includes(name)) {
       groups[3][1].push(entry);
-    } else if (["agent", "acp"].includes(name)) {
+    } else if (name === "mount") {
       groups[4][1].push(entry);
+    } else if (["agent", "acp"].includes(name)) {
+      groups[5][1].push(entry);
     } else {
       otherGroup.push(entry);
     }
@@ -4472,10 +4557,10 @@ function formatSubcommandHelp(cmd, helper) {
     term: helper.optionTerm(option),
     desc: helper.optionDescription(option)
   }));
-  lines.push(chalk13.bold(commandPath(cmd)));
+  lines.push(chalk12.bold(commandPath(cmd)));
   lines.push("");
   if (description) {
-    lines.push(`  ${chalk13.dim(description)}`);
+    lines.push(`  ${chalk12.dim(description)}`);
     lines.push("");
   }
   appendTextSection(lines, "Usage", [helper.commandUsage(cmd)]);
@@ -4514,6 +4599,7 @@ program.addCommand(acpCommand);
 program.addCommand(openCommand);
 program.addCommand(sshCommand);
 program.addCommand(portsCommand);
+program.addCommand(mountCommand);
 program.addCommand(removeCommand);
 program.addCommand(completionCommand);
 applyHelpFormatting(program);