npm - aicomputer - Versions diffs - 0.1.14 → 0.1.16 - Mend

aicomputer 0.1.14 → 0.1.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/README.md +9 -2
package/dist/chunk-5IEWKH52.js +883 -0
package/dist/chunk-KXLTHWW3.js +184 -0
package/dist/chunk-OWK5N76S.js +70 -0
package/dist/index.js +735 -644
package/dist/lib/mount-config.d.ts +72 -0
package/dist/lib/mount-config.js +40 -0
package/dist/lib/mount-host.d.ts +14 -0
package/dist/lib/mount-host.js +10 -0
package/dist/lib/mount-reconcile.d.ts +44 -0
package/dist/lib/mount-reconcile.js +13 -0
package/package.json +4 -3

package/dist/index.js CHANGED Viewed

@@ -1,400 +1,81 @@
 #!/usr/bin/env node
+import {
+  formatMountHostInstallGuidance,
+  getMountHostValidationIssues
+} from "./chunk-OWK5N76S.js";
+import {
+  ApiError,
+  api,
+  apiWithKey,
+  clearAPIKey,
+  createBrowserAccess,
+  createComputer,
+  deleteComputer,
+  deletePublishedPort,
+  formatStatus,
+  getAPIKey,
+  getBaseURL,
+  getComputerByID,
+  getConnectionInfo,
+  getFilesystemSettings,
+  getStoredAPIKey,
+  getWebURL,
+  hasEnvAPIKey,
+  listComputers,
+  listPublishedPorts,
+  padEnd,
+  promptForSSHComputer,
+  publishPort,
+  reconcileMounts,
+  resolveComputer,
+  setAPIKey,
+  teardownManagedSessions,
+  timeAgo,
+  vncURL,
+  webURL
+} from "./chunk-5IEWKH52.js";
+import {
+  defaultMountServiceConfig,
+  ensureMountDirectories,
+  getMountPaths,
+  readMountConfig,
+  readMountControllerLock,
+  readMountStatusSnapshot,
+  removeMountControllerLock,
+  writeMountConfig,
+  writeMountControllerLock,
+  writeMountStatusSnapshot
+} from "./chunk-KXLTHWW3.js";
 // src/index.ts
-import { Command as Command13 } from "commander";
-import chalk13 from "chalk";
-import { readFileSync as readFileSync4 } from "fs";
+import { Command as Command14 } from "commander";
+import chalk12 from "chalk";
+import { readFileSync as readFileSync3 } from "fs";
 import { basename as basename2 } from "path";
 // src/commands/access.ts
 import { Command } from "commander";
-import chalk3 from "chalk";
-import ora from "ora";
-// src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var CONFIG_DIR = join(homedir(), ".computer");
-var CONFIG_FILE = join(CONFIG_DIR, "config.json");
-function ensureConfigDir() {
-  if (!existsSync(CONFIG_DIR)) {
-    mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
-  }
-}
-function readConfig() {
-  ensureConfigDir();
-  if (!existsSync(CONFIG_FILE)) {
-    return {};
-  }
-  try {
-    return JSON.parse(readFileSync(CONFIG_FILE, "utf8"));
-  } catch {
-    return {};
-  }
-}
-function writeConfig(config) {
-  ensureConfigDir();
-  const tempFile = `${CONFIG_FILE}.${process.pid}.tmp`;
-  writeFileSync(tempFile, JSON.stringify(config, null, 2), { mode: 384 });
-  renameSync(tempFile, CONFIG_FILE);
-}
-function getAPIKey() {
-  const envValue = process.env.COMPUTER_API_KEY ?? process.env.AGENTCOMPUTER_API_KEY;
-  if (envValue) {
-    return envValue.trim();
-  }
-  return getStoredAPIKey();
-}
-function getStoredAPIKey() {
-  return readConfig().auth?.apiKey?.trim() || null;
-}
-function hasEnvAPIKey() {
-  return Boolean(process.env.COMPUTER_API_KEY ?? process.env.AGENTCOMPUTER_API_KEY);
-}
-function setAPIKey(apiKey) {
-  const config = readConfig();
-  config.auth = { apiKey: apiKey.trim() };
-  writeConfig(config);
-}
-function clearAPIKey() {
-  const config = readConfig();
-  delete config.auth;
-  writeConfig(config);
-}
-// src/lib/api.ts
-var BASE_URL = process.env.COMPUTER_API_URL ?? process.env.AGENTCOMPUTER_API_URL ?? "https://api.computer.agentcomputer.ai";
-var WEB_URL = process.env.COMPUTER_WEB_URL ?? process.env.AGENTCOMPUTER_WEB_URL ?? resolveDefaultWebURL(BASE_URL);
-var ApiError = class extends Error {
-  constructor(status, message) {
-    super(message);
-    this.status = status;
-    this.name = "ApiError";
-  }
-};
-function getBaseURL() {
-  return BASE_URL;
-}
-function getWebURL() {
-  return WEB_URL;
-}
-async function api(path, options = {}) {
-  const apiKey = getAPIKey();
-  if (!apiKey) {
-    throw new ApiError(401, "not logged in; run 'computer login' first");
-  }
-  return requestWithKey(apiKey, path, options);
-}
-function resolveDefaultWebURL(apiURL) {
-  try {
-    const parsed = new URL(apiURL);
-    if (parsed.hostname === "api.computer.agentcomputer.ai") {
-      return "https://agentcomputer.ai";
-    }
-    if (parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1") {
-      return `${parsed.protocol}//${parsed.hostname}:3000`;
-    }
-  } catch {
-    return "https://agentcomputer.ai";
-  }
-  return "https://agentcomputer.ai";
-}
-async function apiWithKey(apiKey, path, options = {}) {
-  return requestWithKey(apiKey, path, options);
-}
-async function requestWithKey(apiKey, path, options) {
-  const headers = {
-    Accept: "application/json",
-    ...options.headers ?? {}
-  };
-  if (options.body !== void 0) {
-    headers["Content-Type"] = "application/json";
-  }
-  if (apiKey) {
-    headers.Authorization = `Bearer ${apiKey}`;
-  }
-  const response = await fetch(`${BASE_URL}${path}`, {
-    ...options,
-    headers
-  });
-  if (!response.ok) {
-    throw new ApiError(response.status, await readErrorMessage(response));
-  }
-  if (response.status === 204) {
-    return void 0;
-  }
-  return await response.json();
-}
-async function readErrorMessage(response) {
-  const contentType = response.headers.get("content-type") ?? "";
-  if (contentType.includes("application/json")) {
-    try {
-      const payload = await response.json();
-      if (payload.error) {
-        return payload.error;
-      }
-      return JSON.stringify(payload);
-    } catch {
-      return response.statusText || "request failed";
-    }
-  }
-  const body = await response.text();
-  return body || response.statusText || "request failed";
-}
-// src/lib/computers.ts
-async function listComputers() {
-  const response = await api("/v1/computers");
-  return response.computers;
-}
-async function getComputerByID(id) {
-  return api(`/v1/computers/${id}`);
-}
-async function createComputer(input) {
-  return api("/v1/computers", {
-    method: "POST",
-    body: JSON.stringify(input)
-  });
-}
-async function deleteComputer(computerID) {
-  return api(`/v1/computers/${computerID}`, {
-    method: "DELETE"
-  });
-}
-async function getFilesystemSettings() {
-  return api("/v1/me/filesystem");
-}
-async function getConnectionInfo(computerID) {
-  return api(`/v1/computers/${computerID}/connection`);
-}
-async function createBrowserAccess(computerID) {
-  return api(`/v1/computers/${computerID}/access/browser`, {
-    method: "POST"
-  });
-}
-async function createTerminalAccess(computerID) {
-  return api(`/v1/computers/${computerID}/access/terminal`, {
-    method: "POST"
-  });
-}
-async function listPublishedPorts(computerID) {
-  const response = await api(`/v1/computers/${computerID}/ports`);
-  return response.ports;
-}
-async function publishPort(computerID, input) {
-  return api(`/v1/computers/${computerID}/ports`, {
-    method: "POST",
-    body: JSON.stringify(input)
-  });
-}
-async function deletePublishedPort(computerID, targetPort) {
-  return api(`/v1/computers/${computerID}/ports/${targetPort}`, {
-    method: "DELETE"
-  });
-}
-async function resolveComputer(identifier) {
-  try {
-    return await getComputerByID(identifier);
-  } catch (error) {
-    if (!(error instanceof Error) || !("status" in error)) {
-      throw error;
-    }
-    const status = Reflect.get(error, "status");
-    if (status !== 404) {
-      throw error;
-    }
-  }
-  const computers = await listComputers();
-  const exact = computers.find(
-    (computer) => computer.handle === identifier || computer.id === identifier
-  );
-  if (exact) {
-    return exact;
-  }
-  throw new Error(`computer '${identifier}' not found`);
-}
-function webURL(computer) {
-  return `https://${computer.primary_web_host}${normalizePrimaryPath(computer.primary_path)}`;
-}
-function vncURL(computer) {
-  if (!computer.vnc_enabled) {
-    return null;
-  }
-  const domain = computer.primary_web_host.replace(/^[^.]+\./, "");
-  return `https://6080--${computer.handle}.${domain}`;
-}
-function terminalURL(computer) {
-  if (computer.runtime_family !== "managed-worker") {
-    return null;
-  }
-  const domain = computer.primary_web_host.replace(/^[^.]+\./, "");
-  return `https://8788--${computer.handle}.${domain}`;
-}
-function normalizePrimaryPath(primaryPath) {
-  const trimmed = primaryPath?.trim();
-  if (!trimmed) {
-    return "/";
-  }
-  return trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
-}
-// src/lib/computer-picker.ts
-import { select } from "@inquirer/prompts";
-import chalk2 from "chalk";
-// src/lib/format.ts
 import chalk from "chalk";
-function padEnd(str, len) {
-  const visible = str.replace(/\u001b\[[0-9;]*m/g, "");
-  return str + " ".repeat(Math.max(0, len - visible.length));
-}
-function timeAgo(dateStr) {
-  const seconds = Math.floor((Date.now() - new Date(dateStr).getTime()) / 1e3);
-  if (seconds < 60) return `${seconds}s ago`;
-  const minutes = Math.floor(seconds / 60);
-  if (minutes < 60) return `${minutes}m ago`;
-  const hours = Math.floor(minutes / 60);
-  if (hours < 24) return `${hours}h ago`;
-  const days = Math.floor(hours / 24);
-  return `${days}d ago`;
-}
-function formatStatus(status) {
-  switch (status) {
-    case "running":
-      return chalk.green(status);
-    case "pending":
-    case "provisioning":
-    case "starting":
-      return chalk.yellow(status);
-    case "stopping":
-    case "stopped":
-    case "deleted":
-      return chalk.gray(status);
-    case "error":
-      return chalk.red(status);
-    default:
-      return status;
-  }
-}
-// src/lib/computer-picker.ts
-async function promptForSSHComputer(computers, message) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    throw new Error("computer id or handle is required when not running interactively");
-  }
-  const available = computers.filter(isSSHSelectable);
-  if (available.length === 0) {
-    if (computers.length === 0) {
-      throw new Error("no computers found");
-    }
-    throw new Error("no running computers with SSH enabled");
-  }
-  const handleWidth = Math.max(6, ...available.map((computer) => computer.handle.length));
-  const selectedID = await select({
-    message,
-    pageSize: Math.min(available.length, 10),
-    choices: available.map((computer) => ({
-      name: `${padEnd(chalk2.white(computer.handle), handleWidth + 2)}${padEnd(formatStatus(computer.status), 12)}${chalk2.dim(describeSSHChoice(computer))}`,
-      value: computer.id
-    }))
-  });
-  return available.find((computer) => computer.id === selectedID) ?? available[0];
-}
-function isSSHSelectable(computer) {
-  return computer.ssh_enabled && computer.status === "running";
-}
-function describeSSHChoice(computer) {
-  const displayName = computer.display_name.trim();
-  if (displayName && displayName !== computer.handle) {
-    return `${displayName}  ${timeAgo(computer.updated_at)}`;
-  }
-  return `${computer.runtime_family}  ${timeAgo(computer.updated_at)}`;
-}
+import ora from "ora";
-// src/lib/ssh-config.ts
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-import { mkdir, readFile, writeFile } from "fs/promises";
-var MANAGED_BLOCK_START = "# >>> agentcomputer ssh setup >>>";
-var MANAGED_BLOCK_END = "# <<< agentcomputer ssh setup <<<";
-async function ensureSSHAliasConfig(options) {
-  const sshDir = join2(homedir2(), ".ssh");
-  const configPath = join2(sshDir, "config");
-  await mkdir(sshDir, { recursive: true, mode: 448 });
-  let existing = "";
-  try {
-    existing = await readFile(configPath, "utf8");
-  } catch (error) {
-    if (error.code !== "ENOENT") {
-      throw error;
-    }
-  }
-  const nextBlock = renderManagedBlock(options);
-  const managedBlockPattern = new RegExp(
-    `${escapeRegex(MANAGED_BLOCK_START)}[\\s\\S]*?${escapeRegex(MANAGED_BLOCK_END)}\\n?`,
-    "m"
-  );
-  let nextContents;
-  if (managedBlockPattern.test(existing)) {
-    nextContents = existing.replace(managedBlockPattern, nextBlock);
-  } else {
-    const normalized = existing.length === 0 ? "" : existing.endsWith("\n") ? existing : `${existing}
-`;
-    nextContents = normalized.length === 0 ? nextBlock : `${normalized}
-${nextBlock}`;
-  }
-  const changed = nextContents !== existing;
-  if (changed) {
-    await writeFile(configPath, nextContents, { mode: 384 });
-  }
-  return {
-    configPath,
-    changed
-  };
-}
-function renderManagedBlock(options) {
-  const user = options.user?.trim() || "agentcomputer";
-  const identityFile = formatIdentityFilePath(options.identityFilePath);
-  return `${MANAGED_BLOCK_START}
-Host ${options.alias}
-  HostName ${options.host}
-  Port ${options.port}
-  User ${user}
-  IdentityFile ${identityFile}
-  IdentitiesOnly yes
-  ServerAliveInterval 30
-  ServerAliveCountMax 4
-${MANAGED_BLOCK_END}
-`;
-}
-function formatIdentityFilePath(path) {
-  const normalized = path.trim();
-  const homePath = `${homedir2()}/`;
-  if (normalized.startsWith(homePath)) {
-    return `~/${normalized.slice(homePath.length)}`;
-  }
-  return normalized.replaceAll(" ", "\\ ");
-}
-function escapeRegex(value) {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
+// src/lib/ssh-access.ts
+import { spawn } from "child_process";
 // src/lib/ssh-keys.ts
 import { basename } from "path";
-import { homedir as homedir3 } from "os";
-import { readFile as readFile2, mkdir as mkdir2 } from "fs/promises";
+import { homedir } from "os";
+import { readFile, mkdir } from "fs/promises";
 import { execFileSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
+import { existsSync } from "fs";
 var DEFAULT_PUBLIC_KEY_PATHS = [
-  `${homedir3()}/.ssh/id_ed25519.pub`,
-  `${homedir3()}/.ssh/id_ecdsa.pub`,
-  `${homedir3()}/.ssh/id_rsa.pub`
+  `${homedir()}/.ssh/id_ed25519.pub`,
+  `${homedir()}/.ssh/id_ecdsa.pub`,
+  `${homedir()}/.ssh/id_rsa.pub`
 ];
 async function ensureDefaultSSHKeyRegistered() {
   for (const path of DEFAULT_PUBLIC_KEY_PATHS) {
     try {
-      const publicKey2 = (await readFile2(path, "utf8")).trim();
+      const publicKey2 = (await readFile(path, "utf8")).trim();
       if (!publicKey2) {
         continue;
       }
@@ -418,7 +99,7 @@ async function ensureDefaultSSHKeyRegistered() {
     }
   }
   const generated = await generateSSHKey();
-  const publicKey = (await readFile2(generated.publicKeyPath, "utf8")).trim();
+  const publicKey = (await readFile(generated.publicKeyPath, "utf8")).trim();
   const key = await api("/v1/ssh-keys", {
     method: "POST",
     body: JSON.stringify({
@@ -433,9 +114,9 @@ async function ensureDefaultSSHKeyRegistered() {
   };
 }
 async function generateSSHKey() {
-  const sshDir = `${homedir3()}/.ssh`;
-  if (!existsSync2(sshDir)) {
-    await mkdir2(sshDir, { mode: 448 });
+  const sshDir = `${homedir()}/.ssh`;
+  if (!existsSync(sshDir)) {
+    await mkdir(sshDir, { mode: 448 });
   }
   const privateKeyPath = `${sshDir}/id_ed25519`;
   const publicKeyPath = `${privateKeyPath}.pub`;
@@ -447,7 +128,6 @@ async function generateSSHKey() {
 }
 // src/lib/ssh-access.ts
-import { spawn } from "child_process";
 async function prepareSSHConnection(computer) {
   const registered = await ensureDefaultSSHKeyRegistered();
   const info = await getConnectionInfo(computer.id);
@@ -504,6 +184,11 @@ import { constants } from "fs";
 import { access } from "fs/promises";
 import open from "open";
 var IMAGE_BROWSER_LAUNCHER = "/usr/local/bin/browser-launcher";
+var IMAGE_BROWSER_CANDIDATES = [
+  "/usr/local/bin/google-chrome",
+  "/usr/local/bin/chromium",
+  IMAGE_BROWSER_LAUNCHER
+];
 async function isExecutable(path) {
   try {
     await access(path, constants.X_OK);
@@ -518,6 +203,8 @@ function hasBrokenChromeBrowserEnv() {
     case "chrome":
     case "google-chrome":
     case "google chrome":
+    case "browser":
+    case "browser-launcher":
       return true;
     default:
       return false;
@@ -531,9 +218,12 @@ async function openBrowserURL(url) {
   if (hasBrokenChromeBrowserEnv()) {
     delete process.env.BROWSER;
   }
-  if (await isExecutable(IMAGE_BROWSER_LAUNCHER)) {
+  for (const browserPath of IMAGE_BROWSER_CANDIDATES) {
+    if (!await isExecutable(browserPath)) {
+      continue;
+    }
     try {
-      await open(url, { app: { name: IMAGE_BROWSER_LAUNCHER } });
+      await open(url, { app: { name: browserPath } });
       return;
     } catch {
     }
@@ -546,39 +236,146 @@ async function openBrowserURL(url) {
   await open(url);
 }
+// src/lib/ssh-config.ts
+import { homedir as homedir2 } from "os";
+import { join } from "path";
+import { mkdir as mkdir2, readFile as readFile2, writeFile } from "fs/promises";
+var MANAGED_BLOCK_START = "# >>> agentcomputer ssh setup >>>";
+var MANAGED_BLOCK_END = "# <<< agentcomputer ssh setup <<<";
+async function ensureSSHAliasConfig(options) {
+  const sshDir = join(homedir2(), ".ssh");
+  const configPath = join(sshDir, "config");
+  await mkdir2(sshDir, { recursive: true, mode: 448 });
+  let existing = "";
+  try {
+    existing = await readFile2(configPath, "utf8");
+  } catch (error) {
+    if (error.code !== "ENOENT") {
+      throw error;
+    }
+  }
+  const nextBlock = renderManagedBlock(options);
+  const managedBlockPattern = new RegExp(
+    `${escapeRegex(MANAGED_BLOCK_START)}[\\s\\S]*?${escapeRegex(MANAGED_BLOCK_END)}\\n?`,
+    "m"
+  );
+  let nextContents;
+  if (managedBlockPattern.test(existing)) {
+    nextContents = existing.replace(managedBlockPattern, nextBlock);
+  } else {
+    const normalized = existing.length === 0 ? "" : existing.endsWith("\n") ? existing : `${existing}
+`;
+    nextContents = normalized.length === 0 ? nextBlock : `${normalized}
+${nextBlock}`;
+  }
+  const changed = nextContents !== existing;
+  if (changed) {
+    await writeFile(configPath, nextContents, { mode: 384 });
+  }
+  return {
+    configPath,
+    changed
+  };
+}
+function renderManagedBlock(options) {
+  const user = options.user?.trim() || "agentcomputer";
+  const identityFile = formatIdentityFilePath(options.identityFilePath);
+  return `${MANAGED_BLOCK_START}
+Host ${options.alias}
+  HostName ${options.host}
+  Port ${options.port}
+  User ${user}
+  IdentityFile ${identityFile}
+  IdentitiesOnly yes
+  ServerAliveInterval 30
+  ServerAliveCountMax 4
+${MANAGED_BLOCK_END}
+`;
+}
+function formatIdentityFilePath(path) {
+  const normalized = path.trim();
+  const homePath = `${homedir2()}/`;
+  if (normalized.startsWith(homePath)) {
+    return `~/${normalized.slice(homePath.length)}`;
+  }
+  return normalized.replaceAll(" ", "\\ ");
+}
+function escapeRegex(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+// src/lib/ssh-setup.ts
+async function ensureSSHAccessConfigured(options = {}) {
+  const alias = normalizeSSHAlias(options.alias ?? "agentcomputer.ai");
+  const host = normalizeSSHHost(options.host ?? "ssh.agentcomputer.ai");
+  const port = typeof options.port === "number" ? parseSSHPort(String(options.port)) : parseSSHPort(options.port ?? "443");
+  const registered = await ensureDefaultSSHKeyRegistered();
+  const configResult = await ensureSSHAliasConfig({
+    alias,
+    host,
+    port,
+    user: "agentcomputer",
+    identityFilePath: registered.privateKeyPath
+  });
+  return {
+    alias,
+    host,
+    port,
+    configPath: configResult.configPath,
+    identityFilePath: registered.privateKeyPath,
+    changed: configResult.changed
+  };
+}
+function normalizeSSHAlias(value) {
+  const alias = value.trim();
+  if (!alias) {
+    throw new Error("ssh alias cannot be empty");
+  }
+  if (!/^[A-Za-z0-9._-]+$/.test(alias)) {
+    throw new Error(
+      "ssh alias may contain only letters, numbers, dot, dash, or underscore"
+    );
+  }
+  return alias;
+}
+function normalizeSSHHost(value) {
+  const host = value.trim();
+  if (!host) {
+    throw new Error("ssh host cannot be empty");
+  }
+  if (host.includes(" ")) {
+    throw new Error("ssh host cannot contain spaces");
+  }
+  return host;
+}
+function parseSSHPort(value) {
+  const parsed = Number.parseInt(value, 10);
+  if (!Number.isFinite(parsed) || parsed < 1 || parsed > 65535) {
+    throw new Error("ssh port must be between 1 and 65535");
+  }
+  return parsed;
+}
 // src/commands/access.ts
-var openCommand = new Command("open").description("Open a computer in your browser").argument("<id-or-handle>", "Computer id or handle").option("--vnc", "Open VNC desktop instead of gateway").option("--terminal", "Open the terminal surface instead of gateway").action(async (identifier, options) => {
+var openCommand = new Command("open").description("Open a computer in your browser").argument("<id-or-handle>", "Computer id or handle").option("--vnc", "Open VNC desktop instead of gateway").action(async (identifier, options) => {
   const spinner = ora("Preparing access...").start();
   try {
     const computer = await resolveComputer(identifier);
     const info = await getConnectionInfo(computer.id);
-    if (options.vnc && options.terminal) {
-      throw new Error("choose either --vnc or --terminal");
-    }
     if (options.vnc) {
       if (!info.connection.vnc_available) {
         throw new Error("VNC is not available for this computer");
       }
       const url = info.connection.vnc_url;
-      spinner.succeed(`Opening VNC for ${chalk3.bold(computer.handle)}`);
+      spinner.succeed(`Opening VNC for ${chalk.bold(computer.handle)}`);
       await openBrowserURL(url);
-      console.log(chalk3.dim(`  ${url}`));
-      return;
-    }
-    if (options.terminal) {
-      if (!info.connection.terminal_available) {
-        throw new Error("Terminal access is not available for this computer");
-      }
-      const access3 = await createTerminalAccess(computer.id);
-      spinner.succeed(`Opening terminal for ${chalk3.bold(computer.handle)}`);
-      await openBrowserURL(access3.access_url);
-      console.log(chalk3.dim(`  ${access3.access_url}`));
+      console.log(chalk.dim(`  ${url}`));
       return;
     }
     const access2 = await createBrowserAccess(computer.id);
-    spinner.succeed(`Opening ${chalk3.bold(computer.handle)}`);
+    spinner.succeed(`Opening ${chalk.bold(computer.handle)}`);
     await openBrowserURL(access2.access_url);
-    console.log(chalk3.dim(`  ${access2.access_url}`));
+    console.log(chalk.dim(`  ${access2.access_url}`));
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to open computer"
@@ -598,8 +395,8 @@ var sshCommand = new Command("ssh").description("Open an SSH session to a comput
     try {
       const computer = await resolveSSHComputer(identifier, spinner);
       const connection = await prepareSSHConnection(computer);
-      spinner.succeed(`Connecting to ${chalk3.bold(computer.handle)}`);
-      console.log(chalk3.dim(`  ${connection.command}`));
+      spinner.succeed(`Connecting to ${chalk.bold(computer.handle)}`);
+      console.log(chalk.dim(`  ${connection.command}`));
       console.log();
       await openSSHConnection(connection);
     } catch (error) {
@@ -621,24 +418,24 @@ portsCommand.command("ls").description("List published ports for a computer").ar
     spinner.stop();
     if (ports.length === 0) {
       console.log();
-      console.log(chalk3.dim("  No published ports."));
+      console.log(chalk.dim("  No published ports."));
       console.log();
       return;
     }
     const subWidth = Math.max(10, ...ports.map((p) => p.subdomain.length));
     console.log();
     console.log(
-      `  ${chalk3.dim(padEnd("Subdomain", subWidth + 2))}${chalk3.dim(padEnd("Port", 8))}${chalk3.dim("Protocol")}`
+      `  ${chalk.dim(padEnd("Subdomain", subWidth + 2))}${chalk.dim(padEnd("Port", 8))}${chalk.dim("Protocol")}`
     );
     console.log(
-      `  ${chalk3.dim("-".repeat(subWidth + 2))}${chalk3.dim("-".repeat(8))}${chalk3.dim("-".repeat(8))}`
+      `  ${chalk.dim("-".repeat(subWidth + 2))}${chalk.dim("-".repeat(8))}${chalk.dim("-".repeat(8))}`
     );
     for (const port of ports) {
       const url = `https://${port.subdomain}--${computer.handle}.computer.agentcomputer.ai`;
       console.log(
         `  ${padEnd(port.subdomain, subWidth + 2)}${padEnd(String(port.target_port), 8)}${port.protocol}`
       );
-      console.log(`  ${chalk3.dim(url)}`);
+      console.log(`  ${chalk.dim(url)}`);
     }
     console.log();
   } catch (error) {
@@ -666,9 +463,9 @@ portsCommand.command("publish").description("Publish an HTTP app port").argument
     });
     const url = `https://${published.subdomain}--${computer.handle}.computer.agentcomputer.ai`;
     spinner.succeed(
-      `Published port ${chalk3.bold(String(published.target_port))}`
+      `Published port ${chalk.bold(String(published.target_port))}`
     );
-    console.log(chalk3.dim(`  ${url}`));
+    console.log(chalk.dim(`  ${url}`));
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to publish port"
@@ -685,7 +482,7 @@ portsCommand.command("rm").description("Unpublish an app port").argument("<id-or
     }
     const computer = await resolveComputer(identifier);
     await deletePublishedPort(computer.id, targetPort);
-    spinner.succeed(`Removed port ${chalk3.bold(String(targetPort))}`);
+    spinner.succeed(`Removed port ${chalk.bold(String(targetPort))}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to remove port"
@@ -696,24 +493,14 @@ portsCommand.command("rm").description("Unpublish an app port").argument("<id-or
 async function setupSSHAlias(options) {
   const spinner = ora("Configuring global SSH access...").start();
   try {
-    const alias = normalizeSSHAlias(options.alias ?? "agentcomputer.ai");
-    const host = normalizeSSHHost(options.host ?? "ssh.agentcomputer.ai");
-    const port = parseSSHPort(options.port ?? "443");
-    const registered = await ensureDefaultSSHKeyRegistered();
-    const configResult = await ensureSSHAliasConfig({
-      alias,
-      host,
-      port,
-      user: "agentcomputer",
-      identityFilePath: registered.privateKeyPath
-    });
-    spinner.succeed(`SSH alias '${alias}' is ready`);
+    const setup = await ensureSSHAccessConfigured(options);
+    spinner.succeed(`SSH alias '${setup.alias}' is ready`);
     console.log();
-    console.log(chalk3.dim(`  SSH config: ${configResult.configPath}`));
-    console.log(chalk3.dim(`  Identity:   ${registered.privateKeyPath}`));
+    console.log(chalk.dim(`  SSH config: ${setup.configPath}`));
+    console.log(chalk.dim(`  Identity:   ${setup.identityFilePath}`));
     console.log();
-    console.log(`  ${chalk3.bold("Shell:")}   ssh ${alias}`);
-    console.log(`  ${chalk3.bold("Direct:")}  ssh <handle>@${alias}`);
+    console.log(`  ${chalk.bold("Shell:")}   ssh ${setup.alias}`);
+    console.log(`  ${chalk.bold("Direct:")}  ssh <handle>@${setup.alias}`);
     console.log();
   } catch (error) {
     spinner.fail(
@@ -722,35 +509,6 @@ async function setupSSHAlias(options) {
     process.exit(1);
   }
 }
-function normalizeSSHAlias(value) {
-  const alias = value.trim();
-  if (!alias) {
-    throw new Error("ssh alias cannot be empty");
-  }
-  if (!/^[A-Za-z0-9._-]+$/.test(alias)) {
-    throw new Error(
-      "ssh alias may contain only letters, numbers, dot, dash, or underscore"
-    );
-  }
-  return alias;
-}
-function normalizeSSHHost(value) {
-  const host = value.trim();
-  if (!host) {
-    throw new Error("ssh host cannot be empty");
-  }
-  if (host.includes(" ")) {
-    throw new Error("ssh host cannot contain spaces");
-  }
-  return host;
-}
-function parseSSHPort(value) {
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isFinite(parsed) || parsed < 1 || parsed > 65535) {
-    throw new Error("ssh port must be between 1 and 65535");
-  }
-  return parsed;
-}
 async function resolveSSHComputer(identifier, spinner) {
   const trimmed = identifier?.trim();
   if (trimmed) {
@@ -769,7 +527,7 @@ async function resolveSSHComputer(identifier, spinner) {
 }
 // src/commands/acp.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync } from "fs";
 import readline from "readline";
 import { Command as Command2 } from "commander";
@@ -845,7 +603,7 @@ async function openAgentSessionEventsStream(computerID, sessionID, options = {})
     signal: options.signal
   });
   if (!response.ok) {
-    const message = await readErrorMessage2(response);
+    const message = await readErrorMessage(response);
     throw new ApiError(response.status, message);
   }
   return response;
@@ -865,7 +623,7 @@ async function waitForSessionToSettle(computerID, sessionID, promptID, options =
     await new Promise((resolve) => setTimeout(resolve, intervalMs));
   }
 }
-async function readErrorMessage2(response) {
+async function readErrorMessage(response) {
   const contentType = response.headers.get("content-type") ?? "";
   if (contentType.includes("application/json")) {
     try {
@@ -881,7 +639,7 @@ async function readErrorMessage2(response) {
 // src/commands/acp.ts
 var pkg = JSON.parse(
-  readFileSync2(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync(new URL("../package.json", import.meta.url), "utf8")
 );
 function emit(message) {
   process.stdout.write(`${JSON.stringify(message)}
@@ -1112,22 +870,22 @@ acpCommand.command("serve").description("Serve a local stdio ACP bridge backed b
 // src/commands/agent.ts
 import { Command as Command3 } from "commander";
-import chalk4 from "chalk";
+import chalk2 from "chalk";
 import ora2 from "ora";
 function formatAgentSessionStatus(status) {
   switch (status) {
     case "idle":
-      return chalk4.green(status);
+      return chalk2.green(status);
     case "running":
-      return chalk4.blue(status);
+      return chalk2.blue(status);
     case "cancelling":
-      return chalk4.yellow(status);
+      return chalk2.yellow(status);
     case "interrupted":
-      return chalk4.yellow(status);
+      return chalk2.yellow(status);
     case "failed":
-      return chalk4.red(status);
+      return chalk2.red(status);
     case "closed":
-      return chalk4.gray(status);
+      return chalk2.gray(status);
     default:
       return status;
   }
@@ -1136,14 +894,14 @@ function printAgents(agents) {
   const idWidth = Math.max(5, ...agents.map((agent) => agent.id.length));
   console.log();
   console.log(
-    `  ${chalk4.dim(padEnd("Agent", idWidth + 2))}${chalk4.dim(padEnd("Installed", 12))}${chalk4.dim(padEnd("Creds", 8))}${chalk4.dim("Version")}`
+    `  ${chalk2.dim(padEnd("Agent", idWidth + 2))}${chalk2.dim(padEnd("Installed", 12))}${chalk2.dim(padEnd("Creds", 8))}${chalk2.dim("Version")}`
   );
   console.log(
-    `  ${chalk4.dim("-".repeat(idWidth + 2))}${chalk4.dim("-".repeat(12))}${chalk4.dim("-".repeat(8))}${chalk4.dim("-".repeat(12))}`
+    `  ${chalk2.dim("-".repeat(idWidth + 2))}${chalk2.dim("-".repeat(12))}${chalk2.dim("-".repeat(8))}${chalk2.dim("-".repeat(12))}`
   );
   for (const agent of agents) {
     console.log(
-      `  ${padEnd(agent.id, idWidth + 2)}${padEnd(agent.installed ? chalk4.green("yes") : chalk4.gray("no"), 12)}${padEnd(agent.credentialsAvailable ? chalk4.green("yes") : chalk4.yellow("no"), 8)}${agent.version ?? chalk4.dim("unknown")}`
+      `  ${padEnd(agent.id, idWidth + 2)}${padEnd(agent.installed ? chalk2.green("yes") : chalk2.gray("no"), 12)}${padEnd(agent.credentialsAvailable ? chalk2.green("yes") : chalk2.yellow("no"), 8)}${agent.version ?? chalk2.dim("unknown")}`
     );
   }
   console.log();
@@ -1151,7 +909,7 @@ function printAgents(agents) {
 function printSessions(sessions, handleByComputerID = /* @__PURE__ */ new Map()) {
   if (sessions.length === 0) {
     console.log();
-    console.log(chalk4.dim("  No agent sessions found."));
+    console.log(chalk2.dim("  No agent sessions found."));
     console.log();
     return;
   }
@@ -1160,19 +918,19 @@ function printSessions(sessions, handleByComputerID = /* @__PURE__ */ new Map())
   const statusWidth = 13;
   console.log();
   console.log(
-    `  ${chalk4.dim(padEnd("Session", 14))}${chalk4.dim(padEnd("Name", nameWidth + 2))}${chalk4.dim(padEnd("Agent", agentWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim("Location")}`
+    `  ${chalk2.dim(padEnd("Session", 14))}${chalk2.dim(padEnd("Name", nameWidth + 2))}${chalk2.dim(padEnd("Agent", agentWidth + 2))}${chalk2.dim(padEnd("Status", statusWidth + 2))}${chalk2.dim("Location")}`
   );
   console.log(
-    `  ${chalk4.dim("-".repeat(14))}${chalk4.dim("-".repeat(nameWidth + 2))}${chalk4.dim("-".repeat(agentWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(20))}`
+    `  ${chalk2.dim("-".repeat(14))}${chalk2.dim("-".repeat(nameWidth + 2))}${chalk2.dim("-".repeat(agentWidth + 2))}${chalk2.dim("-".repeat(statusWidth + 2))}${chalk2.dim("-".repeat(20))}`
   );
   for (const session of sessions) {
     const location = handleByComputerID.get(session.computer_id) ?? session.computer_id;
     console.log(
       `  ${padEnd(session.id.slice(0, 12), 14)}${padEnd(session.name || "default", nameWidth + 2)}${padEnd(session.agent, agentWidth + 2)}${padEnd(formatAgentSessionStatus(session.status), statusWidth + 2)}${location}`
     );
-    console.log(`  ${chalk4.dim(`  cwd=${session.cwd}  updated=${timeAgo(session.updated_at)}`)}`);
+    console.log(`  ${chalk2.dim(`  cwd=${session.cwd}  updated=${timeAgo(session.updated_at)}`)}`);
     if (session.last_stop_reason || session.last_error) {
-      console.log(`  ${chalk4.dim(`  ${session.last_error ? `error=${session.last_error}` : `stop=${session.last_stop_reason}`}`)}`);
+      console.log(`  ${chalk2.dim(`  ${session.last_error ? `error=${session.last_error}` : `stop=${session.last_stop_reason}`}`)}`);
     }
   }
   console.log();
@@ -1186,7 +944,7 @@ var StreamPrinter = class {
   }
   writeDim(text) {
     this.ensureBreak();
-    process.stdout.write(chalk4.dim(text));
+    process.stdout.write(chalk2.dim(text));
     this.inlineOpen = !text.endsWith("\n");
   }
   writeLine(text) {
@@ -1254,7 +1012,7 @@ function renderSSEChunk(chunk, printer, asJson) {
   try {
     envelope = JSON.parse(payload);
   } catch {
-    printer.writeLine(chalk4.dim(payload));
+    printer.writeLine(chalk2.dim(payload));
     return;
   }
   const method = typeof envelope.method === "string" ? envelope.method : "";
@@ -1281,14 +1039,14 @@ function renderSSEChunk(chunk, printer, asJson) {
       case "tool_call_update": {
         const title = typeof update?.title === "string" && update.title ? update.title : "tool";
         const status = typeof update?.status === "string" && update.status ? update.status : "in_progress";
-        printer.writeLine(chalk4.dim(`[tool:${status}] ${title}`));
+        printer.writeLine(chalk2.dim(`[tool:${status}] ${title}`));
         return;
       }
       case "plan": {
         const entries = Array.isArray(update?.entries) ? update.entries : [];
         const detail = entries.filter((entry) => typeof entry === "object" && entry !== null).map((entry) => `- [${entry.status ?? "pending"}] ${entry.content ?? ""}`).join("\n");
         if (detail) {
-          printer.writeLine(chalk4.dim(`Plan
+          printer.writeLine(chalk2.dim(`Plan
 ${detail}`));
         }
         return;
@@ -1298,7 +1056,7 @@ ${detail}`));
     }
   }
   if (method === "session/request_permission") {
-    printer.writeLine(chalk4.yellow("Permission requested by remote agent"));
+    printer.writeLine(chalk2.yellow("Permission requested by remote agent"));
     return;
   }
 }
@@ -1426,12 +1184,12 @@ agentCommand.command("prompt").description("Send a prompt to a machine agent ses
       return;
     }
     console.log();
-    console.log(`  ${chalk4.bold(session.name || "default")}  ${formatAgentSessionStatus(settled.status)}`);
+    console.log(`  ${chalk2.bold(session.name || "default")}  ${formatAgentSessionStatus(settled.status)}`);
     if (settled.last_stop_reason) {
-      console.log(chalk4.dim(`  stop_reason=${settled.last_stop_reason}`));
+      console.log(chalk2.dim(`  stop_reason=${settled.last_stop_reason}`));
     }
     if (settled.last_error) {
-      console.log(chalk4.red(`  error=${settled.last_error}`));
+      console.log(chalk2.red(`  error=${settled.last_error}`));
     }
     console.log();
   } catch (error) {
@@ -1542,7 +1300,7 @@ agentCommand.command("close").description("Close and delete a machine agent sess
 import { randomBytes as randomBytes2, createHash } from "crypto";
 import { input as textInput } from "@inquirer/prompts";
 import { Command as Command4 } from "commander";
-import chalk5 from "chalk";
+import chalk3 from "chalk";
 import ora4 from "ora";
 // src/lib/remote-auth.ts
@@ -1755,7 +1513,7 @@ var claudeLoginCommand = new Command4("claude-login").alias("claude-auth").descr
     await runClaudeLogin(options);
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to authenticate Claude";
-    console.error(chalk5.red(`
+    console.error(chalk3.red(`
 ${message}`));
     process.exit(1);
   }
@@ -1768,7 +1526,7 @@ async function runClaudeLogin(options) {
   let activeTodoID = "target";
   let failureMessage = null;
   console.log();
-  console.log(chalk5.cyan("Authenticating with Claude Code...\n"));
+  console.log(chalk3.cyan("Authenticating with Claude Code...\n"));
   try {
     const prepared = await prepareTargetMachine(options);
     target = prepared.computer;
@@ -1853,7 +1611,7 @@ async function runClaudeLogin(options) {
   }
   if (target) {
     console.log(
-      chalk5.green(`Claude login installed on ${chalk5.bold(target.handle)}.`)
+      chalk3.green(`Claude login installed on ${chalk3.bold(target.handle)}.`)
     );
     console.log();
   }
@@ -1894,11 +1652,11 @@ function markVerificationTodo(items, id, result, successDetail) {
 }
 function printTodoList(items) {
   console.log();
-  console.log(chalk5.dim("TODO"));
+  console.log(chalk3.dim("TODO"));
   console.log();
   for (const item of items) {
-    const marker = item.state === "done" ? chalk5.green("[x]") : item.state === "skipped" ? chalk5.yellow("[-]") : item.state === "failed" ? chalk5.red("[!]") : chalk5.dim("[ ]");
-    const detail = item.detail ? chalk5.dim(`  ${item.detail}`) : "";
+    const marker = item.state === "done" ? chalk3.green("[x]") : item.state === "skipped" ? chalk3.yellow("[-]") : item.state === "failed" ? chalk3.red("[!]") : chalk3.dim("[ ]");
+    const detail = item.detail ? chalk3.dim(`  ${item.detail}`) : "";
     console.log(`  ${marker} ${item.label}${detail ? ` ${detail}` : ""}`);
   }
   console.log();
@@ -1926,7 +1684,7 @@ async function runManualOAuthFlow() {
   try {
     await openBrowserURL(url);
   } catch {
-    console.log(chalk5.yellow("Unable to open the browser automatically."));
+    console.log(chalk3.yellow("Unable to open the browser automatically."));
   }
   console.log(
     "After completing authentication, copy the code shown on the success page."
@@ -2017,7 +1775,7 @@ function parseAuthorizationInput(value, expectedState) {
 }
 async function installClaudeAuth(target, oauth) {
   const spinner = ora4(
-    `Installing Claude auth on ${chalk5.bold(target.handle)}...`
+    `Installing Claude auth on ${chalk3.bold(target.handle)}...`
   ).start();
   try {
     const installScript = buildInstallScript(oauth.refreshToken, oauth.scope);
@@ -2027,10 +1785,10 @@ async function installClaudeAuth(target, oauth) {
       installScript
     );
     if (result.stdout.trim()) {
-      spinner.succeed(`Installed Claude auth on ${chalk5.bold(target.handle)}`);
+      spinner.succeed(`Installed Claude auth on ${chalk3.bold(target.handle)}`);
       return;
     }
-    spinner.succeed(`Installed Claude auth on ${chalk5.bold(target.handle)}`);
+    spinner.succeed(`Installed Claude auth on ${chalk3.bold(target.handle)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : `Failed to install Claude auth on ${target.handle}`
@@ -2040,11 +1798,11 @@ async function installClaudeAuth(target, oauth) {
 }
 async function verifyTargetMachine(handle, target) {
   const spinner = ora4(
-    `Verifying Claude login on ${chalk5.bold(handle)}...`
+    `Verifying Claude login on ${chalk3.bold(handle)}...`
   ).start();
   const result = await verifyStoredAuth(target);
   if (result.status === "verified") {
-    spinner.succeed(`Verified Claude login on ${chalk5.bold(handle)}`);
+    spinner.succeed(`Verified Claude login on ${chalk3.bold(handle)}`);
     return result;
   }
   spinner.warn(result.detail);
@@ -2052,7 +1810,7 @@ async function verifyTargetMachine(handle, target) {
 }
 async function verifySharedInstall(primaryHandle, primaryComputerID, sharedInstall, skip, verify) {
   const spinner = ora4(
-    `Verifying shared-home Claude login from ${chalk5.bold(primaryHandle)}...`
+    `Verifying shared-home Claude login from ${chalk3.bold(primaryHandle)}...`
   ).start();
   const result = await verifySecondaryMachine(
     primaryComputerID,
@@ -2062,7 +1820,7 @@ async function verifySharedInstall(primaryHandle, primaryComputerID, sharedInsta
   );
   if (result.status === "verified") {
     spinner.succeed(
-      `Verified shared-home Claude login on ${chalk5.bold(result.handle)}`
+      `Verified shared-home Claude login on ${chalk3.bold(result.handle)}`
     );
     return result;
   }
@@ -2146,9 +1904,9 @@ function randomSuffix2(length) {
 // src/commands/computers.ts
 import { Command as Command5 } from "commander";
-import chalk6 from "chalk";
+import chalk4 from "chalk";
 import ora5 from "ora";
-import { select as select2, input as textInput2, confirm } from "@inquirer/prompts";
+import { select, input as textInput2, confirm } from "@inquirer/prompts";
 // src/lib/machine-sources.ts
 async function getMachineSourceSettings() {
@@ -2193,48 +1951,90 @@ function summarizeMachineSource(source) {
   return parts.join(" | ");
 }
+// src/lib/mount-control.ts
+import { unlinkSync } from "fs";
+import net from "net";
+async function notifyMountDaemon(paths) {
+  return new Promise((resolve) => {
+    const socket = net.createConnection(paths.socketPath);
+    socket.on("connect", () => {
+      socket.end("reconcile\n");
+      resolve(true);
+    });
+    socket.on("error", () => {
+      resolve(false);
+    });
+  });
+}
+function createMountControlServer(paths, onReconcile) {
+  try {
+    unlinkSync(paths.socketPath);
+  } catch {
+  }
+  const server = net.createServer((socket) => {
+    socket.setEncoding("utf8");
+    let buffer = "";
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      if (buffer.includes("\n")) {
+        void Promise.resolve(onReconcile()).finally(() => {
+          socket.end("ok\n");
+        });
+      }
+    });
+    socket.on("error", () => {
+      socket.destroy();
+    });
+  });
+  server.on("close", () => {
+    try {
+      unlinkSync(paths.socketPath);
+    } catch {
+    }
+  });
+  return server;
+}
 // src/commands/computers.ts
 function isInternalCondition(value) {
   return /^[A-Z][a-zA-Z]+$/.test(value);
 }
 function printComputer(computer) {
   const vnc = vncURL(computer);
-  const terminal = terminalURL(computer);
   const ssh = computer.ssh_enabled ? formatSSHCommand2(computer.handle, computer.ssh_host, computer.ssh_port) : "disabled";
   const isCustom = computer.runtime_family === "custom-machine";
   console.log();
-  console.log(`  ${chalk6.bold.white(computer.handle)}  ${formatStatus(computer.status)}`);
+  console.log(`  ${chalk4.bold.white(computer.handle)}  ${formatStatus(computer.status)}`);
   console.log();
-  console.log(`  ${chalk6.dim("ID")}        ${computer.id}`);
-  console.log(`  ${chalk6.dim("Tier")}      ${computer.tier}`);
+  console.log(`  ${chalk4.dim("ID")}        ${computer.id}`);
+  console.log(`  ${chalk4.dim("Tier")}      ${computer.tier}`);
   if (isCustom) {
-    console.log(`  ${chalk6.dim("Runtime")}   ${computer.runtime_family}`);
-    console.log(`  ${chalk6.dim("Source")}    ${computer.source_kind}`);
-    console.log(`  ${chalk6.dim("Image")}     ${computer.image_family}`);
+    console.log(`  ${chalk4.dim("Runtime")}   ${computer.runtime_family}`);
+    console.log(`  ${chalk4.dim("Source")}    ${computer.source_kind}`);
+    console.log(`  ${chalk4.dim("Image")}     ${computer.image_family}`);
   } else {
-    console.log(`  ${chalk6.dim("Runtime")}   ${computer.runtime_family}`);
-    console.log(`  ${chalk6.dim("Launch")}    ${formatManagedWorkerLaunchSource(computer)}`);
+    console.log(`  ${chalk4.dim("Runtime")}   ${computer.runtime_family}`);
+    console.log(`  ${chalk4.dim("Launch")}    ${formatManagedWorkerLaunchSource(computer)}`);
     if (computer.user_source_id && computer.resolved_image_ref) {
-      console.log(`  ${chalk6.dim("Image")}     ${computer.resolved_image_ref}`);
+      console.log(`  ${chalk4.dim("Image")}     ${computer.resolved_image_ref}`);
     }
   }
-  console.log(`  ${chalk6.dim("Primary")}   :${computer.primary_port}${computer.primary_path}`);
-  console.log(`  ${chalk6.dim("Health")}    ${computer.healthcheck_type}${computer.healthcheck_value ? ` (${computer.healthcheck_value})` : ""}`);
+  console.log(`  ${chalk4.dim("Primary")}   :${computer.primary_port}${computer.primary_path}`);
+  console.log(`  ${chalk4.dim("Health")}    ${computer.healthcheck_type}${computer.healthcheck_value ? ` (${computer.healthcheck_value})` : ""}`);
   console.log();
-  console.log(`  ${chalk6.dim("Gateway")}   ${chalk6.cyan(webURL(computer))}`);
-  console.log(`  ${chalk6.dim("VNC")}       ${vnc ? chalk6.cyan(vnc) : chalk6.dim("not available")}`);
-  console.log(`  ${chalk6.dim("Terminal")}  ${terminal ? chalk6.cyan(terminal) : chalk6.dim("not available")}`);
-  console.log(`  ${chalk6.dim("SSH")}       ${computer.ssh_enabled ? chalk6.white(ssh) : chalk6.dim(ssh)}`);
+  console.log(`  ${chalk4.dim("Gateway")}   ${chalk4.cyan(webURL(computer))}`);
+  console.log(`  ${chalk4.dim("VNC")}       ${vnc ? chalk4.cyan(vnc) : chalk4.dim("not available")}`);
+  console.log(`  ${chalk4.dim("SSH")}       ${computer.ssh_enabled ? chalk4.white(ssh) : chalk4.dim(ssh)}`);
   if (computer.last_error) {
     console.log();
     if (isInternalCondition(computer.last_error)) {
-      console.log(`  ${chalk6.dim("Condition")} ${chalk6.dim(computer.last_error)}`);
+      console.log(`  ${chalk4.dim("Condition")} ${chalk4.dim(computer.last_error)}`);
     } else {
-      console.log(`  ${chalk6.dim("Error")}     ${chalk6.red(computer.last_error)}`);
+      console.log(`  ${chalk4.dim("Error")}     ${chalk4.red(computer.last_error)}`);
     }
   }
   console.log();
-  console.log(`  ${chalk6.dim("Created")}   ${timeAgo(computer.created_at)}`);
+  console.log(`  ${chalk4.dim("Created")}   ${timeAgo(computer.created_at)}`);
   console.log();
 }
 function formatSSHCommand2(user, host, port) {
@@ -2271,16 +2071,16 @@ function printComputerTable(computers) {
   const createdWidth = 10;
   console.log();
   console.log(
-    `  ${chalk6.dim(padEnd("Handle", handleWidth + 2))}${chalk6.dim(padEnd("Status", statusWidth + 2))}${chalk6.dim(padEnd("Created", createdWidth + 2))}${chalk6.dim("URL")}`
+    `  ${chalk4.dim(padEnd("Handle", handleWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim(padEnd("Created", createdWidth + 2))}${chalk4.dim("URL")}`
   );
   console.log(
-    `  ${chalk6.dim("-".repeat(handleWidth + 2))}${chalk6.dim("-".repeat(statusWidth + 2))}${chalk6.dim("-".repeat(createdWidth + 2))}${chalk6.dim("-".repeat(20))}`
+    `  ${chalk4.dim("-".repeat(handleWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(createdWidth + 2))}${chalk4.dim("-".repeat(20))}`
   );
   for (const computer of computers) {
     const status = formatStatus(computer.status);
-    const created = chalk6.dim(timeAgo(computer.created_at));
+    const created = chalk4.dim(timeAgo(computer.created_at));
     console.log(
-      `  ${chalk6.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${padEnd(created, createdWidth + 2)}${chalk6.cyan(webURL(computer))}`
+      `  ${chalk4.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${padEnd(created, createdWidth + 2)}${chalk4.cyan(webURL(computer))}`
     );
   }
   console.log();
@@ -2290,23 +2090,19 @@ function printComputerTableVerbose(computers) {
   const statusWidth = 10;
   console.log();
   console.log(
-    `  ${chalk6.dim(padEnd("Handle", handleWidth + 2))}${chalk6.dim(padEnd("Status", statusWidth + 2))}${chalk6.dim("URLs")}`
+    `  ${chalk4.dim(padEnd("Handle", handleWidth + 2))}${chalk4.dim(padEnd("Status", statusWidth + 2))}${chalk4.dim("URLs")}`
   );
   console.log(
-    `  ${chalk6.dim("-".repeat(handleWidth + 2))}${chalk6.dim("-".repeat(statusWidth + 2))}${chalk6.dim("-".repeat(20))}`
+    `  ${chalk4.dim("-".repeat(handleWidth + 2))}${chalk4.dim("-".repeat(statusWidth + 2))}${chalk4.dim("-".repeat(20))}`
   );
   for (const computer of computers) {
     const status = formatStatus(computer.status);
     const vnc = vncURL(computer);
-    const terminal = terminalURL(computer);
-    console.log(
-      `  ${chalk6.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${chalk6.cyan(webURL(computer))}`
-    );
     console.log(
-      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk6.dim(vnc ?? "VNC not available")}`
+      `  ${chalk4.white(padEnd(computer.handle, handleWidth + 2))}${padEnd(status, statusWidth + 2)}${chalk4.cyan(webURL(computer))}`
     );
     console.log(
-      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk6.dim(terminal ?? "Terminal not available")}`
+      `  ${padEnd("", handleWidth + 2)}${padEnd("", statusWidth + 2)}${chalk4.dim(vnc ?? "VNC not available")}`
     );
   }
   console.log();
@@ -2322,7 +2118,7 @@ var lsCommand = new Command5("ls").description("List computers").option("--json"
     }
     if (computers.length === 0) {
       console.log();
-      console.log(chalk6.dim("  No computers found."));
+      console.log(chalk4.dim("  No computers found."));
       console.log();
       return;
     }
@@ -2378,11 +2174,11 @@ var createCommand = new Command5("create").description("Create a computer").argu
       Boolean(selectedOptions.usePlatformDefault)
     );
     if (machineSourceNote) {
-      console.log(chalk6.dim(machineSourceNote));
+      console.log(chalk4.dim(machineSourceNote));
     }
     const provisioningNote = createProvisioningNote(runtimeFamily, filesystemSettings);
     if (provisioningNote) {
-      console.log(chalk6.dim(provisioningNote));
+      console.log(chalk4.dim(provisioningNote));
     }
     spinner = ora5(createSpinnerText(runtimeFamily, filesystemSettings, 0)).start();
     startTime = Date.now();
@@ -2420,7 +2216,12 @@ var createCommand = new Command5("create").description("Create a computer").argu
     }
     const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
     spinner.succeed(
-      chalk6.green(`Created ${chalk6.bold(computer.handle)} ${chalk6.dim(`[${elapsed}s]`)}`)
+      chalk4.green(`Created ${chalk4.bold(computer.handle)} ${chalk4.dim(`[${elapsed}s]`)}`)
+    );
+    await notifyMountDaemon(
+      getMountPaths((readMountConfig() ?? defaultMountServiceConfig()).rootPath)
+    ).catch(
+      () => false
     );
     printComputer(computer);
   } catch (error) {
@@ -2429,10 +2230,10 @@ var createCommand = new Command5("create").description("Create a computer").argu
     }
     const message = error instanceof Error ? error.message : "Failed to create computer";
     if (spinner) {
-      const suffix = startTime ? ` ${chalk6.dim(`[${((Date.now() - startTime) / 1e3).toFixed(1)}s]`)}` : "";
+      const suffix = startTime ? ` ${chalk4.dim(`[${((Date.now() - startTime) / 1e3).toFixed(1)}s]`)}` : "";
       spinner.fail(`${message}${suffix}`);
     } else {
-      console.error(chalk6.red(message));
+      console.error(chalk4.red(message));
     }
     process.exit(1);
   }
@@ -2444,11 +2245,11 @@ async function resolveCreateOptions(options) {
     validateCreateOptions(selectedOptions);
     return selectedOptions;
   }
-  const runtimeChoice = await select2({
+  const runtimeChoice = await select({
     message: "Select runtime",
     choices: [
       {
-        name: "managed-worker  -  default Ubuntu desktop, SSH, VNC, terminal",
+        name: "managed-worker  -  default Ubuntu desktop, SSH, and VNC",
         value: "managed-worker"
       },
       {
@@ -2464,7 +2265,7 @@ async function resolveCreateOptions(options) {
     selectedOptions.imageRef = (await textInput2({ message: "OCI image ref (required):" })).trim();
     selectedOptions.primaryPort = (await textInput2({ message: "Primary port:", default: "3000" })).trim();
     selectedOptions.primaryPath = (await textInput2({ message: "Primary path:", default: "/" })).trim();
-    selectedOptions.healthcheckType = await select2({
+    selectedOptions.healthcheckType = await select({
       message: "Healthcheck type",
       choices: [
         { name: "tcp", value: "tcp" },
@@ -2495,11 +2296,11 @@ var removeCommand = new Command5("rm").description("Delete a computer").argument
     spinner.stop();
     if (!skipConfirm && process.stdin.isTTY) {
       const confirmed = await confirm({
-        message: `Delete computer ${chalk6.bold(computer.handle)}?`,
+        message: `Delete computer ${chalk4.bold(computer.handle)}?`,
         default: false
       });
       if (!confirmed) {
-        console.log(chalk6.dim("  Cancelled."));
+        console.log(chalk4.dim("  Cancelled."));
         return;
       }
     }
@@ -2507,7 +2308,12 @@ var removeCommand = new Command5("rm").description("Delete a computer").argument
     await api(`/v1/computers/${computer.id}`, {
       method: "DELETE"
     });
-    deleteSpinner.succeed(chalk6.green(`Deleted ${chalk6.bold(computer.handle)}`));
+    deleteSpinner.succeed(chalk4.green(`Deleted ${chalk4.bold(computer.handle)}`));
+    await notifyMountDaemon(
+      getMountPaths((readMountConfig() ?? defaultMountServiceConfig()).rootPath)
+    ).catch(
+      () => false
+    );
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to delete computer"
@@ -2563,9 +2369,9 @@ function createMachineSourceNote(runtimeFamily, machineSourceSettings, usePlatfo
   return `Using managed-worker image source: ${summarizeMachineSourceSelection(machineSourceSettings)}.`;
 }
 function createSpinnerText(runtimeFamily, filesystemSettings, elapsedSeconds) {
-  const elapsedLabel = chalk6.dim(`${elapsedSeconds.toFixed(1)}s`);
+  const elapsedLabel = chalk4.dim(`${elapsedSeconds.toFixed(1)}s`);
   if (runtimeFamily === "managed-worker" && filesystemSettings?.shared_enabled && elapsedSeconds >= 5) {
-    return `Creating computer... ${elapsedLabel} ${chalk6.dim("mounting shared home")}`;
+    return `Creating computer... ${elapsedLabel} ${chalk4.dim("mounting shared home")}`;
   }
   return `Creating computer... ${elapsedLabel}`;
 }
@@ -2654,6 +2460,7 @@ _computer() {
     'open:Open in browser'
     'ssh:SSH into a computer'
     'ports:Manage published ports'
+    'mount:Mirror SSH-ready machine homes into ~/agentcomputer while running'
     'agent:Manage cloud agent sessions'
     'acp:Run a local ACP bridge for remote agent sessions'
     'rm:Delete a computer'
@@ -2677,6 +2484,11 @@ _computer() {
     'rm:Delete a machine image source'
   )
+  local -a mount_commands
+  mount_commands=(
+    'status:Show machine mount controller status'
+  )
   _arguments -C \\
     '(-h --help)'{-h,--help}'[Display help]' \\
     '(-V --version)'{-V,--version}'[Show version]' \\
@@ -2781,12 +2593,33 @@ _computer() {
         open)
           _arguments \\
             '--vnc[Open VNC desktop]' \\
-            '--terminal[Open terminal]' \\
             '1:computer:_computer_handles'
           ;;
         ssh)
           _arguments '1:computer:_computer_handles'
           ;;
+        mount)
+          _arguments -C \\
+            '--alias[SSH host alias]:alias:' \\
+            '--host[SSH gateway host]:host:' \\
+            '--port[SSH gateway port]:port:' \\
+            '--poll-interval[Reconcile interval in milliseconds]:ms:' \\
+            '--connect-timeout[SSH connect timeout for Mutagen]:seconds:' \\
+            '1:command:->mount_command' \\
+            '*::arg:->mount_args'
+          case "$state" in
+            mount_command)
+              _describe -t commands 'mount command' mount_commands
+              ;;
+            mount_args)
+              case "$words[2]" in
+                status)
+                  _arguments
+                  ;;
+              esac
+              ;;
+          esac
+          ;;
         rm)
           _arguments \\
             '(-y --yes)'{-y,--yes}'[Skip confirmation]' \\
@@ -2850,9 +2683,10 @@ var BASH_SCRIPT = `_computer() {
   local cur prev words cword
   _init_completion || return
-  local commands="login upgrade logout whoami claude-login claude-auth codex-login codex-auth create ls get image open ssh ports agent acp rm completion help"
+  local commands="login upgrade logout whoami claude-login claude-auth codex-login codex-auth create ls get image open ssh ports mount agent acp rm completion help"
   local ports_commands="ls publish rm"
   local image_commands="ls save default rebuild rm"
+  local mount_commands="status"
   if [[ $cword -eq 1 ]]; then
     COMPREPLY=($(compgen -W "$commands" -- "$cur"))
@@ -2930,11 +2764,18 @@ var BASH_SCRIPT = `_computer() {
       else
         case "$cmd" in
           get) COMPREPLY=($(compgen -W "--json" -- "$cur")) ;;
-          open) COMPREPLY=($(compgen -W "--vnc --terminal" -- "$cur")) ;;
+          open) COMPREPLY=($(compgen -W "--vnc" -- "$cur")) ;;
           rm) COMPREPLY=($(compgen -W "--yes -y" -- "$cur")) ;;
         esac
       fi
       ;;
+    mount)
+      if [[ $cword -eq 2 ]]; then
+        COMPREPLY=($(compgen -W "$mount_commands" -- "$cur"))
+      elif [[ $cword -ge 3 ]]; then
+        COMPREPLY=($(compgen -W "--alias --host --port --poll-interval --connect-timeout" -- "$cur"))
+      fi
+      ;;
     ports)
       if [[ $cword -eq 2 ]]; then
         COMPREPLY=($(compgen -W "$ports_commands" -- "$cur"))
@@ -2970,17 +2811,17 @@ var completionCommand = new Command6("completion").description("Generate shell c
 // src/commands/codex-login.ts
 import { spawn as spawn3 } from "child_process";
 import { readFile as readFile3 } from "fs/promises";
-import { homedir as homedir4 } from "os";
-import { join as join3 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join2 } from "path";
 import { Command as Command7 } from "commander";
-import chalk7 from "chalk";
+import chalk5 from "chalk";
 import ora6 from "ora";
 var codexLoginCommand = new Command7("codex-login").alias("codex-auth").description("Authenticate Codex on a computer").option("--machine <id-or-handle>", "Use a specific computer").option("--keep-helper", "Keep a temporary helper machine if one is created").option("--skip-cross-check", "Skip verification on a second shared machine").option("--verbose", "Show step-by-step auth diagnostics").action(async (options) => {
   try {
     await runCodexLogin(options);
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to authenticate Codex";
-    console.error(chalk7.red(`
+    console.error(chalk5.red(`
 ${message}`));
     process.exit(1);
   }
@@ -2993,7 +2834,7 @@ async function runCodexLogin(options) {
   let activeTodoID = "target";
   let failureMessage = null;
   console.log();
-  console.log(chalk7.cyan("Authenticating with Codex...\n"));
+  console.log(chalk5.cyan("Authenticating with Codex...\n"));
   try {
     const prepared = await prepareTargetMachine2(options);
     target = prepared.computer;
@@ -3078,7 +2919,7 @@ async function runCodexLogin(options) {
   }
   if (target) {
     console.log(
-      chalk7.green(`Codex login installed on ${chalk7.bold(target.handle)}.`)
+      chalk5.green(`Codex login installed on ${chalk5.bold(target.handle)}.`)
     );
     console.log();
   }
@@ -3119,11 +2960,11 @@ function markVerificationTodo2(items, id, result, successDetail) {
 }
 function printTodoList2(items) {
   console.log();
-  console.log(chalk7.dim("TODO"));
+  console.log(chalk5.dim("TODO"));
   console.log();
   for (const item of items) {
-    const marker = item.state === "done" ? chalk7.green("[x]") : item.state === "skipped" ? chalk7.yellow("[-]") : item.state === "failed" ? chalk7.red("[!]") : chalk7.dim("[ ]");
-    const detail = item.detail ? chalk7.dim(`  ${item.detail}`) : "";
+    const marker = item.state === "done" ? chalk5.green("[x]") : item.state === "skipped" ? chalk5.yellow("[-]") : item.state === "failed" ? chalk5.red("[!]") : chalk5.dim("[ ]");
+    const detail = item.detail ? chalk5.dim(`  ${item.detail}`) : "";
     console.log(`  ${marker} ${item.label}${detail ? ` ${detail}` : ""}`);
   }
   console.log();
@@ -3171,7 +3012,7 @@ async function getLocalCodexStatus() {
   return parseCodexStatusOutput(result.stdout, result.stderr);
 }
 async function readLocalCodexAuthFile() {
-  const authPath = join3(homedir4(), ".codex", "auth.json");
+  const authPath = join2(homedir3(), ".codex", "auth.json");
   let raw;
   try {
     raw = await readFile3(authPath, "utf8");
@@ -3234,12 +3075,12 @@ async function captureLocalCommand(command, args) {
 }
 async function installCodexAuth(target, authJSON) {
   const spinner = ora6(
-    `Installing Codex login on ${chalk7.bold(target.handle)}...`
+    `Installing Codex login on ${chalk5.bold(target.handle)}...`
   ).start();
   try {
     const installScript = buildInstallScript2(authJSON);
     await runRemoteCommand(target, ["bash", "-s"], installScript);
-    spinner.succeed(`Installed Codex login on ${chalk7.bold(target.handle)}`);
+    spinner.succeed(`Installed Codex login on ${chalk5.bold(target.handle)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : `Failed to install Codex login on ${target.handle}`
@@ -3249,11 +3090,11 @@ async function installCodexAuth(target, authJSON) {
 }
 async function verifyTargetMachine2(handle, target) {
   const spinner = ora6(
-    `Verifying Codex login on ${chalk7.bold(handle)}...`
+    `Verifying Codex login on ${chalk5.bold(handle)}...`
   ).start();
   const result = await verifyStoredCodexAuth(target);
   if (result.status === "verified") {
-    spinner.succeed(`Verified Codex login on ${chalk7.bold(handle)}`);
+    spinner.succeed(`Verified Codex login on ${chalk5.bold(handle)}`);
     return result;
   }
   spinner.warn(result.detail);
@@ -3261,7 +3102,7 @@ async function verifyTargetMachine2(handle, target) {
 }
 async function verifySharedInstall2(primaryHandle, primaryComputerID, sharedInstall, skip, verify) {
   const spinner = ora6(
-    `Verifying shared-home Codex login from ${chalk7.bold(primaryHandle)}...`
+    `Verifying shared-home Codex login from ${chalk5.bold(primaryHandle)}...`
   ).start();
   const result = await verifySecondaryMachine(
     primaryComputerID,
@@ -3271,7 +3112,7 @@ async function verifySharedInstall2(primaryHandle, primaryComputerID, sharedInst
   );
   if (result.status === "verified") {
     spinner.succeed(
-      `Verified shared-home Codex login on ${chalk7.bold(result.handle)}`
+      `Verified shared-home Codex login on ${chalk5.bold(result.handle)}`
     );
     return result;
   }
@@ -3329,9 +3170,9 @@ function firstStatusLine2(value) {
 }
 // src/commands/images.ts
-import { confirm as confirm2, input as textInput3, select as select3 } from "@inquirer/prompts";
+import { confirm as confirm2, input as textInput3, select as select2 } from "@inquirer/prompts";
 import { Command as Command8 } from "commander";
-import chalk8 from "chalk";
+import chalk6 from "chalk";
 import ora7 from "ora";
 var imageCommand = new Command8("image").description("Manage machine image sources");
 imageCommand.command("ls").description("List machine image sources").option("--json", "Print raw JSON").action(async (options) => {
@@ -3364,7 +3205,7 @@ imageCommand.command("save").description("Create or update a machine image sourc
       return;
     }
     console.log();
-    console.log(chalk8.green("Saved machine image source."));
+    console.log(chalk6.green("Saved machine image source."));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3403,9 +3244,9 @@ imageCommand.command("default").description("Set the default machine image sourc
     if (!usePlatformDefault) {
       const selected = settings.default_machine_source ?? void 0;
       const label = selected ? summarizeMachineSource(selected) : sourceID;
-      console.log(chalk8.green(`Selected ${chalk8.bold(label)} as the default machine image.`));
+      console.log(chalk6.green(`Selected ${chalk6.bold(label)} as the default machine image.`));
     } else {
-      console.log(chalk8.green("Using the AgentComputer platform default image."));
+      console.log(chalk6.green("Using the AgentComputer platform default image."));
     }
     printMachineSourceSettings(settings);
   } catch (error) {
@@ -3427,7 +3268,7 @@ imageCommand.command("rebuild").description("Rebuild a machine image source").ar
       return;
     }
     console.log();
-    console.log(chalk8.green(`Queued rebuild for ${chalk8.bold(sourceID)}.`));
+    console.log(chalk6.green(`Queued rebuild for ${chalk6.bold(sourceID)}.`));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3446,7 +3287,7 @@ imageCommand.command("rm").description("Delete a machine image source").argument
     if (!skipConfirm && process.stdin.isTTY) {
       const confirmed = await confirmDeletion(sourceID);
       if (!confirmed) {
-        console.log(chalk8.dim("  Cancelled."));
+        console.log(chalk6.dim("  Cancelled."));
         return;
       }
     }
@@ -3458,7 +3299,7 @@ imageCommand.command("rm").description("Delete a machine image source").argument
       return;
     }
     console.log();
-    console.log(chalk8.green(`Deleted machine image source ${chalk8.bold(sourceID)}.`));
+    console.log(chalk6.green(`Deleted machine image source ${chalk6.bold(sourceID)}.`));
     printMachineSourceSettings(settings);
   } catch (error) {
     if (spinner) {
@@ -3470,14 +3311,14 @@ imageCommand.command("rm").description("Delete a machine image source").argument
   }
 });
 function printMachineSourceSettings(settings) {
-  console.log(`  ${chalk8.dim("Default")}  ${chalk8.white(summarizeDefaultMachineSource(settings))}`);
+  console.log(`  ${chalk6.dim("Default")}  ${chalk6.white(summarizeDefaultMachineSource(settings))}`);
   console.log();
   if (settings.sources.length === 0) {
-    console.log(chalk8.dim("  No custom machine images configured yet."));
+    console.log(chalk6.dim("  No custom machine images configured yet."));
     console.log();
     return;
   }
-  console.log(`  ${chalk8.dim("Custom")}   ${chalk8.white(formatMachineSourceCounts(settings.sources))}`);
+  console.log(`  ${chalk6.dim("Custom")}   ${chalk6.white(formatMachineSourceCounts(settings.sources))}`);
   console.log();
   for (const source of sortMachineSources(settings.sources, settings.default_machine_source_id)) {
     printMachineSourceCard(source, settings.default_machine_source_id === source.id);
@@ -3492,17 +3333,17 @@ function printMachineSourceCard(source, isDefault) {
   ];
   const extra = machineSourceExtraParts(source);
   console.log(
-    `  ${statusLabel}${chalk8.bold(machineSourceTitle(source))}${isDefault ? chalk8.green("  default") : ""}`
+    `  ${statusLabel}${chalk6.bold(machineSourceTitle(source))}${isDefault ? chalk6.green("  default") : ""}`
   );
-  console.log(`              ${chalk8.dim(meta.concat(extra).join("  |  "))}`);
-  console.log(`              ${chalk8.dim(machineSourceStatusSummary(source))}`);
+  console.log(`              ${chalk6.dim(meta.concat(extra).join("  |  "))}`);
+  console.log(`              ${chalk6.dim(machineSourceStatusSummary(source))}`);
   if (source.resolved_image_ref) {
-    console.log(`              ${chalk8.dim("resolved")} ${source.resolved_image_ref}`);
+    console.log(`              ${chalk6.dim("resolved")} ${source.resolved_image_ref}`);
   } else if (source.last_good_resolved_image_ref) {
-    console.log(`              ${chalk8.dim("last good")} ${source.last_good_resolved_image_ref}`);
+    console.log(`              ${chalk6.dim("last good")} ${source.last_good_resolved_image_ref}`);
   }
   if (source.error) {
-    console.log(`              ${chalk8.red(source.error)}`);
+    console.log(`              ${chalk6.red(source.error)}`);
   }
   console.log();
 }
@@ -3572,13 +3413,13 @@ function formatMachineSourceStatus(status) {
   const text = status.toUpperCase();
   switch (status) {
     case "ready":
-      return chalk8.green(text);
+      return chalk6.green(text);
     case "failed":
-      return chalk8.red(text);
+      return chalk6.red(text);
     case "pending":
     case "resolving":
     case "building":
-      return chalk8.yellow(text);
+      return chalk6.yellow(text);
     default:
       return text;
   }
@@ -3687,7 +3528,7 @@ async function resolveSaveInput(options) {
   return input;
 }
 async function selectMachineSourceKind() {
-  const kind = await select3({
+  const kind = await select2({
     message: "Select machine image kind",
     choices: [
       { name: "oci-image  -  resolve an OCI image digest", value: "oci-image" },
@@ -3721,7 +3562,7 @@ async function confirmDeletion(sourceID) {
 // src/commands/login.ts
 import { Command as Command9 } from "commander";
-import chalk9 from "chalk";
+import chalk7 from "chalk";
 import ora8 from "ora";
 // src/lib/browser-login.ts
@@ -3994,7 +3835,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   if (existingKey && !options.force) {
     console.log();
     console.log(
-      chalk9.yellow("  Already logged in. Use --force to overwrite.")
+      chalk7.yellow("  Already logged in. Use --force to overwrite.")
     );
     console.log();
     return;
@@ -4003,8 +3844,8 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   const apiKey = await resolveAPIKeyInput(options.apiKey, options.stdin);
   if (!apiKey && wantsManualLogin) {
     console.log();
-    console.log(chalk9.dim("  Usage: computer login --api-key <ac_live_...>"));
-    console.log(chalk9.dim(`  API:   ${getBaseURL()}`));
+    console.log(chalk7.dim("  Usage: computer login --api-key <ac_live_...>"));
+    console.log(chalk7.dim(`  API:   ${getBaseURL()}`));
     console.log();
     process.exit(1);
   }
@@ -4014,7 +3855,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   }
   if (!apiKey.startsWith("ac_live_")) {
     console.log();
-    console.log(chalk9.red("  API key must start with ac_live_"));
+    console.log(chalk7.red("  API key must start with ac_live_"));
     console.log();
     process.exit(1);
   }
@@ -4022,7 +3863,7 @@ var loginCommand = new Command9("login").description("Authenticate the CLI").opt
   try {
     const me = await apiWithKey(apiKey, "/v1/me");
     setAPIKey(apiKey);
-    spinner.succeed(`Logged in as ${chalk9.bold(me.user.email)}`);
+    spinner.succeed(`Logged in as ${chalk7.bold(me.user.email)}`);
   } catch (error) {
     spinner.fail(
       error instanceof Error ? error.message : "Failed to validate API key"
@@ -4042,15 +3883,15 @@ async function runBrowserLogin() {
       spinner.stop();
       console.log();
       console.log(
-        chalk9.yellow("  Browser auto-open failed. Open this URL to continue:")
+        chalk7.yellow("  Browser auto-open failed. Open this URL to continue:")
       );
-      console.log(chalk9.dim(`  ${attempt.loginURL}`));
+      console.log(chalk7.dim(`  ${attempt.loginURL}`));
       console.log();
       spinner.start("Waiting for browser login...");
     }
     spinner.text = "Waiting for browser login...";
     const result = await attempt.waitForResult();
-    spinner.succeed(`Logged in as ${chalk9.bold(result.me.user.email)}`);
+    spinner.succeed(`Logged in as ${chalk7.bold(result.me.user.email)}`);
     await continueFirstLoginFlow(result);
   } catch (error) {
     spinner.fail(
@@ -4084,8 +3925,8 @@ async function continueFirstLoginFlow(result) {
   }
   console.log();
   console.log(
-    chalk9.cyan(
-      `Continuing first-time setup for ${chalk9.bold(machineHandle)}...
+    chalk7.cyan(
+      `Continuing first-time setup for ${chalk7.bold(machineHandle)}...
 `
     )
   );
@@ -4098,8 +3939,8 @@ async function continueFirstLoginFlow(result) {
     const spinner = ora8(`Preparing SSH access for ${machineHandle}...`).start();
     try {
       const connection = await prepareSSHConnectionByIdentifier(machineHandle);
-      spinner.succeed(`Connecting to ${chalk9.bold(machineHandle)}`);
-      console.log(chalk9.dim(`  ${connection.command}`));
+      spinner.succeed(`Connecting to ${chalk7.bold(machineHandle)}`);
+      console.log(chalk7.dim(`  ${connection.command}`));
       console.log();
       await openSSHConnection(connection);
     } catch (error) {
@@ -4110,19 +3951,19 @@ async function continueFirstLoginFlow(result) {
     }
   } catch (error) {
     const message = error instanceof Error ? error.message : "Failed to finish first-time setup";
-    console.error(chalk9.red(`
+    console.error(chalk7.red(`
 ${message}`));
     console.log();
     if (result.provider === "claude") {
       console.log(
-        chalk9.dim(`  computer claude-login --machine ${machineHandle}`)
+        chalk7.dim(`  computer claude-login --machine ${machineHandle}`)
       );
     } else if (result.provider === "codex") {
       console.log(
-        chalk9.dim(`  computer codex-login --machine ${machineHandle}`)
+        chalk7.dim(`  computer codex-login --machine ${machineHandle}`)
       );
     }
-    console.log(chalk9.dim(`  computer ssh ${machineHandle}`));
+    console.log(chalk7.dim(`  computer ssh ${machineHandle}`));
     console.log();
     process.exit(1);
   }
@@ -4136,45 +3977,291 @@ async function runSelectedProvider(provider, machineHandle) {
     await runCodexLogin({ machine: machineHandle });
     return;
   }
-  console.log(chalk9.green(`Sandbox ${chalk9.bold(machineHandle)} is ready.`));
+  console.log(chalk7.green(`Sandbox ${chalk7.bold(machineHandle)} is ready.`));
   console.log();
 }
 function printNextStep(machineHandle) {
-  console.log(chalk9.green(`Sandbox ${chalk9.bold(machineHandle)} is ready.`));
-  console.log(chalk9.dim(`  computer ssh ${machineHandle}`));
+  console.log(chalk7.green(`Sandbox ${chalk7.bold(machineHandle)} is ready.`));
+  console.log(chalk7.dim(`  computer ssh ${machineHandle}`));
   console.log();
 }
-// src/commands/logout.ts
+// src/commands/mount.ts
 import { Command as Command10 } from "commander";
-import chalk10 from "chalk";
-var logoutCommand = new Command10("logout").description("Remove stored API key").action(() => {
+import chalk8 from "chalk";
+import ora9 from "ora";
+// src/lib/mount-daemon.ts
+import { mkdir as mkdir3 } from "fs/promises";
+function getMountControllerState(rootPath = defaultMountServiceConfig().rootPath) {
+  const lock = readMountControllerLock(rootPath);
+  if (!lock) {
+    return { running: false };
+  }
+  if (!processExists(lock.pid)) {
+    removeMountControllerLock(rootPath);
+    return { running: false };
+  }
+  return { running: true, pid: lock.pid };
+}
+async function runMountDaemon(config) {
+  const paths = getMountPaths(config.rootPath);
+  ensureMountDirectories(paths);
+  await mkdir3(paths.rootPath, { recursive: true });
+  await acquireControllerLock(config.rootPath);
+  writeMountStatusSnapshot(
+    {
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      controllerPid: process.pid,
+      running: true,
+      mounts: []
+    },
+    config.rootPath
+  );
+  await teardownManagedSessions(config, paths);
+  let running = false;
+  let queued = false;
+  let shuttingDown = false;
+  let activeRun = null;
+  const runOnce = async () => {
+    if (shuttingDown) {
+      return;
+    }
+    if (running) {
+      queued = true;
+      return activeRun ?? void 0;
+    }
+    activeRun = (async () => {
+      running = true;
+      try {
+        await reconcileMounts(config, paths, process.pid);
+      } catch (error) {
+        if (shuttingDown) {
+          return;
+        }
+        const previous = readMountStatusSnapshot(config.rootPath);
+        writeMountStatusSnapshot(
+          {
+            updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            controllerPid: process.pid,
+            running: true,
+            lastHealthySyncAt: previous?.lastHealthySyncAt,
+            lastSuccessfulSyncAt: previous?.lastSuccessfulSyncAt,
+            lastIssueAt: (/* @__PURE__ */ new Date()).toISOString(),
+            lastIssue: error instanceof Error ? error.message : "mount reconcile failed",
+            lastError: error instanceof Error ? error.message : "mount reconcile failed",
+            mounts: previous?.mounts ?? []
+          },
+          config.rootPath
+        );
+        console.error(
+          error instanceof Error ? error.message : "mount reconcile failed"
+        );
+      } finally {
+        running = false;
+        activeRun = null;
+        if (queued && !shuttingDown) {
+          queued = false;
+          void runOnce();
+        }
+      }
+    })();
+    return activeRun;
+  };
+  const server = createMountControlServer(paths, async () => {
+    await runOnce();
+  });
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(paths.socketPath, () => resolve());
+  });
+  const interval = setInterval(() => {
+    void runOnce();
+  }, config.pollIntervalMs);
+  const shutdown = async () => {
+    if (shuttingDown) {
+      return;
+    }
+    shuttingDown = true;
+    clearInterval(interval);
+    server.close();
+    if (activeRun) {
+      await activeRun.catch(() => {
+      });
+    }
+    await teardownManagedSessions(config, paths);
+    const previous = readMountStatusSnapshot(config.rootPath);
+    writeMountStatusSnapshot(
+      {
+        updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        controllerPid: previous?.controllerPid,
+        running: false,
+        lastHealthySyncAt: previous?.lastHealthySyncAt,
+        lastSuccessfulSyncAt: previous?.lastSuccessfulSyncAt,
+        lastIssueAt: previous?.lastIssueAt,
+        lastIssue: void 0,
+        lastError: void 0,
+        mounts: []
+      },
+      config.rootPath
+    );
+    removeMountControllerLock(config.rootPath);
+    process.exit(0);
+  };
+  process.on("SIGINT", () => {
+    void shutdown();
+  });
+  process.on("SIGTERM", () => {
+    void shutdown();
+  });
+  await runOnce();
+  await new Promise(() => {
+  });
+}
+async function acquireControllerLock(rootPath) {
+  const existing = readMountControllerLock(rootPath);
+  if (existing && processExists(existing.pid)) {
+    throw new Error(`computer mount is already running (pid ${existing.pid})`);
+  }
+  removeMountControllerLock(rootPath);
+  writeMountControllerLock(
+    {
+      pid: process.pid,
+      startedAt: (/* @__PURE__ */ new Date()).toISOString()
+    },
+    rootPath
+  );
+}
+function processExists(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) {
+    return false;
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+// src/commands/mount.ts
+var mountCommand = new Command10("mount").description("Mirror SSH-ready machines under ~/agentcomputer while this command is running").option("--alias <alias>", "SSH host alias", "agentcomputer.ai").option("--host <host>", "SSH gateway host", "ssh.agentcomputer.ai").option("--port <port>", "SSH gateway port", "443").option("--poll-interval <ms>", "Reconcile interval in milliseconds", "5000").option("--connect-timeout <seconds>", "SSH connect timeout for Mutagen", "5").action(async (options) => {
+  const spinner = ora9("Starting machine mount controller...").start();
+  try {
+    const issues = getMountHostValidationIssues();
+    if (issues.length > 0) {
+      throw new Error(
+        [
+          ...issues.map((issue) => issue.message),
+          ...formatMountHostInstallGuidance(issues)
+        ].join("\n")
+      );
+    }
+    const sshSetup = await ensureSSHAccessConfigured(options);
+    const config = {
+      ...defaultMountServiceConfig(),
+      alias: sshSetup.alias,
+      host: sshSetup.host,
+      port: sshSetup.port,
+      pollIntervalMs: parsePositiveInt(options.pollInterval, "poll interval"),
+      connectTimeoutSeconds: parsePositiveInt(
+        options.connectTimeout,
+        "connect timeout"
+      )
+    };
+    writeMountConfig(config);
+    spinner.succeed("Machine mount controller running");
+    console.log();
+    console.log(chalk8.dim(`  Root:        ${config.rootPath}`));
+    console.log(chalk8.dim(`  SSH alias:   ${config.alias}`));
+    console.log(chalk8.dim(`  Poll:        ${config.pollIntervalMs}ms`));
+    console.log();
+    console.log(chalk8.dim("  Press Ctrl-C to stop syncing."));
+    console.log();
+    await runMountDaemon(config);
+  } catch (error) {
+    spinner.fail(
+      error instanceof Error ? error.message : "Failed to start machine mount controller"
+    );
+    process.exit(1);
+  }
+}).addCommand(
+  new Command10("status").description("Show machine mount controller status").action(() => {
+    const config = readMountConfig() ?? defaultMountServiceConfig();
+    const controller = getMountControllerState(config.rootPath);
+    const snapshot = readMountStatusSnapshot(config.rootPath);
+    console.log();
+    console.log(`  ${chalk8.bold("Machine Mounts")}`);
+    console.log();
+    console.log(
+      `  ${chalk8.dim("Running")}    ${controller.running ? chalk8.green("yes") : chalk8.dim("no")}`
+    );
+    if (controller.pid) {
+      console.log(`  ${chalk8.dim("PID")}        ${controller.pid}`);
+    }
+    console.log(`  ${chalk8.dim("Root")}       ${config.rootPath}`);
+    console.log(`  ${chalk8.dim("Alias")}      ${config.alias}`);
+    console.log(
+      `  ${chalk8.dim("Updated")}    ${snapshot?.updatedAt ? timeAgo(snapshot.updatedAt) : chalk8.dim("never")}`
+    );
+    console.log(
+      `  ${chalk8.dim("Healthy")}    ${snapshot?.lastHealthySyncAt ? timeAgo(snapshot.lastHealthySyncAt) : chalk8.dim("never")}`
+    );
+    if (controller.running && snapshot?.mounts.length) {
+      console.log();
+      for (const mount of snapshot.mounts) {
+        const state = mount.state === "mounted" ? chalk8.green(mount.state) : mount.state === "reconnecting" ? chalk8.cyan(mount.state) : mount.state === "degraded" ? chalk8.yellow(mount.state) : mount.state === "pending" ? chalk8.yellow(mount.state) : chalk8.red(mount.state);
+        console.log(`  ${chalk8.white(mount.handle)}  ${state}  ${chalk8.dim(mount.mountPath)}`);
+        if (mount.message) {
+          console.log(`  ${chalk8.dim(mount.message)}`);
+        }
+      }
+    }
+    if (snapshot?.lastIssue) {
+      console.log();
+      console.log(`  ${chalk8.dim("Last issue")} ${chalk8.yellow(snapshot.lastIssue)}`);
+    }
+    console.log();
+  })
+);
+function parsePositiveInt(raw, label) {
+  const value = Number(raw);
+  if (!Number.isFinite(value) || value <= 0) {
+    throw new Error(`${label} must be a positive number`);
+  }
+  return Math.round(value);
+}
+// src/commands/logout.ts
+import { Command as Command11 } from "commander";
+import chalk9 from "chalk";
+var logoutCommand = new Command11("logout").description("Remove stored API key").action(() => {
   if (!getStoredAPIKey()) {
     console.log();
-    console.log(chalk10.dim("  Not logged in."));
+    console.log(chalk9.dim("  Not logged in."));
     if (hasEnvAPIKey()) {
-      console.log(chalk10.dim("  Environment API key is still active in this shell."));
+      console.log(chalk9.dim("  Environment API key is still active in this shell."));
     }
     console.log();
     return;
   }
   clearAPIKey();
   console.log();
-  console.log(chalk10.green("  Logged out."));
+  console.log(chalk9.green("  Logged out."));
   if (hasEnvAPIKey()) {
-    console.log(chalk10.dim("  Environment API key is still active in this shell."));
+    console.log(chalk9.dim("  Environment API key is still active in this shell."));
   }
   console.log();
 });
 // src/commands/upgrade.ts
 import { spawnSync } from "child_process";
-import { readFileSync as readFileSync3, realpathSync } from "fs";
-import { Command as Command11 } from "commander";
-import chalk11 from "chalk";
-import ora9 from "ora";
+import { readFileSync as readFileSync2, realpathSync } from "fs";
+import { Command as Command12 } from "commander";
+import chalk10 from "chalk";
+import ora10 from "ora";
 var pkg2 = JSON.parse(
-  readFileSync3(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync2(new URL("../package.json", import.meta.url), "utf8")
 );
 function normalizeVersion(version) {
   return version.split("-")[0].split(".").map((part) => Number.parseInt(part, 10)).map((part) => Number.isNaN(part) ? 0 : part);
@@ -4286,10 +4373,10 @@ async function getLatestVersion(packageName) {
   }
   return payload.version;
 }
-var upgradeCommand = new Command11("upgrade").description("Update the CLI to the latest version").action(async () => {
+var upgradeCommand = new Command12("upgrade").description("Update the CLI to the latest version").action(async () => {
   const currentVersion = pkg2.version ?? "0.0.0";
   const packageName = pkg2.name ?? "aicomputer";
-  const spinner = ora9("Checking for updates...").start();
+  const spinner = ora10("Checking for updates...").start();
   let latestVersion;
   try {
     latestVersion = await getLatestVersion(packageName);
@@ -4319,16 +4406,16 @@ var upgradeCommand = new Command11("upgrade").description("Update the CLI to the
   spinner.stop();
   console.log();
   console.log(
-    chalk11.dim(`  Updating ${chalk11.bold(`v${currentVersion}`)} -> ${chalk11.bold(`v${latestVersion}`)}`)
+    chalk10.dim(`  Updating ${chalk10.bold(`v${currentVersion}`)} -> ${chalk10.bold(`v${latestVersion}`)}`)
   );
-  console.log(chalk11.dim(`  ${upgrade.label}`));
+  console.log(chalk10.dim(`  ${upgrade.label}`));
   console.log();
   const result = spawnSync(upgrade.command, upgrade.args, {
     stdio: "inherit"
   });
   if (result.status === 0) {
     console.log();
-    console.log(chalk11.green(`  Updated to v${latestVersion}.`));
+    console.log(chalk10.green(`  Updated to v${latestVersion}.`));
     console.log();
     return;
   }
@@ -4336,11 +4423,11 @@ var upgradeCommand = new Command11("upgrade").description("Update the CLI to the
 });
 // src/commands/whoami.ts
-import { Command as Command12 } from "commander";
-import chalk12 from "chalk";
-import ora10 from "ora";
-var whoamiCommand = new Command12("whoami").description("Show current user").option("--json", "Print raw JSON").action(async (options) => {
-  const spinner = options.json ? null : ora10("Loading user...").start();
+import { Command as Command13 } from "commander";
+import chalk11 from "chalk";
+import ora11 from "ora";
+var whoamiCommand = new Command13("whoami").description("Show current user").option("--json", "Print raw JSON").action(async (options) => {
+  const spinner = options.json ? null : ora11("Loading user...").start();
   try {
     const me = await api("/v1/me");
     spinner?.stop();
@@ -4349,14 +4436,14 @@ var whoamiCommand = new Command12("whoami").description("Show current user").opt
       return;
     }
     console.log();
-    console.log(`  ${chalk12.bold.white(me.user.display_name || me.user.email)}`);
+    console.log(`  ${chalk11.bold.white(me.user.display_name || me.user.email)}`);
     if (me.user.display_name) {
-      console.log(`  ${chalk12.dim(me.user.email)}`);
+      console.log(`  ${chalk11.dim(me.user.email)}`);
     }
     if (me.api_key.name) {
-      console.log(`  ${chalk12.dim("Key:")}  ${me.api_key.name}`);
+      console.log(`  ${chalk11.dim("Key:")}  ${me.api_key.name}`);
     }
-    console.log(`  ${chalk12.dim("API:")}  ${chalk12.dim(getBaseURL())}`);
+    console.log(`  ${chalk11.dim("API:")}  ${chalk11.dim(getBaseURL())}`);
     console.log();
   } catch (error) {
     if (spinner) {
@@ -4370,18 +4457,18 @@ var whoamiCommand = new Command12("whoami").description("Show current user").opt
 // src/index.ts
 var pkg3 = JSON.parse(
-  readFileSync4(new URL("../package.json", import.meta.url), "utf8")
+  readFileSync3(new URL("../package.json", import.meta.url), "utf8")
 );
 var cliName = process.argv[1] ? basename2(process.argv[1]) : "agentcomputer";
-var program = new Command13();
+var program = new Command14();
 function appendTextSection(lines, title, values) {
   if (values.length === 0) {
     return;
   }
-  lines.push(`  ${chalk13.dim(title)}`);
+  lines.push(`  ${chalk12.dim(title)}`);
   lines.push("");
   for (const value of values) {
-    lines.push(`    ${chalk13.white(value)}`);
+    lines.push(`    ${chalk12.white(value)}`);
   }
   lines.push("");
 }
@@ -4390,10 +4477,10 @@ function appendTableSection(lines, title, entries) {
     return;
   }
   const width = Math.max(...entries.map((entry) => entry.term.length), 0) + 2;
-  lines.push(`  ${chalk13.dim(title)}`);
+  lines.push(`  ${chalk12.dim(title)}`);
   lines.push("");
   for (const entry of entries) {
-    lines.push(`    ${chalk13.white(padEnd(entry.term, width))}${chalk13.dim(entry.desc)}`);
+    lines.push(`    ${chalk12.white(padEnd(entry.term, width))}${chalk12.dim(entry.desc)}`);
   }
   lines.push("");
 }
@@ -4414,14 +4501,15 @@ function formatRootHelp(cmd) {
     ["Computers", []],
     ["Images", []],
     ["Access", []],
+    ["Mounts", []],
     ["Agents", []],
     ["Other", []]
   ];
   const otherGroup = groups.find(([name]) => name === "Other")[1];
-  lines.push(`${chalk13.bold(cliName)} ${chalk13.dim(`v${version}`)}`);
+  lines.push(`${chalk12.bold(cliName)} ${chalk12.dim(`v${version}`)}`);
   lines.push("");
   if (cmd.description()) {
-    lines.push(`  ${chalk13.dim(cmd.description())}`);
+    lines.push(`  ${chalk12.dim(cmd.description())}`);
     lines.push("");
   }
   appendTextSection(lines, "Usage", [`${cliName} <command> [options]`]);
@@ -4436,8 +4524,10 @@ function formatRootHelp(cmd) {
       groups[2][1].push(entry);
     } else if (["open", "ssh", "ports"].includes(name)) {
       groups[3][1].push(entry);
-    } else if (["agent", "acp"].includes(name)) {
+    } else if (name === "mount") {
       groups[4][1].push(entry);
+    } else if (["agent", "acp"].includes(name)) {
+      groups[5][1].push(entry);
     } else {
       otherGroup.push(entry);
     }
@@ -4472,10 +4562,10 @@ function formatSubcommandHelp(cmd, helper) {
     term: helper.optionTerm(option),
     desc: helper.optionDescription(option)
   }));
-  lines.push(chalk13.bold(commandPath(cmd)));
+  lines.push(chalk12.bold(commandPath(cmd)));
   lines.push("");
   if (description) {
-    lines.push(`  ${chalk13.dim(description)}`);
+    lines.push(`  ${chalk12.dim(description)}`);
     lines.push("");
   }
   appendTextSection(lines, "Usage", [helper.commandUsage(cmd)]);
@@ -4514,6 +4604,7 @@ program.addCommand(acpCommand);
 program.addCommand(openCommand);
 program.addCommand(sshCommand);
 program.addCommand(portsCommand);
+program.addCommand(mountCommand);
 program.addCommand(removeCommand);
 program.addCommand(completionCommand);
 applyHelpFormatting(program);