frely-cli 0.23.12 → 0.23.14

package/dist/agent-help.d.ts

@@ -35,71 +35,71 @@ export declare const COMMANDS: readonly [{
     readonly effect: "read";
     readonly purpose: "Read this installed CLI's current Agent instructions.";
 }, {
-    readonly id: "mcp.start";
-    readonly usage: "frely mcp start [--workspace <path>] [--days 1..365] [--no-browser] [--json]";
+    readonly id: "link.on";
+    readonly usage: "frely link on [--workspace <path>] [--days 1..365] [--no-browser] [--json]";
     readonly auth: "account-and-browser-if-needed";
     readonly effect: "authorization-if-needed";
-    readonly purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details. `frely mcp url` is a deprecated alias.";
+    readonly purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details.";
 }, {
-    readonly id: "mcp.workspace.list";
-    readonly usage: "frely mcp workspace list [--json]";
+    readonly id: "link.workspace.list";
+    readonly usage: "frely link workspace list [--json]";
     readonly auth: "mcp";
     readonly effect: "read";
     readonly purpose: "List workspace directories for this device; the primary is marked.";
 }, {
-    readonly id: "mcp.workspace.add";
-    readonly usage: "frely mcp workspace add [path]";
+    readonly id: "link.workspace.add";
+    readonly usage: "frely link workspace add [path]";
     readonly auth: "mcp";
     readonly effect: "local-write";
     readonly purpose: "Add an additional workspace directory for this device (default: current directory); takes effect on the running service without restart.";
 }, {
-    readonly id: "mcp.workspace.remove";
-    readonly usage: "frely mcp workspace remove <path>";
+    readonly id: "link.workspace.remove";
+    readonly usage: "frely link workspace remove <path>";
     readonly auth: "mcp";
     readonly effect: "local-write";
     readonly purpose: "Remove an additional workspace directory (the primary cannot be removed).";
 }, {
-    readonly id: "mcp.local.list";
-    readonly usage: "frely mcp local list [--json]";
+    readonly id: "link.local.list";
+    readonly usage: "frely link local list [--json]";
     readonly auth: "none";
     readonly effect: "read";
     readonly purpose: "List MCP servers on this device that remote clients could use: loopback HTTP servers found automatically plus ones added by hand. Every server is off for remote clients until the owner turns it on in the web console.";
 }, {
-    readonly id: "mcp.local.add";
-    readonly usage: "frely mcp local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely mcp local add <name> [--env K=V] -- <command> [args...]";
+    readonly id: "link.local.add";
+    readonly usage: "frely link local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely link local add <name> [--env K=V] -- <command> [args...]";
     readonly auth: "none";
     readonly effect: "local-write";
     readonly purpose: "Add a local MCP server by loopback URL or by the command that starts it (stdio). It is connected once to check it works; it stays off for remote clients until the owner turns it on in the web console.";
 }, {
-    readonly id: "mcp.local.remove";
-    readonly usage: "frely mcp local remove <name>";
+    readonly id: "link.local.remove";
+    readonly usage: "frely link local remove <name>";
     readonly auth: "none";
     readonly effect: "local-write";
     readonly purpose: "Remove a manually added local MCP server.";
 }, {
-    readonly id: "mcp.status";
-    readonly usage: "frely mcp status [--json]";
+    readonly id: "link.status";
+    readonly usage: "frely link status [--json]";
     readonly auth: "none";
     readonly effect: "read";
-    readonly purpose: "Show whether device MCP is configured, its URL, workspace, authorization expiry and background service state. Makes no network request.";
+    readonly purpose: "Show the remote-control state (not enabled by default / on / off and locked here), its URL, workspace, authorization expiry and background service state. Makes no network request.";
 }, {
-    readonly id: "mcp.stop";
-    readonly usage: "frely mcp stop";
+    readonly id: "link.stop";
+    readonly usage: "frely link stop";
     readonly auth: "none";
     readonly effect: "local-service";
-    readonly purpose: "Stop the local MCP background service without revoking authorization; frely mcp start resumes it. Supported updates restore running services without this command.";
+    readonly purpose: "Stop the local MCP background service without revoking authorization; frely link on resumes it. Supported updates restore running services without this command.";
 }, {
-    readonly id: "mcp.auto-update";
-    readonly usage: "frely mcp auto-update [on|off]";
+    readonly id: "link.auto-update";
+    readonly usage: "frely link auto-update [on|off]";
     readonly auth: "none";
     readonly effect: "local-write";
     readonly purpose: "Show or set whether this device's background service installs new stable versions of its own installation while idle and restarts itself. Off by default; macOS and Linux only.";
 }, {
-    readonly id: "mcp.remove";
-    readonly usage: "frely mcp remove";
+    readonly id: "link.off";
+    readonly usage: "frely link off";
     readonly auth: "account";
     readonly effect: "remote-write";
-    readonly purpose: "Revoke device MCP for every connected client and uninstall the background service (kept running provider-only when local Providers exist).";
+    readonly purpose: "Turn remote control off and lock it on this computer: revoke the authorization for every connected client, uninstall the background service (kept running provider-only when local Providers exist) and write a local lock. The web page cannot turn it on again; only frely link on here can.";
 }, {
     readonly id: "mcp.stdio";
     readonly usage: "frely mcp stdio [--workspace <path>]";
@@ -289,87 +289,81 @@ export declare const COMMANDS: readonly [{
 }, {
     readonly id: "devices";
     readonly usage: "frely devices [--add] [--json]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "List your Frely devices with online state and workspaces (list_devices). --add prints a one-time install command for a new computer.";
 }, {
     readonly id: "run";
     readonly usage: "frely run <device> [--cwd <dir>] [--timeout <s>] [--background] -- <command> [--json] [--out <file>]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "remote-execution";
     readonly purpose: "Run a shell command on a device inside its sandbox and print its output; --background returns a process id. The command's own failure is exit code 2.";
 }, {
     readonly id: "ps";
     readonly usage: "frely ps <device>";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "List background commands on a device.";
 }, {
     readonly id: "logs";
     readonly usage: "frely logs <device> <id> [--follow]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "Output of a background command; --follow shows it live until it ends.";
 }, {
     readonly id: "kill";
     readonly usage: "frely kill <device> <id>";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "remote-execution";
     readonly purpose: "Stop a background command on a device.";
 }, {
     readonly id: "read";
     readonly usage: "frely read <device>:<path> [--lines a:b] [--json] [--out <file>]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "Print a file on a device (UTF-8, up to 1 MiB). A Windows drive path such as C:\\x is this computer, not a device.";
 }, {
     readonly id: "ls";
     readonly usage: "frely ls [<device>[:<path>]] [--json]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "List a folder on a device; with only a device, its workspace roots.";
 }, {
     readonly id: "grep";
     readonly usage: "frely grep <device>:<path> <text> [--regex] [--case] [--max <n>]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "Search file contents on a device.";
 }, {
     readonly id: "edit";
     readonly usage: "frely edit <device>:<path> (--from <local file> | --patch <json file>) [--overwrite]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "remote-write";
     readonly purpose: "Write a device file from a local file, or apply line-range edits from a JSON file.";
 }, {
     readonly id: "permission";
     readonly usage: "frely permission request <device> --resource <name> --reason <text> --command <text> | confirm <code> [A|B|C] | wait <short code> [--then '<command>']";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "authorization";
     readonly purpose: "Ask the owner to open what the device sandbox blocks. Exit code 3 prints the approval link and the wait command: show the link to the user, then run `frely permission wait <short code> --then '<original command>'` in the background so the original command runs once they approve.";
 }, {
     readonly id: "tools";
     readonly usage: "frely tools [--json]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "read";
     readonly purpose: "Print FrelyMCP's own instructions and every tool it offers.";
 }, {
     readonly id: "call";
     readonly usage: "frely call <tool> [--json '<object>' | --input <file>] [--out <file>]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "subcommand-dependent";
     readonly purpose: "Call any FrelyMCP tool by name (browser, models, web_fetch, local_mcp_call, store, ...).";
-}, {
-    readonly id: "controller";
-    readonly usage: "frely controller login|logout|status";
-    readonly auth: "browser";
-    readonly effect: "authorization-if-needed";
-    readonly purpose: "Authorize this computer to control your devices: shows a short code, you open the link, type the code and confirm with a passkey or authenticator code. The first controller command does this by itself in a terminal.";
 }, {
     readonly id: "api";
     readonly usage: "frely api list|describe|call [--wait] [--help]";
-    readonly auth: "controller";
+    readonly auth: "login";
     readonly effect: "subcommand-dependent";
-    readonly purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Runs on this computer's controller authorization; the first call requests browser approval (frely controller login). `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it.";
+    readonly purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Read-only discovery runs on the account's own login; the first write call asks you to approve this computer in a browser. `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it.";
 }, {
     readonly id: "app.install";
     readonly usage: "frely app install [--force] [--json]";
@@ -480,71 +474,71 @@ export declare function agentHelp(): {
         readonly effect: "read";
         readonly purpose: "Read this installed CLI's current Agent instructions.";
     }, {
-        readonly id: "mcp.start";
-        readonly usage: "frely mcp start [--workspace <path>] [--days 1..365] [--no-browser] [--json]";
+        readonly id: "link.on";
+        readonly usage: "frely link on [--workspace <path>] [--days 1..365] [--no-browser] [--json]";
         readonly auth: "account-and-browser-if-needed";
         readonly effect: "authorization-if-needed";
-        readonly purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details. `frely mcp url` is a deprecated alias.";
+        readonly purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details.";
     }, {
-        readonly id: "mcp.workspace.list";
-        readonly usage: "frely mcp workspace list [--json]";
+        readonly id: "link.workspace.list";
+        readonly usage: "frely link workspace list [--json]";
         readonly auth: "mcp";
         readonly effect: "read";
         readonly purpose: "List workspace directories for this device; the primary is marked.";
     }, {
-        readonly id: "mcp.workspace.add";
-        readonly usage: "frely mcp workspace add [path]";
+        readonly id: "link.workspace.add";
+        readonly usage: "frely link workspace add [path]";
         readonly auth: "mcp";
         readonly effect: "local-write";
         readonly purpose: "Add an additional workspace directory for this device (default: current directory); takes effect on the running service without restart.";
     }, {
-        readonly id: "mcp.workspace.remove";
-        readonly usage: "frely mcp workspace remove <path>";
+        readonly id: "link.workspace.remove";
+        readonly usage: "frely link workspace remove <path>";
         readonly auth: "mcp";
         readonly effect: "local-write";
         readonly purpose: "Remove an additional workspace directory (the primary cannot be removed).";
     }, {
-        readonly id: "mcp.local.list";
-        readonly usage: "frely mcp local list [--json]";
+        readonly id: "link.local.list";
+        readonly usage: "frely link local list [--json]";
         readonly auth: "none";
         readonly effect: "read";
         readonly purpose: "List MCP servers on this device that remote clients could use: loopback HTTP servers found automatically plus ones added by hand. Every server is off for remote clients until the owner turns it on in the web console.";
     }, {
-        readonly id: "mcp.local.add";
-        readonly usage: "frely mcp local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely mcp local add <name> [--env K=V] -- <command> [args...]";
+        readonly id: "link.local.add";
+        readonly usage: "frely link local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely link local add <name> [--env K=V] -- <command> [args...]";
         readonly auth: "none";
         readonly effect: "local-write";
         readonly purpose: "Add a local MCP server by loopback URL or by the command that starts it (stdio). It is connected once to check it works; it stays off for remote clients until the owner turns it on in the web console.";
     }, {
-        readonly id: "mcp.local.remove";
-        readonly usage: "frely mcp local remove <name>";
+        readonly id: "link.local.remove";
+        readonly usage: "frely link local remove <name>";
         readonly auth: "none";
         readonly effect: "local-write";
         readonly purpose: "Remove a manually added local MCP server.";
     }, {
-        readonly id: "mcp.status";
-        readonly usage: "frely mcp status [--json]";
+        readonly id: "link.status";
+        readonly usage: "frely link status [--json]";
         readonly auth: "none";
         readonly effect: "read";
-        readonly purpose: "Show whether device MCP is configured, its URL, workspace, authorization expiry and background service state. Makes no network request.";
+        readonly purpose: "Show the remote-control state (not enabled by default / on / off and locked here), its URL, workspace, authorization expiry and background service state. Makes no network request.";
     }, {
-        readonly id: "mcp.stop";
-        readonly usage: "frely mcp stop";
+        readonly id: "link.stop";
+        readonly usage: "frely link stop";
         readonly auth: "none";
         readonly effect: "local-service";
-        readonly purpose: "Stop the local MCP background service without revoking authorization; frely mcp start resumes it. Supported updates restore running services without this command.";
+        readonly purpose: "Stop the local MCP background service without revoking authorization; frely link on resumes it. Supported updates restore running services without this command.";
     }, {
-        readonly id: "mcp.auto-update";
-        readonly usage: "frely mcp auto-update [on|off]";
+        readonly id: "link.auto-update";
+        readonly usage: "frely link auto-update [on|off]";
         readonly auth: "none";
         readonly effect: "local-write";
         readonly purpose: "Show or set whether this device's background service installs new stable versions of its own installation while idle and restarts itself. Off by default; macOS and Linux only.";
     }, {
-        readonly id: "mcp.remove";
-        readonly usage: "frely mcp remove";
+        readonly id: "link.off";
+        readonly usage: "frely link off";
         readonly auth: "account";
         readonly effect: "remote-write";
-        readonly purpose: "Revoke device MCP for every connected client and uninstall the background service (kept running provider-only when local Providers exist).";
+        readonly purpose: "Turn remote control off and lock it on this computer: revoke the authorization for every connected client, uninstall the background service (kept running provider-only when local Providers exist) and write a local lock. The web page cannot turn it on again; only frely link on here can.";
     }, {
         readonly id: "mcp.stdio";
         readonly usage: "frely mcp stdio [--workspace <path>]";
@@ -734,87 +728,81 @@ export declare function agentHelp(): {
     }, {
         readonly id: "devices";
         readonly usage: "frely devices [--add] [--json]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "List your Frely devices with online state and workspaces (list_devices). --add prints a one-time install command for a new computer.";
     }, {
         readonly id: "run";
         readonly usage: "frely run <device> [--cwd <dir>] [--timeout <s>] [--background] -- <command> [--json] [--out <file>]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "remote-execution";
         readonly purpose: "Run a shell command on a device inside its sandbox and print its output; --background returns a process id. The command's own failure is exit code 2.";
     }, {
         readonly id: "ps";
         readonly usage: "frely ps <device>";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "List background commands on a device.";
     }, {
         readonly id: "logs";
         readonly usage: "frely logs <device> <id> [--follow]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "Output of a background command; --follow shows it live until it ends.";
     }, {
         readonly id: "kill";
         readonly usage: "frely kill <device> <id>";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "remote-execution";
         readonly purpose: "Stop a background command on a device.";
     }, {
         readonly id: "read";
         readonly usage: "frely read <device>:<path> [--lines a:b] [--json] [--out <file>]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "Print a file on a device (UTF-8, up to 1 MiB). A Windows drive path such as C:\\x is this computer, not a device.";
     }, {
         readonly id: "ls";
         readonly usage: "frely ls [<device>[:<path>]] [--json]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "List a folder on a device; with only a device, its workspace roots.";
     }, {
         readonly id: "grep";
         readonly usage: "frely grep <device>:<path> <text> [--regex] [--case] [--max <n>]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "Search file contents on a device.";
     }, {
         readonly id: "edit";
         readonly usage: "frely edit <device>:<path> (--from <local file> | --patch <json file>) [--overwrite]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "remote-write";
         readonly purpose: "Write a device file from a local file, or apply line-range edits from a JSON file.";
     }, {
         readonly id: "permission";
         readonly usage: "frely permission request <device> --resource <name> --reason <text> --command <text> | confirm <code> [A|B|C] | wait <short code> [--then '<command>']";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "authorization";
         readonly purpose: "Ask the owner to open what the device sandbox blocks. Exit code 3 prints the approval link and the wait command: show the link to the user, then run `frely permission wait <short code> --then '<original command>'` in the background so the original command runs once they approve.";
     }, {
         readonly id: "tools";
         readonly usage: "frely tools [--json]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "read";
         readonly purpose: "Print FrelyMCP's own instructions and every tool it offers.";
     }, {
         readonly id: "call";
         readonly usage: "frely call <tool> [--json '<object>' | --input <file>] [--out <file>]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "subcommand-dependent";
         readonly purpose: "Call any FrelyMCP tool by name (browser, models, web_fetch, local_mcp_call, store, ...).";
-    }, {
-        readonly id: "controller";
-        readonly usage: "frely controller login|logout|status";
-        readonly auth: "browser";
-        readonly effect: "authorization-if-needed";
-        readonly purpose: "Authorize this computer to control your devices: shows a short code, you open the link, type the code and confirm with a passkey or authenticator code. The first controller command does this by itself in a terminal.";
     }, {
         readonly id: "api";
         readonly usage: "frely api list|describe|call [--wait] [--help]";
-        readonly auth: "controller";
+        readonly auth: "login";
         readonly effect: "subcommand-dependent";
-        readonly purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Runs on this computer's controller authorization; the first call requests browser approval (frely controller login). `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it.";
+        readonly purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Read-only discovery runs on the account's own login; the first write call asks you to approve this computer in a browser. `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it.";
     }, {
         readonly id: "app.install";
         readonly usage: "frely app install [--force] [--json]";
@@ -885,8 +873,8 @@ export declare function agentHelp(): {
 };
 export declare function cliUsage(): string;
 /**
- * A command group without a direct action (`frely mcp workspace`, `frely agent`,
+ * A command group without a direct action (`frely link workspace`, `frely agent`,
  * ...) prints the subcommands under it instead of running one.
  */
 export declare function subcommandUsage(group: string): string;
-export declare function mcpUsage(): string;
+export declare function linkUsage(): string;

package/dist/agent-help.js

@@ -6,17 +6,17 @@ export const COMMANDS = [
     { id: "doctor", usage: "frely doctor [-v] [--json]", auth: "optional-account", effect: "diagnostic", purpose: "Show the signed-in account, installation, available updates, MCP and connection status; -v verifies the account online and runs detailed diagnostics." },
     { id: "update", usage: "frely update", auth: "none", effect: "local-write", purpose: "Update the current installation to the latest stable release. Windows prints a manual command; doctor checks versions." },
     { id: "help", usage: "frely help --agent --json", auth: "none", effect: "read", purpose: "Read this installed CLI's current Agent instructions." },
-    { id: "mcp.start", usage: "frely mcp start [--workspace <path>] [--days 1..365] [--no-browser] [--json]", auth: "account-and-browser-if-needed", effect: "authorization-if-needed", purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details. `frely mcp url` is a deprecated alias." },
-    { id: "mcp.workspace.list", usage: "frely mcp workspace list [--json]", auth: "mcp", effect: "read", purpose: "List workspace directories for this device; the primary is marked." },
-    { id: "mcp.workspace.add", usage: "frely mcp workspace add [path]", auth: "mcp", effect: "local-write", purpose: "Add an additional workspace directory for this device (default: current directory); takes effect on the running service without restart." },
-    { id: "mcp.workspace.remove", usage: "frely mcp workspace remove <path>", auth: "mcp", effect: "local-write", purpose: "Remove an additional workspace directory (the primary cannot be removed)." },
-    { id: "mcp.local.list", usage: "frely mcp local list [--json]", auth: "none", effect: "read", purpose: "List MCP servers on this device that remote clients could use: loopback HTTP servers found automatically plus ones added by hand. Every server is off for remote clients until the owner turns it on in the web console." },
-    { id: "mcp.local.add", usage: "frely mcp local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely mcp local add <name> [--env K=V] -- <command> [args...]", auth: "none", effect: "local-write", purpose: "Add a local MCP server by loopback URL or by the command that starts it (stdio). It is connected once to check it works; it stays off for remote clients until the owner turns it on in the web console." },
-    { id: "mcp.local.remove", usage: "frely mcp local remove <name>", auth: "none", effect: "local-write", purpose: "Remove a manually added local MCP server." },
-    { id: "mcp.status", usage: "frely mcp status [--json]", auth: "none", effect: "read", purpose: "Show whether device MCP is configured, its URL, workspace, authorization expiry and background service state. Makes no network request." },
-    { id: "mcp.stop", usage: "frely mcp stop", auth: "none", effect: "local-service", purpose: "Stop the local MCP background service without revoking authorization; frely mcp start resumes it. Supported updates restore running services without this command." },
-    { id: "mcp.auto-update", usage: "frely mcp auto-update [on|off]", auth: "none", effect: "local-write", purpose: "Show or set whether this device's background service installs new stable versions of its own installation while idle and restarts itself. Off by default; macOS and Linux only." },
-    { id: "mcp.remove", usage: "frely mcp remove", auth: "account", effect: "remote-write", purpose: "Revoke device MCP for every connected client and uninstall the background service (kept running provider-only when local Providers exist)." },
+    { id: "link.on", usage: "frely link on [--workspace <path>] [--days 1..365] [--no-browser] [--json]", auth: "account-and-browser-if-needed", effect: "authorization-if-needed", purpose: "Enable, renew, start and read device MCP. Without a stored login it first signs in through the browser (the page also registers new accounts; --no-browser only prints the sign-in URL and device code, which can be approved on any device signed in to Frely); that one approval also enables device MCP, so no second approval link is needed. Unconfigured: request browser approval for --workspace (default: the home directory), install and start the background service. Expired or --days given: renew with browser approval; the MCP URL stays the same. Otherwise start the service if it is not running. With FRELY_INSTALL_TOKEN (the one-time install command from list_devices or the Frely console), it signs in to that account (replacing any stored login) and preapproves device MCP with no browser or prompt. Prompts go to stderr; stdout holds only the URL, or JSON with HTTP transport and OAuth details." },
+    { id: "link.workspace.list", usage: "frely link workspace list [--json]", auth: "mcp", effect: "read", purpose: "List workspace directories for this device; the primary is marked." },
+    { id: "link.workspace.add", usage: "frely link workspace add [path]", auth: "mcp", effect: "local-write", purpose: "Add an additional workspace directory for this device (default: current directory); takes effect on the running service without restart." },
+    { id: "link.workspace.remove", usage: "frely link workspace remove <path>", auth: "mcp", effect: "local-write", purpose: "Remove an additional workspace directory (the primary cannot be removed)." },
+    { id: "link.local.list", usage: "frely link local list [--json]", auth: "none", effect: "read", purpose: "List MCP servers on this device that remote clients could use: loopback HTTP servers found automatically plus ones added by hand. Every server is off for remote clients until the owner turns it on in the web console." },
+    { id: "link.local.add", usage: "frely link local add <name> --url <http://127.0.0.1:port/path> [--header K=V] | frely link local add <name> [--env K=V] -- <command> [args...]", auth: "none", effect: "local-write", purpose: "Add a local MCP server by loopback URL or by the command that starts it (stdio). It is connected once to check it works; it stays off for remote clients until the owner turns it on in the web console." },
+    { id: "link.local.remove", usage: "frely link local remove <name>", auth: "none", effect: "local-write", purpose: "Remove a manually added local MCP server." },
+    { id: "link.status", usage: "frely link status [--json]", auth: "none", effect: "read", purpose: "Show the remote-control state (not enabled by default / on / off and locked here), its URL, workspace, authorization expiry and background service state. Makes no network request." },
+    { id: "link.stop", usage: "frely link stop", auth: "none", effect: "local-service", purpose: "Stop the local MCP background service without revoking authorization; frely link on resumes it. Supported updates restore running services without this command." },
+    { id: "link.auto-update", usage: "frely link auto-update [on|off]", auth: "none", effect: "local-write", purpose: "Show or set whether this device's background service installs new stable versions of its own installation while idle and restarts itself. Off by default; macOS and Linux only." },
+    { id: "link.off", usage: "frely link off", auth: "account", effect: "remote-write", purpose: "Turn remote control off and lock it on this computer: revoke the authorization for every connected client, uninstall the background service (kept running provider-only when local Providers exist) and write a local lock. The web page cannot turn it on again; only frely link on here can." },
     { id: "mcp.stdio", usage: "frely mcp stdio [--workspace <path>]", auth: "mcp", effect: "local-execution", purpose: "Serve authorized local tools over stdio for a local MCP client." },
     { id: "mcp.serve", usage: "frely mcp serve [--workspace <path>]", auth: "account-and-mcp", effect: "local-execution", purpose: "Foreground Device Relay client; the background service runs this. Not needed for normal use." },
     { id: "skill.install", usage: "frely skill install [--host chatgpt|codex|claude-code|pi|generic] [--scope global|project] [--dir <project>] [--json]", auth: "none", effect: "local-write", purpose: "Install the `frely` Skill into the host Skill folder. It teaches the agent to sign in, use `frely api`, install marketplace items and Agents, and offer FrelyMCP only when a request needs it. Running it again refreshes the Skill; an edited copy is left alone. Does not enable device MCP." },
@@ -48,20 +48,19 @@ export const COMMANDS = [
     { id: "service.manage", usage: "frely service list [--json] | stop <id|label> | remove <id|label>", auth: "account", effect: "remote-write", purpose: "List registered services, stop one on this computer (it stays registered), or remove it from Frely (products that pointed at it become unreachable)." },
     { id: "tunnel", usage: "frely tunnel <host>:<port> [--local-port N]", auth: "none", effect: "local-execution", purpose: "Run inside a sandboxed command (run_command): listen on 127.0.0.1:<local-port> (default: the same port) and forward each TCP connection to host:port through the command sandbox's proxy, so database and redis clients connect to 127.0.0.1 without turning the sandbox off. Start it in the same command as the client, for example `frely tunnel db.example.com:5432 & sleep 1; psql -h 127.0.0.1 ...`. Prints the local address and runs until killed." },
     { id: "sandbox.proxy", usage: "frely sandbox proxy [<http://host:port> [--no-proxy <list>] | --clear]", auth: "none", effect: "local-write", purpose: "Show, save or remove the HTTP(S) proxy that the command sandbox forwards its network traffic to (your own proxy, for example Clash). Without one saved it uses the HTTPS_PROXY / HTTP_PROXY / ALL_PROXY of the CLI process and, on macOS, the system proxy. Your proxy settings are never changed. Takes effect when the MCP service restarts." },
-    { id: "devices", usage: "frely devices [--add] [--json]", auth: "controller", effect: "read", purpose: "List your Frely devices with online state and workspaces (list_devices). --add prints a one-time install command for a new computer." },
-    { id: "run", usage: "frely run <device> [--cwd <dir>] [--timeout <s>] [--background] -- <command> [--json] [--out <file>]", auth: "controller", effect: "remote-execution", purpose: "Run a shell command on a device inside its sandbox and print its output; --background returns a process id. The command's own failure is exit code 2." },
-    { id: "ps", usage: "frely ps <device>", auth: "controller", effect: "read", purpose: "List background commands on a device." },
-    { id: "logs", usage: "frely logs <device> <id> [--follow]", auth: "controller", effect: "read", purpose: "Output of a background command; --follow shows it live until it ends." },
-    { id: "kill", usage: "frely kill <device> <id>", auth: "controller", effect: "remote-execution", purpose: "Stop a background command on a device." },
-    { id: "read", usage: "frely read <device>:<path> [--lines a:b] [--json] [--out <file>]", auth: "controller", effect: "read", purpose: "Print a file on a device (UTF-8, up to 1 MiB). A Windows drive path such as C:\\x is this computer, not a device." },
-    { id: "ls", usage: "frely ls [<device>[:<path>]] [--json]", auth: "controller", effect: "read", purpose: "List a folder on a device; with only a device, its workspace roots." },
-    { id: "grep", usage: "frely grep <device>:<path> <text> [--regex] [--case] [--max <n>]", auth: "controller", effect: "read", purpose: "Search file contents on a device." },
-    { id: "edit", usage: "frely edit <device>:<path> (--from <local file> | --patch <json file>) [--overwrite]", auth: "controller", effect: "remote-write", purpose: "Write a device file from a local file, or apply line-range edits from a JSON file." },
-    { id: "permission", usage: "frely permission request <device> --resource <name> --reason <text> --command <text> | confirm <code> [A|B|C] | wait <short code> [--then '<command>']", auth: "controller", effect: "authorization", purpose: "Ask the owner to open what the device sandbox blocks. Exit code 3 prints the approval link and the wait command: show the link to the user, then run `frely permission wait <short code> --then '<original command>'` in the background so the original command runs once they approve." },
-    { id: "tools", usage: "frely tools [--json]", auth: "controller", effect: "read", purpose: "Print FrelyMCP's own instructions and every tool it offers." },
-    { id: "call", usage: "frely call <tool> [--json '<object>' | --input <file>] [--out <file>]", auth: "controller", effect: "subcommand-dependent", purpose: "Call any FrelyMCP tool by name (browser, models, web_fetch, local_mcp_call, store, ...)." },
-    { id: "controller", usage: "frely controller login|logout|status", auth: "browser", effect: "authorization-if-needed", purpose: "Authorize this computer to control your devices: shows a short code, you open the link, type the code and confirm with a passkey or authenticator code. The first controller command does this by itself in a terminal." },
-    { id: "api", usage: "frely api list|describe|call [--wait] [--help]", auth: "controller", effect: "subcommand-dependent", purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Runs on this computer's controller authorization; the first call requests browser approval (frely controller login). `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it." },
+    { id: "devices", usage: "frely devices [--add] [--json]", auth: "login", effect: "read", purpose: "List your Frely devices with online state and workspaces (list_devices). --add prints a one-time install command for a new computer." },
+    { id: "run", usage: "frely run <device> [--cwd <dir>] [--timeout <s>] [--background] -- <command> [--json] [--out <file>]", auth: "login", effect: "remote-execution", purpose: "Run a shell command on a device inside its sandbox and print its output; --background returns a process id. The command's own failure is exit code 2." },
+    { id: "ps", usage: "frely ps <device>", auth: "login", effect: "read", purpose: "List background commands on a device." },
+    { id: "logs", usage: "frely logs <device> <id> [--follow]", auth: "login", effect: "read", purpose: "Output of a background command; --follow shows it live until it ends." },
+    { id: "kill", usage: "frely kill <device> <id>", auth: "login", effect: "remote-execution", purpose: "Stop a background command on a device." },
+    { id: "read", usage: "frely read <device>:<path> [--lines a:b] [--json] [--out <file>]", auth: "login", effect: "read", purpose: "Print a file on a device (UTF-8, up to 1 MiB). A Windows drive path such as C:\\x is this computer, not a device." },
+    { id: "ls", usage: "frely ls [<device>[:<path>]] [--json]", auth: "login", effect: "read", purpose: "List a folder on a device; with only a device, its workspace roots." },
+    { id: "grep", usage: "frely grep <device>:<path> <text> [--regex] [--case] [--max <n>]", auth: "login", effect: "read", purpose: "Search file contents on a device." },
+    { id: "edit", usage: "frely edit <device>:<path> (--from <local file> | --patch <json file>) [--overwrite]", auth: "login", effect: "remote-write", purpose: "Write a device file from a local file, or apply line-range edits from a JSON file." },
+    { id: "permission", usage: "frely permission request <device> --resource <name> --reason <text> --command <text> | confirm <code> [A|B|C] | wait <short code> [--then '<command>']", auth: "login", effect: "authorization", purpose: "Ask the owner to open what the device sandbox blocks. Exit code 3 prints the approval link and the wait command: show the link to the user, then run `frely permission wait <short code> --then '<original command>'` in the background so the original command runs once they approve." },
+    { id: "tools", usage: "frely tools [--json]", auth: "login", effect: "read", purpose: "Print FrelyMCP's own instructions and every tool it offers." },
+    { id: "call", usage: "frely call <tool> [--json '<object>' | --input <file>] [--out <file>]", auth: "login", effect: "subcommand-dependent", purpose: "Call any FrelyMCP tool by name (browser, models, web_fetch, local_mcp_call, store, ...)." },
+    { id: "api", usage: "frely api list|describe|call [--wait] [--help]", auth: "login", effect: "subcommand-dependent", purpose: "Discover and call your Frely account's business operations (the same tools FrelyMCP offers through frely_list/frely_call). Read-only discovery runs on the account's own login; the first write call asks you to approve this computer in a browser. `list` is grouped and compact (add --json for the full tool list); use describe before call; parameters and results are JSON; --input reads a file up to 512 KiB. When a call needs the owner's approval the error links to it; run the call with --wait (in the foreground, tool timeout of at least 10 minutes) to show the user the link first and then block until they approve on their phone or the web, so the call finishes by itself and you need not be told. Never background or kill it." },
     { id: "app.install", usage: "frely app install [--force] [--json]", auth: "local", effect: "local-write", purpose: "Install the Frely App: Homebrew cask when available, otherwise a verified download (SHA-256) from the FrelyHQ/frely-cli release mirror; quarantine is preserved." },
     { id: "app.open", usage: "frely app open [--window]", auth: "local", effect: "local-write", purpose: "Launch the Frely App in the background (menu bar) or with its main window via --window." },
     { id: "app.status", usage: "frely app status [--json]", auth: "local", effect: "read", purpose: "Show whether the Frely App is installed, its version, install path, running state and how it is managed." },
@@ -89,18 +88,18 @@ export function agentHelp() {
             "A Key amount limit is a spending cap. It reserves no funds and remains subject to its owner's available Plan allowance and Credit.",
             "Budget sources are independent constraints. Do not sum their remaining amounts or describe them as a Key balance.",
             "Installing a remote Agent Skill does not replace the host's current model provider.",
-            "Device MCP exposes this computer to remote HTTP MCP clients with OAuth. Commands execute on the device, not on the calling computer.",
-            "Use frely mcp start to enable device MCP, start it, or read its address; frely mcp status and frely doctor [-v] show status and diagnostics.",
-            "If MCP is unconfigured or expired, frely mcp start requests browser approval; otherwise it only ensures the service is running and prints the URL. Existing workspaces stay unchanged.",
+            "Remote control lets other clients (HTTP MCP clients with OAuth, frely run from another computer, hosted Agents) use this computer. It is not enabled after install; the owner turns it on from the web page after two-step verification, or with frely link on. Commands execute on the device, not on the calling computer.",
+            "Use frely link on to enable remote control, start it, or read its MCP address; frely link off turns it off and locks it on this computer (only frely link on there lifts the lock); frely link status and frely doctor [-v] show status and diagnostics.",
+            "If MCP is unconfigured or expired, frely link on requests browser approval; otherwise it only ensures the service is running and prints the URL. Existing workspaces stay unchanged.",
             "Remote clients of one device share its workspace and managed processes. Shell uses the device OS account; it is not a workspace sandbox.",
         ],
         commands: COMMANDS,
     };
 }
 const GROUPS = [
-    { title: "Control your devices", ids: ["devices", "run", "ps", "logs", "kill", "read", "ls", "grep", "edit", "permission", "tools", "call", "controller"] },
+    { title: "Control your devices", ids: ["devices", "run", "ps", "logs", "kill", "read", "ls", "grep", "edit", "permission", "tools", "call"] },
     { title: "Account", ids: ["login", "logout", "uninstall", "doctor", "update"] },
-    { title: "Device MCP", ids: ["mcp.start", "mcp.workspace", "mcp.local", "mcp.lifecycle"] },
+    { title: "Let others control this computer", ids: ["link.on", "link.workspace", "link.local", "link.lifecycle"] },
     { title: "Agents", ids: ["agent.install", "agent.run", "agent.status", "agent.remove", "agent.local"] },
     { title: "Skills", ids: ["skill.install"] },
     { title: "Marketplace items", ids: ["item.install", "item.update", "item.run", "item.trust"] },
@@ -126,16 +125,15 @@ const SHORT_USAGE = {
     permission: "frely permission request|confirm|wait",
     tools: "frely tools",
     call: "frely call <tool> [--json '<object>']",
-    controller: "frely controller login|logout|status",
     login: "frely login [--no-browser]",
     logout: "frely logout",
     uninstall: "frely uninstall [--yes]",
     doctor: "frely doctor [-v] [--json]",
     update: "frely update",
-    "mcp.start": "frely mcp start [--workspace <path>] [--days 1..365] [--no-browser] [--json]",
-    "mcp.workspace": "frely mcp workspace list|add <path>|remove <path>",
-    "mcp.local": "frely mcp local list|add <name> (--url <address>|-- <command>)|remove <name>",
-    "mcp.lifecycle": "frely mcp status|stop|remove",
+    "link.on": "frely link on [--workspace <path>] [--days 1..365] [--no-browser] [--json]",
+    "link.workspace": "frely link workspace list|add <path>|remove <path>",
+    "link.local": "frely link local list|add <name> (--url <address>|-- <command>)|remove <name>",
+    "link.lifecycle": "frely link status|stop|remove",
     "skill.install": "frely skill install [--host <host>]",
     "item.install": "frely item install <username/name[@version]> [--host <host>]",
     "item.update": "frely item update [<folder>]",
@@ -179,7 +177,7 @@ export function cliUsage() {
     return lines.join("");
 }
 /**
- * A command group without a direct action (`frely mcp workspace`, `frely agent`,
+ * A command group without a direct action (`frely link workspace`, `frely agent`,
  * ...) prints the subcommands under it instead of running one.
  */
 export function subcommandUsage(group) {
@@ -188,12 +186,12 @@ export function subcommandUsage(group) {
         .map((command) => `  ${SHORT_USAGE[command.id] ?? command.usage}\n`);
     return `Usage:\n${lines.join("")}`;
 }
-export function mcpUsage() {
-    return "Device MCP — use this computer from a remote MCP client.\n\nUsage:\n"
-        + ["mcp.start", "mcp.workspace", "mcp.local", "mcp.lifecycle"].map((id) => "  " + SHORT_USAGE[id] + "\n").join("")
-        + "\nStatus: frely mcp status [--json]; diagnostics: frely doctor [-v] [--json]\n\n"
-        + "Run frely mcp start on the computer to control. It asks for browser approval the first time (the home directory, or --workspace) and when authorization has expired, installs and starts the background service, and prints the MCP URL. Add that URL to ChatGPT, Claude Code on another computer, or another HTTP MCP client, then authorize with OAuth.\n"
+export function linkUsage() {
+    return "Remote control — let others control this computer (MCP clients, frely run from another computer, hosted Agents).\n\nUsage:\n"
+        + ["link.on", "link.workspace", "link.local", "link.lifecycle"].map((id) => "  " + SHORT_USAGE[id] + "\n").join("")
+        + "\nStatus: frely link status [--json]; diagnostics: frely doctor [-v] [--json]\n\n"
+        + "Run frely link on on the computer to control. It asks for browser approval the first time (the home directory, or --workspace) and when authorization has expired, installs and starts the background service, and prints the MCP URL. Add that URL to ChatGPT, Claude Code on another computer, or another HTTP MCP client, then authorize with OAuth.\n"
         + "Prompts go to stderr; stdout contains only the URL or JSON. --days 1..365 renews now; the URL stays the same.\n"
-        + "frely mcp stop only stops the service; frely mcp remove revokes access for every client. Clients share the device workspace and managed processes. Shell runs under the device OS account.\n";
+        + "frely link stop only stops the service; frely link off revokes access for every client. Clients share the device workspace and managed processes. Shell runs under the device OS account.\n";
 }
 //# sourceMappingURL=agent-help.js.map