CLI Reference
The ah command provides access to all Agent Harbor functionality.
ah [OPTIONS] [COMMAND]Running ah without arguments launches the TUI dashboard.
Commands
Core
| Command | Description |
|---|---|
| agent start | Start an agent session |
| agent record | Record a session |
| agent replay | Replay a recording |
| agent models | List available models |
| agent branch-points | Extract branch points |
| tui | Launch TUI dashboard |
| task create | Create a new task |
| task get | Get current task |
| config | Configuration management |
| health | System health checks |
| credentials | Credential management |
Research & Web
| Command | Description |
|---|---|
ask | Ask AI a question (quick answer from chat services or local agents) |
research | Deep research using AI (produces research documents) |
Agent Operations
| Command | Description |
|---|---|
agent access-point | Run a local ACP access point daemon |
agent enroll | Enroll this host as a fleet follower |
agent followers | Fleet follower operations (run, list, sync) |
agent status | Display session/fleet status |
agent ask-expert | Submit research brief to cloud AI service |
agent follow-cloud-task | Follow and monitor a cloud coding task |
agent audit | Query sandbox filesystem access audit logs |
agent fs | AgentHarborFS filesystem operations |
agent workspace | Workspace management |
agent sandbox | Run a command inside a sandbox |
System
| Command | Description |
|---|---|
acp | Connect to an ACP access point |
| desktop login-session | Interactive Linux browser login acquisition |
repo | Repository management |
starting-points | Starting-point management |
browser-profiles | Browser profile management |
webui | Start the Agent Harbor WebUI server |
onboard | Launch the interactive onboarding wizard |
completions | Generate shell completions |
gc | Garbage collection |
vm | VM management |
executor | Executor management |
For browser-backed services on Linux, ah desktop login-session is the documented entrypoint for the managed interactive login flow. It can be run directly, or reached automatically when ah ask --allow-login, ah research --allow-login, or ah agent ask-expert needs the user to reauthenticate a managed profile. The same path can also be enabled persistently with ask.allow-login = true or research.allow-login = true in config. It selects between the local desktop and WebUI remote-view surfaces automatically, but REST-backed or non-interactive invocations stay on the remote-view path even if a display is present. Gemini uses a real Chromium window for its Google-backed OAuth path. On macOS M8, the broader managed login-acquisition flow now includes browser survey plus best-effort session import, but the interactive desktop login-session surface is still not available there. That M8 behavior applies to the managed flow, not to the older browser-profiles discover / browser-profiles import-cookies helpers, which still use their legacy Chromium/Firefox-only path.
Global Flags
See Global Flags for flags available on all commands.