@akshar5/cohall 0.10.0 → 0.10.2

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## [0.10.2](https://github.com/AksharP5/cohall/compare/v0.10.1...v0.10.2) (2026-10-04)
+
+
+### Bug Fixes
+
+* **client:** cancel pairing response body reads ([#165](https://github.com/AksharP5/cohall/issues/165)) ([92702ee](https://github.com/AksharP5/cohall/commit/92702eed5ce582f7086fa12f45bd5acb1cc80a24))
+* **device:** allow workspace names beginning with two dots ([#163](https://github.com/AksharP5/cohall/issues/163)) ([5764e37](https://github.com/AksharP5/cohall/commit/5764e37935502e861316c46b36b0e0db868a66c4))
+* **device:** reject attachment FIFOs without blocking ([#162](https://github.com/AksharP5/cohall/issues/162)) ([7eae2ca](https://github.com/AksharP5/cohall/commit/7eae2ca46d1dfbbb6fa91a0236d137b52dc0f9c3))
+* **mcp:** stop cancelled attachment downloads before writing ([#164](https://github.com/AksharP5/cohall/issues/164)) ([1b91dc4](https://github.com/AksharP5/cohall/commit/1b91dc453e44f72051729fe32787d33b1d275b4e))
+* **relay:** change addresses while workers are connected ([#166](https://github.com/AksharP5/cohall/issues/166)) ([87c3baa](https://github.com/AksharP5/cohall/commit/87c3baa886bd887bb7aaf00d76bcea44e8cbe000))
+
+## [0.10.1](https://github.com/AksharP5/cohall/compare/v0.10.0...v0.10.1) (2026-10-04)
+
+
+### Bug Fixes
+
+* **cli:** prevent oversized files from bypassing input limits ([#160](https://github.com/AksharP5/cohall/issues/160)) ([c6ef1d1](https://github.com/AksharP5/cohall/commit/c6ef1d1b31454b3baf755944cd0c6ef7021594c3))
+* **config:** ignore invalid XDG directories ([#157](https://github.com/AksharP5/cohall/issues/157)) ([10e9acb](https://github.com/AksharP5/cohall/commit/10e9acbfdd2839e12b384467b568260c183a88ef))
+* **providers:** preserve multipart OpenCode answers ([#161](https://github.com/AksharP5/cohall/issues/161)) ([219c988](https://github.com/AksharP5/cohall/commit/219c988ccfd5b3725242da5cbcab1ac27da63cf2))
+* **relay:** keep usage available for all retained devices ([#159](https://github.com/AksharP5/cohall/issues/159)) ([a01b960](https://github.com/AksharP5/cohall/commit/a01b960437011148059871fb46d0fa14ab40361d))
+
 ## [0.10.0](https://github.com/AksharP5/cohall/compare/v0.9.0...v0.10.0) (2026-10-04)
 
 

package/README.md

@@ -280,8 +280,12 @@ advertise attachment support. Named Grok Bots do not support file attachments.
 If a long result and output files exceed the 1 MiB transfer limit, the task
 completes with its text result and a notice that the files were omitted.
 Provider text results must fit 128 KiB. Codex and OpenCode JSON events are capped
-at 1 MiB each. If an event is discarded at that limit, the provider must return
-a later text answer or the task fails explicitly.
+at 1 MiB each; retained OpenCode message parts use the same bound. If an event
+is discarded at that limit, the provider must return
+a later complete answer or the task fails explicitly. Identified OpenCode
+multipart answers must follow a new message-start event; more parts from the same
+message cannot recover discarded content. Older OpenCode events without part IDs
+keep their last-text behavior.
 
 `--timeout` accepts 5 to 86400 seconds and defaults to 900. It limits how long
 the command waits; the task continues after that. Invalid timeout values are
@@ -412,8 +416,9 @@ cohall usage
 It and `cohall devices` include each device's current queue count and the
 creation time of its oldest queued task. Assigned, running, cancelling, and
 terminal tasks do not count as queued. Queue fields are absent with older relays.
-`usage` reports retained Cohall task activity by device, status, and provider;
-provider token counts and billing are not available to the relay.
+`usage` reports retained Cohall task activity by device, status, and provider,
+including forgotten devices whose tasks are still retained. Provider token counts
+and billing are not available to the relay.
 
 From the relay owner account, queue a Cohall upgrade for every registered
 device and inspect progress:

package/bin/cohall.js

@@ -17,7 +17,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // packages/protocol/src/index.ts
 import { Effect, Schema } from "effect";
-var version = "0.10.0", maxSocketPayloadBytes, maxAttachmentBytes, maxTaskAttachments = 2, maxProgressNoteBytes = 1024, bounded = (maxLength) => Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(maxLength)), optionalText = (maxLength) => Schema.String.check(Schema.isMaxLength(maxLength)), boundedArray = (schema, maxLength) => Schema.Array(schema).check(Schema.isMaxLength(maxLength)), count, uuid = (name) => Schema.String.check(Schema.isUUID(4)).pipe(Schema.brand(name)), isoTimestamp = (name) => Schema.String.check(Schema.isPattern(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/, {
+var version = "0.10.2", maxSocketPayloadBytes, maxAttachmentBytes, maxTaskAttachments = 2, maxProgressNoteBytes = 1024, bounded = (maxLength) => Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(maxLength)), optionalText = (maxLength) => Schema.String.check(Schema.isMaxLength(maxLength)), boundedArray = (schema, maxLength) => Schema.Array(schema).check(Schema.isMaxLength(maxLength)), count, uuid = (name) => Schema.String.check(Schema.isUUID(4)).pipe(Schema.brand(name)), isoTimestamp = (name) => Schema.String.check(Schema.isPattern(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/, {
   expected: "an ISO-8601 UTC timestamp"
 })).pipe(Schema.brand(name)), BotId, Bot, DeviceId, ThreadId, MessageId, TaskId, TaskRequestId, TaskRunId, ClarificationId, AuthSessionId, OperationId, Timestamp, TaskDeadline, taskDeadlineError = "Task deadline exceeded", taskDeadlinePassed = (task, time = Date.now()) => task.expiresAt !== undefined && Date.parse(task.expiresAt) <= time, Platform, Provider, DeviceStatus, TaskStatus, OperationStatus, TaskTraceEventKind, MessageRole, ConnectionRole, AuthSession, CreatePairingInput, PairingCredential, ExchangePairingInput, SessionCredential, PairingResult, Capability, Workspace, Device, maxDevicePageDevices = 16, maxDevicePageResponseBytes, DevicePage, minimumDeviceOperationVersion = "0.5.0", parsedVersion = (value) => {
   const match = /^v?(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.exec(value);
@@ -314,7 +314,7 @@ var init_src = __esm(() => {
     retainedTasks: count,
     byStatus: TaskStatusCounts,
     byProvider: boundedArray(ProviderUsage, Provider.literals.length),
-    devices: boundedArray(DeviceUsage, 256)
+    devices: Schema.Array(DeviceUsage)
   });
   TaskTraceEvent = Schema.Struct({
     kind: TaskTraceEventKind,
@@ -421,9 +421,9 @@ var init_src = __esm(() => {
 
 // apps/relay/src/config.ts
 import { Effect as Effect13, Schema as Schema14 } from "effect";
-import { access as access5, chmod as chmod7, mkdir as mkdir8, readFile as readFile5, writeFile as writeFile9 } from "node:fs/promises";
+import { access as access5, chmod as chmod7, mkdir as mkdir8, readFile as readFile4, writeFile as writeFile9 } from "node:fs/promises";
 import { homedir as homedir5, platform as platform5 } from "node:os";
-import { join as join9, resolve as resolve5 } from "node:path";
+import { isAbsolute as isAbsolute6, join as join9, resolve as resolve5 } from "node:path";
 var RelayConfiguration, defaultDataDirectory = () => {
   if (platform5() === "win32") {
     return join9(process.env.LOCALAPPDATA ?? join9(homedir5(), "AppData", "Local"), "Cohall");
@@ -431,10 +431,11 @@ var RelayConfiguration, defaultDataDirectory = () => {
   if (platform5() === "darwin") {
     return join9(homedir5(), "Library", "Application Support", "Cohall", "relay");
   }
-  return join9(process.env.XDG_DATA_HOME ?? join9(homedir5(), ".local", "share"), "cohall");
+  const dataHome = process.env.XDG_DATA_HOME;
+  return join9(dataHome !== undefined && isAbsolute6(dataHome) ? dataHome : join9(homedir5(), ".local", "share"), "cohall");
 }, generatedToken = () => Array.from(crypto.getRandomValues(new Uint8Array(32)), (value) => value.toString(16).padStart(2, "0")).join(""), tokenFrom = async (path) => {
   if (await access5(path).then(() => true).catch(() => false)) {
-    return (await readFile5(path, "utf8")).trim();
+    return (await readFile4(path, "utf8")).trim();
   }
   const token = generatedToken();
   await writeFile9(path, `${token}
@@ -2712,6 +2713,14 @@ Content-Length: 0\r
         return yield* store.exchangePairing(input.token);
       })).then((value) => json(value, 201)).catch(() => json({ error: "Pairing credential is invalid, expired, or already used" }, 401));
     }
+    if (url.pathname === "/api/device/credential" && request.method === "GET") {
+      const authorization = request.headers.get("authorization");
+      const token = authorization?.startsWith("Bearer ") === true ? authorization.slice("Bearer ".length) : undefined;
+      if (token === undefined || await authenticate(token, "device") === undefined) {
+        return json({ error: "Unauthorized" }, 401);
+      }
+      return json({ ok: true });
+    }
     const attachmentRoute = request.method === "GET" && /^\/api\/tasks\/[^/]+\/attachments(?:\/[^/]+)?$/.test(url.pathname);
     const progressRoute = request.method === "POST" && /^\/api\/tasks\/[^/]+\/progress$/.test(url.pathname);
     const inputRoute = request.method === "POST" && /^\/api\/tasks\/[^/]+\/input$/.test(url.pathname);
@@ -3173,6 +3182,7 @@ var make = (options) => {
   });
   const devicePage = (after) => request("RelayClient.devices", `/api/devices/page${after === undefined ? "" : `?after=${encodeURIComponent(after)}`}`, DevicePage, undefined, maxDevicePageResponseBytes);
   return Service.of({
+    verifyDeviceCredential: () => request("RelayClient.verifyDeviceCredential", "/api/device/credential", Schema2.Struct({ ok: Schema2.Literal(true) })).pipe(Effect2.asVoid),
     devices: () => Effect2.gen(function* () {
       const first = yield* devicePage().pipe(Effect2.catch((cause) => cause instanceof RelayRequestError && cause.status === 404 ? request("RelayClient.devices", "/api/devices", Schema2.Array(Device)) : Effect2.fail(cause)));
       if (!("devices" in first))
@@ -3316,29 +3326,30 @@ var make = (options) => {
 };
 var exchangePairing = (baseUrl, input) => Effect2.gen(function* () {
   const operation = "RelayClient.exchangePairing";
-  const response = yield* Effect2.tryPromise({
-    try: (signal) => fetch(`${normalizeBaseUrl(baseUrl)}/api/auth/pair`, {
-      method: "POST",
-      signal: AbortSignal.any([signal, AbortSignal.timeout(30000)]),
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(input)
-    }),
-    catch: (cause) => new RelayRequestError({
+  const json = yield* Effect2.tryPromise({
+    try: async (signal) => {
+      const response = await fetch(`${normalizeBaseUrl(baseUrl)}/api/auth/pair`, {
+        method: "POST",
+        signal: AbortSignal.any([signal, AbortSignal.timeout(30000)]),
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(input)
+      });
+      if (!response.ok) {
+        throw new RelayRequestError({
+          operation,
+          message: await responseMessage(response, operation),
+          status: response.status
+        });
+      }
+      return jsonBody(response, operation).catch((cause) => {
+        throw cause instanceof RelayDecodeError ? cause : new RelayDecodeError({ operation, message: String(cause) });
+      });
+    },
+    catch: (cause) => cause instanceof RelayRequestError || cause instanceof RelayDecodeError ? cause : new RelayRequestError({
       operation,
       message: cause instanceof Error ? cause.message : String(cause)
     })
   });
-  if (!response.ok) {
-    return yield* Effect2.fail(new RelayRequestError({
-      operation,
-      message: yield* Effect2.promise(() => responseMessage(response, operation)),
-      status: response.status
-    }));
-  }
-  const json = yield* Effect2.tryPromise({
-    try: () => jsonBody(response, operation),
-    catch: (cause) => cause instanceof RelayDecodeError ? cause : new RelayDecodeError({ operation, message: String(cause) })
-  });
   return yield* Schema2.decodeUnknownEffect(PairingResult)(json).pipe(Effect2.mapError((cause) => new RelayDecodeError({ operation, message: String(cause) })));
 });
 var layer = (options) => Layer.succeed(Service, make(options));
@@ -3365,6 +3376,8 @@ class ProviderRunError extends Schema3.TaggedErrorClass()("CohallProvider.RunErr
   exitCode: Schema3.optionalKey(Schema3.Number)
 }) {
 }
+var maxResultBytes = 131072;
+var maxJsonBytes = 1024 * 1024;
 var executables = {
   codex: "codex",
   "claude-code": "claude",
@@ -3541,7 +3554,6 @@ var prepareCommand = async (options) => {
   }
 };
 var forEachJsonEvent = async (stdout, onEvent, onOversized) => {
-  const limit = 1024 * 1024;
   let chunks = [];
   let size = 0;
   let oversized = false;
@@ -3549,7 +3561,7 @@ var forEachJsonEvent = async (stdout, onEvent, onOversized) => {
     if (oversized) {
       return;
     }
-    if (size + chunk.byteLength > limit) {
+    if (size + chunk.byteLength > maxJsonBytes) {
       chunks = [];
       size = 0;
       oversized = true;
@@ -3653,25 +3665,69 @@ var parseOpenCode = async (stdout, existingSession) => {
   let result = "";
   let sessionId = existingSession;
   let discardedEvent = false;
+  let messageId;
+  const parts = new Map;
+  let partBytes = 0;
+  let oversizedMessage = false;
+  const selectMessage = (id) => {
+    messageId = id;
+    parts.clear();
+    partBytes = 0;
+    oversizedMessage = false;
+    result = "";
+  };
   await forEachJsonEvent(stdout, (event) => {
     const failure = openCodeError(event);
     if (failure !== undefined) {
       throw new Error(failure);
     }
     sessionId = text(event.sessionID) ?? text(event.sessionId) ?? text(event.session_id) ?? text(record(event.info)?.sessionID) ?? sessionId;
+    const part = record(event.part);
+    const nextMessageId = text(part?.messageID);
+    if (text(event.type) === "step_start" && nextMessageId !== undefined && nextMessageId !== messageId) {
+      selectMessage(nextMessageId);
+      discardedEvent = false;
+      return;
+    }
     if (text(event.type) !== "text")
       return;
-    const content = textFromPart(event.part) ?? textFromPart(event) ?? text(event.result);
-    if (content !== undefined && content.length > 0) {
-      result = content;
-      discardedEvent = false;
+    const content = textFromPart(part) ?? textFromPart(event) ?? text(event.result);
+    if (content === undefined)
+      return;
+    const partId = text(part?.id);
+    if (nextMessageId !== undefined && partId !== undefined) {
+      if (nextMessageId !== messageId)
+        selectMessage(nextMessageId);
+      if (oversizedMessage)
+        return;
+      const previous = parts.get(partId);
+      if (content.length === 0 && previous === undefined)
+        return;
+      partBytes += byteLength(content) - byteLength(previous ?? "") + (previous === undefined ? byteLength(partId) : 0);
+      if (partBytes > maxJsonBytes) {
+        oversizedMessage = true;
+        parts.clear();
+        return;
+      }
+      parts.set(partId, content);
+      return;
     }
+    if (content.length === 0)
+      return;
+    selectMessage(undefined);
+    result = content;
+    discardedEvent = false;
   }, () => {
     discardedEvent = true;
   });
   if (discardedEvent) {
     throw new Error("Provider JSON event exceeded 1 MiB without a later text response");
   }
+  if (oversizedMessage)
+    throw new Error("OpenCode message exceeded 1 MiB");
+  if (parts.size > 0)
+    result = [...parts.values()].filter((content) => content.length > 0).join(`
+`);
   if (result.length === 0) {
     throw new Error("OpenCode produced no result; verify its authentication and use a supported project workspace");
   }
@@ -3683,7 +3739,7 @@ var parse = async (options, stdout, onFailure) => {
       case "codex":
         return await parseCodex(stdout, options.sessionId);
       case "claude-code":
-        return parseClaude(await boundedText(stdout, 1024 * 1024, onFailure), options.sessionId);
+        return parseClaude(await boundedText(stdout, maxJsonBytes, onFailure), options.sessionId);
       case "opencode":
         return await parseOpenCode(stdout, options.sessionId);
     }
@@ -3808,7 +3864,7 @@ var run = (options) => Effect3.callback((resume, signal) => {
             exitCode
           });
         }
-        if (byteLength(result.result) > 131072) {
+        if (byteLength(result.result) > maxResultBytes) {
           throw new ProviderRunError({
             provider: options.provider,
             message: "Provider result exceeded 128 KiB"
@@ -3848,7 +3904,7 @@ var run = (options) => Effect3.callback((resume, signal) => {
 
 // apps/device/src/cli.ts
 import { Effect as Effect10, Schema as Schema11 } from "effect";
-import { access as access4, mkdir as mkdir7, readFile as readFile4, stat as stat4, writeFile as writeFile7 } from "node:fs/promises";
+import { access as access4, mkdir as mkdir7, open as open4, stat as stat4, writeFile as writeFile7 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname6, join as join8, resolve as resolve4 } from "node:path";
 
@@ -4121,7 +4177,7 @@ init_src();
 import { Effect as Effect4, Schema as Schema4 } from "effect";
 import { access, chmod as chmod2, mkdir, readFile, realpath, rename, stat, writeFile as writeFile2 } from "node:fs/promises";
 import { homedir as homedir2, hostname, platform as platform2 } from "node:os";
-import { dirname, join as join2, resolve } from "node:path";
+import { dirname, isAbsolute as isAbsolute2, join as join2, resolve } from "node:path";
 var WorkspaceList = Schema4.Array(Schema4.NonEmptyString).check(Schema4.isMaxLength(64));
 var ProviderList = Schema4.Array(Provider).check(Schema4.isMinLength(1)).check(Schema4.isMaxLength(Provider.literals.length));
 var Sandbox = Schema4.Literals(["read-only", "workspace-write", "danger-full-access"]);
@@ -4163,7 +4219,8 @@ var defaultConfigDirectory = () => {
   if (platform2() === "darwin") {
     return join2(homedir2(), "Library", "Application Support", "Cohall");
   }
-  return join2(process.env.XDG_CONFIG_HOME ?? join2(homedir2(), ".config"), "cohall");
+  const configHome = process.env.XDG_CONFIG_HOME;
+  return join2(configHome !== undefined && isAbsolute2(configHome) ? configHome : join2(homedir2(), ".config"), "cohall");
 };
 var defaultRelayDataDirectory = () => {
   if (platform2() === "win32") {
@@ -4172,7 +4229,8 @@ var defaultRelayDataDirectory = () => {
   if (platform2() === "darwin") {
     return join2(homedir2(), "Library", "Application Support", "Cohall", "relay");
   }
-  return join2(process.env.XDG_DATA_HOME ?? join2(homedir2(), ".local", "share"), "cohall");
+  const dataHome = process.env.XDG_DATA_HOME;
+  return join2(dataHome !== undefined && isAbsolute2(dataHome) ? dataHome : join2(homedir2(), ".local", "share"), "cohall");
 };
 var relayDataDirectory = () => resolve(process.env.COHALL_DATA_DIR ?? defaultRelayDataDirectory());
 var configurationPath = () => resolve(process.env.COHALL_CONFIG ?? join2(defaultConfigDirectory(), "config.json"));
@@ -5237,7 +5295,7 @@ import { WebSocket } from "ws";
 import { execFile as execFile2 } from "node:child_process";
 import { chmod as chmod5, mkdir as mkdir4, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir3 } from "node:os";
-import { dirname as dirname4, isAbsolute as isAbsolute3, join as join5 } from "node:path";
+import { dirname as dirname4, isAbsolute as isAbsolute4, join as join5 } from "node:path";
 
 // apps/device/src/upgrade.ts
 import { Schema as Schema8 } from "effect";
@@ -5255,7 +5313,7 @@ import {
   stat as stat2,
   writeFile as writeFile3
 } from "node:fs/promises";
-import { delimiter as delimiter2, dirname as dirname3, extname as extname2, isAbsolute as isAbsolute2, join as join4, relative, resolve as resolve2 } from "node:path";
+import { delimiter as delimiter2, dirname as dirname3, extname as extname2, isAbsolute as isAbsolute3, join as join4, relative, resolve as resolve2 } from "node:path";
 import { platform as operatingSystem } from "node:os";
 var packageName = "@akshar5/cohall";
 var minimumBunLookupVersion = "1.2.15";
@@ -5383,7 +5441,7 @@ var resolvePackageInstallation = async (entrypoint, options = {}) => {
     if (bun !== undefined) {
       const result2 = await (options.runner ?? defaultRunner).run(bun, ["pm", "ls", "--global"], 1e4);
       const root2 = result2.stdout.split(/\r?\n/, 1)[0]?.match(/^(.*?) node_modules \(\d+(?: installed)?\)$/)?.[1];
-      if (result2.exitCode === 0 && root2 !== undefined && isAbsolute2(root2) && await realpath2(join4(root2, "node_modules", packageName, "bin", "cohall.js")).catch(() => {
+      if (result2.exitCode === 0 && root2 !== undefined && isAbsolute3(root2) && await realpath2(join4(root2, "node_modules", packageName, "bin", "cohall.js")).catch(() => {
         return;
       }) === canonicalEntrypoint)
         return {
@@ -5412,7 +5470,7 @@ var resolvePackageInstallation = async (entrypoint, options = {}) => {
   const reported = normalizePath(result.stdout.trim().split(/\r?\n/).at(-1)?.trim() ?? "");
   const root = reported.endsWith("/node_modules") ? dirname3(reported) : reported;
   const selected = resolve2(globalRoot);
-  const configured = isAbsolute2(root) ? resolve2(root) : undefined;
+  const configured = isAbsolute3(root) ? resolve2(root) : undefined;
   if (configured === undefined || (process.platform === "win32" ? selected.toLowerCase() !== configured.toLowerCase() : selected !== configured))
     throw globalEntrypointError();
   const packageEntry = (root2) => join4(root2, "node_modules", packageName, "bin", "cohall.js");
@@ -5440,7 +5498,7 @@ var pnpmServiceDirectories = async (executable, globalRoot, runner = defaultRunn
   const query = async (arguments_) => {
     const result = await checked(runner, { command: executable, arguments: arguments_, environment: pnpmEnvironment() }, 1e4);
     const directory = result.stdout.trim().split(/\r?\n/).at(-1)?.trim() ?? "";
-    if (!isAbsolute2(directory))
+    if (!isAbsolute3(directory))
       throw new Error(`pnpm ${arguments_.join(" ")} did not report an absolute directory`);
     return directory;
   };
@@ -5491,7 +5549,7 @@ var executableNames = (command) => {
 };
 var containsPath = (root, path) => {
   const child = relative(root, path);
-  return child === "" || !child.startsWith("..") && !isAbsolute2(child);
+  return child === "" || !child.startsWith("..") && !isAbsolute3(child);
 };
 var linuxSystemExecutableRoots = [
   "/bin",
@@ -5543,7 +5601,7 @@ var validateExecutable = async (candidate, installationRoot, preserveSymlink = f
   return preserveSymlink ? resolve2(candidate) : canonical;
 };
 var trustedExecutable = async (command, options = {}) => {
-  const candidates = isAbsolute2(command) ? [command] : (process.env.PATH ?? "").split(delimiter2).filter(Boolean).flatMap((directory) => executableNames(command).map((name) => join4(directory, name)));
+  const candidates = isAbsolute3(command) ? [command] : (process.env.PATH ?? "").split(delimiter2).filter(Boolean).flatMap((directory) => executableNames(command).map((name) => join4(directory, name)));
   let failure;
   for (const path of candidates) {
     const available2 = await access2(path, operatingSystem() === "win32" ? constants2.F_OK : constants2.X_OK).then(() => true).catch(() => false);
@@ -6044,7 +6102,7 @@ var deviceServicePlan = (options) => {
   ].join(":");
   if (options.platform === "linux") {
     const configured = process.env.XDG_CONFIG_HOME;
-    const configHome = configured !== undefined && isAbsolute3(configured) ? configured : join5(options.home, ".config");
+    const configHome = configured !== undefined && isAbsolute4(configured) ? configured : join5(options.home, ".config");
     const path = join5(configHome, "systemd", "user", "cohall-device.service");
     return {
       file: {
@@ -6441,7 +6499,7 @@ var isLoopback = (url) => url.hostname === "localhost" || url.hostname === "[::1
 var verifyClientCredential = async (relayUrl, token) => {
   await Effect8.runPromise(exports_src.make({ baseUrl: relayUrl, token }).devices());
 };
-var verifyDeviceCredential = (relayUrl, token) => new Promise((resolvePromise, reject) => {
+var verifyLegacyDeviceCredential = (relayUrl, token) => new Promise((resolvePromise, reject) => {
   const socket = new WebSocket(websocketUrl(relayUrl), {
     handshakeTimeout: 1e4,
     maxPayload: 1024 * 1024,
@@ -6480,6 +6538,12 @@ var verifyDeviceCredential = (relayUrl, token) => new Promise((resolvePromise, r
   socket.once("error", (cause) => finish(cause));
   socket.once("close", () => finish(new Error("New relay rejected the stored device credential")));
 });
+var verifyDeviceCredential = (relayUrl, token) => Effect8.runPromise(exports_src.make({ baseUrl: relayUrl, token }).verifyDeviceCredential()).catch((cause) => {
+  if (cause instanceof RelayRequestError && (cause.status === 401 || cause.status === 404)) {
+    return verifyLegacyDeviceCredential(relayUrl, token);
+  }
+  throw cause;
+});
 var switchRelay = async (options) => {
   if (process.env.COHALL_RELAY_URL !== undefined) {
     throw new Error("Unset COHALL_RELAY_URL before changing the stored relay URL");
@@ -6536,33 +6600,29 @@ var switchRelay = async (options) => {
 init_src();
 import { Effect as Effect9, Schema as Schema10 } from "effect";
 import { constants as constants3 } from "node:fs";
-import {
-  lstat as lstat2,
-  mkdtemp as mkdtemp3,
-  mkdir as mkdir6,
-  open as open3,
-  readdir as readdir2,
-  rm as rm4,
-  writeFile as writeFile6
-} from "node:fs/promises";
+import { lstat as lstat2, mkdtemp as mkdtemp3, mkdir as mkdir6, open as open3, readdir as readdir2, rm as rm4, writeFile as writeFile6 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
 import { basename as basename2, join as join7 } from "node:path";
-var readBoundedFile = async (handle) => {
-  const buffer = Buffer.allocUnsafe(maxAttachmentBytes + 1);
-  let offset = 0;
-  while (offset < buffer.length) {
+
+// apps/device/src/bounded-file.ts
+var readBoundedFile = async (handle, limit) => {
+  const buffer = Buffer.allocUnsafe(limit + 1);
+  let size = 0;
+  while (size < buffer.length) {
     const { bytesRead } = await handle.read({
       buffer,
-      offset,
-      length: buffer.length - offset,
+      offset: size,
+      length: buffer.length - size,
       position: null
     });
     if (bytesRead === 0)
       break;
-    offset += bytesRead;
+    size += bytesRead;
   }
-  return buffer.subarray(0, offset);
+  return buffer.subarray(0, size);
 };
+
+// apps/device/src/task-attachments.ts
 var readInputAttachments = async (paths2) => {
   if (paths2.length > maxTaskAttachments) {
     throw new Error(`A task supports at most ${maxTaskAttachments} input files`);
@@ -6579,13 +6639,13 @@ var readInputAttachments = async (paths2) => {
     if (!source.isFile()) {
       throw new Error(`Attachment ${name} must be a regular file`);
     }
-    const handle = await open3(path, constants3.O_RDONLY | (process.platform === "win32" ? 0 : constants3.O_NOFOLLOW));
+    const handle = await open3(path, constants3.O_RDONLY | (process.platform === "win32" ? 0 : constants3.O_NOFOLLOW | constants3.O_NONBLOCK));
     try {
       const metadata = await handle.stat();
       if (!metadata.isFile() || metadata.dev !== source.dev || metadata.ino !== source.ino || metadata.size < 1 || metadata.size > maxAttachmentBytes) {
         throw new Error(`Attachment ${name} must be a regular file of 1 to ${maxAttachmentBytes} bytes`);
       }
-      const data = await readBoundedFile(handle);
+      const data = await readBoundedFile(handle, maxAttachmentBytes);
       if (data.length < 1 || data.length > maxAttachmentBytes) {
         throw new Error(`Attachment ${name} changed size while reading`);
       }
@@ -6636,14 +6696,14 @@ var collectOutputs = async (directory) => {
       throw new Error(`Output ${name} repeats another file name`);
     }
     names.add(key);
-    const handle = await open3(join7(directory, name), constants3.O_RDONLY | (process.platform === "win32" ? 0 : constants3.O_NOFOLLOW));
+    const handle = await open3(join7(directory, name), constants3.O_RDONLY | (process.platform === "win32" ? 0 : constants3.O_NOFOLLOW | constants3.O_NONBLOCK));
     try {
       const metadata = await handle.stat();
       const pathMetadata = await lstat2(join7(directory, name));
       if (!metadata.isFile() || !pathMetadata.isFile() || metadata.dev !== pathMetadata.dev || metadata.ino !== pathMetadata.ino || metadata.size < 1 || metadata.size > maxAttachmentBytes) {
         throw new Error(`Output ${name} must be a regular file of 1 to ${maxAttachmentBytes} bytes`);
       }
-      const data = await readBoundedFile(handle);
+      const data = await readBoundedFile(handle, maxAttachmentBytes);
       if (data.length < 1 || data.length > maxAttachmentBytes) {
         throw new Error(`Output ${name} changed size while reading`);
       }
@@ -6867,6 +6927,19 @@ var identifier = (arguments_, label) => {
 };
 var print = (value) => console.log(JSON.stringify(value, null, 2));
 var printLine = (value) => console.log(JSON.stringify(value));
+var readTextFile = async (path, limit, exceeded) => {
+  if ((await stat4(path)).size > limit)
+    throw new Error(exceeded);
+  const file = await open4(path, "r");
+  try {
+    const data = await readBoundedFile(file, limit);
+    if (data.length > limit)
+      throw new Error(exceeded);
+    return data.toString("utf8");
+  } finally {
+    await file.close();
+  }
+};
 var readInput = async (arguments_, name) => {
   const direct = option(arguments_, name);
   const path = option(arguments_, `${name}-file`);
@@ -6878,11 +6951,8 @@ var readInput = async (arguments_, name) => {
     if (!await access4(path).then(() => true).catch(() => false)) {
       throw new Error(`File does not exist: ${path}`);
     }
-    if ((await stat4(path)).size > byteLimit) {
-      throw new Error(`${name} file exceeds ${byteLimit / 1024} KiB`);
-    }
   }
-  const result = path === undefined ? direct === "-" ? await readStdin(byteLimit, name) : direct : await readFile4(path, "utf8");
+  const result = path === undefined ? direct === "-" ? await readStdin(byteLimit, name) : direct : await readTextFile(path, byteLimit, `${name} file exceeds ${byteLimit / 1024} KiB`);
   if (result !== undefined && result.length > 131072) {
     throw new Error(`${name} exceeds 131072 characters`);
   }
@@ -6913,10 +6983,7 @@ var pairingToken = async (arguments_) => {
   if (path !== undefined && !await access4(path).then(() => true).catch(() => false)) {
     throw new Error(`Pairing token file does not exist: ${path}`);
   }
-  if (path !== undefined && (await stat4(path)).size > 512) {
-    throw new Error("Pairing token file exceeds 512 bytes");
-  }
-  const token = (path === undefined ? await readStdin(512, "Pairing token") : await readFile4(path, "utf8")).trim();
+  const token = (path === undefined ? await readStdin(512, "Pairing token") : await readTextFile(path, 512, "Pairing token file exceeds 512 bytes")).trim();
   if (token.length === 0 || new TextEncoder().encode(token).byteLength > 256) {
     throw new Error("Provide a pairing token on stdin or with --token-file");
   }
@@ -7590,9 +7657,9 @@ var runCli = async (command, raw) => {
 init_src();
 import { Effect as Effect11, Schedule as Schedule3, Schema as Schema12 } from "effect";
 import { constants as constants4 } from "node:fs";
-import { open as open4, realpath as realpath4, stat as stat5 } from "node:fs/promises";
+import { open as open5, realpath as realpath4, stat as stat5 } from "node:fs/promises";
 import { arch, hostname as hostname3, platform as platform4 } from "node:os";
-import { basename as basename3, isAbsolute as isAbsolute4, relative as relative2 } from "node:path";
+import { basename as basename3, isAbsolute as isAbsolute5, relative as relative2, sep } from "node:path";
 import { WebSocket as WebSocket2 } from "ws";
 var maxQueuedRelayMessages = 8;
 
@@ -7673,7 +7740,7 @@ var allowedWorkspace = async (configuration, requested) => {
   const candidate = await realpath4(selected);
   const allowed = configuration.workspaces.some((root) => {
     const child = relative2(root, candidate);
-    return child === "" || !child.startsWith("..") && !isAbsolute4(child);
+    return child !== ".." && !child.startsWith(`..${sep}`) && !isAbsolute5(child);
   });
   if (!allowed) {
     throw new Error(`Workspace ${candidate} is outside this device's configured workspace roots`);
@@ -7684,7 +7751,7 @@ var openAllowedWorkspace = async (configuration, requested) => {
   const path = await allowedWorkspace(configuration, requested);
   const operatingSystem2 = platform4();
   const flags = constants4.O_RDONLY | (operatingSystem2 === "win32" ? 0 : constants4.O_DIRECTORY | constants4.O_NOFOLLOW);
-  const handle = await open4(path, flags);
+  const handle = await open5(path, flags);
   const identity = await handle.stat();
   if (!identity.isDirectory()) {
     await handle.close();
@@ -8395,11 +8462,12 @@ var runMcp = async (configuration) => {
       output_path: z.string(),
       direction: z.enum(["input", "output"]).optional()
     }
-  }, async ({ task_id, name, output_path, direction }) => {
+  }, async ({ task_id, name, output_path, direction }, { signal }) => {
     const safeName = Schema13.decodeUnknownSync(AttachmentName)(name);
     const safeDirection = direction === undefined ? undefined : Schema13.decodeUnknownSync(AttachmentDirection)(direction);
-    const data = await Effect12.runPromise(client2.readAttachment(TaskId.make(task_id), safeName, safeDirection));
-    await writeFile8(output_path, data, { flag: "wx", mode: 384 });
+    const data = await Effect12.runPromise(client2.readAttachment(TaskId.make(task_id), safeName, safeDirection), { signal });
+    signal.throwIfAborted();
+    await writeFile8(output_path, data, { flag: "wx", mode: 384, signal });
     return output({ task_id, name: safeName, output_path, bytes: data.length });
   });
   server.registerTool("task_trace", {
@@ -8485,4 +8553,4 @@ await main().catch((cause) => {
   process.exitCode = 1;
 });
 
-//# debugId=4195FFD0F10A67E564756E2164756E21
+//# debugId=49CCA945DC24F88C64756E2164756E21