@akshar5/cohall 0.3.0 → 0.3.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.3.2](https://github.com/AksharP5/cohall/compare/v0.3.1...v0.3.2) (2026-08-06)
+
+
+### Bug Fixes
+
+* make setup and provider diagnostics reliable ([#11](https://github.com/AksharP5/cohall/issues/11)) ([3c621c7](https://github.com/AksharP5/cohall/commit/3c621c7b2c13ba192ced7d93319cc41df3af256e))
+
+## [0.3.1](https://github.com/AksharP5/cohall/compare/v0.3.0...v0.3.1) (2026-08-06)
+
+
+### Bug Fixes
+
+* make Codex and OpenCode delegation reliable ([974e0d1](https://github.com/AksharP5/cohall/commit/974e0d127a56060ee9fec0210b138a0879dde9d8))
+
 ## [0.3.0](https://github.com/AksharP5/cohall/compare/v0.2.0...v0.3.0) (2026-08-06)
 
 

package/README.md

@@ -78,6 +78,7 @@ read -rsp 'Pairing token: ' pairing_token; printf '\n'
 printf '%s' "$pairing_token" | npx -y @akshar5/cohall join \
   --relay https://cohall.example.com \
   --name macbook \
+  --providers codex \
   --workspace "$HOME/dev" \
   --workspace "$HOME/.skillsync/repo"
 unset pairing_token
@@ -130,8 +131,50 @@ terminal.
 
 ## Optional MCP
 
-Run `npx -y @akshar5/cohall integrations` for current setup commands. The MCP
-server exposes:
+The MCP subprocess uses the current user's stored Cohall client configuration.
+For clients that accept the common `mcpServers` JSON shape, paste:
+
+```json
+{
+  "mcpServers": {
+    "cohall": {
+      "command": "npx",
+      "args": ["-y", "@akshar5/cohall", "mcp"]
+    }
+  }
+}
+```
+
+Codex:
+
+```bash
+codex mcp add cohall -- npx -y @akshar5/cohall mcp
+```
+
+Claude Code, available in every project for the current user:
+
+```bash
+claude mcp add --transport stdio --scope user cohall -- \
+  npx -y @akshar5/cohall mcp
+```
+
+OpenCode `opencode.json`:
+
+```json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "mcp": {
+    "cohall": {
+      "type": "local",
+      "command": ["npx", "-y", "@akshar5/cohall", "mcp"],
+      "enabled": true
+    }
+  }
+}
+```
+
+Run `npx -y @akshar5/cohall integrations` to print these command components.
+The MCP server exposes:
 
 - `list_devices`
 - `delegate`
@@ -149,7 +192,14 @@ and [service setup](docs/services.md).
 
 ## Provider behavior
 
-Target devices advertise only provider executables they actually have:
+Target devices advertise provider executables they actually have. Authentication
+is checked when delegated work starts. Restrict a device to providers you have
+configured locally:
+
+```bash
+cohall configure --providers codex,claude-code
+cohall configure --providers auto
+```
 
 | Provider    | Required command | Session continuation     |
 | ----------- | ---------------- | ------------------------ |
@@ -167,7 +217,9 @@ enforced after resolving symlinks.
 
 `npx -y @akshar5/cohall config` shows the active stored configuration without
 printing tokens. `npx -y @akshar5/cohall configure` changes relay, name,
-workspaces, model, or Codex sandbox.
+workspaces, enabled providers, model, or Codex sandbox.
+`npx -y @akshar5/cohall doctor` checks relay reachability, this device's relay
+status, provider selection, executable paths, and version information.
 Environment variables override stored values:
 
 | Variable                                  | Purpose                                        |
@@ -179,6 +231,7 @@ Environment variables override stored values:
 | `COHALL_TOKEN`                            | Relay owner credential                         |
 | `COHALL_DEVICE_ID`                        | Stable device ID override                      |
 | `COHALL_DEVICE_NAME`                      | Advertised device name                         |
+| `COHALL_DEVICE_PROVIDERS`                 | Provider allowlist or `auto`                   |
 | `COHALL_DEVICE_WORKSPACES`                | Comma-separated workspace roots                |
 | `COHALL_DEVICE_WORKSPACES_JSON`           | JSON workspace roots; supports commas in paths |
 | `COHALL_MODEL`                            | Target provider model override                 |

package/bin/cohall.js

@@ -17,7 +17,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // packages/protocol/src/index.ts
 import { Schema } from "effect";
-var version = "0.3.0", bounded = (maxLength) => Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(maxLength)), optionalText = (maxLength) => Schema.String.check(Schema.isMaxLength(maxLength)), boundedArray = (schema, maxLength) => Schema.Array(schema).check(Schema.isMaxLength(maxLength)), uuid = (name) => Schema.String.check(Schema.isUUID(4)).pipe(Schema.brand(name)), isoTimestamp = (name) => Schema.String.check(Schema.isPattern(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/, {
+var version = "0.3.2", bounded = (maxLength) => Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(maxLength)), optionalText = (maxLength) => Schema.String.check(Schema.isMaxLength(maxLength)), boundedArray = (schema, maxLength) => Schema.Array(schema).check(Schema.isMaxLength(maxLength)), uuid = (name) => Schema.String.check(Schema.isUUID(4)).pipe(Schema.brand(name)), isoTimestamp = (name) => Schema.String.check(Schema.isPattern(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?Z$/, {
   expected: "an ISO-8601 UTC timestamp"
 })).pipe(Schema.brand(name)), DeviceId, ThreadId, MessageId, TaskId, AuthSessionId, Timestamp, Platform, Provider, DeviceStatus, TaskStatus, TaskTraceEventKind, MessageRole, ConnectionRole, AuthSession, CreatePairingInput, PairingCredential, ExchangePairingInput, SessionCredential, PairingResult, Capability, Workspace, Device, Thread, Message, Task, TaskTraceEvent, TaskTrace, ThreadContext, CreateTaskInput, SocketEvent, ErrorResponse, terminalTaskStatuses, isTerminalTask = (task) => terminalTaskStatuses.has(task.status), now = () => Timestamp.make(new Date().toISOString()), makeDeviceId = () => DeviceId.make(crypto.randomUUID()), makeThreadId = () => ThreadId.make(crypto.randomUUID()), makeMessageId = () => MessageId.make(crypto.randomUUID()), makeTaskId = () => TaskId.make(crypto.randomUUID()), makeAuthSessionId = () => AuthSessionId.make(crypto.randomUUID()), decodeCreatePairingInput, decodeExchangePairingInput, decodeCreateTaskInput, decodeDevice, decodeSocketEvent;
 var init_src = __esm(() => {
@@ -203,16 +203,16 @@ var init_src = __esm(() => {
 // apps/relay/src/config.ts
 import { Effect as Effect8, Schema as Schema8 } from "effect";
 import { access as access3, chmod as chmod2, mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "node:fs/promises";
-import { homedir as homedir3, platform as platform4 } from "node:os";
+import { homedir as homedir4, platform as platform4 } from "node:os";
 import { join as join4, resolve as resolve2 } from "node:path";
 var RelayConfiguration, defaultDataDirectory = () => {
   if (platform4() === "win32") {
-    return join4(process.env.LOCALAPPDATA ?? join4(homedir3(), "AppData", "Local"), "Cohall");
+    return join4(process.env.LOCALAPPDATA ?? join4(homedir4(), "AppData", "Local"), "Cohall");
   }
   if (platform4() === "darwin") {
-    return join4(homedir3(), "Library", "Application Support", "Cohall", "relay");
+    return join4(homedir4(), "Library", "Application Support", "Cohall", "relay");
   }
-  return join4(process.env.XDG_DATA_HOME ?? join4(homedir3(), ".local", "share"), "cohall");
+  return join4(process.env.XDG_DATA_HOME ?? join4(homedir4(), ".local", "share"), "cohall");
 }, generatedToken = () => Array.from(crypto.getRandomValues(new Uint8Array(32)), (value) => value.toString(16).padStart(2, "0")).join(""), tokenFrom = async (path) => {
   if (await access3(path).then(() => true).catch(() => false)) {
     return (await readFile3(path, "utf8")).trim();
@@ -1738,7 +1738,7 @@ init_src();
 init_src();
 import { Effect as Effect2, Schema as Schema3 } from "effect";
 import { accessSync, constants } from "node:fs";
-import { platform } from "node:os";
+import { homedir, platform } from "node:os";
 import { delimiter, extname, isAbsolute, join } from "node:path";
 import { spawn } from "node:child_process";
 
@@ -1756,7 +1756,10 @@ var executables = {
   "claude-code": "claude",
   opencode: "opencode"
 };
-var providerEnvironment = () => Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.startsWith("COHALL_")));
+var providerEnvironment = () => ({
+  ...Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.startsWith("COHALL_"))),
+  PATH: executableDirectories().join(delimiter)
+});
 var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? Object.fromEntries(Object.entries(value)) : undefined;
 var text = (value) => typeof value === "string" ? value : undefined;
 var executableCandidates = (command) => {
@@ -1765,8 +1768,25 @@ var executableCandidates = (command) => {
   }
   return (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").filter((extension) => extension.length > 0).map((extension) => `${command}${extension.toLowerCase()}`);
 };
+var executableDirectories = () => {
+  const home = homedir();
+  const configured = (process.env.PATH ?? "").split(delimiter).filter(Boolean);
+  const common = platform() === "win32" ? [
+    process.env.APPDATA === undefined ? undefined : join(process.env.APPDATA, "npm"),
+    process.env.LOCALAPPDATA === undefined ? undefined : join(process.env.LOCALAPPDATA, "pnpm"),
+    join(home, ".bun", "bin")
+  ] : [
+    join(home, ".local", "bin"),
+    join(home, ".npm-global", "bin"),
+    join(home, ".bun", "bin"),
+    join(home, ".local", "share", "pnpm"),
+    "/opt/homebrew/bin",
+    "/usr/local/bin"
+  ];
+  return [...new Set([...configured, ...common.filter((path) => path !== undefined)])];
+};
 var findExecutable = (command) => {
-  const paths = isAbsolute(command) || command.includes("/") || command.includes("\\") ? [""] : (process.env.PATH ?? "").split(delimiter);
+  const paths = isAbsolute(command) || command.includes("/") || command.includes("\\") ? [""] : executableDirectories();
   for (const directory of paths) {
     for (const candidate of executableCandidates(command)) {
       const path = directory.length === 0 ? candidate : join(directory, candidate);
@@ -1813,9 +1833,36 @@ var boundedText = (stream, limit, onOverflow) => new Promise((resolve, reject) =
   stream.once("end", onEnd);
   stream.once("error", onError);
 });
+var captureText = (stream, limit) => new Promise((resolve, reject) => {
+  const chunks = [];
+  let captured = 0;
+  let truncated = false;
+  const onData = (chunk) => {
+    const bytes = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+    const remaining = limit - captured;
+    if (remaining > 0) {
+      const selected = bytes.byteLength <= remaining ? bytes : bytes.subarray(0, remaining);
+      chunks.push(selected);
+      captured += selected.byteLength;
+    }
+    truncated ||= bytes.byteLength > remaining;
+  };
+  const onEnd = () => resolve({ text: Buffer.concat(chunks, captured).toString("utf8"), truncated });
+  stream.on("data", onData);
+  stream.once("end", onEnd);
+  stream.once("error", reject);
+});
+var failureMessage = (command, stderr, exitCode) => {
+  const fallback = `${command} exited with status ${exitCode}`;
+  const suffix = stderr.truncated ? `
+[stderr truncated after 64 KiB]` : "";
+  const available2 = 16384 - suffix.length;
+  return `${(stderr.text.trim() || fallback).slice(0, available2)}${suffix}`;
+};
 var codexCommand = (options) => {
   const common = [
     "--json",
+    "--skip-git-repo-check",
     "-c",
     'approval_policy="never"',
     ...options.model === undefined ? [] : ["--model", options.model],
@@ -1837,7 +1884,8 @@ var opencodeCommand = (options) => [
   "--format",
   "json",
   ...options.model === undefined ? [] : ["--model", options.model],
-  ...options.sessionId === undefined ? [] : ["--session", options.sessionId]
+  ...options.sessionId === undefined ? [] : ["--session", options.sessionId],
+  options.prompt
 ];
 var command = (options) => {
   switch (options.provider) {
@@ -1893,6 +1941,18 @@ var textFromPart = (value) => {
   }
   return text(part.text) ?? text(part.content) ?? text(record(part.part)?.text);
 };
+var openCodeError = (event) => {
+  if (text(event.type) !== "error") {
+    return;
+  }
+  const error = record(event.error);
+  const name = text(error?.name);
+  const message = text(record(error?.data)?.message) ?? text(error?.message) ?? text(event.message) ?? text(event.error);
+  if (name !== undefined && message !== undefined) {
+    return `OpenCode ${name}: ${message}`;
+  }
+  return message === undefined ? "OpenCode reported an error" : `OpenCode: ${message}`;
+};
 var parseOpenCode = (stdout, existingSession) => {
   let result = "";
   let sessionId = existingSession;
@@ -1905,6 +1965,10 @@ var parseOpenCode = (stdout, existingSession) => {
     if (event === undefined) {
       continue;
     }
+    const failure = openCodeError(event);
+    if (failure !== undefined) {
+      throw new Error(failure);
+    }
     sessionId = text(event.sessionID) ?? text(event.sessionId) ?? text(event.session_id) ?? text(record(event.info)?.sessionID) ?? sessionId;
     const content = textFromPart(event.part) ?? textFromPart(event) ?? text(event.result);
     if (content !== undefined && content.length > 0) {
@@ -1912,7 +1976,7 @@ var parseOpenCode = (stdout, existingSession) => {
     }
   }
   if (result.length === 0) {
-    throw new Error("OpenCode completed without a text response");
+    throw new Error("OpenCode produced no result; verify its authentication and use a supported project workspace");
   }
   return { result, ...sessionId === undefined ? {} : { sessionId } };
 };
@@ -1929,19 +1993,14 @@ var parse = (options, stdout) => {
 var byteLength = (value) => new TextEncoder().encode(value).byteLength;
 var run = (options) => Effect2.tryPromise({
   try: async (signal) => {
-    if (!available(options.provider)) {
+    const [commandName, ...arguments_] = command(options);
+    const executable = commandName === undefined ? undefined : findExecutable(commandName);
+    if (executable === undefined) {
       throw new ProviderUnavailableError({
         provider: options.provider,
         message: `${executables[options.provider]} is not available on this device`
       });
     }
-    const [executable, ...arguments_] = command(options);
-    if (executable === undefined) {
-      throw new ProviderRunError({
-        provider: options.provider,
-        message: `No command is configured for ${options.provider}`
-      });
-    }
     const child = spawn(executable, arguments_, {
       cwd: options.cwd,
       env: {
@@ -1969,10 +2028,10 @@ var run = (options) => Effect2.tryPromise({
       killTimer.unref();
     };
     signal.addEventListener("abort", terminate, { once: true });
-    child.stdin.end(options.prompt);
+    child.stdin.end(options.provider === "opencode" ? undefined : options.prompt);
     const [stdout, stderr, exitCode] = await Promise.all([
       boundedText(child.stdout, 1024 * 1024, terminate),
-      boundedText(child.stderr, 64 * 1024, terminate),
+      captureText(child.stderr, 64 * 1024),
       exited
     ]);
     signal.removeEventListener("abort", terminate);
@@ -1982,7 +2041,7 @@ var run = (options) => Effect2.tryPromise({
     if (exitCode !== 0) {
       throw new ProviderRunError({
         provider: options.provider,
-        message: (stderr.trim() || `${executables[options.provider]} exited with status ${exitCode}`).slice(0, 16384),
+        message: failureMessage(executables[options.provider], stderr, exitCode),
         exitCode
       });
     }
@@ -2015,7 +2074,7 @@ var run = (options) => Effect2.tryPromise({
 // apps/device/src/cli.ts
 import { Effect as Effect5, Schema as Schema6 } from "effect";
 import { access as access2, mkdir as mkdir2, readFile as readFile2, stat, writeFile as writeFile2 } from "node:fs/promises";
-import { homedir as homedir2 } from "node:os";
+import { homedir as homedir3 } from "node:os";
 import { dirname as dirname2, join as join3 } from "node:path";
 
 // skills/cohall/SKILL.md
@@ -2156,9 +2215,10 @@ Return the diagnostic failure to the user rather than claiming remote work ran.
 init_src();
 import { Effect as Effect3, Schema as Schema4 } from "effect";
 import { access, chmod, mkdir, readFile, realpath, rename, writeFile } from "node:fs/promises";
-import { homedir, hostname, platform as platform2 } from "node:os";
+import { homedir as homedir2, hostname, platform as platform2 } from "node:os";
 import { dirname, join as join2, resolve } from "node:path";
 var WorkspaceList = Schema4.Array(Schema4.NonEmptyString).check(Schema4.isMaxLength(64));
+var ProviderList = Schema4.Array(Provider).check(Schema4.isMinLength(1)).check(Schema4.isMaxLength(3));
 var Sandbox = Schema4.Literals(["read-only", "workspace-write", "danger-full-access"]);
 var StoredConfiguration = Schema4.Struct({
   version: Schema4.Literal(1),
@@ -2168,6 +2228,7 @@ var StoredConfiguration = Schema4.Struct({
   workspaces: WorkspaceList,
   clientToken: Schema4.optionalKey(Schema4.NonEmptyString),
   deviceToken: Schema4.optionalKey(Schema4.NonEmptyString),
+  providers: Schema4.optionalKey(ProviderList),
   model: Schema4.optionalKey(Schema4.NonEmptyString),
   sandbox: Schema4.optionalKey(Sandbox)
 });
@@ -2182,17 +2243,18 @@ var DeviceConfiguration = Schema4.Struct({
   id: DeviceId,
   name: Schema4.NonEmptyString,
   workspaces: WorkspaceList,
+  providers: Schema4.optionalKey(ProviderList),
   model: Schema4.optionalKey(Schema4.NonEmptyString),
   sandbox: Schema4.optionalKey(Sandbox)
 });
 var defaultConfigDirectory = () => {
   if (platform2() === "win32") {
-    return join2(process.env.APPDATA ?? join2(homedir(), "AppData", "Roaming"), "Cohall");
+    return join2(process.env.APPDATA ?? join2(homedir2(), "AppData", "Roaming"), "Cohall");
   }
   if (platform2() === "darwin") {
-    return join2(homedir(), "Library", "Application Support", "Cohall");
+    return join2(homedir2(), "Library", "Application Support", "Cohall");
   }
-  return join2(process.env.XDG_CONFIG_HOME ?? join2(homedir(), ".config"), "cohall");
+  return join2(process.env.XDG_CONFIG_HOME ?? join2(homedir2(), ".config"), "cohall");
 };
 var configurationPath = () => resolve(process.env.COHALL_CONFIG ?? join2(defaultConfigDirectory(), "config.json"));
 var normalizeRelayUrl = (input) => {
@@ -2217,6 +2279,9 @@ var parseWorkspaces = (workspaceList, workspaceJson) => Effect3.tryPromise({
   },
   catch: (cause) => new Error(`Workspace roots must be existing paths; JSON input must be an array of paths: ${cause instanceof Error ? cause.message : String(cause)}`)
 });
+var parseProviders = (input) => Schema4.decodeUnknownSync(ProviderList)([
+  ...new Set(input.split(",").map((provider) => provider.trim()).filter(Boolean))
+]);
 var readStoredConfiguration = async () => {
   const path = configurationPath();
   if (!await access(path).then(() => true).catch(() => false)) {
@@ -2251,6 +2316,7 @@ var makeStoredConfiguration = async (input) => {
   const canonicalWorkspaces = input.workspaces === undefined ? existing?.workspaces ?? [] : await Effect3.runPromise(parseWorkspaces("", JSON.stringify(input.workspaces)));
   const clientToken = input.clientToken ?? existing?.clientToken;
   const deviceToken = input.deviceToken ?? existing?.deviceToken;
+  const providers = input.providers === "auto" ? undefined : input.providers ?? existing?.providers;
   return StoredConfiguration.make({
     version: 1,
     relayUrl: normalizeRelayUrl(input.relayUrl),
@@ -2259,6 +2325,7 @@ var makeStoredConfiguration = async (input) => {
     workspaces: canonicalWorkspaces,
     ...clientToken === undefined ? {} : { clientToken },
     ...deviceToken === undefined ? {} : { deviceToken },
+    ...providers === undefined ? {} : { providers },
     ...existing?.model === undefined ? {} : { model: existing.model },
     ...existing?.sandbox === undefined ? {} : { sandbox: existing.sandbox }
   });
@@ -2276,6 +2343,10 @@ var environmentSandbox = () => {
   const value = process.env.COHALL_SANDBOX ?? process.env.COHALL_CODEX_SANDBOX;
   return value === undefined ? undefined : Schema4.decodeUnknownSync(Sandbox)(value);
 };
+var environmentProviders = (stored) => {
+  const value = process.env.COHALL_DEVICE_PROVIDERS;
+  return value === undefined ? stored?.providers : value === "auto" ? undefined : parseProviders(value);
+};
 var storedOrDefaults = async () => {
   const stored = await readStoredConfiguration();
   return stored ?? StoredConfiguration.make({
@@ -2328,12 +2399,14 @@ var loadDeviceConfiguration = Effect3.tryPromise({
     }
     const model = environmentProvider() ?? stored.model;
     const sandbox = environmentSandbox() ?? stored.sandbox;
+    const providers = environmentProviders(stored);
     return DeviceConfiguration.make({
       relayUrl: normalizeRelayUrl(process.env.COHALL_RELAY_URL ?? stored.relayUrl),
       token,
       id: process.env.COHALL_DEVICE_ID === undefined ? stored.deviceId : DeviceId.make(process.env.COHALL_DEVICE_ID),
       name: process.env.COHALL_DEVICE_NAME ?? stored.deviceName,
       workspaces,
+      ...providers === undefined ? {} : { providers },
       ...model === undefined ? {} : { model },
       ...sandbox === undefined ? {} : { sandbox }
     });
@@ -2446,6 +2519,7 @@ var valueOptions = new Set([
   "prompt",
   "prompt-file",
   "provider",
+  "providers",
   "relay",
   "sandbox",
   "target",
@@ -2465,8 +2539,9 @@ var aliases = new Map([
 var help = `Cohall connects agents running on your own devices.
 
 Usage:
-  cohall join --relay <url> --workspace <path> [--token-file <path>]
-  cohall configure [--relay url] [--name name] [--workspace path] [--model id]
+  cohall join --relay <url> --workspace <path> [--providers list] [--token-file <path>]
+  cohall configure [--relay url] [--name name] [--workspace path]
+                   [--providers codex,opencode|auto] [--model id]
   cohall config
   cohall devices
   cohall delegate [prompt] [--target @device] [--provider provider]
@@ -2641,9 +2716,9 @@ var ownerClient = async () => {
 };
 var installSkill = async (target) => {
   const roots = {
-    agents: join3(homedir2(), ".agents", "skills", "cohall", "SKILL.md"),
-    claude: join3(homedir2(), ".claude", "skills", "cohall", "SKILL.md"),
-    opencode: join3(homedir2(), ".config", "opencode", "skills", "cohall", "SKILL.md")
+    agents: join3(homedir3(), ".agents", "skills", "cohall", "SKILL.md"),
+    claude: join3(homedir3(), ".claude", "skills", "cohall", "SKILL.md"),
+    opencode: join3(homedir3(), ".config", "opencode", "skills", "cohall", "SKILL.md")
   };
   const selected = target === "all" ? Object.values(roots) : (target in roots) ? [roots[target]] : undefined;
   if (selected === undefined) {
@@ -2660,7 +2735,14 @@ var printSkill = () => console.log(SKILL_default.trimEnd());
 var runCli = async (command2, raw) => {
   const arguments_ = parseArguments(raw);
   if (command2 === "join") {
-    allowOptions(arguments_, ["client-only", "name", "relay", "token-file", "workspace"]);
+    allowOptions(arguments_, [
+      "client-only",
+      "name",
+      "providers",
+      "relay",
+      "token-file",
+      "workspace"
+    ]);
     noPositionals(arguments_, command2);
     const token = await pairingToken(arguments_);
     const relayUrl = normalizeRelayUrl(option(arguments_, "relay") ?? "http://127.0.0.1:8787");
@@ -2668,13 +2750,16 @@ var runCli = async (command2, raw) => {
     const suppliedWorkspaces = values(arguments_, "workspace");
     const workspaces = suppliedWorkspaces.length === 0 ? existing?.workspaces : suppliedWorkspaces;
     const deviceName = option(arguments_, "name");
+    const providerInput = option(arguments_, "providers");
+    const providers = providerInput === undefined ? undefined : providerInput === "auto" ? "auto" : parseProviders(providerInput);
     if (!arguments_.options.has("client-only") && (workspaces?.length ?? 0) === 0) {
       throw new Error("At least one --workspace is required when joining a device");
     }
     const draft = await makeStoredConfiguration({
       relayUrl,
       ...deviceName === undefined ? {} : { deviceName },
-      ...workspaces === undefined ? {} : { workspaces }
+      ...workspaces === undefined ? {} : { workspaces },
+      ...providers === undefined ? {} : { providers }
     });
     const paired = await Effect5.runPromise(exchangePairing(relayUrl, { token }));
     const clientToken = paired.credentials.find((credential) => credential.session.role === "client")?.token;
@@ -2714,6 +2799,7 @@ var runCli = async (command2, raw) => {
         workspaces: configuration2.workspaces,
         client_credential: configuration2.clientToken !== undefined,
         device_credential: configuration2.deviceToken !== undefined,
+        providers: configuration2.providers ?? "auto",
         model: configuration2.model,
         sandbox: configuration2.sandbox
       }
@@ -2721,7 +2807,7 @@ var runCli = async (command2, raw) => {
     return;
   }
   if (command2 === "configure") {
-    allowOptions(arguments_, ["model", "name", "relay", "sandbox", "workspace"]);
+    allowOptions(arguments_, ["model", "name", "providers", "relay", "sandbox", "workspace"]);
     noPositionals(arguments_, command2);
     const existing = await readStoredConfiguration();
     const relayUrl = normalizeRelayUrl(option(arguments_, "relay") ?? existing?.relayUrl ?? "http://127.0.0.1:8787");
@@ -2729,6 +2815,8 @@ var runCli = async (command2, raw) => {
     const workspaces = supplied.length === 0 ? existing?.workspaces ?? [] : await Effect5.runPromise(parseWorkspaces("", JSON.stringify(supplied)));
     const sandbox = option(arguments_, "sandbox");
     const model = option(arguments_, "model") ?? existing?.model;
+    const providerInput = option(arguments_, "providers");
+    const providers = providerInput === undefined ? existing?.providers : providerInput === "auto" ? undefined : parseProviders(providerInput);
     const configuration2 = StoredConfiguration.make({
       version: 1,
       relayUrl,
@@ -2737,6 +2825,7 @@ var runCli = async (command2, raw) => {
       workspaces,
       ...existing?.clientToken === undefined ? {} : { clientToken: existing.clientToken },
       ...existing?.deviceToken === undefined ? {} : { deviceToken: existing.deviceToken },
+      ...providers === undefined ? {} : { providers },
       ...model === undefined ? {} : { model },
       ...(sandbox ?? existing?.sandbox) === undefined ? {} : {
         sandbox: Schema6.decodeUnknownSync(Schema6.Literals(["read-only", "workspace-write", "danger-full-access"]))(sandbox ?? existing?.sandbox)
@@ -2764,8 +2853,16 @@ var runCli = async (command2, raw) => {
     print({
       cli_skill: "npx -y @akshar5/cohall skill install all",
       codex_mcp: "codex mcp add cohall -- npx -y @akshar5/cohall mcp",
-      claude_mcp: "claude mcp add --scope user cohall -- npx -y @akshar5/cohall mcp",
-      opencode_mcp: "Run opencode mcp add and use: npx -y @akshar5/cohall mcp"
+      claude_mcp: "claude mcp add --transport stdio --scope user cohall -- npx -y @akshar5/cohall mcp",
+      stdio_config: {
+        command: "npx",
+        args: ["-y", "@akshar5/cohall", "mcp"]
+      },
+      opencode_mcp: {
+        type: "local",
+        command: ["npx", "-y", "@akshar5/cohall", "mcp"],
+        enabled: true
+      }
     });
     return;
   }
@@ -2779,17 +2876,39 @@ var runCli = async (command2, raw) => {
     }).catch(() => {
       return;
     });
+    const providerInput = process.env.COHALL_DEVICE_PROVIDERS;
+    const selectedProviders = providerInput === undefined ? configuration2?.providers : providerInput === "auto" ? undefined : parseProviders(providerInput);
+    const providerExecutables = Object.fromEntries(Provider.literals.map((provider) => [
+      provider,
+      findExecutable(provider === "claude-code" ? "claude" : provider) ?? "not found"
+    ]));
+    const clientToken = process.env.COHALL_CLIENT_TOKEN ?? configuration2?.clientToken;
+    const hasDeviceCredential = process.env.COHALL_DEVICE_TOKEN !== undefined || configuration2?.deviceToken !== undefined;
+    const deviceId = process.env.COHALL_DEVICE_ID ?? configuration2?.deviceId;
+    const currentDevice = response?.ok !== true || clientToken === undefined || deviceId === undefined ? undefined : await Effect5.runPromise(exports_src.make({ baseUrl: relayUrl, token: clientToken }).devices()).then((devices) => devices.find((device) => device.id === deviceId)).catch(() => {
+      return;
+    });
+    const warnings = [
+      ...response?.ok === true ? [] : ["Relay is unreachable"],
+      ...hasDeviceCredential && response?.ok === true && currentDevice?.status !== "online" && currentDevice?.status !== "busy" ? [
+        clientToken === undefined ? "Device status cannot be checked without a client credential" : "Device daemon is not connected or is not registered with the relay"
+      ] : [],
+      ...selectedProviders?.flatMap((provider) => providerExecutables[provider] === "not found" ? [`Configured provider ${provider} is not installed or not on PATH`] : []) ?? []
+    ];
     print({
+      version,
       relay: response?.ok === true ? "reachable" : "unreachable",
       relay_url: relayUrl,
       config_path: configurationPath(),
       client_credential: process.env.COHALL_CLIENT_TOKEN !== undefined || configuration2?.clientToken !== undefined,
-      device_credential: process.env.COHALL_DEVICE_TOKEN !== undefined || configuration2?.deviceToken !== undefined,
+      device_credential: hasDeviceCredential,
       workspaces: configuration2?.workspaces ?? [],
-      providers: Object.fromEntries(Provider.literals.map((provider) => [
-        provider,
-        findExecutable(provider === "claude-code" ? "claude" : provider) ?? "not found"
-      ]))
+      providers: providerExecutables,
+      provider_selection: selectedProviders ?? "auto",
+      provider_authentication: "checked when delegated work starts",
+      device_status: hasDeviceCredential === false ? "not configured" : currentDevice?.status ?? "unknown",
+      device_version: currentDevice?.version,
+      warnings
     });
     return;
   }
@@ -2933,7 +3052,7 @@ var capabilities = (providers) => {
   const values2 = providers.map((provider) => ({
     id: provider,
     label: providerLabel(provider),
-    detail: `Uses this device's local ${providerLabel(provider)} login, configuration, and tools`
+    detail: `${providerLabel(provider)} executable detected; authentication is checked when work starts`
   }));
   if (findExecutable("google-chrome") !== undefined || findExecutable("chromium") !== undefined || platform3() === "darwin") {
     values2.push({ id: "browser-session", label: "Signed-in browser" });
@@ -2946,10 +3065,12 @@ var capabilities = (providers) => {
   }
   return values2;
 };
+var selectProviders = (installed, configured) => configured === undefined ? installed : configured.filter((provider) => installed.includes(provider));
 var describeDevice = (configuration, status = "online") => {
   const operatingSystem = platform3();
   const platformName = operatingSystem === "darwin" || operatingSystem === "linux" ? operatingSystem : operatingSystem === "win32" ? "windows" : "unknown";
-  const providers = availableProviders();
+  const installed = availableProviders();
+  const providers = selectProviders(installed, configuration.providers);
   return Device.make({
     id: configuration.id,
     name: configuration.name,
@@ -3284,6 +3405,14 @@ var main = async () => {
     console.log(version);
     return;
   }
+  if (["device", "relay", "mcp"].includes(command2) && process.argv.length > 3) {
+    const arguments_ = process.argv.slice(3);
+    if (arguments_.length === 1 && ["--help", "-h", "help"].includes(arguments_[0] ?? "")) {
+      printHelp();
+      return;
+    }
+    throw new Error(`${command2} does not accept arguments`);
+  }
   if (command2 === "relay") {
     const { runRelay: runRelay2 } = await init_main().then(() => exports_main);
     await runRelay2();
@@ -3306,4 +3435,4 @@ await main().catch((cause) => {
   process.exitCode = 1;
 });
 
-//# debugId=AB53FFE376B97AD664756E2164756E21
+//# debugId=480B573B626A966164756E2164756E21